https://bytejmp.com/categories/security-research/ Recent content in Security Research on Byte JMP Hugo -- gohugo.io en-gb Wed, 01 Jul 2026 14:00:00 -0300 https://bytejmp.com/posts/breaking-databasement/ Wed, 01 Jul 2026 14:00:00 -0300 https://bytejmp.com/posts/breaking-databasement/ Field Details Target Databasement v1.5.5 Date July 2026 Researchers @bytejmp, @d0c84 Databasement is an open-source Laravel application for managing database server backups. It supports MySQL, PostgreSQL, MariaDB, SQLite, Redis, MongoDB, SQL Server, and Firebird, with features like scheduled backups, cross-server restores, and multi-tenant organization isolation. During our security research, we identified five vulnerabilities that, when combined, allow a low-privileged user to exfiltrate data from other tenants, achieve remote code execution on the server, and perform persistent destructive operations against production databases.