CVE-2023-49546

CVE-2023-49546 Customer Support System 1.0 - Vulnerabilità di SQL Injection nel parametro "email" durante l'operazione "savestaff" Descrizione : Una vulnerabilità di SQL Injection esiste nella versione 1 del Customer Support System. Un attaccante malintenzionato può inviare comandi SQL al databas...

Advanced-SQL-Injection-Cheatsheet

Cheat sheet per SQL Injection basata su errori MySQL Questa è probabilmente la vulnerabilità più semplice nell'ambito dell'attacco SQL Injection. Un attaccante può enumerare e dumpare il database MySQL sfruttando i messaggi di errore SQL a suo vantaggio. Rilevare la...

VulnNodeApp

VulnNodeApp Eine angreifbare Anwendung, die mit node.js, express server und ejs template engine erstellt wurde. Diese Anwendung ist ausschließlich für Bildungszwecke gedacht. Einrichtung Repository klonen root@kitploit: git clone https://github.com/4auvar/VulnNodeApp.git Anwendungseinrichtung:...

INT14107_CVE-2021-35042

CTF ब्लॉग परियोजना यह परियोजना Django में निर्मित CTF Capture The Flag में विशेषज्ञता वाली एक ब्लॉग प्रणाली है। विशेषताएँ पोस्ट लिखें, टिप्पणी करें। उपयोगकर्ता, श्रेणी प्रबंधित करें। सुरक्षा परीक्षण उपकरण exploitdump.py एकीकृत। स्थापना निर्देश 1. Python स्थापित करें: pip install -r requirements.t...

dvna

Damn Vulnerable NodeJS Application DVNA Damn Vulnerable NodeJS Application DVNA is a simple NodeJS application to demonstrate OWASP Top 10 Vulnerabilities and guide on fixing and avoiding these vulnerabilities. The fixes branch will contain fixes for the vulnerabilities. Fixes for vulnerabilities...

hackazon

Hackazon Hackazon is a free, vulnerable test site that is an online storefront built with the same technologies used in today’s rich client and mobile applications. Hackazon has an AJAX interface, strict workflows and RESTful API’s used by a companion mobile app providing uniquely-effective...

CVE-2024-34693

CVE-2024-34693 Exploit Questo repository contiene uno script Python sofisticato per sfruttare la vulnerabilità CVE-2024-34693 in Apache Superset. Lo script configura un server MySQL fasullo e crea una connessione MariaDB dannosa per esfiltrare il contenuto di un file specificato dal sistema...

CVE-2026-56704

Adminer before 5.4.3 inserts unsanitized database server version strings into script tags with valid CSP nonces without proper validation. Attackers controlling a rogue MySQL server can return crafted version strings that break out of the JavaScript context and execute arbitrary code, bypassing...

DEBIAN-CVE-2026-56704

Adminer before 5.4.3 inserts unsanitized database server version strings into script tags with valid CSP nonces without proper validation. Attackers controlling a rogue MySQL server can return crafted version strings that break out of the JavaScript context and execute arbitrary code, bypassing...

CVE-2022-31897

CVE-2022-31897 Data: 06/22/2022 Autore dell'exploit: Angelo Pio Amirante Homepage del fornitore: https://www.sourcecodester.com/ Link del software: https://www.sourcecodester.com/php/15344/zoo-management-system-phpoop-free-source-code.html Versione: 1.0...

CVE-2026-56704

Adminer before 5.4.3 inserts unsanitized database server version strings into script tags with valid CSP nonces without proper validation. Attackers controlling a rogue MySQL server can return crafted version strings that break out of the JavaScript context and execute arbitrary code, bypassing...

CVE-2026-56704 Adminer before 5.4.3 Cross-Site Scripting via MySQL Version String

Adminer before 5.4.3 inserts unsanitized database server version strings into script tags with valid CSP nonces without proper validation. Attackers controlling a rogue MySQL server can return crafted version strings that break out of the JavaScript context and execute arbitrary code, bypassing...

CVE-2026-56704 Adminer before 5.4.3 Cross-Site Scripting via MySQL Version String

Adminer before 5.4.3 inserts unsanitized database server version strings into script tags with valid CSP nonces without proper validation. Attackers controlling a rogue MySQL server can return crafted version strings that break out of the JavaScript context and execute arbitrary code, bypassing...

CVE-2026-56704

Adminer versions before 5.4.3 are vulnerable to cross-site scripting (XSS) caused by unsanitized database server version strings being inserted into [removed] tags that carry valid CSP nonces. An attacker who controls a rogue MySQL server can return a crafted version string that breaks out of the...

Linux Distros Unpatched Vulnerability : CVE-2026-56704

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Adminer before 5.4.3 inserts unsanitized database server version strings into script tags with valid CSP nonces without proper validation. Attackers controlling...

CVE-2025-50383

CVE-2025-50383 Descrição Um utilizador autenticado com baixos privilégios pode explorar esta vulnerabilidade ao enviar um pedido HTTP POST malicioso com um parâmetro orderby malicioso exemplo: orderby=IF1=1,SLEEP5,1. Isto pode desencadear uma injeção SQL cega baseada em tempo, resultando em...

Astra Linux – Vulnerability in Mariadb 10.3

Vulnerability in the MySQL Client product of Oracle MySQL component: Client: mysqldump. The supported versions affected are 8.0.0–8.0.41, 8.4.0–8.4.4, and 9.0.0–9.2.0. This vulnerability is difficult to exploit; it allows low-privilege attackers with network access via multiple protocols to...

legba

legba Join the project community on our server! Legba is a multiprotocol credentials bruteforcer / password sprayer and enumerator built with Rust and the Tokio asynchronous runtime in order to achieve better performances and stability while consuming less resources than similar tools. Key Featur...

hashview

Hashview v0.8.2 Hashview is a tool for security professionals to help organize and automate the repetitious tasks related to password cracking. It is broken into two compoents, the Hashview Server, and Hashview Agent. The Hashview Server is a web application that manages one or more agents,...

CVE-2020-11800

Le sezioni richieste dalle linee guida dell'assegnazione sono contrassegnate con “Obbligatorio”. 1. Ambiente Obbligatorio Dockerfile Obbligatorio Questo ambiente utilizza un Dockerfile personalizzato basato sull'immagine vulnerabile di Zabbix Server fornita da Vulhub. root@kitploit: FROM...