CVE-2020-11579

CVE-2020-11579 Introduction PHPKB 9.0 Enterprise Edition base de données MySQL est affecté par une divulgation non authentifiée de fichiers arbitraires via un serveur MySQL malveillant. Un attaquant distant peut lire n'importe quel fichier sur un hôte victime distant avec les privilèges du serveu...

adminer_CVE-2021-43008

CVE-2021-43008 — Vulnérabilité Adminer Lecture arbitraire de fichiers via un serveur MySQL malveillant 1. Qu’est-ce qu’Adminer ? Adminer est un outil web PHP permettant d’administrer facilement des bases de données MySQL, PostgreSQL, SQLite ou SQL Server. Il est couramment déployé comme...

Adminer-CVE-2021-43008

Adminer CVE-2021-43008 PoC Preuve de concept pour CVE-2021-43008 affectant Adminer. Cette vulnérabilité permet à un serveur MySQL malveillant de demander des fichiers locaux arbitraires depuis la machine cliente lorsque LOAD DATA LOCAL INFILE est activé. Le dépôt contient des outils pour reprodui...

Rogue-MySql-Server

Rogue-MySql-Server Отредактируйте скрипт и при желании измените файл для чтения и порт сервера. Запустите скрипт и подключитесь к вашему серверу, чтобы прочитать файл со стороны клиента. Читайте mysql.log для просмотра содержимого прочитанного файла...

CVE-2026-34308

CVE-2026-34308: MySQL Server компонент JSON отказ в обслуживании Официальный бюллетень вендора: Oracle Critical Patch Update Advisory — April 2026. Сводка из опубликованного CVE Уязвимость в Oracle MySQL Server компонент: Server: JSON. Поддерживаемые затронутые версии: 8.0.0–8.0.45 , 8.4.0–8.4.8 ...

Rocky Linux 9.6 [TuxCare] Security Update: mysql / mysql-common / mysql-devel / mysql-errmsg / mysql-libs / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1773050223)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1773050223 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are...

CentOS Linux 8.4 [TuxCare] Security Update: mysql / mysql-common / mysql-devel / mysql-errmsg / mysql-libs / etc Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1768562086)

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1768562086 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are...

AlmaLinux 9.2 [TuxCare] Security Update: mysql / mysql-common / mysql-devel / mysql-errmsg / mysql-libs / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1773654558)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1773654558 advisory. - In SQLite through 3.31.1, the ALTER TABLE implementation has a use-after-free, as demonstrated by an ORDER BY clause that belongs ...

CentOS Linux 8 [TuxCare] Security Update: mysql / mysql-common / mysql-devel / mysql-errmsg / mysql-libs / etc Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2025:1749481186)

The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2025:1749481186 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Parser. Supported versions that are affected are...

AlmaLinux 9.2 [TuxCare] Security Update: mysql / mysql-common / mysql-devel / mysql-errmsg / mysql-libs / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1739820848)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1739820848 advisory. - A vulnerability was found in zstd v1.4.10, where an attacker can supply empty string as an argument to the command line tool to...

CVE-2024-34693

CVE-2024-34693: Lecture Arbitraire de Fichiers sur le Serveur dans Apache Superset Vulnérabilité de validation d'entrée incorrecte dans Apache Superset, permettant à un attaquant authentifié de créer une connexion MariaDB avec localinfile activé. En activant localinfile dans le client MySQL/Maria...

CVE-2025-70828

CVE-2025-70828 Résumé Une vulnérabilité de lecture arbitraire de fichier a été découverte dans Datart v1.0.0-rc.3. L'application ne parvient pas à valider correctement l'URL de connexion JDBC lors de la configuration de la source de données. Détails de la vulnérabilité Type de vulnérabilité :...

CVE-2024-34693

Exploit CVE-2024-34693 Ce dépôt contient un script Python sophistiqué pour exploiter la vulnérabilité CVE-2024-34693 dans Apache Superset. Le script met en place un serveur MySQL malveillant rogue et crée une connexion MariaDB malveillante pour exfiltrer le contenu d'un fichier spécifié depuis le...

CVE-2026-27876

CVE-2026-27876: SQL-выражения Grafana — произвольная запись файлов с эскалацией до RCE CVSS 9.1 Critical | Произвольная запись файлов | Удалённое выполнение кода Демонстрация https://github.com/user-attachments/assets/c84a4b63-7928-4dba-a069-3bafa036ce56 Краткое описание Функция SQL-выражений...

CVE-2026-90935 Froxlor before 2.3.7 Authorization Bypass via Mysqls.add API

Froxlor before 2.3.7 fails to validate the mysqlserver parameter against a customer's allowedmysqlserver allowlist in the Mysqls.add API command. Attackers can supply a disallowed server index to create MySQL databases and users on forbidden servers, bypassing per-customer access controls...

Astra Linux – Vulnerability in Mariadb 10.3

Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. The supported versions affected are 5.7.43 and earlier, 8.0.34 and earlier, and 8.1.0 and earlier. This easily exploitable vulnerability allows a high-privilege attacker with network access via multiple protocols to...

Astra Linux – Vulnerability in Mariadb 10.3

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: DML. The supported versions affected are 5.7.33 and earlier. This easily exploitable vulnerability allows a highly privileged attacker with network access via multiple protocols to compromise the MySQL Server. Successful...

Astra Linux – Vulnerability in Mariadb 10.3

Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions affected include 5.7.34 and earlier, as well as 8.0.25 and earlier. This vulnerability is difficult to exploit; it allows high-privilege attackers with network access via multiple protocols to compromi...

Astra Linux – Vulnerability in Mariadb 10.3

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: DML. The supported versions affected are 5.7.33 and earlier, as well as 8.0.23 and earlier. This easily exploitable vulnerability allows a highly privileged attacker with network access via multiple protocols to compromi...

Unity Linux 20.1070e Security Update: mysql (UTSA-2026-022361)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-022361 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: JSON. Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0...