SQL injection in pdo_firebird via NUL bytes in quoted strings (CVE-2025-14179) | HOL Guard CVE