SQL Injection in DuckDBVectorStore via delete can lead to RCE

Description The delete function in DuckDBVectorStore easily attacks SQL when the attack controls the refdocid parameter.This can help attackers read and write arbitrary files on the server and lead to rce. ddbquery = f""" DELETE FROM self.tablename WHERE jsonextractstringmetadata, '$.refdocid' =...

GHSA-X975-8PGF-QH66

creationtimestamp| type| source ---|---|--- 2025-02-25 09:01:42+00:00| published-proof-of-concept| Telegram/yKpLY-2F8rkEOUTUq6LWKwJhxpg13wwviIMmbyTTpOtBuI...

GHSA-2M84-5HFW-M8V4

creationtimestamp| type| source ---|---|--- 2025-02-25 09:01:42+00:00| published-proof-of-concept| Telegram/yKpLY-2F8rkEOUTUq6LWKwJhxpg13wwviIMmbyTTpOtBuI...

GHSA-JJHX-RRH4-J8MX

creationtimestamp| type| source ---|---|--- 2025-02-25 07:22:33+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5254 2025-02-25 09:01:42+00:00| published-proof-of-concept| Telegram/yKpLY-2F8rkEOUTUq6LWKwJhxpg13wwviIMmbyTTpOtBuI...

GHSA-6CC4-H534-XH5P

creationtimestamp| type| source ---|---|--- 2025-02-24 22:22:23+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5230...

GHSA-XW6W-X28R-2P5C

creationtimestamp| type| source ---|---|--- 2025-02-24 22:22:23+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5231...

GHSA-9582-88HR-54W3

creationtimestamp| type| source ---|---|--- 2025-02-24 21:25:44+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5227...

GHSA-P75G-CXFJ-7WRX

creationtimestamp| type| source ---|---|--- 2025-02-24 21:25:44+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5227...

GHSA-GWVM-VRP4-4PP5

creationtimestamp| type| source ---|---|--- 2025-02-24 20:22:29+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5222...

CVE-2018-25083

creationtimestamp| type| source ---|---|--- 2025-02-24 20:22:29+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5223...

CVE-2023-21044

creationtimestamp| type| source ---|---|--- 2025-02-24 20:22:23+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5219...

GHSA-XJ79-W799-QJCP

creationtimestamp| type| source ---|---|--- 2025-02-24 19:22:25+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5208...

GHSA-C3P4-VM8F-386P

creationtimestamp| type| source ---|---|--- 2025-02-24 19:22:21+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5207...

Exploit for SQL Injection in Teampass

Overview This contains a proof-of-concept script for CVE-...

CVE-2025-27307

creationtimestamp| type| source ---|---|--- 2025-02-24 17:21:57+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5190...

CVE-2025-27305

creationtimestamp| type| source ---|---|--- 2025-02-24 17:21:55+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5188...

CVE-2025-27304

creationtimestamp| type| source ---|---|--- 2025-02-24 17:21:54+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5187...

CVE-2025-27303

creationtimestamp| type| source ---|---|--- 2025-02-24 17:21:50+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5185...

CVE-2025-27277

creationtimestamp| type| source ---|---|--- 2025-02-24 17:21:48+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5183...

CVE-2023-1075

creationtimestamp| type| source ---|---|--- 2025-02-24 17:21:41+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5178...