oracleShell

oracleShell Oracle Database Command Execution Test Environment - DBA Privileges: SELECT FROM v$version Oracle Database 11g Enterprise Edition Release 11.2.0.1.0 - Production PL/SQL Release 11.2.0.1.0 - Production "CORE 11.2.0.1.0 Production" TNS for 32-bit Windows: Version 11.2.0.1.0 - Production...

cansina

Cansina Cansina is a Web Content Discovery Application. It is well known Web applications don't publish all their resources or public links, so the only way to discover these resources is requesting for them and check the response. Cansina duty is to help you making requests and filtering and...

reconkg

reconkg A vulnerability triage tool. It takes what a scan already found, works out which CVEs plausibly apply, tells you how confident it is and why, and gives you the commands to check for yourself. It does not scan anything, and it does not exploit anything. Install on Kali git clone...

CVE-2022-24716

CVE-2022-24716 Icinga Web 2 is a software application that monitors computer systems and networks. It has a web interface that allows users to view and manage system resources. However, there is a vulnerability in Icinga Web 2 that allows unauthenticated users to access files on the system that a...

CVE-2021-2173

CVE-2021-2173 CVE-2021-2173 PoC is explained here: https://databasesecurityninja.wordpress.com/2021/06/04/cve-2021-2173-pdb-isolation-is-broken-through-metadata-exposure/ Oracle Critical Patch Update Advisory - April 2021: https://www.oracle.com/security-alerts/cpuapr2021.html...

Windows-RCE-exploits

My other github repo for vendor testing against fileless attacks - https://github.com/smgorelik/VendorSimTestScripts Windows-RCE-exploits The exploit samples database is a repository for RCE remote code execution exploits and Proof-of-Concepts for WINDOWS , the samples are uploaded for education...

attifyos

AttifyOS v3.0 AttifyOS is a distro intended to help you perform security assessment and penetration testing of Internet of Things IoT devices. It saves you a lot of time by providing a pre-configured environment with all the necessary tools loaded. The new version is based on Ubuntu 18.04 64-Bit ...

GO-2026-6748 Vikunja: Plaintext storage of password-reset/email-confirm tokens in database enables account takeover on DB read access in code.vikunja.io/api

Vikunja: Plaintext storage of password-reset/email-confirm tokens in database enables account takeover on DB read access in code.vikunja.io/api. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is...

Advanced-SQL-Injection-Cheatsheet

MySQL Error based SQL Injection Cheatsheet This is probably the easiest vulnerability along the SQL Injection attack. An attacker can enumerate and dump the MySQL database by using the SQL error messages to his advantage. Detecting the vulnerability http://domain.com/index.php?id=1 Website loads...

CVE-2026-112771

Craft CMS 4.0.0 before 4.18.8 and 5.0.0 before 5.11.0 contains a Twig sandbox allowlist bypass because the column, contains, filterByValue, index, where, and multisort filters resolve caller-supplied keys via ArrayHelper::getValue without consulting the sandbox security policy. Authenticated...

CVE-2021-42392-exploit-lab

⚠️ H2 Database RCE Exploit PoC CVE-2021-42392 This repository provides a minimal and controlled environment to test the H2 Database Remote Code Execution vulnerability CVE-2021-42392 using the CREATE ALIAS feature. Unlike many demonstrations, this exploit targets the H2 TCP service directly...

CVE-2026-74251

Unauthenticated SQL Injection via Attribute Filter in Phoca Cart Phoca Cart ≤ 6.1.6 — Unauthenticated Attacker Extracts Full Database via Time-Based Blind Injection SUMMARY The a attribute and s specification GET array parameters on Phoca Cart's public shop items page are concatenated raw into SQ...

CVE-2023-49954.github.io

SQL Injection in 3CX CRM Integration For the CRM integration, 3CX ships templates for connecting to various databases. In these templates, placeholders FirstName,SearchText,Email are used to populate the queries. User input is not sanitized and thus enables SQL injections. Affected Versions no...

DBconfigReader

Database Configuration Information Disclosure Vulnerability in the Weaver ecology OA System Interface /mobile/DBconfigReader.jsp http://x.x.x.x:8090/mobile/DBconfigReader.jsp Fortify Code Audit Detected - Weak Encryption Algorithm SecretKey key =...

CVE-2026-112771

Craft CMS versions 4.0.0 before 4.18.8 and 5.0.0 before 5.11.0 are vulnerable to a Twig sandbox allowlist bypass . The issue arises because specific filters—including column , contains , filterByValue , index , where , and multisort —resolve caller-supplied keys using ArrayHelper::getValue() with...

EUVD-2026-104577

Craft CMS 4.0.0 before 4.18.8 and 5.0.0 before 5.11.0 contains a Twig sandbox allowlist bypass because the column, contains, filterByValue, index, where, and multisort filters resolve caller-supplied keys via ArrayHelper::getValue without consulting the sandbox security policy. Authenticated...

CVE-2022-24716

CVE-2022-24716 Arbitrary File Disclosure Vulnerability in Icinga Web 2 2.8.6, 2.9.6, 2.10 Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. Unauthenticated users can leak the contents of files of the local system accessible to the web-server user,...

CVE-2026-75855

Title Path Traversal in "create database" / "drop database" server commands allows arbitrary file write and delete outside the configured database directory Summary The POST /api/v1/server endpoint's create database and drop database commands use the caller-supplied database name to build a...

-Ruby-dl-handle.c-CVE-2009-5147-

Ruby Advisory Database The Ruby Advisory Database is a community effort to compile all security advisories that are relevant to Ruby libraries. You can check your own Gemfile.locks against this database by using bundler-audit. Support Ruby security! Do you know about a vulnerability that isn't...

PHP-Shell-Detector

Web Shell Detector Web Shell Detector – is a php script that helps you find and identify php/cgiperl/asp/aspx shells. Web Shell Detector has a “web shells” signature database that helps to identify “web shell” up to 99%. By using the latest javascript and css technologies, web shell detector has ...