13 matches found
CVE-2025-24799-scanner
CVE-2025-24799-scanner Scanner pour la vulnérabilité GLPI CVE-2025-24799...
CVE-2025-24799
Scanner SQLi CVE-2025-24799 Un scanner rapide de vulnérabilités par injection SQL, codé en Python. Il utilise la détection SQLi basée sur le temps avec multithreading et une sortie colorée, conçu pour tester les vulnérabilités CVE-2025-24799. Fonctionnalités Analyse des URL uniques ou de listes...
Exploit-CVE-2025-24799
Exploit-CVE-2025-24799 Exploit CVE-2025-24799 : GLPI - Injection SQL non authentifiée Installation git clone https://github.com/MatheuZSecurity/Exploit-CVE-2025-24799 cd Exploit-CVE-2025-24799 pip3 install -r requirements.txt python3 exploit.py -h Rejoignez Rootkit Researchers...
Exploit for SQL Injection in Glpi-Project Glpi
CVE-2025-247...
Linux Distros Unpatched Vulnerability : CVE-2025-24799
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GLPI is a free asset and IT management software package. An unauthenticated user can perform a SQL injection through the inventory endpoint. This vulnerability ...
VulnCheck KEV: CVE-2025-24799
GLPI is a free asset and IT management software package. An unauthenticated user can perform a SQL injection through the inventory endpoint. This vulnerability is fixed in 10.0.18...
Exploit for SQL Injection in Glpi-Project Glpi
Exploit-CVE-2025-24799 CVE-2025-24799 Exploit: GLPI - Unauthen...
Exploit for SQL Injection in Glpi-Project Glpi
CVE-2025-24799 SQLi Scanner A fast SQL injection vulnerabilit...
CVE-2025-24799
GLPI is a free asset and IT management software package. An unauthenticated user can perform a SQL injection through the inventory endpoint. This vulnerability is fixed in 10.0.18...
CVE-2025-24799
GLPI is a free asset and IT management software package. An unauthenticated user can perform a SQL injection through the inventory endpoint. This vulnerability is fixed in 10.0.18...
CVE-2025-24799 GLPI allows unauthenticated SQL injection through the inventory endpoint
GLPI is a free asset and IT management software package. An unauthenticated user can perform a SQL injection through the inventory endpoint. This vulnerability is fixed in 10.0.18...
CVE-2025-24799
GLPI pre-auth SQL injection in the Inventory feature affects versions up to 10.0.17 due to insufficient sanitization of XML input in handleAgent, where SimpleXMLElement objects can bypass dbEscapeRecursive and allow arbitrary SQL via the inventory endpoint. Impact: unauthenticated access to data....
CVE-2025-24799
creationtimestamp| type| source ---|---|--- 2025-03-12 10:58:14+00:00| seen| https://bsky.app/profile/r-netsec-bot.bsky.social/post/3lk6geieskt2j 2025-03-12 11:30:36+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3lk6i6evc3a2c 2025-03-12 12:09:32+00:00| seen|...