PT-2026-108336

DBI versions before 1.654 for Perl incorrectly treat numeric values as strings in FetchHashKeyName. fetchrow hashref uses the string pointer of the FetchHashKeyName attribute as the key name without stringifying it first. When FetchHashKeyName has been set to an integer IV or floating-point NV...

PT-2026-99933

Name of the Vulnerable Software and Affected Versions DBI versions prior to 1.654 Description Perl DBI incorrectly treats numeric values as strings within the FetchHashKeyName attribute. The fetchrow hashref function uses the string pointer of FetchHashKeyName as the key name without performing...

libreoffice:dbffuzzer: Heap-buffer-overflow in connectivity::dbase::ODbaseTable::fetchRow

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=5001533498982400 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: dbffuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash...

HelpDeskZ < 1.0.2 - (Authenticated) SQL Injection / Unauthorized File Download

''' Exploit Title: HelpDeskZ fetchRow"SELECT , COUNTid AS total FROM ".TABLEPREFIX."attachments WHERE id=".$db-realescapestring$params2." AND ticketid=".$params0." AND msgid=".$params3; third argument AND msgid=".$params3; sent to fetchRow query with out any senitization Steps to reproduce:...