CVE-2023-32571-POC

Dynamic Linq 인젝션을 통한 RCE - CVE-2023-32571 Dynamic Linq 인젝션을 통한 RCE 정보 CVE-2023-32571 최근 NCC Group의 연구원들이 Dynamic Linq에서 공격자가 Linq Injection을 통해 C 함수를 호출할 수 있는 취약점을 발견했으며, 이를 통해 RCE를 달성할 수 있게 되었습니다. Dynamic Linq에 대한 RCE 보고서에도 불구하고, NCC Group의 연구원들은 어떤 이유에서인지 명령 실행을 위한 POC를 공개하지 않았습니다. POC NCC Grou...

CVE-2023-32571-POC

Dynamic Linq 인젝션을 통한 RCE - CVE-2023-32571 Dynamic Linq 인젝션을 통한 RCE 정보 CVE-2023-32571 최근 NCC Group의 연구원들이 Dynamic Linq에서 공격자가 Linq 인젝션을 통해 C 함수를 호출할 수 있게 하는 취약점을 발견했으며, 이를 통해 RCE원격 코드 실행를 달성할 수 있습니다. Dynamic Linq에 대한 RCE 보고서가 공개되었음에도 불구하고, NCC Group의 연구원들은 어떤 이유에서인지 명령 실행을 위한 POC를 공개하지 않았습니다. POC...

CVE-2023-32571

🐞 CVE-2023-32571 - System.Linq.Dynamic.Core 원격 코드 실행 CVE-2023-32571에 대한 개념 증명Proof of Concept으로, System.Linq.Dynamic.Core1.0.7.10 1.2.25의 원격 코드 실행 취약점입니다. 이 취약점은 Where, Select, OrderBy를 포함한 메서드에 신뢰할 수 없는 입력이 파싱될 때 공격자가 임의 코드와 명령을 실행할 수 있게 합니다. ⚠️ 면책 조항 이 도구는 교육 및 승인된 테스트 목적으로만 제공됩니다. 사전 상호 동의 없이...

Marten's LINQ provider has SQL injection via unescaped string literals

Several code paths in Marten's LINQ provider and tenant-management internals interpolated a runtime, potentially attacker-influenced value into generated SQL as a single-quoted string literal without escaping or parameterization. A value containing a single quote ' could break out of the literal...

GHSA-RFX3-98H7-V3XP Marten's LINQ provider has SQL injection via unescaped string literals

Several code paths in Marten's LINQ provider and tenant-management internals interpolated a runtime, potentially attacker-influenced value into generated SQL as a single-quoted string literal without escaping or parameterization. A value containing a single quote ' could break out of the literal...

PT-2026-95049

Several code paths in Marten's LINQ provider and tenant-management internals interpolated a runtime, potentially attacker-influenced value into generated SQL as a single-quoted string literal without escaping or parameterization. A value containing a single quote ' could break out of the literal...

CVE-2026-75513 Marten: SQL injection in Marten's LINQ provider via unescaped string literals

Marten is a .NET Transactional Document DB and Event Store on PostgreSQL. From version 7.0.0 until 9.13.0, several Marten LINQ and tenant-management paths interpolate runtime, potentially attacker-controlled strings into single-quoted SQL literals without escaping or parameterization. The primary...

PT-2026-94026

Name of the Vulnerable Software and Affected Versions Marten versions 7.0.0 through 9.12.0 Description Several paths within the LINQ provider and tenant-management internals interpolate runtime strings into single-quoted SQL literals without proper escaping or parameterization. This allows an...

CVE-2026-88026

Improper neutralization of regular-expression metacharacters in the LINQ query translation component of the MongoDB C Driver can cause a caller-supplied character sequence to alter a regular-expression predicate generated by an affected application. An authenticated user who can influence such a...

CVE-2026-88026 Regular expression injection via unescaped characters in LINQ query translation in MongoDB C# Driver

Improper neutralization of regular-expression metacharacters in the LINQ query translation component of the MongoDB C Driver can cause a caller-supplied character sequence to alter a regular-expression predicate generated by an affected application. An authenticated user who can influence such a...

CVE-2026-88026 Regular expression injection via unescaped characters in LINQ query translation in MongoDB C# Driver

Improper neutralization of regular-expression metacharacters in the LINQ query translation component of the MongoDB C Driver can cause a caller-supplied character sequence to alter a regular-expression predicate generated by an affected application. An authenticated user who can influence such a...

CVE-2026-88026 Regular expression injection via unescaped characters in LINQ query translation in MongoDB C# Driver

Improper neutralization of regular-expression metacharacters in the LINQ query translation component of the MongoDB C Driver can cause a caller-supplied character sequence to alter a regular-expression predicate generated by an affected application. An authenticated user who can influence such a...

EUVD-2026-75640

Improper neutralization of regular-expression metacharacters in the LINQ query translation component of the MongoDB C Driver can cause a caller-supplied character sequence to alter a regular-expression predicate generated by an affected application. An authenticated user who can influence such a...

CVE-2026-88026

MongoDB C# Driver is affected by a regular expression injection in its LINQ query translation component . The root cause is improper neutralization of regular-expression metacharacters: a caller-supplied string can alter a regex predicate generated by the application. An authenticated user who ca...

Regular expression injection via unescaped characters in LINQ query translation in MongoDB C# Driver

Improper neutralization of regular-expression metacharacters in the LINQ query translation component of the MongoDB C Driver can cause a caller-supplied character sequence to alter a regular-expression predicate generated by an affected application. An authenticated user who can influence such a...

PT-2026-89516

Name of the Vulnerable Software and Affected Versions MongoDB C Driver affected versions not specified Description Improper neutralization of regular-expression metacharacters in the LINQ query translation component allows an authenticated user to provide a character sequence that alters a...

CVE-2026-88026: Improper Neutralization of Special Elements in Data Query Logic

Improper neutralization of regular-expression metacharacters in the LINQ query translation component of the MongoDB C Driver can cause a caller-supplied character sequence to alter a regular-expression predicate generated by an affected application. An authenticated user who can influence such a...

CVE-2026-81527

A NoSQL/expression injection weakness exists in the LINQ-to-aggregation query translation layer of the MongoDB C Driver, in both aggregation expression and query filter translation. When application-supplied values are embedded in certain query constructs, special elements contained within those...

CVE-2026-81527 NoSQL injection via unquoted constant GroupBy keys in LINQ pipeline translation

A NoSQL/expression injection weakness exists in the LINQ-to-aggregation query translation layer of the MongoDB C Driver, in both aggregation expression and query filter translation. When application-supplied values are embedded in certain query constructs, special elements contained within those...

CVE-2026-81527

CVE-2026-81527 is a NoSQL/expression injection flaw in the MongoDB C# Driver , specifically in the LINQ-to-aggregation query translation layer affecting both aggregation expression and query filter translation. The root cause is that unquoted constant GroupBy keys in LINQ pipeline translation are...