CVE-2026-59827

CVE-2026-59827 — إلغاء تسلسل غير آمن لنتائج استعلامات H2 في Metabase GHSA-w95f-x9v9-wv36 | CVSS 9.9 حرج | CWE-502: إلغاء تسلسل بيانات غير موثوقة نظرة عامة CVE-2026-59827 هي ثغرة أمنية حرجة لتنفيذ التعليمات البرمجية عن بُعد في Metabase، منصة الذكاء التجاري وتحليل البيانات مفتوحة المصدر الشهيرة. يك...

CVE-2021-42392-exploit-lab

⚠️ H2 Database RCE Exploit PoC CVE-2021-42392 هذا المستودع يوفر بيئة محدودة ومتحكم بها لاختبار ثغرة تنفيذ الأوامر عن بُعد في قاعدة بيانات H2 CVE-2021-42392 باستخدام خاصية CREATE ALIAS. على عكس العديد من العروض التوضيحية، يستهدف هذا الاستغلال خدمة H2 TCP مباشرة عادة على المنفذ 9092، دون الاعتماد عل...

CVE-2025-56819

CVE-2025-56819 Un problème dans Datart v.1.0.0-rc.3 permet à un attaquant distant d'exécuter du code arbitraire via le paramètre de connexion INIT. root@kitploit: POST /api/v1/data-provider/test HTTP/1.1 Host: test.com:8080 Content-Type: application/json Content-Length: 520 "name":...

H2-database-CVE-2022-23221

H2 Database RCE CVE-2022-23221 whs41반고늘상@straightSang 1. Résumé Référence : https://nvd.nist.gov/vuln/detail/cve-2022-23221 H2 est un système de gestion de base de données relationnelle qui permet de compiler et d'exécuter directement du code Java au sein de son moteur SQL. Le pilote H2 analyse...

fastjson-1.2.58-rce

fastjson-1.2.58-rce requis : root@kitploit: l'autoType de fastjson est activé base de données h2 et quelques jars . ├── fastjson-1.2.58.jar ├── h2-1.4.199.jar ├── jackson-annotations-2.9.8.jar ├── jackson-core-2.9.8.jar ├── jackson-databind-2.9.8.jar └── logback-core-1.3.0-alpha4.jar Télécharger...

CVE-2023-34468

Exploit CVE-2023-34468 Aperçu Ce dépôt fournit un outil d'exploitation basé sur Python pour CVE-2023-34468 , une vulnérabilité critique d'exécution de code à distance CVSS 9.8 dans Apache NiFi versions 0.0.2 à 1.21.0. Il permet aux utilisateurs authentifiés d'exécuter du code arbitraire en...

Jackson_RCE-CVE-2019-12384

Configuration de l'environnement Importez le projet dans IntelliJ IDEA, configurez Maven pour importer automatiquement les dépendances, puis créez le fichier suivant dans un répertoire web vide local, sauvegardez-le sous exec.sql. Lancez ensuite un serveur HTTP : root@kitploit: CREATE ALIAS...

CVE-2023-34468

CVE-2023-34468: Exécution de code à distance via les composants de base de données dans Apache NiFi Les services de contrôleur DBCPConnectionPool et HikariCPConnectionPool dans Apache NiFi 0.0.2 à 1.21.0 permettent à un utilisateur authentifié et autorisé de configurer une URL de base de données...

CVE-2023-34468-POC

CVE-2023-34468 — Apache NiFi 1.21.0 RCE PoC Exécution de code à distance via H2 Database RUNSCRIPT dans Apache NiFi = 1.21.0 Vulnérabilité Apache NiFi est livré avec un JAR de base de données H2 inclus par défaut. Le service de contrôle DBCPConnectionPool peut être configuré pour utiliser ce pilo...

Another-Metabase-RCE-CVE-2023-38646

تمديد ثغرة RCE قبل المصادقة في Metabase CVE-2023-38646 موضحة هنا ساعدني هذا في تجنب أخطاء متعلقة بـ "قاعدة البيانات قيد الاستخدام بالفعل" مع H2 و Postgre كمحركات root@kitploit: "token": "TOKEN", "details": "isondemand": false, "isfullsync": false, "issample": false, "cachettl": null,...

Astra Linux – Vulnerability in h2database

The org.h2.util.JdbcUtils.getConnection method of the H2 database takes the class name of the driver and the URL of the database as parameters. An attacker may pass in a JNDI driver name and a URL that points to an LDAP or RMI server, allowing for remote code execution. This vulnerability can be...

Metabase 0.63.4 SQL Injection

A proof of concept exploit for an unauthenticated SQL injection vulnerability in Metabase version 0.63.4. The vulnerability allows an attacker-controlled user-id value supplied to the password reset endpoint to reach a HoneySQL query as raw SQL. On installations using the default embedded H2...

CVE-2026-17603

Nexus Repository 3 did not sufficiently restrict which HikariCP connection-pool properties could be set through the DataStore configuration API. A user holding the nx-datastores-update permission could set the connectionInitSql property to execute arbitrary SQL against the configured database on...

EUVD-2026-54513

Nexus Repository 3 did not sufficiently restrict which HikariCP connection-pool properties could be set through the DataStore configuration API. A user holding the nx-datastores-update permission could set the connectionInitSql property to execute arbitrary SQL against the configured database on...

Metabase 0.58.x < 0.58.15 / 0.59.x < 0.59.12 / 0.60.x < 0.60.6.3 / 0.61.x < 0.61.1.4 / 1.58.x < 1.58.15 / 1.59.x < 1.59.12 / 1.60.x < 1.60.6.3 / 1.61.x < 1.61.1.4 RCE (CVE-2026-59827)

The version of Metabase installed on the remote host is 0.58.x prior to 0.58.15, 0.59.x prior to 0.59.12, 0.60.x prior to 0.60.6.3, 0.61.x prior to 0.61.1.4, 1.58.x prior to 1.58.15, 1.59.x prior to 1.59.12, 1.60.x prior to 1.60.6.3, or 1.61.x prior to 1.61.1.4. It is, therefore, affected by a...

CVE-2026-67208

CVE-2026-67208 – Juggle 1.6.0 exposes an unauthenticated remote code execution via the exposed H2 database web console. An attacker can reach the unprotected /h2-console endpoint, authenticate with default shipped credentials, and use the H2 CREATE ALIAS Runtime.exec() technique to execute arbitr...

EUVD-2026-51278

Juggle through 1.6.0 contains a remote code execution vulnerability that allows unauthenticated remote attackers to execute arbitrary OS commands by connecting to the exposed H2 database web console using default shipped credentials. Attackers can access the unprotected /h2-console endpoint,...

CVE-2026-59827

Metabase is an open-source business intelligence and embedded analytics tool. Prior to 1.58.15, 1.59.12, 1.60.6.3, and 1.61.1.4, Metabase instances with an H2 database connection, including the default sample database, deserialize arbitrary Java objects returned in H2 native query result columns ...

CVE-2026-59826

Metabase is an open-source BI/analytics tool. Vulnerable in versions 1.55.0 through 1.58.15.1, 1.59.12, 1.60.6.3, and 1.61.2 due to not validating unsafe H2 connection properties on a database-creation path. An authenticated administrator could register a crafted H2 database connection and execut...

CVE-2026-59827 Metabase: Unsafe Deserialization of H2 Query Results

Metabase is an open-source business intelligence and embedded analytics tool. Prior to 1.58.15, 1.59.12, 1.60.6.3, and 1.61.1.4, Metabase instances with an H2 database connection, including the default sample database, deserialize arbitrary Java objects returned in H2 native query result columns ...