PT-2022-11760

Name of the Vulnerable Software and Affected Versions Adminer versions 1.12.0 through 4.6.2 Description The issue allows an attacker to achieve arbitrary file read on a remote server by requesting Adminer to connect to a remote MySQL database, due to improper access control. Recommendations For...

Pgbouncer 1.6 Invalid User Authentication Bypass

The version of Pgbouncer running on the remote host is affected by an authentication bypass vulnerability due to a flaw in the startauthrequest function within file client.c when handling requests for invalid users. A remote attacker can exploit this issue to bypass authentication and log into...