Marcel SIneM(S)US2h ago
#Roundcube-Webmail-Instanzen mit Schadcode attackierbar | Security https://www.heise.de/news/Roundcube-Webmail-Instanzen-mit-Schadcode-attackierbar-11307545.html #Patchday #SQLinjection #XSS #CrossSiteScripting
Roundcube-Webmail-Instanzen mit Schadcode attackierbar

In aktuellen Version haben die Entwickler von Roundcube Webmail mehrere Sicherheitslücken geschlossen.

heise online
OffSequence1d ago
⚠️ CVE-2026-10110: MEDIUM severity SQL injection in code-projects Student Details Management System 1.0 (/index.php, roll parameter). Public exploit available — remote attack possible. Monitor and restrict access. https://radar.offseq.com/threat/cve-2026-10110-sql-injection-in-code-projects-stud-7112fd7e #OffSeq #SQLInjection #Vuln
Marcel SIneM(S)US1d ago
Jetzt patchen! Angreifer nutzen kritische Schadcode-Lücke in #Drupal aus | Security https://www.heise.de/news/Jetzt-patchen-Angreifer-nutzen-kritische-Schadcode-Luecke-in-Drupal-aus-11305870.html #Patchday #exploit #SQLinjection #PostgreSQL #CMS #ContentManagementSystem
Jetzt patchen! Angreifer nutzen kritische Schadcode-Lücke in Drupal aus

Angreifer haben es derzeit auf mit dem CMS Drupal erstellte Websites abgesehen. Seiten sind aber nur verwundbar, wenn sie PostgreSQL nutzen.

heise online
Meteora Web1d ago

🚨 NEWS: OWASP Top 10 2025: le vulnerabilità web più pericolose spiegate con esempi pratici in PHP e Laravel

Ecco i punti chiave in breve:
💡 Ogni applicazione web, indipendentemente dal framework o dal linguaggio, è esposta a rischi di sicurezza che possono compromettere dati, utenti e reputazione. La OWASP Top 10 è il riferimento più auto...

🚀 LINK: https://meteoraweb.com/analisi-dei-dati-e-metriche/owasp-top-10-2025-le-vulnerabilita-web-piu-pericolose-spiegate-con-esempi-pratici-in-php-e-laravel

#sQLInjection #oWASPTop102025 #vulnerabilitàPHPLaravel #brokenAccessControl #cryptographicFailures

Meteora Web1d ago

🚨 NEWS: Cybersecurity per Sviluppatori Web: Guida Definitiva a OWASP, Autenticazione Moderna e Prevenzione Vulnerabilità in Laravel

Ecco i punti chiave in breve:
💡 Ogni sviluppatore web, indipendentemente dal framework o linguaggio utilizzato, si trova a dover fronteggiare minacce informatiche in continua evoluzione. Ignorare la sicurezza non è più un'opzione: u...

🚀 LINK: https://meteoraweb.com/sicurezza-informatica/cybersecurity-per-sviluppatori-web-guida-definitiva-a-owasp-autenticazione-moderna-e-prevenzione-vulnerabilita-in-laravel

#oWASPTop10 #webAuthn #passkey #laravelSecurity #sQLInjection

secbro423d ago

☠ Critical: Unauthenticated attackers can READ, MODIFY, and DESTROY database content via SQL Injection vulnerability in dot

#apiexploit #cve #cybersecurity #cybersecurityvulnerability #dotcmsvulnerability #iso27001 #securityrisk #sqlinjection

OffSequence3d ago
⚠️ HIGH severity: CVE-2026-40825 in MB connect line mbCONNECT24. SQL Injection via accountstatus view devices param enables DB read/modify. No patch yet — restrict access & monitor vendor advisories. https://radar.offseq.com/threat/cve-2026-40825-cwe-89-improper-neutralization-of-s-0b1fbf64 #OffSeq #SQLInjection #Vuln #MBconnect
The New Oil4d ago

#Drupal: Critical #SQLInjection flaw now targeted in attacks

https://www.bleepingcomputer.com/news/security/drupal-critical-sql-injection-flaw-now-targeted-in-attacks/

#cybersecurity #SQL

Drupal: Critical SQL injection flaw now targeted in attacks

Drupal is warning that hackers are attempting to exploit a "highly critical" SQL injection vulnerability announced earlier this week.

BleepingComputer
Analyst2074d ago

CISA Mandates Patching of Exploited Drupal Vulnerability

The US Cybersecurity and Infrastructure Security Agency has issued a directive requiring federal agencies to patch a critical Drupal vulnerability, known as CVE-2026-9082, by May 27 to prevent devastating SQL injection attacks. This highly critical flaw allows hackers to exploit PostgreSQL-powered Drupal sites and gain unauthorized access to…

https://osintsights.com/cisa-mandates-patching-of-exploited-drupal-vulnerability?utm_source=mastodon&utm_medium=social

#DrupalVulnerability #Cve20269082 #SqlInjection #PatchManagement #Cisa

CISA Mandates Patching of Exploited Drupal Vulnerability

Patch exploited Drupal vulnerability CVE-2026-9082 now and secure your site - learn how to protect against SQL injection attacks effectively today.

OSINTSights
OffSequence5d ago
🚨 CRITICAL SQL Injection (CVE-2026-42774) in Crocoblock JetEngine ≤ 3.8.8.1 (CVSS 9.3). Unauthenticated attackers could access sensitive DB data. No vendor patch yet — restrict access & monitor activity. More: https://radar.offseq.com/threat/cve-2026-42774-cwe-89-improper-neutralization-of-s-114434a4 #OffSeq #SQLInjection #WordPress