Akkadian Provisioning Manager - Information Disclosure

Akkadian Provisioning Manager is susceptible to information disclosure. The restricted shell provided can be escaped by abusing the Edit MySQL Configuration command. This command launches a standard VI editor interface which can then be escaped. id: CVE-2021-31581 info: name: Akkadian Provisionin...

EUVD-2026-118501

Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. Prior to 5.2.1, SQL dashboard-variable substitution used attacker-controlled JavaScript replacement strings unsafely across SQL connectors and separately failed to escape...

CVE-2026-54349

The open-source web application Chartbrew is vulnerable to SQL injection in versions prior to 5.2.1 . The issue exists within the applyMysqlOrPostgresVariables function, where SQL dashboard-variable substitution unsafely processes attacker-controlled JavaScript replacement strings across various ...

METATRON

METATRON AI-powered penetration testing assistant using local LLM on linux Parrot OS 🔱 METATRON AI-Powered Penetration Testing Assistant 📌 What is Metatron? Metatron is a CLI-based AI penetration testing assistant that runs entirely on your local machine — no cloud, no API keys, no subscriptions...

Laravel TokenGuard - Authentication Bypass

Laravel's TokenGuard driver = token, hash = false does not validate the credential type before the database lookup. Sending a JSON body with apitoken as an array of integers "apitoken":0 produces a whereIn'apitoken', 0 query; under MySQL/MariaDB implicit casting, every varchar token not starting...

CVE-2026-81815

A flaw was found in Apache OFBiz. A remote, unauthenticated attacker can exploit a Structured Query Language SQL injection vulnerability by submitting a specially crafted search request. This issue occurs because the entity engine improperly sanitizes input values when building database queries o...

CVE-2026-102523

MariaDB server is a community developed fork of MySQL server. From 10.11.1 until 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, ALTER TABLE ... CONVERT ... PARTITION does not apply filename encoding to user-specified partition names before using them in filesystem path construction. An...

UBUNTU-CVE-2026-102523

MariaDB server is a community developed fork of MySQL server. From 10.11.1 until 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, ALTER TABLE ... CONVERT ... PARTITION does not apply filename encoding to user-specified partition names before using them in filesystem path construction. An...

CVE-2026-102523

A flaw was found in MariaDB. When converting table partitions, the database server does not properly encode user-specified partition names before using them in filesystem path construction. An authenticated database user can exploit this issue by providing a specially crafted partition name to...

CVE-2026-107384

A flaw was found in MariaDB Connector/Node.js. When the permitSetMultiParamEntries configuration setting is enabled, object keys are inserted into Structured Query Language SQL statements without proper escaping. A remote attacker can exploit this flaw by providing crafted input containing...

CVE-2026-107385

A flaw was found in MariaDB Connector/Node.js. When handling text-protocol database queries, the connector improperly escapes quote characters using backslashes without checking if the database session has backslash escaping disabled. A remote attacker can supply crafted input into query...

CVE-2026-107383

A flaw was found in MariaDB Connector/Node.js. This vulnerability allows an attacker to cause an information disclosure of uninitialized application memory into the database. When processing geographic data in GeoJSON format, the connector allocates memory buffers before verifying data structures...

CVE-2026-102523

MariaDB server is a community developed fork of MySQL server. From 10.11.1 until 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, ALTER TABLE ... CONVERT ... PARTITION does not apply filename encoding to user-specified partition names before using them in filesystem path construction. An...

CVE-2026-102523 MariaDB server: Authorization bypass via ALTER TABLE ... CONVERT ... PARTITION

MariaDB server is a community developed fork of MySQL server. From 10.11.1 until 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, ALTER TABLE ... CONVERT ... PARTITION does not apply filename encoding to user-specified partition names before using them in filesystem path construction. An...

CVE-2026-102523 MariaDB server: Authorization bypass via ALTER TABLE ... CONVERT ... PARTITION

MariaDB server is a community developed fork of MySQL server. From 10.11.1 until 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, ALTER TABLE ... CONVERT ... PARTITION does not apply filename encoding to user-specified partition names before using them in filesystem path construction. An...

EUVD-2026-117548

MariaDB server is a community developed fork of MySQL server. From 10.11.1 until 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, ALTER TABLE ... CONVERT ... PARTITION does not apply filename encoding to user-specified partition names before using them in filesystem path construction. An...

CVE-2026-102523

In MariaDB server versions 10.11.1 through 10.11.18, 11.4.1 through 11.4.12, 11.8.1 through 11.8.8, 12.3.1 through 12.3.2, and 13.0.1 through 13.0.1, an authorization bypass exists due to missing filename encoding in the ALTER TABLE ... CONVERT ... PARTITION statement. An authenticated database u...

CVE-2026-81815

SQL Injection in the entity engine's generic performFind service in Apache OFBiz 24.09 before 24.09.08 on MySQL/MariaDB-backed deployments allows a remote unauthenticated attacker to disclose arbitrary rows from the queried entity by submitting an ignore-case find request e.g. ic=Y with a crafted...

CVE-2026-81815

Apache OFBiz versions 24.09 before 24.09.08 are vulnerable to SQL injection in the entity engine's generic performFind service when using MySQL/MariaDB backends. The root cause is that SqlJdbcUtil.addValueSingle inlines values directly into the SQL text using ANSI-only single-quote doubling inste...

EUVD-2026-117483

SQL Injection in the entity engine's generic performFind service in Apache OFBiz 24.09 before 24.09.08 on MySQL/MariaDB-backed deployments allows a remote unauthenticated attacker to disclose arbitrary rows from the queried entity by submitting an ignore-case find request e.g. ic=Y with a crafted...