Tag: SQL Injection
Nobody told these AI agents to hack anything
Autonomous agents hunting for public data drifted into SQL injection attempts against US and Canadian government sites.
A SQL injection raid exposes Polish patients’ national ID numbers
Attackers pulled Polish national ID numbers from a clinic platform through a SQL injection flaw.
Attackers cash in on an unauthenticated Roundcube mail flaw
Canada's cyber centre says a patched SQL injection in Roundcube Webmail is being exploited in the wild.
Sangoma Switchvox SQLi now exploited for unauthenticated code execution
Attackers began hammering a critical Switchvox SQL injection weeks after the patch shipped, and exposed phone systems may all be…
ServiceNow ships fixes for three perfect-10 AI platform flaws
Three maximum-severity bugs in the ServiceNow AI Platform can be exploited without authentication.
Probes hit GeoServer SQLi zero-day within hours of disclosure
watchTowr logged hundreds of exploitation probes against an unpatched GeoServer SQLi bug within hours of its disclosure.
Metabase cloud hit first in CVSS 10 zero-day campaign
Attackers used an unknown Metabase flaw to grab admin access and customer data before a patch shipped.
Huntress finds hacker toolkit living inside Oracle database
Huntress found attackers using Oracle's own Java engine to compile malware directly inside a database.