corpus.blog
42,390 blogs · 5,361,753 posts Claim your blog
Record · corpus.blog/posts/01a0fcb0-b475-70f0-8435-478f51c8d8f0

plORMbing your Django ORM - elttam

elttam.com · published 24 March 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at elttam.com Wayback capture
2blogs citing
First cited
30 Jul 2024
Most recent
6 Jul 2025
Rank this month
not ranked
External links
25
Words captured
6,715

Cited by

Blog
In the post
Date
blog.p1.gs
Exploiting an ORM Injection to Steal Cryptocurrency from an Online Shooter Read at the source ↗
6 Jul 2025
PentesterLab
ORM Leak Exploitation Against SQLite Read at the source ↗
30 Jul 2024

Links from this post

Link
Host
https://positive.security/
positive.security
https://positive.security/blog/ransack-data-exfiltration
positive.security
https://github.com/activerecord-hackery/ransack
github.com
https://guides.rubyonrails.org/active_record_basics.html
guides.rubyonrails.org
https://github.com/activerecord-hackery/ransack/releases/tag/v4.0.0
github.com
https://strapi.io/
strapi.io
https://github.com/strapi/strapi/security/advisories/GHSA-jjqf-j4w7-92w8
github.com
https://github.com/Boegie19
github.com
https://www.ghostccamm.com/blog/multi_strapi_vulns/
ghostccamm.com
https://www.ghostccamm.com/blog/strapi_filter_bypass_vuln/
ghostccamm.com
https://github.com/strapi/strapi/security/advisories/GHSA-v8gg-4mq2-88q4
github.com
https://github.com/strapi/strapi/security/advisories/GHSA-6j89-frxc-q26m
github.com
https://github.com/HumanSignal/label-studio/security/advisories/GHSA-6hjj-gq77-j4qw
github.com
https://github.com/TryGhost/Ghost/security/advisories/GHSA-r97q-ghch-82j9
github.com
https://github.com/payloadcms/payload/security/advisories/GHSA-35jj-vqcf-f2jff
github.com
https://docs.djangoproject.com/en/5.0/topics/db/queries/
docs.djangoproject.com
https://www.djangoproject.com/
djangoproject.com
https://docs.djangoproject.com/en/5.0/ref/models/querysets/
docs.djangoproject.com
https://github.com/django/django/blob/5.0.2/django/contrib/auth/models.py
github.com
https://github.com/django/django/blob/5.0.2/django/contrib/auth/base_user.py
github.com
https://owasp.org/www-community/attacks/Regular_expression_Denial_of_Service_-_ReDoS
owasp.org
https://www.sqlite.org/lang_expr.html
sqlite.org
https://www.postgresql.org/message-id/8823.1551589517%40sss.pgh.pa.us
postgresql.org
https://mariadb.com/kb/en/server-system-variables/
mariadb.com
https://x.com/GhostCcamm
x.com