home.social

#sqlinjection — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #sqlinjection, aggregated by home.social.

  1. Analyst207 @[email protected] ·

    CISA Mandates Patching of Exploited Drupal Vulnerability

    The US Cybersecurity and Infrastructure Security Agency has issued a directive requiring federal agencies to patch a critical Drupal vulnerability, known as CVE-2026-9082, by May 27 to prevent devastating SQL injection attacks. This highly critical flaw allows hackers to exploit PostgreSQL-powered Drupal sites and gain unauthorized access to…

    osintsights.com/cisa-mandates-

    #DrupalVulnerability #Cve20269082 #SqlInjection #PatchManagement #Cisa

    #drupalvulnerability #cve20269082 #sqlinjection #patchmanagement #cisa
  2. Analyst207 @[email protected] ·

    Drupal Sites Targeted in SQL Injection Attacks

    Drupal sites are under attack as SQL injection exploits are now being detected in the wild, taking advantage of a vulnerability that can be triggered without authentication. This critical flaw, CVE-2026-9082, allows attackers to execute arbitrary SQL and potentially run remote code, putting sites that use PostgreSQL at risk.

    osintsights.com/drupal-sites-t

    #SqlInjection #Drupal #Cve20269082 #EmergingThreats #ArbitraryCodeExecution

    #sqlinjection #drupal #cve20269082 #emergingthreats #arbitrarycodeexecution
  3. Analyst207 @[email protected] ·

    Drupal Sites Targeted in SQL Injection Attacks

    Drupal sites are under attack as SQL injection exploits are now being detected in the wild, taking advantage of a vulnerability that can be triggered without authentication. This critical flaw, CVE-2026-9082, allows attackers to execute arbitrary SQL and potentially run remote code, putting sites that use PostgreSQL at risk.

    osintsights.com/drupal-sites-t

    #SqlInjection #Drupal #Cve20269082 #EmergingThreats #ArbitraryCodeExecution

    #sqlinjection #drupal #cve20269082 #emergingthreats #arbitrarycodeexecution
  4. Analyst207 @[email protected] ·

    Drupal Sites Targeted in SQL Injection Attacks

    Drupal sites are under attack as SQL injection exploits are now being detected in the wild, taking advantage of a vulnerability that can be triggered without authentication. This critical flaw, CVE-2026-9082, allows attackers to execute arbitrary SQL and potentially run remote code, putting sites that use PostgreSQL at risk.

    osintsights.com/drupal-sites-t

    #SqlInjection #Drupal #Cve20269082 #EmergingThreats #ArbitraryCodeExecution

    #sqlinjection #drupal #cve20269082 #emergingthreats #arbitrarycodeexecution
  5. Analyst207 @[email protected] ·

    Drupal Sites Targeted in SQL Injection Attacks

    Drupal sites are under attack as SQL injection exploits are now being detected in the wild, taking advantage of a vulnerability that can be triggered without authentication. This critical flaw, CVE-2026-9082, allows attackers to execute arbitrary SQL and potentially run remote code, putting sites that use PostgreSQL at risk.

    osintsights.com/drupal-sites-t

    #SqlInjection #Drupal #Cve20269082 #EmergingThreats #ArbitraryCodeExecution

    #arbitrarycodeexecution #emergingthreats #cve20269082 #drupal #sqlinjection
  6. Analyst207 @[email protected] ·

    Drupal Sites Targeted in SQL Injection Attacks

    Drupal sites are under attack as SQL injection exploits are now being detected in the wild, taking advantage of a vulnerability that can be triggered without authentication. This critical flaw, CVE-2026-9082, allows attackers to execute arbitrary SQL and potentially run remote code, putting sites that use PostgreSQL at risk.

    osintsights.com/drupal-sites-t

    #SqlInjection #Drupal #Cve20269082 #EmergingThreats #ArbitraryCodeExecution

    #sqlinjection #drupal #cve20269082 #emergingthreats #arbitrarycodeexecution
  7. OffSequence @[email protected] ·

