CVE-2025-49132

CVE-2025-49132 - Strumento di scansione delle configurazioni del Pterodactyl Panel Questo strumento scansiona le istanze del pannello Pterodactyl per tentare di ottenere le informazioni di configurazione del database. Sfruttando una specifica vulnerabilità di path traversal, è possibile recuperar...

Binary Exploits

Exploit binari dell'Exploit Database Gli exploit binari si trovano nella directory /bin-sploits/. Questo è un repository ufficiale di The Exploit Database, un progetto sponsorizzato da Offensive Security. I nostri repository sono: Exploits & Shellcodes: https://gitlab.com/exploit-database/exploit...

CVE-2024-57430

CVE-2024-57430 Eine SQL-Injection-Schwachstelle in der Funktion pjActionGetUser des PHPJabbers Cinema Booking System v2.0 ermöglicht es Angreifern, Datenbankabfragen über den Parameter column zu manipulieren. Die Ausnutzung dieses Fehlers kann zu unbefugter Offenlegung von Informationen,...

CTWall

CTWall - ChainThreatWall Rilascio GitHub --- Con l'aumento di team che si spostano verso ambienti di sviluppo virtualizzati per ridurre il rischio della supply chain del software, una sfida rimane: dipendenze dannose possono ancora passare inosservate e raggiungere la produzione. CTWall...

PT-2026-82316

Insecure direct object reference in Plesk 18.0.79.7 and earlier or 18.0.80 through 18.0.80.3, allows remote authenticated users to read and modify other customers' databases...

EUVD-2020-31267

An issue was discovered in LibreNMS 1.65. A remote authenticated attacker with normal privileges can extract all the information from the LibreNMS database via a SQL injection in the address parameter in the /ajaxtable.php API endpoint...

Microsoft SQL Server Remote Code Execution Vulnerability

Microsoft SQL Server contains a remote code execution vulnerability that could allow an attacker to execute code in the context of the SQL Server Database Engine service account...

CVE-2020-15876

CVE-2020-15876 is an authenticated SQL injection in LibreNMS 1.65 . A remote attacker with normal privileges can extract the entire LibreNMS database by injecting into the sort parameter of the /ajax_table.php API endpoint. The vulnerability affects 23 files under includes/html/table (e.g., addre...

PT-2026-82320

Name of the Vulnerable Software and Affected Versions super-diamond-server versions prior to 1.3.4 Description The Netty configuration distribution service on port 8283 lacks an authentication mechanism. This allows an attacker to retrieve the complete configuration of any project, which may...

CVE-2020-15878

CVE-2020-15878 is a SQL injection vulnerability in LibreNMS 1.65 , specifically in the address parameter of the /ajax_table.php API endpoint. A remote authenticated attacker with normal privileges can exploit this flaw to extract all information from the LibreNMS database. The fix is available in...

EUVD-2020-31268

An issue was discovered in LibreNMS 1.65. A remote authenticated attacker with normal privileges can extract all the information from the LibreNMS database via a SQL injection in the sort parameter in the /ajaxtable.php API endpoint. This affects address-search.inc.php, alertlog.inc.php,...

CVE-2023-43339-CMSmadesimple-Reflected-XSS---Installation

Cmsmadesimple CMS Reflected XSS v2.2.18 Autore: Sergio Descrizione: Multiple vulnerabilità Cross-Site Scripting XSS nell'installazione di cmsmadesimple v.2.2.18 permettono a un attaccante locale di eseguire script web arbitrari tramite un payload manipolato iniettato nel Nome del Database, Utente...

CVE-2025-67261

CVE-2025-67261 - Inhaltsbasierte blinde SQL-Injection in Abacre Retail Point of Sale 14.0.0.396 Abacre Retail Point of Sale 14.0.0.396 ist anfällig für inhaltsbasierte blinde SQL-Injection. Die Schwachstelle befindet sich in der Suchfunktion der Bestellseite. Die "Search"-Funktion unter der...

CVE-2026-78468

...

GO-2026-6264 Fleet: SQL injection in Okta conditional access endpoint allows host-controlled compromise of the Fleet database in github.com/fleetdm/fleet

Fleet: SQL injection in Okta conditional access endpoint allows host-controlled compromise of the Fleet database in github.com/fleetdm/fleet...

CVE-2026-42501

A flaw was found in the Go command cmd/go. A malicious module proxy can exploit this vulnerability by bypassing the validation of module checksums. This allows the proxy to serve altered versions of the Go toolchain, which the go command may then download and execute without proper verification...

santa

Santa Santa is a binary and file access authorization system for macOS. It consists of a system extension that monitors for executions & file access, and makes decisions based on the contents of a local database, a GUI agent that notifies the user in case of a block decision, a background service...

CVE-2026-79667 Ech0 before 4.4.3 Authentication Bypass via Scope Enforcement

Ech0 version 4.3.4 and earlier fails to reliably enforce scoped access token least-privilege restrictions on several privileged admin routes. Multiple privileged endpoints e.g., /api/inbox, /api/panel/comments, /api/backup/export omit scope checks and authorize based only on the user's admin role...

CVE-2026-79667 Ech0 before 4.4.3 Authentication Bypass via Scope Enforcement

Ech0 version 4.3.4 and earlier fails to reliably enforce scoped access token least-privilege restrictions on several privileged admin routes. Multiple privileged endpoints e.g., /api/inbox, /api/panel/comments, /api/backup/export omit scope checks and authorize based only on the user's admin role...

atutor-blind-sqli

ATutor v2.2.1 SQL Injection Cieca Sfruttamento di CVE-2016-2555 per enumerare e dumpare il database sottostante. Disclaimer Tutte le informazioni fornite in questo post sono solo a scopo educativo. Non si deve fare un uso improprio delle informazioni per ottenere accesso non autorizzato e/o...