SecurityCritical SurrealDB Injection Flaw Discovered
A critical injection vulnerability in SurrealDB allows authenticated users to achieve privilege escalation and full system takeover via malicious database exports.
> Search
22 results for “injection”
Security
SecurityWordPress Core Flaw Risks Global Sites
A dual-vulnerability chain allows unauthenticated attackers to execute code, forcing a rapid, automated security update cycle.
SecurityCISA Adds Fortinet FortiSandbox OS Command Injection to KEV Catalog
CISA has confirmed active exploitation of a critical OS command injection vulnerability in Fortinet FortiSandbox, mandating urgent remediation.
SecurityCISA Warns of Actively Exploited Fortinet FortiSandbox Flaw
CISA has added a critical OS command injection vulnerability in Fortinet FortiSandbox to its KEV catalog following reports of active exploitation.
SecurityCISA Flags Actively Exploited Fortinet FortiSandbox OS Injection Flaw
CISA has added a critical OS command injection vulnerability in FortiSandbox to its KEV catalog, mandating urgent remediation for federal agencies.
SecurityCISA Flags Actively Exploited Fortinet FortiSandbox Injection Flaw
CISA has added a critical OS command injection vulnerability in Fortinet FortiSandbox to its KEV catalog following reports of active, real-world exploitation.
SecuritySupply Chain Breach Targets npm Ecosystem
Compromised AsyncAPI and Jscrambler packages expose developers to credential theft via automated malicious injection.
SecurityCISA Flags Actively Exploited Fortinet FortiSandbox Flaw
An OS command injection vulnerability in Fortinet FortiSandbox is under active exploitation, prompting urgent remediation mandates for federal agencies.
SecurityCISA Adds Fortinet FortiSandbox Command Injection Flaw to KEV Catalog
CISA has confirmed active exploitation of a command injection vulnerability in Fortinet FortiSandbox, mandating urgent remediation for federal agencies.
SecurityCritical PHP Injection Vulnerability Patched in Twig Template Engine
A critical vulnerability in Twig versions prior to 3.26.0 allows attackers to inject arbitrary PHP code via crafted template names in {% use %} tags.
SecurityCISA Adds Actively Exploited FortiSandbox Flaw to KEV Catalog
CISA has confirmed active exploitation of an OS command injection vulnerability in Fortinet FortiSandbox, requiring immediate remediation.
SecurityAI Agents Vulnerable to Data Injection
A new research paper details how 'probabilistic delimiter injection' allows attackers to bypass AI safety guards with fake data.
SecurityCISA Adds Actively Exploited Fortinet FortiSandbox Flaw to KEV Catalog
CISA has confirmed active exploitation of an OS command injection vulnerability in Fortinet FortiSandbox, mandating urgent remediation for federal agencies.
SecurityAutomating the Hunt for Model Flaws
OpenAI is deploying an automated red-teaming model to aggressively stress-test its systems against persistent prompt injection risks.
SecurityAutomated Zero-Day Discovery via AI
Researchers are moving beyond theoretical AI capabilities, building automated pipelines to find live vulnerabilities in software.
SecuritySonicWall SMA1000 Zero-Day Crisis
Critical SSRF and code injection flaws in SMA1000 appliances are currently being exploited, prompting an urgent patching mandate.
SecuritySupply Chain Breach Targets Jscrambler Dependency Pipeline
A malicious npm package injection forced a swift cleanup, highlighting the persistent dangers of compromised build environments.
SecurityCrowdStrike Exposes New Vulnerabilities in Generative AI Models
Researchers have identified five unique prompt injection techniques that exploit how large language models process user inputs.
SecurityThe Silent Sabotage: How MemGhost Alters AI Agent Memories
A new automated attack technique can plant persistent, invisible false memories into AI agents through a single, malicious email.
SecurityUnpatched Surveillance Networks Face Growing Global Exploitation Risk
Thousands of Hikvision devices remain vulnerable to a critical command injection flaw, drawing attention from global threat actors.
SecurityDefenders Weaponize Prompt Injection to Neutralize Rogue AI Agents
Researchers at Tracebit are utilizing context bombing to force AI models to trigger their own safety guardrails during attacks.
SecurityThe Image Blind Spot Letting AI Agents Steal Corporate Secrets
Researchers have demonstrated how bad actors can exploit AI code assistants by hiding malicious instructions inside unchecked images.