CVE-2021-27928

Informazioni root@kitploit: Exploit Title: MariaDB 10.2 /MySQL - Esecuzione di comandi OS tramite 'wsrepprovider' Data: 03/18/2021 Autore Exploit: Central InfoSec Versione: MariaDB 10.2 prima di 10.2.37 10.3 prima di 10.3.28 10.4 prima di 10.4.18 10.5 prima di 10.5.9 Percona Server fino al...

CVE-2023-25813-TEST

CVE Test App Eine Express- + MySQL-Übungs-App, um das Verhalten von Sequelize CVE-2023-25813 lokal zu überprüfen. Dieses Projekt verwendet absichtlich eine verwundbare Sequelize-Version und ein anfälliges Login-Abfragemuster. Setzen Sie es nicht dem Internet aus und führen Sie es nur in einer...

CVE-2019-12086

Descrição do Documento CVE-2019-12086 desserialização do Jackson Exploração da Vulnerabilidade 1、Iniciar o servidor MySQL malicioso: python roguemysqlserver.py 2、Ver o mysql.log no mesmo diretório: tail -f mysql.log 3、Enviar o seguinte json para a aplicação vulnerável:...

CVE-2023-21971_Analysis

CVE-2023-21971 Connector/J RCE Analysis Analisi Riferimenti Remote Code Execution RCE in com.mysql:mysql-connector-j | CVE-2023-21971 | Snyk New Vulnerability in MySQL JDBC Driver: RCE and Unauthorized DB Access Analisi della deserializzazione di MYSQL JDBC - 跳跳糖 tttang.com Panoramica della...

Anchor CMS 0.12.3 - Error Log Exposure

Anchor CMS 0.12.3 is susceptible to an error log exposure vulnerability due to an issue in config/error.php. The error log is exposed at an errors.log URI, and contains MySQL credentials if a MySQL error such as "Too many connections" has occurred. id: CVE-2018-7251 info: name: Anchor CMS 0.12.3 ...

phpMyAdmin-CVE-2020-5504-Exploit

CVE-2020-5504 phpMyAdmin Sicherheitsbewertungs-Tool Autorisiertes Sicherheitstest- und Forschungsframework zur Identifizierung und Validierung von CVE-2020-5504 in phpMyAdmin-Bereitstellungen Überblick · Funktionen · Installation · Verwendung · Berichte · Architektur · Mitwirken Hinweis zur...

hakuin

Hakuin is a Blind SQL Injection BSQLI optimization and automation framework written in Python 3. It abstracts away the extraction logic and allows users to easily and efficiently dump databases from vulnerable web applications. To speed up the process, Hakuin utilizes a variety of optimization...

CVE-2026-59335

Improper handling of case sensitivity CWE-178 in the identity zone authorization check in the Identity Zone Endpoint in Cloud Foundry UAA allows a remote authenticated attacker holding only the zones.write authority to bypass the intended restriction that this authority does not grant access to t...

CVE-2026-59335 Case-Sensitive Authorization Check Bypass via Identity Zone ID Case Manipulation Leads to Full UAA Compromise

Improper handling of case sensitivity CWE-178 in the identity zone authorization check in the Identity Zone Endpoint in Cloud Foundry UAA allows a remote authenticated attacker holding only the zones.write authority to bypass the intended restriction that this authority does not grant access to t...

CVE-2026-59335

Cloud Foundry UAA is affected by an authorization bypass (CWE-178) in its Identity Zone Endpoint . The root cause is a mismatch between the application's case-sensitive zone identifier comparison and MySQL's case-insensitive default collation: an attacker holding only zones.write can reference th...

EUVD-2026-65466

Improper handling of case sensitivity CWE-178 in the identity zone authorization check in the Identity Zone Endpoint in Cloud Foundry UAA allows a remote authenticated attacker holding only the zones.write authority to bypass the intended restriction that this authority does not grant access to t...

ansible-mysql-cve-2016-6662

ansible-mysql-cve-2016-6662 Semplice playbook Ansible per applicare patch ai server MySQL contro la CVE-2016-6662. AGGIORNAMENTO 20160915.2347.CEST: Kenny mi ha informato della scoperta di Patrick Forsberg secondo cui la patch originale non proteggeva contro l'abuso di ../. Ho ora sostituito la...

setup-cve-2015-8562

Joomla! RCE CVE 2015-8562 Docker-Compose-Datei zum Einrichten der Umgebung für CVE-2015-8562-Tests Inhaltsverzeichnis 1. Über das Projekt 2. Erste Schritte Voraussetzungen Installation 3. Nutzung 4. Mitwirken 5. Lizenz Über das Projekt Dieses Projekt enthält eine Docker-Compose-Datei zum Einricht...

RHBA-2025:5321 Red Hat Bug Fix Advisory: mysql8.4 bug fix and enhancement update

Bulletin has no description...

heroku-CVE-2013-0269

heroku-CVE-2013-0269 Ispeziona tutte le tue app heroku per verificare se stanno eseguendo una versione vulnerabile di JSON Contesto È stata trovata una vulnerabilità di sicurezza nella gemma Ruby JSON. Questa è la causa principale del recentemente annunciato problema di iniezione MySQL in Rails. ...

CVE-2023-49988

CVE-2023-49988 Hotel Booking Management v1.0 - Vulnerabilità di SQL Injection nel parametro "npss" in rooms.php Descrizione : Nella versione 1 di Hotel Booking Management esiste una vulnerabilità di SQL Injection. Un attaccante malintenzionato può inviare comandi SQL al database MySQL quando...

CVE-2023-49970

CVE-2023-49970 Customer Support System 1.0 - Vulnerabilità di SQL Injection nel parametro "subject" durante l'operazione "saveticket" Descrizione : Esiste una vulnerabilità di SQL Injection nella versione 1 del Customer Support System. Un utente malintenzionato può inviare comandi SQL al database...

CVE-2023-49969

CVE-2023-49969 Sistema de Suporte ao Cliente 1.0 - Vulnerabilidade de Injeção SQL em editcustomer via o parâmetro de URL "id" Descrição : Existe uma vulnerabilidade de Injeção SQL na versão 1 do Sistema de Suporte ao Cliente. Um atacante com intenções maliciosas pode executar comandos SQL no banc...

CVE-2023-49968

CVE-2023-49968 Customer Support System 1.0 - SQL-Injection-Schwachstelle in managedepartment.php über 'id' URL-Parameter Beschreibung : In Version 1 des Customer Support Systems besteht eine SQL-Injection-Schwachstelle. Ein Angreifer mit böswilliger Absicht kann SQL-Befehle auf der MySQL-Datenban...

CVE-2023-49548

CVE-2023-49548 Customer Support System 1.0 - ثغرة حقن SQL في معامل "lastname" أثناء عملية "saveuser" الوصف : توجد ثغرة حقن SQL في الإصدار 1 من نظام دعم العملاء. يمكن للمهاجم الخبيث إرسال أوامر SQL إلى قاعدة بيانات MySQL عند إنشاء/تحرير مستخدم عبر المعامل الضعيف 'lastname'. إصدار المنتج المعرض للخ...