sqlpad-rce-exploit-CVE-2022-0944

Exploit de RCE en SQLPad Este repositorio contiene un script de explotación para CVE-2022-0944 en SQLPad, una vulnerabilidad que permite la ejecución remota de código RCE a través del endpoint /api/test-connection. Resumen El script proporcionado exploit.py demuestra cómo explotar la vulnerabilid...

CVE-2022-0944

CVE-2022-0944 PoC PoC para RCE en SQLPad. Este ejemplo lanza una reverse shell, pero el payload puede modificarse para ejecutar cualquier comando disponible cambiando el comando en la llamada 'exec' dentro del payload. payload = f" process.mainModule.require'childprocess'.exec'/bin/bash -c "bash ...

CVE-2026-47381 NocoDB: Cross-Workspace Integration Use in Connection Test

NocoDB is software for building databases as spreadsheets. Prior to 2026.05.1, a user in one workspace could exercise another workspace's integration through the testConnection endpoint by supplying its ID, because the integration was fetched in a bypass scope and the caller's permission check...

EUVD-2026-38151

A vulnerability was found in zhilink 智互联深圳科技有限公司 ADP Application Developer Platform 应用开发者平台 1.0.0. This affects an unknown part of the component testConnection Endpoint. The manipulation of the argument jdbcUrl results in deserialization. The attack may be performed from remote. The exploit has...

CVE-2025-8963

A vulnerability was determined in jeecgboot JimuReport up to 2.1.1. Affected by this issue is some unknown functionality of the file /drag/onlDragDataSource/testConnection of the component Data Large Screen Template. The manipulation leads to deserialization. The attack may be launched remotely...

CVE-2025-24461

In JetBrains TeamCity before 2024.12.1 decryption of connection secrets without proper permissions was possible via Test Connection endpoint...

CVE-2025-24461

In JetBrains TeamCity before 2024.12.1 decryption of connection secrets without proper permissions was possible via Test Connection endpoint...

CVE-2025-24461

In JetBrains TeamCity before 2024.12.1 decryption of connection secrets without proper permissions was possible via Test Connection endpoint...

CVE-2025-24461

CVE-2025-24461 affects JetBrains TeamCity prior to 2024.12.1. The issue allows decryption of connection secrets without proper permissions via the Test Connection endpoint, exposing high confidentiality impact with no reported integrity or availability changes. Affected component: Test Connection...

CVE-2025-24461

In JetBrains TeamCity before 2024.12.1 decryption of connection secrets without proper permissions was possible via Test Connection endpoint...

CVE-2025-24461

In JetBrains TeamCity before 2024.12.1 decryption of connection secrets without proper permissions was possible via Test Connection endpoint...

PT-2025-5367 · Jetbrains · Teamcity

Name of the Vulnerable Software and Affected Versions: JetBrains TeamCity versions prior to 2024.12.1 Description: The issue allows decryption of connection secrets without proper permissions via the "Test Connection" endpoint. This is related to incorrect authorization in the system...