cve-2025-54313

cve-2025-54313 检查项目中被植入后门的包、可疑文件和导入语句，参见供应链攻击 如何使用？ 只需在终端/控制台中执行脚本。建议先安装 maple。 root@kitploit: npm install -g maple chmod +x cve-2025-54313.sh ./cve-2025-54313.sh 许可证 GNU 通用公共许可证 第3版，2007年6月29日 版权所有 C 2007 自由软件基金会 Free Software Foundation, Inc. https://fsf.org/ 允许每个人复制和分发本许可证文档的完整副本，但不得对其进行修改。详情请...

kviklet

Kviklet Kviklet.dev | リリースノート | Discord 開発者の生産性を損なうことなく、本番環境への安全なアクセスを実現します。 Kviklet（発音: Quick-let）は四眼原則 と高い設定自由度を採用し、個々のSQL文やデータベースセッションに対してプルリクエストのようなレビュー・承認フロー を可能にします。これにより、エンジニアリングチームは誰がどのデータにいつアクセスできるかを自律的に管理でき、組織は最新でエンパワリングな真の「DevOps」ワークフローを導入しながら、セキュリティとコンプライアンスを維持できます。...

CVE-2025-32429

CVE-2025-32429 – PHP PDO预处理语句中的SQL注入 此仓库包含一个针对 CVE-2025-32429 的概念验证漏洞利用程序，该漏洞影响启用了模拟功能的 PHP PDO 预处理语句。 📄 参考资料 Assetnote 的原始研究： https://slcyber.io/assetnote-security-research-center/a-novel-technique-for-sql-injection-in-pdos-prepared-statements NVD 条目：...

CVE-2024-41302-Bookea-tu-Mesa-is-vulnerable-to-SQL-Injection

CVE-2024-41302-Bookea-tu-Mesa-is-vulnerable-to-SQL-Injection- Bookea-tu-Mesa 容易受到 SQL 注入（SQLi）漏洞的影响。该缺陷允许攻击者注入恶意 SQL 命令来操纵数据库，从而可能危及应用程序的数据完整性和安全性。 复现步骤： 1. 访问 http://localhost/Bookea-tu-Mesa/ReservationTable.php。 2. 在搜索字段中，键入以下 SQL 注入载荷：''"+UNION+SELECT+VERSION,NULL,NULL,NULL,NULL,NULL,NULL,NULL...

CVE-2026-3494_Verfication

CVE-2026-3494 - MariaDB serveraudit 日志记录验证 PoC 本项目提供了一个专用环境，用于验证和分析 MariaDB serveraudit 插件在 SQL 查询中使用特定内联注释（、--）时可能存在的审计日志绕过问题。 主要发现 v11.8.6 中的日志遗漏 ：在 MariaDB v11.8.6 中观察到某些查询（例如带注释的 SET PASSWORD 或 Error 1046 场景）未能被记录到审计日志中，而该版本此前被认为已修复此问题。 潜在的解析器差异 ：发现近期版本中审计插件解析器行为可能发生了变化，多行注释（）可能导致 DCL...

CVE-2022-41853

CVE-2022-41853 の研究: Java デシリアライゼーションとリモートコードベース攻撃を介して静的関数を使用した RCE の取得 hsqldb HyperSQL DataBase で java.sql.Statement または java.sql.PreparedStatement を使用して信頼できない入力を処理する場合、リモートコード実行攻撃に対して脆弱になる可能性があります。デフォルトでは、クラスパス内の任意の Java クラスの静的メソッドを呼び出すことが許可されており、コード実行につながります。この問題は、バージョン 2.7.1 に更新するか、システムプロパティ...

CVE-2026-65321-pyathena

CVE-2026-65321：PyAthena 对非 SELECT 语句的反斜杠引号转义导致的 SQL 注入 严重性： 严重，CVSS v4.0 9.3 / CVSS v3.1 9.8 （由 CNA VulnCheck 分配） 向量（v4.0）： CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N 向量（v3.1）： CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 受影响版本： PyAthena = 3.35.3（直至 3.35.3 的所有版本） 修复版本： 3.35.4...

