Skip to content

Breaking

Attackers Hijack Staples and Dell Order Notifications for Voice Phishing
aiohttp multipart requests cause unbounded file descriptor retention in versions up to 3.14.3
Eclipse ioFog WebSocket Authentication Bypass Leaves Admin Control Unprotected in Unpatched Versions
Argo CD JSONnet Flaw Risks Server Crash and File Read for Low-Priv Users Up to 3.6.0
Argo CD Kustomize Injection Bug Lets Read-Only Users Run Code on Repo Servers
PHP Remote Code Execution Flaws Rated 9.2 Trigger Emergency Patch Plan
Attackers Hijack Staples and Dell Order Notifications for Voice Phishing
aiohttp multipart requests cause unbounded file descriptor retention in versions up to 3.14.3
Eclipse ioFog WebSocket Authentication Bypass Leaves Admin Control Unprotected in Unpatched Versions
Argo CD JSONnet Flaw Risks Server Crash and File Read for Low-Priv Users Up to 3.6.0
Argo CD Kustomize Injection Bug Lets Read-Only Users Run Code on Repo Servers
PHP Remote Code Execution Flaws Rated 9.2 Trigger Emergency Patch Plan

SQL injection

Everything RedTeam Tribune has reported about SQL injection: 2 stories, newest first. Part of our Vulnerabilities coverage.

14 Oct
Vulnerabilities

WeGIA 3.8.6 Patches Unauthenticated SQL Injection in Billing Module

LabRedesCefetRJ released version 3.8.6 to fix a critical SQL injection flaw that allowed attackers to steal or delete data without logging in.

13 Oct
Vulnerabilities

Difference Between SQL Injection and Command Injection

SQL injection targets the database interpreter, while command injection targets the operating system shell, creating distinct attack surfaces that require separate mitigation strategies.