Tag: SQL Injection
Probes hit GeoServer SQLi zero-day within hours of disclosure
watchTowr logged hundreds of exploitation probes against an unpatched GeoServer SQLi bug within hours of its disclosure.
Metabase cloud hit first in CVSS 10 zero-day campaign
Attackers used an unknown Metabase flaw to grab admin access and customer data before a patch shipped.
Huntress finds hacker toolkit living inside Oracle database
Huntress found attackers using Oracle's own Java engine to compile malware directly inside a database.
Adobe fixes CVSS 10 Campaign Classic bug that needs no user click
Adobe patches a CVSS 10 Campaign Classic flaw that allows code execution with no user interaction.
Chain of Vulnerabilities in LangGraph Opens Self-Hosted AI Systems to Takeover
A trio of patched vulnerabilities in LangGraph's checkpoint system can be chained through SQL injection and unsafe deserialization to execute…
Two Critical Flaws in Popular WordPress Plugin Threaten Over One Million Sites
The Avada Builder plugin flaws allow low level users to read server files and unauthenticated attackers to steal database credentials.