CVE-2026-85215: Improper Neutralization of Special Elements used in an SQL Command

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in GG Soft Software Services Inc. Paperwork allows SQL Injection. This issue affects Paperwork: through 2026-09-09...

CVE-2025-10968

CVE-2025-10968 concerns a SQL Injection in GG Soft PaperWork (versions 6.1.0.9390–6.1.0.9397) due to improper neutralization of special elements in SQL commands through the Hibernate layer. The vulnerability could enable Blind SQL Injection and standard SQL Injection. A fixed release is 6.1.0.939...