Rogue-MySql-Server

Rogue-MySql-Server Modifiez le script et changez le fichier à lire ainsi que le port du serveur si vous le souhaitez. Lancez le script et connectez-vous à votre serveur pour lire le fichier depuis le côté client. Consultez mysql.log pour lire le contenu du fichier lu...

CVE-2024-34693

CVE-2024-34693: قراءة تعسفية للملفات من الخادم في Apache Superset ثغرة في التحقق غير السليم من المدخلات في Apache Superset، تسمح لمهاجم مُصادَق عليه بإنشاء اتصال MariaDB مع تمكين localinfile. من خلال تمكين localinfile في عميل MySQL/MariaDB الخاص بـ Superset وتوجيه العميل إلى خادم MySQL خبيث، قد ي...

CVE-2025-70828

CVE-2025-70828 ملخص تم اكتشاف ثغرة قراءة ملفات عشوائية في Datart v1.0.0-rc.3. يفشل التطبيق في التحقق بشكل صحيح من عنوان URL لاتصال JDBC أثناء تكوين مصدر البيانات. تفاصيل الثغرة نوع الثغرة: التحقق غير الصحيح من الإدخال CWE-20 / قراءة ملفات عشوائية الإصدار المتأثر: Datart v1.0.0-rc.3 الخطورة: عالية...

CVE-2024-34693

استغلال CVE-2024-34693 يحتوي هذا المستودع على سكربت بايثون متطور لاستغلال ثغرة CVE-2024-34693 في Apache Superset. يقوم السكربت بإعداد خادم MySQL مزيف وإنشاء اتصال MariaDB خبيث لسرقة محتوى ملف محدد من النظام المستهدف...

Linux Distros Unpatched Vulnerability : CVE-2026-56704

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Adminer before 5.4.3 inserts unsanitized database server version strings into script tags with valid CSP nonces without proper validation. Attackers controlling...

CVE-2026-32949

SQLBot is vulnerable prior to version 1.7.0 to an SSRF leading to arbitrary local-file reads. An attacker can abuse /api/v1/datasource/check by supplying a forged MySQL data source with extraJdbc="local_infile=1". During connectivity verification, a rogue MySQL server issues a malicious LOAD DATA...

Exploit for CVE-2021-43008

CVE-2021-43008 — Vulnérabilité Adminer Lecture arbi...

CVE-2025-62611: External Control of File Name or Path

aiomysql is a library for accessing a MySQL database from the asyncio. Prior to version 0.3.0, the client-side settings are not checked before sending local files to MySQL server, which allows obtaining arbitrary files from the client using a rogue server. It is possible to create a rogue MySQL...

Linux Distros Unpatched Vulnerability : CVE-2019-6799

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in phpMyAdmin before 4.8.5. When the AllowArbitraryServer configuration setting is set to true, with the use of a rogue MySQL server, an...

Exploit for Improper Input Validation in Apache Superset

CVE-2024-34693 Exploit This repository contains a sophisticat...

Apache Linkis vulnerable to Exposure of Sensitive Information

In Apache Linkis =1.3.0 when used with the MySQL Connector/J, an authenticated attacker could read arbitrary local file by connecting a rogue mysql server, By adding allowLoadLocalInfile to true in the jdbc parameter. Therefore, the parameters in the jdbc url should be blacklisted. Versions of...

GHSA-RX76-XW35-6RH8 Apache Linkis vulnerable to Exposure of Sensitive Information

In Apache Linkis =1.3.0 when used with the MySQL Connector/J, an authenticated attacker could read arbitrary local file by connecting a rogue mysql server, By adding allowLoadLocalInfile to true in the jdbc parameter. Therefore, the parameters in the jdbc url should be blacklisted. Versions of...

Externally Controlled Reference to a Resource in Another Sphere in ruby-mysql

A malicious actor can read arbitrary files from a client that uses ruby-mysql to communicate to a rogue MySQL server and issue database queries. In these cases, the server has the option to create a database reply using the LOAD DATA LOCAL statement, which instructs the client to provide addition...

GHSA-73PR-G6JJ-5HC9 Externally Controlled Reference to a Resource in Another Sphere in ruby-mysql

A malicious actor can read arbitrary files from a client that uses ruby-mysql to communicate to a rogue MySQL server and issue database queries. In these cases, the server has the option to create a database reply using the LOAD DATA LOCAL statement, which instructs the client to provide addition...

phpMyAdmin Arbitrary file read vulnerability

An issue was discovered in phpMyAdmin before 4.8.5. When the AllowArbitraryServer configuration setting is set to true, with the use of a rogue MySQL server, an attacker can read any file on the server that the web server's user can access. This is related to the mysql.allowlocalinfile PHP...

GHSA-C8WJ-Q36Q-3WG4 phpMyAdmin Arbitrary file read vulnerability

An issue was discovered in phpMyAdmin before 4.8.5. When the AllowArbitraryServer configuration setting is set to true, with the use of a rogue MySQL server, an attacker can read any file on the server that the web server's user can access. This is related to the mysql.allowlocalinfile PHP...

Data Source Name Injection

Description TiDB Importer uses Go MySQL Driver for connecting to MySQL servers. This driver utilizes Data Source Name DSN strings for describing database connections with the following format: username:password@protocoladdress/dbname?param=value The driver has a built-in protection against LOCAL...

PT-2020-13851

Name of the Vulnerable Software and Affected Versions Ozeki NG SMS Gateway versions prior to 4.17.7 Description An issue was discovered where the database connection strings in Ozeki NG SMS Gateway accept custom unsafe arguments, such as ENABLE LOCAL INFILE, which can be used by attackers to enab...

CVE-2019-6799

An issue was discovered in phpMyAdmin before 4.8.5. When the AllowArbitraryServer configuration setting is set to true, with the use of a rogue MySQL server, an attacker can read any file on the server that the web server's user can access. This is related to the mysql.allowlocalinfile PHP...

UBUNTU-CVE-2019-6799

An issue was discovered in phpMyAdmin before 4.8.5. When the AllowArbitraryServer configuration setting is set to true, with the use of a rogue MySQL server, an attacker can read any file on the server that the web server's user can access. This is related to the mysql.allowlocalinfile PHP...