sqlmap

sqlmap sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester, and a broad range of switche...

Security Bulletin: IBM® Db2® could allow a DBADM authenticated user to send a specially crafted request to write arbitrary files on the system (CVE-2026-86087)

Summary IBM® Db2® could allow a database administration authority DBADM authenticated user to send a specially crafted request to write arbitrary files on the system CVE-2026-86087 Vulnerability Details CVEID:CVE-2026-86087 DESCRIPTION: IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 cou...

Security Bulletin: Multiple vulnerabilities addressed in IBM Db2 Recovery Expert for Linux, Unix and Windows

Summary There are multiple vulnerabilities fixed in IBM Db2 Recovery Expert for Linux, Unix and Windows v12.1. Details on the vulnerabilities fixed are given below. All platforms are affected, and all previous versions may also be affected. Vulnerability Details CVEID:CVE-2015-4852 DESCRIPTION: T...

Security Bulletin: Multiple Vulnerabilities have been identified in IBM Db2 federated server and IBM Db2 shipped with IBM WebSphere Remote Server

Summary IBM Db2 federated server and IBM Db2 are shipped with IBM WebSphere Remote Server. Information about security vulnerabilities affecting IBM Db2 federated server and IBM Db2 has been published in a security bulletin CVE-2026-41586, CVE-2026-16702, CVE-2026-10649, CVE-2026-17463,...

Security Bulletin: Due to the use of IBM Db2, IBM Cloud Pak System is affected by multiple vulnerabilities

Summary Multiple vulnerabilities were found in IBM Db2 LUW that affect Platform System Manager PSM and Db2 pattern Type pType shipped with IBM Cloud Pak System. Those vulnerabilities were addressed in IBM Cloud Pak System CPS 2.3.6.2. Vulnerability Details CVEID:CVE-2026-16480 DESCRIPTION: IBM Db...

Security Bulletin: IBM Db2 Mirror for i is vulnerable to privilege escalation [CVE-2026-96012]

Summary IBM Db2 Mirror for i GUI is vulnerable to privilege escalation CVE-2026-96012 as described in the vulnerability details section. Vulnerability Details ID: CVE-2026-96012 DESCRIPTION: IBM Db2 Mirror for i GUI is vulnerable to privilege escalation. An authenticated attacker could craft a...

Security Bulletin: IBM® Db2® could allow a authenticated attacker to cause a denial of service due to uncontrolled resource consumption (CVE-2026-17463)

Summary IBM® Db2® could allow a authenticated attacker to cause a denial of service due to uncontrolled resource consumption CVE-2026-17463 Vulnerability Details CVEID:CVE-2026-17463 DESCRIPTION: IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows includes DB2...

Security Bulletin: IBM Db2 Mirror for i is vulnerable to obtain sensitive information [CVE-2026-18104]

Summary IBM Db2 Mirror for i is vulnerable to obtaining sensitive information CVE-2026-18104 as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-18104 DESCRIPTION: IBM i could allow a local attacker to obtain sensitive information due to the use of the AES...

CVE-2026-18104

IBM Db2 Mirror for i 7.6, 7.5, and 7.4 could allow a local attacker to obtain sensitive information due to the use of the AES Electronic Codebook ECB mode for encryption...

CVE-2026-18104 IBM Db2 Mirror for i is vulnerable to obtain sensitive information []

IBM Db2 Mirror for i 7.6, 7.5, and 7.4 could allow a local attacker to obtain sensitive information due to the use of the AES Electronic Codebook ECB mode for encryption...

CVE-2026-18104

IBM Db2 Mirror for i versions 7.6, 7.5, and 7.4 are vulnerable to the disclosure of sensitive information. The root cause is the use of the AES Electronic Codebook (ECB) mode for encryption, which is considered a broken or risky cryptographic algorithm (CWE-327 ). This issue allows a local attack...

CVE-2026-18104 IBM Db2 Mirror for i is vulnerable to obtain sensitive information []

IBM Db2 Mirror for i 7.6, 7.5, and 7.4 could allow a local attacker to obtain sensitive information due to the use of the AES Electronic Codebook ECB mode for encryption...

EUVD-2026-85892

IBM Db2 Mirror for i 7.6, 7.5, and 7.4 could allow a local attacker to obtain sensitive information due to the use of the AES Electronic Codebook ECB mode for encryption...

CVE-2026-18104: Use of a Broken or Risky Cryptographic Algorithm

IBM Db2 Mirror for i 7.6, 7.5, and 7.4 could allow a local attacker to obtain sensitive information due to the use of the AES Electronic Codebook ECB mode for encryption...

PT-2026-97811

Name of the Vulnerable Software and Affected Versions IBM Db2 Mirror for i versions 7.4 through 7.6 Description A local attacker could obtain sensitive information because the software uses AES Electronic Codebook ECB mode for encryption. ECB is a block cipher mode that encrypts identical blocks ...

Security Bulletin: IBM® Db2® is affected by a vulnerability in Pacemaker (CVE-2026-10649)

Summary IBM® Db2® is affected by a vulnerability in Pacemaker CVE-2026-10649 Vulnerability Details CVEID:CVE-2026-10649 DESCRIPTION: A flaw was found in Pacemaker. An unauthenticated remote attacker can exploit an integer overflow vulnerability in the remote message decompression process. By...

Security Bulletin: extract-zip-2.0.1.tgz (Publicly disclosed vulnerability found by Scanner)

Summary extract-zip through 2.0.1 only checks the parent directory of each archive entry, allowing a symlink-then-regular-file pair with identical names to write through the planted symlink and achieve arbitrary file write outside the destination directory. CVSS: 8.1 High, CWE-22. Vulnerability...

Security Bulletin: extract-zip-2.0.1.tgz (Publicly disclosed vulnerability found by Scanner)

Summary extract-zip 2.0.1 does not validate symlink targets during zip extraction, allowing a malicious archive with relative symlink paths to read or write arbitrary files outside the extraction directory. CVSS: 8.1 High, CWE-22. Vulnerability Details CVEID:CVE-2026-56876 DESCRIPTION: extract-zi...

Security Bulletin: Multiple vulnerabilities that affects IBM Db2 Genius Hub

Summary The following dependency packages are being used by IBM Db2 Genius Hub - node-fetch-3.1.1.tgz, Jinja2-3.0.3-py3-none-any.whl, dompurify-3.4.11.tgz, react-router-6.30.4.tgz, react-router-dom-6.30.4.tgz, brace-expansion-5.0.8.tgz, browserslist-4.26.2.tgz, baseline-browser-mapping-2.10.38.tg...

IBM DB2 DoS (7286983) (Unix)

According to its self-reported version number, IBM Db2 is affected by a denial of service vulnerability: - IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows includes DB2 Connect Server could allow a remote authenticated attacker to cause a denial of service due ...