CVE-2026-52614

CVE-2026-52614 - RuoYi v4.8.3 filterKeyword Bypass SQL Injection 中文 | English Authorization required / 仅限授权测试 This repository is intended for security research and authorized testing only. Do not use it against systems without explicit permission. 本仓库仅用于安全研究与已获明确授权的测试。请勿对未授权系统使用。 中文说明 漏洞简介 RuoYi...

SQL Injection

Overview PyAthena is a Python DB API 2.0 PEP 249 client for Amazon Athena Affected versions of this package are vulnerable to SQL Injection through its escaper selection for DELETE and CREATE TABLE ... AS SELECT statements. An attacker can break out of a parameterized string literal and inject...

CVE-2026-65321

PyAthena prior to 3.35.4 contains a sql injection vulnerability that allows unauthenticated attackers to inject arbitrary SQL by exploiting improper quote-escaping in DefaultParameterFormatter.format, which routes DELETE and CTAS statements to the escapehive function that backslash-escapes single...

CVE-2026-65321 PyAthena SQL Injection via DefaultParameterFormatter DELETE/CTAS

PyAthena prior to 3.35.4 contains a sql injection vulnerability that allows unauthenticated attackers to inject arbitrary SQL by exploiting improper quote-escaping in DefaultParameterFormatter.format, which routes DELETE and CTAS statements to the escapehive function that backslash-escapes single...

CVE-2026-65321

CVE-2026-65321 affects PyAthena prior to 3.35.4. The vulnerability stems from improper quote escaping in DefaultParameterFormatter.format(), where DELETE and CTAS flows go through _escape_hive and backslash-escape single quotes instead of doubling them. Because Athena and Trino do not treat backs...

CVE-2026-16087: Improper Neutralization of Special Elements used in an SQL Command

The Icegram Engage – Popups, Optins, CTAs & Lead Generation plugin for WordPress is vulnerable to second-order SQL Injection via 'messagesid' Parameter in all versions up to, and including, 3.1.42 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on th...

Serverless ETLs? Easy Data Lake Transformations using AWS Athena

In a data lake raw data is added with little or no processing, allowing you to query it straight away. This gives you a great way to learn about your data - whether it represents a quick win or a fast fall. However, there are two disadvantages: performance and costs. If, for example you added CSV...

Security Bulletin: IBM® Db2®'s RCAC rules are not being enforced by CTAS sub-select statements (CVE-2018-1857).

Summary Db2's Row and Column Access Control RCAC rules are not being enforced when creating a table using AS CTAS sub-select statements. RCAC is not enforced when Db2 uses the 'WITH DATA' clause to select and insert data into the target table. Vulnerability Details CVEID: CVE-2018-1857 DESCRIPTIO...