adminer_CVE-2021-43008

CVE-2021-43008 — Adminer の脆弱性 悪意のある MySQL サーバーを介した任意のファイル読み取り 1. Adminer とは？ Adminer は、MySQL、PostgreSQL、SQLite、SQL Server のデータベースを簡単に管理できる Web ツール（PHP）です。軽量な phpMyAdmin の代替としてよく使われます。 影響を受けるバージョン: Adminer ≤ 4.6.2 2. 脆弱性の本質は？ 2.1. アクセス制御の欠陥 Adminer は 任意のリモート MySQL サーバー への接続を許可します。しかし、MySQL...

CVE-2024-34693

CVE-2024-34693 エクスプロイト このリポジトリには、Apache Superset の CVE-2024-34693 脆弱性を悪用するための高度な Python スクリプトが含まれています。このスクリプトは、不正な MySQL サーバーをセットアップし、悪意のある MariaDB 接続を作成して、対象システムから指定されたファイルの内容を外部に持ち出します。 !\Screenshot1.png\https://raw.githubusercontent.com/Mr-r00t11/CVE-2024-34693/main/img/Screenshot1.png 説明...

CVE-2020-11579

CVE-2020-11579 はじめに PHPKB 9.0 Enterprise Edition MySQL database は、悪意のあるMySQLサーバーを介した認証不要の任意ファイル開示の影響を受けます。 リモートの攻撃者は、単一のHTTP GETリクエストを介して、Webサーバーの権限（例：www-data）を持つリモートの被害者ホスト上の任意のファイルを読み取ることができます。 詳細: https://shielder.it/blog/mysql-and-cve-2020-11579-exploitation 注意 このスクリプトはserver-only...

CVE-2026-34308

CVE-2026-34308：MySQL Server（JSON 组件）拒绝服务 官方厂商公告：Oracle 关键补丁更新公告 — 2026 年 4 月。 摘要（摘自已发布的 CVE） Oracle MySQL Server 中的漏洞（组件：Server: JSON）。 受支持的受影响版本：8.0.0–8.0.45 、8.4.0–8.4.8 和 9.0.0–9.6.0 。 该漏洞允许低权限用户使 MySQL Server 崩溃。 CVSS 3.1 基础评分 ：6.5 （仅影响可用性） CVSS 向量 ：CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:...

CVE-2024-34693

CVE-2024-34693: Apache Superset におけるサーバー任意ファイル読み取り Apache Superset の不適切な入力検証の脆弱性により、認証済みの攻撃者が localinfile を有効にした MariaDB 接続を作成できる可能性があります。Superset の MySQL/MariaDB クライアントで localinfile を有効にし、そのクライアントを悪意のある MySQL サーバーに向けることで、攻撃者は "LOAD DATA LOCAL INFILE"（Rogue MySQL Server）攻撃を仕掛け、サーバーからファイルを読み取り、その内...

Adminer-CVE-2021-43008

Adminer CVE-2021-43008 PoC Proof-of-concept exploit for CVE-2021-43008 affecting Adminer. This vulnerability allows a malicious MySQL server to request arbitrary local files from the client machine when LOAD DATA LOCAL INFILE is enabled. The repository contains tools to reproduce the attack...

CVE-2025-70828

CVE-2025-70828 摘要 在 Datart v1.0.0-rc.3 中发现了一个任意文件读取漏洞。该应用程序在数据源配置期间未能正确验证 JDBC 连接 URL。 漏洞详情 漏洞类型： 不当输入验证（CWE-20）/ 任意文件读取 受影响版本： Datart v1.0.0-rc.3 严重程度： 高危（可能导致敏感信息泄露） 描述 该漏洞存在于数据源配置模块中。应用程序未严格清理 JDBC 配置中的 url 参数。具有数据源配置权限的远程攻击者可以向 JDBC URL 注入恶意参数（特别是 allowLoadLocalInfile=true）。 通过将 JDBC...

Rogue-MySql-Server

Rogue-MySql-Server Modifica lo script e cambia il file da leggere e la porta del server se vuoi. Esegui lo script e connettiti al tuo server per leggere il file dal lato client. Leggi mysql.log per il contenuto del file letto...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql5 (UTSA-2026-061551)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-061551 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Stored Procedure. Supported versions that are affected are 5.7.36 and prior and 8.0.27 a...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql5 (UTSA-2026-093649)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093649 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Group Replication Plugin. Supported versions that are affected are 5.7.33 and prior and...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql5 (UTSA-2026-061548)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-061548 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: FTS. Supported versions that are affected are 5.7.37 and prior and 8.0.28 and prior...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql5 (UTSA-2026-061483)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-061483 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Federated. Supported versions that are affected are 5.7.36 and prior and 8.0.27 and prio...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql5 (UTSA-2026-093330)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093330 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Compiling. Supported versions that are affected are 5.7.28 and prior. Difficult to explo...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql5 (UTSA-2026-061546)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-061546 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Logging. Supported versions that are affected are 5.7.37 and prior and 8.0.28 and prior...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql5 (UTSA-2026-061487)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-061487 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: DDL. Supported versions that are affected are 5.7.37 and prior and 8.0.28 and prior...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql5 (UTSA-2026-061554)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-061554 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 5.7.37 and prior and 8.0.28 and prior. Difficul...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql5 (UTSA-2026-093630)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093630 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 5.7.30 and prior and 8.0.17 and prio...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql5 (UTSA-2026-093269)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093269 advisory. Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Audit Log. Supported versions that are affected are 5.7.26 and prior and 8.0.16 and...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql5 (UTSA-2026-061549)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-061549 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 5.7.37 and prior and 8.0.28 and prior. Easily...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql5 (UTSA-2026-093249)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093249 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 5.7.31 and prior. Easily exploitable...