Atom.CMS 2.0 - SQL Injection

Atom.CMS 2.0 is vulnerable to SQL Injection via Atom.CMSadminuploads.php which allows an attacker to execute arbitrary SQL commands. id: CVE-2022-28033 info: name: Atom.CMS 2.0 - SQL Injection author: ritikchaddha severity: critical description: | Atom.CMS 2.0 is vulnerable to SQL Injection via...

Oracle Fusion Middleware WebCenter Sites 12.2.1.3.0 - SQL Injection

The Oracle WebCenter Sites component of Oracle Fusion Middleware 12.2.1.3.0 is susceptible to SQL injection via an easily exploitable vulnerability that allows low privileged attackers with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks of this vulnerability can...

Online Fire Reporting System v1.0 - SQL injection

Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/requests/takeaction.php?id=. id: CVE-2022-31984 info: name: Online Fire Reporting System v1.0 - SQL injection author: theamanrawat severity: high description: | Online Fire Reporting System v1.0 is vulnerable to SQL...

Docassemble - Local File Inclusion

Docassemble is an expert system for guided interviews and document assembly. The vulnerability allows attackers to gain unauthorized access to information on the system through URL manipulation. It affects versions 1.4.53 to 1.4.96. The vulnerability has been patched in version 1.4.97 of the mast...

LiteLLM < 1.25.0 - Remote Code Execution

LiteLLM before 1.25.0 allows authenticated users with the master API key to execute arbitrary Python code through the /guardrails/testcustomcode endpoint intended for custom guardrail testing. The endpoint’s insufficient filtering mechanisms can be bypassed, allowing attackers to abuse Python’s...

pgAdmin < 6.17 - Unauthenticated Remote Code Execution

pgAdmin prior to 6.17 contains an insecure HTTP API caused by improper access control, letting unauthenticated users execute arbitrary external utilities via path manipulation, exploit requires no authentication. id: CVE-2022-4223 info: name: pgAdmin 6.17 - Unauthenticated Remote Code Execution...

Cobbler - Authentication Bypass

Cobbler versions 2.6.11+, but code inspection suggests at least 2.0.0+ and possibly even older versions, may be vulnerable to an authentication bypass vulnerability in XMLRPC API /cobblerapi that can result in privilege escalation, data manipulation or exfiltration, and LDAP credential harvesting...

Spam protection, AntiSpam, FireWall by CleanTalk < 5.153.4 - Unauthenticated Blind SQL Injection

It was possible to exploit an Unauthenticated Time-Based Blind SQL Injection vulnerability in the Spam protection, AntiSpam, FireWall by CleanTalk WordPress Plugin before 5.153.4. The updatelog function in lib/Cleantalk/ApbctWP/Firewall/SFW.php included a vulnerable query that could be injected v...

Doctor Appointment System 1.0 - SQL Injection

Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via firstname parameter. id: CVE-2021-27320 info: name: Doctor Appointment System 1.0 - SQL Injection author: theamanrawat severity: high description: | Blind S...

Doctor Appointment System 1.0 - SQL Injection

SQL injection in admin.php in doctor appointment system 1.0 allows an unauthenticated attacker to insert malicious SQL queries via username parameter at login page. id: CVE-2021-27314 info: name: Doctor Appointment System 1.0 - SQL Injection author: theamanrawat severity: critical description: |...

Garage Management System 1.0 - SQL Injection

Garage Management System 1.0 contains a SQL injection vulnerability in /login.php via manipulation of the argument username with input [email protected]' AND SELECT 6427 FROM SELECTSLEEP5LwLu AND 'hsvT'='hsvT. An attacker can possibly obtain sensitive information from a database, modify data, and/or execut...

Online Fire Reporting System v1.0 - SQL injection

Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/classes/Master.php?f=deleteinquiry. id: CVE-2022-31978 info: name: Online Fire Reporting System v1.0 - SQL injection author: theamanrawat severity: critical description: | Online Fire Reporting System v1.0 is vulnerable to...

Bloofox v0.5.2.1 - SQL Injection

bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the pid parameter at admin/index.php?mode=settings&page=plugins&action=edit. id: CVE-2023-34754 info: name: Bloofox v0.5.2.1 - SQL Injection author: ritikchaddha severity: critical description: | bloofox v0.5.2.1 was...

XStream 1.4.18 - Remote Code Execution

XStream 1.4.18 is susceptible to remote code execution. An attacker can execute commands of the host by manipulating the processed input stream, thereby making it possible to obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the...

CVE-2019-13498

CVE-2019-13498 漏洞标题：MITM - 缺失HSTS导致凭据窃取和内容篡改 日期：07/10/2019 漏洞作者：Furqan Khan 厂商主页：https://www.oneidentity.com/ 软件链接：https://www.oneidentity.com/products/cloud-access-manager/ 版本：8.1.3 测试环境：Kali Linux , Windows 7 ,Ubantu 16.04 为了进行MITM攻击并窃取用户名、密码和OTP，我们使用了bettercap...

CVE-2021-43798

CVE-2021-43798 Grafana 目录遍历 用于利用 Grafana 目录遍历的简易程序 安装 gem install httparty gem install colorize gem install timeout ruby cve-2021-43798.rb...

fatcat

fatcat 本工具设计用于操作FAT文件系统，以便进行探索、提取、修复、恢复和取证分析。目前支持FAT12、FAT16和FAT32。 教程与示例 构建与安装 你可以这样构建 fatcat： mkdir build cd build cmake .. make 然后安装它： make install 探索 使用 fatcat Fatcat 将镜像作为参数： fatcat disk.img options 注意：根据你的构建方式，可能需要在disk.img 之前指定选项，即 fatcat options disk.img 你可以使用 -O...

CVE-2025-32463

README - sudo-chwoot.sh 描述 此脚本是一个概念验证（PoC），演示了一种利用 sudo 中理论漏洞（例如 CVE-2025-32463）的权限提升技术。 该 PoC 通过利用 -R（chroot）功能和自定义的 nsswitch.conf 配置，强制 sudo 加载一个被操纵的 .so 库。 注意：此脚本仅用于研究或在受控环境中测试。不得在生产系统或非自己拥有或管理的机器上执行。 目标 创建一个包含自定义 NSS 配置的临时环境。 在 chroot 结构中注入一个 .so 库。 使用 sudo -R 强制加载该库，并以高权限执行命令。 主要修改...

WhoWasI

WhoWasI Esta aplicación es capaz de suplantar a cualquier usuario con sesión iniciada y ejecutar comandos en el contexto del usuario suplantado. Publicado como código abierto por NCC Group Plc - http://www.nccgroup.com/ Desarrollado por: Chris Thomas, chris dot Thomas at nccgroup dot com...

Stompy

Stompy 一个PowerShell函数，用于对指定文件和目录执行时间戳篡改。该函数可以递归地修改目录中所有文件的时间戳。 更改单个文件或目录的时间戳。 递归地将时间戳应用于目录中的所有文件。 可选使用特定凭据访问远程路径或特权文件。 我已将Stompy移植到C、Python和Go，相关版本已链接在本仓库中，并附有自己的README。 C版本 Python版本 Go版本 用法 -Path：要修改时间戳的文件或目录的路径。 -NewTimestamp：要为文件或目录设置的新DateTime值。 -Credentials：（可选）如果需要指定其他用户的凭据。...