1399 matches found
CVE-2023-30552
CVE-2023-30552 concerns Archery, an open source SQL audit platform. The provided documents describe multiple SQL injection vulnerabilities in the Archery project, specifically in the sql/instance.py endpoint’s describe method. The root cause is unsafe concatenation of user input (tb_name, db_name...
[SECURITY] Fedora 36 Update: libldb-2.5.3-1.fc36
An extensible library that implements an LDAP like API to access remote LDAP servers, or use local tdb databases...
[SECURITY] Fedora 38 Update: libldb-2.7.2-1.fc38
An extensible library that implements an LDAP like API to access remote LDAP servers, or use local tdb databases...
[SECURITY] Fedora 37 Update: libldb-2.6.2-1.fc37
An extensible library that implements an LDAP like API to access remote LDAP servers, or use local tdb databases...
Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service in SQlite (CVE-2020-35525)
Summary IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service in SQlite caused by a NULL pointer derreference flaw in the INTERSEC query processing. CVE-2020-35525. SQlite is included as part of the Base OS used by our service images. Please read the...
org.apereo.cas:cas-server-core-configuration-cloud-vault (>=5.2.0-rc2, <=5.2.9), org.springframework.cloud:spring-cloud-starter-vault-config (1.0.2.release) +5 more potentially affected by CVE-2023-20859 via org.springframework.vault:spring-vault-core (1.0.2.release)
org.springframework.vault:spring-vault-core MAVEN version 1.0.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.vault:spring-vault-core and may be impacted: - org.apereo.cas:cas-server-core-configuration-cloud-vault...
BreachForums Administrator Baphomet Shuts Down Infamous Hacking Forum
In a sudden turn of events, Baphomet, the current administrator of BreachForums, said in an update on March 21, 2023, that the hacking forum has been officially taken down but emphasized that "it's not the end." "You are allowed to hate me, and disagree with my decision but I promise what is to...
Two U.S. Men Charged in 2022 Hacking of DEA Portal
Two U.S. men have been charged with hacking into a U.S. Drug Enforcement Agency DEA online portal that taps into 16 different federal law enforcement databases. Both are alleged to be part of a larger criminal organization that specializes in using fake emergency data requests from compromised...
GHSA-PVP6-53R9-8VXH SQL Injection in Funadmin
Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/table/list...
SQL Injection in Funadmin
Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/table/list...
CVE-2023-24777
Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/table/list...
Sql injection
Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/table/list...
GHSA-QHQ8-2F3M-GXVP SQL Injection in Funadmin
Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/database/edit...
CVE-2023-24782
Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/database/edit...
Sql injection
Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/database/edit...
GHSA-M8WF-WMWH-JW2M SQL Injection in Funadmin
Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/database/list...
CVE-2023-24773
Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/database/list...
Sql injection
Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/database/list...