    STER (Centralny Instytut Ochrony Pracy) faces a HIGH severity SQL Injection (CVE-2026-25606, CVSS 8.7). Authenticated attackers can access sensitive data via search filters. Patch by upgrading to v9.5. 🛡️ radar.offseq.com/threat/cve-20 #OffSeq #SQLInjection #Vuln #Infosec

    #offseq #sqlinjection #vuln #infosec
  8. OffSequence @[email protected] ·

    STER (Centralny Instytut Ochrony Pracy) faces a HIGH severity SQL Injection (CVE-2026-25606, CVSS 8.7). Authenticated attackers can access sensitive data via search filters. Patch by upgrading to v9.5. 🛡️ radar.offseq.com/threat/cve-20 #OffSeq #SQLInjection #Vuln #Infosec

    #offseq #sqlinjection #vuln #infosec
  9. OffSequence @[email protected] ·

    STER (Centralny Instytut Ochrony Pracy) faces a HIGH severity SQL Injection (CVE-2026-25606, CVSS 8.7). Authenticated attackers can access sensitive data via search filters. Patch by upgrading to v9.5. 🛡️ radar.offseq.com/threat/cve-20 #OffSeq #SQLInjection #Vuln #Infosec

    #infosec #vuln #sqlinjection #offseq
  10. OffSequence @[email protected] ·

    STER (Centralny Instytut Ochrony Pracy) faces a HIGH severity SQL Injection (CVE-2026-25606, CVSS 8.7). Authenticated attackers can access sensitive data via search filters. Patch by upgrading to v9.5. 🛡️ radar.offseq.com/threat/cve-20 #OffSeq #SQLInjection #Vuln #Infosec

    #offseq #sqlinjection #vuln #infosec
  11. OffSequence @[email protected] ·

    🚨 Drupal sites using PostgreSQL face a highly critical SQL injection vuln (CVE-2026-9082), risking RCE & data exposure. Patch versions 11.3, 11.2, 10.6, 10.5.x ASAP. Update Symfony & Twig too. No active exploitation yet. radar.offseq.com/threat/drupal #OffSeq #Drupal #SQLInjection #Infosec

    #offseq #drupal #sqlinjection #infosec
  12. OffSequence @[email protected] ·

    🚨 Drupal sites using PostgreSQL face a highly critical SQL injection vuln (CVE-2026-9082), risking RCE & data exposure. Patch versions 11.3, 11.2, 10.6, 10.5.x ASAP. Update Symfony & Twig too. No active exploitation yet. radar.offseq.com/threat/drupal #OffSeq #Drupal #SQLInjection #Infosec

    #offseq #drupal #sqlinjection #infosec
  13. OffSequence @[email protected] ·

    🚨 Drupal sites using PostgreSQL face a highly critical SQL injection vuln (CVE-2026-9082), risking RCE & data exposure. Patch versions 11.3, 11.2, 10.6, 10.5.x ASAP. Update Symfony & Twig too. No active exploitation yet. radar.offseq.com/threat/drupal #OffSeq #Drupal #SQLInjection #Infosec

    #infosec #sqlinjection #drupal #offseq
  14. OffSequence @[email protected] ·

    🚨 Drupal sites using PostgreSQL face a highly critical SQL injection vuln (CVE-2026-9082), risking RCE & data exposure. Patch versions 11.3, 11.2, 10.6, 10.5.x ASAP. Update Symfony & Twig too. No active exploitation yet. radar.offseq.com/threat/drupal #OffSeq #Drupal #SQLInjection #Infosec

    #offseq #drupal #sqlinjection #infosec
  15. Analyst207 @[email protected] ·

    Drupal Flaw Exposes PostgreSQL Sites to Remote Code Execution Attacks

    A vulnerability in Drupal Core's database abstraction API leaves PostgreSQL sites open to devastating SQL injection attacks, allowing hackers to send malicious requests and wreak havoc. This highly critical flaw, tracked as CVE-2026-9082, has been patched with urgent security updates.

