CVE-2024-9264

CVE-2024-9264 استغلال RCE مُوثَّق في Grafana v11.0 عبر SQL Expressions - استغلال PoC CVE-2024-9264 - Grafana v11.0 تنفيذ الأكواد عن بُعد معتمد الهوية RCE PoC مقدمة CVE-2024-9264 هو ثغرة حرجة من نوع تنفيذ الأكواد عن بُعد وتضمين الملفات المحلية، أُدخلت في ميزة "SQL Expressions" التجريبية في Grafana...

CVE-2026-41490

CVE-2026-41490 — حقن SQL في مديري الإدخال/الإخراج لقاعدة بيانات Dagster عبر مفاتيح التقسيم الديناميكية الخطورة : عالية CVSS 8.x — AV:N/AC:L/PR:L/UI:N + C:H/I:H/A:H CWE : CWE-89 — حقن SQL المتأثر : تكاملات مديري الإدخال/الإخراج لقاعدة بيانات dagster — dagster-duckdb, dagster-snowflake, dagster-gcp...

CVE-2024-9264

CVE-2024-9264 حقن SQL في DuckDB عبر Grafana بعد المصادقة RCE، قراءة ملفات إثبات المفهوم PoC يُظهر هذا الإثبات استغلال CVE-2024-9264 باستخدام مستخدم مُصادق عليه لتنفيذ استعلام DuckDB SQL وقراءة ملف عشوائي على نظام الملفات أو تنفيذ كود تعسفي عن بُعد. لا يمكن تنفيذ الكود التعسفي إلا على Grafana...

CVE-2024-9264-Fixed

🛠️ CVE-2024-9264 - फिक्स्ड Grafana RCE एक्सप्लॉइट यह CVE-2024-9264 के लिए प्रूफ-ऑफ-कॉन्सेप्ट एक्सप्लॉइट का फिक्स्ड संस्करण है, जो Grafana में एक गंभीर रिमोट कोड एक्ज़ीक्यूशन भेद्यता है SQL एक्सप्रेशन और DuckDB के माध्यम से। 🔗 मूल एडवाइज़री: Grafana Security Release ❌ मूल PoC: सिंटैक्स त्रुटियों और...

File-Read-CVE-2024-9264

File-Read-CVE-2024-9264 Preuve de concept pour la lecture de fichier dans Grafana CVE-2024-9264 Prérequis utilisateur Grafana authentifié avec des permissions Viewer ou supérieures Le binaire DuckDB doit être installé et accessible via le PATH de Grafana Version impactée Grafana = v11.0.0 toutes...

CVE-2024-9264-RCE-Exploit

CVE-2024-9264-RCE-Exploit in Grafana via SQL Expressions Description Preuve de concept pour l'exécution de code à distance dans Grafana CVE-2024-9264 Ce dépôt contient un script Python qui exploite une vulnérabilité d'exécution de code à distance RCE dans la fonctionnalité SQL Expressions de...

day05-grafana-sqlexpr-lab

Dia 5 – Expressões SQL do Grafana → DuckDB LFI CVE-2024-9264 Resumo: Em builds afetados do Grafana 11.x, um Visualizador logado pode usar Expressões SQL. O Grafana encaminha a expressão para o DuckDB no servidor. Com readtext / readblob, você pode ler arquivos locais LFI. Nós plantamos uma flag e...

CVE-2024-9264

CVE-2024-9264 - Grafana SQL Expressions DuckDB LFI/RCE PoC Python Proof of Concept für CVE-2024-9264, eine Grafana SQL Expressions Schwachstelle, die authentifizierten lokalen Dateizugriff und Befehlsausführung ermöglichen kann, wenn duckdb im PATH des Grafana-Prozesses verfügbar ist. Nur für...

CVE-2024-9264

CVE-2024-9264-RCE-Exploit in Grafana über SQL Expressions Beschreibung Proof of Concept für Remote Code Execution in Grafana CVE-2024-9264 Dieses Repository enthält ein Python-Skript, das eine Remote Code Execution RCE-Sicherheitslücke in Grafanas SQL Expressions-Funktion ausnutzt. Durch...

