CVE-2022-28346

CVE-2022-28346 È stato trovato un difetto nel pacchetto Django, che porta a un'iniezione SQL. Questa falla consente a un utente malintenzionato di utilizzare un dizionario appositamente creato contenente query SQL dannose per compromettere completamente il database. Indice CVE-2022-28346...

CVE-2022-28346

CVE-2022-28346 SQL-Injection in QuerySet.annotate, aggregate und extra Einrichtung: Führen Sie ./setup.sh für die erste Einrichtung aus Öffnen Sie das Docker-Image, um die Datenbank zu initialisieren: docker exec -it containerid /bin/bash Und führen Sie die folgenden Befehle aus: root@kitploit:...

CVE-2021-35042

CVE-2021-35042 SQL injection tramite input QuerySet.orderby non sanificato Configurazione: Esegui ./setup.sh per la configurazione iniziale Apri l'immagine Docker per avviare il database: docker exec -it containerid /bin/bash E poi esegui i seguenti comandi: root@kitploit: python manage.py...

CVE-2022-28346

CVE-2022-28346 Django QuerySet.annotate, aggregate, extra SQL injection Inizializzazione dell'ambiente root@kitploit: 1.python manage.py makemigrations 2.python manage.py migrate 3.访问http://x.x.x.x:8000/ 插入初始化数据 Riproduzione della vulnerabilità root@kitploit: 访问http://x.x.x.x:8000/demo POC:...

CVE-2022-28346

CVE-2022-28346 PoC Impatto: Potenziale SQL injection in QuerySet.annotate, aggregate ed extra. Installazione root@kitploit: poetry install python manage.py makemigrations python manage.py migrate python manage.py loaddata data.json python manage.py runserver PoC root@kitploit: ?field=poc.title"...

CVE-2019-14234

POC-Django JSONField/HStoreField Vulnerabilità di SQL Injection Exploit CVE-2019-14234 Django ha rilasciato un aggiornamento di sicurezza il 1 agosto 2019, che corregge una vulnerabilità di SQL injection nei due campi del modello JSONField e HStoreField. Link di riferimento:...

CVE-2025-57833

CVE-2025-57833 Applicazione vulnerabile di esempio per CVE-2025–57833 Django 4.2 precedente alla 4.2.24, 5.1 precedente alla 5.1.12 e 5.2 precedente alla 5.2.6 è vulnerabile a un'iniezione SQL tramite l'espansione di un dizionario passato come kwargs a QuerySet.annotate o QuerySet.alias Attualmen...

django-connector-CVE-2025-64459-testbed

Django-CVE-2025-64459-Testbed Eine eigenständige Testumgebung für Django CVE-2025-64459. Demonstriert die Parameter-Injektion in QuerySet.filter mittels Dictionary-Expansion mit Docker. Über die Schwachstelle CVE-2025-64459 ist eine Schwachstelle mit hohem Schweregrad in Django insbesondere...

CVE-2021-35042

CVE-2021-35042: Vulnerabilità di SQL injection in Django I. Panoramica Django è un framework per applicazioni web open source, scritto in Python e costruito secondo il modello MVC Model - View - Controller. Inizialmente è stato creato per gestire i siti web di contenuti di notizie di proprietà de...

CVE-2026-76073

Label Studio does not scope the annotation detail endpoint to the requesting user's organization. AnnotationAPI in labelstudio/tasks/api.py declares queryset = Annotation.objects.all and provides no getqueryset override, so the default lookup retrieves any annotation by primary key. The view's...

CVE-2026-76073 Label Studio through 1.23.0 Cross-Organization Annotation Access via Unscoped AnnotationAPI Queryset

Label Studio does not scope the annotation detail endpoint to the requesting user's organization. AnnotationAPI in labelstudio/tasks/api.py declares queryset = Annotation.objects.all and provides no getqueryset override, so the default lookup retrieves any annotation by primary key. The view's...

CVE-2026-76073 Label Studio through 1.23.0 Cross-Organization Annotation Access via Unscoped AnnotationAPI Queryset

Label Studio does not scope the annotation detail endpoint to the requesting user's organization. AnnotationAPI in labelstudio/tasks/api.py declares queryset = Annotation.objects.all and provides no getqueryset override, so the default lookup retrieves any annotation by primary key. The view's...

Astra Linux – Vulnerability in Python-Django

A issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. The values and valueslist methods on models with a JSONField are vulnerable to SQL injection when column aliases are used, due to a crafted JSON object key being passed as an argument...

CVE-2026-18275 Authorization Bypass Through User-Controlled Key in eScriptorium

Authorization bypass in the process and annotation taxonomy serializers in Scripta eScriptorium through 26.04.1 allows a remote authenticated user to run segmentation and transcription against other users' document parts, overwriting their content, via part primary keys supplied to a many=True...

CVE-2026-15920

An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. django.contrib.admin.utils.displayforfield renders URLField values as clickable links in the admin without validating the URL. A value stored with an unsafe scheme is displayed as a link on changelist and read-only admin...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python-django (UTSA-2026-016807)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-016807 advisory. An issue was discovered in 5.1 before 5.1.14, 4.2 before 4.2.26, and 5.2 before 5.2.8. The methods QuerySet.filter, QuerySet.exclude, and QuerySet.get, and the class...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python-django (UTSA-2026-016788)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-016788 advisory. An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28. .QuerySet.orderby is subject to SQL injection in column aliases containing...

Django: Django: SQL injection via crafted column aliases in QuerySet.order_by()

A flaw was found in Django. A remote attacker could exploit a SQL injection vulnerability in the .QuerySet.orderby method. This occurs when column aliases containing periods are used, and the same alias is also present in FilteredRelation via a specially crafted dictionary. Successful exploitatio...

Django: Django: SQL injection via crafted column aliases in QuerySet.order_by()

A flaw was found in Django. A remote attacker could exploit a SQL injection vulnerability in the .QuerySet.orderby method. This occurs when column aliases containing periods are used, and the same alias is also present in FilteredRelation via a specially crafted dictionary. Successful exploitatio...

Django: Django: SQL injection via crafted column aliases in QuerySet.order_by()

A flaw was found in Django. A remote attacker could exploit a SQL injection vulnerability in the .QuerySet.orderby method. This occurs when column aliases containing periods are used, and the same alias is also present in FilteredRelation via a specially crafted dictionary. Successful exploitatio...