    osintsights.com/drupal-flaw-ex

    #SqlInjection #RemoteCodeExecution #Postgresql #Drupal #Cve20269082

    #sqlinjection #remotecodeexecution #postgresql #drupal #cve20269082
  16. github.com/ghostwriter @[email protected] ·

    Patch immediately before public exploits emerge.

    drupal.org/sa-core-2026-004

    Affected:

    - 8.9.0 , < 10.4.10
    - 10.5.0 , < 10.5.10
    - 10.6.0 , < 10.6.9
    - 11.0.0 , < 11.1.10
    - 11.2.0 , < 11.2.12
    - 11.3.0 , < 11.3.10

    CVE-2026-9082 - Highly critical - SQL Injection
    CVE-2026-8495 - Missing Authorization
    CVE-2026-8493 - XSS
    CVE-2026-8492
    CVE-2026-8491

    #Drupal #PHP #CyberSecurity #Infosec #CVE #WebSecurity #PostgreSQL #SqlInjection #PrivilegeEscalation #XSS

    #drupal #php #cybersecurity #infosec #cve #websecurity
  17. github.com/ghostwriter @[email protected] ·

    Patch immediately before public exploits emerge.

    drupal.org/sa-core-2026-004

    Affected:

    - 8.9.0 , < 10.4.10
    - 10.5.0 , < 10.5.10
    - 10.6.0 , < 10.6.9
    - 11.0.0 , < 11.1.10
    - 11.2.0 , < 11.2.12
    - 11.3.0 , < 11.3.10

    CVE-2026-9082 - Highly critical - SQL Injection
    CVE-2026-8495 - Missing Authorization
    CVE-2026-8493 - XSS
    CVE-2026-8492
    CVE-2026-8491

    #Drupal #PHP #CyberSecurity #Infosec #CVE #WebSecurity #PostgreSQL #SqlInjection #PrivilegeEscalation #XSS

    #drupal #php #cybersecurity #infosec #cve #websecurity
  18. github.com/ghostwriter @[email protected] ·

    Patch immediately before public exploits emerge.

    drupal.org/sa-core-2026-004

    Affected:

    - 8.9.0 , < 10.4.10
    - 10.5.0 , < 10.5.10
    - 10.6.0 , < 10.6.9
    - 11.0.0 , < 11.1.10
    - 11.2.0 , < 11.2.12
    - 11.3.0 , < 11.3.10

    CVE-2026-9082 - Highly critical - SQL Injection
    CVE-2026-8495 - Missing Authorization
    CVE-2026-8493 - XSS
    CVE-2026-8492
    CVE-2026-8491

    #Drupal #PHP #CyberSecurity #Infosec #CVE #WebSecurity #PostgreSQL #SqlInjection #PrivilegeEscalation #XSS

    #xss #privilegeescalation #sqlinjection #postgresql #websecurity #cve
  19. github.com/ghostwriter @[email protected] ·

    Patch immediately before public exploits emerge.

    drupal.org/sa-core-2026-004

    Affected:

    - 8.9.0 , < 10.4.10
    - 10.5.0 , < 10.5.10
    - 10.6.0 , < 10.6.9
    - 11.0.0 , < 11.1.10
    - 11.2.0 , < 11.2.12
    - 11.3.0 , < 11.3.10

    CVE-2026-9082 - Highly critical - SQL Injection
    CVE-2026-8495 - Missing Authorization
    CVE-2026-8493 - XSS
    CVE-2026-8492
    CVE-2026-8491

    #Drupal #PHP #CyberSecurity #Infosec #CVE #WebSecurity #PostgreSQL #SqlInjection #PrivilegeEscalation #XSS

    #drupal #php #cybersecurity #infosec #cve #websecurity
  20. klausi @[email protected] ·

