log4j_RCE_CVE-2021-44832

Log4j 2.17.0 RCE -- CVE-2021-44832 Reproduction 1. Démarrer le serveur jndi malveillant java -jar JNDI-Injection-Exploit-1.0-SNAPSHOT-all.jar -C "/System/Applications/Calculator.app/Contents/MacOS/Calculator" -A "127.0.0.1" 2. Modifiez la section DataSource dans config/log4j2.xml avec l'adresse...

KismetMobileDashboard

KismetMobileDashboard CECI EST ANCIEN. Le nouveau kismet a des websockets qui faciliteraient la construction d'un tel outil. Ceci est une nouvelle réécriture majeure de l'interface utilisateur mobile. Idéalement, je voudrais le tester davantage mais avec le hackersummercamp qui approche, je n'ai...

CVE-2026-31816-rshell

CVE-2026-31816 Reverse Shell Exploit Обзор Этот инструмент использует CVE-2026-31816 для установления обратного соединения reverse shell с целевым сервером Budibase. Цепочка атаки : Обход аутентификации → Загрузка плагина DATASOURCE → Выполнение кода на стороне сервера → Обратная оболочка Reverse...

DataEase_Postgresql_JDBC_Bypass-CVE-2025-49002

fofa-синтаксис: title="DataEase" poc: "POST /de2api/datasource/validate HTTP/1.1 Host: your-ip Accept-Encoding: gzip, deflate, br, zstd sec-ch-ua: ""Google Chrome"";v=""135"", ""Not-A.Brand"";v=""8"", ""Chromium"";v=""135"" User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64 AppleWebKit/537.36...

CVE-2026-75786

Unsanitized concatenation of the module parameter in the Grafana datasource endpoint allows authenticated blind SQL injection. Affects Pandora FMS from 777 onwards...

EUVD-2026-90600

Unsanitized concatenation of the module parameter in the Grafana datasource endpoint allows authenticated blind SQL injection. Affects Pandora FMS from 777 onwards...

CVE-2026-84842

IBM Guardium Data Protection 12.2 is vulnerable to path traversal and arbitrary file deletion in the Datasource REST component. An authenticated remote attacker could exploit this vulnerability to delete files and potentially cause denial of service or impact system integrity...

CVE-2026-84842 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2 is vulnerable to path traversal and arbitrary file deletion in the Datasource REST component. An authenticated remote attacker could exploit this vulnerability to delete files and potentially cause denial of service or impact system integrity...

EUVD-2026-89188

IBM Guardium Data Protection 12.2 is vulnerable to path traversal and arbitrary file deletion in the Datasource REST component. An authenticated remote attacker could exploit this vulnerability to delete files and potentially cause denial of service or impact system integrity...

CVE-2026-84842

IBM Guardium Data Protection 12.2 is susceptible to a path traversal and arbitrary file deletion vulnerability within the Datasource REST component . An authenticated remote attacker can exploit this flaw to delete files, which may result in a denial of service or compromise system integrity . No...

CVE-2026-84842 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2 is vulnerable to path traversal and arbitrary file deletion in the Datasource REST component. An authenticated remote attacker could exploit this vulnerability to delete files and potentially cause denial of service or impact system integrity...

CVE-2026-66083

The /datasources/unauth-datasource endpoint does not properly enforce data source authorization. An authenticated user can invoke this endpoint to obtain information about data sources they are not authorized to access. This may expose data source configuration and other sensitive metadata,...

EUVD-2026-88742

The /datasources/unauth-datasource endpoint does not properly enforce data source authorization. An authenticated user can invoke this endpoint to obtain information about data sources they are not authorized to access. This may expose data source configuration and other sensitive metadata,...

CVE-2026-66083 Apache DolphinScheduler: Unauthorized Disclosure of Data Source Information via /datasources/unauth-datasource

The /datasources/unauth-datasource endpoint does not properly enforce data source authorization. An authenticated user can invoke this endpoint to obtain information about data sources they are not authorized to access. This may expose data source configuration and other sensitive metadata,...

CVE-2026-66083 Apache DolphinScheduler: Unauthorized Disclosure of Data Source Information via /datasources/unauth-datasource

The /datasources/unauth-datasource endpoint does not properly enforce data source authorization. An authenticated user can invoke this endpoint to obtain information about data sources they are not authorized to access. This may expose data source configuration and other sensitive metadata,...

CVE-2026-66083

The Apache DolphinScheduler software (versions prior to 3.4.3 ) is vulnerable to an authorization flaw in the /datasources/unauth-datasource endpoint. An authenticated user can exploit this to access information regarding data sources they are not authorized to view. This could result in the expo...

CVE-2026-84842: Improper Limitation of a Pathname to a Restricted Directory

IBM Guardium Data Protection 12.2 is vulnerable to path traversal and arbitrary file deletion in the Datasource REST component. An authenticated remote attacker could exploit this vulnerability to delete files and potentially cause denial of service or impact system integrity...

CVE-2026-54350-Budibase-NoSQL-Injection

CVE-2026-54350 — Injection d'opérateur NoSQL non authentifiée dans Budibase Injection d'opérateur JSON/NoSQL non authentifiée dans Budibase. Tout visiteur anonyme d'une application Budibase publiée qui expose une requête PUBLIQUE soutenue par une source de données documentaire MongoDB, CouchDB,...

Quartz-1

Pour compiler : % mvn install -DskipTests Remarque : a. le jar final de Quartz se trouve dans quartz/target b. si vous ne disposez pas des jars des bibliothèques tierces Oracle et/ou Weblogic nécessaires à la compilation ils ne sont pas disponibles sur les dépôts Maven publics en raison des...

GO-2026-6514 Perses's missing authorization in datasource proxy allows cross-scope secret disclosure in github.com/perses/perses

Perses's missing authorization in datasource proxy allows cross-scope secret disclosure in github.com/perses/perses...