Lucene search
+L

1090 matches found

Packet Storm News
Packet Storm News
added 2025/06/18 12:0 a.m.11 views

Rubber Mallet: a Study of High Frequency Localized Bit Flips and Their Impact on Security

The increasing density of modern DRAM has heightened its vulnerability to Rowhammer attacks, which induce bit flips by repeatedly accessing specific memory rows. This paper presents an analysis of bit flip patterns generated by advanced Rowhammer techniques that bypass existing hardware defenses...

7.6AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2025/06/16 12:0 a.m.4 views

TencentOS Server 3: postgresql:12 (TSSA-2024:1120)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:1120 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

8.8CVSS7.3AI score0.04422EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2025/06/16 12:0 a.m.3 views

TencentOS Server 3: postgresql:15 (TSSA-2024:1121)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:1121 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

8.8CVSS7.3AI score0.04422EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2025/06/16 12:0 a.m.4 views

TencentOS Server 4: postgresql (TSSA-2024:0559)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0559 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

8.8CVSS7.5AI score0.01572EPSS
SaveExploits0References7
OSV
OSV
added 2025/06/03 3:3 p.m.12 views

BIT-SUPERSET-2025-48912 Apache Superset: Improper authorization bypass on row level security via SQL Injection

An authenticated malicious actor using specially crafted requests could bypass row level security configuration by injecting SQL into 'sqlExpression' fields. This allowed the execution of sub-queries to evade parsing defenses ultimately granting unauthorized access to data. This issue affects...

7.1CVSS7.4AI score0.00642EPSS
SaveExploits2References3
Veracode
Veracode
added 2025/06/03 4:52 a.m.11 views

SQL Injection

Apache Superset is vulnerable to SQL injection. The vulnerability is due to improper input handling in the sqlExpression fields, allowing attackers to inject sub-queries and bypass row-level security...

7.1CVSS7.6AI score0.00642EPSS
SaveExploits2References4Affected Software1
RedhatCVE
RedhatCVE
added 2025/06/01 12:35 a.m.10 views

CVE-2025-48757

An insufficient database Row-Level Security policy in Lovable through 2025-04-15 allows remote unauthenticated attackers to read or write to arbitrary database tables of generated sites. NOTE: this is disputed by the Supplier because each individual customer of the Lovable platform accepts a...

9.3CVSS9.3AI score0.00803EPSS
SaveExploits3References1
Github Security Blog
Github Security Blog
added 2025/05/30 9:30 a.m.21 views

Apache Superset: Improper authorization bypass on row level security via SQL Injection

An authenticated malicious actor using specially crafted requests could bypass row level security configuration by injecting SQL into 'sqlExpression' fields. This allowed the execution of sub-queries to evade parsing defenses ultimately granting unauthorized access to data. This issue affects...

7.1CVSS7.8AI score0.00642EPSS
SaveExploits2References4Affected Software1
OSV
OSV
added 2025/05/30 9:30 a.m.8 views

GHSA-8W7F-8PR9-XGWJ Apache Superset: Improper authorization bypass on row level security via SQL Injection

An authenticated malicious actor using specially crafted requests could bypass row level security configuration by injecting SQL into 'sqlExpression' fields. This allowed the execution of sub-queries to evade parsing defenses ultimately granting unauthorized access to data. This issue affects...

7.1CVSS7.8AI score0.00642EPSS
SaveExploits2References4
NVD
NVD
added 2025/05/30 9:15 a.m.25 views

CVE-2025-48912

An authenticated malicious actor using specially crafted requests could bypass row level security configuration by injecting SQL into 'sqlExpression' fields. This allowed the execution of sub-queries to evade parsing defenses ultimately granting unauthorized access to data. This issue affects...

7.1CVSS0.00642EPSS
SaveExploits2References2
Vulnrichment
Vulnrichment
added 2025/05/30 8:26 a.m.10 views

CVE-2025-48912 Apache Superset: Improper authorization bypass on row level security via SQL Injection

An authenticated malicious actor using specially crafted requests could bypass row level security configuration by injecting SQL into 'sqlExpression' fields. This allowed the execution of sub-queries to evade parsing defenses ultimately granting unauthorized access to data. This issue affects...

