CVE-2024-9264-RCE-Exploit

CVE-2024-9264-RCE-Exploit in Grafana via SQL Expressions Description Preuve de concept pour l'exécution de code à distance dans Grafana CVE-2024-9264 Ce dépôt contient un script Python qui exploite une vulnérabilité d'exécution de code à distance RCE dans la fonctionnalité SQL Expressions de...

CVE-2024-9264-Fixed

🛠️ CVE-2024-9264 - استغلال RCE المُصلح في Grafana هذا هو الإصدار المُصلح من استغلال إثبات المفهوم لـ CVE-2024-9264 ، وهي ثغرة حرجة لتنفيذ التعليمات البرمجية عن بُعد في Grafana عبر تعبيرات SQL و DuckDB. 🔗 الإعلان الأصلي: إصدار Grafana الأمني ❌ إثبات المفهوم الأصلي: معطل بسبب أخطاء في الصياغة...

CVE-2024-9264

CVE-2024-9264-RCE-Exploit in Grafana via SQL Expressions Description Proof Of Concept for Remote Code Execution in Grafana CVE-2024-9264 This repository contains a Python script that exploits a Remote Code Execution RCE vulnerability in Grafana's SQL Expressions feature. By leveraging insufficien...

LlamaIndex Retrievers Integration: DuckDBRetriever SQL Injection

A SQL injection vulnerability exists in the duckdbretriever component of the run-llama/llamaindex repository, specifically in llama-index-retrievers-duckdb-retriever prior to v0.4.0. The vulnerability arises from the construction of SQL queries without using prepared statements, allowing an...

CVE-2024-11958 SQL Injection in run-llama/llama_index

A SQL injection vulnerability exists in the duckdbretriever component of the run-llama/llamaindex repository, specifically in the latest version. The vulnerability arises from the construction of SQL queries without using prepared statements, allowing an attacker to inject arbitrary SQL code. Thi...

CVE-2024-11958 SQL Injection in run-llama/llama_index

A SQL injection vulnerability exists in the duckdbretriever component of the run-llama/llamaindex repository, specifically in the latest version. The vulnerability arises from the construction of SQL queries without using prepared statements, allowing an attacker to inject arbitrary SQL code. Thi...