Lucene search
+L

7044 matches found

Kitploit
Kitploit
added 2026/09/13 5:59 p.m.10 views

CVE-2024-34693

CVE-2024-34693 Exploit This repository contains a sophisticated Python script to exploit the CVE-2024-34693 vulnerability in Apache Superset. The script sets up a rogue MySQL server and creates a malicious MariaDB connection to exfiltrate the content of a specified file from the target system...

6.8CVSS6.9AI score0.01584EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/13 4:17 p.m.7 views

CVE-2023-39593

MariaDB 10.5 Authenticated Code execution-sysexec This guide provides detailed instructions to exploit a User-Defined Function UDF vulnerability in MariaDB on a remote server. These steps include downloading and executing malicious code on a vulnerable database system. Warning: This document is f...

5.6CVSS6.5AI score0.00726EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/13 3:49 p.m.11 views

CVE-2021-27928-POC

CVE-2021-27928 POC Description A remote code execution issue was discovered in MariaDB 10.2 before 10.2.37, 10.3 before 10.3.28, 10.4 before 10.4.18, and 10.5 before 10.5.9; Percona Server through 2021-03-03; and the wsrep patch through 2021-03-03 for MySQL. An untrusted search path leads to eval...

9CVSS7.7AI score0.38436EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/09/13 10:54 a.m.6 views

METATRON

METATRON AI-powered penetration testing assistant using local LLM on linux Parrot OS 🔱 METATRON AI-Powered Penetration Testing Assistant 📌 What is Metatron? Metatron is a CLI-based AI penetration testing assistant that runs entirely on your local machine — no cloud, no API keys, no subscriptions...

6.1AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/13 7:12 a.m.9 views

mariadb-13-rce-lab

MariaDB 13.0.1-rc RCE Lab Remote code execution on the unmodified, stock MariaDB 13.0.1-rc Docker image as uid 999 mysql. Two exploit variants: Variant| File| Requirements| Notes ---|---|---|--- Pure SQL recommended| exploitpuresql.py| a low-priv MariaDB account + TCP| no host access, no docker, ...

6.4AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/13 5:27 a.m.5 views

Oracle-mysql-CVE-2012-2122

MySQL Authentication Bypass Vulnerability CVE-2012-2122 When connecting to MariaDB/MySQL, the entered password is compared with the expected correct password. Due to improper handling, even if memcmp returns a non-zero value, MySQL may still consider the two passwords as identical. That is, as lo...

5.1CVSS7.8AI score0.965EPSS
SaveExploits12
Kitploit
Kitploit
added 2026/09/13 5:23 a.m.7 views

CVE-2022-24124

POC for CVE-2022-24124 Exploit Code for CVE-2022-24124 aka Casdoor SQL Injection Exploit Links: ExploitDB-50792 PacketStormSecurity Expected outcome: Dump SQL database version on host running Casdoor 1.13.1 Intended only for educational and testing in corporate environments. Exploit Usage...

7.5CVSS7.5AI score0.55295EPSS
SaveExploits9
Nuclei
Nuclei
added 2026/09/13 2:04 a.m.88 views

Akkadian Provisioning Manager - Information Disclosure

Akkadian Provisioning Manager is susceptible to information disclosure. The restricted shell provided can be escaped by abusing the Edit MySQL Configuration command. This command launches a standard VI editor interface which can then be escaped. id: CVE-2021-31581 info: name: Akkadian Provisionin...

7.9CVSS5.6AI score0.01217EPSS
SaveExploits1References5
Kitploit
Kitploit
added 2026/09/12 11:24 p.m.8 views

CVE-2021-27928

Información root@kitploit: Exploit Title: MariaDB 10.2 /MySQL - 'wsrepprovider' OS Command Execution Date: 03/18/2021 Exploit Author: Central InfoSec Version: MariaDB 10.2 antes de 10.2.37 10.3 antes de 10.3.28 10.4 antes de 10.4.18 10.5 antes de 10.5.9 Percona Server hasta 2021-03-03; y el parch...

