CVE-2022-34265

CVE-2022-34265 Verwendung Start root@kitploit: docker-compose build docker-compose up -d Stopp root@kitploit: docker-compose down PoC-Verifizierung der Django-Schwachstelle CVE-2022-34265 Eine Schwachstelle CVE-2022-34265 in Django wurde am 5. Juli 2022 US-Zeit offengelegt. Dieser Artikel...

CVE-2022-34265

CVE-2022-34265 Riepilogo della vulnerabilità Questa vulnerabilità è dovuta a un'elaborazione impropria delle stringhe durante l'esecuzione di SQL per gli argomenti delle funzioni Trunc ed Extract utilizzate per i dati di tipo data in Django. Specificando i parametri della richiesta così come sono...

CVE-2022-34265

CVE-2022-34265 CVE-2022-34265 के लिए PoC विवरण Django 3.2 में 3.2.14 से पहले और 4.0 में 4.0.6 से पहले एक समस्या पाई गई। Trunc और Extract डेटाबेस फ़ंक्शन SQL इंजेक्शन के अधीन हैं यदि अविश्वसनीय डेटा को kind/lookupname मान के रूप में उपयोग किया जाता है। वे एप्लिकेशन जो lookup name और kind choice को...

CTF_Django_CVE-2022-34265

CTFCVE-2022-34265 विवरण Django 3.2 के 3.2.14 से पहले और 4.0 के 4.0.6 से पहले के संस्करणों में एक समस्या पाई गई। यदि अविश्वसनीय डेटा को kind/lookupname मान के रूप में उपयोग किया जाता है, तो Trunc और Extract डेटाबेस फ़ंक्शन SQL इंजेक्शन के प्रति संवेदनशील हैं। जो एप्लिकेशन lookup name और kind के चय...

lst2x64dbg

lst2x64dbg This command extracts all the labels found in the LST file that is given as the single argument. An x64dbg database is created in the current directory based on the extracted labels. The LST file can be generated in IDA from the File menu: Produce file - Create LST file... Example...

nuubi

Nuubi Tools Scanner, Recon. Details root@kitploit: Options: -h/--help | Show help message and exit Arguments: -b/--banner | Banner grabing of target ip address -s/--subnet | Subnetlookup of target -c/--cms | Cms detect with headers -d/--dns | Dnslookup of target domain -e/--extract | Extract link...

teams_dump

PoC for dumping and decrypting cookies in the latest version of Microsoft Teams extract.py just dumps without arguments extract.exe is just extract.py packed into an exe teamsdump.py List values in the database root@kitploit: python.exe .\teamsdump.py teams --list Table: meta Columns in meta: key...

Email-Extract

Email-Extract - Ferramenta para extrair e-mails de sites enumerados! ATUALIZAÇÃO : Convertido para ferramenta CLI, adicionada opção de formato para formatar listas que não sejam as geradas pelo dirb, Email-Extract é uma ferramenta simples que escrevi para ajudar a extrair e-mails de sites para...

uefi-firmware-parser

UEFI Firmware Parser .. image:: https://travis-ci.org/theopolis/uefi-firmware-parser.svg?branch=master :target: https://travis-ci.org/theopolis/uefi-firmware-parser The UEFI firmware parser is a simple module and set of scripts for parsing, extracting, and recreating UEFI firmware volumes. This...

frida-ipa-extract

frida-ipa-extract Questo progetto è stato ispirato da frida-ios-dump. Poiché ho recentemente riscontrato problemi con quello strumento, ho deciso di creare frida-ipa-extract con maggiore robustezza e aggiunte per affrontare i problemi che affrontiamo oggi. Estrai un .ipa decriptato da un...

gitjacker

gitjacker Gitjacker downloads git repositories and extracts their contents from sites where the .git directory has been mistakenly uploaded. It will still manage to recover a significant portion of a repository even where directory listings are disabled. For educational/penetration testing use...

extract-zip: github.com/maxogden/extract-zip: extract-zip: Arbitrary file write and information disclosure via symlink validation bypass

A flaw was found in extract-zip. This vulnerability allows a remote attacker to craft a malicious zip file containing symbolic links that point to locations outside the intended extraction directory. When a user extracts this malicious archive, extract-zip fails to validate the symlink targets,...

The vulnerability of the EXTRACT() function in the PostgreSQL database management system allows a hacker to execute arbitrary code.

The vulnerability of the EXTRACT function in the PostgreSQL database management system is related to the lack of protective measures for SQL query structures. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

BIT-POSTGRESQL-2026-15741 PostgreSQL expression deparse allows SQL injection via EXTRACT argument

SQL injection in PostgreSQL EXTRACT deparse allows an object owner to execute arbitrary SQL as a superuser via a hostile object definition. Attacks affect expression deparse consumers broadly, including pgdump, psql commands like \sf, and any similar usage in non-core tools. Versions before...

Linux Distros Unpatched Vulnerability : CVE-2026-19693

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - extract-zip through 2.0.1 containment-checks only the parent directory of each archive entry and never the entry's own final path component, so an archive...

CVE-2026-19693

extract-zip through 2.0.1 containment-checks only the parent directory of each archive entry and never the entry's own final path component, so an archive containing two entries with identical names - a symlink whose target is outside the destination, followed by a regular file - writes through t...

UBUNTU-CVE-2026-19693

extract-zip through 2.0.1 containment-checks only the parent directory of each archive entry and never the entry's own final path component, so an archive containing two entries with identical names - a symlink whose target is outside the destination, followed by a regular file - writes through t...

EUVD-2026-60194

extract-zip through 2.0.1 containment-checks only the parent directory of each archive entry and never the entry's own final path component, so an archive containing two entries with identical names - a symlink whose target is outside the destination, followed by a regular file - writes through t...

CVE-2026-19693

extract-zip through 2.0.1 containment-checks only the parent directory of each archive entry and never the entry's own final path component, so an archive containing two entries with identical names - a symlink whose target is outside the destination, followed by a regular file - writes through t...

CVE-2026-19693 extract-zip arbitrary file write outside the destination directory via a symlink at the final path component

extract-zip through 2.0.1 containment-checks only the parent directory of each archive entry and never the entry's own final path component, so an archive containing two entries with identical names - a symlink whose target is outside the destination, followed by a regular file - writes through t...