CVE-2018-1058

CVE-2018-1058 — PostgreSQL 搜索路径演示 本仓库包含以下内容的最终报告和可复现性工件： CVE-2018-1058：通过不受控制的搜索路径在 PostgreSQL 中实现权限提升 目标是使用安全的本地 Docker 环境演示 CVE-2018-1058 背后的搜索路径信任缺陷。 该演示不会 复现历史上确切的 pgdump 执行路径。相反，它复现了 PostgreSQL 指南中描述的相同根本原因：攻击者可写的模式中包含一个相似对象，而另一个会话将未限定的名称解析到该对象。 1. 目录 root@kitploit: . ├── report.pdf ├──...

SUSE CVE-2025-66861

An issue was discovered in function dunqualifiedname in file cp-demangle.c in BinUtils 2.26 allowing attackers to cause a denial of service via crafted PE file...

CVE-2025-66861

CVE-2025-66861 affects GNU BinUtils 2.26. The issue is in the function d_unqualified_name in cp-demangle.c; processing a specially crafted PE file can cause a crash leading to a denial of service . Red Hat notes that mitigation is not available or does not meet criteria. Other sources corroborate...

PT-2025-53757

Name of the Vulnerable Software and Affected Versions BinUtils version 2.26 Description An issue exists in the d unqualified name function within the cp-demangle.c file of BinUtils. This can lead to a denial of service through the processing of specially crafted Portable Executable PE files...