7.1CVSS7.1AI score0.00642EPSS
SaveExploits2References1
OSV
OSV
added 2025/05/30 8:26 a.m.9 views

CVE-2025-48912 Apache Superset: Improper authorization bypass on row level security via SQL Injection

An authenticated malicious actor using specially crafted requests could bypass row level security configuration by injecting SQL into 'sqlExpression' fields. This allowed the execution of sub-queries to evade parsing defenses ultimately granting unauthorized access to data. This issue affects...

7.1CVSS6.8AI score
SaveExploits0References5
Cvelist
Cvelist
added 2025/05/30 8:26 a.m.27 views

CVE-2025-48912 Apache Superset: Improper authorization bypass on row level security via SQL Injection

An authenticated malicious actor using specially crafted requests could bypass row level security configuration by injecting SQL into 'sqlExpression' fields. This allowed the execution of sub-queries to evade parsing defenses ultimately granting unauthorized access to data. This issue affects...

7.1CVSS0.00642EPSS
SaveExploits2References1
NVD
NVD
added 2025/05/30 3:15 a.m.16 views

CVE-2025-48757

An insufficient database Row-Level Security policy in Lovable through 2025-04-15 allows remote unauthenticated attackers to read or write to arbitrary database tables of generated sites. NOTE: this is disputed by the Supplier because each individual customer of the Lovable platform accepts a...

9.3CVSS0.00803EPSS
SaveExploits3References5
Positive Technologies
Positive Technologies
added 2025/05/30 12:0 a.m.14 views

PT-2025-24602 · Crates.Io · Arrow2

Rows::row unchecked allows out of bounds access to the underlying buffer without sufficient checks. The arrow2 crate is no longer maintained, so there are no plans to fix this issue. Users are advised to migrate to the arrow crate, instead...

8.7CVSS7.3AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/05/30 12:0 a.m.3 views

PT-2025-23275

Name of the Vulnerable Software and Affected Versions Apache Superset versions prior to 4.1.2 Description An authenticated malicious actor using specially crafted requests could bypass row level security configuration by injecting SQL into sqlExpression fields. This allowed the execution of...

7.1CVSS6.8AI score0.00642EPSS
SaveExploits2References23
Positive Technologies
Positive Technologies
added 2025/05/30 12:0 a.m.14 views

PT-2025-23236

Name of the Vulnerable Software and Affected Versions Lovable versions prior to 2025-04-15 Description An insufficient database Row-Level Security RLS policy allows remote unauthenticated attackers to read or write to arbitrary database tables of generated sites. Row-Level Security is a database...

9.3CVSS7.6AI score0.00803EPSS
SaveExploits3References58
CNNVD
CNNVD
added 2025/05/30 12:0 a.m.8 views

Apache Superset SQL注入漏洞

Apache Superset is a data visualization and data exploration platform from the Apache USA Foundation. An SQL injection vulnerability exists in Apache Superset versions prior to 4.1.2 that originates from an authenticated malicious actor that can bypass row-level security configurations via a...

7.1CVSS7.2AI score0.00642EPSS
SaveExploits2References3
Cvelist
Cvelist
added 2025/05/30 12:0 a.m.30 views

CVE-2025-48757

An insufficient database Row-Level Security policy in Lovable through 2025-04-15 allows remote unauthenticated attackers to read or write to arbitrary database tables of generated sites. NOTE: this is disputed by the Supplier because each individual customer of the Lovable platform accepts a...

9.3CVSS0.00803EPSS
SaveExploits3References5
CNNVD
CNNVD
added 2025/05/30 12:0 a.m.12 views

Lovable 安全漏洞

Lovable is an AI full-stack application builder from Lovable. A security vulnerability exists in Lovable versions 2025-04-15 and earlier, which stems from an insufficient database row-level security policy that could allow an unauthenticated attacker to read and write arbitrary database tables...

9.3CVSS8.8AI score0.00803EPSS
SaveExploits3References7
Rows per page
Query Builder