570 matches found
CVE-2026-56705 Adminer before 5.4.3 Remote Code Execution via MSSQL PDO DSN Injection
Adminer before 5.4.3 fails to sanitize the server field before constructing a PDO DSN string, allowing unauthenticated attackers to inject ODBC parameters via semicolons. Attackers can inject TraceFile and TraceOn parameters to write PHP code to the web root, achieving remote code execution when...
CVE-2026-56705
Adminer versions prior to 5.4.3 are vulnerable to unauthenticated remote code execution via ODBC parameter injection. The root cause is a failure to sanitize the server field before constructing a PDO DSN string , enabling attackers to inject parameters using semicolons. Specifically, injecting T...
CVE-2026-56705 Adminer before 5.4.3 Remote Code Execution via MSSQL PDO DSN Injection
Adminer before 5.4.3 fails to sanitize the server field before constructing a PDO DSN string, allowing unauthenticated attackers to inject ODBC parameters via semicolons. Attackers can inject TraceFile and TraceOn parameters to write PHP code to the web root, achieving remote code execution when...
CVE-2024-58374
CVE-2024-58374 involves an unauthenticated SQL injection in the getSdutyTree servlet of Hongjing e-HR. The vulnerability allows remote attackers to bypass the oauthservlet authentication filter by using a path traversal sequence in the request URI and to inject UNION-based SQL payloads through th...
MSSQL BIND Session
BIND payload for listeners/database/mssql !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import from lib.c2.databasebind import buildbindsessionhint class ModulePayload: info = "name": "MSSQL BIND Session", "description": "BIND payload for listeners/database/mssql", "category":...
MSSQL TGT Delegation via SQL CLR
Extracts a forwarded Kerberos TGT through MSSQL by loading a CLR assembly into sqlservr.exe and invoking SSPI tgtdeleg against a target SPN. Avoids spawning cmd.exe or powershell.exe; restores CLR settings after execution. !/usr/bin/env python3 -- coding: utf-8 -- """Remote TGT extraction via MSS...
MSSQL Enum Impersonate
Lists logins the current SQL user can EXECUTE AS NetExec: nxc mssql -M enumimpersonate. !/usr/bin/env python3 -- coding: utf-8 -- """Enumerate MSSQL impersonation rights NetExec: -M enumimpersonate.""" from future import annotations from kittysploit import class ModuleAuxiliary: info = "name":...
MSSQL xp_cmdshell
Optionally impersonate a login e.g. sa, enable xpcmdshell, and execute an OS command NetExec: EXECUTE AS + spconfigure + xpcmdshell. !/usr/bin/env python3 -- coding: utf-8 -- """Enable xpcmdshell and run OS commands NetExec MSSQL xpcmdshell chain.""" from kittysploit import from...
MSSQL Priv / Impersonate Check
Reports whether the session user is sysadmin and which logins can be impersonated NetExec: -M mssqlpriv / enumimpersonate. !/usr/bin/env python3 -- coding: utf-8 -- """MSSQL privilege / impersonation check on an active session.""" from kittysploit import from lib.protocols.mssql.mssqlclient impor...
MSSQL NTLM Info
Performs TDS Login7 with NTLM SSPI negotiate and parses the Type-2 challenge NSE ms-sql-ntlm-info. !/usr/bin/env python3 -- coding: utf-8 -- """MSSQL NTLM info NSE ms-sql-ntlm-info.""" from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient from...
Enumerate MSSQL Databases
Enumerate databases, schemas/tables, and columns on Microsoft SQL Server from kittysploit import from lib.protocols.mssql.mssqlclient import MSSQLClient class ModulePost, MSSQLClient: info = "name": "Enumerate MSSQL Databases", "description": "Enumerate databases, schemas/tables, and columns on...
MSSQL Info - Detection
Detects MSSQL via TDS prelogin and reports version and encryption hints. !/usr/bin/env python3 -- coding: utf-8 -- """Detect Microsoft SQL Server via TDS prelogin.""" from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient from lib.scanner.mssql.detectors import...
crudxworkertejas1899 (0.4.0) potentially affected by CVE-2024-26164 via mssql-django (1.2.0)
mssql-django PYPI version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on mssql-django and may be impacted: - crudxworkertejas1899 0.4.0 Source cves: CVE-2024-26164 Source advisory: OSV:PYSEC-2026-1684...
PYSEC-2026-1150 Apache Airflow ODBC Provider, Apache Airflow MSSQL Provider Improper Input Validation vulnerability
Input Validation vulnerability in Apache Software Foundation Apache Airflow ODBC Provider, Apache Software Foundation Apache Airflow MSSQL Provider.This vulnerability is considered low since it requires DAG code to use getsqlalchemyconnection and someone with access to connection resources...
org.keycloak.testframework:keycloak-test-framework-clustering (>=26.5.0, <=26.6.3), org.keycloak.testframework:keycloak-test-framework-db-edb (>=26.5.0, <=26.6.3) +16 more potentially affected by CVE-2026-9083 via org.keycloak.testframework:keycloak-test-framework-core (>=26.5.0, <=26.6.3)
org.keycloak.testframework:keycloak-test-framework-core MAVEN version =26.5.0, =26.5.0, =26.5.0, =26.5.0, =26.5.0, =26.5.0, =26.5.0, =26.5.0, =26.5.0, =26.5.0, =26.6.0, =26.5.0, =26.5.0, =26.5.0, =26.6.0, =26.6.3 - org.keycloak.testfr...
MAL-2026-6029 Malicious code in @mastra/mssql (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8a702cd09bcdbaf0d5d7a27cf0d433f1a8b3cec76cb044365ebe71c1655b31e The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Malicious code in @mastra/mssql (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8a702cd09bcdbaf0d5d7a27cf0d433f1a8b3cec76cb044365ebe71c1655b31e The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
MSSQL Extension Privilege Escalation
The vulnerability of the MSSQL Extension, a database editor in Visual Studio Code, lies in the inclusion of functionality from an unreliable source. Exploiting this vulnerability can allow attackers to enhance their privileges or execute arbitrary code...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. An attacker using the npm account ehindero hijacked the @mastra npm organization and, in a roughly 30–45 minute burst starting around 01:12 UTC, republished the entire @mastra catalog. The Mastra source code was...