postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN

A flaw was found in PostgreSQL psql. During the COPY FROM STDIN operation, untrusted data can be mistakenly interpreted as psql commands if an error injection causes the command to fail prematurely. This could allow an attacker to achieve arbitrary command execution. Successful exploitation...

cve-2022-42475-poc

CVE-2022-42475 PoC Fortinet SSL VPN 事前認証リモートコード実行 説明 CVE-2022-42475 は、FortiOS の SSL VPN サービスにおけるヒープベースのバッファオーバーフローの脆弱性であり、認証されていない攻撃者が /remote/error エンドポイントを標的とした巧妙に細工された HTTP リクエストを通じて、リモートから任意のコードを実行（RCE）できるようにします。 この脆弱性は、公式パッチが公開される前に実際の攻撃で積極的に悪用されていました（0-day）。 PoC の実行 次のスクリーンショットは、許可されたラボ環境での...

postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN

A flaw was found in PostgreSQL psql. During the COPY FROM STDIN operation, untrusted data can be mistakenly interpreted as psql commands if an error injection causes the command to fail prematurely. This could allow an attacker to achieve arbitrary command execution. Successful exploitation...

CVE-2026-24418

CVE-2026-24418 OpenSTAManager --info 정찰 root@kitploit: Database info + privileges + user credentials python3 exploit.py...

CVE-2023-25157-GeoServer-SQLi-Lab

GeoServer & GeoTools SQL Injection CVE-2023-25157 & CVE-2023-25158 — 脆弱性ラボ & PoCレポート GeoServer CVE-2023-25157 とライブラリ GeoTools CVE-2023-25158 における SQLインジェクション（エラーベース） 脆弱性の実践環境（Vulnerable Lab）と詳細な攻撃分析レポートです。 詳細分析・攻撃レポート 各層を図解したPoC画像付きの完全な分析ドキュメントは、公式レポートをご覧ください： 👉 詳細な攻撃レポートを見る（REPORT.md）...

postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN

A flaw was found in PostgreSQL psql. During the COPY FROM STDIN operation, untrusted data can be mistakenly interpreted as psql commands if an error injection causes the command to fail prematurely. This could allow an attacker to achieve arbitrary command execution. Successful exploitation...

CVE-2017-7308

CVE-2017-7308 CVE ID: CVE-2017-7308 公開日: 2017-03-29T20:59:00.373 基本スコア CVSS 3.0/3.1: 7.8 説明: Linuxカーネル4.10.6までのnet/packet/afpacket.cのpacketsetring関数は、特定のブロックサイズデータを適切に検証しません。これにより、ローカルユーザーは巧妙に細工されたシステムコールを介して、サービス拒否（整数符号エラーと範囲外書き込み）を引き起こしたり、（CAPNETRAWケーパビリティが保持されている場合）特権を取得したりすることができます。...

CVE-2018-1000199

CVE-2018-1000199 Linuxのptraceコードはデバッグレジスタへのアクセスを仮想化しますが、その仮想化コードには誤ったエラーハンドリングがあります。つまり、例えばDR0に不正な値を書き込んだ場合、ptrace呼び出しは-EINVALを返すにもかかわらず、カーネルのブレークポイント追跡の内部状態が破損する可能性があります。...

UBUNTU-CVE-2026-87080

Net::IDN::Punycode::PP versions before 2.590 for Perl decode a truncated label to a name containing a character it never encoded in decodepunycode. The pure-Perl decoder reads one digit at a time with four-argument substr and tests the result with defined to detect the end of the input. substr on...

CVE-2026-87080

Net::IDN::Punycode::PP versions before 2.590 for Perl decode a truncated label to a name containing a character it never encoded in decodepunycode. The pure-Perl decoder reads one digit at a time with four-argument substr and tests the result with defined to detect the end of the input. substr on...

CVE-2026-87080

The Net::IDN::Punycode::PP Perl module (versions before 2.590 ) contains a vulnerability where the pure-Perl decoder incorrectly processes truncated labels in the decode_punycode function. The root cause is that the four-argument substr function returns an empty string instead of undef when exhau...

Advanced-SQL-Injection-Cheatsheet

MySQL エラーベース SQLインジェクション チートシート これはおそらくSQLインジェクション攻撃の中でも最も簡単な脆弱性です。攻撃者はSQLエラーメッセージを利用して、MySQLデータベースを列挙およびダンプすることができます。 脆弱性の検出http://domain.com/index.php?id=1 Website loads successfully http://domain.com/index.php?id=1' エラーメッセージが表示されます：You have an error in your SQL syntax; check the manual that...

ROS-20260922-73-0087

The vulnerability in Tomcat is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges...

ROS-20260922-73-0088

The vulnerability in Tomcat10 is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges...

ROS-20260922-73-0078

The vulnerability in Tomcat is related to a single shift error. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux Distros Unpatched Vulnerability : CVE-2026-87080

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Net::IDN::Punycode::PP versions before 2.590 for Perl decode a truncated label to a name containing a character it never encoded in decodepunycode. The pure-Per...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libxml2 (UTSA-2025-002241)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-002241 advisory. An issue was discovered in libxml2 before 2.10.3. Certain invalid XML entity definitions can corrupt a hash table key, potentially leading to subsequent logic errors...

CVE-2026-87080

Net::IDN::Punycode::PP versions before 2.590 for Perl decode a truncated label to a name containing a character it never encoded in decodepunycode. The pure-Perl decoder reads one digit at a time with four-argument substr and tests the result with defined to detect the end of the input. substr on...

ROS-20260922-73-0041

The vulnerability of the tlspushrecord function in the net/tls/tlssw.c module of the Linux operating system’s TLS implementation is related to a single-shift error. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protect...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: httpd (UTSA-2026-090055)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090055 advisory. In Apache HTTP Server 2.4.0-2.4.39, a limited cross-site scripting issue was reported affecting the modproxy error page. An attacker could cause the link on the erro...