CVE-2023-25157-and-CVE-2023-25158

GeoServer & GeoTools SQL Injection CVE-2023-25157 & CVE-2023-25158 This repository contains a detailed description and replication steps of the SQL Injection vulnerabilities found in the GeoServer platform and GeoTools Library. The vulnerability has been assigned the identifier CVE-2023-25157 for...

CVE-2026-85746 MariaDB: Out-of-bound buffer write on in `ST_AsText` of nested GeometryCollections

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, STAsText can write beyond an allocated output buffer when converting deeply nested GeometryCollections because recursive WKT serialization does not account for...

EUVD-2026-102940

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, STAsText can write beyond an allocated output buffer when converting deeply nested GeometryCollections because recursive WKT serialization does not account for...

CVE-2026-85746

The MariaDB server (versions 10.6.1-10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2) is vulnerable to an out-of-bound buffer write in the ST_AsText function. This occurs during the conversion of deeply nested GeometryCollections because the recursive WKT serialization fails to reserve suff...

CVE-2026-1207

CVE-2026-1207 Django GIS RasterField SQL Injection Vulnerability Reproduction Vulnerability Overview Vulnerability Type : SQL Injection Affected Component : django.contrib.gis RasterField When querying with Django GIS's RasterField, the band parameter is directly concatenated into the SQL...

QGIS GIS if_nullptr_null_str() Disclosure

The vulnerability of the ifnullptrnullstr function in QGIS GIS software is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow a malicious actor to disclose protected information...

CVE-2026-87890

A flaw was found in Django. When handling spatial lookups in its Geographic Information System GIS framework, raster data supplied as raw bytes is processed without proper encapsulation. If an application passes untrusted input into these lookups, an attacker can supply crafted data referencing...

[SECURITY] Fedora 44 Update: postgresql16-postgis-3.6.4-5.fc44

PostGIS adds support for geographic objects to the PostgreSQL object-relation al database. In effect, PostGIS "spatially enables" the PostgreSQL server, allowing it to be used as a backend spatial database for geographic informati on systems GIS, much like ESRI's SDE or Oracle's Spatial extension...

CVE-2026-9166

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in GIS Informatics GisLab Laboratory Management System allows Path Traversal. This issue affects GisLab Laboratory Management System: from 1.4.03 before 1.5...

CVE-2026-9166

CVE-2026-9166 is a Path Traversal vulnerability (local file inclusion) in GIS Informatics GisLab Laboratory Management System , affecting versions 1.4.03 through 1.5 (exclusive) . The flaw is classified as Improper Limitation of a Pathname to a Restricted Directory . The CVSS 3.1 score is 7.5 (HI...

EUVD-2026-75399

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in GIS Informatics GisLab Laboratory Management System allows Path Traversal. This issue affects GisLab Laboratory Management System: from 1.4.03 before 1.5...

CVE-2026-9166 LFI in GIS Informatics' GisLab Laboratory Management System

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in GIS Informatics GisLab Laboratory Management System allows Path Traversal. This issue affects GisLab Laboratory Management System: from 1.4.03 before 1.5...

CVE-2026-9166 LFI in GIS Informatics' GisLab Laboratory Management System

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in GIS Informatics GisLab Laboratory Management System allows Path Traversal. This issue affects GisLab Laboratory Management System: from 1.4.03 before 1.5...

CVE-2026-9163 SQLi in GIS Informatics' GisLab Laboratory Management System

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in GIS Informatics GisLab Laboratory Management System allows SQL Injection. This issue affects GisLab Laboratory Management System: from 1.4.03 before 1.5...

CVE-2026-9163 SQLi in GIS Informatics' GisLab Laboratory Management System

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in GIS Informatics GisLab Laboratory Management System allows SQL Injection. This issue affects GisLab Laboratory Management System: from 1.4.03 before 1.5...

EUVD-2026-75405

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in GIS Informatics GisLab Laboratory Management System allows SQL Injection. This issue affects GisLab Laboratory Management System: from 1.4.03 before 1.5...

PT-2026-89368

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in GIS Informatics GisLab Laboratory Management System allows SQL Injection. This issue affects GisLab Laboratory Management System: from 1.4.03 before 1.5...

CVE-2026-9163: Improper Neutralization of Special Elements used in an SQL Command

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in GIS Informatics GisLab Laboratory Management System allows SQL Injection. This issue affects GisLab Laboratory Management System: from 1.4.03 before 1.5...

PT-2026-89369

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in GIS Informatics GisLab Laboratory Management System allows Path Traversal. This issue affects GisLab Laboratory Management System: from 1.4.03 before 1.5...

CVE-2026-9166: Improper Limitation of a Pathname to a Restricted Directory

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in GIS Informatics GisLab Laboratory Management System allows Path Traversal. This issue affects GisLab Laboratory Management System: from 1.4.03 before 1.5...