Lucene search
+L

198 matches found

Kitploit
Kitploit
added 2020/09/07 2:38 a.m.239 views

SQLMap v1.4.9 - Automatic SQL Injection And Database Takeover Tool

SQLMap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester and a broad range of switches lastin...

8.5AI score
SaveExploits0References9
Kitploit
Kitploit
added 2019/10/03 12:0 p.m.122 views

SQLMap v1.3.10 - Automatic SQL Injection And Database Takeover Tool

SQLMap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester and a broad range of switches lastin...

8.5AI score
SaveExploits0References20
n0where
n0where
added 2018/11/12 5:20 a.m.89 views

Automatic SQL injection and database takeover tool: sqlmap

sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester and a broad range of switches lastin...

SaveExploits0References2
Kitploit
Kitploit
added 2018/09/07 12:57 p.m.100 views

SQLMap v1.2.9 - Automatic SQL Injection And Database Takeover Tool

SQLMap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester and a broad range of switches lastin...

8.5AI score
SaveExploits0References20
CNVD
CNVD
added 2018/08/28 12:0 a.m.7 views

SAP MaxDB (liveCache SQL Injection Vulnerability)

SAP MaxDB liveCache is a German SAP SAP company's set of database management system. The system supports running on Windeows, Linux and Unix and other platforms. A SQL injection vulnerability exists in SAP MaxDB liveCache versions 7.8 and 7.9, which can be exploited by an attacker to execute...

7.2CVSS7.5AI score0.01702EPSS
SaveExploits0References1
OSV
OSV
added 2018/08/14 4:29 p.m.7 views

CVE-2018-2450

SAP MaxDB liveCache, versions 7.8 and 7.9, allows an attacker who gets DBM operator privileges to execute crafted database queries and therefore read, modify or delete sensitive data from database...

7.2CVSS5.9AI score0.01702EPSS
SaveExploits0References3
NVD
NVD
added 2018/08/14 4:29 p.m.22 views

CVE-2018-2450

SAP MaxDB liveCache, versions 7.8 and 7.9, allows an attacker who gets DBM operator privileges to execute crafted database queries and therefore read, modify or delete sensitive data from database...

7.2CVSS7.1AI score0.01702EPSS
SaveExploits0References3
Prion
Prion
added 2018/08/14 4:29 p.m.18 views

Code injection

SAP MaxDB liveCache, versions 7.8 and 7.9, allows an attacker who gets DBM operator privileges to execute crafted database queries and therefore read, modify or delete sensitive data from database...

6.5CVSS7AI score0.01702EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2018/08/14 4:0 p.m.60 views

CVE-2018-2450

CVE-2018-2450 affects SAP MaxDB (liveCache), specifically versions 7.8 and 7.9. The issue allows an attacker who has DBM operator privileges to execute crafted database queries, leading to reading, modification, or deletion of sensitive data from the database. The root cause is described as a SQL...

7.2CVSS7AI score0.01702EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2018/08/14 4:0 p.m.24 views

CVE-2018-2450

SAP MaxDB liveCache, versions 7.8 and 7.9, allows an attacker who gets DBM operator privileges to execute crafted database queries and therefore read, modify or delete sensitive data from database...

7.1AI score0.01702EPSS
SaveExploits0References3
CNVD
CNVD
added 2018/05/22 12:0 a.m.7 views

SAP MaxDB ODBC Remote Code Injection Vulnerability

SAP MaxDB is Germany SAP SAP company's set of cross-platform, ANSI SQL-92-compatible relational database management system. ODBC driver is one of the ODBC connection driver. A security vulnerability exists in the SAP MaxDB ODBC driver prior to version 7.9.09.07. An attacker can exploit this...

9.8CVSS7.7AI score0.01828EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/05/14 12:0 a.m.21 views

SAP MaxDB Data Link Properties Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of SAP MaxDB. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of UDL fil...

6.8CVSS5.7AI score0.01828EPSS
SaveExploits0References1
OSV
OSV
added 2018/05/09 8:29 p.m.6 views

CVE-2018-2418

SAP MaxDB ODBC driver all versions before 7.9.09.07 allows an attacker to inject code that can be executed by the application. An attacker could thereby control the behavior of the application...

9.8CVSS5.8AI score0.01828EPSS
SaveExploits0References3
Prion
Prion
added 2018/05/09 8:29 p.m.16 views

Code injection

SAP MaxDB ODBC driver all versions before 7.9.09.07 allows an attacker to inject code that can be executed by the application. An attacker could thereby control the behavior of the application...

7.5CVSS9.4AI score0.01828EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2018/05/09 8:29 p.m.19 views

CVE-2018-2418

SAP MaxDB ODBC driver all versions before 7.9.09.07 allows an attacker to inject code that can be executed by the application. An attacker could thereby control the behavior of the application...

9.8CVSS6.6AI score0.01828EPSS
SaveExploits0References3
CVE
CVE
added 2018/05/09 8:0 p.m.44 views

CVE-2018-2418

SAP MaxDB ODBC driver (all versions before 7.9.09.07) is affected by CVE-2018-2418, enabling an attacker to inject code that can be executed by the application and thereby take control of the vulnerable process. Affected component: SAP MaxDB ODBC driver; root cause is a vulnerability in that driv...

9.8CVSS9.4AI score0.01828EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2018/05/09 8:0 p.m.27 views

CVE-2018-2418

SAP MaxDB ODBC driver all versions before 7.9.09.07 allows an attacker to inject code that can be executed by the application. An attacker could thereby control the behavior of the application...

5.5CVSS9.5AI score0.01828EPSS
SaveExploits0References3
Kitploit
Kitploit
added 2017/08/28 9:13 p.m.109 views

SQLMap v1.1.8 - Automatic SQL Injection And Database Takeover Tool

SQLMap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester and a broad range of switches lastin...

8.5AI score
SaveExploits0References20
NVD
NVD
added 2015/06/02 2:59 p.m.20 views

CVE-2015-2282

Stack-based buffer overflow in the LZC decompression implementation CsObjectInt::CsDecomprLZC function in vpa106cslzc.cpp in SAP MaxDB 7.5 and 7.6, Netweaver Application Server ABAP, Netweaver Application Server Java, Netweaver RFC SDK, GUI, RFC SDK, SAPCAR archive tool, and other products allows...

7.5CVSS8.3AI score0.03518EPSS
SaveExploits1References6
NVD
NVD
added 2015/06/02 2:59 p.m.28 views

CVE-2015-2278

The LZH decompression implementation CsObjectInt::BuildHufTree function in vpa108csulzh.cpp in SAP MaxDB 7.5 and 7.6, Netweaver Application Server ABAP, Netweaver Application Server Java, Netweaver RFC SDK, GUI, RFC SDK, SAPCAR archive tool, and other products allows context-dependent attackers t...

5CVSS6.5AI score0.02131EPSS
SaveExploits1References6
Rows per page
Query Builder