Astra Linux – Vulnerability in SQLite3

The flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT JOIN where the right-hand side is a view. This can lead to a NULL pointer dereference or incorrect results...

NanoMQ-Memory-Leak-Research

CVE-2026-36590：EMQ NanoMQ v0.24.9 中的拒绝服务漏洞 本仓库包含 CVE-2026-36590 的公开公告和技术分析，这是一项影响 EMQ NanoMQ v0.24.9 的拒绝服务漏洞。 审核说明 本仓库公开旨在为 CVE 审核提供可访问的技术参考。CVE-2026-36590 的最终分类将由 CVE 团队或相关 CNA 决定。 NanoMQ 团队对该问题提出异议，并认为其与配置相关。本仓库侧重于技术证据，包括复现材料、ASAN 结果、运行时日志和源码分析。 公告信息 CVE ID：CVE-2026-36590 厂商/项目：EMQ / NanoMQ...

CVE-2025-44203

CVE-2025-44203：HotelDruid 3.0.0 / 3.0.7 敏感信息泄露与拒绝服务 摘要 HotelDruid 3.0.0 和 3.0.7 在 creadb.php 设置端点上存在一个竞争条件，该端点在设置完成前可被访问。它有两种影响，均源于同一次掉入的竞争：敏感信息泄露（通过详细的 SQL 错误消息）和拒绝服务。 通过一次性发送大量 POST 请求，攻击者可触发竞争条件并从响应中读取敏感数据，包括管理员用户名、密码哈希和盐值。如果在 Debian 软件包配置期间选择的密码较弱，则可通过词表离线恢复。...

CVE-2023-31717

CVE-2023-31717 可以在传递为 JSON 的 HTTP POST id 参数中进行 SQL Injection，从而能够从 SQLite 数据库中提取机密信息 Payload - "id":"n7c734712-aabf4eb3' AND 2630=LIKECHAR65,66,67,68,69,70,71,UPPERHEXRANDOMBLOB500000000/2 AND 'MIZH'='MIZH" 受影响产品名称: FUXA 受影响版本: = 1.1.12 问题: SQL Injection 描述: 可以在传递为 JSON 的 HTTP POST id 参数中进行 SQL...

Cartero

Cartero Cartero现在是一个Go CLI，内置无需配置的工作区数据库，取代了旧版依赖MongoDB的运行时。 当前实现提供： 由Cobra和Lip Gloss驱动的精美终端体验 通过cartero serve运行的本地管理Web UI和安全测试页面 默认安全的战役验证和预览命令 位于.cartero/cartero.sqlite的嵌入式SQLite工作区存储 用于模板种子、克隆导入、受众同步、分析导出和交互记录的第一方插件 从CSV、JSON、SARIF和JSONL导入规范化发现 单向旧版Mongo导出迁移到当前工作区 单元测试、CLI测试和一致性测试，带有冒烟测试工作流...

tgscope

tgscope Telegram OSINT, scraping and archival. A local web app that runs entirely on your machine and talks only to Telegram. npm install npm start Then open http://127.0.0.1:5173. The first run walks you through API credentials, a QR sign-in and loading your dialogs. Telegram is the only server ...

xerial__sqlite-jdbc_CVE-2023-32697_3-41-2-1

SQLite JDBC 驱动 SQLite JDBC 是一个用于在 Java 中访问和创建 SQLite 数据库文件的库。 我们的 SQLiteJDBC 库无需任何配置，因为包括 Windows、macOS、Linux 等主要操作系统的原生库都被组装到一个 JAR（Java 归档）文件中。 用法 ➡️ 更多用法示例和配置请参阅 USAGE.md SQLite JDBC 是一个通过 JDBC API 访问 SQLite 数据库的库。有关 JDBC 的一般用法，请参阅 JDBC 教程 或 Oracle JDBC 文档。 1. 下载 sqlite-jdbc-VERSION.jar，然后将此 ja...

