impacket

Impacket Copyright Fortra, LLC and its affiliated companies. All rights reserved. Impacket was originally created by SecureAuth, and now maintained by Fortra's Core Security. Impacket is a collection of Python classes for working with network protocols. Impacket is focused on providing low-level...

sqlmap

sqlmap sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester, and a broad range of switche...

CVE-2023-24775-and-CVE-2023-24780

CVE-2023-24775와 CVE-2023-24780 2023-24780 및 CVE-2023-24775에 대한 제 Python PoC입니다. 이 SQLi CVE는 Funadmin입니다. 이 저장소는 Python CVE SQLi Funadmin에 대한 PoC 익스플로잇을 포함하고 있습니다. CVE-2023-24774 - https://nvd.nist.gov/vuln/detail/CVE-2023-24780 취약한 버전: Funadmin v3.2.0 /databases/table/columns의 id 매개변수를 통한 취약점 및...

CVE-2026-7654

CVE-2026-7654 CVE-2026-7654 Admin Columns PHP Object Injection RCE Exploit...

CVE-2026-56292-AcyMailing-SQLi

CVE-2026-56292 — AcyMailing for Joomla 인증되지 않은 SQL 인젝션 저자: nullwhisper 승인된 보안 연구 / 취약점 검증 용도로만 사용하십시오. AcyMailing for Joomla는 공개 프런트엔드 작업 frontentityselect::loadEntityFront를 노출합니다. 이전 버전에서는 columns 매개변수가 삭제sanitization 없이 SQL 쿼리에 직접 전달됩니다. 패치된 버전에서는 acymsecureDBColumn을 사용하고 ... not secured와 같은 오류...

cve-2022-32224-rails

CVE-2022-3222 ActiveRecord 직렬화 동작 확인 https://discuss.rubyonrails.org/t/cve-2022-32224-possible-rce-escalation-bug-with-serialized-columns-in-active-record/81017 https://api.rubyonrails.org/classes/ActiveRecord/AttributeMethods/Serialization/ClassMethods.html...

cacti-cve-2023-39361

Cacti ™ develop 브랜치에서 Cacti 실행하기 중요 소스 코드를 사용하거나 저장소에서 코드를 직접 다운로드하여 사용하는 경우, 데이터베이스에서 누락된 테이블이나 컬럼을 참조하는 오류가 발생하면 데이터베이스 업그레이드 스크립트를 실행하는 것이 중요합니다. 데이터베이스 변경 사항은 새 설치에 사용되는 cacti.sql 파일에 커밋되며, 기존 설치를 위한 설치 프로그램 데이터베이스 업그레이드에도 커밋됩니다. develop 브랜치에서는 릴리스 전까지 버전 번호가 변경되지 않으므로 데이터베이스 업그레이드가 실행되지 않을 수...

PT-2026-99139

Name of the Vulnerable Software and Affected Versions Horilla versions prior to 2.0.0 Description An issue exists in the export data function within the HorillaListView class located in horilla views/generic/cbv/views.py. The application accepts a columns POST parameter from an authenticated user...

CVE-2026-96795: Improper Control of Generation of Code

Horilla is an HR and CRM software. Prior to 2.0.0, HorillaListView.exportdata in horillaviews/generic/cbv/views.py accepts an authenticated user's columns POST parameter, takes fieldtuple1, interpolates it into dynamicfnstr as Python source, and passes the generated function definition to exec. A...

CVE-2026-54647

CubeCart (ecommerce software) prior to 6.7.5 contains an SQL injection vulnerability in admin/sources/settings.index.inc.php (line 184). The administrator-controlled download_expire POST parameter is concatenated directly into a raw UPDATE statement on CubeCart_downloads without numeric validatio...

Astra Linux – Vulnerability in libde265

It was discovered that Libde265 v1.0.12 contains multiple buffer overflows due to vulnerabilities in the numtilecolumns and numtilerow parameters of the picparameterset::dump function...

PT-2026-91058

Joomla Extension - regularlabs.com - Database data disclosure in Advanced Module Manager Free, Pro 12.1.0, Conditional Content Free, Pro 8.0.0, Content Templater Pro 14.2.0, ReReplacer Pro 16.2.0 for Joomla - The Conditions editor creates a default Condition Set name from the item to which the se...

Starlette-Admin's unvalidated `order_by` parameter allows ordering by hidden columns (info-exposure oracle) and HTTP 500 DoS

SummaryAffected versions of Starlette-Admin prior to 0.16.1 do not properly validate user-supplied sort and search parameters against the configured field allowlists. While the administrative UI restricts available fields based on field configuration, the backend accepts arbitrary field names...

NPM: node-csv: Prototype replacement still reachable via columns path

NPM: node-csv: Prototype replacement still reachable via columns path vulnerability discovered by ? in WordPress Npm csv-parse versions 7.0.2...

node-csv: Prototype replacement still reachable via columns path

Impact With columns: true and groupcolumnsbyname: true, a duplicated proto header causes the duplicate-column branch to assign an array to obj'proto', invoking the proto setter and replacing the parsed record object's prototype with attacker-controlled data. Fixed in 7.0.2 Object.hasOwn duplicate...

GHSA-8CW4-87C7-C6XX node-csv: Prototype replacement still reachable via columns path

Impact With columns: true and groupcolumnsbyname: true, a duplicated proto header causes the duplicate-column branch to assign an array to obj'proto', invoking the proto setter and replacing the parsed record object's prototype with attacker-controlled data. Fixed in 7.0.2 Object.hasOwn duplicate...

EUVD-2026-57408

SiYuan: Second-order SSTI to arbitrary SQL via attribute-view template column queryBlocks: malicious imported package executes SQL on victim kernel...

Prototype Pollution

Overview csv-parse is a parser converting CSV text input into arrays or objects. Affected versions of this package are vulnerable to Prototype Pollution in its duplicate-column handling, which assigns an array to obj'proto' when a header contains duplicate proto entries, triggering the proto sett...

Prototype Pollution

Overview org.webjars.npm:csv-parse is a parser converting CSV text input into arrays or objects. Affected versions of this package are vulnerable to Prototype Pollution in its duplicate-column handling, which assigns an array to obj'proto' when a header contains duplicate proto entries, triggerin...

CVE-2026-85063 node-csv: Prototype replacement still reachable via columns path

node-csv is a full-featured CSV parser with a simple API that is tested against large datasets. Prior to 7.0.2, csv-parse with the columns and groupcolumnsbyname options enabled treats a duplicate proto header as an existing property in packages/csv-parse/lib/api/index.js, assigns an...