impacket

Impacket Copyright Fortra, LLC and its affiliated companies. All rights reserved. Impacket was originally created by SecureAuth, and now maintained by Fortra's Core Security. Impacket is a collection of Python classes for working with network protocols. Impacket is focused on providing low-level...

MSSQL-Pentest-Cheatsheet

🗄️ MSSQL Pentest Cheatsheet A practical Microsoft SQL Server penetration testing cheat sheet designed for penetration testers, red teamers, and cybersecurity learners to understand how to enumerate, exploit, and abuse misconfigured MSSQL databases during security assessments. 🌐 Connect With Us 🔵...

cve-2024-50330-ivanti_epm_sqli_reproduction

CVE-2024-50330: Ivanti Endpoint Manager EPM SQL Injection to RCE Overview CVE-2024-50330 is a critical pre-authentication SQL injection vulnerability in Ivanti Endpoint Manager EPM that allows a remote unauthenticated attacker to achieve remote code execution on the target server. The vulnerabili...

mssql-command-tool

mssql Terminal Connection Tool | Command Execution Example ./mssql-command-tool-mac -s 10.10.10.10 -u sa -p jas502n -P 1433 -c "whoami" nt service\mssqlserver ./mssql-command-tool-mac -s 10.10.10.10 -u sa -p jas502n -P 1433 -c "net user" \ 的用户帐户...

Telaeris XPressEntry unauthenticated SQLi RCE

Unauthenticated POST /activities injects stacked T-SQL via sNotes to enable xpcmdshell and run attacker commands on the backend SQL Server. !/usr/bin/env python3 -- coding: utf-8 -- """Telaeris XPressEntry unauthenticated SQL injection to xpcmdshell.""" from future import annotations import uuid...

Countersoft Gemini Authenticated SQL Injection to xp_cmdshell RCE — Detect

Fingerprint / reachability check for Countersoft Gemini Authenticated SQL Injection to xpcmdshell RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Countersoft Gemini Authenticated SQL Injection to xpcmdshell RCE""" from kittysploit import from lib.protocols.http.httpclient import...

Lansweeper LicenseActions second-order SQLi RCE

Authenticated addsqlserver stores malicious Name; getsqlservers triggers second-order SQL injection and xpcmdshell. !/usr/bin/env python3 -- coding: utf-8 -- """Lansweeper LicenseActions second-order SQLi to xpcmdshell RCE.""" from future import annotations import json import re import time from...

DBxtra .NET — Unauthenticated SOAP xp_cmdshell RCE — Detect

Fingerprint / reachability check for DBxtra .NET — Unauthenticated SOAP xpcmdshell RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for DBxtra .NET — Unauthenticated SOAP xpcmdshell RCE""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Logo Netsis NetOpenX REST 2.0.6.9 — Unauthenticated SQL Injection to xp_cmdshell — Detect

Fingerprint / reachability check for Logo Netsis NetOpenX REST 2.0.6.9 — Unauthenticated SQL Injection to xpcmdshell SYSTEM RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Logo Netsis NetOpenX REST 2.0.6.9 — Unauthenticated SQL Injection to xpcmdshell SYSTEM RCE""" from kittysploit...

Countersoft Gemini SQL injection xp_cmdshell RCE

After /account/login, stacked SQL in GetCustomFieldValue term enables xpcmdshell Windows, blind marker file. !/usr/bin/env python3 -- coding: utf-8 -- """Countersoft Gemini authenticated SQLi to xpcmdshell RCE.""" from future import annotations import re from urllib.parse import urlencode from...

Inflectra SpiraTeam — PlanningBoard yAxisKey SQLi → xp_cmdshell RCE — Detect

Fingerprint / reachability check for Inflectra SpiraTeam — PlanningBoard yAxisKey SQLi → xpcmdshell RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Inflectra SpiraTeam — PlanningBoard yAxisKey SQLi → xpcmdshell RCE""" from kittysploit import from lib.protocols.http.httpclient impor...

DBxtra .NET unauthenticated SOAP xp_cmdshell RCE

Unauthenticated DBxtraService.asmx chains ProjectConnectionInsertDB, ProjectObjectInsertDB xpcmdshell SQL, UpdateDatabaseVersion, and DataGrid.aspx viewer execution. !/usr/bin/env python3 -- coding: utf-8 -- """DBxtra .NET unauthenticated SOAP xpcmdshell RCE.""" from future import annotations...

Netsis NetOpenX token endpoint SQLi xp_cmdshell RCE

Unauthenticated POST /api/v2/token idmuserid parameter stacked SQL enables xpcmdshell on the backend SQL Server. """Logo Netsis NetOpenX OAuth token SQLi to xpcmdshell RCE.""" from future import annotations import re import time from urllib.parse import urlencode from kittysploit import from...

CVE-2026-112252

A vulnerability has been found in Wuxi Wubang Security Software Wubang Five-in-One Safety Production Management Information System up to 3.5. Affected is the function xpcmdshell of the file /ws.asmx. The manipulation of the argument sql leads to sql injection. The attack may be initiated remotely...

EUVD-2026-104573

A vulnerability has been found in Wuxi Wubang Security Software Wubang Five-in-One Safety Production Management Information System up to 3.5. Affected is the function xpcmdshell of the file /ws.asmx. The manipulation of the argument sql leads to sql injection. The attack may be initiated remotely...

CVE-2026-112252

A SQL injection vulnerability exists in the Wuxi Wubang Security Software Wubang Five-in-One Safety Production Management Information System (versions up to 3.5). The flaw is located in the xp_cmdshell function of the /ws.asmx file, where manipulation of the sql argument allows for remote executi...

CVE-2026-112252 Wuxi Wubang Security Software Wubang Five-in-One Safety Production Management Information System ws.asmx xp_cmdshell sql injection

A vulnerability has been found in Wuxi Wubang Security Software Wubang Five-in-One Safety Production Management Information System up to 3.5. Affected is the function xpcmdshell of the file /ws.asmx. The manipulation of the argument sql leads to sql injection. The attack may be initiated remotely...

CVE-2026-112252 Wuxi Wubang Security Software Wubang Five-in-One Safety Production Management Information System ws.asmx xp_cmdshell sql injection

A vulnerability has been found in Wuxi Wubang Security Software Wubang Five-in-One Safety Production Management Information System up to 3.5. Affected is the function xpcmdshell of the file /ws.asmx. The manipulation of the argument sql leads to sql injection. The attack may be initiated remotely...

CVE-2026-112252: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in Wuxi Wubang Security Software Wubang Five-in-One Safety Production Management Information System up to 3.5. Affected is the function xpcmdshell of the file /ws.asmx. The manipulation of the argument sql leads to sql injection. The attack may be initiated remotely...

Wuxi Wubang Security Software ‘Five-in-One’ Safety Production Management Information System input validation error vulnerability

Versions 3.5 and earlier of the Wuxi Wubang Security Software ‘Five-in-One’ Safety Production Management Information System contain a security vulnerability. This vulnerability stems from improper handling of the ‘sql’ parameter in the xpcmdshell function within the file /ws.asmx, potentially...