    #Drupal core - Highly critical - SQL injection - SA-CORE-2026-004

    Only affects Drupal sites that use Postgresql (5% of sites estimated by the security team)

    drupal.org/sa-core-2026-004

    #security #SQLinjection

    #drupal #security #sqlinjection
  21. klausi @[email protected] ·

    #Drupal core - Highly critical - SQL injection - SA-CORE-2026-004

    Only affects Drupal sites that use Postgresql (5% of sites estimated by the security team)

    drupal.org/sa-core-2026-004

    #security #SQLinjection

    #drupal #security #sqlinjection
  22. klausi @[email protected] ·

    #Drupal core - Highly critical - SQL injection - SA-CORE-2026-004

    Only affects Drupal sites that use Postgresql (5% of sites estimated by the security team)

    drupal.org/sa-core-2026-004

    #security #SQLinjection

    #drupal #security #sqlinjection
  23. klausi @[email protected] ·

    #Drupal core - Highly critical - SQL injection - SA-CORE-2026-004

    Only affects Drupal sites that use Postgresql (5% of sites estimated by the security team)

    drupal.org/sa-core-2026-004

    #security #SQLinjection

    #sqlinjection #security #drupal
  24. klausi @[email protected] ·

    #Drupal core - Highly critical - SQL injection - SA-CORE-2026-004

    Only affects Drupal sites that use Postgresql (5% of sites estimated by the security team)

    drupal.org/sa-core-2026-004

    #security #SQLinjection

    #drupal #security #sqlinjection
  25. OffSequence @[email protected] ·

    🚨 CRITICAL: CVE-2026-9065 in brainstormforce SureCart <4.2.1 allows authenticated SQL injection via REST API ('/surecart/v1/integrations/{id}'). Exploit bypasses escaping with a dot in payloads — full DB extraction possible. Patch now! radar.offseq.com/threat/cve-20 #OffSeq #SQLInjection #WordPress

    #offseq #sqlinjection #wordpress
  26. OffSequence @[email protected] ·

    🚨 CRITICAL: CVE-2026-9065 in brainstormforce SureCart <4.2.1 allows authenticated SQL injection via REST API ('/surecart/v1/integrations/{id}'). Exploit bypasses escaping with a dot in payloads — full DB extraction possible. Patch now! radar.offseq.com/threat/cve-20 #OffSeq #SQLInjection #WordPress

    #offseq #sqlinjection #wordpress
  27. OffSequence @[email protected] ·

    🚨 CRITICAL: CVE-2026-9065 in brainstormforce SureCart <4.2.1 allows authenticated SQL injection via REST API ('/surecart/v1/integrations/{id}'). Exploit bypasses escaping with a dot in payloads — full DB extraction possible. Patch now! radar.offseq.com/threat/cve-20 #OffSeq #SQLInjection #WordPress

    #wordpress #sqlinjection #offseq
  28. OffSequence @[email protected] ·

    🚨 CRITICAL: CVE-2026-9065 in brainstormforce SureCart <4.2.1 allows authenticated SQL injection via REST API ('/surecart/v1/integrations/{id}'). Exploit bypasses escaping with a dot in payloads — full DB extraction possible. Patch now! radar.offseq.com/threat/cve-20 #OffSeq #SQLInjection #WordPress

    #offseq #sqlinjection #wordpress
  29. Marcel SIneM(S)US @[email protected] ·

    #PostgreSQL: Updates stopfen hochriskante Sicherheitslecks | Security heise.de/news/PostgreSQL-Updat #SQL #Patchday #SQLinjection

    #postgresql #sql #patchday #sqlinjection
  30. Marcel SIneM(S)US @[email protected] ·

    #PostgreSQL: Updates stopfen hochriskante Sicherheitslecks | Security heise.de/news/PostgreSQL-Updat #SQL #Patchday #SQLinjection

    #postgresql #sql #patchday #sqlinjection
  31. Marcel SIneM(S)US @[email protected] ·

    #PostgreSQL: Updates stopfen hochriskante Sicherheitslecks | Security heise.de/news/PostgreSQL-Updat #SQL #Patchday #SQLinjection

