DEV Community

#sqlinjection

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Two SQL Injection Flaws in Zabbix, and Why the API Account Is the Real Perimeter

Two SQL Injection Flaws in Zabbix, and Why the API Account Is the Real Perimeter

Comments
4 min read
CVE-2026-114625: A Read-Only Login Is Enough to Own Arista VeloCloud Orchestrator

CVE-2026-114625: A Read-Only Login Is Enough to Own Arista VeloCloud Orchestrator

Comments
3 min read
Detecting Abuse of the SPL2 Module Catalog: CVE-2026-76270

Detecting Abuse of the SPL2 Module Catalog: CVE-2026-76270

Comments
2 min read
Metabase CVE-2026-72898: an unauthenticated SQL injection that hands over the data warehouse

Metabase CVE-2026-72898: an unauthenticated SQL injection that hands over the data warehouse

Comments
4 min read
CVE-2026-48842: Pre-Auth SQL Injection in Roundcube's virtuser_query Plugin

CVE-2026-48842: Pre-Auth SQL Injection in Roundcube's virtuser_query Plugin

Comments 1
4 min read
Exploitation Conditions in CVE-2026-75682: What a Low-Privileged Account Buys an Attacker

Exploitation Conditions in CVE-2026-75682: What a Low-Privileged Account Buys an Attacker

Comments 1
3 min read
Adobe Connect 12.12: Why a 9.9 SQL Injection Deserves Its Own Patch Window

Adobe Connect 12.12: Why a 9.9 SQL Injection Deserves Its Own Patch Window

Comments 1
4 min read
The Operational Risk of a Pre-Auth Mail Flaw: CVE-2026-48842 in Context

The Operational Risk of a Pre-Auth Mail Flaw: CVE-2026-48842 in Context

1
Comments
3 min read
CVE-2026-76461: SQL injection in an email gateway reaches root on the appliance

CVE-2026-76461: SQL injection in an email gateway reaches root on the appliance

1
Comments
2 min read
Shared Hosting and CVE-2026-48842: When One Mail Server Holds Every Tenant

Shared Hosting and CVE-2026-48842: When One Mail Server Holds Every Tenant

Comments 1
3 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.