Technology ❯ Cybersecurity ❯ Vulnerabilities

SQL Injection

CVE-2026-21643 FortiClientEMS Cloud Security CVE-2026-44172 Fortinet FortiClient EMS CVE-2026-60137 Remote Code Execution Aviation Security CVE-2020-12271 CVE-2026-9082

3 ARTICLES

3w ago

Critical Metabase SQL Injection Exploited to Steal Customer Data

Cloud instances were patched after attackers used an unauthenticated SQL injection; self‑hosted operators must upgrade immediately because public proof‑of‑concept code is available.

5 ARTICLES

3w ago

Ally WordPress Plugin SQL Injection Leaves Hundreds of Thousands of Sites at Risk

12 ARTICLES

last yr.

U.S. Offers $10 Million Reward for Chinese Hacker Behind Global Firewall Attack

SQL Injection

Critical Metabase SQL Injection Exploited to Steal Customer Data

Metabase Zero‑Day SQL Injection Exploited to Steal Customer Data

SQL Injection Used to Compile Khunt Toolkit Inside Oracle Database

Hackers Exploiting WP2Shell Chain to Take Over Unpatched WordPress Sites

Attackers Poison More Than 700 Ghost CMS Sites to Push ClickFix Malware

Active Exploits Hit Drupal SQL Injection Flaw CVE-2026-9082

Hackers Exploit Critical LiteLLM SQL Injection Within 36 Hours of Advisory

Fortinet Releases Fixes for Critical FortiSandbox Flaws That Need No Login

Fortinet Rushes Hotfix as FortiClient EMS Zero-Day Sees Active Exploitation

Fortinet FortiClient EMS CVE-2026-21643 Now Under Active Exploitation

Ally WordPress Plugin SQL Injection Leaves Hundreds of Thousands of Sites at Risk

U.S. Offers $10 Million Reward for Chinese Hacker Behind Global Firewall Attack