CVE-2026-21004-SQLite-FTS3-Match-Infoleak-via-Query-Crafting

CVE-2026-21004 – 쿼리 조작을 통한 SQLite FTS3 Match 정보 누출 프로그램 코드 Python sqliteftsleak.py - Creates FTS table and exploits match info import sqlite3 conn = sqlite3.connect':memory:' conn.execute"CREATE VIRTUAL TABLE secrets USING fts4content TEXT" conn.execute"INSERT INTO secrets VALUES...

CVE-2025-26794

CVE-2025-26794: Exim 4.98의 블라인드 SQL 인젝션 SQLite DBM - 익스플로잇 분석 Exim 보고서: https://www.exim.org/static/doc/security/CVE-2025-26794.txt 이 취약점은 수동 코드 리뷰를 통해 발견했습니다. 취약점 상세: 문제점 SQLite가 DBM으로 사용될 때 SQL 파라미터가 제대로 처리되지 않습니다. 이로 인해 원격 사용자가 사용자 정의 SQLite 쿼리를 조작할 가능성이 생깁니다. 요구 사항: "USESQLITE = yes"로 Exim을...

CVE-2026-13056

Using expressions that generate large arrays it is possible to craft a query that creates very large intermediate objects in memory, causing the server to crash with OOM error...

EUVD-2026-47779

Using expressions that generate large arrays it is possible to craft a query that creates very large intermediate objects in memory, causing the server to crash with OOM error...

CVE-2024-11187 Many records in the additional section cause CPU exhaustion

It is possible to construct a zone such that some queries to it will generate responses containing numerous records in the Additional section. An attacker sending many such queries can cause either the authoritative server itself or an independent resolver to use disproportionate resources...