"Injection" | MrHacker

Fawkes – Search For Targets Vulnerable To SQL Injection

Fawkes is a tool to search for targets vulnerable to SQL Injection. Performs the search using Google search engine. Options...

2.4K

Exploitation Tools

N1QLMap – Exfiltrate Data From Couchbase Database By Exploiting N1QL Injection Vulnerabilities

N1QLMap is an N1QL exploitation tool. Currently works with Couchbase database. The tool supports data extraction and performing SSRF attacks via...

4.5K

Exploitation Tools

NoSQLi – NoSql Injection CLI Tool

NoSQL scanner and injector. About Nosqli I wanted a better nosql injection tool that was simple to use, fully command line...

3.9K

Vulnerabilities

Critical SQL & XSS injection vulnerabilities detected in phpMyAdmin. Update it to protect your database

Information security specialists reported the finding of two critical vulnerabilities in phpMyAdmin, the tool written in PHP to manage MySQL management through...

3.2K

Data Security

Whitehat hacker bypasses SQL injection filter for Cloudflare

Cloudflare is one of the top web security companies out there with a sizeable clientele requiring it to takes its security practices...

2.4K

Exploitation Tools

SQLMap- Automatic SQL Injection And Database Takeover Tool

SQLMap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking...

3.4K

Vulnerabilities

SQL injection flaws in rConfig. Secure your networks before hackers take control over them

A team of information security awareness specialists has released a report on the detection of 4 vulnerabilities in rConfig, the popular open...

59

Vulnerabilities

Critical Bugs with Citrix Allow Unauthenticated Code Injection, Privilege Escalation DoS & Data Theft

Citrix patched 11 security flaws with Citrix ADC, Citrix Gateway, and Citrix SD-WAN WANOP edition. Out of that four bugs can be...

1.1K

Exploitation Tools

Server Side Template Injection Payloads

Server-side template injection is when an attacker is able to use native template syntax to inject a malicious payload into a...

1.6K

Data Security

[CVE-2020-1956] Apache Kylin command injection vulnerability

A team of cyber security awareness specialists recently revealed the finding of a critical vulnerability in Apache Kylin, the open source distributed...

2.5K

Vulnerabilities

SQL injection & other vulnerabilities in Schneider Electric EcoStruxure Operator Terminal Expert affect thousands of manufacturing plants

Once again, a Schneider Electric development is affected by security flaws. Cloud computing security specialists have revealed the presence of at least...

1.4K

Vulnerabilities

SQL injection and cross site scripting vulnerability in PHP Fusion

Specialists from a pentesting course have just revealed the discovery of multiple vulnerabilities in PHP Fusion, an open source content management system...

954

Vulnerabilities

SQL injection vulnerability in Sophos XG firewall allows hackers to configure firewall

Last week, the web application penetration testing team at cybersecurity solutions firm Sophos received a report on an XG Firewall implementation that...

1.8K

Vulnerabilities

Hackers Exploit SQL Injection & Code Execution Zero-day Bugs in Sophos Firewall

Sophos patched a SQL injection flaw with XG Firewall product that exploited by attackers in the wild. Sophos informed about the bug...

3.4K

Vulnerabilities

Session hijacking & malware injection vulnerabilities found in Apple Mail app and AirShare affecting iPhone, iPad & Mac

A new report has revealed new cybersecurity threats. According to vulnerability assessment experts, ZecOps says multiple iPhone models are exposed to exploiting...

3.5K

How To

How To Prevent SQL Injection Attacks In 2020

SQL injection attacks pose a continuous threat to the security and integrity of websites and apps. These attacks provide an easy way...

918

Vulnerabilities

Hack networks using Cisco SD-WAN through SQL injection vulnerability

Another week is about to end and the report on some security flaws affecting Cisco products could not be missing. This time,...

1.4K

Vulnerabilities

11 Bugs in Cisco Data Center Network Manager Let Hackers Perform RCE, SQL Injection, Authentication Bypass Attacks

Cisco released a security update for several vulnerabilities that affected the Cisco products, including 3 critical remote code execution vulnerabilities that affected...

359

Hack Tools

XML External Entity (XXE) Injection Payload List

In this section, we’ll explain what XML external entity injection is, describe some common examples, explain how to find and exploit various...

3.3K

Vulnerabilities

Critical SQL injection vulnerability affecting phpMyAdmin

Vulnerability testing specialists reported the finding of a security flaw in phpMyAdmin, one of the world’s most widely used MySQL database management...