PostgreSQL Terminal Tool Injection Vulnerability Allows Remote Code Execution

Researchers have uncovered a high-severity SQL injection vulnerability, CVE-2025-1094, affecting PostgreSQL’s interactive terminal tool, psql. This flaw was identified during research into the exploitation of CVE-2024-12356, a remote code execution (RCE) vulnerability in BeyondTrust Privileged Remote Access (PRA) and Remote…

Experts discovered PostgreSQL flaw chained with BeyondTrust zeroday in targeted attacks

securityaffairs.co - 09:23

Threat actors are exploiting a zero-day SQL injection vulnerability in PostgreSQL, according to researchers from cybersecurity firm Rapid7. Rapid7...

Rapid7 Discovers High-Severity SQL Injection Vulnerability

australiancybersecuritymagazine.com.au - 01:10

Cybersecurity company Rapid7 has discovered a high-severity SQL injection vulnerability, CVE-2025-1094, affecting the PostgreSQL interactive tool...

CVE-2025-1094 impacts PostgreSQL with SQL Injection

thecyberthrone.in - 01:42

CVE-2025-1094 is a critical security vulnerability affecting the PostgreSQL interactive tool psql. This vulnerability presents significant risks to...

CISA Warns of Trimble Cityworks RCE Vulnerability Exploited to Hack IIS Servers

itsecuritynews.info - 08/Feb 04:09

The CISA has issued a warning regarding a critical remote code execution (RCE) vulnerability affecting Trimble Cityworks, a popular software solution...

Over 12,000 KerioControl firewalls exposed to exploited RCE flaw

bleepingcomputer.com - 10/Feb 23:58

Over twelve thousand GFI KerioControl firewall instances are exposed to a critical remote code execution vulnerability tracked as CVE-2024-52875....

CVE-2025-1240 impacts WinZip with a RCE

thecyberthrone.in - 11:57

CVE-2025-1240 is a critical security vulnerability affecting the popular file compression software WinZip. This vulnerability presents significant...

PostgreSQL flaw exploited as zero-day in BeyondTrust breach

bleepingcomputer.com - 14:15

Rapid7's vulnerability research team says attackers exploited a PostgreSQL security flaw as a zero-day to breach the network of privileged access...

30,000 WordPress Sites Exposed to Exploitation via File Upload Vulnerability

itsecuritynews.info - 13/Feb 13:05

A critical security vulnerability in the “Security & Malware scan by CleanTalk” plugin has left over 30,000 WordPress websites exposed to...

CVE-2025-0108 impacts PaloAlto PAN-OS

thecyberthrone.in - 13/Feb 14:52

CVE-2025-0108 is a high-severity vulnerability affecting Palo Alto Networks PAN-OS software. Description CVE-2025-0108 is an authentication bypass...

CVE-2024-53704 impacts SonicWall

thecyberthrone.in - 13/Feb 01:02

CVE-2024-53704 is a high-severity security vulnerability identified in SonicWall products, specifically within the SSLVPN authentication mechanism....

Rubriques :