CVE-2020-11579

CVE-2020-11579 Introducción PHPKB 9.0 Enterprise Edition base de datos MySQL está afectado por una divulgación arbitraria de archivos no autenticada a través de un servidor MySQL malicioso. Un atacante remoto puede leer cualquier archivo en un host víctima remoto con privilegios de servidor web p...

CVE-2024-34693

CVE-2024-34693 Exploit Este repositorio contiene un script sofisticado en Python para explotar la vulnerabilidad CVE-2024-34693 en Apache Superset. El script configura un servidor MySQL falso y crea una conexión MariaDB maliciosa para exfiltrar el contenido de un archivo específico del sistema...

adminer_CVE-2021-43008

CVE-2021-43008 — Vulnerabilidad Adminer Lectura arbitraria de archivos a través de un servidor MySQL malicioso 1. ¿Qué es Adminer? Adminer es una herramienta web PHP que permite administrar fácilmente bases de datos MySQL, PostgreSQL, SQLite o SQL Server. Se despliega comúnmente como una...

Adminer-CVE-2021-43008

Adminer CVE-2021-43008 PoC Exploit de prueba de concepto para CVE-2021-43008 que afecta a Adminer. Esta vulnerabilidad permite que un servidor MySQL malicioso solicite archivos locales arbitrarios desde la máquina cliente cuando LOAD DATA LOCAL INFILE está habilitado. El repositorio contiene...

Rogue-MySql-Server

Rogue-MySql-Server Edita el script y cambia el archivo a leer y el puerto del servidor si lo deseas. Ejecuta el script y conéctate a tu servidor para leer el archivo desde el lado del cliente. Lee mysql.log para ver el contenido del archivo leído...

CVE-2026-34308

CVE-2026-34308: Denegación de servicio en MySQL Server componente JSON Boletín oficial del proveedor: Oracle Critical Patch Update Advisory — April 2026. Resumen según el CVE publicado Vulnerabilidad en Oracle MySQL Server componente: Server: JSON. Versiones afectadas compatibles: 8.0.0–8.0.45 ,...

CVE-2024-34693

CVE-2024-34693: Lectura Arbitraria de Archivos del Servidor en Apache Superset Vulnerabilidad de validación de entrada incorrecta en Apache Superset, que permite a un atacante autenticado crear una conexión MariaDB con localinfile habilitado. Al habilitar localinfile en el cliente MySQL/MariaDB d...

CVE-2025-70828

CVE-2025-70828 Resumen Se descubrió una vulnerabilidad de lectura arbitraria de archivos en Datart v1.0.0-rc.3. La aplicación no valida correctamente la URL de conexión JDBC durante la configuración de la fuente de datos. Detalles de la vulnerabilidad Tipo de vulnerabilidad: Validación de entrada...

CVE-2026-90935 Froxlor before 2.3.7 Authorization Bypass via Mysqls.add API

Froxlor before 2.3.7 fails to validate the mysqlserver parameter against a customer's allowedmysqlserver allowlist in the Mysqls.add API command. Attackers can supply a disallowed server index to create MySQL databases and users on forbidden servers, bypassing per-customer access controls...

Astra Linux – Vulnerability in Mariadb 10.3

Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. The supported versions affected are 5.7.43 and earlier, 8.0.34 and earlier, and 8.1.0 and earlier. This easily exploitable vulnerability allows a high-privilege attacker with network access via multiple protocols to...

CVE-2026-27876

CVE-2026-27876: Escritura Arbitraria de Archivos en Expresiones SQL de Grafana que Deriva en RCE CVSS 9.1 Crítico | Escritura Arbitraria de Archivos | Ejecución Remota de Código Demo https://github.com/user-attachments/assets/c84a4b63-7928-4dba-a069-3bafa036ce56 Resumen La función de Expresiones...

Unity Linux 20.1070e Security Update: mysql (UTSA-2026-022361)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-022361 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: JSON. Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0...

Unity Linux 20.1070e Security Update: mysql (UTSA-2026-022363)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-022363 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.0-8.0.44, 8.4.0-8.4.7 and...

Unity Linux 20.1070e Security Update: mysql (UTSA-2026-022289)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-022289 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easi...

Unity Linux 20.1070e Security Update: mysql (UTSA-2026-022266)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-022266 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easi...

Unity Linux 20.1070e Security Update: mysql (UTSA-2026-022350)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-022350 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easi...

Unity Linux 20.1070e Security Update: mysql (UTSA-2026-022292)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-022292 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: DML. Supported versions that are affected are 8.0.0-8.0.45. Easily exploitable...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql (UTSA-2026-106203)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106203 advisory. Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Replication. Supported versions that are affected are MySQL Server:...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql (UTSA-2026-106184)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106184 advisory. Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Replication. Supported versions that are affected are MySQL Server:...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql (UTSA-2026-106165)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106165 advisory. Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: DDL. Supported versions that are affected are MySQL Server: 8.4.0-8.4.10,...