542061 matches found
The vulnerability of the Webasyst content management system and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.
The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...
The vulnerability of the Webasyst content management system and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.
The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...
The vulnerability of the Webasyst content management system and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.
The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...
The vulnerability of the CodeScoring software development platform lies in its inability to eliminate special elements from the template creation mechanism, allowing attackers to execute arbitrary code.
The vulnerability of the CodeScoring software development platform lies in the lack of measures to neutralize special elements within the template creation mechanism. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the FOQUZ platform, related to the lack of measures taken to protect the SQL query structure, allows attackers to execute arbitrary code.
The vulnerability of the FOQUZ platform is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
CVE-2026-106583
Versions of OpenSSH prior to 10.6 are vulnerable to an injection flaw where the $ or ** characters can occur in a command-line username. This vulnerability is associated with CWE-99 (Improper Control of Resource Identifiers). No specific exploit details or in-the-wild exploitation information are...
sqlmap
sqlmap sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester, and a broad range of switche...
kwetza
Introduction By Chris Le Roy @brompwnie [email protected] Kwetza is a tool that allows you to infect an existing Android application with a Meterpreter payload. What does it do? Kwetza infects an existing Android application with either custom or default payload templates to avoid detection ...
dns-rebind-toolkit
DNS Rebind Toolkit Demo | Security Advisory | Included Payloads | FAQ DISCLAIMER: This software is for educational purposes only. This software should not be used for illegal activity. The author is not responsible for its use. Don't be a dick. DNS Rebind Toolkit is a frontend JavaScript framewor...
Pybelt
NOTE: This project is no longer updated, this will be the last push to this project, if you would like more info, feel free to ping me on Twitter: @staysalty Pybelt Pybelt is an open source hackers tool belt complete with: A port scanner SQL injection scanner Dork checker Hash cracker Hash type...
hollows_hunter
hollowshunter Hollows Hunter is a command-line application based on PE-sieve passive memory scanner. Recognizes and dumps a variety of potentially malicious implants replaced/implanted PEs, shellcodes, hooks, in-memory patches. While in case of PE-sieve you can select the process only by its PID,...
Research_Successful_Errors
Successful Errors: 新的代码注入和 SSTI 技术 !NOTE 这是基于我在发布 SSTImap 1.3.1 版本之前所展示的结果撰写的白皮书第二版。 进一步的改进将在稍后的时间以该研究 1.2 版本的形式适应此格式。 Payloads 可打印白皮书 幻灯片 某些类别的漏洞乍一看可能非常著名且相当明显。似乎所有可能的技术都已为人所知，因此只有针对不常见情况的 payload 才可能被发现。 服务器端模板注入 （SSTI ）和代码注入 通常被认为是这些众所周知的类别。...
CVE-2018-11510
Un par de exploits para CVE-2018-11510 de Kyle Lovett @SquirrelBuddha y yo mismo Matthew Fulton/@haqur. Aprovecha una inyección de comandos no autenticada para obtener una shell root. El módulo de metasploit tiene un payload separado incluido en el repositorio. Veré si puedo incluirlos mediante u...
testenv
SQL injection test environment A collection of web pages vulnerable to SQL injection flaws and more: conf/ - operating system configuration files used by deployment.sh. dbs/ - standalone databases for some database management systems e.g. Microsoft Access. libs/ - web API libraries to connect to...
testenv
SQL 注入测试环境 一组存在 SQL 注入漏洞及其他缺陷的网页： conf/ - 由 deployment.sh 使用的操作系统配置文件。 dbs/ - 某些数据库管理系统（如 Microsoft Access）的独立数据库。 libs/ - 用于连接数据库管理系统、执行所提供的语句并返回其输出的 Web API 库。 schema/ - 用于创建测试数据库、测试表并向其中填充测试条目的 SQL。 其他目录 - 针对每种数据库管理系统的易受攻击页面。 deployment.sh - 一个 bash 脚本，用于从零开始部署一台功能完备的 Linux（Debian 或...
CVE-2021-26084
CVE-2021-26084 CVE-2021-26084 Inyección OGNL en Confluence...
CVE-2023-34362
CVE-2023-34362 影响MOVEit Transfer的CVE-2023-34362的POC 技术分析 该漏洞的技术根本原因分析可在我们的博客中找到： https://www.horizon3.ai/moveit-transfer-cve-2023-34362-deep-dive-and-indicators-of-compromise/ 摘要 此POC利用SQL注入获取系统管理员API访问令牌，然后利用该访问权限滥用反序列化调用以实现远程代码执行。...
cve-2022-26134
CVE-2022-26134 由 1vere$k 提供 只是针对 Atlassian Jira 漏洞的简单 PoC。允许未授权用户在服务器上执行代码。 CVE-2022-26134 - OGNL 注入漏洞。 一个概念验证脚本，利用了影响 Atlassian Confluence 7.18 及更低版本产品的远程代码执行漏洞。该 OGNL 注入漏洞允许未认证用户在 Confluence Server 或 Data Center 实例上执行任意代码。 Payload...