mariadb: MariaDB server: SQL injection vulnerability via improper handling of big5 character set with mysql_real_escape_string()

A flaw was found in MariaDB server. An application processing non-validated user input, which then uses mysqlrealescapestring and sends data to the database via text protocol with the big5 character set, is vulnerable to SQL injection. This allows a remote attacker to execute malicious SQL...

Photon OS 5.0: Mysql PHSA-2026-5.0-0908

An update of the mysql package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0908. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

WordPress DB User Takeover

Extracts WordPress DB credentials from wp-config.php through a PHP session, dumps wpusers, and optionally resets one user's password. !/usr/bin/env python3 -- coding: utf-8 -- import re from kittysploit import class ModulePost: info = "name": "WordPress DB User Takeover", "description": "Extracts...

mysql-mcp-server-pro-plus (>=0.2.3, <=0.3.0), workspace-mcp (>=1.2.0, <=1.4.2) potentially affected by CVE-2026-32871 via fastmcp (2.11.1)

fastmcp PYPI version 2.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - mysql-mcp-server-pro-plus =0.2.3, =1.2.0, =1.4.2 Source cves: CVE-2026-32871 Source advisory: OSV:PYSEC-2026-338...

PYSEC-2026-268 Command Injection in Apache Airflow and Apache Airflow MySQL Provider

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Apache Software Foundation Apache Airflow, Apache Software Foundation Apache Airflow MySQL Provider.This issue affects Apache Airflow: before 2.5.1; Apache Airflow MySQL Provider: before 4.0.0...

Command Injection in Apache Airflow and Apache Airflow MySQL Provider

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Apache Software Foundation Apache Airflow, Apache Software Foundation Apache Airflow MySQL Provider.This issue affects Apache Airflow: before 2.5.1; Apache Airflow MySQL Provider: before 4.0.0...

PYSEC-2026-279 Command Injection in Apache Airflow and Apache Airflow MySQL Provider

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Apache Software Foundation Apache Airflow, Apache Software Foundation Apache Airflow MySQL Provider.This issue affects Apache Airflow: before 2.5.1; Apache Airflow MySQL Provider: before 4.0.0...

moya (>=0.6.12a3, <=0.6.12), mytor (>=0.2.5, <=0.2.7) +1 more potentially affected by CVE-2024-36039 via pymysql (0.6.7)

pymysql PYPI version 0.6.7 is affected by a known vulnerability. The following packages have a transitive dependency on pymysql and may be impacted: - moya =0.6.12a3, =0.2.5, =0.3.3.1, =0.3.3.2 Source cves: CVE-2024-36039 Source advisory: OSV:PYSEC-2026-502...

PYSEC-2026-351 H2O Deserialization of Untrusted Data Vulnerability

A vulnerability in the h2oai/h2o-3 REST API versions 3.46.0.4 allows unauthenticated remote attackers to execute arbitrary code via deserialization of untrusted data. The vulnerability exists in the endpoints POST /99/ImportSQLTable and POST /3/SaveToHiveTable, where user-controlled JDBC URLs are...

[SECURITY] Fedora 43 Update: mariadb10.11-10.11.18-2.fc43

MariaDB is a community developed fork from MySQL - a multi-user, multi-thread ed SQL database server. It is a client/server implementation consisting of a server daemon mariadbd and many different client programs and libraries. The base package contains the standard MariaDB/MySQL client programs...

TencentOS Server 3: mysql:8.0 (TSSA-2026:0556)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0556 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

Important Photon OS Security Update - PHSA-2026-5.0-0908

Updates of 'vim', 'krb5', 'mysql' packages of Photon OS have been released...

RLSA-2023:3087 Important: mysql:8.0 security, bug fix, and enhancement update

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon mysqld and many client programs and libraries. The following packages have been upgraded to a later upstream version: mysql 8.0.32. BZ2177734, BZ2177735, BZ2177736 Security Fixes: mysql: Server:...

mysql:8.0 security, bug fix, and enhancement update

An update is available for module.mecab-ipadic, mecab, mecab-ipadic, module.mecab. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list MySQL is a multi-user,...

SUSE SLES12: dovecot22 / dovecot22-backend-mysql / dovecot22-backend-pgsql / etc (SUSE-SU-2026:2645-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2645-1 advisory. This update for dovecot22 fixes the following issues - CVE-2026-33603: login: base64 input can contain tabs that bypass IPC protection...

RockyLinux 8 : mysql:8.0 (RLSA-2023:3087)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:3087 advisory. mysql: Server: Security: Privileges unspecified vulnerability CPU Apr 2023 CVE-2023-21912 mysql: Server: Optimizer unspecified vulnerability CPU Oct 2022...

Oracle Linux 9 : mysql:8.4 (ELSA-2026-25052)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-25052 advisory. mecab 0.996-3.4 - Bump version for package rebuild We are moving the 'mecab-devel' RPM from the 'buildroot' repo to the 'CRB' repo - Resolves: 2182069...

mysql security update

8.0.46-1 - Rebase to 8.0.46 8.0.45-2 - Revert to soft static allocation of MariaDB and MySQL sysusers.d files...

Oracle Linux 9 : mysql (ELSA-2026-23332)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-23332 advisory. 8.0.46-1 - Rebase to 8.0.46 8.0.45-2 - Revert to soft static allocation of MariaDB and MySQL sysusers.d files Tenable has extracted the preceding...

org.keycloak.testframework:keycloak-test-framework-clustering (>=26.5.0, <=26.6.3), org.keycloak.testframework:keycloak-test-framework-db-edb (>=26.5.0, <=26.6.3) +16 more potentially affected by CVE-2026-9083 via org.keycloak.testframework:keycloak-test-framework-core (>=26.5.0, <=26.6.3)

org.keycloak.testframework:keycloak-test-framework-core MAVEN version =26.5.0, =26.5.0, =26.5.0, =26.5.0, =26.5.0, =26.5.0, =26.5.0, =26.5.0, =26.5.0, =26.5.0, =26.6.0, =26.5.0, =26.5.0, =26.5.0, =26.6.0, =26.6.3 - org.keycloak.testfr...