sqlInjection
June 21, 2025 at 12:00 PM
sqlInjection
August 27, 2025 at 9:07 AM
Wir schrieben das Jahr 2024. #SQLInjection ist immer noch ein heisses Thema.
Bypassing airport security via SQL injection https://ian.sh/tsa
Bypassing airport security via SQL injection https://ian.sh/tsa
August 29, 2024 at 6:57 PM
Wir schrieben das Jahr 2024. #SQLInjection ist immer noch ein heisses Thema.
Bypassing airport security via SQL injection https://ian.sh/tsa
Bypassing airport security via SQL injection https://ian.sh/tsa
ServiceNow AI Platform hit by critical SQLi & auth bypass—patch today to protect data. #Security #ServiceNow #SQLInjection #Authorization #AIPlatform #Vulnerability https://thedailytechfeed.com/patch-alert-critical-authorization-flaws-in-servicenows-ai-platform/
September 25, 2026 at 12:23 PM
ServiceNow AI Platform hit by critical SQLi & auth bypass—patch today to protect data. #Security #ServiceNow #SQLInjection #Authorization #AIPlatform #Vulnerability https://thedailytechfeed.com/patch-alert-critical-authorization-flaws-in-servicenows-ai-platform/
December 10, 2023 at 8:25 PM
Roundcube SQL injection flaw (CVE-2026-48842) is being actively exploited—patch to 1.6.16 or 1.7.1 now. #SecurityNews #Cybersecurity #Roundcube #SQLInjection #EmailSecurity https://thedailytechfeed.com/urgent-fix-issued-as-roundcube-sql-injection-vulnerability-now-actively-exploited/
September 24, 2026 at 8:32 AM
Roundcube SQL injection flaw (CVE-2026-48842) is being actively exploited—patch to 1.6.16 or 1.7.1 now. #SecurityNews #Cybersecurity #Roundcube #SQLInjection #EmailSecurity https://thedailytechfeed.com/urgent-fix-issued-as-roundcube-sql-injection-vulnerability-now-actively-exploited/
SQL Injections: The only time typing ' OR 1=1-- makes me feel like a Digital Witch 🧙♀️
Protection against them:
- Sanitize your inputs
- Use prepared statements
- Lock your databases up
#cybersecurity #sqlinjection
Protection against them:
- Sanitize your inputs
- Use prepared statements
- Lock your databases up
#cybersecurity #sqlinjection
January 11, 2025 at 1:29 AM
SQL Injections: The only time typing ' OR 1=1-- makes me feel like a Digital Witch 🧙♀️
Protection against them:
- Sanitize your inputs
- Use prepared statements
- Lock your databases up
#cybersecurity #sqlinjection
Protection against them:
- Sanitize your inputs
- Use prepared statements
- Lock your databases up
#cybersecurity #sqlinjection
Roundcube Webmail is affected by CVE-2026-48842, a high-severity unauthenticated SQL injection in virtuser_query. Exploitation can expose messages, address books, and user identities. #Roundcube #SQLInjection #CVE202648842
Roundcube Webmail Vulnerability In Attackers’ Crosshairs
Threat actors are exploiting a high-severity Roundcube flaw, tracked as CVE-2026-48842, which enables unauthenticated SQL injection through the virtuser_query plugin. Successful attacks can expose messages, address books, user identities, and other sensitive database content, prompting Roundcube to release fixes in versions 1.6.16 and 1.7.1. #Roundcube #CVE-2026-48842 #virtuser_query...
www.hendryadrian.com
September 25, 2026 at 9:00 AM
Roundcube Webmail is affected by CVE-2026-48842, a high-severity unauthenticated SQL injection in virtuser_query. Exploitation can expose messages, address books, and user identities. #Roundcube #SQLInjection #CVE202648842
Little Timmy Tables
#Sqlinjection #database #excel #Bobbytables #security
https://programmerhumor.io/database-memes/little-timmy-tables-iey5
#Sqlinjection #database #excel #Bobbytables #security
https://programmerhumor.io/database-memes/little-timmy-tables-iey5
December 31, 2025 at 10:37 PM
Pra dar a entender que eles fazem parte de algum submundo e grupos que fazem operações complexas e ilegais e precisam preservar a identidade por conta de suas habilidades. Antigamente chamavam essa galera de “Havirgens” por causa do Havij que faz teste de SQLInjection automático
January 6, 2025 at 1:08 AM
Pra dar a entender que eles fazem parte de algum submundo e grupos que fazem operações complexas e ilegais e precisam preservar a identidade por conta de suas habilidades. Antigamente chamavam essa galera de “Havirgens” por causa do Havij que faz teste de SQLInjection automático
#KRITIS Sektor #Transport und #Verkehr
#Flughafen-#Sicherheitskontrollen in den USA über #SQLInjection umgangen
"Schwachstelle in der Online-Plattform des #FlyCASS-#Kontrollsystem's auszunutzen, um damit Zugänge zu #Sicherheitsbereichen zu erlangen..."
www.heise.de/news/TSA-Air...
