SecurityPostgreSQL backup accounts open 12-year backdoor
A 12-year-old PostgreSQL flaw lets low-privilege replication accounts gain superuser access and remote code execution across platforms.
> Search
21 results for “sql”
Security
SecuritySangoma Switchvox flaw exploited in active attacks
CVE-2026-9586, an unauthenticated SQL injection in Switchvox, is under active exploitation, Horizon3 reports.
SecurityServiceNow Tackles Maximum-Severity Flaws
Patches cover three critical code injection bugs and a sandbox escape in the Now Platform.
SecurityCISA KEV Adds Six Flaws, NetScaler Web Shells Spotted
CISA adds six exploited flaws to KEV, including NetScaler, Linux, and SQL Server bugs.
SecurityMetabase Zero-Day Exploited Before Patch
Critical SQL injection flaw in Metabase allowed zero-day attacks; urgent patches released for self-hosted users.
SecurityCritical Azure SQL Managed Instance Flaw
A high-severity vulnerability in Azure SQL Managed Instance allows unauthorized network-based privilege escalation, requiring immediate attention.
SecurityCritical Azure SQL Database Flaw Found
A critical authentication bypass in Azure SQL Database allows unauthorized attackers to gain elevated privileges over a network.
SecurityOracle Database Hijacked for Tool Storage
Researchers identified a post-exploitation toolkit concealed within Oracle database schema objects to bypass endpoint security tools.
SecurityCritical SQL Injection Found in Loca CMS
A critical SQL injection vulnerability in Loca Software CMS allows unauthorized attackers to gain full control over affected database systems.
SecurityCritical SQL Injection Hits Adobe Campaign
A critical SQL injection vulnerability in Adobe Campaign Classic allows low-privileged attackers to execute arbitrary code without user interaction.
SecurityCritical SQL Injection Found in PyAthena
A severe vulnerability in PyAthena versions prior to 3.35.4 allows unauthenticated attackers to execute arbitrary SQL commands.
SecuritySQL Injection Flaw Impacts SiYuan App
A critical vulnerability in SiYuan software allows unauthorized database manipulation via the searchDocs API endpoint.
SecurityCritical NocoBase RCE Vulnerability Found
A severe SQL injection flaw in NocoBase allows unauthenticated attackers to gain remote code execution via a simple registration and API request.
SecurityCritical SQL Injection in @hypequery/clickhouse
A severe SQL injection vulnerability in @hypequery/clickhouse allows attackers to execute arbitrary SQL commands by manipulating input parameters.
SecurityCritical SQL Injection Hits PROCON-WEB SCADA
A critical vulnerability in the PROCON-WEB SCADA GetGridData endpoint allows unauthenticated attackers to execute arbitrary SQL commands.
SecurityCritical SQL Flaw Exposed in Budibase
A configuration vulnerability in the platform's MySQL integration allows for unauthorized command execution and database takeover.
SecurityCISA Warns of Actively Exploited WordPress Flaw
WordPress Core is under active attack via an interpretation conflict vulnerability that allows for SQL injection and remote code execution.
SecurityCISA Adds WordPress SQL Injection to KEV List
WordPress Core is currently under active exploitation via a SQL injection vulnerability that can be chained to achieve remote code execution.
SecuritySQL Injection Flaw in Sangoma Switchvox
A critical, unauthenticated SQL injection vulnerability has been identified in Sangoma Switchvox SMB Edition 8.3.
SecurityWordPress Core Flaws Risk Unauth Access
A dual-vulnerability chain allows unauthenticated code execution on WordPress core installations, prompting emergency updates.
SecurityAutomated Zero-Day Discovery via AI
Researchers are moving beyond theoretical AI capabilities, building automated pipelines to find live vulnerabilities in software.