CVE-2022-0739

CVE-2022-0739 CVE-2022-0739 BookingPress エクスプロイトに対する私の実装です。destr4ct 氏のPOCに基づいています - ただ少し見栄えを良くしただけです。 例 HackTheBox の MetaTwo マシンに対する使用例です。このマシンには、脆弱性のある bookingpress プラグイン（バージョン 1.0.10）を搭載した WordPress がホストされています。 root@kitploit: python booking-sqlinjector.py -u http://metapress.htb -nu...

AOSP-DownloadProviderDbDumperSQLiLimit

AOSP-DownloadProviderDbDumperSQLiLimit PoC эксплуатации SQL-инъекции в Download Provider Android через параметр сортировки CVE-2019-2196 Уведомление о безопасности SQL-инъекция в Download Provider Android AOSP через параметр сортировки запроса CVE-2019-2196 Демонстрация...

CVE-2025-58443

CVE-2025-58443 https://github.com/FOGProject/fogproject에 대한 exploit POC로, 인증 우회를 통해 전체 DB 덤프가 포함된 DB를 덤프할 수 있으며, 여기에는 평문 비밀번호, 사용자 및 관리자 비밀번호 해시가 포함됩니다. 취약한 버전 : 1.5.10.1673 다음은 이 취약점을 악용할 수 있는 스크립트로, 다음 작업을 수행할 수 있습니다 : 전체 MySQL DB 덤프 SSRF 취약점 악용 서버의 파일 목록 나열 DB 덤프에는 해시된 비밀번호와 FTP 등의 평문 비밀번호가 포함...

teams_dump

PoC для дампа и дешифровки куки в последней версии Microsoft Teams extract.py просто делает дамп без аргументов extract.exe — это просто extract.py, упакованный в exe teamsdump.py Вывести значения из базы данных root@kitploit: python.exe .\teamsdump.py teams --list Table: meta Columns in meta: ke...

CVE-2022-31890

CVE-2022-31890 для osTicket | Система поддержки тикетов Nickname: root@kitploit: python nickname.py The output of the first nickname in the table. Password: root@kitploit: python password.py The output of the first password in the table. Output to file: root@kitploit: python dumpFile.py cat...

Advanced-SQL-Injection-Cheatsheet

MySQL 오류 기반 SQL 인젝션 치트시트 이것은 아마도 SQL 인젝션 공격 중 가장 쉬운 취약점입니다. 공격자는 SQL 오류 메시지를 유리하게 활용하여 MySQL 데이터베이스를 열거하고 덤프할 수 있습니다. 취약점 탐지http://domain.com/index.php?id=1 Website loads successfully http://domain.com/index.php?id=1' 다음과 같은 오류 메시지가 표시됩니다: You have an error in your SQL syntax; check the manual th...

cve-2021-22146

cve-2021-22146 내부 침투 테스트 중 Elastic ECE에서 취약점을 발견했습니다. Elasticdump는 7.10.0부터 7.13.3까지의 Elastic ECE 데이터베이스를 덤프하기 위한 CVE-2021-22146의 PoC입니다. https://www.exploit-db.com/exploits/50152 협력자: Mario Díaz Caldera...

Wordpress-cve-CVE-2022-21661

Wordpress 5.8.2 CVE-2022-21661 취약 환경 이 환경은 Elementor Custom Skin 플러그인을 사용하여 CVE-2022-21661을 테스트하도록 설정되었습니다. 환경을 시작하려면 console wp-lab$ ./start.sh 관리자 비밀번호를 얻으려면 실행 중인 컨테이너의 로그를 확인하세요. 컨테이너가 부팅될 때마다 새 비밀번호가 생성됩니다. console $wp-lab$ docker logs test user admin pwd: inpJbxn+mhWWNSgEAlsU2A== localip:...

