Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql5 (UTSA-2026-061540)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-061540 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Security: Privileges. Supported versions that are affected are 5.7.35 and prior and 8.0....

phpMyAdmin-CVE-2020-5504-Exploit

CVE-2020-5504 phpMyAdmin Sicherheitsbewertungs-Tool Autorisiertes Sicherheitstest- und Forschungsframework zur Identifizierung und Validierung von CVE-2020-5504 in phpMyAdmin-Bereitstellungen Überblick · Funktionen · Installation · Verwendung · Berichte · Architektur · Mitwirken Hinweis zur...

CVE-2026-59335

Improper handling of case sensitivity CWE-178 in the identity zone authorization check in the Identity Zone Endpoint in Cloud Foundry UAA allows a remote authenticated attacker holding only the zones.write authority to bypass the intended restriction that this authority does not grant access to t...

CVE-2026-59335 Case-Sensitive Authorization Check Bypass via Identity Zone ID Case Manipulation Leads to Full UAA Compromise

Improper handling of case sensitivity CWE-178 in the identity zone authorization check in the Identity Zone Endpoint in Cloud Foundry UAA allows a remote authenticated attacker holding only the zones.write authority to bypass the intended restriction that this authority does not grant access to t...

EUVD-2026-65466

Improper handling of case sensitivity CWE-178 in the identity zone authorization check in the Identity Zone Endpoint in Cloud Foundry UAA allows a remote authenticated attacker holding only the zones.write authority to bypass the intended restriction that this authority does not grant access to t...

CVE-2026-59335

Cloud Foundry UAA is affected by an authorization bypass (CWE-178) in its Identity Zone Endpoint . The root cause is a mismatch between the application's case-sensitive zone identifier comparison and MySQL's case-insensitive default collation: an attacker holding only zones.write can reference th...

ansible-mysql-cve-2016-6662

ansible-mysql-cve-2016-6662 Semplice playbook Ansible per applicare patch ai server MySQL contro la CVE-2016-6662. AGGIORNAMENTO 20160915.2347.CEST: Kenny mi ha informato della scoperta di Patrick Forsberg secondo cui la patch originale non proteggeva contro l'abuso di ../. Ho ora sostituito la...

setup-cve-2015-8562

Joomla! RCE CVE 2015-8562 Docker-Compose-Datei zum Einrichten der Umgebung für CVE-2015-8562-Tests Inhaltsverzeichnis 1. Über das Projekt 2. Erste Schritte Voraussetzungen Installation 3. Nutzung 4. Mitwirken 5. Lizenz Über das Projekt Dieses Projekt enthält eine Docker-Compose-Datei zum Einricht...

RHBA-2025:5321 Red Hat Bug Fix Advisory: mysql8.4 bug fix and enhancement update

Bulletin has no description...

heroku-CVE-2013-0269

heroku-CVE-2013-0269 Ispeziona tutte le tue app heroku per verificare se stanno eseguendo una versione vulnerabile di JSON Contesto È stata trovata una vulnerabilità di sicurezza nella gemma Ruby JSON. Questa è la causa principale del recentemente annunciato problema di iniezione MySQL in Rails. ...

CVE-2023-49988

CVE-2023-49988 Hotel Booking Management v1.0 - Vulnerabilità di SQL Injection nel parametro "npss" in rooms.php Descrizione : Nella versione 1 di Hotel Booking Management esiste una vulnerabilità di SQL Injection. Un attaccante malintenzionato può inviare comandi SQL al database MySQL quando...

CVE-2023-49970

CVE-2023-49970 Customer Support System 1.0 - Vulnerabilità di SQL Injection nel parametro "subject" durante l'operazione "saveticket" Descrizione : Esiste una vulnerabilità di SQL Injection nella versione 1 del Customer Support System. Un utente malintenzionato può inviare comandi SQL al database...

CVE-2023-49969

CVE-2023-49969 Sistema de Suporte ao Cliente 1.0 - Vulnerabilidade de Injeção SQL em editcustomer via o parâmetro de URL "id" Descrição : Existe uma vulnerabilidade de Injeção SQL na versão 1 do Sistema de Suporte ao Cliente. Um atacante com intenções maliciosas pode executar comandos SQL no banc...

CVE-2023-49968

CVE-2023-49968 Customer Support System 1.0 - SQL-Injection-Schwachstelle in managedepartment.php über 'id' URL-Parameter Beschreibung : In Version 1 des Customer Support Systems besteht eine SQL-Injection-Schwachstelle. Ein Angreifer mit böswilliger Absicht kann SQL-Befehle auf der MySQL-Datenban...

CVE-2023-49548

CVE-2023-49548 Customer Support System 1.0 - ثغرة حقن SQL في معامل "lastname" أثناء عملية "saveuser" الوصف : توجد ثغرة حقن SQL في الإصدار 1 من نظام دعم العملاء. يمكن للمهاجم الخبيث إرسال أوامر SQL إلى قاعدة بيانات MySQL عند إنشاء/تحرير مستخدم عبر المعامل الضعيف 'lastname'. إصدار المنتج المعرض للخ...

CVE-2023-49546

CVE-2023-49546 Customer Support System 1.0 - Vulnerabilità di SQL Injection nel parametro "email" durante l'operazione "savestaff" Descrizione : Una vulnerabilità di SQL Injection esiste nella versione 1 del Customer Support System. Un attaccante malintenzionato può inviare comandi SQL al databas...

Advanced-SQL-Injection-Cheatsheet

Cheat sheet per SQL Injection basata su errori MySQL Questa è probabilmente la vulnerabilità più semplice nell'ambito dell'attacco SQL Injection. Un attaccante può enumerare e dumpare il database MySQL sfruttando i messaggi di errore SQL a suo vantaggio. Rilevare la...

DEBIAN-CVE-2026-56704

Adminer before 5.4.3 inserts unsanitized database server version strings into script tags with valid CSP nonces without proper validation. Attackers controlling a rogue MySQL server can return crafted version strings that break out of the JavaScript context and execute arbitrary code, bypassing...

CVE-2026-56704

Adminer before 5.4.3 inserts unsanitized database server version strings into script tags with valid CSP nonces without proper validation. Attackers controlling a rogue MySQL server can return crafted version strings that break out of the JavaScript context and execute arbitrary code, bypassing...

CVE-2022-31897

CVE-2022-31897 Data: 06/22/2022 Autore dell'exploit: Angelo Pio Amirante Homepage del fornitore: https://www.sourcecodester.com/ Link del software: https://www.sourcecodester.com/php/15344/zoo-management-system-phpoop-free-source-code.html Versione: 1.0...