sql-injection
102 articles with this tag
CRITICAL
CRITICAL
HIGH
CRITICAL
HIGH
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
HIGH
CRITICAL
HIGH
CRITICAL
HIGH
CRITICAL
HIGH
CRITICAL
HIGH
HIGH
HIGH
HIGH
HIGH
HIGH
MEDIUM
MEDIUM
MEDIUM
HIGH
CRITICAL
MEDIUM
HIGH
CRITICAL
CRITICAL
HIGH
CRITICAL
CRITICAL
CRITICAL
CRITICAL
HIGH
HIGH
HIGH
CRITICAL
MEDIUM
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
HIGH
CRITICAL
MEDIUM
CRITICAL
MEDIUM
HIGH
HIGH
HIGH
HIGH
HIGH
MEDIUM
MEDIUM
HIGH
CRITICAL
HIGH
HIGH
HIGH
MEDIUM
HIGH
HIGH
CRITICAL
CRITICAL
MEDIUM
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
HIGH
CRITICAL
HIGH
MEDIUM
CRITICAL
CRITICAL
HIGH
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
HIGH
HIGH
HIGH
CRITICAL
HIGH
MEDIUM
CRITICAL
HIGH
CRITICAL
Drupal bug added to CISA list of known exploited vulnerabilities
Ghost CMS vulnerability exploited in large-scale campaign
700+ education and tech websites hijacked in huge ClickFix malware campaign
CISA orders feds to patch actively exploited Drupal vulnerability
Ghost CMS Vulnerability Exploited to Hack Over 700 Websites
Ghost CMS CVE-2026-26980 Exploited to Hijack 700+ Sites for ClickFix Attacks
Ghost CMS SQL injection flaw exploited in large-scale ClickFix campaign
Drupal Core SQL Injection Bug Actively Exploited, Added to CISA KEV
Keys to the Kingdom: Anonymous SQL Injection in Drupal Core (CVE-2026-9082)
Drupal: Critical SQL injection flaw now targeted in attacks
[UPDATE] [hoch] Exim: Schwachstelle ermöglicht SQL-Injection
USN-8294-1: PostgreSQL vulnerabilities
CVE-2026-9082: Highly Critical SQL Injection Vulnerability in Drupal Core (SA-CORE-2026-004)
Vulnérabilité dans Drupal (21 mai 2026)
Drupal Patches Highly Critical Vulnerability Exposing Websites to Hacking
NCSC-2026-0166 [1.00] [M/H] Kwetsbaarheid verholpen in Drupal core
Highly Critical Drupal Core Flaw Exposes PostgreSQL Sites to RCE Attacks
Drupal admins rushing to patch maximum severity SQL injection vulnerability
[NEU] [hoch] CKAN: Mehrere Schwachstellen
CVE-2026-6638 PostgreSQL REFRESH PUBLICATION allows SQL injection via table name
[NEU] [hoch] PostgreSQL: Mehrere Schwachstellen
NCSC-2026-0160 [1.00] [M/H] Kwetsbaarheden verholpen in Ivanti Endpoint Manager
Bug hunter tracks down three massive MCP flaws and one vendor won't fix theirs
[NEU] [mittel] Fortinet FortiMail: Schwachstelle ermöglicht SQL Injection
1,000,000 WordPress Sites Affected by Arbitrary File Read and SQL Injection Vulnerabilities in Avada Builder WordPress Plugin
User controlled SQL commands
SQL command injection in administrative portal
Multiples vulnérabilités dans les produits Centreon (12 mai 2026)
NCSC-2026-0140 [1.00] [M/H] Kwetsbaarheden verholpen in diverse SAP-producten
SAP Patches Critical S/4HANA, Commerce Vulnerabilities
CVE-2025-14179 SQL injection in pdo_firebird via NUL bytes in quoted strings
ABB Ability Symphony Plus Engineering
LiteLLM exploited within 36 hours of disclosure via SQL injection bug
Fresh LiteLLM Vulnerability Exploited Shortly After Disclosure
[NEU] [hoch] ProFTPD: Schwachstelle ermöglicht SQL-Injection
LiteLLM CVE-2026-42208 SQL Injection Exploited within 36 Hours of Disclosure
Hackers are exploiting a critical LiteLLM pre-auth SQLi flaw
[NEU] [hoch] LiteLLM: Mehrere Schwachstellen
[UPDATE] [hoch] Cacti: Mehrere Schwachstellen
SQL Injection via JSON RPC API
SQL Injection via API
Multiple SQL Injections
CISA Adds 6 Known Exploited Flaws in Fortinet, Microsoft, and Adobe Software
Multiples vulnérabilités dans Joomla! (01 avril 2026)
Exploitation of Critical Fortinet FortiClient EMS Flaw Begins
