Exploit-CVE-2025-24799

Exploit-CVE-2025-24799 CVE-2025-24799 漏洞利用：GLPI - 未认证的SQL注入 安装 root@kitploit: git clone https://github.com/MatheuZSecurity/Exploit-CVE-2025-24799 cd Exploit-CVE-2025-24799 pip3 install -r requirements.txt python3 exploit.py -h 加入Rootkit研究人员 https://discord.gg/66N5ZQppU7...

CVE-2025-24799

CVE-2025-24799 SQLi 扫描器 一款基于 Python 构建的快速 SQL 注入漏洞扫描器。采用时间盲注检测、多线程及彩色输出，专为测试 CVE-2025-24799 漏洞而设计。 功能特性 扫描单个 URL 或从文件中读取列表 实时显示发现的漏洞 URL 多线程以提高速度 多彩的 CLI 输出 可选择保存结果 安装 1. 克隆仓库： root@kitploit: git clone https://github.com/MuhammadWaseem29/CVE-2025-24799.git cd CVE-2025-24799 2. 安装所需依赖包：...

CVE-2025-24799-scanner

CVE-2025-24799-scanner GLPI CVE-2025-24799 漏洞扫描器...

Exploit for SQL Injection in Glpi-Project Glpi

CVE-2025-247...

Linux Distros Unpatched Vulnerability : CVE-2025-24799

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GLPI is a free asset and IT management software package. An unauthenticated user can perform a SQL injection through the inventory endpoint. This vulnerability ...

VulnCheck KEV: CVE-2025-24799

GLPI is a free asset and IT management software package. An unauthenticated user can perform a SQL injection through the inventory endpoint. This vulnerability is fixed in 10.0.18...

Exploit for SQL Injection in Glpi-Project Glpi

Exploit-CVE-2025-24799 CVE-2025-24799 Exploit: GLPI - Unauthen...

Exploit for SQL Injection in Glpi-Project Glpi

CVE-2025-24799 SQLi Scanner A fast SQL injection vulnerabilit...

CVE-2025-24799

GLPI is a free asset and IT management software package. An unauthenticated user can perform a SQL injection through the inventory endpoint. This vulnerability is fixed in 10.0.18...

CVE-2025-24799

GLPI is a free asset and IT management software package. An unauthenticated user can perform a SQL injection through the inventory endpoint. This vulnerability is fixed in 10.0.18...

CVE-2025-24799 GLPI allows unauthenticated SQL injection through the inventory endpoint

GLPI is a free asset and IT management software package. An unauthenticated user can perform a SQL injection through the inventory endpoint. This vulnerability is fixed in 10.0.18...

CVE-2025-24799

GLPI pre-auth SQL injection in the Inventory feature affects versions up to 10.0.17 due to insufficient sanitization of XML input in handleAgent, where SimpleXMLElement objects can bypass dbEscapeRecursive and allow arbitrary SQL via the inventory endpoint. Impact: unauthenticated access to data....

CVE-2025-24799

creationtimestamp| type| source ---|---|--- 2025-03-12 10:58:14+00:00| seen| https://bsky.app/profile/r-netsec-bot.bsky.social/post/3lk6geieskt2j 2025-03-12 11:30:36+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3lk6i6evc3a2c 2025-03-12 12:09:32+00:00| seen|...