WhoDB < 0.45.0 - Path Traversal

WhoDB contains a path traversal caused by lack of validation when opening database files, letting unauthenticated attackers access arbitrary Sqlite3 databases on the host system, exploit requires attacker to manipulate database filename input. id: CVE-2025-24786 info: name: WhoDB 0.45.0 - Path...

CVE-2022-35737

CVE-2022-35737 Desbordamiento de enteros en la función sqlite3strvappendf de SQLite3. CVSS 6.7 AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H CVE-2022-35737 fue introducido en SQLite versión 1.0.12 y corregido en la versión 3.39.2, disponible el 21 de julio de 2022. Es explotable en sistemas de 64 bits, y l...

mihari

mihari A query aggregator for OSINT based threat hunting. Mihari can aggregate multiple searches across multiple services in a single rule & persist findings in a database. Mihari supports the following services by default. Censys CIRCL passive DNS / passive SSL crt.sh dnstwister Fofa GreyNoise...

crackerjack

!CAUTION This repo is unmaintained, visit https://github.com/sadreck/crackerjack for the latest version. CrackerJack Web Interface for Hashcat by Context Information Security Contents Introduction Architecture Features Limitations Installation Troubleshooting Screenshots License Introduction...

aura-botnet

Aura Botnet C2 Server The botnet's C2 server utilizes the Django framework as the backend. It is far from the most efficient web server, but this is offset by the following: Django is extremely portable and therefore good for testing/educational purposes. The server and database are contained...

novahot

novahot novahot is a webshell framework for penetration testers. It implements a JSON-based API that can communicate with trojans written in any language. By default, it ships with trojans written in PHP, ruby, and python. Beyond executing system commands, novahot is able to emulate interactive...

iOSForensic

iOSForensic iosForensic es una herramienta de Python para ayudar en el análisis forense en iOS. Obtiene archivos, registros, extrae bases de datos sqlite3 y descomprime archivos .plist en xml. Instalación Simplemente clone este repositorio git e instale las dependencias. Dependencias Linux OpenSS...

onedrive_user_enum

onedriveuserenum v2.10 enumera usuarios válidos de OneDrive Para obtener un análisis completo de la técnica de enumeración y de OneDrive enum, consulta el blog aquí: https://www.trustedsec.com/blog/onedrive-to-enum-them-all/ Si buscas la versión anterior de OneDrive Enum sin base de datos, puedes...

CVE-2026-54687

n8n-nodes-sqlite3 is a node for operating a local SQLite database from n8n. Prior to 1.0.0, nodes/SqliteNode/v1/SqliteV1.node.ts exposes the dbpath database file path as a node parameter that permits data expressions from upstream workflow input. A workflow author who maps untrusted input to dbpa...

NPM: n8n-nodes-sqlite3 vulnerable to path traversal via user-controlled database file path (db_path parameter)

NPM: n8n-nodes-sqlite3 vulnerable to path traversal via user-controlled database file path dbpath parameter vulnerability discovered by ? in WordPress Npm n8n-nodes-sqlite3 versions 1.0.0...

n8n-nodes-sqlite3 vulnerable to path traversal via user-controlled database file path (db_path parameter)

Affected versions 1.0.0 Patched version 1.0.0 Description In versions prior to 1.0.0, the SQLite node accepted the database file path as a direct node parameter visible and editable in the workflow. A workflow author who mapped untrusted user input to the dbpath field could allow an attacker to...

GHSA-Q7M3-RHXG-7VXR n8n-nodes-sqlite3 vulnerable to path traversal via user-controlled database file path (db_path parameter)

Affected versions 1.0.0 Patched version 1.0.0 Description In versions prior to 1.0.0, the SQLite node accepted the database file path as a direct node parameter visible and editable in the workflow. A workflow author who mapped untrusted user input to the dbpath field could allow an attacker to...

CVE-2026-54687

n8n-nodes-sqlite3 (versions

EUVD-2026-67158

n8n-nodes-sqlite3 is a node for operating a local SQLite database from n8n. Prior to 1.0.0, nodes/SqliteNode/v1/SqliteV1.node.ts exposes the dbpath database file path as a node parameter that permits data expressions from upstream workflow input. A workflow author who maps untrusted input to dbpa...

CVE-2026-54687 n8n-nodes-sqlite3: Path traversal via user-controlled database file path (db_path parameter)

n8n-nodes-sqlite3 is a node for operating a local SQLite database from n8n. Prior to 1.0.0, nodes/SqliteNode/v1/SqliteV1.node.ts exposes the dbpath database file path as a node parameter that permits data expressions from upstream workflow input. A workflow author who maps untrusted input to dbpa...

CVE-2026-54687 n8n-nodes-sqlite3: Path traversal via user-controlled database file path (db_path parameter)

n8n-nodes-sqlite3 is a node for operating a local SQLite database from n8n. Prior to 1.0.0, nodes/SqliteNode/v1/SqliteV1.node.ts exposes the dbpath database file path as a node parameter that permits data expressions from upstream workflow input. A workflow author who maps untrusted input to dbpa...

PT-2026-82684

n8n-nodes-sqlite3 is a node for operating a local SQLite database from n8n. Prior to 1.0.0, nodes/SqliteNode/v1/SqliteV1.node.ts exposes the db path database file path as a node parameter that permits data expressions from upstream workflow input. A workflow author who maps untrusted input to db...

ROOT-OS-DEBIAN-12-CVE-2025-7709 CVE-2025-7709 in sqlite3 - Patched by Root

Root has patched CVE-2025-7709 in the sqlite3 package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-11822 CVE-2026-11822 in sqlite3 - Patched by Root

Root has patched CVE-2026-11822 in the sqlite3 package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-11824 CVE-2026-11824 in sqlite3 - Patched by Root

Root has patched CVE-2026-11824 in the sqlite3 package for Root:Debian:12. Multiple fixed versions available...