CVE-2026-11115-Database-Connection-String-Injection-via-Env-Variable

CVE-2026-11115 – 通过环境变量进行数据库连接字符串注入 程序代码（Python） root@kitploit: dbconnector.py - Constructs DB connection string from environment import os, psycopg2 def connect: Reads DBURL; attacker can override via environment injection if they control an env var dburl = os.getenv'DBURL',...