420 matches found
tvm-recover
中文 English tvm-recover 关联 Zenodo 记录：10.5281/zenodo.23474767。 ⚠️ 免责声明： 本项目仅用于获得授权的安全研究、互操作性分析和教育，不包含或提供商业反作弊系统的绕过功能。使用者须确保拥有分析目标二进制文件的合法权利。 面向 Tencent VM 的虚拟化还原工具。从 .tvm0 段恢复虚拟化代码，提取每个 VM handler 对 guest 寄存器和内存做了什么，并能把还原出的函数写回二进制，作为只读可执行段，从而恢复PE便于读取。 .tvm0 段 - VM 语义 - guest 级 listing - LLVM IR -...
CVE-2026-86353
Dell PowerStore contains a use of a weak cryptographic algorithm vulnerability that could allow an attacker with existing privileged access to the appliance to recover stored credentials...
CVE-2026-86353
The Dell PowerStore appliance is vulnerable to a use of a weak cryptographic algorithm (CWE-327). This vulnerability could allow an attacker with existing privileged access to the appliance to recover stored credentials . No specific remediation steps or exploit details are provided in the docume...
EUVD-2026-125294
Dell PowerStore contains a use of a weak cryptographic algorithm vulnerability that could allow an attacker with existing privileged access to the appliance to recover stored credentials...
CVE-2022-36537
CVE-2022-36537 Summary R1Soft Server Backup Manager uses the ZK framework as the main framework. Its security requires all Web3 project parties to pay more attention to the security vulnerabilities of various Web3 infrastructures and patch them in time to avoid potential security risks and digita...
sqlite-cli-recover
abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · sqlite-cli-recover Write-up: https://abraxaslabs.tech/research/sqlite-cli-recover sqlite-cli-recover Class: Command injection Reach: Local SQLite 3.53.4 b09c88c CLI .recover prints hostile sqliteschema.sql as a later...
PT-2026-146851
Dell PowerStore contains a use of a weak cryptographic algorithm vulnerability that could allow an attacker with existing privileged access to the appliance to recover stored credentials...
Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : Relax-and-Recover vulnerability (USN-8988-1)
The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-8988-1 advisory. It was discovered that Relax-and-Recover created a world-readable initrd when GRUBRESCUE was enabled. A local attacker could possibly use...
SUSE CVE-2026-119586
SQLite command-line shell through 3.54.1 contains a command injection vulnerability in the .recover command that emits attacker-planted dot-commands stored in sqliteschema.sql values verbatim. Attackers can craft a database whose schema holds a valid CREATE statement followed by a .shell or .syst...
SUSE CVE-2026-119280
MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3.3.7, 3.4.5, and 3.5.11, the MariaDbPoolConnection.recover and MariaDbPoolPinnedConnection.recover implementations trusted the gtridlength and bquallength columns returned by XA...
CVE-2026-119586
SQLite command-line shell through 3.54.1 contains a command injection vulnerability in the .recover command that emits attacker-planted dot-commands stored in sqliteschema.sql values verbatim. Attackers can craft a database whose schema holds a valid CREATE statement followed by a .shell or .syst...
MariaDB Connector/J: XA recover() trusted server-supplied gtrid and bqual lengths
Summary XAResource.recover in MariaDB Connector/J trusted the gtridlength and bquallength columns returned by XA RECOVER to allocate and split each Xid. Details MariaDbPoolConnection and MariaDbPoolPinnedConnection built each Xid of the recovery list by allocating new bytegtridlength and new...
GHSA-4JQ2-8V3C-97W8 MariaDB Connector/J: XA recover() trusted server-supplied gtrid and bqual lengths
Summary XAResource.recover in MariaDB Connector/J trusted the gtridlength and bquallength columns returned by XA RECOVER to allocate and split each Xid. Details MariaDbPoolConnection and MariaDbPoolPinnedConnection built each Xid of the recovery list by allocating new bytegtridlength and new...
EUVD-2026-113387
MariaDB Connector/J: XA recover trusted server-supplied gtrid and bqual lengths...
CVE-2026-119586
SQLite command-line shell through 3.54.1 contains a command injection vulnerability in the .recover command that emits attacker-planted dot-commands stored in sqliteschema.sql values verbatim. Attackers can craft a database whose schema holds a valid CREATE statement followed by a .shell or .syst...
DEBIAN-CVE-2026-119586
SQLite command-line shell through 3.54.1 contains a command injection vulnerability in the .recover command that emits attacker-planted dot-commands stored in sqliteschema.sql values verbatim. Attackers can craft a database whose schema holds a valid CREATE statement followed by a .shell or .syst...
AZL-111790 CVE-2026-119586 affecting package sqlite 3.44.0-4
SQLite command-line shell through 3.54.1 contains a command injection vulnerability in the .recover command that emits attacker-planted dot-commands stored in sqliteschema.sql values verbatim. Attackers can craft a database whose schema holds a valid CREATE statement followed by a .shell or .syst...
UBUNTU-CVE-2026-119586
SQLite command-line shell through 3.54.1 contains a command injection vulnerability in the .recover command that emits attacker-planted dot-commands stored in sqliteschema.sql values verbatim. Attackers can craft a database whose schema holds a valid CREATE statement followed by a .shell or .syst...
CVE-2026-119586
SQLite command-line shell through 3.54.1 contains a command injection vulnerability in the .recover command that emits attacker-planted dot-commands stored in sqliteschema.sql values verbatim. Attackers can craft a database whose schema holds a valid CREATE statement followed by a .shell or .syst...
CVE-2026-119586 SQLite CLI through 3.54.1 Command Injection via .recover Output
SQLite command-line shell through 3.54.1 contains a command injection vulnerability in the .recover command that emits attacker-planted dot-commands stored in sqliteschema.sql values verbatim. Attackers can craft a database whose schema holds a valid CREATE statement followed by a .shell or .syst...