CVE-2026-44349

Daptin is a GraphQL/JSON-API headless CMS. Prior to version 0.11.5, processFuzzySearch in server/resource/resourcefindallpaginated.go:1484 splits the user-supplied column parameter by comma and interpolates each segment directly into goqu.Lfmt.Sprintf"LOWER%s LIKE ?", prefix+col raw SQL with no...

Damon Database Server Override Access Vulnerability

Damon Database Management System is a database management system introduced by Damon, abbreviated as DM. Damon database server has an override access vulnerability that can be exploited by an attacker to illegally obtain the DBA role and then control the entire database...