9CVSS7.7AI score0.38436EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/09/12 1:03 p.m.7 views

Mysql_CVE-2024-27766

Exploit Reproduction Guide affected product version MariaDB 11.1 This guide provides step-by-step instructions to reproduce a User-Defined Function UDF attack on a database system. Please note that this exploit may work on some systems, but it might not function correctly on 64-bit architectures ...

5.7CVSS6.1AI score0.01262EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/11 5:00 p.m.11 views

webui

Copyright C 2003-2021 Young Consulting, Inc This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or at your option any later version. This program is...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/11 11:33 a.m.7 views

Magnohost-Vulnerabilities-pentest

MagnoHost-pentest Pentest en el proveedor de hosting MagnoHost y la infraestructura de MeteorCloud. Hallazgos: MariaDB expuesto en 6 servidores CVSS 9.8, credenciales por defecto de OmniDialer con acceso total, Wings CVE-2024-27102 9.9, Grafana expuesto, suplantación DMARC. Solo curlcffi + Python...

9.9CVSS8.2AI score0.0055EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/11 3:30 a.m.98 views

exist

EXIST EXternal Information aggregation System against cyber Threat ⚠️ This repository is unmaintained / archived. Security issues will not be fixed. EXIST is a web application for aggregating and analyzing CTI cyber threat intelligence. EXIST is written by the following software. Python 3 Django...

5.9AI score
SaveExploits0References9
Kitploit
Kitploit
added 2026/09/10 11:39 p.m.6 views

CVE-2021-27928

CVE-2021-27928 En este repositorio, encontrarás una prueba de concepto de la explotación de la vulnerabilidad CVE-2021-27928 a través de un contenedor docker. root@kitploit: Exploit Title: MariaDB 10.2 /MySQL - 'wsrepprovider' OS Command Execution Date: 03/18/2021 Exploit Author: Central InfoSec...

9CVSS7.9AI score0.38436EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/09/10 4:03 p.m.7 views

CVE-2024-36039_PoC

CVE-2024-36039: PyMySQL Object Injection to SQL Injection PoC A complete, reproducible Proof of Concept PoC laboratory for CVE-2024-36039 , demonstrating how an Object Injection vulnerability in PyMySQL versions = 1.1.0 can be escalated to a full SQL Injection using MariaDB's ODBC Escape Sequence...

6.3CVSS7AI score0.00691EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/09 10:19 p.m.9 views

CVE-2026-3494_Verfication

CVE-2026-3494 - MariaDB serveraudit Logging Verification PoC This project provides a specialized environment to verify and analyze a potential audit logging bypass in the MariaDB serveraudit plugin when specific inline comments , -- are used within SQL queries. Key Findings Logging Omission in...

5.3CVSS5.7AI score0.00274EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/09 8:53 p.m.9 views

CVE-2026-22730-Scanner

CVE-2026-22730 Scanner & Exploit – Spring AI MariaDB Vector Store SQL Injection A professional security assessment tool for CVE-2026-22730 – a critical SQL injection vulnerability discovered in Spring AI's MariaDB vector store. This tool allows authorised penetration testers and security...

8.8CVSS7.9AI score0.00522EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/09 6:50 p.m.12 views

CVE-2026-32710

CVE-2026-32710 Heap buffer overflow in MariaDBJSONSCHEMAVALID → persistent privilege escalation → UDF RCE | ---|--- Affected| MariaDB 11.4.x confirmed on 11.4.9 Bug| OOB write in jsongetnormalizedstring — strncpy into 128-byte DYNAMICSTRING with no bounds check Impact| SELECT-only user → ALL...

9.9CVSS7.8AI score0.00856EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/09 9:46 a.m.9 views

CVE-2018-10118

CVE-2018-10118 herramienta de explotación de CVE-2018-10118...

4.8CVSS6.2AI score0.02795EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/08 10:37 p.m.10 views

CVE-2021-39379

OPENSIS 8.0 SQL INJECTION VULNERABILITY CVE-2021-39379 A SQL Injection vulnerability exists in version 8.0 of openSIS when MySQL MariaDB is being used as the application database. A malicious attacker can issue SQL commands to the MySQL MariaDB database through the vulnerable passwordstnid...

9.8CVSS8.2AI score0.03704EPSS
SaveExploits1
Rows per page
Query Builder