CVE-2022-24707

PoC per CVE-2022-24707 Vulnerabilità di SQL Injection sul plugin Puncher. È possibile creare una richiesta POST per sfruttare l'SQL Injection e divulgare i contenuti del database. Testato su Anuko Time Tracker 1.20.0.5640. root@kitploit: python3 exploit.py --help usage: exploit.py -h --username...

guasap-whatsapp-foresincs-tool

Guasap Forensic Il Guasap Forensic implementato in Python sotto licenza GNU General Public License, per l'estrazione e l'analisi di file, database e log forensi di WhatsApp. Cosa fa? 1. Verifica il root nel dispositivo 2. Estrae DB e file multimediali senza root 3. Estrae e analizza messaggi...

CVE-2023-49954.github.io

SQL Injection nell'Integrazione CRM di 3CX Per l'integrazione CRM, 3CX fornisce dei template per connettersi a vari database. In questi template, i placeholder FirstName,SearchText,Email vengono utilizzati per popolare le query. L'input dell'utente non viene sanificato e quindi abilita iniezioni...

cve-exploit

CVE-EXPLOIT Usa questo software solo per scopi legali. Non sono in alcun modo responsabile delle tue azioni. Usa Python 3.11.2 Creato da Edu0x01 DESCRIZIONE cve-exploit è un hub per trovare CVE ed exploit. Si basa sui database ufficiali di NIST, ExploitDB e Github. Lo strumento rende rapida e...

CTWall

CTWall - ChainThreatWall Rilascio GitHub --- Con l'aumento di team che si spostano verso ambienti di sviluppo virtualizzati per ridurre il rischio della supply chain del software, una sfida rimane: dipendenze dannose possono ancora passare inosservate e raggiungere la produzione. CTWall...

CVE-2024-57430

CVE-2024-57430 Eine SQL-Injection-Schwachstelle in der Funktion pjActionGetUser des PHPJabbers Cinema Booking System v2.0 ermöglicht es Angreifern, Datenbankabfragen über den Parameter column zu manipulieren. Die Ausnutzung dieses Fehlers kann zu unbefugter Offenlegung von Informationen,...

CVE-2024-42327

Writeup CVE-2024-42327 Zabbix Schwachstelle Ziel: 10.129.231.176 Informationen: Ich weiß, dass mein Ziel ein Zabbix-Server ist. Ich habe ein Standardbenutzerkonto erhalten, um mich in Zabbix anzumelden: Benutzer matthew, Passwort 96qzn0h2e1k3. Dieses Konto hat einen Standardbenutzer ohne...

EUVD-2020-31267

An issue was discovered in LibreNMS 1.65. A remote authenticated attacker with normal privileges can extract all the information from the LibreNMS database via a SQL injection in the address parameter in the /ajaxtable.php API endpoint...

Microsoft SQL Server Remote Code Execution Vulnerability

Microsoft SQL Server contains a remote code execution vulnerability that could allow an attacker to execute code in the context of the SQL Server Database Engine service account...

CVE-2020-15876

CVE-2020-15876 is an authenticated SQL injection in LibreNMS 1.65 . A remote attacker with normal privileges can extract the entire LibreNMS database by injecting into the sort parameter of the /ajax_table.php API endpoint. The vulnerability affects 23 files under includes/html/table (e.g., addre...

PT-2026-82320

Name of the Vulnerable Software and Affected Versions super-diamond-server versions prior to 1.3.4 Description The Netty configuration distribution service on port 8283 lacks an authentication mechanism. This allows an attacker to retrieve the complete configuration of any project, which may...

EUVD-2020-31268

An issue was discovered in LibreNMS 1.65. A remote authenticated attacker with normal privileges can extract all the information from the LibreNMS database via a SQL injection in the sort parameter in the /ajaxtable.php API endpoint. This affects address-search.inc.php, alertlog.inc.php,...

CVE-2020-15878

CVE-2020-15878 is a SQL injection vulnerability in LibreNMS 1.65 , specifically in the address parameter of the /ajax_table.php API endpoint. A remote authenticated attacker with normal privileges can exploit this flaw to extract all information from the LibreNMS database. The fix is available in...

CVE-2023-43339-CMSmadesimple-Reflected-XSS---Installation

Cmsmadesimple CMS Reflected XSS v2.2.18 Autore: Sergio Descrizione: Multiple vulnerabilità Cross-Site Scripting XSS nell'installazione di cmsmadesimple v.2.2.18 permettono a un attaccante locale di eseguire script web arbitrari tramite un payload manipolato iniettato nel Nome del Database, Utente...

CVE-2022-24706

CVE-2022-24706 Contributori Scuola White Hat 4a generazione, classe 39 금정현@junghyeonkum Vulnerabilità di esecuzione remota di comandi Erlang Distribution di CouchDB CVE-2022-24706 Riepilogo Apache CouchDB è un database NoSQL open-source orientato ai documenti Document-Oriented implementato in...

CVE-2025-67261

CVE-2025-67261 - Inhaltsbasierte blinde SQL-Injection in Abacre Retail Point of Sale 14.0.0.396 Abacre Retail Point of Sale 14.0.0.396 ist anfällig für inhaltsbasierte blinde SQL-Injection. Die Schwachstelle befindet sich in der Suchfunktion der Bestellseite. Die "Search"-Funktion unter der...

CVE-2026-78468

...

GO-2026-6264 Fleet: SQL injection in Okta conditional access endpoint allows host-controlled compromise of the Fleet database in github.com/fleetdm/fleet

Fleet: SQL injection in Okta conditional access endpoint allows host-controlled compromise of the Fleet database in github.com/fleetdm/fleet...

CVE-2026-42501

A flaw was found in the Go command cmd/go. A malicious module proxy can exploit this vulnerability by bypassing the validation of module checksums. This allows the proxy to serve altered versions of the Go toolchain, which the go command may then download and execute without proper verification...

santa

Santa Santa is a binary and file access authorization system for macOS. It consists of a system extension that monitors for executions & file access, and makes decisions based on the contents of a local database, a GUI agent that notifies the user in case of a block decision, a background service...