enumdb

enumdb Enumdb è uno strumento di brute force e post-sfruttamento per database relazionali MySQL e MSSQL. Quando viene fornito un elenco di nomi utente e/o password, scorrerà ogni host alla ricerca di credenziali valide. Per impostazione predefinita, enumdb utilizza le credenziali appena scoperte...

CVE-2024-34225

Sistema di gestione del laboratorio informatico usando PHP e MySQL 1.0 Segnalatore: Kha Do Vulnerabilità Descrizione La vulnerabilità Cross Site Scripting in php-lms/admin/?page=systeminfo nel Sistema di gestione del laboratorio informatico usando PHP e MySQL 1.0 consente ad attaccanti remoti di...

CVE-2021-39378

OPENSIS 8.0 SQL INJECTION VULNERABILITY CVE-2021-39378 ثغرة حقن SQL في OPENSIS 8.0 CVE-2021-39378 توجد ثغرة حقن SQL في الإصدار 8.0 من openSIS عند استخدام MySQL MariaDB كقاعدة بيانات للتطبيق. يمكن للمهاجم الخبيث إصدار أوامر SQL إلى قاعدة بيانات MySQL MariaDB من خلال المعامل str المعرض للخطر. صفحة...

Oracle-mysql-CVE-2012-2122

Vulnerabilità di bypass dell'autenticazione Mysql CVE-2012-2122 Quando ci si connette a MariaDB/MySQL, la password inserita viene confrontata con quella corretta prevista; a causa di una gestione errata, anche se memcmp restituisce un valore diverso da zero, MySQL può comunque considerare le due...

mysslstrip

mysslstrip mysslstrip è un proof of concept basato su Python che mostra come intercettare il traffico MySQL e rimuovere SSL/TLS, come da CVE-2015-3152. Utilizzo mysslstrip.py -h -p LISTENPORT -i LISTENINTERFACE dest Esempio di output root@kitploit: root@duo1 python2.7 mysslstrip.py -p 3307...

NextJS-CVE-2025-29927

🔓 NextJS-CVE-2025-29927 - संवेदनशील प्रदर्शन अनुप्रयोग यह एक संवेदनशील Next.js अनुप्रयोग है जो CVE-2025-29927 को प्रदर्शित करता है, जो कि Next.js का उपयोग करने वाले वेब अनुप्रयोगों में अनुचित इनपुट हैंडलिंग या एक्सेस नियंत्रण दोषों के कारण पहचाना गया एक सुरक्षा दोष है। यह परियोजना MySQL बैकएंड और...

vapi

vAPI...

CVE-2021-40353

CVE-2021-40353 CVE-2021-40353 Vulnérabilité d'injection SQL dans openSIS 8.0 https://vulners.com/cve/CVE-2021-40353 Une vulnérabilité d'injection SQL existe dans la version 8.0 d'openSIS lorsque MySQL ou MariaDB est utilisé comme base de données de l'application. Un attaquant peut alors émettre l...

SQLPad-6.10.0-Exploit-CVE-2022-0944

Exploit do SQLPad 6.10.0 CVE-2022-0944 Este script Bash explora uma vulnerabilidade de RCE no SQLPad 6.10.0, permitindo que um invasor execute código remotamente RCE ao abusar dos campos host e database nas configurações de conexão MySQL do SQLPad. O exploit aproveita o tratamento não sanitizado ...

go-sniffer

go-sniffer Erfasst Protokolle wie mysql, redis, http, mongodb usw. Fängt Datenbankanfragen aus Projekten ab und analysiert sie in entsprechende Anweisungen – z. B. wird das mysql-Protokoll in SQL-Anweisungen zerlegt, um das Debugging zu erleichtern. Es muss kein Code geändert werden – die...

cosa-nostra

Cosa Nostra Cosa Nostra is an open source software clustering toolkit with a focus on malware analysis. It can create phylogenetic trees of binary malware samples that are structurally similar. It was initially released during SyScan360 Shanghai 2016. I basically maintain it since 2016 for my one...

informer

Informer - Vigilância em Massa no Telegram Atualização 10-20-2025 Segurança : Corrigida vulnerabilidade de alta severidade CVE-2022-1941 no mysql-connector-python Segurança : Migrado do obsoleto oauth2client para google-auth Atualizadas todas as dependências para as versões seguras mais recentes...

github-dorks

Github Dorks Github Search is a quite powerful and useful feature that can be used to search for sensitive data on repositories. Collection of Github dorks can reveal sensitive personal and/or organizational information such as private keys, credentials, authentication tokens, etc. This list is...

lightbulb-framework

LightBulb LightBulb is an open source python framework for auditing web application firewalls and filters. Synopsis The framework consists of two main algorithms: GOFA : An active learning algorithm that infers symbolic representations of automata in the standard membership/equivalence query mode...

chameleon

19 Customizable honeypots for monitoring network traffic, bots activities, and username\password credentials DNS, HTTP Proxy, HTTP, HTTPS, SSH, POP3, IMAP, STMP, RDP, VNC, SMB, SOCKS5, Redis, TELNET, Postgres, MySQL, MSSQL, Elastic and ldap If you want to implement the honeypots in your project,...

fapro

FaPro Free,Cross-platform,Single-file mass network protocol server simulator 中文Readme Description FaPro is a Fake Protocol Server tool, Can easily start or stop multiple network services. The goal is to support as many protocols as possible, and support as many deep interactions as possible for...

ncrack

ncrack Ncrack is a high-speed network authentication cracking tool. It was built to help companies secure their networks by proactively testing all their hosts and networking devices for poor passwords. Security professionals also rely on Ncrack when auditing their clients. Ncrack was designed...

Zero-Day-Legacy

🎓 Abschlussprojekt — Ajloun National University ANU Fakultät für IT · Cybersicherheit und Cloud Computing · Studienjahr 2026 🏆 Höchste Note der Universität: 97% 📖 Überblick Zero-Day Legacy ist eine realistische, absichtlich verwundbare Boot-to-Root CTF Capture The Flag Labor-Maschine, die als...

cve-2022-23134-poc-and-writeup

CVE-2022-23134 Writeup und POC Dies ist ein POC und Writeup für CVE-2022-23134 in bestimmten Versionen von Zabbix. Bitte lesen Sie writeup.md für die Details, die zur Nutzung des Exploits benötigt werden – es erfordert einige Einrichtung von MySQL!...

TeamPass

TeamPass 3 TeamPass ist eine kollaborative Passwortverwaltungslösung, die vor Ort installiert wird. Copyright © 2009-2026, Nils Laumaillé Anforderungen Über PHP-Versionen Installation Traditionelle Installation Empfohlen Docker Dokumentation Sprachen Lizenzvereinbarung Webseite Fehler Anforderung...