sccm_sql_backdoor

sccmsqlbackdoor Una herramienta de prueba de concepto que implanta un backdoor controlado en un procedimiento almacenado de Management Point, permitiendo la ejecución indirecta de SQL a través de un servicio HTTP legítimo de MP. Instalación Puedes instalarlo clonando el repositorio e instalando l...

The vulnerability of the Webasyst content management system and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...

CVE-2022-34265

CVE-2022-34265 Uso iniciar root@kitploit: docker-compose build docker-compose up -d detener root@kitploit: docker-compose down Verificación PoC de la vulnerabilidad de Django CVE-2022-34265 Una vulnerabilidad CVE-2022-34265 en Django fue divulgada el 5 de julio de 2022 hora de EE. UU.. Este...

PT-2026-89878

CVE-2026-82583 CVSS 8.3 impacts Mirth Connect 4.7.1 and earlier. Authenticated users can execute arbitrary SQL via Database Connector, risking stored credential disclosure. Update if deployed. via NVD Recent High CVSS CyberSecurity InfoSec Vulnerability https://t.co/xBS3E6mUo3...

CVE-2025-67644-LangGraph-3.0.1-SQLite-Checkpoint-SQL-Injection

CVE-2025-67644 PoC – Inyección SQL en LangGraph SQLite Checkpoint CVE-2025-67644 es una vulnerabilidad de inyección SQL CWE-89 en el paquete langgraph-checkpoint-sqlite parte del ecosistema LangGraph / LangChain. Permite a un atacante inyectar SQL arbitrario a través de claves de filtro de...

sparx_hack

Múltiples vulnerabilidades en Sparx Pro Cloud Server y Enterprise Architect Código de explotación para ejecutar comandos SQL arbitrarios en el servidor Sparx PCS sin autenticación. NOTA: la clave NO es correcta para evitar que s|rIpt kIddi3 pueda hackear fácilmente ;- Informe completo:...

CVE-2026-76009

The Next-Cart Store to WooCommerce Migration WordPress plugin (versions ≤ 3.9.8) is vulnerable to unauthenticated authentication bypass via the NCWM_Kitconnect::run() function. The REST route /wp-json/next_cart/v1/migration is registered with permission_callback set to __return_true and relies on...

CVE-2026-76009 Next-Cart Store to WooCommerce Migration <= 3.9.8 - Unauthenticated Authentication Bypass via Default '__token__' Fallback in REST Migration Endpoint

The Next-Cart Store to WooCommerce Migration plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 3.9.8 via the NCWMKitconnect::run function. This is due to the plugin registering the /wp-json/nextcart/v1/migration REST route with permissioncallback se...

CVE-2025-59213

Exploit de inyección SQL no autenticada CVE-2025-59213 en Microsoft Configuration Manager ConfigMgr / SCCM 2503 Este script explota la vulnerabilidad CVE-2025-59213, que permite a un atacante no autenticado con acceso de red a un punto de administración Management Point ejecutar consultas SQL...

CVE-2024-50972

CVE-2024-50972 Descripción Una vulnerabilidad de inyección SQL en printtool.php del Sistema de Gestión de Construcción Itsourcecode 1.0 permite a atacantes remotos ejecutar comandos SQL arbitrarios a través del parámetro borrowid. Tipo de Vulnerabilidad Inyección SQL Proveedor del Producto...

CVE-2024-50971

CVE-2024-50971 Descripción Una vulnerabilidad de inyección SQL en print.php de Itsourcecode Construction Management System 1.0 permite a atacantes remotos ejecutar comandos SQL arbitrarios a través del parámetro mapid. Tipo de Vulnerabilidad Inyección SQL Proveedor del Producto Itsourcecode Códig...

CVE-2026-86123

SQL Chat contains four unauthenticated API endpoints that accept client-supplied database connection parameters and execute arbitrary SQL queries against attacker-specified hosts. Attackers can connect to internal databases, execute SQL commands, enumerate schemas, and pivot into the server's...

SiYuan: Unauthenticated arbitrary SQL execution via searchEmbedBlock (publish mode) : reader-reachable raw statement on read-write handle, cross-notebook read/write

CVE: This vulnerability corresponds to CVE-2026-69084. Summary The /api/search/searchEmbedBlock endpoint passes a client-supplied SQL statement verbatim to the database with no validation. The endpoint is gated by CheckAuth only reachable by the publish RoleReader token, and by the anonymous...

CVE-2026-78069 Joomla Extension - j2commerce.com - Missing authorization on Apps controller delegation chain in J2Store 1.0.0-3.3.21, 4.0.0-4.0.21, 4.1.0-4.1.6

Joomla Extension - j2commerce.com - Missing authorization on Apps controller delegation chain in J2Store 1.0.0-3.3.21, 4.0.0-4.0.21, 4.1.0-4.1.6 - J2StoreControllerApps's appTask delegation path instantiates app-plugin controllers with no ACL check anywhere in the code. It currently returns 403...

CVE-2026-74820

ServiceNow has remediated a SQL injection vulnerability that was identified in in the ServiceNow AI platform. This vulnerability could enable an unauthenticated user, in certain circumstances, to execute arbitrary SQL statements against the instance's underlying database and gain access to, or...

CVE-2026-56706 Adminer before 5.4.3 CSRF Token Secret Recovery via XOR Masking

Adminer before 5.4.3 uses a CSRF token scheme that transmits both the XOR mask and the masked value in every token format rand XOR secret:rand, allowing anyone who observes a single CSRF token e.g., via network sniffing, log files, Referrer header, or XSS to recover the session secret with a sing...

CVE-2026-56706

Adminer before 5.4.3 uses a CSRF token scheme that transmits both the XOR mask and the masked value in every token format rand XOR secret:rand, allowing anyone who observes a single CSRF token e.g., via network sniffing, log files, Referrer header, or XSS to recover the session secret with a sing...

EUVD-2026-65204

Adminer before 5.4.3 uses a CSRF token scheme that transmits both the XOR mask and the masked value in every token format rand XOR secret:rand, allowing anyone who observes a single CSRF token e.g., via network sniffing, log files, Referrer header, or XSS to recover the session secret with a sing...

Astra Linux – Vulnerability in PostgresSQL 11

A flaw was discovered in PostgreSQL versions prior to 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20, and before 9.5.24. An attacker who has permission to create non-temporary objects in at least one schema can execute arbitrary SQL functions under the identity of a superuser. The...

CVE-2026-49360

Recce is a data-validation toolkit for enhanced dbt data build tool PR review. Prior to version 1.50.0, OSS server deployments that expose the server to an untrusted network without authentication are vulnerable to unauthenticated SQL execution through the query run API. When Recce is configured...