UBUNTU-CVE-2026-65139

Fix various issues in unsafe operation/queries to the slurmdbd...

UBUNTU-CVE-2026-65140

Fix a privilege escalation where an operator could alter Administrator accounts through the accounting database...

PT-2026-90777

Fix a privilege escalation where an operator could alter Administrator accounts through the accounting database...

ManageEngine PAM360 < Build 8561 SQLi (CVE-2026-14828)

According to its self-reported build number, the ManageEngine PAM360 application running on the remote host is prior to build 8561. It is, therefore, affected by an authenticated SQL injection vulnerability. An authenticated, remote attacker can exploit this by crafting a malicious query to execu...

FreeBSD : jenkins -- multiple vulnerabilities (102bc631-a6da-11f1-ba21-00e0edd85c6a)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 102bc631-a6da-11f1-ba21-00e0edd85c6a advisory. Jenkins Security Advisory 2026-09-02: Tenable has extracted the preceding description block...

Linux Distros Unpatched Vulnerability : CVE-2026-65140

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The vulnerability exists due to a privilege escalation flaw within the accounting database layer that allows a lower-privileged operator account to alter...

Security Bulletin: IBM i is Affected By Improper Authorization and Authentication Vulnerabilities in DDM / DRDA [CVE-2026-18175, CVE-2026-18221]

Summary IBM i is vulnerable to manipulation of database transactions due to improper authorization CVE-2026-18175 and allowing unathorized access due to improper validation CVE-2026-18221 in Distributed Data Management DDM / Distributed Relational Database Architecture DRDA as described in the...

@etherio/database (>=0.0.1, <=0.0.13), @gridnt/ngplus (1.0.3) +23 more potentially affected by unknown CVE via axois (0.0.1-security)

axois NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on axois and may be impacted: - @etherio/database =0.0.1, =0.5.6, =3.10.2-alpha.0, =0.0.27, =0.0.27, =1.0.0, =1.0.2, =0.1.0, =1.0.1, =1.0.10 and more Source cves: unknown CVE...

EUVD-2026-42744

Siyuan: Authenticated path traversal in /snippets/ static handler serveSnippets leaks conf/conf.json secrets and siyuan.db...

Malicious code in apple-database (npm)

Source: ossf-package-analysis 11bd736afb32f1fa9fa0d7c3c7179f15862943e15465e8adb4b6ccea13130742 The OpenSSF Package Analysis project identified 'apple-database' @ 999.9.9 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious...

Malicious code in anup-database (npm)

The package anup-database was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in amazon-database (npm)

Source: ossf-package-analysis 2c88ccb61fbaac42f853b7abf095d81a3ebf30c8b8ae2aefda753f39769c0422 The OpenSSF Package Analysis project identified 'amazon-database' @ 999.9.9 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious...

CVE-2026-16241

A flaw was found in PostgreSQL ECPG. A highly privileged database server administrator can trigger an integer underflow by sending a specially crafted bytea value to the ECPG client. This vulnerability causes the client to overwrite a large memory region, leading to a temporary denial of service...

sqlite: SQLite: Arbitrary code execution and crash via heap-based buffer overflow in FTS5

A flaw was found in SQLite, specifically within its FTS5 full-text search extension. Attackers can exploit a heap-based buffer overflow by providing a specially crafted database. This crafted database contains malicious metadata that triggers an integer underflow during FTS5 MATCH query processin...

dbeaver v26.2.0

DBeaver Free multi-platform database tool for developers, SQL programmers, database administrators and analysts. Has a lot of features including schema editor, SQL editor, data editor, AI integration, ER diagrams, data export/import/migration, SQL execution plans, database administration tools,...

Linux Distros Unpatched Vulnerability : CVE-2026-48050

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Arc is an open, SQL-native time-series database for telemetry. Versions prior to 26.06.1 register Go's net/http/pprof handlers at /debug/pprof/ via...

Sangoma Switchvox SQL Injection Vulnerability

Sangoma Switchvox contains a SQL injection vulnerability which allows an unauthenticated remote attacker to execute arbitrary SQL statements against the backend PostgreSQL database using a single crafted request, including database operations and remote code execution...

CVE-2026-73721

Vulnerabilities in the API of HPE Networking Fabric Composer could allow an authenticated remote attacker to conduct SQL injection attacks against the HPE Networking Fabric Composer instance. An attacker could exploit these vulnerabilities to obtain and modify sensitive information in the...

CVE-2018-18964

creationtimestamp| type| source ---|---|--- 2026-09-01 20:02:12+00:00| seen| https://t.me/hackingAttack/29057 2026-09-01 20:02:15+00:00| seen| https://t.me/hackingAttack/27123 2026-09-01 20:02:17+00:00| seen| https://t.me/hackingAttack/27117 2026-09-01 20:02:17+00:00| seen|...

CVE-2026-73721

CVE-2026-73721 describes SQL injection vulnerabilities in the API of HPE Networking Fabric Composer . An authenticated remote attacker can exploit these flaws to obtain and modify sensitive data in the underlying database, potentially leading to complete compromise of the host . The CNA-assigned ...