CVE-2026-26198-analysis

CVE-2026-26198 — Ormar ORMにおけるSQLインジェクション Python製非同期ORMにおける重大な（CVSS 9.8）SQLインジェクション脆弱性の詳細な分析。再現、解析、修正を含む。 脆弱性の概要 Ormar は、Python向けの人気のある非同期ミニORMであり、FastAPIやStarletteと併用されることが一般的です。バージョン 0.9.9から0.22.0 には、min および max 集計メソッドにSQLインジェクションの脆弱性が存在します。 根本原因は「部分的な実装」バグです。sum と avg...

CVE-2022-28346

CVE-2022-28346 PoC 영향: QuerySet.annotate, aggregate 및 extra에서 잠재적 SQL 인젝션. 설치 poetry install python manage.py makemigrations python manage.py migrate python manage.py loaddata data.json python manage.py runserver PoC ?field=poc.title" FROM "pocblog" union SELECT "-1,",sqliteversion,"3" -- 참고 자료 C...

CVE-2022-28346

CVE-2022-28346 Django QuerySet.annotate, aggregate, extra SQL 삽입 환경 초기화 1.python manage.py makemigrations 2.python manage.py migrate 3.访问http://x.x.x.x:8000/ 插入初始化数据 취약점 재현 访问http://x.x.x.x:8000/demo POC: http://x.x.x.x:8000/demo?field=demo.name" FROM "demouser" union SELECT "1",sqliteversion,"3"...

CVE-2022-28346

CVE-2022-28346 QuerySet.annotate, aggregate, extra의 SQL 인젝션 설정: 초기 설정을 위해 ./setup.sh를 실행합니다 데이터베이스를 초기화하려면 Docker 이미지를 엽니다: docker exec -it containerid /bin/bash 그리고 다음 명령을 실행합니다: python manage.py makemigrations cve202228346 python manage.py migrate 다음 명령으로 인스턴스를 시작합니다: docker-compose up 이제 샘플 데이...

CVE-2026-55511

CVE-2026-55511: Yamcs StreamSQL 인증된 RCE 비무장화된 개념 증명 및 기술 문서 - Yamcs StreamSQL 집계 표현식 컴파일러의 인증된 Java 코드 인젝션 취약점CVE-2026-55511에 대한 내용입니다. 필드| 값 ---|--- 제품| Yamcs org.yamcs:yamcs-core 권고| GHSA-3g44-3m7x-cgg2 약점| CWE-94: 코드 생성의 부적절한 제어 심각도| 심각, CVSS 3.1: 9.1 벡터|...

Improper Verification of Cryptographic Signature

Overview org.bouncycastle:bcprov-jdk15to18 is a Java implementation of cryptographic algorithms. Affected versions of this package are vulnerable to Improper Verification of Cryptographic Signature via the BLS12381BasicScheme.keyValidate path in BLS12381BasicScheme.java. An attacker can be accept...

Improper Verification of Cryptographic Signature

Overview Affected versions of this package are vulnerable to Improper Verification of Cryptographic Signature via the BLS12381BasicScheme.keyValidate path in BLS12381BasicScheme.java. An attacker can be accepted as a signer in BLS aggregate verification by supplying an ECPoint built on a...

UBUNTU-CVE-2026-71891

In Bouncy Castle for Java before 1.86, BLS12381BasicScheme.keyValidate, and so BLSPublicKeyParameters and every BasicScheme, MessageAugmentation and ProofOfPossession verify and aggregateVerify that gate on it, accepted a public key built on a foreign ECCurve that merely shares BLS12-381's field...

EUVD-2026-92005

In Bouncy Castle for Java before 1.86, BLS12381BasicScheme.keyValidate, and so BLSPublicKeyParameters and every BasicScheme, MessageAugmentation and ProofOfPossession verify and aggregateVerify that gate on it, accepted a public key built on a foreign ECCurve that merely shares BLS12-381's field...

CVE-2026-71891 BLS12-381 key validation accepts a public key built on a foreign curve

In Bouncy Castle for Java before 1.86, BLS12381BasicScheme.keyValidate, and so BLSPublicKeyParameters and every BasicScheme, MessageAugmentation and ProofOfPossession verify and aggregateVerify that gate on it, accepted a public key built on a foreign ECCurve that merely shares BLS12-381's field...

sqlite3-ruby: Use-After-Free in SQLite Aggregate Arguments in Heap-Allocated Argument Array

Summary Using Databasecreateaggregate, createaggregatehandler, or Databasedefineaggregator to define an aggregate function that takes two or more arguments, and then evaluating it over TEXT or BLOB column values, can free the Ruby objects holding those arguments while a later argument is still...

GHSA-MWM8-39RW-8826 sqlite3-ruby: Use-After-Free in SQLite Aggregate Arguments in Heap-Allocated Argument Array

Summary Using Databasecreateaggregate, createaggregatehandler, or Databasedefineaggregator to define an aggregate function that takes two or more arguments, and then evaluating it over TEXT or BLOB column values, can free the Ruby objects holding those arguments while a later argument is still...

AlmaLinux 9.2 [TuxCare] Security Update: postgresql / postgresql-contrib / postgresql-docs / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1747432102)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1747432102 advisory. - A memory disclosure vulnerability was found in PostgreSQL that allows remote users to access sensitive information by exploiting...

SUSE CVE-2026-88382

hiredis commit 29ea279 post-v1.5.0 contains an uncontrolled memory allocation vulnerability in its RESP aggregate parser...

Linux Distros Unpatched Vulnerability : CVE-2026-88382

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hiredis commit 29ea279 post-v1.5.0 contains an uncontrolled memory allocation vulnerability in its RESP aggregate parser. CVE-2026-88382 Note that Nessus relies...

CVE-2026-88382

hiredis commit 29ea279 post-v1.5.0 contains an uncontrolled memory allocation vulnerability in its RESP aggregate parser...

DEBIAN-CVE-2026-88382

hiredis commit 29ea279 post-v1.5.0 contains an uncontrolled memory allocation vulnerability in its RESP aggregate parser...

PT-2026-98150

hiredis commit 29ea279 post-v1.5.0 contains an uncontrolled memory allocation vulnerability in its RESP aggregate parser...

CVE-2026-88382

hiredis commit 29ea279 post-v1.5.0 contains an uncontrolled memory allocation vulnerability in its RESP aggregate parser...

CVE-2026-88382

The hiredis library (commit 29ea279, post-v1.5.0) contains an uncontrolled memory allocation vulnerability within its RESP aggregate parser . This flaw allows for the allocation of resources without sufficient limits or throttling. While the vulnerability is documented across multiple security ad...