    #sqlinjection #patchday #sql #postgresql
  32. Marcel SIneM(S)US @[email protected] ·

    #PostgreSQL: Updates stopfen hochriskante Sicherheitslecks | Security heise.de/news/PostgreSQL-Updat #SQL #Patchday #SQLinjection

    #postgresql #sql #patchday #sqlinjection
  33. OffSequence @[email protected] ·

    MEDIUM severity: CVE-2026-8724 in Dataease 2.10.20 allows SQL injection via SqlparserUtils.transFilter. Exploit requires high-priv user. No patch yet — restrict access & monitor for suspicious queries. More: radar.offseq.com/threat/cve-20 #OffSeq #SQLInjection #InfoSec

    #offseq #sqlinjection #infosec
  34. OffSequence @[email protected] ·

    MEDIUM severity: CVE-2026-8724 in Dataease 2.10.20 allows SQL injection via SqlparserUtils.transFilter. Exploit requires high-priv user. No patch yet — restrict access & monitor for suspicious queries. More: radar.offseq.com/threat/cve-20 #OffSeq #SQLInjection #InfoSec

    #offseq #sqlinjection #infosec
  35. OffSequence @[email protected] ·

    MEDIUM severity: CVE-2026-8724 in Dataease 2.10.20 allows SQL injection via SqlparserUtils.transFilter. Exploit requires high-priv user. No patch yet — restrict access & monitor for suspicious queries. More: radar.offseq.com/threat/cve-20 #OffSeq #SQLInjection #InfoSec

    #infosec #sqlinjection #offseq
  36. OffSequence @[email protected] ·

    MEDIUM severity: CVE-2026-8724 in Dataease 2.10.20 allows SQL injection via SqlparserUtils.transFilter. Exploit requires high-priv user. No patch yet — restrict access & monitor for suspicious queries. More: radar.offseq.com/threat/cve-20 #OffSeq #SQLInjection #InfoSec

    #offseq #sqlinjection #infosec
  37. OffSequence @[email protected] ·

    🚨 CRITICAL: CVE-2026-46364 in phpMyFAQ <4.1.2 allows unauthenticated SQL injection via /api/captcha. Attackers can exfiltrate user creds, admin tokens, and SMTP info. Restrict endpoint & use WAF until patch is confirmed. radar.offseq.com/threat/cve-20 #OffSeq #SQLInjection #Infosec

    #offseq #sqlinjection #infosec
  38. OffSequence @[email protected] ·

    🚨 CRITICAL: CVE-2026-46364 in phpMyFAQ <4.1.2 allows unauthenticated SQL injection via /api/captcha. Attackers can exfiltrate user creds, admin tokens, and SMTP info. Restrict endpoint & use WAF until patch is confirmed. radar.offseq.com/threat/cve-20 #OffSeq #SQLInjection #Infosec

    #offseq #sqlinjection #infosec
  39. OffSequence @[email protected] ·

    🚨 CRITICAL: CVE-2026-46364 in phpMyFAQ <4.1.2 allows unauthenticated SQL injection via /api/captcha. Attackers can exfiltrate user creds, admin tokens, and SMTP info. Restrict endpoint & use WAF until patch is confirmed. radar.offseq.com/threat/cve-20 #OffSeq #SQLInjection #Infosec

    #offseq #sqlinjection #infosec
  40. OffSequence @[email protected] ·

    🚨 CRITICAL: CVE-2026-46364 in phpMyFAQ <4.1.2 allows unauthenticated SQL injection via /api/captcha. Attackers can exfiltrate user creds, admin tokens, and SMTP info. Restrict endpoint & use WAF until patch is confirmed. radar.offseq.com/threat/cve-20 #OffSeq #SQLInjection #Infosec

    #infosec #sqlinjection #offseq
  41. OffSequence @[email protected] ·

    🚨 CRITICAL: CVE-2026-46364 in phpMyFAQ <4.1.2 allows unauthenticated SQL injection via /api/captcha. Attackers can exfiltrate user creds, admin tokens, and SMTP info. Restrict endpoint & use WAF until patch is confirmed. radar.offseq.com/threat/cve-20 #OffSeq #SQLInjection #Infosec

