CVE-2025-70828

CVE-2025-70828 概要 Datart v1.0.0-rc.3 に任意のファイル読み取りの脆弱性が発見されました。このアプリケーションは、データソース設定時に JDBC 接続 URL を適切に検証しません。 脆弱性の詳細 脆弱性タイプ: 不適切な入力検証 CWE-20 / 任意のファイル読み取り 影響を受けるバージョン: Datart v1.0.0-rc.3 深刻度: 高 機密情報が漏えいする可能性 説明 この脆弱性は、データソース設定モジュールに存在します。アプリケーションは JDBC 設定内の url...

CVE-2024-34693

CVE-2024-34693 エクスプロイト このリポジトリには、Apache Superset の CVE-2024-34693 脆弱性を悪用するための高度な Python スクリプトが含まれています。このスクリプトは、不正な MySQL サーバーをセットアップし、悪意のある MariaDB 接続を作成して、対象システムから指定されたファイルの内容を外部に持ち出します。 !\Screenshot1.png\https://raw.githubusercontent.com/Mr-r00t11/CVE-2024-34693/main/img/Screenshot1.png 説明...

Rogue-MySql-Server

Rogue-MySql-Server 编辑脚本并根据需要更改要读取的文件和服务器端口。运行脚本并连接到你的服务器，以便从客户端读取文件。 读取 mysql.log 以查看已读取的文件内容。...

CVE-2024-34693

CVE-2024-34693: Apache Superset におけるサーバー任意ファイル読み取り Apache Superset の不適切な入力検証の脆弱性により、認証済みの攻撃者が localinfile を有効にした MariaDB 接続を作成できる可能性があります。Superset の MySQL/MariaDB クライアントで localinfile を有効にし、そのクライアントを悪意のある MySQL サーバーに向けることで、攻撃者は "LOAD DATA LOCAL INFILE"（Rogue MySQL Server）攻撃を仕掛け、サーバーからファイルを読み取り、その内...

Linux Distros Unpatched Vulnerability : CVE-2026-56704

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Adminer before 5.4.3 inserts unsanitized database server version strings into script tags with valid CSP nonces without proper validation. Attackers controlling...

CVE-2026-32949

SQLBot is vulnerable prior to version 1.7.0 to an SSRF leading to arbitrary local-file reads. An attacker can abuse /api/v1/datasource/check by supplying a forged MySQL data source with extraJdbc="local_infile=1". During connectivity verification, a rogue MySQL server issues a malicious LOAD DATA...

Exploit for CVE-2021-43008

CVE-2021-43008 — Vulnérabilité Adminer Lecture arbi...

Linux Distros Unpatched Vulnerability : CVE-2019-6799

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in phpMyAdmin before 4.8.5. When the AllowArbitraryServer configuration setting is set to true, with the use of a rogue MySQL server, an...

Exploit for Improper Input Validation in Apache Superset

CVE-2024-34693 Exploit This repository contains a sophisticat...

GHSA-RX76-XW35-6RH8 Apache Linkis vulnerable to Exposure of Sensitive Information

In Apache Linkis =1.3.0 when used with the MySQL Connector/J, an authenticated attacker could read arbitrary local file by connecting a rogue mysql server, By adding allowLoadLocalInfile to true in the jdbc parameter. Therefore, the parameters in the jdbc url should be blacklisted. Versions of...

Apache Linkis vulnerable to Exposure of Sensitive Information

In Apache Linkis =1.3.0 when used with the MySQL Connector/J, an authenticated attacker could read arbitrary local file by connecting a rogue mysql server, By adding allowLoadLocalInfile to true in the jdbc parameter. Therefore, the parameters in the jdbc url should be blacklisted. Versions of...

GHSA-73PR-G6JJ-5HC9 Externally Controlled Reference to a Resource in Another Sphere in ruby-mysql

A malicious actor can read arbitrary files from a client that uses ruby-mysql to communicate to a rogue MySQL server and issue database queries. In these cases, the server has the option to create a database reply using the LOAD DATA LOCAL statement, which instructs the client to provide addition...

Externally Controlled Reference to a Resource in Another Sphere in ruby-mysql

A malicious actor can read arbitrary files from a client that uses ruby-mysql to communicate to a rogue MySQL server and issue database queries. In these cases, the server has the option to create a database reply using the LOAD DATA LOCAL statement, which instructs the client to provide addition...

GHSA-C8WJ-Q36Q-3WG4 phpMyAdmin Arbitrary file read vulnerability

An issue was discovered in phpMyAdmin before 4.8.5. When the AllowArbitraryServer configuration setting is set to true, with the use of a rogue MySQL server, an attacker can read any file on the server that the web server's user can access. This is related to the mysql.allowlocalinfile PHP...

phpMyAdmin Arbitrary file read vulnerability

An issue was discovered in phpMyAdmin before 4.8.5. When the AllowArbitraryServer configuration setting is set to true, with the use of a rogue MySQL server, an attacker can read any file on the server that the web server's user can access. This is related to the mysql.allowlocalinfile PHP...

Data Source Name Injection

Description TiDB Importer uses Go MySQL Driver for connecting to MySQL servers. This driver utilizes Data Source Name DSN strings for describing database connections with the following format: username:password@protocoladdress/dbname?param=value The driver has a built-in protection against LOCAL...

DEBIAN-CVE-2019-6799

An issue was discovered in phpMyAdmin before 4.8.5. When the AllowArbitraryServer configuration setting is set to true, with the use of a rogue MySQL server, an attacker can read any file on the server that the web server's user can access. This is related to the mysql.allowlocalinfile PHP...

CVE-2019-6799

An issue was discovered in phpMyAdmin before 4.8.5. When the AllowArbitraryServer configuration setting is set to true, with the use of a rogue MySQL server, an attacker can read any file on the server that the web server's user can access. This is related to the mysql.allowlocalinfile PHP...

UBUNTU-CVE-2019-6799

An issue was discovered in phpMyAdmin before 4.8.5. When the AllowArbitraryServer configuration setting is set to true, with the use of a rogue MySQL server, an attacker can read any file on the server that the web server's user can access. This is related to the mysql.allowlocalinfile PHP...