CVE-2023-48084

CVE-2023-48084 CVE-2023-48084에 대한 Python 익스플로잇 - Nagios XI 5.11.3 이전 버전은 대량 수정 도구를 통해 SQL 인젝션 취약점이 있는 것으로 발견되었습니다. 이 익스플로잇은 /admin/bannermessage-ajaxhelper.php?action=acknowledgebannermessage&id=를 사용하여 SQL 쿼리를 실행하며, 블라인드 SQL 인젝션을 이용합니다... 사용법 저장소를 클론하고 requirements.txt를 설치하세요. root@kitploit: git...

CVE-2026-75133

Keep Backup Daily plugin for WordPress before 2.1.4 contains a sensitive information exposure vulnerability that allows unauthenticated attackers to trigger a full MySQL database dump by accessing the publicly exposed kbdcronprocess parameter without authentication. Attackers can predict the...

EUVD-2026-68608

Keep Backup Daily plugin for WordPress before 2.1.4 contains a sensitive information exposure vulnerability that allows unauthenticated attackers to trigger a full MySQL database dump by accessing the publicly exposed kbdcronprocess parameter without authentication. Attackers can predict the...

CVE-2026-75133 Keep Backup Daily WordPress Plugin < 2.1.4 Sensitive Information Exposure via kbd_cron_process

Keep Backup Daily plugin for WordPress before 2.1.4 contains a sensitive information exposure vulnerability that allows unauthenticated attackers to trigger a full MySQL database dump by accessing the publicly exposed kbdcronprocess parameter without authentication. Attackers can predict the...

Unsafe Dependency Resolution

Overview Affected versions of this package are vulnerable to Unsafe Dependency Resolution via the \unrestrict meta-command input expansion in the restore process. An attacker can execute arbitrary code as the client operating system account by injecting malicious input from a compromised origin...

CVE-2026-63359

The Appriss Insights Equifax Victim Information Notification Exchange VINE applications allow an unauthenticated attacker to send a specially-crafted request to bypass the login page, access other users' credentials, take over other user accounts, access sensitive PII, and dump other information...

CVE-2026-63359

CVE-2026-63359 affects Appriss Insights VINE applications. The vulnerability allows an unauthenticated attacker to send a specially-crafted request that bypasses the login page, access other users’ credentials, take over other user accounts, and dump sensitive PII and other database information. ...

CVE-2026-43873

WWBN AVideo is an open source video platform. In versions up to and including 29.0, plugin/CloneSite/cloneClient.json.php echoes the local CloneSite shared secret $objClone-myKey, a constant md5$global'systemRootPath' . $global'salt' into the HTTP response body on every unauthenticated request. T...

YesWiki: Unauthenticated SQL Injection

Summary An unauthenticated SQL injection in the Bazar form-import path FormManager::create allows any unauthenticated visitor of a default YesWiki install to inject arbitrary SQL into an INSERT statement and read the full database, including yeswikiusers.password hashes. Present in 4.6.1 / 4.6.2 ...

PT-2026-42810

Name of the Vulnerable Software and Affected Versions YesWiki versions prior to 4.6.4 Description An unauthenticated SQL injection exists in the Bazar form-import path within the FormManager::create function. This flaw allows an unauthenticated visitor of a default installation to inject arbitrar...

CVE-2026-43873 WWBN AVideo: Unauthenticated Disclosure of CloneSite `myKey` via Error Echo in `cloneClient.json.php` Enables Cross-Site DB Dump of the Configured Clone Server

WWBN AVideo is an open source video platform. In versions up to and including 29.0, plugin/CloneSite/cloneClient.json.php echoes the local CloneSite shared secret $objClone-myKey, a constant md5$global'systemRootPath' . $global'salt' into the HTTP response body on every unauthenticated request. T...

WWBN AVideo 安全漏洞

WWBN AVideo is a video platform building system developed by the WWBN team using PHP. Versions of WWBN AVideo prior to 29.0 contained security vulnerabilities. These vulnerabilities stemmed from the plugin/CloneSite/cloneClient.json.php file displaying the local CloneSite shared key in unvalidate...