sccm_sql_backdoor

sccmsqlbackdoor A proof‑of‑concept tool that implants a controlled backdoor into a Management Point stored procedure, enabling indirect SQL execution through a legitimate MP HTTP service. Installation You can install by cloning the repository and installing the dependencies. $ git clone...

CVE-2015-4870

CVE-2015-4870 MySQL DoS in the Procedure Analyse Function – CVE-2015-4870 Write-up: https://osandamalith.wordpress.com/2016/05/29/mysql-dos-in-the-procedure-analyse-function-cve-2015-4870/ Video: https://www.youtube.com/watch?v=zE-TsQVn9oI...

CVE-2026-126434

OpenEMR before 8.5.0 contains a missing authorization vulnerability in interface/forms/procedureorder/common.php that allows authenticated accounts lacking patients/lab permission to read and modify other patients' procedure orders. Attackers can request a global order id to disclose clinical...

CVE-2026-126434 OpenEMR before 8.5.0 Missing Authorization in Procedure Order Form

OpenEMR before 8.5.0 contains a missing authorization vulnerability in interface/forms/procedureorder/common.php that allows authenticated accounts lacking patients/lab permission to read and modify other patients' procedure orders. Attackers can request a global order id to disclose clinical...

EUVD-2026-125009

OpenEMR before 8.5.0 contains a missing authorization vulnerability in interface/forms/procedureorder/common.php that allows authenticated accounts lacking patients/lab permission to read and modify other patients' procedure orders. Attackers can request a global order id to disclose clinical...

CveTest

CveTest Test case to replicate Node.JS V0.10.31 v8 backport CVE-2013-6668 crash. Test calls a SQL stored procedure "GetSomething" to retrieve data from a table "Table1" in "SQLDB" database. Crash occurs when there is more than 52 rows returned and after making the same call several times...

CVE-2026-118737

Improper verification of cryptographic signature in Windows Remote Procedure Call Runtime allows an unauthorized attacker to execute code over a network...

EUVD-2026-122463

Uncontrolled resource consumption in Windows Remote Procedure Call allows an unauthorized attacker to deny service over a network...

CVE-2026-119972

CVE-2026-119972 involves uncontrolled resource consumption within the Windows Remote Procedure Call (RPC) component. This vulnerability allows an unauthorized attacker to perform a denial of service (DoS) attack over a network. No specific software versions, root causes, or exploit details are pr...

EUVD-2026-122124

Improper verification of cryptographic signature in Windows Remote Procedure Call Runtime allows an unauthorized attacker to execute code over a network...

CVE-2026-118737

CVE-2026-118737 involves the improper verification of cryptographic signatures within the Windows Remote Procedure Call (RPC) Runtime . This vulnerability allows an unauthorized attacker to achieve Remote Code Execution (RCE) over a network. While the provided documents do not specify the exact a...

Remote Procedure Call Runtime Remote Code Execution Vulnerability

Improper verification of cryptographic signature in Windows Remote Procedure Call Runtime allows an unauthorized attacker to execute code over a network...

Remote Procedure Call Denial of Service Vulnerability

Uncontrolled resource consumption in Windows Remote Procedure Call allows an unauthorized attacker to deny service over a network...

PT-2026-143963

Uncontrolled resource consumption in Windows Remote Procedure Call allows an unauthorized attacker to deny service over a network...

CVE-2026-119924 Out-of-Bounds Read in Babelfish for PostgreSQL TDS RPC Procedure-Name Parser

An out-of-bounds read in the TDS RPC procedure-name parser in the Babelfish for PostgreSQL extension versions 1.0-1.5, 2.1-2.15, 3.1-3.12, 4.0-4.8, 5.1-5.4 and in Amazon Aurora PostgreSQL with Babelfish might allow remote authenticated users to read adjacent process memory or cause a denial of...

CVE-2026-119924 Out-of-Bounds Read in Babelfish for PostgreSQL TDS RPC Procedure-Name Parser

An out-of-bounds read in the TDS RPC procedure-name parser in the Babelfish for PostgreSQL extension versions 1.0-1.5, 2.1-2.15, 3.1-3.12, 4.0-4.8, 5.1-5.4 and in Amazon Aurora PostgreSQL with Babelfish might allow remote authenticated users to read adjacent process memory or cause a denial of...

EUVD-2026-118419

An out-of-bounds read in the TDS RPC procedure-name parser in the Babelfish for PostgreSQL extension versions 1.0-1.5, 2.1-2.15, 3.1-3.12, 4.0-4.8, 5.1-5.4 and in Amazon Aurora PostgreSQL with Babelfish might allow remote authenticated users to read adjacent process memory or cause a denial of...

CVE-2026-119924 Out-of-Bounds Read in Babelfish for PostgreSQL TDS RPC Procedure-Name Parser

An out-of-bounds read in the TDS RPC procedure-name parser in the Babelfish for PostgreSQL extension versions 1.0-1.5, 2.1-2.15, 3.1-3.12, 4.0-4.8, 5.1-5.4 and in Amazon Aurora PostgreSQL with Babelfish might allow remote authenticated users to read adjacent process memory or cause a denial of...

CVE-2026-1907

A flaw was found in Kong Gateway. A SQL injection vulnerability exists in its clustering communication logic when operating in Hybrid Mode. An authenticated attacker with network access to the Control Plane clustering port and a valid client certificate can exploit this flaw by sending specially...

CVE-2026-111606

A flaw was found in Huly. A missing authorization vulnerability allows an authenticated remote attacker to merge arbitrary user profiles by invoking the mergeSpecifiedPersons remote procedure call RPC. By supplying targeted user identifiers, an attacker can attach attacker-controlled credentials ...