CVE-2026-11115-Database-Connection-String-Injection-via-Env-Variable

CVE-2026-11115 – 環境変数を介したデータベース接続文字列インジェクション プログラムコード（Python） dbconnector.py - Constructs DB connection string from environment import os, psycopg2 def connect: Reads DBURL; attacker can override via environment injection if they control an env var dburl = os.getenv'DBURL',...

cve-2023-38646-poc

Metabase 사전 인증 RCE CVE-2023-38646 CVE-2023-38646는 Metabase의 원격 코드 실행 취약점입니다. 이 취약점은 Metabase가 인증되지 않은 API 엔드포인트 /api/setup/validate를 처리할 때 JDBC 연결 문자열 처리에 보안 결함이 있어 발생합니다. 공격자는 특정 JDBC 연결 문자열을 구성하여 이 엔드포인트를 통해 서버에서 임의의 명령을 실행할 수 있으며, 인증이 필요하지 않습니다. 구체적으로, 공격자는 먼저 /api/session/properties에 접근하여...

WSO2-2021-1259

WSO2-2021-1259: WSO2 ESB における悪意のある JDBC 接続文字列による H2 RCE 不適切な入力検証により、悪意のある H2 JDBC 接続文字列を使用したリモートコード実行攻撃が実行される可能性があります。 ベンダー開示: この脆弱性に関するベンダーの開示と修正はこちらで確認できます。 CVE がないのはなぜか? 私もベンダーも、この脆弱性に対する CVE を申請しませんでした。 要件: この脆弱性には以下が必要です: 有効なユーザー認証情報 概念実証 Proof Of Concept: 詳細と悪用手順はこの PDF で確認できます。...

CVE-2023-38646

CVE-2023-38646 CVE-2023-38646 Metabase 0.46.6 エクスプロイト このツールは、ソフトウェアプラットフォームの脆弱性（CVE-2023-38646）を悪用します。このエクスプロイトは、不正に処理されたデータベース接続文字列を利用し、細工されたリクエストを介してリモートコード実行を可能にします。 概要 このツールは: ターゲットURLからセットアップトークンを取得します。 指定されたコマンドをBase64エンコードします。 エンコードされたコマンドを含むペイロードを構築します。 ペイロードを送信して脆弱性を悪用します。 インストール...

CVE-2023-34468

CVE-2023-34468 エクスプロイト 概要 このリポジトリは、Apache NiFi バージョン 0.0.2 から 1.21.0 に存在する重大なリモートコード実行脆弱性（CVSS 9.8）である CVE-2023-34468 向けの Python ベースのエクスプロイトツールを提供します。この脆弱性により、認証済みユーザーが埋め込みトリガーを含む H2 データベース接続文字列を操作して、任意のコードを実行できます。 ⚠️ 警告: 教育目的および許可されたテスト目的のみに使用してください。コンピュータシステムへの不正アクセスは違法です。 脆弱性の詳細 CVE ID:...

CVE-2026-12717

A flaw was found in BigQuery Data Transfer Service. An authenticated attacker can achieve arbitrary code execution within the connector container by supplying crafted Java Database Connectivity JDBC connection string parameters. Successful exploitation can further allow the attacker to escalate...

SUSE CVE-2026-96748

PyMongo's connection string parsing decodes percent-encoded characters in the host portion before the host list is separated on its delimiters. When an application places a hostname value supplied by an unauthenticated party into a connection string, that party may cause additional servers of the...

Linux Distros Unpatched Vulnerability : CVE-2026-96748

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PyMongo's connection string parsing decodes percent-encoded characters in the host portion before the host list is separated on its delimiters. When an...

AZL-105107 CVE-2026-96748 affecting package python-pymongo 4.2.0-9

PyMongo's connection string parsing decodes percent-encoded characters in the host portion before the host list is separated on its delimiters. When an application places a hostname value supplied by an unauthenticated party into a connection string, that party may cause additional servers of the...

DEBIAN-CVE-2026-96748

PyMongo's connection string parsing decodes percent-encoded characters in the host portion before the host list is separated on its delimiters. When an application places a hostname value supplied by an unauthenticated party into a connection string, that party may cause additional servers of the...

CVE-2026-96748

PyMongo's connection string parsing decodes percent-encoded characters in the host portion before the host list is separated on its delimiters. When an application places a hostname value supplied by an unauthenticated party into a connection string, that party may cause additional servers of the...

UBUNTU-CVE-2026-96748

PyMongo's connection string parsing decodes percent-encoded characters in the host portion before the host list is separated on its delimiters. When an application places a hostname value supplied by an unauthenticated party into a connection string, that party may cause additional servers of the...

CVE-2026-96748 Connection redirection via percent-encoded delimiter injection in connection string hosts

PyMongo's connection string parsing decodes percent-encoded characters in the host portion before the host list is separated on its delimiters. When an application places a hostname value supplied by an unauthenticated party into a connection string, that party may cause additional servers of the...

CVE-2026-96748 Connection redirection via percent-encoded delimiter injection in connection string hosts

PyMongo's connection string parsing decodes percent-encoded characters in the host portion before the host list is separated on its delimiters. When an application places a hostname value supplied by an unauthenticated party into a connection string, that party may cause additional servers of the...

EUVD-2026-86347

PyMongo's connection string parsing decodes percent-encoded characters in the host portion before the host list is separated on its delimiters. When an application places a hostname value supplied by an unauthenticated party into a connection string, that party may cause additional servers of the...

Connection redirection via percent-encoded delimiter injection in connection string hosts

PyMongo's connection string parsing decodes percent-encoded characters in the host portion before the host list is separated on its delimiters. When an application places a hostname value supplied by an unauthenticated party into a connection string, that party may cause additional servers of the...

CVE-2026-96748

The PyMongo database driver is vulnerable to connection redirection due to percent-encoded delimiter injection in connection string hosts. The root cause is that PyMongo decodes percent-encoded characters in the host portion before separating the host list by delimiters. If an application include...

CVE-2026-96748

PyMongo's connection string parsing decodes percent-encoded characters in the host portion before the host list is separated on its delimiters. When an application places a hostname value supplied by an unauthenticated party into a connection string, that party may cause additional servers of the...

CVE-2026-96748 Connection redirection via percent-encoded delimiter injection in connection string hosts

PyMongo's connection string parsing decodes percent-encoded characters in the host portion before the host list is separated on its delimiters. When an application places a hostname value supplied by an unauthenticated party into a connection string, that party may cause additional servers of the...

CVE-2026-96748

PyMongo's connection string parsing decodes percent-encoded characters in the host portion before the host list is separated on its delimiters. When an application places a hostname value supplied by an unauthenticated party into a connection string, that party may cause additional servers of the...