EUVD-2021-24613

Malware in sbrugna...

EUVD-2021-28576

Malicious code in bioql PyPI...

CVE-2021-38140

The setuser extension module before 2.0.1 for PostgreSQL allows a potential privilege escalation using RESET SESSION AUTHORIZATION after setuser...

Authentication flaw

The setuser extension module before 3.0.0 for PostgreSQL allows ProcessUtilityhook bypass via setconfig...

CVE-2021-41558

The CVE-2021-41558 entry concerns the set_user extension module for PostgreSQL, affected in versions before 3.0.0. The root cause is a bypass of the ProcessUtility_hook via set_config, enabling an unintended execution path. The vulnerability is described as allowing a bypass with potential elevat...

CVE-2021-41558

The setuser extension module before 3.0.0 for PostgreSQL allows ProcessUtilityhook bypass via setconfig...

PostgreSQL 处理逻辑错误漏洞

PostgreSQL is a free object-relational database management system organized by Postgresql. The system supports most of the SQL standards and provides many other features such as foreign keys, triggers, views, and more. A Processing Logic Error vulnerability exists in PostgreSQL, which stems from ...

CVE-2021-41558: Undefined Security Weakness

The setuser extension module before 3.0.0 for PostgreSQL allows ProcessUtilityhook bypass via setconfig...

CVE-2021-38140

The setuser extension module before 2.0.1 for PostgreSQL allows a potential privilege escalation using RESET SESSION AUTHORIZATION after setuser...

CVE-2021-38140

The setuser extension module before 2.0.1 for PostgreSQL allows a potential privilege escalation using RESET SESSION AUTHORIZATION after setuser...

CVE-2021-38140: Improper Privilege Management

The setuser extension module before 2.0.1 for PostgreSQL allows a potential privilege escalation using RESET SESSION AUTHORIZATION after setuser...

PostgreSQL 安全漏洞

PostgreSQL is a free object-relational database management system organized by Postgresql. The system supports most of the SQL standards and provides many other features such as foreign keys, triggers, views, and so on. A security vulnerability in the setuser extension before PostgreSQL 2.0.1...

Srun3000计费系统无限制多处任意命令执行getshell

简要描述： Srun3000计费系统无限制任意命令执行getshell 详细说明： 文件： /enus/radonline.php srun3/web/online.php 4-76行 srun3/web/radonline.php 4-76行 if$POST"action"=="dm" $cmd = "/srun3/bin/raddrop -sdm ".$POST"sid"; if$fp=popen$cmd, "r" $con = fread$fp, 128; pclose$fp; $con = strreplace "\n", " ", $con; echo $con; exit;...