CVE-2026-126074

Active Storage makes it simple to upload and reference files in cloud services and attach those files to Active Record objects. Prior to 8.1.4.1 and 8.0.5.2, ActiveStorage::Filenamebase and extensionwithdelimiter, and therefore extension, pass the stored filename unmodified to File.basename and...

CVE-2026-112201

A flaw was found in the login-failure storage component of Keycloak, the identity and access management solution. This issue specifically affects deployments using MySQL or MariaDB databases in a multi-node configuration. When multiple failed login attempts occur simultaneously for the same...

CVE-2020-11579

CVE-2020-11579 Introduction PHPKB 9.0 Enterprise Edition MySQL database is affected by an unauthenticated arbitrary file disclosure via a malicious MySQL Server. A remote attacker can read any file on a remote victim host with web-server privileges e.g. www-data, via a single HTTP GET request. Re...

CVE-2026-11518-XSS

Stored XSS in Inventory System using PHP and MySQL Vulnerability Details Field| Details ---|--- Vulnerability Type| Stored Cross-Site Scripting XSS Affected Application| Inventory System using PHP and MySQL Vendor| SourceCodester Affected Version| 1.0 Affected File| register.php Parameters|...

CVE-2021-41651

CVE-2021-41651 CVE-2021-41651 SQL Injection in hotel-mgmt-system The hotel-mgmt-system is vulnerable to un-authenticated time based blind SQL Injection attack. The cid parameter on the /processupdateprofile.php page does not sanitize the user input, an attacker can extract sensisitive data from t...

Zero-Day-Legacy

🎓 Graduation Project — Ajloun National University ANU Faculty of IT · Cybersecurity and Cloud Computing · Academic Year 2026 🏆 Highest Grade in the University: 97% 📖 Overview Zero-Day Legacy is a realistic, intentionally vulnerable Boot-to-Root CTF Capture The Flag lab machine built as a graduati...

EUVD-2026-123400

A flaw was found in the login-failure storage component of Keycloak, the identity and access management solution. This issue specifically affects deployments using MySQL or MariaDB databases in a multi-node configuration. When multiple failed login attempts occur simultaneously for the same...

CVE-2026-112201

A flaw was found in the login-failure storage component of Keycloak, the identity and access management solution. This issue specifically affects deployments using MySQL or MariaDB databases in a multi-node configuration. When multiple failed login attempts occur simultaneously for the same...

CVE-2026-112201 Keycloak-services: keycloak-services: login-failure upsert trusts mysql/mariadb affected-row count

A flaw was found in the login-failure storage component of Keycloak, the identity and access management solution. This issue specifically affects deployments using MySQL or MariaDB databases in a multi-node configuration. When multiple failed login attempts occur simultaneously for the same...

CVE-2026-112201

A flaw in the Keycloak login-failure storage component affects deployments using MySQL or MariaDB databases in a multi-node configuration . When multiple failed login attempts occur simultaneously for the same account, a synchronization error (CWE-362) can cause a repetitive loop that locks the u...

dovecot: Dovecot: MySQL multi-byte escaping wrong

A flaw was found in Dovecot. A remote attacker with high attack complexity could exploit this vulnerability to gain access to sensitive information and modify data without requiring any user interaction or privileges...

ncrack

!IMPORTANT Ncrack was written as a "Google Summer of Code" Project in 2009. While it was useful for some purposes, it is not fully developed or currently maintained. The code has some known and probably unknown security issues. We recommend the brute force scripts included as part of Nmap's...

VulnNodeApp

VulnNodeApp A vulnerable application made using node.js, express server and ejs template engine. This application is meant for educational purposes only. Setup Clone this repository git clone https://github.com/4auvar/VulnNodeApp.git Application setup: Install the latest node.js version with npm...

chef-mysql-hardening

mysql-hardening Chef cookbook Description Provides security configurations for mysql. It is intended to set up production-ready mysql instances that are configured with minimal surface for attackers. This cookbook focus security configuration of mysql and reuses the mysql cookbook for the...

jdbc-sqlxml-xxe

jdbc-sqlxml-xxe h2-jdbc CVE-2021-23463 https://github.com/h2database/h2database/issues/3195 SQLXML XXE vulnerability reproduction. mysql-jdbc CVE-2021-2471 SQLXML XXE vulnerability reproduction...

sqlmap

sqlmap sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester, and a broad range of switche...

CVE-2023-21971_Analysis

CVE-2023-21971 Connector/J RCE Analysis References Remote Code Execution RCE in com.mysql:mysql-connector-j | CVE-2023-21971 | Snyk New Vulnerability in MySQL JDBC Driver: RCE and Unauthorized DB Access MYSQL JDBC Deserialization Analysis - 跳跳糖 tttang.com Vulnerability Overview Vulnerability in...

ASST

ASST BETA OWASP ASST Automated Software Security Toolkit | A Novel Open Source Web Security Scanner. Note: AWSS is the older name of ASST Introduction Web applications have become an integral part of everyday life, but many of these applications are deployed with critical vulnerabilities that can...

CVE-2026-126619

Progressive Robot hMailServer versions 6.0.0-B1 through 6.3.7 are vulnerable to a misinterpretation of SQL statement text in the database layer. The vulnerability occurs because the layer erroneously reports failed database writes as successful when it detects the [IGNORE-ERRORS] marker. While in...

EUVD-2026-123336

Misinterpretation of SQL statement text in the database layer of Progressive Robot hMailServer 6.0.0-B1 through 6.3.7 allows a remote unauthenticated attacker to have a failed database write reported to the server as successful. The layer answers a failed statement as a success when it finds the...