Cisco Patches Nine Critical Flaws in Crosswork and Secure Workload, Five Rated CVSS 10.0
Cisco has released security updates addressing nine vulnerabilities in its Crosswork platforms and Secure Workload software, with five of the flaws carrying…
Tag: SQL injection
Unpatched GeoServer Zero-Day Actively Exploited, Could Lead to Remote Code Execution
A newly disclosed zero-day vulnerability in GeoServer is being actively exploited in the wild, according to threat intelligence firm watchTowr. The flaw,…
Adobe Patches Critical ColdFusion and Campaign Classic Flaws with Multiple CVSS 10.0 Ratings
Adobe has released security updates addressing multiple critical vulnerabilities in ColdFusion, Commerce, and Campaign Classic. The most severe include three CVSS 10.0…
CVE-2026-48381: SQL Injection in Adobe Campaign Classic
A CVSS 9.0 SQL injection vulnerability in Adobe Campaign Classic that could lead to arbitrary code execution. Fixed in ACC v7 7.4.4…
Metabase Zero-Day Exploited in Wild Allows Admin Access Without Authentication
Metabase has disclosed a maximum-severity zero-day vulnerability in its business intelligence and data visualization software that is being actively exploited in the…
Metabase Warns of Actively Exploited Zero-Day
Metabase, a provider of business intelligence and data visualization software, disclosed a maximum-severity zero-day vulnerability (CVSS 10.0) that is being exploited in…
khunt: Oracle Post-Exploitation Toolkit
khunt is a post-exploitation toolkit that runs inside Oracle databases by compiling Java source code into stored schema objects. It enables command…
Attackers Compile khunt Inside Oracle to Turn SQL Injection Into Windows SYSTEM Access
Attackers breached an organization's Oracle database via a SQL injection flaw in a public-facing web application, then installed a post-exploitation toolkit named…
cPanel Patches Critical SQL Injection Flaw Allowing Database Root Access
cPanel has released a targeted security update to address a critical vulnerability that could allow authenticated hosting customers to execute SQL commands…
cPanel & WHM Affected by Critical SQL Injection
cPanel & WHM is a widely used web hosting control panel. All supported versions are affected by CVE-2026-58048, a critical SQL injection…