CVE-2022-0739

CVE-2022-0739 Meine Version des CVE-2022-0739 BookingPress-Exploits, basierend auf dem POC von destr4ct - nur hübscher. Beispiel Beispielnutzung gegen die MetaTwo-Maschine von HackTheBox, die ein WordPress mit einem verwundbaren BookingPress-Plugin Version 1.0.10 hostet. root@kitploit: python...

Security Bulletin: IBM Sterling B2B Integrator and IBM Sterling File Gateway are Vulnerable due to spoofing vulnerabilty in MSSQL JDBC driver (CVE-2025-59250)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed MSSQL JDBC driver vulnerability Vulnerability Details CVEID:CVE-2025-59250 DESCRIPTION: Improper input validation in JDBC Driver for SQL Server allows an unauthorized attacker to perform spoofing over a network...

sqlmap-ai

Assistente de IA para SQLMap Um wrapper com tecnologia de IA em torno do SQLMap que torna os testes de injeção SQL mais acessíveis e automatizados. Recursos Recursos Principais Testes Assistidos por IA - Análise inteligente de vulnerabilidades e recomendações Testes Adaptativos - Testes passo a...

CVE-2024-55099-Online-Nurse-Hiring-System-v1.0-SQL-Injection-Vulnerability-

CVE-2024-55099 - Vulnerabilidade de Injeção SQL no Online-Nurse-Hiring-System v1.0 Autor do Exploit: ugurkarakoc Página do Fornecedor https://phpgurukul.com/online-nurse-hiring-system-using-php-and-mysql Link do Software https://phpgurukul.com/?sdmprocessdownload=1&downloadid=17826 Visão Geral O...

CVE-2026-78500

A blind server-side request forgery SSRF vulnerability WatchGuard Dimension Database Server Test configuration allows an authenticated privileged attacker to enumerate exposed network services on adjacent network systems...

CVE-2024-7928

CVE-2024-7928: FastAdmin V1.3.4.20220530 मनमाना फ़ाइल पठन भेद्यता CVEHunter टूल अन्य POC की तुलना में सटीकता और अतुल्यकालिक समवर्तीता के साथ CVE-2024-7928 के लिए FastAdmin इंस्टेंसेस का पता लगाने और DB विवरण प्राप्त करने हेतु शोषण करने वाला उपकरण है। स्थापना root@kitploit: git clone...

qlcoder

QLCoder Framework agentico per la sintesi di query CodeQL Sommario Panoramica Installazione Docker Consigliato Nativo Linux Utilizzo Avvio Rapido Strumenti di Sviluppo Esempi Ambiente dell'Articolo Contributi Team Citazione Progetti Affiliati Panoramica QLCoder è un framework per l'utilizzo di LL...

EUVD-2026-67328

A SQL injection vulnerability was found in YzmCMS 7.5. The issue occurs in the getarrchildid function within application/admin/controller/category.class.php, where the user-controlled parentid parameter is concatenated directly into a FINDINSET SQL clause without proper sanitization. This allows ...

CVE-2026-75417

A SQL injection vulnerability was found in YzmCMS 7.5. The issue occurs in the getarrchildid function within application/admin/controller/category.class.php, where the user-controlled parentid parameter is concatenated directly into a FINDINSET SQL clause without proper sanitization. This allows ...

brawl-public-game-001

BRAWL One of the challenging problems for cyber security researchers developing detection and response capabilities is finding a realistic environment in which to test their hypothesis and capabilities. The cheapest method is to test capabilities on a small lab network. But this environment is...

VulnCheck KEV: CVE-2026-82078

An unsafe dynamic class loading vulnerability exists in the database connection utilities of PaperCut MF and PaperCut NG. The application instantiates database driver classes based on configurable driver names without validating against an allowlist of approved drivers. If an attacker can...

CVE-2025-46171

vBulletin 3.x.x - DoS tramite sovraccarico della Buddy List Riepilogo L'endpoint /misc.php?do=buddylist esegue un'unica grande query JOIN che recupera tutti gli amici insieme alle loro informazioni utente e di sessione per verificarne lo stato online. Poiché questa query elabora l'intera lista...

CVE-2025-11077

CVE-2025-11077 - SQL Injection Autor: Byte Reaper Beschreibung Diese Schwachstelle ist eine Blind-SQL-Injection in der Datei addcontent.php des Online Learning Management Systems CVE-2025-11077, die es einem Angreifer ermöglicht, Datenbankinformationen durch das Senden präparierter POST-Anfragen ...

CVE-2025-10046

CVE-2025-10046 - ELEX WooCommerce Google Shopping Autor: Byte Reaper Beschreibung CVE-2025-10046 ist eine SQL-Injection-Schwachstelle im ELEX WooCommerce Google Shopping Product Feed Plugin für WordPress, Version 1.4.3 und früher. Das Problem befindet sich in der Datei...

CVE-2026-78500

WatchGuard Dimension contains a blind server-side request forgery (SSRF) vulnerability in the Database Server Test configuration. An authenticated privileged attacker can use this to enumerate exposed network services on adjacent network systems . The CVSS 4.0 base score is 5.1 (MEDIUM) , with an...

CVE-2026-78500 Dimension Blind SSRF via Database Test Connection Feature

A blind server-side request forgery SSRF vulnerability WatchGuard Dimension Database Server Test configuration allows an authenticated privileged attacker to enumerate exposed network services on adjacent network systems...

xerial__sqlite-jdbc_CVE-2023-32697_3-41-2-1

SQLite JDBC Treiber SQLite JDBC ist eine Bibliothek zum Zugreifen auf und Erstellen von SQLite-Datenbankdateien in Java. Unsere SQLiteJDBC-Bibliothek erfordert keine Konfiguration, da native Bibliotheken für gängige Betriebssysteme, einschließlich Windows, macOS, Linux usw., in einer einzigen...

vFeed

CONTROLLA LA NUOVA LIBRERIA https://github.com/vfeedio/pyvfeed vFeed Il Wrapper per il Database Correlato di Vulnerabilità e Threat Intelligence...

mimosa

Mimosa Beschreibung Systeme werden neu gestartet, Datenbanken werden gedumpt, früher hieß es SecureCoding, dann wurde es an Junioren übergeben und schließlich komplett neu geschrieben. Dies ist ein Open-Source-Kern; administrative Kontrollen sind ausgeschlossen. Funktionen Viele Challenges Verwei...

Mortimer

Mortimer Una raccolta di script per l'elaborazione di dati e intelligence di tipo network forensics, principalmente in un database postgres. Rilasciato come open source da NCC Group Plc - http://www.nccgroup.com/ Sviluppato per John Green, cirt at nccgroup dot com...