CVE-2025-26794

CVE-2025-26794: Blind SQL injection in Exim 4.98 SQLite DBM - exploit writeup Exim report: https://www.exim.org/static/doc/security/CVE-2025-26794.txt I discovered this vulnerability through a manual code review. Vulnerability details: Issue The SQL parameters, when SQLite is used as the DBM, are...

CVE-2026-21004-SQLite-FTS3-Match-Infoleak-via-Query-Crafting

CVE-2026-21004 – SQLite FTS3 Match Infoleak via Query Crafting Program Code Python root@kitploit: sqliteftsleak.py - Creates FTS table and exploits match info import sqlite3 conn = sqlite3.connect':memory:' conn.execute"CREATE VIRTUAL TABLE secrets USING fts4content TEXT" conn.execute"INSERT INTO...

CVE-2026-13056

Using expressions that generate large arrays it is possible to craft a query that creates very large intermediate objects in memory, causing the server to crash with OOM error...

EUVD-2026-47779

Using expressions that generate large arrays it is possible to craft a query that creates very large intermediate objects in memory, causing the server to crash with OOM error...

CVE-2024-11187 Many records in the additional section cause CPU exhaustion

It is possible to construct a zone such that some queries to it will generate responses containing numerous records in the Additional section. An attacker sending many such queries can cause either the authoritative server itself or an independent resolver to use disproportionate resources...