CVE-2024-34693

CVE-2024-34693 Exploit Questo repository contiene uno script Python sofisticato per sfruttare la vulnerabilità CVE-2024-34693 in Apache Superset. Lo script configura un server MySQL fasullo e crea una connessione MariaDB dannosa per esfiltrare il contenuto di un file specificato dal sistema...

Adminer-CVE-2021-43008

Adminer CVE-2021-43008 PoC Exploit di prova di concerto per CVE-2021-43008 che interessa Adminer. Questa vulnerabilità consente a un server MySQL malevolo di richiedere file locali arbitrari dalla macchina client quando LOAD DATA LOCAL INFILE è abilitato. Il repository contiene gli strumenti per...

Rogue-MySql-Server

Rogue-MySql-Server Modifica lo script e cambia il file da leggere e la porta del server se vuoi. Esegui lo script e connettiti al tuo server per leggere il file dal lato client. Leggi mysql.log per il contenuto del file letto...

CVE-2020-11579

CVE-2020-11579 Einleitung PHPKB 9.0 Enterprise Edition MySQL-Datenbank ist von einer nicht authentifizierten, willkürlichen Datei-Offenlegung über einen bösartigen MySQL-Server betroffen. Ein entfernter Angreifer kann über eine einzelne HTTP-GET-Anfrage jede Datei auf einem entfernten Opfer-Host...

CVE-2025-70828

CVE-2025-70828 Riepilogo È stata scoperta una vulnerabilità di lettura arbitraria dei file in Datart v1.0.0-rc.3. L'applicazione non valida correttamente l'URL di connessione JDBC durante la configurazione dell'origine dati. Dettagli della vulnerabilità Tipo di vulnerabilità: Validazione impropri...

CVE-2024-34693

CVE-2024-34693: Lettura Arbitraria di File dal Server in Apache Superset Vulnerabilità di convalida impropria dell'input in Apache Superset che consente a un attaccante autenticato di creare una connessione MariaDB con localinfile abilitato. Abilitando localinfile nel client MySQL/MariaDB di...

adminer_CVE-2021-43008

CVE-2021-43008 — Adminer-Sicherheitslücke Beliebiges Dateilesen mittels bösartigem MySQL-Server 1. Was ist Adminer? Adminer ist ein Web-Tool PHP zur einfachen Verwaltung von MySQL-, PostgreSQL-, SQLite- oder SQL-Server-Datenbanken. Es wird häufig als leichte Alternative zu phpMyAdmin eingesetzt...

CVE-2026-34308

CVE-2026-34308: MySQL Server JSON-Komponente Denial of Service Offizielles Hersteller-Bulletin: Oracle Critical Patch Update Advisory — April 2026. Zusammenfassung aus der veröffentlichten CVE Sicherheitslücke in Oracle MySQL Server Komponente: Server: JSON. Unterstützte betroffene Versionen:...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql5 (UTSA-2026-093649)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093649 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Group Replication Plugin. Supported versions that are affected are 5.7.33 and prior and...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql5 (UTSA-2026-093630)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093630 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 5.7.30 and prior and 8.0.17 and prio...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql5 (UTSA-2026-093625)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093625 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Information Schema. Supported versions that are affected are 5.7.33 and prior and 8.0.23...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql5 (UTSA-2026-093665)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093665 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Replication. Supported versions that are affected are 5.7.32 and prior and 8.0.22 and...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql5 (UTSA-2026-093660)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093660 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Replication. Supported versions that are affected are 5.7.33 and prior and 8.0.23 and...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql5 (UTSA-2026-093645)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093645 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 5.7.33 and prior and 8.0.23 and prior. Difficul...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql5 (UTSA-2026-093640)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093640 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 5.7.33 and prior and 8.0.23 and prior. Easily...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql5 (UTSA-2026-093322)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093322 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: PAM Auth Plugin. Supported versions that are affected are 5.7.32 and prior. Easily...

CVE-2026-56704

Adminer before 5.4.3 inserts unsanitized database server version strings into script tags with valid CSP nonces without proper validation. Attackers controlling a rogue MySQL server can return crafted version strings that break out of the JavaScript context and execute arbitrary code, bypassing...

CVE-2026-56704

Adminer before 5.4.3 inserts unsanitized database server version strings into script tags with valid CSP nonces without proper validation. Attackers controlling a rogue MySQL server can return crafted version strings that break out of the JavaScript context and execute arbitrary code, bypassing...

Linux Distros Unpatched Vulnerability : CVE-2026-56704

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Adminer before 5.4.3 inserts unsanitized database server version strings into script tags with valid CSP nonces without proper validation. Attackers controlling...

mysql: Replication unspecified vulnerability (CPU Jul 2026)

Oracle CPU describes the issue as following: Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Replication. Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1...