CVE-2024-1346

CVE-2024-1346 Contraseña débil de la base de datos MySQL root en LaborOfficeFree afecta a la versión 19.10. Esta vulnerabilidad permite a un atacante calcular la contraseña root de la base de datos MySQL utilizada por LaborOfficeFree usando dos constantes. Exploit Title: LaborOfficeFree 19.10 MyS...

CVE-2019-12086

Documentation CVE-2019-12086 jackson unserialize Vulnerability Exploitation 1. Start a malicious MySQL server: python roguemysqlserver.py 2. Check mysql.log in the same directory: tail -f mysql.log 3. Send the following JSON to the vulnerable application:...

CVE-2026-11518-XSS

Stored XSS in Inventory System using PHP and MySQL Vulnerability Details...

NextJS-CVE-2025-29927

Here's a clean and informative README.md for your GitHub repo that explains it's a vulnerable Next.js application for CVE-2025-29927 and includes a link to your setup YouTube video: 🔓 NextJS-CVE-2025-29927 - Vulnerable Demo Application This is a vulnerable Next.js application that demonstrates...

TeamPass

Teampass Gestión de contraseñas autoalojada en la que todo tu equipo puede confiar Control de acceso por carpetas · cifrado AES-256-GCM autenticado · evidencia de cumplimiento Tus secretos nunca salen de tu infraestructura. 🌐teampass.net · 📖Documentación · 💬Discusiones · 🐳Docker Hub !Docker...

CVE-2026-58048-PoC-Exploit

💥 CVE‑2026‑58048 – cPanel Root SQL Execution Toolkit ⚠️ ETHICAL USE ONLY – AUTHORIZED SECURITY TESTING This repository provides tools for authorized security professionals, blue teams, and penetration testers only. Unauthorized access to computer systems is illegal under CFAA US, Computer Misuse...

MySQL-Remote-Root-Code-Execution

MySQL-Remote-Root-Code-Execution Usage root@kitploit: python rcemysql.py -dbuser -dbpass -dbname -dbhost -mycnf...

MiracleLinux 8 : [security - high] mysql:8.4, rapidjson-1.1.0-3.module+el8+2032+32adb072 (AXSA:2026-1695:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1695:01 advisory. mysql: Performance Schema unspecified vulnerability CPU Jul 2026 CVE-2026-61081 mysql: Optimizer unspecified vulnerability CPU Jul 2026 CVE-2026-470...

CVE-2025-7461

CVE-2025-7461: Analisi della vulnerabilità di SQL Injection nel sistema di e-commerce Modern Bag 🌐 Lingua / 语言 : English | 简体中文 Panoramica della vulnerabilità Database delle vulnerabilità: https://vuldb.com/?id.316112 Sorgente del progetto:...

SQLPad-6.10.0-Exploit-CVE-2022-0944

SQLPad 6.10.0 Exploit CVE-2022-0944 Questo script Bash sfrutta una vulnerabilità RCE in SQLPad 6.10.0, consentendo a un attaccante di eseguire codice in remoto RCE abusando dei campi host e database nelle impostazioni di connessione MySQL di SQLPad. L'exploit sfrutta la gestione non sanificata de...

UDFPwn-CVE-2012-5613

UDFPwn.py MySQL 4.x/5.0 Linux – Skript zur Automatisierung von User-Defined Functions UDF Dynamic Library 2...

cve-2016-6662

Informazioni Alcuni aiuti per sfruttare CVE-2016-6662 Avvertenze Assicurati di cambiare l'IP dell'attaccante nel file .c prima di compilare Crediti Tutto il credito allo scopritore originale. Writeup qui:...

CVE-2021-40512

CVE-2021-40512 OSCAR McMaster 19.401235 Vulnerabilità di SQL Injection Una vulnerabilità di SQL injection esiste nella versione 19.401235 di OSCAR McMaster. Un attaccante malintenzionato può inviare comandi SQL al database MySQL/MariaDB tramite il parametro vulnerabile sendTo situato sull'endpoin...

PoC-CVE-2025-66224

OrangeHRM RCE Exploit - CVE-2025-66224 📋 Beschreibung Dieses Proof of Concept PoC demonstriert eine Remote Code Execution RCE-Schwachstelle in OrangeHRM durch Befehlseinschleusung im Konfigurationsparameter sendmailpath. Der Exploit funktioniert wie folgt: 1. Injizieren einer schädlichen Nutzlast...

informer

Informer – Telegram-Massenüberwachung Update 10-20-2025 Sicherheit : Behobene kritische Sicherheitslücke CVE-2022-1941 in mysql-connector-python Sicherheit : Migration von veraltetem oauth2client zu google-auth Alle Abhängigkeiten auf die neuesten sicheren Versionen aktualisiert Fehler im...

CVE-2026-55509

WsgiDAV , a Python-based WebDAV server, has a blind SQL injection vulnerability in its sample MySQLBrowserProvider (wsgidav/samples/mysql_dav_provider.py). The affected methods (_exists_record_by_primary_key, _get_field_by_primary_key, _get_record_by_primary_key) concatenate a record key parsed f...

CVE-2026-55509 WsgiDAV: Blind SQL injection in the MySQL provider

WsgiDAV is a generic and extendable WebDAV server based on WSGI. Prior to 4.3.5, the sample MySQLBrowserProvider in wsgidav/samples/mysqldavprovider.py concatenates the record key parsed from a request URL directly into SQL WHERE clauses. The affected existsrecordbyprimarykey, getfieldbyprimaryke...

CVE-2026-55509 WsgiDAV: Blind SQL injection in the MySQL provider

WsgiDAV is a generic and extendable WebDAV server based on WSGI. Prior to 4.3.5, the sample MySQLBrowserProvider in wsgidav/samples/mysqldavprovider.py concatenates the record key parsed from a request URL directly into SQL WHERE clauses. The affected existsrecordbyprimarykey, getfieldbyprimaryke...

EUVD-2026-67857

WsgiDAV is a generic and extendable WebDAV server based on WSGI. Prior to 4.3.5, the sample MySQLBrowserProvider in wsgidav/samples/mysqldavprovider.py concatenates the record key parsed from a request URL directly into SQL WHERE clauses. The affected existsrecordbyprimarykey, getfieldbyprimaryke...

POC-CVE-2026-58048

CVE-2026-58048 CVSS 4.0: 9.4 Critico | CWE-89: SQL Injection | NVD Utente cPanel autenticato → SQL arbitrario come root MySQL tramite rinomina del database. cPanel preserva impropriamente il sqlmode della sessione dell'utente ANSIQUOTES quando esegue operazioni di rinomina come root — un backtick...