    #offseq #sqlinjection #infosec
  42. Analyst207 @[email protected] ·

    Avada Builder Flaws Expose WordPress Sites to Credential Theft

    A critical vulnerability in the Avada Builder WordPress plugin, used by an estimated one million active installations, leaves sites exposed to credential theft and data breaches. Two flaws, CVE-2026-4782 and CVE-2026-4798, allow attackers to read sensitive files and extract database information, putting your site at risk.

    osintsights.com/avada-builder-

    #Wordpress #AvadaBuilder #CredentialTheft #ArbitraryFileRead #SqlInjection

    #sqlinjection #arbitraryfileread #credentialtheft #avadabuilder #wordpress
  43. Analyst207 @[email protected] ·

    Avada Builder Flaws Expose WordPress Sites to Credential Theft

    A critical vulnerability in the Avada Builder WordPress plugin, used by an estimated one million active installations, leaves sites exposed to credential theft and data breaches. Two flaws, CVE-2026-4782 and CVE-2026-4798, allow attackers to read sensitive files and extract database information, putting your site at risk.

    osintsights.com/avada-builder-

    #Wordpress #AvadaBuilder #CredentialTheft #ArbitraryFileRead #SqlInjection

    #wordpress #avadabuilder #credentialtheft #arbitraryfileread #sqlinjection
  44. Marcel SIneM(S)US @[email protected] ·

    #SAP-#Patchday: Kritische Sicherheitslücken erlauben unbefugte Anmeldung | Security heise.de/news/SAP-Patchday-Kri #SQLinjection

    #sap #patchday #sqlinjection
  45. Marcel SIneM(S)US @[email protected] ·

    #SAP-#Patchday: Kritische Sicherheitslücken erlauben unbefugte Anmeldung | Security heise.de/news/SAP-Patchday-Kri #SQLinjection

    #sap #patchday #sqlinjection
  46. Marcel SIneM(S)US @[email protected] ·

    #SAP-#Patchday: Kritische Sicherheitslücken erlauben unbefugte Anmeldung | Security heise.de/news/SAP-Patchday-Kri #SQLinjection

    #sqlinjection #patchday #sap
  47. Marcel SIneM(S)US @[email protected] ·

    #SAP-#Patchday: Kritische Sicherheitslücken erlauben unbefugte Anmeldung | Security heise.de/news/SAP-Patchday-Kri #SQLinjection

    #sap #patchday #sqlinjection
  48. OffSequence @[email protected] ·

    🚨 CRITICAL: SQL injection (CVE-2026-34260, CVSS 9.6) in SAP S/4HANA (SAP_BASIS 751-816). Authenticated attackers can access sensitive data & crash apps. No patch yet — restrict access & monitor logs. radar.offseq.com/threat/cve-20 #OffSeq #SAP #Infosec #SQLInjection

    #offseq #sap #infosec #sqlinjection
  49. OffSequence @[email protected] ·

    🚨 CRITICAL: SQL injection (CVE-2026-34260, CVSS 9.6) in SAP S/4HANA (SAP_BASIS 751-816). Authenticated attackers can access sensitive data & crash apps. No patch yet — restrict access & monitor logs. radar.offseq.com/threat/cve-20 #OffSeq #SAP #Infosec #SQLInjection

    #offseq #sap #infosec #sqlinjection
  50. OffSequence @[email protected] ·

    🚨 CRITICAL: SQL injection (CVE-2026-34260, CVSS 9.6) in SAP S/4HANA (SAP_BASIS 751-816). Authenticated attackers can access sensitive data & crash apps. No patch yet — restrict access & monitor logs. radar.offseq.com/threat/cve-20 #OffSeq #SAP #Infosec #SQLInjection

    #offseq #sap #infosec #sqlinjection