sqlmap

sqlmap sqlmap - это инструмент для тестирования уязвимостей с открытым исходным кодом, который автоматизирует процесс обнаружения и использования ошибок SQL-инъекций и захвата серверов баз данных. Он оснащен мощным механизмом обнаружения, множеством приятных функций для профессионального тестера...

sqlancer

SQLancer는 데이터베이스 관리 시스템DBMS의 구현에서 버그를 자동으로 찾기 위한 도구입니다. 즉, 사용자가 작성한 쿼리가 아닌 DBMS 구현 코드 자체의 버그를 찾아냅니다. SQLancer는 성숙하고 널리 알려진 DBMS에서 수백 개의 버그를 발견했습니다. SQLancer는 DBMS를 자동으로 테스트할 때 두 가지 핵심 과제를 해결합니다. 1. 테스트 입력 생성 : SQLancer는 SQL 문을 자동으로 생성하는 접근 방식을 구현합니다. 여러 단계로 운영되는 다양한 수동 작성 SQL 생성기를 포함합니다. 먼저 데이터베이...

ko7demo

CVE-2019-89793.3.10 미만 버전에 영향을 미치는 SQL 인젝션 취약점를 실험하기 위한 Docker 기반 https://github.com/koseven/kosevenkoseven hello world입니다. 이 hello world는 실제로 https://koseven.dev/documentation/orm/examples/simple문서에서 가져온 것으로, Docker 부분과 PoC 익스플로잇만 추가했습니다. = CVE-2019-8979 이 SQL 인젝션 문제는 원래 제3자가...

CVE-2024-9264

CVE-2024-9264 Grafanav11.0 SQL Expressions를 통한 인증된 RCE - PoC 익스플로잇 CVE-2024-9264 - Grafana v11.0 인증된 원격 코드 실행 RCE PoC 소개 CVE-2024-9264는 Grafana 11의 실험적 “SQL Expressions” 기능에서 도입된 심각한 원격 코드 실행 및 로컬 파일 포함 취약점입니다. API는 사용자 제공 SQL을 적절한 검증 없이 DuckDB CLI로 직접 전달하므로, Viewer 이상의 권한을 가진 인증된 계정은 duckdb 바이너리...

sqlmap-ai

SQLMap AI 어시스턴트 SQLMap을 기반으로 하는 AI 기반 래퍼로, SQL 인젝션 테스트를 더 쉽고 자동화된 방식으로 수행할 수 있게 해줍니다. 기능 핵심 기능 AI 기반 테스트 - 지능적인 취약점 분석 및 권장 사항 적응형 테스트 - 대상 응답에 맞춰 조정되는 단계별 테스트 향상된 HTML 보고서 - 취약점 세부 정보를 포함한 아름답고 상세한 보고서 파라미터 타게팅 - -p 옵션으로 특정 파라미터 테스트 기존 SQLMap과 동일 WAF 우회 - 방화벽 우회를 위한 탬퍼tamper 스크립트 자동 선택 데이터베이스...

EUVD-2026-92421

URLs could be constructed which expanded environment variable or INI file values, so potentially sensitive information could be exfiltrated to a remote server on opening a document containing such links. The check added for CVE-2024-12426 did not cover every place a document can supply a URL...

CVE-2026-63270 Environment/ini-file leaks

URLs could be constructed which expanded environment variable or INI file values, so potentially sensitive information could be exfiltrated to a remote server on opening a document containing such links. The check added for CVE-2024-12426 did not cover every place a document can supply a URL...

EUVD-2026-92419

LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. A link of the sql type could name a folder of local text files as a database, so opening a document could read a local text file into the sheet. In fixed versions only the csv, html and xml...

CVE-2026-63268 LFI via calcext:data-mappings, sql provider and sdbc:flat:file:// db href

LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. A link of the sql type could name a folder of local text files as a database, so opening a document could read a local text file into the sheet. In fixed versions only the csv, html and xml...

CVE-2026-63268 LFI via calcext:data-mappings, sql provider and sdbc:flat:file:// db href

LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. A link of the sql type could name a folder of local text files as a database, so opening a document could read a local text file into the sheet. In fixed versions only the csv, html and xml...

CVE-2026-63268

LibreOffice Calc is vulnerable to a Local File Inclusion (LFI) flaw when linking cell ranges to external data sources. An attacker can exploit the sql provider and sdbc:flat:file:// database href by naming a folder of local text files as a database. This allows a user to read local text files int...

CVE-2026-63268

LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. A link of the sql type could name a folder of local text files as a database, so opening a document could read a local text file into the sheet. In fixed versions only the csv, html and xml...

CVE-2026-63266

LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. Through such a link a document could open an embedded Firebird database that wrote a file to any location the user could write to. In fixed versions an embedded Firebird database can open or...

CVE-2026-63277 RCE via calcext:data-mappings, sql provider and jdbc connector

LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. A document could name a Java database driver for such a link to be loaded from a remote location, so opening the document could run Java code from that location. In fixed versions an entry in...

CVE-2026-63277

LibreOffice Calc is vulnerable to Remote Code Execution (RCE) when opening a document that links a cell range to an external data source. An attacker can craft a document naming a Java database driver to be loaded from a remote location, causing the application to execute Java code from that sour...

CVE-2026-63277

LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. A document could name a Java database driver for such a link to be loaded from a remote location, so opening the document could run Java code from that location. In fixed versions an entry in...

CVE-2026-63277 RCE via calcext:data-mappings, sql provider and jdbc connector

LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. A document could name a Java database driver for such a link to be loaded from a remote location, so opening the document could run Java code from that location. In fixed versions an entry in...

railsgoat

RailsGoat RailsGoat는 Ruby on Rails로 구축된 의도적으로 취약하게 만든 웹 애플리케이션입니다. OWASP Top 10의 실제 보안 취약점을 시연하며, 개발자와 보안 전문가를 위한 실습형 교육 플랫폼 역할을 합니다. RailsGoat란 무엇인가요? RailsGoat는 웹 애플리케이션 보안을 교육하기 위해 설계된 의도적으로 불안전한 Rails 애플리케이션입니다. 취약점을 탐색하고 악용함으로써 다음을 배울 수 있습니다: 일반적인 보안 결함이 Rails 애플리케이션에서 어떻게 나타나는지 코드 검토와 테스트를 ...

nex-forms_SQL-Injection-CVE-2023-2114

nex-formsSQL-Injection CVE-2023-2114 https://vulners.com/cve/CVE-2023-2114 https://wpscan.com/vulnerability/3d8ab3a5-1bf8-4216-91fa-e89541e5c43d Quick Review about the SQL-Injection in the NEX-Forms Plugin for WordPress Uploaded exploit Note that this uploaded exploit code isnt for this particula...

CVE-2026-PoCs

💀 Exploit-Index: The Ultimate CVE Proof of Concept PoC & Exploit Database 150,000+ Verified Exploits & PoCs for Cybersecurity Research All In One Place Explore the Interactive Portal • View the JSON Index • Browse CVEs 📖 About SecureWithUmer/Exploit-Index is the world's premier, zero-API aggregat...