CVE-2026-75005 Apache APISIX: Unauthenticated CPU-exhaustion DoS

Inefficient Algorithmic Complexity vulnerability in Apache APISIX. A single small request can pin a gateway worker at 100% CPU for an extended period in graphql-limit-count routes. This issue affects Apache APISIX: 3.17.0. Users are recommended to upgrade to version 3.18.0, which fixes the issue...

CVE-2026-75005

Apache APISIX 3.17.0 is affected by an Inefficient Algorithmic Complexity vulnerability in graphql-limit-count routes, rated CVSS 4.0 8.7 (HIGH) . A single small request can pin a gateway worker at 100% CPU for an extended period, causing a denial-of-service. The attack requires no authentication...

CVE-2024-37843-POC

CVE-2024-37843-POC CVE-2024-37843 的 POC。Craft CMS 基于时间盲注 SQL 注入 详情见博客 POC root@kitploit: curl -X POST '/api/' -H 'Content-Type:application/json' -d '"query":"query IntrospectionQuery assetsorderBy: "assets.volumeId -- \\ \n \n LIMIT 5 AS subquery\nINNER JOIN assets assets ON assets.id =...

CVE-2022-41876

CVE-2022-41876 - Divulgación de información de usuarios en eZ Platform Surgió una vulnerabilidad en eZ Platform que permite a un usuario no autenticado acceder al hash de la contraseña de cada colaborador. Este PoC enumera todas las posibles rutas de GraphQL que conducen a un objeto 'User' y lueg...

WPEngine WPGraphQL 0.2.3 - Unauthenticated User Information Disclosure

An issue was discovered in the WPGraphQL 0.2.3 plugin for WordPress. By querying the 'users' RootQuery, it is possible, for an unauthenticated attacker, to retrieve all WordPress users details such as email address, role, and username. id: CVE-2019-9880 info: name: WPEngine WPGraphQL 0.2.3 -...

GitLab GraphQL API User Enumeration

An unauthenticated remote attacker can leverage this vulnerability to collect registered GitLab usernames, names, and email addresses. id: CVE-2021-4191 info: name: GitLab GraphQL API User Enumeration author: zsusac severity: medium description: An unauthenticated remote attacker can leverage thi...

Stash < 0.26.0 - SQL Injection

Stash up to v0.25.1 was discovered to contain a SQL injection vulnerability via the sort parameter. id: CVE-2024-32231 info: name: Stash Stash" tags: cve,cve2024,stash,sqli,vuln http: - raw: - | POST /graphql HTTP/1.1 Host: Hostname Content-type: application/json...

SkyWalking SQLI

When using H2/MySQL/TiDB as Apache SkyWalking storage and a metadata query through GraphQL protocol, there is a SQL injection vulnerability which allows access to unexpected data. Apache SkyWalking 6.0.0 to 6.6.0, 7.0.0 H2/MySQL/TiDB storage implementations don't use the appropriate way to set SQ...

Gitlab CE/EE 13.4 - 13.6.2 - Information Disclosure

GitLab CE and EE 13.4 through 13.6.2 is susceptible to Information disclosure via GraphQL. User email is visible. An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the affected site. id: CVE-2020-26413 info:...

SuiteCRM Unauthenticated Graphql Introspection

Graphql Introspection is enabled without authentication, exposing the scheme defining all object types, arguments, and functions. id: CVE-2023-47643 info: name: SuiteCRM Unauthenticated Graphql Introspection author: isacaya severity: medium description: | Graphql Introspection is enabled without...

GitLab CE/EE - GraphQL @gl_introduced Arbitrary Method Invocation

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.11.11, 19.0 before 19.0.8, 19.1 before 19.1.6, and 19.2 before 19.2.4 that under certain conditions could allow an unauthenticated user to remotely modify or delete public projects and user data via a GraphQ...

ApiHunter

Support Development If this project helps your work, support ongoing maintenance and new features. ETH Donation Wallet 0x11282eE5726B3370c8B480e321b3B2aA13686582 Scan the QR code or copy the wallet address above. 🎯 ApiHunter 📺 Video Demo Click to watch the full demo on YouTube 🖥️ Desktop App...

CVE-2026-23745-via-graphql-DEMO

This repository does not have a README...

CVE-2025-27407

CVE-2025-27407 GitLab Podman Lab Laboratorio mínimo solo local para demostrar que la ruta HTTP de Direct Transfer de GitLab alcanza el cargador de esquemas de introspección vulnerable de graphql-ruby. El laboratorio ejecuta un contenedor GitLab CE vulnerable; el script del PoC inicia su servidor...

graphicator

Graphicator Graphicator è un "raschietto" / estrattore per GraphQL. Lo strumento itera sul documento di introspezione restituito dall'endpoint GraphQL di destinazione, e poi ristruttura lo schema in una forma interna in modo da poter ricreare le query supportate. Quando tali query vengono create,...

GraphQLGrapper

امتداد لجمع دوال GraphQL من سجل طلبات Burpsuite طريقة الاستخدام ستحتاج إلى Jython standalone jar 1. انتقل إلى تبويب Extensions 2. انقر على Add 3. اختر GraphQLGrapper.py 4. الآن يمكنك استخدامه بالنقر بزر الماوس الأيمن على الهدف واختيار الامتداد النتيجة...

hulak

Client API nativo Git con segreti crittografati. REST · GraphQL · OAuth Avvio rapido • Esploratore GraphQL • Struttura del progetto • Documentazione Esegui una richiesta, un'intera directory o resta in modalità interattiva root@kitploit: hulak run ./requests/ Hulak esegue i file di richiesta...

aura-inspector

aura-inspector Este não é um produto oficialmente suportado pelo Google. Este projeto não é elegível para o Programa de Recompensas por Vulnerabilidades de Software de Código Aberto do Google. Introdução aura-inspector é um canivete suíço para testes do Salesforce Experience Cloud. Ele facilita a...

CVE-2026-24136-Lab

CVE-2026-24136 - Saleor GraphQL IDOR / Unauthenticated PII Exfiltration Übersicht...

CVE-2021-4191_Exploits

CVE-2021-4191Explorações pip install python-graphql-client Uso: python3 gitlabenum.py --rurl http://10.0.0.6/api/graphql Direitos autorais: https://www.rapid7.com/blog/post/2022/03/03/cve-2021-4191-gitlab-graphql-api-user-enumeration-fixed/...