85596 matches found
atutor-blind-sqli
ATutor v2.2.1 SQL Injection Cieca Sfruttamento di CVE-2016-2555 per enumerare e dumpare il database sottostante. Disclaimer Tutte le informazioni fornite in questo post sono solo a scopo educativo. Non si deve fare un uso improprio delle informazioni per ottenere accesso non autorizzato e/o...
CVE-2026-78576 Readabler < 2.0.18 - Unauthenticated SQL Injection
The Readabler plugin for WordPress is vulnerable to SQL Injection in all versions up to 2.0.18 exclusive due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append...
CVE-2026-77137
The extension fails to properly sanitize user input before using it in a database query. As a result, a low-privileged backend user can inject arbitrary SQL through a URL parameter within the "Forms Export" backend module. Exploitation requires a low-privileged backend user and read access to the...
CVE-2019-9193
EN GenPostgresRCEExploit è uno strumento PoC progettato per sfruttare una vulnerabilità autenticata di esecuzione remota del codice RCE in alcune versioni di PostgreSQL 9.3 - 11.7. Consente agli utenti autenticati di eseguire comandi di sistema su un server di database PostgreSQL vulnerabile a...
CVE-2026-11824
A flaw was found in SQLite, specifically within its FTS5 full-text search extension. Attackers can exploit a heap-based buffer overflow by providing a specially crafted database. This crafted database contains malicious metadata that triggers an integer underflow during FTS5 MATCH query processin...
CVE-2024-49681
CVE-2024-49681 WP Sessions Time Monitoring Full Automatic = 1.0.9 - SQL Injection non autenticata Description: Il plugin WP Sessions Time Monitoring Full Automatic per WordPress è vulnerabile a SQL Injection nelle versioni fino alla 1.0.9 inclusa a causa di una insufficiente escape del parametro...
Palo Alto Expedition - SQL Injection
An SQL injection vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to reveal Expedition database contents, such as password hashes, usernames, device configurations, and device API keys. With this, attackers can also create and read arbitrary files on the Expeditio...
MOVEit Transfer - Remote Code Execution
In Progress MOVEit Transfer before 2021.0.6 13.0.6, 2021.1.4 13.1.4, 2022.0.4 14.0.4, 2022.1.5 14.1.5, and 2023.0.1 15.0.1, a SQL injection vulnerability has been found in the MOVEit Transfer web application that could allow an unauthenticated attacker to gain access to MOVEit Transfer's database...
MOVEit Transfer - SQL Injection
In Progress MOVEit Transfer before 2021.0.8 13.0.8, 2021.1.6 13.1.6, 2022.0.6 14.0.6, 2022.1.7 14.1.7, and 2023.0.3 15.0.3, a SQL injection vulnerability has been identified in the MOVEit Transfer web application that could allow an unauthenticated attacker to gain unauthorized access to MOVEit...
Advanced-SQL-Injection-Cheatsheet
Cheat sheet per SQL Injection basata su errori MySQL Questa è probabilmente la vulnerabilità più semplice nell'ambito dell'attacco SQL Injection. Un attaccante può enumerare e dumpare il database MySQL sfruttando i messaggi di errore SQL a suo vantaggio. Rilevare la...
CVE-2023-37941
सुपरसेट के डिफ़ॉल्ट कैश में पिकल RCE का शोषण जानकारी root@kitploit: लेखक Dinis Cruz परियोजना Superset विवरण Apache का Superset कैशिंग के लिए विभिन्न विकल्प प्रस्तुत करता है, ये सभी Flask-Caching पर आधारित हैं। एक अंतर्निहित कैश प्रदान किया जाता है जो बाद में पुनर्प्राप्ति के लिए मानों को क्रमबद्ध...
CVE-2026-78470 WP Project Manager Pro <= 4.0.1 - Authenticated (Subscriber+) SQL Injection
The WP Project Manager Pro plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 4.0.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers,...
nuvola
nuvola nuvola with the lowercase n is a tool to dump and perform automatic and manual security analysis on AWS environments configurations and services using predefined, extensible and custom rules created using a simple Yaml syntax. The general idea behind this project is to create an abstracted...
ronin
ronin Website Source Issues Documentation Discord | Mastodon Description Ronin is a free and Open Source Ruby toolkit for security research and development. Ronin contains many different CLI commands and Ruby libraries for a variety of security tasks, such as encoding/decoding data, filter...
CVE-2026-34968
Adminer before 5.4.3 contains an arbitrary file deletion vulnerability in SQLite mode where the database-list drop action fails to validate file extensions before deletion. An authenticated attacker can submit arbitrary relative file paths in the db parameter to delete any files writable by the P...
EUVD-2026-65202
Adminer before 5.4.3 inserts unsanitized database server version strings into script tags with valid CSP nonces without proper validation. Attackers controlling a rogue MySQL server can return crafted version strings that break out of the JavaScript context and execute arbitrary code, bypassing...
EulerOS Virtualization 2.13.0 : sqlite (EulerOS-SA-2026-3240)
According to the versions of the sqlite packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : SQLite before 3.53.2 contains a heap-based buffer overflow vulnerability in the FTS5 full-text search extension that allows attacke...
MariaDB -- Multiple vulnerabilities
The MariaDB project reports: Details in links...
GHSA-JM48-M3RR-9HGG 3X-UI Vulnerable to Authenticated Arbitrary File Write via Database Import and Xray Log Path Manipulation
Summary An authenticated administrator can abuse the database import functionality to achieve arbitrary file write on the host by modifying Xray configuration values stored in the database. This can be leveraged to obtain code execution and persistent access as the user running Xray including roo...