CVE-2026-101513

A flaw was found in the InnoDB component of MySQL. An attacker with physical access and high privileges can exploit this vulnerability to cause the system to hang or crash repeatedly. Successful exploitation results in a complete Denial of Service DoS of the database cluster...

CVE-2026-101620

A flaw was found in the MySQL Server Optimizer component. An authenticated remote attacker with low privileges and network access can exploit this vulnerability to cause the server to hang or repeatedly crash. Successful exploitation results in a complete Denial of Service DoS of the database...

CVE-2026-101637

A flaw was found in MySQL's InnoDB component. A high-privileged remote attacker with network access can exploit this vulnerability to cause the server to hang or crash repeatedly, resulting in a Denial of Service DoS. Additionally, exploitation can allow unauthorized data modification, enabling t...

CVE-2026-101629

A flaw was found in the InnoDB component of MySQL. A remote attacker with high privileges can exploit this vulnerability over the network to cause the database server to hang or crash repeatedly. This issue results in a complete Denial of Service DoS of the affected database service. Mitigation...

fapro

FaPro Free,Cross-platform,Single-file mass network protocol server simulator 中文Readme Description FaPro is a Fake Protocol Server tool, Can easily start or stop multiple network services. The goal is to support as many protocols as possible, and support as many deep interactions as possible for...

CVE-2026-101786

A flaw was found in the MySQL Server Optimizer component. A remote attacker with high privileges and network access via multiple protocols can exploit this vulnerability. Successful attacks can result in an unauthorized takeover of the MySQL Server or MySQL Cluster...

Privilege-Escalation

⬆️ Privilege Escalation for Pentesters A practical Privilege Escalation cheat sheet and reference guide designed for CTF players, penetration testers, and cybersecurity learners to understand how attackers escalate privileges on compromised systems 🌐 Connect With Us 🔵 Telegram – Join Channel ⚫...

CVE-2019-18890

CVE-2019-18890 CVE-2019-18890 POC Proof of Concept REDMINE UP TO 3.2.9/3.3.9 SQL INJECTION https://nvd.nist.gov/vuln/detail/CVE-2019-18890 Requirements: Access credentials Subproject is required REST API is enabled On Mysql the first query on which injection occurs looks like the example below wi...

VulnNodeApp

VulnNodeApp A vulnerable application made using node.js, express server and ejs template engine. This application is meant for educational purposes only. Setup Clone this repository git clone https://github.com/4auvar/VulnNodeApp.git Application setup: Install the latest node.js version with npm...

lightbulb-framework

LightBulb LightBulb is an open source python framework for auditing web application firewalls and filters. Synopsis The framework consists of two main algorithms: GOFA : An active learning algorithm that infers symbolic representations of automata in the standard membership/equivalence query mode...

PhoneMonitor

PhoneMonitor A Remote Administration Tool for Android devices. The Minimum SDK version for the app is API 15 and by its nature, the Target API level makes sense to be 21. Instructions: Open the folder PhoneMonitor with Android Studio. Replace the XXXX strings with the relevant substitutes from...

PrivEsc

PrivEsc by 1N3@CrowdShield http://crowdshield.com ABOUT: A collection of Windows, Linux and MySQL privilege escalation scripts and exploits. LINKS: For pre-compiled local linux exploits, check out https://www.kernel-exploits.com. DONATIONS: Donations are welcome. BTC...

CVE-2015-4870

CVE-2015-4870 MySQL DoS in the Procedure Analyse Function – CVE-2015-4870 Write-up: https://osandamalith.wordpress.com/2016/05/29/mysql-dos-in-the-procedure-analyse-function-cve-2015-4870/ Video: https://www.youtube.com/watch?v=zE-TsQVn9oI...

CVE-2012-2122-Home-Lab

ENGLISH BELOW CVE-2012-2122 MySQL Authentication Bypass Home Lab Lab นี้เป็นตัวอย่างสาธิตช่องโหว่ CVE-2012-2122 - MySQL Authentication Bypass เกิดจากข้อผิดพลาดในการเปรียบเทียบค่ารหัสผ่านใน MySQL เวอร์ชัน 5.5.23 หรือต่ำกว่า เมื่อผู้โจมตีส่งรหัสผ่านผิดซ้ำ ๆ หลายครั้ง MySQL...

Oracle-mysql-CVE-2012-2122

MySQL Authentication Bypass Vulnerability CVE-2012-2122 When connecting to MariaDB/MySQL, the entered password is compared with the expected correct password. Due to improper handling, even if memcmp returns a non-zero value, MySQL may still consider the two passwords as identical. That is, as lo...

enumdb

enumdb Enumdb is a relational database brute force and post exploitation tool for MySQL and MSSQL. When provided a list of usernames and/or passwords, it will cycle through each host looking for valid credentials. By default, enumdb will use newly discovered credentials to automatically search fo...

cve-2022-23134-poc-and-writeup

CVE-2022-23134 Writeup and POC This is a POC and writeup for CVE-2022-23134 in particular versions of Zabbix. Please read writeup.md on the details needed to use the exploit - it does require some setup of MySQL!...

go-sniffer

go-sniffer Capture mysql,redis,http,mongodb etc protocol... 抓包截取项目中的数据库请求并解析成相应的语句，如mysql协议会解析为sql语句,便于调试。 不要修改代码，直接嗅探项目中的数据请求。 中文使用说明 Support List: mysql Redis Http Mongodb Kafka developing ... Demo: $ go-sniffer en0 mysql Setup: support : MacOS Linux Unix not support : windows If you encounter...

Zero-Day-Legacy

🎓 Graduation Project — Ajloun National University ANU Faculty of IT · Cybersecurity and Cloud Computing · Academic Year 2026 🏆 Highest Grade in the University: 97% 📖 Overview Zero-Day Legacy is a realistic, intentionally vulnerable Boot-to-Root CTF Capture The Flag lab machine built as a graduati...

CVE-2026-101774

A flaw was found in the Pluggable Authentication component of MySQL. An unauthenticated remote attacker could exploit this vulnerability across multiple network protocols to cause the server to hang or crash repeatedly, resulting in a Denial of Service DoS. In addition, successful exploitation ma...