1581 matches found
mssqlproxy
mssqlproxy mssqlproxy is a toolkit aimed to perform lateral movement in restricted environments through a compromised Microsoft SQL Server via socket reuse. The client requires impacket and sysadmin privileges on the SQL server. Please read this article carefully before continuing. It consists of...
CVE-2008-5416
CVE-2008-5416 Microsoft SQL Server spreplwritetovarbin Memory Corruption via SQL Injection A heap-based buffer overflow can occur when calling the undocumented "spreplwritetovarbin" extended stored procedure. This vulnerability affects all versions of Microsoft SQL Server 2000 and 2005, Windows...
MSSQLand
✈️ MSSQLand Land gracefully in your target Microsoft SQL Server MS SQL DBMS, as if arriving on a business-class flight with a champagne glass in hand. 🥂 MSSQLand is a C Microsoft SQL Server MSSQL / MS SQL post-exploitation tool built for red team operators. Designed to run inside the target...
sqlmap
sqlmap sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester, and a broad range of switche...
CVE-2026-108065 Unauthenticated SQL Injection in Channel Software WebAlliance eCommerce
SQL Injection CWE-89 in the SOAP GetUser method of the /preapproval.asmx endpoint in Channel Software WebAlliance eCommerce VERSION — missing allows an unauthenticated remote attacker to read, write, and potentially execute commands on the backend Microsoft SQL Server via a crafted sUserID...
CVE-2026-108065
Channel Software WebAlliance eCommerce is vulnerable to an unauthenticated SQL Injection (CWE-89) within the SOAP GetUser method of the /preapproval.asmx endpoint. An attacker can exploit this by providing a crafted sUserID parameter containing a single quote and a stacked SQL query. This vulnera...
EUVD-2026-101025
SQL Injection CWE-89 in the SOAP GetUser method of the /preapproval.asmx endpoint in Channel Software WebAlliance eCommerce VERSION — missing allows an unauthenticated remote attacker to read, write, and potentially execute commands on the backend Microsoft SQL Server via a crafted sUserID...
CVE-2019-1068
CVE-2019-1068 Root cause analysis and PoC for a Microsoft SQL Server Stack Overflow Vulnerability by reversing “svl.dll”. Links to our work: 1. Ataberk's Blog 2. Fatih's Blog 3. Cem's Blog https://msrc.microsoft.com/update-guide/vulnerability/CVE-2019-1068...
Vulnerabilities in Microsoft SQL Server
Microsoft has identified vulnerabilities in SQL Server. Malicious actors could exploit these vulnerabilities to cause a denial-of-service attack, gain excessive privileges, execute arbitrary code, and potentially access sensitive data. Microsoft has provided updates that address these...
Microsoft SQL Server Elevation of Privilege Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network...
Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...
Microsoft SQL Server Elevation of Privilege Vulnerability
Use after free in SQL Server allows an authorized attacker to elevate privileges locally...
Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...
Microsoft SQL Server Remote Code Execution Vulnerability
Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network...
Microsoft SQL Server Information Disclosure Vulnerability
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...
Microsoft SQL Server Denial of Service Vulnerability
Uncontrolled resource consumption in SQL Server allows an authorized attacker to deny service over a network...
Microsoft SQL Server Elevation of Privilege Vulnerability
Integer overflow or wraparound in SQL Server allows an authorized attacker to elevate privileges locally...
Microsoft SQL Server Elevation of Privilege Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally...