CVE-2026-11822

A flaw was found in SQLite's FTS5 full-text search extension. This vulnerability involves memory corruption, specifically an out-of-bounds read and a heap buffer overflow, which can be triggered by supplying a crafted database with malformed FTS5 page data. When an FTS5 MATCH query is executed...

PT-2026-81223

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description The extension allows a request-provided additionalFilters parameter to register a named siteHash filter before the system's own siteHash filter is applied. Becau...

PT-2026-81426

Webkul QloApps does not validate request parameters before a database query. A remote, authenticated attacker with administrative privileges could send a crafted SQL query to the 'bo query' parameter in the 'Address.php' file. Fixed in 123c97c...

CVE-2026-56703: Improper Control of Generation of Code

Adminer before 5.4.3 contains a remote code execution vulnerability in SQLite query handling where VACUUM INTO is not blocked despite ATTACH restrictions. Authenticated attackers can execute VACUUM INTO to write PHP code to arbitrary file paths and execute commands on the server...

CVE-2026-56096: Improper Neutralization of Special Elements in Data Query Logic

The extension passes the user-supplied search query parameter to Apache Solr without restricting advanced Solr query syntax such as wildcards, field selectors and range queries. A remote, unauthenticated attacker can use this syntax to enumerate indexed field names and extract their stored values...

Certified Randomness without Structure against Shallow-Query Adversaries

In a recent breakthrough, Yamakawa and Zhandry J. ACM 2024 constructed a proof of quantumness in the quantum random oracle model QROM in which the quantum prover samples a codeword preimage of a publicly computable function H. They conjectured that given any H, a successful prover must sample the...

PT-2026-81237

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description The extension fails to properly sanitize user input before using it in a database query. This allows a low-privileged backend user with read access to the "Forms...

PT-2026-81225

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A remote, unauthenticated attacker can exploit the way the extension handles the search query parameter passed to Apache Solr. Because advanced Solr query...

GHSA-8JJ7-4V57-FRF5 django CMS: Plugin move endpoint allows cyclic reparenting (DoS)

Summary The moveplugin admin endpoint does not prevent a plugin from being reparented under itself or one of its own descendants. Doing so creates a cycle in the plugin tree, after which the recursive descendant/ancestor SQL queries loop without terminating, stalling the request worker. Details...

sqlite: SQLite: Arbitrary code execution and crash via heap-based buffer overflow in FTS5

A flaw was found in SQLite, specifically within its FTS5 full-text search extension. Attackers can exploit a heap-based buffer overflow by providing a specially crafted database. This crafted database contains malicious metadata that triggers an integer underflow during FTS5 MATCH query processin...

Exploit for CVE-2026-63621

CVE-2026-63621 — camel-knative structured CloudEvent header in...

sqlite: SQLite: Arbitrary code execution and crash via heap-based buffer overflow in FTS5

A flaw was found in SQLite, specifically within its FTS5 full-text search extension. Attackers can exploit a heap-based buffer overflow by providing a specially crafted database. This crafted database contains malicious metadata that triggers an integer underflow during FTS5 MATCH query processin...

sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data

A flaw was found in SQLite's FTS5 full-text search extension. This vulnerability involves memory corruption, specifically an out-of-bounds read and a heap buffer overflow, which can be triggered by supplying a crafted database with malformed FTS5 page data. When an FTS5 MATCH query is executed...

sqlite: SQLite: Arbitrary code execution and crash via heap-based buffer overflow in FTS5

A flaw was found in SQLite, specifically within its FTS5 full-text search extension. Attackers can exploit a heap-based buffer overflow by providing a specially crafted database. This crafted database contains malicious metadata that triggers an integer underflow during FTS5 MATCH query processin...

CVE-2026-39914 TIM Flow < 26.0.6 Unauthorized SQL Query Execution via Dashboard Export Endpoint

TIM Flow before 26.0.6 contains an improper authorization vulnerability that allows any authenticated user to submit arbitrary SQL queries to a privileged dashboard Excel export endpoint intended for administrative use only. Attackers can craft and submit unauthorized SQL queries to the export...

CVE-2026-39914

TIM Flow before 26.0.6 contains an improper authorization flaw in a privileged dashboard Excel export endpoint intended for administrative use only. Any authenticated user can submit arbitrary SQL queries to that endpoint, retrieving sensitive database contents as a downloadable spreadsheet and b...

sqlite: SQLite: Arbitrary code execution and crash via heap-based buffer overflow in FTS5

A flaw was found in SQLite, specifically within its FTS5 full-text search extension. Attackers can exploit a heap-based buffer overflow by providing a specially crafted database. This crafted database contains malicious metadata that triggers an integer underflow during FTS5 MATCH query processin...

CVE-2026-6017

Firmware in KAON PG5298A and PG5298B routers allow an unauthenticated user to query a specific endpoint and acquire sensitive information such as a password to the administrative portal. This vulnerability has been fixed in firmware version: 3.0.82 for PG5298A and 4.0.82 for PG5298B...

sqlite: SQLite: Arbitrary code execution and crash via heap-based buffer overflow in FTS5

A flaw was found in SQLite, specifically within its FTS5 full-text search extension. Attackers can exploit a heap-based buffer overflow by providing a specially crafted database. This crafted database contains malicious metadata that triggers an integer underflow during FTS5 MATCH query processin...

CVE-2026-6017

KAON PG5298A and PG5298B routers contain a firmware vulnerability classified as Missing Authentication for Critical Function . An unauthenticated user on an adjacent network can query a specific endpoint to disclose sensitive information, including the password to the administrative portal , yiel...