83 matches found
CVE-2023-3163-SQL-Injection-Prevention
CVE-2023-3163-SQL注入防护 一种简单快速的方法来检查你的Oracle SQL Developer是否容易受到SQL注入攻击（CVE-2023-3163），该漏洞最常见于SQL Developer版本 23.1.0。 CVE-2023-21969 漏洞利用 - SQL Developer 漏洞检查 描述 本仓库包含一个简单直观的CVE-2023-21969漏洞利用程序，该漏洞存在于23.1.0之前的SQL Developer版本中。此漏洞利用程序允许你检查你的SQL Developer数据库是否容易受到SQL注入攻击。这是一种快速评估数据库安全性并识别潜在风险的方法。 前提...
CVE-2026-44642 Piwigo: SQL injection in upgrade authentication allows unauthenticated upgrade authorization bypass (PHP 8+)
Piwigo is a full featured open source photo gallery application for the web. Prior to 16.4.0, checkupgradeaccessrights in admin/include/functionsupgrade.php conditionally escapes the submitted username only when the removed getmagicquotesgpc function exists, so PHP 8 and later concatenate an...
CVE-2026-44642 Piwigo: SQL injection in upgrade authentication allows unauthenticated upgrade authorization bypass (PHP 8+)
Piwigo is a full featured open source photo gallery application for the web. Prior to 16.4.0, checkupgradeaccessrights in admin/include/functionsupgrade.php conditionally escapes the submitted username only when the removed getmagicquotesgpc function exists, so PHP 8 and later concatenate an...
EUVD-2026-87137
Piwigo is a full featured open source photo gallery application for the web. Prior to 16.4.0, checkupgradeaccessrights in admin/include/functionsupgrade.php conditionally escapes the submitted username only when the removed getmagicquotesgpc function exists, so PHP 8 and later concatenate an...
CVE-2026-44642
Prior to version 16.4.0 , the Piwigo photo gallery application is vulnerable to an authentication bypass due to an SQL injection flaw in the check_upgrade_access_rights() function located in admin/include/functions_upgrade.php. On PHP 8 and later versions, the application fails to properly escape...
EUVD-2026-62929
In Splunk SOAR versions below 8.6.0, a user who holds the "Automation Engineer" Splunk SOAR role could run arbitrary Structured Query Language SQL statements against the Splunk SOAR database through custom function results, allowing for reading all relevant data stored in the Splunk SOAR database...
CVE-2026-76364
In Splunk SOAR versions below 8.6.0, a user who holds the "Automation Engineer" Splunk SOAR role could run arbitrary Structured Query Language SQL statements against the Splunk SOAR database through custom function results, allowing for reading all relevant data stored in the Splunk SOAR database...
CVE-2026-76364 Structured Query Language (SQL) Injection through Custom Function Results in Splunk SOAR
In Splunk SOAR versions below 8.6.0, a user who holds the "Automation Engineer" Splunk SOAR role could run arbitrary Structured Query Language SQL statements against the Splunk SOAR database through custom function results, allowing for reading all relevant data stored in the Splunk SOAR database...
CVE-2026-76364 Structured Query Language (SQL) Injection through Custom Function Results in Splunk SOAR
In Splunk SOAR versions below 8.6.0, a user who holds the "Automation Engineer" Splunk SOAR role could run arbitrary Structured Query Language SQL statements against the Splunk SOAR database through custom function results, allowing for reading all relevant data stored in the Splunk SOAR database...
PT-2026-78791
Name of the Vulnerable Software and Affected Versions Splunk SOAR versions prior to 8.6.0 Description A user with the Automation Engineer role can execute arbitrary Structured Query Language SQL statements against the database via custom function results. This occurs because the system constructs...
nodejs: Node.js node:sqlite: Unintended data modification due to stale statement iterator
A flaw was found in Node.js's node:sqlite module. This vulnerability allows a previously used database statement, which should have been reset, to be re-executed with new parameters. This could lead to unintended data modifications or integrity issues within the application...
CVE-2026-15804
The HCM developed by MetaGuru has a SQL Injection vulnerability. Authenticated remote attackers can inject SQL commands via specific parameters, thereby compromising the confidentiality, integrity, and availability of database data...
GHSA-8G29-8XWR-QMHR @grackle-ai/server JSON.parse lacks try-catch logic in its gRPC Service AdapterConfig Handling
Impact JSON.parseenv.adapterConfig is called without error handling in three locations within the gRPC service. While the data originates from the server's own SQLite database and should always be valid JSON, database corruption, migration errors, or unexpected state could cause an unhandled...
EUVD-2016-4514
Malware in sbrugna...
EUVD-2019-10499
Malware in sbrugna...
EUVD-2019-10381
Malware in sbrugna...
EUVD-2009-1991
Malware in sbrugna...
EUVD-2023-0106
Malicious code in bioql PyPI...