dbeaver

DBeaver Free multi-platform database tool for developers, SQL programmers, database administrators and analysts. Has a lot of features including schema editor, SQL editor, data editor, AI integration, ER diagrams, data export/import/migration, SQL execution plans, database administration tools,...

progress-burp

Progress Tracker Burp Suite extension to track vulnerability assessment progress. Features Capturing items unique requests from the Burp Suite tools Proxy, Repeater, Target. Request unique key is defined as follows: target host, port, protocol, path and method. Items have following editable...

CVE-2022-41828

CVE-2022-41828 Amazon AWS Redshift JDBC Driver Remote Code Execution RCE The Amazon JDBC Driver for Redshift is a Type 4 JDBC driver that provides database connectivity through the standard JDBC application program interfaces APIs available in the Java Platform, Enterprise Editions. The Driver...

jdbc-sqlxml-xxe

jdbc-sqlxml-xxe h2-jdbc CVE-2021-23463 https://github.com/h2database/h2database/issues/3195 SQLXML XXE vulnerability reproduction. mysql-jdbc CVE-2021-2471 SQLXML XXE vulnerability reproduction...

CVE-2023-21971_Analysis

CVE-2023-21971 Connector/J RCE Analysis References Remote Code Execution RCE in com.mysql:mysql-connector-j | CVE-2023-21971 | Snyk New Vulnerability in MySQL JDBC Driver: RCE and Unauthorized DB Access MYSQL JDBC Deserialization Analysis - 跳跳糖 tttang.com Vulnerability Overview Vulnerability in...

xerial__sqlite-jdbc_CVE-2023-32697_3-41-2-1

SQLite JDBC Driver SQLite JDBC is a library for accessing and creating SQLite database files in Java. Our SQLiteJDBC library requires no configuration since native libraries for major OSs, including Windows, macOS, Linux etc., are assembled into a single JAR Java Archive file. Usage...

hekate

Hekate - VMWare Workspace ONE Access 远程代码执行漏洞利用 奇虎360漏洞研究所的 Steven Seeley 原始恶意 MySQL 服务器由 LandGrey 提供 Details Hekate 的发音为 heh-ka-teh 日期：2022年2月22日 星期二 13:37:00 CST 版本：21.08.0.1（最新） 文件：identity-manager-21.08.0.1-19010796OVF10.ova 文件 SHA1：69e9fb988522c92e98d2910cc106ba4348d61851...

CVE-2026-15955

IBM Db2 versions 11.5.0–11.5.9 and 12.1.0–12.1.5 (Client editions on Linux and Unix ; Windows unaffected) are vulnerable to arbitrary file write via the IBM Data Server driver for JDBC and SQLJ . The root cause is improper validation of file paths (CWE-22 / Path Traversal), allowing a malicious D...

Security Bulletin: IBM® Data Server driver for JDBC and SQLJ could allow an evil server to perform an arbitrary file write on the connected client due to improper validation of file paths (CVE-2026-15955)

Summary IBM® Data Server driver for JDBC and SQLJ could allow an evil Db2 server to perform an arbitrary file write on the connected client due to improper validation of file paths. This vulnerability also applies to Db2 due to bundled JDBC and SQLJ components. Vulnerability Details...

Astra Linux – Vulnerability in libpgjava

The PostgreSQL JDBC Driver also known as PgJDBC prior to version 42.2.13 allowed XXE...

...[ More ]

Apache Impala versions 2.7.0 through 4.5.1 suffer from an insufficient authorization vulnerability that leads to remote code execution. A table created with STORED BY JDBC takes a driver.url property that Impala uses to fetch a remote JAR and load the named driver class on first query, and the...

jdbc.postgresql.org: pgjdbc: Client-side Denial of Service via malicious SCRAM-SHA-256 authentication

A flaw was found in pgjdbc, an open-source PostgreSQL JDBC Driver. A malicious server can exploit this vulnerability by instructing the driver to perform SCRAM-SHA-256 Salted Challenge Response Authentication Mechanism Secure Hash Algorithm 256 authentication with an excessively large iteration...

CVE-2026-85528

Improper input validation of the auto-configuration account identifier in Snowflake JDBC Driver versions 4.2.0 through 4.3.3 allowed a credential-bearing login request to be redirected to an attacker-selected HTTPS endpoint. An attacker able to control the account value could cause the driver to...

CVE-2026-85528 Snowflake JDBC Driver auto-configuration account validation permits credential redirection

Improper input validation of the auto-configuration account identifier in Snowflake JDBC Driver versions 4.2.0 through 4.3.3 allowed a credential-bearing login request to be redirected to an attacker-selected HTTPS endpoint. An attacker able to control the account value could cause the driver to...

EUVD-2026-70974

Improper input validation of the auto-configuration account identifier in Snowflake JDBC Driver versions 4.2.0 through 4.3.3 allowed a credential-bearing login request to be redirected to an attacker-selected HTTPS endpoint. An attacker able to control the account value could cause the driver to...

CVE-2026-85528 Snowflake JDBC Driver auto-configuration account validation permits credential redirection

Improper input validation of the auto-configuration account identifier in Snowflake JDBC Driver versions 4.2.0 through 4.3.3 allowed a credential-bearing login request to be redirected to an attacker-selected HTTPS endpoint. An attacker able to control the account value could cause the driver to...

CVE-2026-85528

Snowflake JDBC Driver versions 4.2.0 through 4.3.3 are affected by improper input validation of the auto-configuration account identifier, allowing a credential-bearing login request to be redirected to an attacker-selected HTTPS endpoint . An attacker who controls the account value can cause the...

CVE-2026-85528 Snowflake JDBC Driver auto-configuration account validation permits credential redirection

Improper input validation of the auto-configuration account identifier in Snowflake JDBC Driver versions 4.2.0 through 4.3.3 allowed a credential-bearing login request to be redirected to an attacker-selected HTTPS endpoint. An attacker able to control the account value could cause the driver to...

CVE-2026-12717

CVE-2026-12717 is an Improper Input Validation vulnerability in the CData JDBC driver integration within Google Cloud BigQuery Data Transfer Service (versions prior to 2026-05-01). An authenticated attacker can achieve remote code execution in the connector container and escalate privileges in th...

CVE-2026-12717 Remote Code Execution in BigQuery Data Transfer Service via JDBC Connection String Injection

An Improper Input Validation vulnerability in CData JDBC driver integration in Google Cloud BigQuery Data Transfer Service versions prior to 2026-05-01 on Google Cloud Platform allows an authenticated attacker to achieve remote code execution in the connector container and escalate privileges in...