#Flughafen-#Sicherheitskontrollen in den USA über #SQLInjection umgangen
"Schwachstelle in der Online-Plattform des #FlyCASS-#Kontrollsystem's auszunutzen, um damit Zugänge zu #Sicherheitsbereichen zu erlangen..."
www.heise.de/news/TSA-Air...
Flughafen-Sicherheitskontrollen in den USA über SQL-Injection umgangen
Sicherheitsforschern in den USA ist es gelungen, über SQL-Injection das FlyCASS-Sicherheitssystem zu täuschen und damit Zugangssperren zu umgehen.
www.heise.de
August 31, 2024 at 3:40 PM
#KRITIS Sektor #Transport und #Verkehr
#Flughafen-#Sicherheitskontrollen in den USA über #SQLInjection umgangen
"Schwachstelle in der Online-Plattform des #FlyCASS-#Kontrollsystem's auszunutzen, um damit Zugänge zu #Sicherheitsbereichen zu erlangen..."
www.heise.de/news/TSA-Air...
#Flughafen-#Sicherheitskontrollen in den USA über #SQLInjection umgangen
"Schwachstelle in der Online-Plattform des #FlyCASS-#Kontrollsystem's auszunutzen, um damit Zugänge zu #Sicherheitsbereichen zu erlangen..."
www.heise.de/news/TSA-Air...
Top 8 Types of Cyberattacks!
#phishing #ransomware #mitm #ddos #sqlinjection #xss #zeroday #dnsspooling #cybersecurity #cyber #infosec #infosecurity
#phishing #ransomware #mitm #ddos #sqlinjection #xss #zeroday #dnsspooling #cybersecurity #cyber #infosec #infosecurity
November 25, 2024 at 4:36 PM
Top 8 Types of Cyberattacks!
#phishing #ransomware #mitm #ddos #sqlinjection #xss #zeroday #dnsspooling #cybersecurity #cyber #infosec #infosecurity
#phishing #ransomware #mitm #ddos #sqlinjection #xss #zeroday #dnsspooling #cybersecurity #cyber #infosec #infosecurity
Learn how hackers are exploiting the CVE-2026-48842 Roundcube SQL injection vulnerability. Understand the risk and how to patch your webmail server immediately.
#Roundcube #CyberSecurity #SQLInjection #DataBreach #TechNews
#Roundcube #CyberSecurity #SQLInjection #DataBreach #TechNews
Active Exploitation Targets Roundcube Webmail Servers
A critical vulnerability can easily outlive its official patch if system administrators fail to update their servers expeditiously. Precisely this perilous scenario is currently unfolding surrounding the widely deployed Roundcube Webmail platform. Malicious actors are now actively weaponizing a severe SQL injection vulnerability, granting them the terrifying ability to assault the email infrastructure prior to any user authentication. On September 21, the Canadian Centre for Cyber Security drastically escalated its previous May advisory concerning Roundcube.
meterpreter.org
September 25, 2026 at 9:57 AM
Learn how hackers are exploiting the CVE-2026-48842 Roundcube SQL injection vulnerability. Understand the risk and how to patch your webmail server immediately.
#Roundcube #CyberSecurity #SQLInjection #DataBreach #TechNews
#Roundcube #CyberSecurity #SQLInjection #DataBreach #TechNews
This was one of our favorite talks from #defon32. This is a really clever approach to getting SQL injection at the protocol level.
#appsec #sqlinjection #hacking #applicationsecurity
www.youtube.com/watch?v=Tfg1...
#appsec #sqlinjection #hacking #applicationsecurity
www.youtube.com/watch?v=Tfg1...
DEF CON 32 - SQL Injection Isn't Dead Smuggling Queries at the Protocol Level - Paul Gerste
YouTube video by DEFCONConference
www.youtube.com
December 2, 2024 at 2:50 PM
This was one of our favorite talks from #defon32. This is a really clever approach to getting SQL injection at the protocol level.
#appsec #sqlinjection #hacking #applicationsecurity
www.youtube.com/watch?v=Tfg1...
#appsec #sqlinjection #hacking #applicationsecurity
www.youtube.com/watch?v=Tfg1...
Want to keep your financial data secure? You'll need to learn about SQL injection and how it can use malicious code to get to your private information:
#cybersecurity #itsecurityoperations #itsecurity #socservices #SQL #SQLinjection #cyberchallenges #cybercrime #cyberattack
#cybersecurity #itsecurityoperations #itsecurity #socservices #SQL #SQLinjection #cyberchallenges #cybercrime #cyberattack
October 3, 2025 at 10:00 AM
Want to keep your financial data secure? You'll need to learn about SQL injection and how it can use malicious code to get to your private information:
#cybersecurity #itsecurityoperations #itsecurity #socservices #SQL #SQLinjection #cyberchallenges #cybercrime #cyberattack
#cybersecurity #itsecurityoperations #itsecurity #socservices #SQL #SQLinjection #cyberchallenges #cybercrime #cyberattack
#IT At #38C3 #CCC showed massive #security gaps in #ePA, where medical data for 10s of millions Germans will be stored from 2025 on. The Federal Data Protection Supervisor who warned that this will happen was kicked. One attack vector is #SQLinjection. I do not believe this. Fucking #Database Noobs!
