Scan source code for SQL injection, command injection, and hardcoded credentials using this MCP. Works with Claude, Cursor, and Windsurf.

Ivanti has released November 2026 security updates for Endpoint Manager (EPM), Endpoint Manager Mobile (EPMM), Sentry, Cloud Services Application (CSA), and User Workspace Manager (UWM). The flaws expose…

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Deltaww DIAEnergie allows SQL Injection. This issue affects DIAEnergie: before 1.11.01.032.

Schneier et al have reframed prompt injection as

Zoho Corporation ManageEngine ADAudit Plus versions below 8703 are vulnerable to an authenticated SQL injection vulnerability in ADAudit Plus Reports API.

SQL injection in the LLM usage counters of Kong Gateway Enterprise and Kong AI Gateway may allow a client to execute arbitrary SQL against the Kong database via a crafted model name.

An unauthenticated SQL injection in the element search endpoint allows stacked query execution, enabling escalation to an administrator.

SQL injection in the database layer of Progressive Robot hMailServer 6.0.0-B1 through 6.2.18, when the server uses MySQL/MariaDB or PostgreSQL, allows a remote attacker to alter SQL statements the server runs. On those two engines parameters are not bound: SQLStatement::GenerateFromCommand wrote each value into the statement's text as a quoted …

Zoho Corporation ManageEngine ADAudit Plus versions below 8711 are vulnerable to an authenticated second order SQL injection vulnerability affecting ADAudit Plus custom reports module.

CompuGroup Medical XDent and XMedical expose PHP synchronization endpoints that do not properly validate input, enabling unauthenticated attackers to manipulate session variables and perform SQL Injection attacks against backend MySQL datab

A SQL injection vulnerability exists in a database migration script in flowintel. The migration process reads stored connector identifier values from the database and interpolates them directly into SQL statements without parameterization. An attacker who has previously written a malicious identifier value into the affected tables can cause arbitrary SQL …

Introduction: Modern AI and Large Language Model (LLM) architectures integrate autonomous SQL agents that process complex database interactions across shared enterprise infrastructures. When multi-tenant isolation fails due to unauthenticated requests or client-controlled context identifiers, adversaries can exploit these pathways to execute data exfiltration, injection, and configuration takeovers. Securing these environments requires strict transaction-level scoping and rigorous API parameter validation. Learning Objectives & Secrets: