CVE-2026-59827

CVE-2026-59827 — Metabase में H2 क्वेरी परिणामों का असुरक्षित डीसीरियलाइज़ेशन GHSA-w95f-x9v9-wv36 | CVSS 9.9 गंभीर | CWE-502: अविश्वसनीय डेटा का डीसीरियलाइज़ेशन अवलोकन CVE-2026-59827 एक गंभीर रिमोट कोड एक्ज़ीक्यूशन कमज़ोरी है, जो लोकप्रिय ओपन-सोर्स बिज़नेस इंटेलिजेंस और डेटा एनालिटिक्स प्लेटफ़ॉर्...

CVE-2023-34468

CVE-2023-34468: Execução Remota de Código via Componentes de BD no Apache NiFi Os Serviços de Controlo DBCPConnectionPool e HikariCPConnectionPool no Apache NiFi 0.0.2 até 1.21.0 permitem que um utilizador autenticado e autorizado configure um URL de Base de Dados com o driver H2 que permite a...

Jackson_RCE-CVE-2019-12384

Configuração do ambiente Importe o projeto para o IntelliJ IDEA, configure o Maven para importar automaticamente as dependências, depois crie o seguinte arquivo em um diretório web vazio local, salve como exec.sql. E inicie um servidor http: root@kitploit: CREATE ALIAS SHELLEXEC AS $$ String...

CVE-2021-42392-exploit-lab

⚠️ PoC dell'Exploit RCE del Database H2 CVE-2021-42392 Questo repository fornisce un ambiente minimale e controllato per testare la vulnerabilità di esecuzione remota di codice del database H2 CVE-2021-42392 utilizzando la funzionalità CREATE ALIAS. A differenza di molte dimostrazioni, questo...

fastjson-1.2.58-rce

fastjson-1.2.58-rce serve: root@kitploit: fastjson autoType is enabled h2 database and some jar . ├── fastjson-1.2.58.jar ├── h2-1.4.199.jar ├── jackson-annotations-2.9.8.jar ├── jackson-core-2.9.8.jar ├── jackson-databind-2.9.8.jar └── logback-core-1.3.0-alpha4.jar Scarica fastjson-1.2.58.jar...

CVE-2023-34468

CVE-2023-34468 Exploit Panoramica Questo repository fornisce uno strumento di exploit basato su Python per CVE-2023-34468 , una vulnerabilità critica di esecuzione remota di codice CVSS 9.8 nelle versioni di Apache NiFi dalla 0.0.2 alla 1.21.0. Consente agli utenti autenticati di eseguire codice...

Another-Metabase-RCE-CVE-2023-38646

Extensão do RCE Pré-Autenticação no Metabase CVE-2023-38646 explicado aqui Isso me ajudou a evitar erros relacionados a "banco de dados já em uso" com H2 e postgre como motores root@kitploit: "token": "TOKEN", "details": "isondemand": false, "isfullsync": false, "issample": false, "cachettl": nul...

H2-database-CVE-2022-23221

H2 Database RCE CVE-2022-23221 whs41반고늘상@straightSang 1. Riepilogo Riferimento: https://nvd.nist.gov/vuln/detail/cve-2022-23221 H2 è un sistema di gestione di database relazionali che fornisce la funzionalità di compilare ed eseguire direttamente codice Java all'interno del motore SQL. Il driver...

CVE-2023-34468-POC

CVE-2023-34468 — Apache NiFi 1.21.0 RCE PoC Esecuzione remota di codice tramite istruzione RUNSCRIPT del database H2 in Apache NiFi = 1.21.0 Vulnerabilità Apache NiFi include di default un JAR del database H2. Il controller service DBCPConnectionPool può essere configurato per utilizzare questo...

Metabase 0.63.4 SQL Injection

A proof of concept exploit for an unauthenticated SQL injection vulnerability in Metabase version 0.63.4. The vulnerability allows an attacker-controlled user-id value supplied to the password reset endpoint to reach a HoneySQL query as raw SQL. On installations using the default embedded H2...

CVE-2026-17603

Nexus Repository 3 did not sufficiently restrict which HikariCP connection-pool properties could be set through the DataStore configuration API. A user holding the nx-datastores-update permission could set the connectionInitSql property to execute arbitrary SQL against the configured database on...

EUVD-2026-54513

Nexus Repository 3 did not sufficiently restrict which HikariCP connection-pool properties could be set through the DataStore configuration API. A user holding the nx-datastores-update permission could set the connectionInitSql property to execute arbitrary SQL against the configured database on...

Metabase 0.58.x < 0.58.15 / 0.59.x < 0.59.12 / 0.60.x < 0.60.6.3 / 0.61.x < 0.61.1.4 / 1.58.x < 1.58.15 / 1.59.x < 1.59.12 / 1.60.x < 1.60.6.3 / 1.61.x < 1.61.1.4 RCE (CVE-2026-59827)

The version of Metabase installed on the remote host is 0.58.x prior to 0.58.15, 0.59.x prior to 0.59.12, 0.60.x prior to 0.60.6.3, 0.61.x prior to 0.61.1.4, 1.58.x prior to 1.58.15, 1.59.x prior to 1.59.12, 1.60.x prior to 1.60.6.3, or 1.61.x prior to 1.61.1.4. It is, therefore, affected by a...

CVE-2026-67208

CVE-2026-67208 – Juggle 1.6.0 exposes an unauthenticated remote code execution via the exposed H2 database web console. An attacker can reach the unprotected /h2-console endpoint, authenticate with default shipped credentials, and use the H2 CREATE ALIAS Runtime.exec() technique to execute arbitr...

EUVD-2026-51278

Juggle through 1.6.0 contains a remote code execution vulnerability that allows unauthenticated remote attackers to execute arbitrary OS commands by connecting to the exposed H2 database web console using default shipped credentials. Attackers can access the unprotected /h2-console endpoint,...

CVE-2026-59827

Metabase is an open-source business intelligence and embedded analytics tool. Prior to 1.58.15, 1.59.12, 1.60.6.3, and 1.61.1.4, Metabase instances with an H2 database connection, including the default sample database, deserialize arbitrary Java objects returned in H2 native query result columns ...

CVE-2026-59826

Metabase is an open-source BI/analytics tool. Vulnerable in versions 1.55.0 through 1.58.15.1, 1.59.12, 1.60.6.3, and 1.61.2 due to not validating unsafe H2 connection properties on a database-creation path. An authenticated administrator could register a crafted H2 database connection and execut...

CVE-2026-59827

Metabase (open-source BI/analytics) prior to versions 1.58.15, 1.59.12, 1.60.6.3, and 1.61.1.4 is vulnerable when using an H2 database connection (including the default sample DB). The flaw allows an authenticated user who can run native H2 queries to deserialize arbitrary Java objects from H2 qu...

CVE-2026-59827 Metabase: Unsafe Deserialization of H2 Query Results

Metabase is an open-source business intelligence and embedded analytics tool. Prior to 1.58.15, 1.59.12, 1.60.6.3, and 1.61.1.4, Metabase instances with an H2 database connection, including the default sample database, deserialize arbitrary Java objects returned in H2 native query result columns ...

EUVD-2026-42659

Metabase is an open-source business intelligence and embedded analytics tool. Prior to 1.58.15, 1.59.12, 1.60.6.3, and 1.61.1.4, Metabase instances with an H2 database connection, including the default sample database, deserialize arbitrary Java objects returned in H2 native query result columns ...