学习与教育

abraxas/vaultwarden-ip-header-spoof

Vaultwarden 1.37.3 default X-Real-IP trusted-local bypasses login rate limits on Docker NAT

abraxas/sqlite-xfer-auth

SQLite 3.53.4 - High - Local - Privilege leftover - INSERT SELECT xfer skips source READ

abraxas/sqlite-wal-pagesize

SQLite 3.53.4 - High - Local - Info leak - WAL/DB page-size mismatch uninitialized page tail

abraxas/uptime-kuma-setup-toctou

Proof-of-concept for a TOCTOU race in Uptime Kuma's first-run Socket.IO setup, letting an unauthenticated attacker plant a hidden second admin and…

abraxas/sqlite-rtree-rowid0

SQLite 3.53.4 - High - Local - UAF - rtree last_insert_rowid 0 node hash

abraxas/sqlite-session-ncol

SQLite 3.53.4 - High - Local - heap OOB write - session changeset same-name nCol growth

abraxas/sqlite-values-union

SQLite 3.53.4 - High - Local - Crash - VALUES UNION ALL fallback cleanup stack overflow

abraxas/sqlite-fts5-securedel

SQLite 3.53.4 - High - Local - Crash - FTS5 secure-delete PutVarint footer overrun

abraxas/sqlite-fj-using-auth

SQLite 3.53.4 - High - Local - Privilege leftover - FULL JOIN USING skips sqlite3AuthRead

abraxas/sqlite-cli-go

SQLite 3.53.4 CLI - High - Local - Command injection - go and slash terminators then dot-command

abraxas/sqlite-cte-nest

SQLite 3.53.4 - High - Local - Crash - nested CTEs skip nNestSel view-depth cap

abraxas/sqlite-cli-recover

SQLite 3.53.4 CLI - High - Local - Command injection - recover dump emits hostile schema as dot-command

abraxas/spark-rpc-stream-unauth

Apache Spark 4.2.0 - High - Remote - File read - unauth RPC StreamRequest File join

abraxas/spark-rest-auth-bypass

Apache Spark 4.2.0 - High - Remote - Privilege leftover - standalone REST ignores spark.authenticate

abraxas/prometheus-unix-socket-dial

Prometheus v3.15.0 - High - Remote - SSRF - http_sd __unix_socket__ unsanitized Dial leftover of UDS scrape

abraxas/spark-python-ds-static

Apache Spark 4.2.0 - High - Remote - Privilege leftover - process-global Python Data Source map