CVE-2026-71491

A flaw was found in sqlparse, a Python module for parsing SQL. A remote attacker could exploit this vulnerability by providing specially crafted SQL input that contains numerous comment-only statements. This could cause the groupcomments function to repeatedly rescan these statements, leading to...

Astra Linux – Vulnerability in Mariadb 10.3

It has been discovered that MariaDB Server v10.7 and earlier contain a global buffer overflow in the decimalbinsize component, which can be exploited through specially crafted SQL statements...

Astra Linux – Vulnerability in libpgjava

pgjdbc is an open-source PostgreSQL JDBC Driver. In affected versions, a prepared statement using either PreparedStatement.setTextint, InputStream or PreparedStatemet.setByteaint, InputStream will create a temporary file if the InputStream exceeds 2 kilobytes in size. This temporary file can be...

CVE-2026-15963

The Quiz and Survey Master QSM – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to generic SQL Injection via 'randoncategory' Quiz Option in all versions up to, and including, 11.2.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on t...

UBUNTU-CVE-2026-73194

DBI versions before 1.652 for Perl allow a heap out-of-bounds write via an unvalidated numeric placeholder that sets the binder counter in preparse. preparse reserves seven output bytes per input byte, the width of the longest ':p99999' expansion. The ':N' branch parses the number with atoisrc an...

CVE-2026-72550 Friendica Friendica - SQL Injection

An SQL injection vulnerability in Friendica through the 2026.08-dev branch allows unauthenticated remote attackers to execute arbitrary SQL statements via the photo-view order parameter. The parameter is concatenated unescaped into a SHOW COLUMNS query via a bare PDO::query call, enabling stacked...

PT-2026-70125

An SQL injection vulnerability in Friendica through the 2026.08-dev branch allows unauthenticated remote attackers to execute arbitrary SQL statements via the photo-view order parameter. The parameter is concatenated unescaped into a SHOW COLUMNS query via a bare PDO::query call, enabling stacked...

Malicious code in bigops-statements-timeline (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d10168eeae00c6455a6a5a4838aa1afc9460a1edbc287d0b6f8b4acab5eae316 On require of the package, index.js loads support.js which selects a platform-specific asset path and downloads a binary over HTTPS from a rotating...

Time-of-check Time-of-use (TOCTOU) Race Condition

Overview Affected versions of this package are vulnerable to Time-of-check Time-of-use TOCTOU Race Condition in the StatementSyncIterator. An attacker can execute unintended SQL statements with altered parameters by leveraging a stale iterator after the underlying statement has been reset and...

CVE-2026-58041

A flaw in Node.js node:sqlite allows a stale StatementSyncIterator created through DatabaseSynccreateTagStore to continue executing a cached prepared statement after it has been reset and rebound with new parameters. SQLTagStore resets cached statements using sqlite3reset directly, bypassing the...

CVE-2026-58041

CVE-2026-58041 affects Node.js with the node:sqlite integration. The issue: a stale StatementSyncIterator created via DatabaseSync#createTagStore() can continue executing a cached prepared statement after it has been reset and rebound with new parameters. The underlying cause is that SQLTagStore ...

ALSA-2026:49514 Important: perl-DBI security update

DBI is a database access Application Programming Interface API for the Perl Language. The DBI API Specification defines a set of functions, variables and conventions that provide a consistent database interface independent of the actual database being used. Security Fixes: DBI: DBI: Arbitrary cod...

PT-2026-67406

Name of the Vulnerable Software and Affected Versions SiYuan versions prior to 3.7.3 Description The '/api/search/searchEmbedBlock' endpoint passes a client-supplied SQL statement directly to the main read-write siyuan.db handle without restrictions on single statements, read-only access, or...