85546 matches found
CVE-2026-69084-PoC
CVE-2026-69084 / CVE-2026-69085 — Esecuzione SQL Arbitraria e SQLi in SiYuan CVE-2026-69084: Esecuzione SQL Arbitraria tramite /api/search/searchEmbedBlock CVE-2026-69085: SQL Injection tramite /api/filetree/searchDocs CVSS 9.9 Critico ciascuna · CWE-89 · SiYuan = v3.7.2 corretto in v3.7.3...
EUVD-2026-67959
IBM Concert 1.0.0 through 2.3.1 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database...
PT-2026-83427
Shinobi before commit 5a76c74f contains a hardcoded connection key in the child node service that allows unauthenticated attackers to execute arbitrary database queries. Attackers reaching the child node port can present the hardcoded key during WebSocket handshake, then dispatch SQL queries...
lst2x64dbg
lst2x64dbg This command extracts all the labels found in the LST file that is given as the single argument. An x64dbg database is created in the current directory based on the extracted labels. The LST file can be generated in IDA from the File menu: Produce file - Create LST file... Example...
dbeaver
DBeaver Strumento database multipiattaforma gratuito per sviluppatori, programmatori SQL, amministratori di database e analisti. Ha molte funzionalità tra cui editor di schema, editor SQL, editor di dati, integrazione AI, diagrammi ER, esportazione/importazione/migrazione dei dati, piani di...
CVE-2026-3627
IBM Concert versions 1.0.0 through 2.3.1 are vulnerable to SQL injection . A remote attacker with no prior authentication can send specially crafted SQL statements to view, add, modify, or delete data in the back-end database. The vulnerability is rated CVSS 9.1 (CRITICAL) with a network attack v...
CVE-2026-55678
Arc is an open, SQL-native time-series database for telemetry. In Enterprise cluster deployments from v26.02.1 to v26.06.2 , the coordinator accepts cluster join requests without authentication when cluster.enabled=true but cluster.shared_secret is empty. The HMAC validation in coordinator.go is ...
CVE-2026-55678 Arc: Unauthenticated cluster node admission when `cluster.shared_secret` is unset
Arc is an open, SQL-native time-series database for telemetry. From 26.02.1 until 26.06.2, Arc Enterprise clustering accepts cluster join requests without authentication when cluster.enabled is true but cluster.sharedsecret is not configured. The defaults in internal/config/config.go set...
GHSA-X626-FCWX-F5PC Portainer has Unauthenticated Restore Endpoint that Allows Admin Takeover on Uninitialized Instances
Summary Portainer supports restoring an instance from a backup archive via the /api/restore endpoint. This endpoint is intentionally unauthenticated to allow restoring before the first admin account is created, and remains accessible for the five-minute initialization window that opens each time...
CVE-mitre
CVE-Mitre Common Vulnerability Exposure Scarica un singolo CVE La variabile è solo un esempio ; puoi creare il tuo script SVN per scaricare una singola cartella = CVE = Saluti @nu11secur1ty $CVE = CVE-2020-13935 root@kitploit: svn checkout https://github.com/nu11secur1ty/CVE-mitre/trunk/$CVE...
Exploits + Shellcode + GHDB
Repository Git di Exploit Database Questo è un repository ufficiale di The Exploit Database, un progetto sponsorizzato da Offensive Security. I nostri repository sono: Exploit e Shellcode: gitlab.com/exploit-database/exploitdb Exploit binari: gitlab.com/exploit-database/exploitdb-bin-sploits Pape...
pip-audit
pip-audit pip-audit ist ein Tool zum Durchsuchen von Python-Umgebungen nach Paketen mit bekannten Sicherheitslücken. Es nutzt die Python Packaging Advisory Database https://github.com/pypa/advisory-database über die PyPI JSON API als Quelle für Schwachstellenberichte. Dieses Projekt wird zum Teil...
nmap-vulners
nmap-vulners Turn an nmap service scan into a ranked list of CVEs, exploits and what is being attacked in the wild. One NSE script that takes the software nmap already identified, asks the Vulners database what is known about it, and prints the answer inside the scan report - worst first, by what...
odat
Quentin HARDY --- [email protected] [email protected] ODAT ODAT Oracle Database Attacking Tool is an open source penetration testing tool that tests the security of Oracle Databases remotely. Usage examples of ODAT: You have an Oracle database listening remotely and want to find valid...
odat
Quentin HARDY --- [email protected] [email protected] ODAT ODAT Oracle Database Attacking Tool è uno strumento di penetration testing open source che testa la sicurezza dei database Oracle in remoto. Esempi di utilizzo di ODAT: Hai un database Oracle in ascolto in remoto e vuoi trovare...
getsploit
Getsploit Cerca e scarica exploit pubblici dal databaseVulners — online, o completamente offline da un indice locale...
CVE-2026-76794 MongoDB BI Connector Transition Readiness Report Improper HTML Encoding When Processing Database Metadata
MongoSQL Transition Readiness Tool does not sufficiently encode database metadata before including it in generated HTML. A MongoDB user with write access can introduce crafted metadata that may cause script code to run when another user generates and opens the report, potentially exposing report...
CVE-2026-76794
MongoSQL Transition Readiness Tool (part of the MongoDB BI Connector) contains an improper HTML encoding flaw when processing database metadata. A MongoDB user with write access can inject crafted metadata that, when another user generates and opens the Transition Readiness Report, may cause scri...
nuclei-wordfence-cve
Nuclei + Wordfence = ♥ 77,636 Nuclei Templates for WordPress Security Scanning 🥳 Level up your WordPress security game! This project's got a treasure trove of fresh Nuclei templates for WordPress. Scan for weaknesses in Core, plugins, and themes – all based on the latest intel from Wordfence.com...