همهٔ اخبار

Vulnerability in Payload CMS software

SQL Injection vulnerability (CVE-2026-63316) has been found in Payload CMS software.

SQL command injection in webmail

CVSSv3 Score: 7.7 An improper neutralization of special elements used in an SQL Command ("SQL Injection") vulnerability [CWE-89] in FortiMail webmail may allow an authenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests. Revised on 2026-10-13 00:00:00

Multiple Arbitrary File Read/Write via SQL Injection

CVSSv3 Score: 7.9 An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] in FortiAnalyzer, FortiManager, FortiManager Cloud and FortiAnalyzer Cloud may allow a low privileged user to execute arbitrary commands via crafted requests. Revised on 2026-10-13 00:00:00

HTML injection in WebUI

CVSSv3 Score: 4.9 An improper neutralization of script-related HTML tags in a web page in FortiManager and FortiAnalyzer may allow an attacker to perform a cross site scripting (XSS) attack via the Identify Provider name field. Revised on 2026-10-13 00:00:00

VU#162329: Multiple vulnerabilities in Thelia 2.6.0 and 2.6.1

Overview Thelia versions 2.6.0 and 2.6.1 contain multiple vulnerabilities relating to file management, Smarty templating, module installation, and administrative workflows. Successful exploitation of these issues could enable remote code execution (RCE), server-side template injection (SSTI), stored and reflected cross-site scripting (XSS), unauthorized URL redirection, and other risks that expose both server-side an…

[UPDATE] [mittel] Red Hat Enterprise Linux (PyMySQL): Schwachstelle ermöglicht SQL Injection

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um eine SQL Injection durchzuführen.

Anthropic Fast-Tracks AI Bug Reports to OSS Maintainers, Taps 11 Firms for OT Security

Splunk Patches 22 Vulnerabilities, Including Critical Flaw With CVSS 9.8

Inside the Exchange Inspector: How Tenable uses OpenAI GPT cyber models to review open-source AI agents

Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data

NCSC-2026-0408 [1.00] [M/H] Kwetsbaarheden verholpen in Kiteworks

Track organization-wide security risk in one dashboard

Why API Security Belongs in ECB Cyber Action Plans

Vijil DART tests AI agents for security flaws and policy violations

AI is turning offensive security into a continuous necessity

NCSC-2026-0403 [1.00] [M/H] Kwetsbaarheden verholpen in SonicWall SMA1000 Appliance

Multiples vulnérabilités dans les produits Veeam (07 octobre 2026)

Multiples vulnérabilités dans Sonicwall Secure Mobile Access (07 octobre 2026)

Multiples vulnérabilités dans GLPI (07 octobre 2026)

FBI removes contractor working with its PeopleSoft system after data breach, says report

How to mitigate the risk from AI-generated apps built by your 'citizen coder' employees

Introducing Wiz AI SAST: Application Security that Understands Your Code and Your Infrastructure

Google’s bug bounty pause highlights growing AI vulnerability triage challenge

AI Agents Attempt SQL Injection While Searching Government Data

Follow the thread: a new dashboard to investigate account abuse

AI Agents Aimed SQL Injection at US and Canadian Government Sites

AI Has Changed Attack Speed, Not Security Fundamentals

Legit Security extends automated fixes to vulnerable open-source dependencies

500,000 Active Credentials Left Exposed on GitHub

Vulnerability & Patch Roundup — September 2026