SecurityWeek

Attackers Exploit Third Arista VCO Zero-Day in Four Months

Arista has patched CVE-2026-114625, a critical SQL injection flaw in VeloCloud Orchestrator exploited as a zero-day.
Help Net Security

Hackers exploit SQL injection flaw to steal patient data from Polish medical software provider

A data breach at Qbusoft's Medyc platform exposed the names, PESEL numbers and contact details of Polish patients.
BleepingComputer

Exploit for critical Fortra FileCatalyst Workflow SQLi flaw released

The Fortra FileCatalyst Workflow is vulnerable to an SQL injection vulnerability that could allow remote unauthenticated attackers to create rogue admin users and manipulate data on the application ...
Dark Reading

New SQL Injection Attacks Exploit Adobe Flash Flaw

Mass SQL injection attack, take four: Yet another wave of SQL injection attacks is exploiting an Adobe Flash vulnerability that appears to be coming from the same series of attacks originating from ...

Attackers exploit SQL vulnerability in Cisco’s Secure E-Mail Gateway

Attackers exploit critical SQL injection vulnerability in Cisco’s Secure E-Mail Gateway. Updates are available.
BleepingComputer

New Joomla SQL Injection Flaw Is Ridiculously Simple to Exploit

The Joomla CMS project released today Joomla 3.7.1 to fix an SQL injection flaw that allows attackers to execute custom SQL code on affected systems and take over vulnerable sites. Sucuri analyst Marc ...
techtarget

Understanding the risk SQL injection vulnerabilities pose

What's your situation with regard to web application SQL injection? Are you testing for it from all the right angles? Many people have discovered SQL injection vulnerabilities in their environments ...