CVE-2023-34468-PoC

CVE-2023-34468 PoC para Apache NiFi Prueba de concepto PoC educativa para CVE-2023-34468 que afecta a Apache NiFi versiones anteriores a 1.22.0. Este repositorio demuestra cómo el abuso de la configuración de URL JDBC de H2 puede conducir a la ejecución remota de código RCE autenticada en...

Astra Linux – Vulnerability in h2database

The H2 Console before version 2.1.210 allowed remote attackers to execute arbitrary code through a jdbc:h2:mem JDBC URL that contained the IGNOREUNKNOWNSETTINGS=TRUE;FORBID CREATION=FALSE;INIT=RUNSCRIPT substring. This is a different vulnerability than CVE-2021-42392. source-iocs-preserved...

Exploit for Code Injection in Apache Nifi

CVE-2023-34468 PoC for Apache NiFi !Pythonhttps://img.shie...

DataEase 安全漏洞

DataEase is an open source data visualization and analysis tool from DataEase Open Source. It is used to help users quickly analyze data and gain insight into business trends for business improvement and optimization. A security vulnerability exists in DataEase versions prior to 2.10.10 that stem...

The vulnerability of the H2 database management system, related to improper code generation, allows a hacker to execute arbitrary code.

The vulnerability of the H2 database management system is related to incorrect code generation management. Exploiting this vulnerability allows an attacker to execute arbitrary code using the jdbc:h2:mem function. The settings contained in this function are as follows: IGNOREUNKNOWNSETTINGS=TRUE;...

DEBIAN-CVE-2022-23221

H2 Console before 2.1.210 allows remote attackers to execute arbitrary code via a jdbc:h2:mem JDBC URL containing the IGNOREUNKNOWNSETTINGS=TRUE;FORBIDCREATION=FALSE;INIT=RUNSCRIPT substring, a different vulnerability than CVE-2021-42392...

PT-2022-2140

Name of the Vulnerable Software and Affected Versions H2 Console versions prior to 2.1.210 H2 Database Console affected versions not specified Description The issue is related to incorrect code generation management in the H2 database management system. It can be exploited by a remote attacker to...

CVE-2022-23221: Improper Neutralization of Argument Delimiters in a Command

H2 Console before 2.1.210 allows remote attackers to execute arbitrary code via a jdbc:h2:mem JDBC URL containing the IGNOREUNKNOWNSETTINGS=TRUE;FORBIDCREATION=FALSE;INIT=RUNSCRIPT substring, a different vulnerability than CVE-2021-42392...