CVE-2026-85625

A flaw was found in sift sift.js. The component's handling of query keys allows for prototype pollution, where an attacker can modify the Object.prototype.$where property. This manipulation can lead to arbitrary code execution when benign filter calls are made or when an untrusted query object...

SUSE-SU-2026:4191-1 Security update for python-GitPython

This update for python-GitPython fixes the following issues: - CVE-2026-87817: failure to properly validade the git directory location allows attackers to impersonate the git directory using tracked files and execute arbitrary code by placing pre-commit hooks in the tracked hooks directory...

RLSA-2026:67314 Important: nginx security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fixes: nginx: NGINX: Arbitrary code execution via crafted HTTP requests CVE-2026-42533 For more details about the security issues, including the impac...

postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in pg_dump

A vulnerability in PostgreSQL allows a malicious origin-server superuser to achieve client-side arbitrary code execution during a database restore. By injecting untrusted data into a pgdump export, the attacker can exploit the input expansion of the psql \restrict meta-command. When a victim...

postgresql: PostgreSQL: Arbitrary code execution via type confusion with "internal" arguments

A type confusion vulnerability in PostgreSQL allows any user to execute arbitrary code as the database's operating system user by calling functions with mishandled "internal" data type arguments...

postgresql: pltcl: plperl: PostgreSQL: Arbitrary code execution in 32-bit pltcl and plperl

A flaw was found in PostgreSQL. An integer wraparound vulnerability in 32-bit builds of pltcl and plperl allows an object creator to cause the server to undersize an allocation and write out-of-bounds via crafted function bodies. This can lead to arbitrary code execution as the operating system...

postgresql: PostgreSQL pg_dump: Arbitrary code execution via crafted transform lists

A flaw was found in PostgreSQL pgdump. A heap buffer overflow vulnerability exists when processing long function transform lists. An authenticated object creator can exploit this by providing a specially crafted transform list. This allows the attacker to execute arbitrary code as the operating...

postgresql: PostgreSQL: Arbitrary code execution via long POSIX timezone abbreviation

A heap buffer overflow flaw was found in the PostgreSQL tochartimestamptz function. An attacker can exploit this by supplying an overly long POSIX timezone abbreviation to execute arbitrary code as the database's operating system user, potentially resulting in complete system compromise...

postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions

A flaw was found in PostgreSQL. An unprivileged database user can exploit an integer wraparound vulnerability in the tsvector and tsquery data type functions. By providing crafted large inputs, the server can be forced to undersize an allocation, leading to an out-of-bounds write. This could...

postgresql: PostgreSQL: Arbitrary code execution via type confusion in cursor lifecycle

A flaw was found in PostgreSQL. This vulnerability, caused by type confusion in the 'portal'/cursor lifecycle, allows a user to execute arbitrary code as the operating system user running the database. This can occur by re-creating a cursor or other portal with different types. Successful...

postgresql: PostgreSQL: Arbitrary code execution via logical decoding plugin

A flaw was found in PostgreSQL. Missing authorization in PostgreSQL's logical decoding feature allows a non-superuser with REPLICATION privilege to load arbitrary files. This can lead to arbitrary code execution as the operating system account running the server...

postgresql-fuzzystrmatch: PostgreSQL fuzzystrmatch: Arbitrary code execution via integer wraparound

A flaw was found in PostgreSQL fuzzystrmatch. A low-privileged database user can exploit an integer wraparound vulnerability by providing extreme inputs to the levenshtein or levenshteinlessequal SQL functions. This allows the user to execute arbitrary code as the operating system user running th...

postgresql: PostgreSQL: Arbitrary code execution via type confusion in 'refint' module

A flaw was found in PostgreSQL. A type confusion vulnerability in the 'refint' module allows an object creator to execute arbitrary code as the operating system user running the database. This could lead to a complete compromise of the database server...

CVE-2014-6271-EXPLOIT

CVE-2014-6271 - Shellshock 💣 Shellshock 是 GNU Bash shell 中的一个严重漏洞。它影响至 4.3 版本的 Bash，并允许远程攻击者执行任意代码。此漏洞源于 Bash 在处理环境变量值中函数定义之后的尾部字符串时的方式。 🔍 详细说明 Shellshock 漏洞允许攻击者通过特制的环境变量注入并执行代码。这些变量可以通过多种途径设置，例如： OpenSSH sshd 中的 ForceCommand 功能 Apache HTTP Server 中的 modcgi 和 modcgid 模块 由未指定的 DHCP 客户端执行的脚本...

CVE-2026-91778

CVE-2026-91778 affects Octopus Server and stems from incorrect permission validation during script execution. Users holding certain scoped permission sets can execute arbitrary scripts on a worker—including the Octopus Server built-in worker—without possessing the required authorization. This is ...

CVE-2021-4034

CVE-2021- polkit の pkexec ユーティリティにローカル権限昇格の脆弱性が見つかりました。pkexec アプリケーションは setuid ツールであり、未特権ユーザーが事前定義されたポリシーに従って特権ユーザーとしてコマンドを実行できるように設計されています。現在のバージョンの pkexec は呼び出しパラメータの数を正しく処理できず、環境変数をコマンドとして実行しようとします。攻撃者はこれを悪用して、pkexec...

CVE-2025-14174-Chrome-Zero-Day

受影响软件：121.0.6167.85 版本之前的 Google Chrome。 漏洞类型：V8 JavaScript 引擎中的释放后使用。 描述：V8 垃圾收集机制中的一个释放后使用漏洞，允许恶意构造的 JavaScript 破坏内存，从而在浏览器上下文中执行任意代码。 恶意代码示例包括 exploit.js（JavaScript PoC）以及用于识别 CVE 的 HTB 可用代码（HTML Embed）。...

CVE-2026-52484

MitraStar GPT-2742GX4X5v6-SV (firmware GL_g2.5_100XNT0b23_3) is vulnerable to authenticated remote code execution via the /cgi-bin/device-management-utilities-internet.cgi endpoint. Diagnostic tools in the VIVO administration panel concatenate user input into shell commands; a blacklist-based san...

RockyLinux 10 : postgresql18 (RLSA-2026:67280)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:67280 advisory. postgresql: PostgreSQL: SQL injection in pgcreatesubscriber allows arbitrary SQL execution as superuser CVE-2026-6476 postgresql: PostgreSQL: Arbitrary...

RHEL 9 : postgresql:16 (RHSA-2026:67491)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:67491 advisory. PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL: Arbitrary code executi...