gotestwaf

GoTestWAF GoTestWAF is a tool for API and OWASP attack simulation that supports a wide range of API protocols including REST, GraphQL, gRPC, SOAP, XMLRPC, and others. It was designed to evaluate web application security solutions, such as API security proxies, Web Application Firewalls, IPS, API...

maskprocessor

maskprocessor High-Performance word generator with a per-position configurable charset Mask attack Try all combinations from a given keyspace just like in Brute-Force attack, but more specific. Advantage over Brute-Force The reason for doing this and not to stick to the traditional Brute-Force is...

Spring_cve-2022-22980

Springcve-2022-22980 spring data mongodb リモートコード実行 | cve-2022-22980 poc 説明 Spring Data MongoDB アプリケーションは、入力がサニタイズされていない場合、@Queryや@Aggregationアノテーションが付与されたクエリメソッドで、値のバインディングのためにクエリパラメータプレースホルダを含むSpEL式を使用すると、SpEL インジェクションに対して脆弱性があります。 ビデオ POC 最新のエクスプロイト PoC についてはフォローしてください YouTube Twitter...

CVE-2026-53933

Maravel, a PHP framework oriented towards dependency injection, prior to version 10.73.1 has a side-channel information disclosure issue. When a route was compiled with dynamic placeholders e.g., /api/v1/users/id, the raw string placeholder key was mistakenly registered into the flat static route...

EulerOS 2.0 SP12 : perl-DBI (EulerOS-SA-2026-3291)

According to the versions of the perl-DBI packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : DBI::ProfileData versions before 1.651 for Perl do not limit the path index. The path index column of profile dump files is used to allocate an...

CVE-2026-82958

In Eclipse Ditto versions 1.3.0, 3.9.6, the ImplicitThingCreationMessageMapper of the connectivity service builds a CreateThing command by substituting placeholder values e.g. header:deviceid resolved from inbound message headers into a pre-configured JSON "thing" template as raw, un-escaped...

MiracleLinux 8 : perl-DBI:1.641 (AXSA:2026-1574:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1574:01 advisory. DBI: Heap overflow when preparsing SQL statements with excessive placeholders CVE-2026-14739 DBI: Arbitrary code execution via caller-influenced...

MiracleLinux 8 : perl-DBI:1.641 (AXSA:2026-1572:02)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1572:02 advisory. DBI: Heap overflow when preparsing SQL statements with excessive placeholders CVE-2026-14739 DBI: Arbitrary code execution via caller-influenced...

perl-DBI:1.641 security update

perl-DBI 1.641-8 - Fix unsafe string eval in DBI::Profile CVE-2026-14380 Resolves: RHEL-211151 1.641-7 - Fix patch. 1.641-6 - Fix heap overflow when preparsing SQL statements with excessive placeholders CVE-2026-14739 Resolves: RHEL-193298 1.641-5 - Fix stack overflow and buffer overflow in DBI.x...

Oracle Linux 8 : perl-DBI:1.641 (ELSA-2026-52772)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-52772 advisory. - Fix unsafe string eval in DBI::Profile CVE-2026-14380 Resolves: RHEL-211151 - Fix heap overflow when preparsing SQL statements with excessive...

RLSA-2026:52772 Important: perl-DBI:1.641 security update

The perl-DBI package provides the standard database interface module for the Perl programming language. It implements a database-independent interface, meaning it defines a consistent set of methods, variables, and conventions for database operations. Security Fixes: DBI: Heap overflow when...

Important: Red Hat Security Advisory: perl-DBI:1.641 security update

An update for the perl-DBI:1.641 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

DBI: DBI: Heap overflow when preparsing SQL statements with excessive placeholders

A flaw was found in DBI for Perl. This vulnerability, a heap overflow, occurs when the software attempts to preparse SQL statements containing an extremely large number of placeholders. This could allow a remote attacker to cause a denial of service or potentially execute arbitrary code...

RHEL 8 : perl-DBI:1.641 (RHSA-2026:52772)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:52772 advisory. The perl-DBI package provides the standard database interface module for the Perl programming language. It implements a database-independen...

ALSA-2026:52772 Important: perl-DBI:1.641 security update

The perl-DBI package provides the standard database interface module for the Perl programming language. It implements a database-independent interface, meaning it defines a consistent set of methods, variables, and conventions for database operations. Security Fixes: DBI: Heap overflow when...

RLSA-2026:49514 Important: perl-DBI security update

DBI is a database access Application Programming Interface API for the Perl Language. The DBI API Specification defines a set of functions, variables and conventions that provide a consistent database interface independent of the actual database being used. Security Fixes: DBI: DBI: Arbitrary cod...

RLSA-2026:49612 Important: perl-DBI security update

DBI is a database access Application Programming Interface API for the Perl Language. The DBI API Specification defines a set of functions, variables and conventions that provide a consistent database interface independent of the actual database being used. Security Fixes: DBI: DBI: Arbitrary cod...

RockyLinux 10 : perl-DBI (RLSA-2026:49514)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:49514 advisory. DBI: DBI: Arbitrary code execution via caller-influenced Profile attribute CVE-2026-14380 DBI: DBI: Heap overflow when preparsing SQL statements with...

DBI: DBI: Heap overflow when preparsing SQL statements with excessive placeholders

A flaw was found in DBI for Perl. This vulnerability, a heap overflow, occurs when the software attempts to preparse SQL statements containing an extremely large number of placeholders. This could allow a remote attacker to cause a denial of service or potentially execute arbitrary code...

DBI: DBI: Heap overflow when preparsing SQL statements with excessive placeholders

A flaw was found in DBI for Perl. This vulnerability, a heap overflow, occurs when the software attempts to preparse SQL statements containing an extremely large number of placeholders. This could allow a remote attacker to cause a denial of service or potentially execute arbitrary code...