Technical writeups and vulnerability analyses from our community of elite security researchers.
A heap buffer overflow in MariaDB's JSON_SCHEMA_VALID() function allows authenticated users to escalate privileges and execute arbitrary OS commands. Discovered by Xint Code at ZeroDay.Cloud 2025.
A 20-year-old heap buffer overflow in PostgreSQL's pgcrypto extension allows remote code execution. Discovered by Xint Code at ZeroDay.Cloud 2025.
A 20-year-old encoding bug in PostgreSQL's pgcrypto extension allows smuggling invalid UTF-8 into the database, leading to memory corruption and remote code execution. Discovered by Team Bugz Bunnies at ZeroDay.Cloud 2025.