Die elektronische #Patientenakte weist große Sicherheitslücken auf, Fernzugriff auf jede beliebige ePA möglich
Chaos Communication Congress: „Das Narrativ der sicheren elektronischen Patientenakte ist nicht mehr zu halten“
Zwei Sicherheitsexpert:innen demonstrieren auf dem CCC-Kongress, wie leicht sie auf verschiedenen Wegen auf elektronische Patientenakten zugreifen können. Das Sicherheitskonzept der ePA ist aus ihrer…
netzpolitik.org
December 28, 2024 at 3:46 PM
#IT At #38C3 #CCC showed massive #security gaps in #ePA, where medical data for 10s of millions Germans will be stored from 2025 on. The Federal Data Protection Supervisor who warned that this will happen was kicked. One attack vector is #SQLinjection. I do not believe this. Fucking #Database Noobs!
るみのコードだからsqlinjection通りそうだね。
June 12, 2025 at 8:31 AM
るみのコードだからsqlinjection通りそうだね。
🚨 SuiteCRM ≤ 7.14.6 suffers inbound-email SQL injection AND PHP unserialize() RCE (CVSS 8.8)—full DB takeover + remote code execution. 😱
🔗👉 basefortify.eu/cve_reports/...
#SuiteCRM #SQLInjection #RCE #CyberSecurity
🔗👉 basefortify.eu/cve_reports/...
#SuiteCRM #SQLInjection #RCE #CyberSecurity
August 7, 2025 at 7:48 AM
🚨 SuiteCRM ≤ 7.14.6 suffers inbound-email SQL injection AND PHP unserialize() RCE (CVSS 8.8)—full DB takeover + remote code execution. 😱
🔗👉 basefortify.eu/cve_reports/...
#SuiteCRM #SQLInjection #RCE #CyberSecurity
🔗👉 basefortify.eu/cve_reports/...
#SuiteCRM #SQLInjection #RCE #CyberSecurity
A new data leak shows the dangers of secret, silent #stalkerware. An app known as #Catwatchful appears to be just as insecure as all the others.
The Catwatchful app’s user login database was vulnerable to a simple #SQLinjection attack. In #SBBlogwatch, we call for Little Bobby Tables.
The Catwatchful app’s user login database was vulnerable to a simple #SQLinjection attack. In #SBBlogwatch, we call for Little Bobby Tables.
Yet More Stalkerware Leaks Secret Data: ‘Catwatchful’ is Latest Nasty App
Content warning: Domestic abuse, stalking, controlling behavior, Schadenfreude, irony.
securityboulevard.com
July 4, 2025 at 4:20 PM
A new data leak shows the dangers of secret, silent #stalkerware. An app known as #Catwatchful appears to be just as insecure as all the others.
The Catwatchful app’s user login database was vulnerable to a simple #SQLinjection attack. In #SBBlogwatch, we call for Little Bobby Tables.
The Catwatchful app’s user login database was vulnerable to a simple #SQLinjection attack. In #SBBlogwatch, we call for Little Bobby Tables.
😱 Despite being alerted since Feb 2022, SicommNet STILL hasn’t fixed this vulnerability! ⚠️ Repeated messages via email, LinkedIn, and even CISA have been ignored, leaving systems wide open to attack. Time is running out—every second counts! ⏰💣 #SQLInjection #DataBreach
April 14, 2025 at 12:39 PM
😱 Despite being alerted since Feb 2022, SicommNet STILL hasn’t fixed this vulnerability! ⚠️ Repeated messages via email, LinkedIn, and even CISA have been ignored, leaving systems wide open to attack. Time is running out—every second counts! ⏰💣 #SQLInjection #DataBreach
Wenn ein security auditor sqlinjection potential bemängelt weil er eine Antwort der API bekommt, die Antwort aber UNAUTHORIZED ist, darf man dann irgendwann mal fragen was der eigentlich beruflich macht?
August 20, 2024 at 7:27 AM
Wenn ein security auditor sqlinjection potential bemängelt weil er eine Antwort der API bekommt, die Antwort aber UNAUTHORIZED ist, darf man dann irgendwann mal fragen was der eigentlich beruflich macht?
うちのサーバーにSQLInjectionしようとすると弾かれるようになりました。
July 6, 2025 at 3:20 PM
うちのサーバーにSQLInjectionしようとすると弾かれるようになりました。