SQL - CVE CyberSecurity Database News (Page 16)

Jan 21, 2025 API Exploit SQL Java

CVE-2024-43709 - Exploiting Resource Allocation Limits in Elasticsearch with SQL Functions

--- Elasticsearch is one of the most used search and analytics engines in the world, powering everything from simple enterprise search to massive public web

Jan 20, 2025 Exploit SQL PHP

CVE-2025-0585 - a+HRD by aEnrich Technology - Unauthenticated SQL Injection Explained

In January 2025, a new critical vulnerability—CVE-2025-0585—was disclosed in the a+HRD human resource management system developed by aEnrich Technology. This flaw is

Jan 20, 2025 API Exploit SQL

CVE-2025-0579 - Critical SQL Injection Vulnerability in Shiprocket Module for OpenCart (Exploit Guide & Analysis)

Published: June 2024 Severity: Critical CVSS Score: 9.8 (Critical) Recently, a serious vulnerability was discovered in the popular Shiprocket Module (versions 3 and 4)

Jan 18, 2025 WordPress SQL PHP

CVE-2025-0308 - How a Simple Search Led to a Serious SQL Injection in Ultimate Member for WordPress

In early 2025, security researchers uncovered a critical vulnerability in one of WordPress’s most popular membership plugins: Ultimate Member – User Profile, Registration, Login, Member

Jan 15, 2025 API SQL

CVE-2025-23061 - How Mongoose's Nested $where Filter in `populate().match` Leads to Search Injection (with Example and Exploit)

A new vulnerability, CVE-2025-23061, has been found in Mongoose, a widely-used MongoDB object modeling tool for Node.js. Versions before 8.9.5 are affected.