CVE-2026-30951

CVE-2026-30951 Sequelize JSON Cast SQL Injection ★ CVE-2026-30951 Sequelize ORM SQL Injection PoC ★ https://github.com/user-attachments/assets/30b19211-890a-4780-acd9-04856ec98381 Overview CVE-2026-30951 is a SQL Injection vulnerability in Sequelize v6 , a widely used Node.js ORM. The vulnerabili...

reversemap

reversemap Analyse SQL injection attempts in web server logs The program can either be run in batch mode or interactive mode. In batch mode the program will accept Apache web server logs and will deobfuscate requested URLs from the logs. In interactive mode the program will prompt for user input...

sift

SIFT This is a metadata repository that is primarily used for discussiosn and issue tracking. cast -- installer cli saltstack -- states that actually do the work packer -- builds machine images using the above tools package-scripts -- builds certain packages hosted in SIFT PPA Supported Distros...

CVE-2025-54068-livewire

CVE-2025-54068 - Livewire v3.6.3 Vulnerable Lab This folder builds a minimal Laravel + Livewire v3 application pinned to Livewire 3.6.3 vulnerable for reproducing CVE-2025-54068. The mounted component is intentionally written to be compatible with the public exploit chain it allows the stage-1...

Linux Distros Unpatched Vulnerability : CVE-2026-116303

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in PostgreSQL type conversion allows a database user to invoke a cast function despite lacking EXECUTE privilege on that function, via...

postgresql: PostgreSQL: Unauthorized execution of restricted cast functions via type conversion operations

A flaw was found in PostgreSQL. An authenticated database user can bypass permission checks to invoke restricted type conversion cast functions without the necessary execution privileges. By triggering operations such as foreign key evaluations or data formatting functions, a user may execute...

CVE-2026-116303

A flaw was found in PostgreSQL. An authenticated database user can bypass permission checks to invoke restricted type conversion cast functions without the necessary execution privileges. By triggering operations such as foreign key evaluations or data formatting functions, a user may execute...

CVE-2026-116303

Missing authorization in PostgreSQL type conversion allows a database user to invoke a cast function despite lacking EXECUTE privilege on that function, via foreign keys, tojson, and others. A successful attack requires the attacker to search each database for access-restricted cast functions and...

ALPINE-CVE-2026-116303

Missing authorization in PostgreSQL type conversion allows a database user to invoke a cast function despite lacking EXECUTE privilege on that function, via foreign keys, tojson, and others. A successful attack requires the attacker to search each database for access-restricted cast functions and...

DEBIAN-CVE-2026-116303

Missing authorization in PostgreSQL type conversion allows a database user to invoke a cast function despite lacking EXECUTE privilege on that function, via foreign keys, tojson, and others. A successful attack requires the attacker to search each database for access-restricted cast functions and...

CVE-2026-116303

Missing authorization in PostgreSQL type conversion allows a database user to invoke a cast function despite lacking EXECUTE privilege on that function, via foreign keys, tojson, and others. A successful attack requires the attacker to search each database for access-restricted cast functions and...

EUVD-2026-124484

Missing authorization in PostgreSQL type conversion allows a database user to invoke a cast function despite lacking EXECUTE privilege on that function, via foreign keys, tojson, and others. A successful attack requires the attacker to search each database for access-restricted cast functions and...

CVE-2026-116303

Missing authorization in PostgreSQL type conversion allows a database user to invoke a cast function despite lacking EXECUTE privilege on that function, via foreign keys, tojson, and others. A successful attack requires the attacker to search each database for access-restricted cast functions and...

CVE-2026-116303: n/a PostgreSQL: Missing authorization in PostgreSQL type conversion allows a database user to invoke a cast function despite lacking…

Missing authorization in PostgreSQL type conversion allows a database user to invoke a cast function despite lacking EXECUTE privilege on that function, via foreign keys, tojson, and others. A successful attack requires the attacker to search each database for access-restricted cast functions and...

PT-2026-145795

Name of the Vulnerable Software and Affected Versions PostgreSQL versions prior to 18.7 PostgreSQL versions prior to 17.12 PostgreSQL versions prior to 16.16 PostgreSQL versions prior to 15.20 PostgreSQL versions prior to 14.25 Description Missing authorization in type conversion allows a databas...

SUSE CVE-2026-121411

FreeRDP before 3.32.2 fails to bound server-supplied target dimensions and output origin in RDPGFX MAPSURFACETOSCALEDOUTPUT PDUs, allowing malicious RDP servers to abort X11 clients. Attackers can map a surface to oversized scaled output, triggering checked UINT16 cast or freerdpimagescale stride...

CVE-2026-121411

FreeRDP before 3.32.2 fails to bound server-supplied target dimensions and output origin in RDPGFX MAPSURFACETOSCALEDOUTPUT PDUs, allowing malicious RDP servers to abort X11 clients. Attackers can map a surface to oversized scaled output, triggering checked UINT16 cast or freerdpimagescale stride...

DEBIAN-CVE-2026-121411

FreeRDP before 3.32.2 fails to bound server-supplied target dimensions and output origin in RDPGFX MAPSURFACETOSCALEDOUTPUT PDUs, allowing malicious RDP servers to abort X11 clients. Attackers can map a surface to oversized scaled output, triggering checked UINT16 cast or freerdpimagescale stride...

CVE-2026-121411

FreeRDP before 3.32.2 fails to bound server-supplied target dimensions and output origin in RDPGFX MAPSURFACETOSCALEDOUTPUT PDUs, allowing malicious RDP servers to abort X11 clients. Attackers can map a surface to oversized scaled output, triggering checked UINT16 cast or freerdpimagescale stride...

UBUNTU-CVE-2026-121411

FreeRDP before 3.32.2 fails to bound server-supplied target dimensions and output origin in RDPGFX MAPSURFACETOSCALEDOUTPUT PDUs, allowing malicious RDP servers to abort X11 clients. Attackers can map a surface to oversized scaled output, triggering checked UINT16 cast or freerdpimagescale stride...