CVE-2026-3494_Verfication

CVE-2026-3494 - MariaDB serveraudit 日志记录验证 PoC 本项目提供了一个专用环境，用于验证和分析 MariaDB serveraudit 插件在 SQL 查询中使用特定内联注释（、--）时可能存在的审计日志绕过问题。 主要发现 v11.8.6 中的日志遗漏 ：在 MariaDB v11.8.6 中观察到某些查询（例如带注释的 SET PASSWORD 或 Error 1046 场景）未能被记录到审计日志中，而该版本此前被认为已修复此问题。 潜在的解析器差异 ：发现近期版本中审计插件解析器行为可能发生了变化，多行注释（）可能导致 DCL...

CVE-2025-24860

Incorrect Authorization vulnerability in Apache Cassandra allowing users to access a datacenter or IP/CIDR groups they should not be able to when using CassandraNetworkAuthorizer or CassandraCIDRAuthorizer. Users with restricted data center access can update their own permissions via data control...

CVE-2025-24860: Incorrect Authorization

Incorrect Authorization vulnerability in Apache Cassandra allowing users to access a datacenter or IP/CIDR groups they should not be able to when using CassandraNetworkAuthorizer or CassandraCIDRAuthorizer. Users with restricted data center access can update their own permissions via data control...