Fortinet hit by another exploited cybersecurity flaw
Critical Fortinet FortiClient EMS bug under active attack (CVE-2026-21643)
[NEU] [hoch] Fleet: Mehrere Schwachstellen
Critical Fortinet Forticlient EMS flaw now exploited in attacks
[NEU] [hoch] Zabbix: Mehrere Schwachstellen
[UPDATE] [hoch] PostgreSQL JDBC Driver: Schwachstelle ermöglicht SQL-Injection
Kanboard Authenticated SQL Injection CVE-2026-33058 Writeup
CVE-2026-22730: SQL Injection in Spring AI’s MariaDB Vector Store
Multiples vulnérabilités dans GLPI (18 mars 2026)
Multiples vulnérabilités dans Spring AI (17 mars 2026)
Post AI Agent Hacked Amazon & McKinsey, I compiled a list of 5 situations where deploying agents can be catastrophic
Ally WordPress Plugin Flaw Exposes Over 200,000 Websites to Attacks
SQLi flaw in Elementor Ally plugin impacts 250k+ WordPress sites
Throwing a spark into FuelCMS (0-click RCE)
USN-8083-1: GeoPandas vulnerability
SQL injection in jsonrpc api
400,000 WordPress Sites Affected by Unauthenticated SQL Injection Vulnerability in Ally WordPress Plugin
New "LeakyLooker" Flaws in Google Looker Studio Could Enable Cross-Tenant SQL Queries
[UPDATE] [hoch] PostgreSQL: Schwachstelle ermöglicht SQL Injection und Codeausführung
[NEU] [hoch] DriveLock: Mehrere Schwachstellen
NCSC-2026-0077 [1.00] [M/H] Kwetsbaarheden verholpen in Cisco Secure Firewall systemen
Cisco Secure Firewall Management Center Software SQL Injection Vulnerabilities
NCSC-2026-0075 [1.00] [M/H] Kwetsbaarheid verholpen in n8n Automation Platform
[webapps] WeGIA 3.5.0 - SQL Injection
Multiples vulnérabilités dans SPIP (26 février 2026)
SQL injection in forward module
[UPDATE] [mittel] Django (FilteredRelation): Schwachstelle ermöglicht SQL injection
New Joomla! Novarain/Tassos Framework Vulnerabilities Advisory
New Joomla! Novarain/Tassos Framework Vulnerabilities Advisory
CVE-2024-42327: Zabbix Server SQL Injection Vulnerability
CVE-2024-42327 Impact, Exploitability, and Mitigation Steps | Wiz
CVE-2024-42327: Zabbix SQL Injection Vulnerability
Microsoft Configuration Manager (ConfigMgr) 2403 Unauthenticated SQL
CISA Warns of Microsoft Configuration Manager SQL Injection Vulnerability Exploited in Attacks | Cryptika Cybersecurity
NopSec Just in Time: CVE-2024-43468 SCCM SQL Injection
CISA Warns of Actively Exploited SQL Injection Flaw in Microsoft Configuration Manager
SB2025051940 - Multiple vulnerabilities in Siemens Polarion
CVE-2026-21643: Critical SQL Injection in FortiClientEMS - Arctic Wolf
Fortinet Patches Critical FortiClientEMS SQL Injection Bug - TechInformed
GitHub - BridgerAlderson/Zabbix-CVE-2024-42327-SQL-Injection-RCE: Zabbix CVE-2024-42327 PoC
NVD - CVE-2026-21643
Critical Vulnerability in FortiClientEMS
CVE-2026-21643: Critical FortiClient EMS Vulnerability Enables Unauthenticated Remote Code Execution | SOC Prime
Vercel Security Checkpoint
Warning: Critical SQL Injection vulnerability in multiple Zabbix frontend versions can lead to privilege escalation, Patch Immediately! | CCB Safeonweb
CISA flags critical Microsoft SCCM flaw as exploited in attacks
Multiples vulnérabilités dans Ivanti Endpoint Manager (11 février 2026)
NCSC-2026-0059 [1.00] [M/H] Kwetsbaarheden verholpen in Ivanti Endpoint Manager
[NEU] [hoch] Fortinet FortiClientEMS: Schwachstelle ermöglicht Codeausführung
[webapps] FortiWeb Fabric Connector 7.6.x - SQL Injection to Remote Code Execution
[UPDATE] [mittel] IBM Business Automation Workflow: Mehrere Schwachstellen
[UPDATE] [mittel] Django: Mehrere Schwachstellen
Johnson Controls Metasys Products
SQL Injection Flaw Affects 40,000 WordPress Sites
Metasploit Wrap-Up 01/30/2026