AZL-99813 CVE-2026-13608 affecting package mysql 8.0.46-1

A flaw in the libcurl SASL negotiation for LDAP authentication allows an incomplete handshake sequence to be misinterpreted as a successful cryptographic verification. An attacker executing a Man-in-the-Middle MITM attack can inject a premature or shortcut response that bypasses complete peer...

tproxy

tproxy English | 简体中文 | 日本語 Why I wrote this tool When I develop backend services and write go-zero, I often need to monitor the network traffic. For example: 1. monitoring gRPC connections, when to connect and when to reconnect 2. monitoring MySQL connection pools, how many connections and figur...

CVE-2023-23752

CVE-2023-23752 About This exploit is Authentication Bypass leaking username password administrator and also leaking mysql config username , password , host and database Vulnerable Version only 4.00 = 4.28 Usage root@kitploit: usage: exploit.sh -h -u URL -t TARGETS CVE-2023-23752 - Authentication...

CVE-2024-1346

CVE-2024-1346 Weak MySQL database root password in LaborOfficeFree affects version 19.10. This vulnerability allows an attacker to calculate the root password of the MySQL database used by LaborOfficeFree using two constants. Exploit Title: LaborOfficeFree 19.10 MySQL Root Password Calculator -...

CVE-2019-12086

Documentation CVE-2019-12086 jackson unserialize Vulnerability Exploitation 1. Start a malicious MySQL server: python roguemysqlserver.py 2. Check mysql.log in the same directory: tail -f mysql.log 3. Send the following JSON to the vulnerable application:...

INT14107_CVE-2021-35042

CTF Blog Project This project is a Blog system specialized in CTF Capture The Flag built with Django. Features Post articles, comments. Manage User, Category. Integrated security testing tool exploitdump.py. Installation Guide 1. Install Python: pip install -r requirements.txt 2. Initialize...

CVE-2025-50383

CVE-2025-50383 Description A low-privileged authenticated user can exploit this vulnerability by sending a crafted HTTP POST request with a malicious orderby parameter e.g., orderby=IF1=1,SLEEP5,1. This can trigger time-based blind SQL injection, resulting in unauthorized SQL execution on the...

NextJS-CVE-2025-29927

Here's a clean and informative README.md for your GitHub repo that explains it's a vulnerable Next.js application for CVE-2025-29927 and includes a link to your setup YouTube video: 🔓 NextJS-CVE-2025-29927 - Vulnerable Demo Application This is a vulnerable Next.js application that demonstrates...

TeamPass

Teampass Self-hosted password management your whole team can trust Folder-level access control · authenticated AES-256-GCM encryption · compliance evidence Your secrets never leave your infrastructure. 🌐teampass.net · 📖Documentation · 💬Discussions · 🐳Docker Hub !Docker...

CVE-2026-58048-PoC-Exploit

💥 CVE‑2026‑58048 – cPanel Root SQL Execution Toolkit ⚠️ ETHICAL USE ONLY – AUTHORIZED SECURITY TESTING This repository provides tools for authorized security professionals, blue teams, and penetration testers only. Unauthorized access to computer systems is illegal under CFAA US, Computer Misuse...

MySQL-Remote-Root-Code-Execution

MySQL-Remote-Root-Code-Execution Usage root@kitploit: python rcemysql.py -dbuser -dbpass -dbname -dbhost -mycnf...

Unity Linux 20.1070e Security Update: mysql (UTSA-2026-022304)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-022304 advisory. Unity Link Advisory UTSA-2026-022304 Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus has not...

Unity Linux 20.1070e Security Update: mysql (UTSA-2026-022289)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-022289 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easi...

Unity Linux 20.1070e Security Update: mysql (UTSA-2026-022335)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-022335 advisory. Unity Link Advisory UTSA-2026-022335 Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus has not...

Unity Linux 20.1070e Security Update: mysql (UTSA-2026-022350)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-022350 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easi...

Unity Linux 20.1070e Security Update: mysql (UTSA-2026-022266)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-022266 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easi...

Unity Linux 20.1070e Security Update: mysql (UTSA-2026-022292)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-022292 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: DML. Supported versions that are affected are 8.0.0-8.0.45. Easily exploitable...

SQLPad-6.10.0-Exploit-CVE-2022-0944

SQLPad 6.10.0 Exploit CVE-2022-0944 This Bash script exploits an RCE vulnerability in SQLPad 6.10.0, allowing an attacker to achieve remote code execution RCE by abusing the host and database fields in SQLPad’s MySQL database connection settings. The exploit leverages SQLPad’s unsanitized handlin...

UDFPwn-CVE-2012-5613

UDFPwn.py MySQL 4.x/5.0 Linux - User-Defined Function UDF Dynamic Library 2 automation script...

CVE-2021-40512

CVE-2021-40512 OSCAR McMaster 19.401235 SQL Injection Vulnerability A SQL injection vulnerability exists in version 19.401235 of OSCAR McMaster. A malicious attacker can issue SQL commands to the MySQL/MariaDB database through the vulnerable sendTo parameter located on the...