Rogue-MySql-Server

Rogue-MySql-Server 编辑脚本并根据需要更改要读取的文件和服务器端口。运行脚本并连接到你的服务器，以便从客户端读取文件。 读取 mysql.log 以查看已读取的文件内容。...

CVE-2020-11579

CVE-2020-11579 简介 PHPKB 9.0 企业版（MySQL 数据库） 存在一个通过恶意 MySQL 服务器触发的未认证任意文件读取漏洞。 远程攻击者只需发送单个 HTTP GET 请求，即可在远程受害主机上以 Web 服务器权限（例如 www-data）读取任意文件。 阅读更多：https://shielder.it/blog/mysql-and-cve-2020-11579-exploitation 说明 该脚本也可以以 server-only mode（仅服务端模式）运行，并提供一个独立的 MySQL 服务器，可用于类似的漏洞利用。 用法 root@kitploit:...

CVE-2024-34693

CVE-2024-34693 Exploit Este repositorio contiene un script sofisticado en Python para explotar la vulnerabilidad CVE-2024-34693 en Apache Superset. El script configura un servidor MySQL falso y crea una conexión MariaDB maliciosa para exfiltrar el contenido de un archivo específico del sistema...

adminer_CVE-2021-43008

CVE-2021-43008 — Adminer の脆弱性 悪意のある MySQL サーバーを介した任意のファイル読み取り 1. Adminer とは？ Adminer は、MySQL、PostgreSQL、SQLite、SQL Server のデータベースを簡単に管理できる Web ツール（PHP）です。軽量な phpMyAdmin の代替としてよく使われます。 影響を受けるバージョン: Adminer ≤ 4.6.2 2. 脆弱性の本質は？ 2.1. アクセス制御の欠陥 Adminer は 任意のリモート MySQL サーバー への接続を許可します。しかし、MySQL...

Unity Linux 20.1070e Security Update: mysql (UTSA-2026-022361)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-022361 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: JSON. Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0...

Unity Linux 20.1070e Security Update: mysql (UTSA-2026-022363)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-022363 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.0-8.0.44, 8.4.0-8.4.7 and...

CVE-2026-34308

CVE-2026-34308：MySQL Server（JSON 组件）拒绝服务 官方厂商公告：Oracle 关键补丁更新公告 — 2026 年 4 月。 摘要（摘自已发布的 CVE） Oracle MySQL Server 中的漏洞（组件：Server: JSON）。 受支持的受影响版本：8.0.0–8.0.45 、8.4.0–8.4.8 和 9.0.0–9.6.0 。 该漏洞允许低权限用户使 MySQL Server 崩溃。 CVSS 3.1 基础评分 ：6.5 （仅影响可用性） CVSS 向量 ：CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:...

CVE-2024-34693

CVE-2024-34693: Lectura Arbitraria de Archivos del Servidor en Apache Superset Vulnerabilidad de validación de entrada incorrecta en Apache Superset, que permite a un atacante autenticado crear una conexión MariaDB con localinfile habilitado. Al habilitar localinfile en el cliente MySQL/MariaDB d...

Adminer-CVE-2021-43008

Adminer CVE-2021-43008 PoC 针对 CVE-2021-43008 的概念验证漏洞利用代码，影响 Adminer。 该漏洞允许恶意的 MySQL 服务器在启用 LOAD DATA LOCAL INFILE 时从客户端机器请求任意本地文件。 此存储库包含用于复现攻击的工具。 存储库内容 exploit.py Python 脚本，用于自动化与 Adminer 的交互。 功能： 向 Adminer 进行身份验证 提取 CSRF 令牌 发送 SQL 查询 触发 LOAD DATA LOCAL INFILE 解析返回的文件内容 setupmysqlserver.sh...

CVE-2025-70828

CVE-2025-70828 摘要 在 Datart v1.0.0-rc.3 中发现了一个任意文件读取漏洞。该应用程序在数据源配置期间未能正确验证 JDBC 连接 URL。 漏洞详情 漏洞类型： 不当输入验证（CWE-20）/ 任意文件读取 受影响版本： Datart v1.0.0-rc.3 严重程度： 高危（可能导致敏感信息泄露） 描述 该漏洞存在于数据源配置模块中。应用程序未严格清理 JDBC 配置中的 url 参数。具有数据源配置权限的远程攻击者可以向 JDBC URL 注入恶意参数（特别是 allowLoadLocalInfile=true）。 通过将 JDBC...

CVE-2026-27876

CVE-2026-27876：Grafana SQL 表达式任意文件写入导致远程代码执行 CVSS 9.1 严重 | 任意文件写入 | 远程代码执行 演示 https://github.com/user-attachments/assets/c84a4b63-7928-4dba-a069-3bafa036ce56 概述 Grafana 的 SQL 表达式功能（sqlExpressions 开关）使用进程内 SQL 引擎（dolthub/go-mysql-server），其 AST 白名单存在缺陷。SetOp 节点（UNION ALL）能通过验证，且其 walkSubtree 不会遍历...

Unity Linux 20.1070e Security Update: mysql (UTSA-2026-022289)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-022289 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easi...

Unity Linux 20.1070e Security Update: mysql (UTSA-2026-022266)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-022266 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easi...

Unity Linux 20.1070e Security Update: mysql (UTSA-2026-022350)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-022350 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easi...

Unity Linux 20.1070e Security Update: mysql (UTSA-2026-022292)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-022292 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: DML. Supported versions that are affected are 8.0.0-8.0.45. Easily exploitable...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql (UTSA-2026-106209)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106209 advisory. Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Clone Plugin. Supported versions that are affected are MySQL Server:...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql (UTSA-2026-106203)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106203 advisory. Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Replication. Supported versions that are affected are MySQL Server:...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql (UTSA-2026-106184)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106184 advisory. Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Replication. Supported versions that are affected are MySQL Server:...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql (UTSA-2026-106165)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106165 advisory. Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: DDL. Supported versions that are affected are MySQL Server: 8.4.0-8.4.10,...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql (UTSA-2026-106210)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106210 advisory. Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: InnoDB. Supported versions that are affected are MySQL Server: 8.4.0-8.4.10,...