#sql-инъекция
-
Hackers Attack the Sangoma Switchvox VoIP Platform Through SQL Injection
Attackers are mass-exploiting the CVE-2026-9586 vulnerability in Sangoma Switchvox, which allows unauthenticated code execution and the deployment of a reverse shell.
-
Vulnerability in Popular WordPress Backup Plugin Threatens Takeover of Millions of Sites
An SQL injection in All-in-One WP Migration and Backup lets an unauthenticated attacker execute code and gain full control over a site. Only about a third of users have updated.
-
Three ServiceNow Vulnerabilities Rated CVSS 10.0 Open the Door to Remote Code Execution
ServiceNow has released fixes for four vulnerabilities in its AI platform; three of them received the maximum severity score and, under certain conditions, allow an unauthenticated attacker to execute code or SQL queries.
-
Adobe Patches Maximum-Severity CVSS 10.0 Flaw in Campaign Classic
A defect in Adobe's Campaign Classic marketing platform allows arbitrary code execution without any user interaction. The updates also address a series of critical holes in Adobe Bridge.
-
ProjectDiscovery researchers turned an SQL injection into remote code execution on Apple's infrastructure
The ProjectDiscovery team has published a report on an SQL injection vulnerability they discovered, which allowed them to achieve remote code execution in one of Apple's services. The details of the attack are described on the company's blog.