EUVD-2020-5746

Malware in sbrugna...

ThreatsDay Bulletin: CarPlay Exploit, BYOVD Tactics, SQL C2 Attacks, iCloud Backdoor Demand & More

From unpatched cars to hijacked clouds, this week’s Threatsday headlines remind us of one thing — no corner of technology is safe. Attackers are scanning firewalls for critical flaws, bending vulnerable SQL servers into powerful command centers, and even finding ways to poison Chrome’s settings t...

PT-2023-5990 · Adobe · Commerce

Name of the Vulnerable Software and Affected Versions: Adobe Commerce versions 2.4.7-beta1 and earlier Adobe Commerce versions 2.4.6-p2 and earlier Adobe Commerce versions 2.4.5-p4 and earlier Adobe Commerce versions 2.4.4-p5 and earlier Description: The issue is related to the lack of protection...

OPENSUSE-SU-2022:0145-1 Security update for cacti, cacti-spine

This update for cacti, cacti-spine fixes the following issues: cacti-spine was updated to 1.2.20: Add support for newer versions of MySQL/MariaDB When checking for uptime of device, don't assume a non-response is always fatal Fix description and command trunctation issues Improve spine performanc...

CVE-2021-24141: Improper Neutralization of Special Elements used in an SQL Command

Unvaludated input in the Advanced Database Cleaner plugin, versions before 3.0.2, lead to SQL injection allowing high privilege users admin+ to perform SQL attacks...

GreenSQL Firewall 0.9.x WHERE Clause Secuity Bypass Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/36209/info GreenSQL Firewall is prone to a security-bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions. Successfully exploiting this issue may aid in SQL attacks on the...

Study: SQL Attacks Jump 69 Percent In Recent Months

The number of SQL attacks jumped by nearly two thirds earlier this year according to cloud hosting firm FireHost who recorded over 450,000 blocked SQL injection attacks between the first and second quarter this year. According to a report in ComputerWeekly, the firm claimed this week that it...

OneCMS 2.6.4 SQL Injection

=========================================================== OneCMS 2.6.4 Remote SQL insertion Vulnerability ----------------------------------------------------------- foun by :kurdish hackers team group : kurd-team contact : [email protected] site : kurdteam.org...

GreenSQL Firewall 0.9.x - WHERE Clause Security Bypass

GreenSQL Firewall 0.9.x - WHERE Clause Security Bypass source: https://www.securityfocus.com/bid/36209/info GreenSQL Firewall is prone to a security-bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions. Successfully exploiting this issue may aid in SQL...

GreenSQL Firewall 0.9.x - WHERE Clause Security Bypass

source: https://www.securityfocus.com/bid/36209/info GreenSQL Firewall is prone to a security-bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions. Successfully exploiting this issue may aid in SQL attacks on the underlying application. The following...

CVE-2001-1025

PHP-Nuke 5.x allows remote attackers to perform arbitrary SQL operations by modifying the "prefix" variable when calling any scripts that do not already define the prefix variable e.g., by including mainfile.php, such as article.php...