CVE-2020-9483

CVE-2020-9483 PoC de la vulnerabilidad de inyección SQL CVE-2020-9483, Apache SkyWalking Uso:python3 CVE-2020-9483.py -ip 127.0.0.1 Puedes usar este script para obtener la versión de la base de datos mediante inyección SQL. Haz clic en la estrella si te gusta este script. Si este PoC te ha ayudad...

CVE-2026-34099

Guardian language-system passes the id GET parameter directly into an unsanitized SQL query in jobinfo.php line 16: SELECT FROM jobs where id = '".$GET'id'."'. No authentication is required. An unauthenticated attacker can perform error-based SQL injection to extract the database version, current...

CVE-2025-55674 Apache Superset: Improper SQL authorisation, parse not checking for specific engine functions

A bypass of the DISALLOWEDSQLFUNCTIONS security feature in Apache Superset allows for the execution of blocked SQL functions. An attacker can use a special inline block to circumvent the denylist. This allows a user with SQL Lab access to execute functions that were intended to be disabled, leadi...