Grafana Post-Auth DuckDB - SQL Injection To File Read

The SQL Expressions experimental feature of Grafana allows for the evaluation of duckdb queries containing user input. These queries are insufficiently sanitized before being passed to duckdb, leading to a command injection and local file inclusion vulnerability. Any user with the VIEWER or highe...

duckdb

Jepsen DuckDB Test Jepsen-Tests für die DuckDB-Datenbank. Läuft lokal, anstatt auf einem entfernten Cluster. Der Test startet eine Sammlung lokaler Prozesse, die eine DuckDB-Datei lokal öffnen, und interagiert mit ihnen über STDIN/STDOUT. Dies ist ein früher Prototyp. Er schaltet sich ein, führt...

CVE-2026-49360

Recce is a data-validation toolkit for enhanced dbt data build tool PR review. Prior to version 1.50.0, OSS server deployments that expose the server to an untrusted network without authentication are vulnerable to unauthenticated SQL execution through the query run API. When Recce is configured...

CVE-2026-47735

Arc is an open, SQL-native time-series database for telemetry. Prior to version 26.06.1, Arc's user-SQL validator internal/api/query.go:ValidateSQLRequest blocked only readparquet and arcpartitionagg via regex denylist. The broader DuckDB I/O function family — readcsvauto, readcsv, readjson,...

CVE-2026-49360 Recce server has unauthenticated SQL execution that allows local file read/write through DuckDB

Recce is a data-validation toolkit for enhanced dbt data build tool PR review. Prior to version 1.50.0, OSS server deployments that expose the server to an untrusted network without authentication are vulnerable to unauthenticated SQL execution through the query run API. When Recce is configured...

CVE-2026-49360 Recce server has unauthenticated SQL execution that allows local file read/write through DuckDB

Recce is a data-validation toolkit for enhanced dbt data build tool PR review. Prior to version 1.50.0, OSS server deployments that expose the server to an untrusted network without authentication are vulnerable to unauthenticated SQL execution through the query run API. When Recce is configured...

CVE-2026-49360

Recce (a data-validation toolkit for dbt PR review) versions prior to 1.50.0 are vulnerable to unauthenticated SQL execution through the query run API when deployed with a DuckDB-backed project and exposed to an untrusted network without authentication. An attacker can leverage DuckDB filesystem ...

CVE-2026-47735 Arc has an authenticated arbitrary local-file read via DuckDB I/O functions that bypasses RBAC table-level checks

Arc is an open, SQL-native time-series database for telemetry. Prior to version 26.06.1, Arc's user-SQL validator internal/api/query.go:ValidateSQLRequest blocked only readparquet and arcpartitionagg via regex denylist. The broader DuckDB I/O function family — readcsvauto, readcsv, readjson,...

CVE-2026-47735 Arc has an authenticated arbitrary local-file read via DuckDB I/O functions that bypasses RBAC table-level checks

Arc is an open, SQL-native time-series database for telemetry. Prior to version 26.06.1, Arc's user-SQL validator internal/api/query.go:ValidateSQLRequest blocked only readparquet and arcpartitionagg via regex denylist. The broader DuckDB I/O function family — readcsvauto, readcsv, readjson,...

CVE-2026-47735

Arc (Basekick Labs) is an open-source SQL-native time-series database for telemetry. Prior to 26.06.1 , its user-SQL validator (internal/api/query.go:ValidateSQLRequest) blocked only read_parquet( and arc_partition_agg( via regex denylist, while the broader DuckDB I/O function family (read_csv_au...

CVE-2026-58139

The DuckDB AWS extension for DuckDB contains a security policy bypass vulnerability that allows any database user with SQL execution permissions to extract plaintext AWS credentials by calling the loadawscredentials function with the redactsecret parameter set to false, circumventing the...