progress-burp

Progress Tracker Burp Suite extension to track vulnerability assessment progress. Features Capturing items unique requests from the Burp Suite tools Proxy, Repeater, Target. Request unique key is defined as follows: target host, port, protocol, path and method. Items have following editable...

CVE-2022-41828

CVE-2022-41828 Amazon AWS Redshift JDBC Driver Remote Code Execution RCE The Amazon JDBC Driver for Redshift is a Type 4 JDBC driver that provides database connectivity through the standard JDBC application program interfaces APIs available in the Java Platform, Enterprise Editions. The Driver...

jdbc-sqlxml-xxe

jdbc-sqlxml-xxe h2-jdbc CVE-2021-23463 https://github.com/h2database/h2database/issues/3195 SQLXML XXE vulnerability reproduction. mysql-jdbc CVE-2021-2471 SQLXML XXE vulnerability reproduction...

dbeaver

DBeaver Strumento database multipiattaforma gratuito per sviluppatori, programmatori SQL, amministratori di database e analisti. Ha molte funzionalità tra cui editor di schema, editor SQL, editor di dati, integrazione AI, diagrammi ER, esportazione/importazione/migrazione dei dati, piani di...

xerial__sqlite-jdbc_CVE-2023-32697_3-41-2-1

SQLite JDBC Treiber SQLite JDBC ist eine Bibliothek zum Zugreifen auf und Erstellen von SQLite-Datenbankdateien in Java. Unsere SQLiteJDBC-Bibliothek erfordert keine Konfiguration, da native Bibliotheken für gängige Betriebssysteme, einschließlich Windows, macOS, Linux usw., in einer einzigen...

hekate

Hekate - VMWare Workspace ONE Access रिमोट कोड निष्पादन एक्सप्लॉइट क्यूहू 360 भेद्यता अनुसंधान संस्थान के स्टीवन सीली LandGrey द्वारा मूल दुष्ट MySQL सर्वर विवरण Hekate का उच्चारण हेह-का-तेह है दिनांक: Tue Feb 22 13:37:00 CST 2022 संस्करण: 21.08.0.1 नवीनतम फ़ाइल:...

CVE-2026-12717 Remote Code Execution in BigQuery Data Transfer Service via JDBC Connection String Injection

An Improper Input Validation vulnerability in CData JDBC driver integration in Google Cloud BigQuery Data Transfer Service versions prior to 2026-05-01 on Google Cloud Platform allows an authenticated attacker to achieve remote code execution in the connector container and escalate privileges in...

CVE-2026-12717

CVE-2026-12717 is an Improper Input Validation vulnerability in the CData JDBC driver integration within Google Cloud BigQuery Data Transfer Service (versions prior to 2026-05-01). An authenticated attacker can achieve remote code execution in the connector container and escalate privileges in th...

CVE-2023-21971_Analysis

CVE-2023-21971 Connector/J RCE Analysis Analisi Riferimenti Remote Code Execution RCE in com.mysql:mysql-connector-j | CVE-2023-21971 | Snyk New Vulnerability in MySQL JDBC Driver: RCE and Unauthorized DB Access Analisi della deserializzazione di MYSQL JDBC - 跳跳糖 tttang.com Panoramica della...

PT-2026-82091

Name of the Vulnerable Software and Affected Versions Google Cloud BigQuery Data Transfer Service versions prior to 2026-05-01 Description Improper input validation in the CData JDBC driver integration allows an authenticated attacker to achieve remote code execution within the connector containe...

Astra Linux – Vulnerability in libpgjava

The PostgreSQL JDBC Driver also known as PgJDBC prior to version 42.2.13 allowed XXE...

RHSA-2026:54532 Red Hat Security Advisory: postgresql-jdbc security update

Bulletin has no description...

c3p0: c3p0: Remote code execution via deserialization vulnerability

A flaw was found in c3p0, a JDBC Connection pooling library. This vulnerability allows a remote attacker to potentially execute arbitrary code by crafting a malicious data source object. When an application deserializes this object and automatically resolves its properties, it can trigger...

jdbc.postgresql.org: pgjdbc: Client-side Denial of Service via malicious SCRAM-SHA-256 authentication

A flaw was found in pgjdbc, an open-source PostgreSQL JDBC Driver. A malicious server can exploit this vulnerability by instructing the driver to perform SCRAM-SHA-256 Salted Challenge Response Authentication Mechanism Secure Hash Algorithm 256 authentication with an excessively large iteration...

RHSA-2026:52978 Red Hat Security Advisory: postgresql-jdbc security update

Bulletin has no description...

RHSA-2026:52930 Red Hat Security Advisory: postgresql-jdbc security update

Bulletin has no description...

RHSA-2026:52929 Red Hat Security Advisory: postgresql-jdbc security update

Bulletin has no description...

jdbc.postgresql.org: pgjdbc: Client-side Denial of Service via malicious SCRAM-SHA-256 authentication

A flaw was found in pgjdbc, an open-source PostgreSQL JDBC Driver. A malicious server can exploit this vulnerability by instructing the driver to perform SCRAM-SHA-256 Salted Challenge Response Authentication Mechanism Secure Hash Algorithm 256 authentication with an excessively large iteration...

CVE-2026-54291 Silent channel-binding authentication downgrade via unsupported certificate algorithms

pgjdbc is an open source postgresql JDBC Driver. In releases 42.7.4 through 42.7.11, channelBinding=require connections can be silently downgraded from SCRAM-SHA-256-PLUS with channel binding to plain SCRAM-SHA-256 without it, losing the man-in-the-middle protection the setting is meant to...

Security Bulletin: IBM Tivoli Netcool Impact and IBM Tivoli Business Service Manager is vulnerable to multiple vulnerabilities due to DB2 JDBC Driver

Summary DB2 JDBC driver is shipped with IBM Tivoli Netcool Impact as part of the db2 data source adapter, and is shipped DB2 driver is shipped as part of the XMLToolkit component for IBM Tivoli Business Service Manager. Information about security vulnerability affecting DB2 JDBC driver has been...