Lucene search
+L

15810 matches found

Kitploit
Kitploit
added 2026/09/03 8:10 a.m.5 views

adminer_CVE-2021-43008

CVE-2021-43008 — Adminer の脆弱性 悪意のある MySQL サーバーを介した任意のファイル読み取り 1. Adminer とは? Adminer は、MySQL、PostgreSQL、SQLite、SQL Server のデータベースを簡単に管理できる Web ツール(PHP)です。軽量な phpMyAdmin の代替としてよく使われます。 影響を受けるバージョン: Adminer ≤ 4.6.2 2. 脆弱性の本質は? 2.1. アクセス制御の欠陥 Adminer は 任意のリモート MySQL サーバー への接続を許可します。しかし、MySQL...

7.5CVSS7.3AI score0.13641EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/03 7:08 a.m.10 views

CVE-2024-34693

CVE-2024-34693 エクスプロイト このリポジトリには、Apache Superset の CVE-2024-34693 脆弱性を悪用するための高度な Python スクリプトが含まれています。このスクリプトは、不正な MySQL サーバーをセットアップし、悪意のある MariaDB 接続を作成して、対象システムから指定されたファイルの内容を外部に持ち出します。 !\Screenshot1.png\https://raw.githubusercontent.com/Mr-r00t11/CVE-2024-34693/main/img/Screenshot1.png 説明...

6.8CVSS6.7AI score0.01584EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/02 11:47 a.m.9 views

CVE-2020-11579

CVE-2020-11579 はじめに PHPKB 9.0 Enterprise Edition MySQL database は、悪意のあるMySQLサーバーを介した認証不要の任意ファイル開示の影響を受けます。 リモートの攻撃者は、単一のHTTP GETリクエストを介して、Webサーバーの権限(例:www-data)を持つリモートの被害者ホスト上の任意のファイルを読み取ることができます。 詳細: https://shielder.it/blog/mysql-and-cve-2020-11579-exploitation 注意 このスクリプトはserver-only...

7.5CVSS7.3AI score0.26919EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/02 10:09 a.m.9 views

CVE-2026-34308

CVE-2026-34308:MySQL Server(JSON 组件)拒绝服务 官方厂商公告:Oracle 关键补丁更新公告 — 2026 年 4 月。 摘要(摘自已发布的 CVE) Oracle MySQL Server 中的漏洞(组件:Server: JSON)。 受支持的受影响版本:8.0.0–8.0.45 、8.4.0–8.4.8 和 9.0.0–9.6.0 。 该漏洞允许低权限用户使 MySQL Server 崩溃。 CVSS 3.1 基础评分 :6.5 (仅影响可用性) CVSS 向量 :CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:...

6.5CVSS7.2AI score0.00303EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/01 4:54 p.m.6 views

CVE-2024-34693

CVE-2024-34693: Apache Superset におけるサーバー任意ファイル読み取り Apache Superset の不適切な入力検証の脆弱性により、認証済みの攻撃者が localinfile を有効にした MariaDB 接続を作成できる可能性があります。Superset の MySQL/MariaDB クライアントで localinfile を有効にし、そのクライアントを悪意のある MySQL サーバーに向けることで、攻撃者は "LOAD DATA LOCAL INFILE"(Rogue MySQL Server)攻撃を仕掛け、サーバーからファイルを読み取り、その内...

6.8CVSS6.7AI score0.01584EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/01 6:36 a.m.6 views

Adminer-CVE-2021-43008

Adminer CVE-2021-43008 PoC Proof-of-concept exploit for CVE-2021-43008 affecting Adminer. This vulnerability allows a malicious MySQL server to request arbitrary local files from the client machine when LOAD DATA LOCAL INFILE is enabled. The repository contains tools to reproduce the attack...

7.5CVSS7.2AI score0.13641EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/08/31 4:05 a.m.5 views

CVE-2025-70828

CVE-2025-70828 摘要 在 Datart v1.0.0-rc.3 中发现了一个任意文件读取漏洞。该应用程序在数据源配置期间未能正确验证 JDBC 连接 URL。 漏洞详情 漏洞类型: 不当输入验证(CWE-20)/ 任意文件读取 受影响版本: Datart v1.0.0-rc.3 严重程度: 高危(可能导致敏感信息泄露) 描述 该漏洞存在于数据源配置模块中。应用程序未严格清理 JDBC 配置中的 url 参数。具有数据源配置权限的远程攻击者可以向 JDBC URL 注入恶意参数(特别是 allowLoadLocalInfile=true)。 通过将 JDBC...

8.8CVSS5.9AI score0.00478EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/28 6:31 a.m.5 views

Rogue-MySql-Server

Rogue-MySql-Server Modifica lo script e cambia il file da leggere e la porta del server se vuoi. Esegui lo script e connettiti al tuo server per leggere il file dal lato client. Leggi mysql.log per il contenuto del file letto...

5.9AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/08/26 12:00 a.m.8 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql5 (UTSA-2026-061551)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-061551 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Stored Procedure. Supported versions that are affected are 5.7.36 and prior and 8.0.27 a...

4.9CVSS6.6AI score0.0175EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/08/26 12:00 a.m.9 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql5 (UTSA-2026-093649)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093649 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Group Replication Plugin. Supported versions that are affected are 5.7.33 and prior and...

4.9CVSS6.7AI score0.02043EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/08/26 12:00 a.m.7 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql5 (UTSA-2026-061548)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-061548 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: FTS. Supported versions that are affected are 5.7.37 and prior and 8.0.28 and prior...

4.9CVSS6.7AI score0.02052EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/08/26 12:00 a.m.10 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql5 (UTSA-2026-061483)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-061483 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Federated. Supported versions that are affected are 5.7.36 and prior and 8.0.27 and prio...

4.9CVSS6.6AI score0.01856EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/08/26 12:00 a.m.9 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql5 (UTSA-2026-093330)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093330 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Compiling. Supported versions that are affected are 5.7.28 and prior. Difficult to explo...

5.3CVSS6.6AI score0.01531EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/08/26 12:00 a.m.11 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql5 (UTSA-2026-061546)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-061546 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Logging. Supported versions that are affected are 5.7.37 and prior and 8.0.28 and prior...

4.4CVSS6.6AI score0.01359EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/08/26 12:00 a.m.12 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql5 (UTSA-2026-061487)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-061487 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: DDL. Supported versions that are affected are 5.7.37 and prior and 8.0.28 and prior...

4.4CVSS6.6AI score0.01266EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/08/26 12:00 a.m.9 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql5 (UTSA-2026-061554)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-061554 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 5.7.37 and prior and 8.0.28 and prior. Difficul...

4.4CVSS6.6AI score0.01266EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/08/26 12:00 a.m.6 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql5 (UTSA-2026-093630)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093630 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 5.7.30 and prior and 8.0.17 and prio...

4.9CVSS6.6AI score0.0111EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/08/26 12:00 a.m.7 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql5 (UTSA-2026-093269)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093269 advisory. Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Audit Log. Supported versions that are affected are 5.7.26 and prior and 8.0.16 and...

5.3CVSS6.6AI score0.01862EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/08/26 12:00 a.m.6 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql5 (UTSA-2026-061549)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-061549 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 5.7.37 and prior and 8.0.28 and prior. Easily...

4.9CVSS6.6AI score0.01496EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/08/26 12:00 a.m.4 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql5 (UTSA-2026-093249)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093249 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 5.7.31 and prior. Easily exploitable...

7.5CVSS6.7AI score0.01954EPSS
SaveExploits0References4
Rows per page
Query Builder