CVE-2024-50491

CVE-2024-50491 RSVP ME = 1.9.9 - 인증되지 않은 SQL 인젝션 설명 WordPress용 RSVP ME 플러그인은 1.9.9를 포함한 이하 버전에서 사용자가 제공한 매개변수에 대한 이스케이프 처리 부족과 기존 SQL 쿼리에 대한 사전 준비 부족으로 인해 SQL 인젝션에 취약합니다. 이를 통해 인증되지 않은 공격자가 기존 쿼리에 추가 SQL 쿼리를 덧붙여 데이터베이스에서 민감한 정보를 추출할 수 있게 됩니다. 세부 정보 유형 : 플러그인 슬러그 : rsvp-me 영향받는 버전 : 1.9.9 CVSS 점수 ...

SimpleCTF-THM-Walkthrough

SimpleCTF-THM-Relatory 첫 CTF를 성공적으로 완료했습니다! 이 저장소는 TryHackMe의 Simple CTF에 대한 제 워크스루를 문서화합니다. 네트워크 정찰Nmap, 웹 익스플로잇CVE-2019-9053, 크리덴셜 크래킹을 다룹니다. 개발자로서 Sudo 잘못된 구성을 활용해 SQLi에서 Root 셸로 전환한 것은 훌륭한 경험이었습니다. 교육 목적으로만 사용하세요. 이 저장소는 TryHackMe의 Simple CTF 룸에 대한 기술 문서와 단계별 워크스루를 포함합니다. 이는 초기 정찰부터 루트 권한 상승까...

DEBIAN-CVE-2026-63268

LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. A link of the sql type could name a folder of local text files as a database, so opening a document could read a local text file into the sheet. In fixed versions only the csv, html and xml...

CVE-2026-6433

CVE-2026-6433 — 개념 증명 FlipperCode — 커스텀 CSS, JS 및 PHP · 인증되지 않은 SQL 인젝션 → RCE eval을 통해 영향 받는 버전: FlipperCode 커스텀 CSS, JS 및 PHP ≤ 2.0.7 · WordPress 플러그인의 공격 표면 admin-ajax.php를 통해 한눈에 보기 항목| 세부사항 ---|--- 벡터| 플러그인 AJAX 액션을 통해 터널링된 인증되지 않은 SQLi 영향| WordPress 호스트에서 원격 코드 실행 페이로드가 문서 루트에 기록된 후 PHP 컨텍스트...

CVE-2024-9264

CVE-2024-9264 Grafana 인증 후 DuckDB SQL 인젝션 RCE, 파일 읽기 개념 증명 PoC 이 PoC는 CVE-2024-9264의 악용을 시연하며, 인증된 사용자가 DuckDB SQL 쿼리를 수행하여 파일시스템의 임의 파일을 읽거나 원격으로 임의 코드를 실행할 수 있음을 보여줍니다. 임의 코드 실행은 Grafana v11.0.0에서만 가능합니다. 파일 읽기는 모든 취약한 버전에서 가능합니다. 설정: 다음을 통해 필요한 종속성을 설치합니다: pip install -r requirements.txt 사용법 파...

TraditionalJay

TraditionalJay 意図的に脆弱性を含むクラシック/トラディショナル なショップです。セキュリティワークショップ向け — VM （EC2、Azure VM、GCP Compute Engine）上のJavaアプリケーションであり、コンテナではありません。 主要なストーリー: 重大なVM侵害 — SQLインジェクション → Log4Shell CVE-2021-44228 → 外部C2へのリバースシェル。 !CAUTION 本番アカウントにデプロイしないでください。 VMは一時的なものとし、ネットワークをラボ内に限定してください。 なぜこれが存在するのか Jay's Surf...

BIT-MOODLE-2026-102578 Moodle: sql injection in question bank web service

A flaw was found in Moodle. An authenticated attacker with access to the question bank web service can submit unsanitized input directly into database queries, resulting in a SQL Structured Query Language injection vulnerability. This issue could allow an attacker to view, alter, or delete...

Astra Linux – Vulnerability in PostgresSQL 11

When the server is configured to use trust authentication with a clientcert requirement or to use cert authentication, a man-in-the-middle attacker can inject arbitrary SQL queries during the initial establishment of a connection, despite the use of SSL certificate verification and encryption...

CVE-2025-57833

CVE-2025-57833: Django SQLインジェクションの脆弱性 このリポジトリは、CVE-2025-57833（DjangoのORMにおける深刻なSQLインジェクションの脆弱性）を実演・解説します。この脆弱性は、Django 4.2系の4.2.24未満、5.1系の5.1.12未満、5.2系の5.2.6未満に影響します。 🚨 脆弱性の概要 CVSSスコア : 9.8（緊急） 影響 : リモートコード実行（RCE）に至るSQLインジェクション 認証要件 : なし（未認証攻撃） 📚 背景の理解 Django ORMとは？ Django...

CVE-2026-63270 Environment/ini-file leaks

URLs could be constructed which expanded environment variable or INI file values, so potentially sensitive information could be exfiltrated to a remote server on opening a document containing such links. The check added for CVE-2024-12426 did not cover every place a document can supply a URL...

EUVD-2026-92421

URLs could be constructed which expanded environment variable or INI file values, so potentially sensitive information could be exfiltrated to a remote server on opening a document containing such links. The check added for CVE-2024-12426 did not cover every place a document can supply a URL...

CVE-2026-63268

LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. A link of the sql type could name a folder of local text files as a database, so opening a document could read a local text file into the sheet. In fixed versions only the csv, html and xml...

CVE-2026-63268

LibreOffice Calc is vulnerable to a Local File Inclusion (LFI) flaw when linking cell ranges to external data sources. An attacker can exploit the sql provider and sdbc:flat:file:// database href by naming a folder of local text files as a database. This allows a user to read local text files int...

CVE-2026-63268 LFI via calcext:data-mappings, sql provider and sdbc:flat:file:// db href

LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. A link of the sql type could name a folder of local text files as a database, so opening a document could read a local text file into the sheet. In fixed versions only the csv, html and xml...

EUVD-2026-92419

LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. A link of the sql type could name a folder of local text files as a database, so opening a document could read a local text file into the sheet. In fixed versions only the csv, html and xml...

CVE-2026-63268 LFI via calcext:data-mappings, sql provider and sdbc:flat:file:// db href

LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. A link of the sql type could name a folder of local text files as a database, so opening a document could read a local text file into the sheet. In fixed versions only the csv, html and xml...

CVE-2026-63266

LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. Through such a link a document could open an embedded Firebird database that wrote a file to any location the user could write to. In fixed versions an embedded Firebird database can open or...

CVE-2026-63277 RCE via calcext:data-mappings, sql provider and jdbc connector

LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. A document could name a Java database driver for such a link to be loaded from a remote location, so opening the document could run Java code from that location. In fixed versions an entry in...

CVE-2026-63277

LibreOffice Calc is vulnerable to Remote Code Execution (RCE) when opening a document that links a cell range to an external data source. An attacker can craft a document naming a Java database driver to be loaded from a remote location, causing the application to execute Java code from that sour...

CVE-2026-63277

LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. A document could name a Java database driver for such a link to be loaded from a remote location, so opening the document could run Java code from that location. In fixed versions an entry in...