Rapid7 Discovers High-Severity SQL Injection Vulnerability

PostgreSQL Terminal Tool Injection Vulnerability Allows Remote Code Execution

itsecuritynews.info - 08:32

Researchers have uncovered a high-severity SQL injection vulnerability, CVE-2025-1094, affecting PostgreSQL’s interactive terminal tool, psql. ...

Experts discovered PostgreSQL flaw chained with BeyondTrust zeroday in targeted attacks

securityaffairs.co - 09:23

Threat actors are exploiting a zero-day SQL injection vulnerability in PostgreSQL, according to researchers from cybersecurity firm Rapid7. Rapid7...

CVE-2025-1094 impacts PostgreSQL with SQL Injection

thecyberthrone.in - 01:42

CVE-2025-1094 is a critical security vulnerability affecting the PostgreSQL interactive tool psql. This vulnerability presents significant risks to...

AMD Ryzen DLL Hijacking Vulnerability Let Attackers Execute Arbitrary Code

itsecuritynews.info - 08:31

A high-severity security vulnerability, identified as CVE-2024-21966, has been discovered in the AMD Ryzen™ Master Utility, a software tool designed...

PostgreSQL flaw exploited as zero-day in BeyondTrust breach

bleepingcomputer.com - 14:15

Rapid7's vulnerability research team says attackers exploited a PostgreSQL security flaw as a zero-day to breach the network of privileged access...

CVE-2024-32838 impacts Apache Fineract with SQL injection

thecyberthrone.in - 13:41

CVE-2024-32838 is a critical security vulnerability affecting Apache Fineract, a popular open-source core banking platform. This vulnerability...

Critical OpenSSL Vulnerability Allow Hackers to Launch Man-in-the-Middle Attacks

itsecuritynews.info - 11/Feb 21:32

The OpenSSL Project announced a high-severity vulnerability (CVE-2024-12797) affecting versions 3.2, 3.3, and 3.4 of the widely used cryptographic...

PAN-OS authentication bypass hole plugged, PoC is public (CVE-2025-0108)

itsecuritynews.info - 13/Feb 11:31

Palo Alto Networks has fixed a high-severity authentication bypass vulnerability (CVE-2025-0108) in the management web interface of its next-gen...

CVE-2025-25064 impacts Zimbra with SQL Injection

thecyberthrone.in - 10/Feb 16:03

CVE-2025-25064 is a critical security vulnerability identified in Zimbra Collaboration software, a widely used email and collaboration platform. This...

CVE-2025-0108 impacts PaloAlto PAN-OS

thecyberthrone.in - 13/Feb 14:52

CVE-2025-0108 is a high-severity vulnerability affecting Palo Alto Networks PAN-OS software. Description CVE-2025-0108 is an authentication bypass...

Rubriques :