Do Son Fortinet released a critical patch for FortiWeb (CVE-2025-25257). This unauthenticated SQL injection flaw allows remote code execution. PoC Releases!
sql injection
Siemens warns of critical flaws (CVE-2025-40736 CVSS 9.8 Auth Bypass, SQLi, Path Traversal) in SINEC NMS, allowing unauthenticated remote root access and RCE.
Fortinet released a critical patch for FortiWeb (CVE-2025-25257, CVSS 9.6). This unauthenticated SQL injection flaw allows remote code execution; update immediately!
PHP patches two flaws: CVE-2025-1735 allows SQL injection/crashes in pgsql, and CVE-2025-6491 enables DoS in SOAP via oversized XML. Update immediately!
Three flaws in Frappe Framework allow account takeover via password reset token leaks, XSS via file upload, and SQL injection. Update self-hosted ERPNext immediately!
CISA warns of critical flaws in ControlID iDSecure On-premises, including SQL Injection, auth bypass, and SSRF, risking vehicle access control systems.
Two high-severity Ubiquiti flaws allow privilege escalation via XSS in UCRM and authenticated SQL injection in UISP. Update immediately!
QNAP releases urgent patches for high-severity flaws in Qsync Central and File Station 5, enabling RCE and data compromise. Update immediately!
A critical (CVSS 9.8) SQL injection flaw found in popular LlamaIndex (v0.12.21) allows data manipulation, affecting LLM-powered applications.
Unauthenticated attackers can fully compromise Dell PowerScale OneFS. Patch now to stop critical NFS access flaws.
A SQL injection vulnerability (CVE-2025-48912) in Apache Superset allows authenticated attackers to bypass row-level security, exposing sensitive data.
Earth Lamia, a China-linked APT, is targeting critical industries worldwide using SQL injection, CVEs, and custom backdoors like PULSEPACK.
CVEs 2025-26389 and 2025-26390 let attackers run code as root or gain admin access on Siemens OZW web servers. Patching is strongly advised.
Siemens patches 66 SQL injection vulnerabilities in TeleControl Server Basic, urging users to upgrade and restrict access.
Joomla has released security patches for critical SQL injection (CVE-2025-25226) and MFA bypass (CVE-2025-25227) vulnerabilities. Learn how to protect your Joomla site with urgent updates.
Learn about CVE-2024-36465, a critical SQL injection vulnerability in Zabbix API that can be exploited by low-privilege users.
Discover critical Frappe Framework vulnerability details, including SQL injection risks and necessary version updates for security.
Recent advisories have revealed two significant vulnerabilities: an SQLi flaw (CVE-2024-53678) and a cross-site scripting (CVE-2024-53679) vulnerability
CVE-2025-20051, CVE-2025-24490, and CVE-2025-25279 could allow attackers to read arbitrary files on the system and execute SQL injection attacks
Learn about CVE-2025-26794, a new vulnerability in Exim that allows remote SQL injection attacks on specific configurations.
Uncover the details of Operation Digital Eye, a sophisticated cyberespionage campaign targeting IT service providers in Southern Europe.
Security researcher Alejandro Ramos has published a detailed technical analysis and proof-of-concept (PoC) exploit code for CVE-2024-42327