Teamsniper

Teamsniper Teamsniper 是一款用于在 Microsoft Teams 中提取关键词（如密码、电子邮件、数据库等）的工具。 用法 帮助选项 usage: Teamsniper.py -h -d DATABASE -a AUTHTOKEN -s SEARCH Teamsniper is a tool for fetching the given keywords in Microsoft Teams. options: -h, --help show this help message and exit -d DATABASE, --database DATABASE...

[SECURITY] Fedora 45 Update: libspatialite-5.1.0-14.fc45

SpatiaLite is a a library extending the basic SQLite core in order to get a full fledged Spatial DBMS, really simple and lightweight, but mostly OGC-SFS compliant...

PYSEC-2026-4107 MPXJ: XXE Vulnerability in MerlinReader

Impact MPXJ used the default configuration when creating a DocumentBuilder instance, which leaves doctype declarations enabled, when parsing the XML content of the ZTIMEINTERVALS column from a Merlin project SQLite file. This would allow a carefully crafted XML payload to read an arbitrary file...

PYSEC-2026-4128 Open WebUI: Sign-in as another user via wildcard characters in the OAuth subject claim on SQLite

Summary On SQLite deployments, the lookup that maps an external identity to a local account does a substring match instead of an exact match. A subject value containing SQL wildcard characters therefore matches accounts the value was never issued for, and the sign-in binds to whichever account th...

Open WebUI: Sign-in as another user via wildcard characters in the OAuth subject claim on SQLite

SummaryOn SQLite deployments, the lookup that maps an external identity to a local account does a substring match instead of an exact match. A subject value containing SQL wildcard characters therefore matches accounts the value was never issued for, and the sign-in binds to whichever account the...

SiYuan: Unauthenticated SQL injection in searchDocs via unescaped keyword (publish mode): cross-notebook read/write with statement stacking

Summary The /api/filetree/searchDocs endpoint concatenates the caller-supplied search keyword directly into a SQL statement with no escaping and no parameter binding. The endpoint is gated by CheckAuth only reachable by the publish RoleReader token, and by the anonymous account when...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.17.58 bug fix and security update

Red Hat OpenShift Container Platform release 4.17.58 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.17. Red Hat Product Security has rated this update as having a...

CLEANSTART-2024-NS85583 Use after free in sqlite in Google Chrome prior to 92

Security vulnerability affects the chromium package. Use after free in sqlite in Google Chrome prior to 92...

Rocky Linux 8 [CIQ] Security Update: mingw32-sqlite / mingw32-sqlite-debuginfo / mingw32-sqlite-static / etc (crlsa-2026_61242)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202661242 advisory. sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data CVE-2026-11822 Tenable has extracted the preceding description block directly from...

Rocky Linux 10.0 [CIQ] Security Update: sqlite / sqlite-debuginfo / sqlite-debugsource / sqlite-devel / etc (crlsa-2025_7517)

The Rocky Linux 10.0 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20257517 advisory. SQLite: integer overflow in SQLite CVE-2025-3277 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note that Nessus...

Rocky Linux 8 [CIQ] Security Update: lemon / lemon-debuginfo / sqlite / sqlite-debuginfo / etc (crlsa-2023_3840)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20233840 advisory. sqlite: Crash due to misuse of window functions. CVE-2020-24736 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note...

CentOS Linux 8.4 [TuxCare] Security Update: lemon / sqlite / sqlite-analyzer / sqlite-devel / sqlite-doc / etc (CENTOS8.4:CLSA-2025:1754410836)

The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2025:1754410836 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL...

Rocky Linux 9.2 [CIQ] Security Update: sqlite / sqlite-devel / sqlite-libs Multiple Vulnerabilities (ciqsa-2026_1538)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261538 advisory. This advisory aggregates security fixes for the sqlite SRPM in CIQ LTS 9.2. It addresses 2 CVEs: CVE-2026-11822, CVE-2026-11824. Tenable has extracted th...