SQL - CVE CyberSecurity Database News (Page 62)

Feb 20, 2024 SQL PHP

CVE-2024-25428 - How Hackers Can Exploit SQL Injection in MRCMS v3.1.2 to Run System Commands

In February 2024, a critical security flaw—CVE-2024-25428—was announced for MRCMS version 3.1.2, a popular content management system used in various web

Feb 20, 2024 Exploit SQL Java Apache

CVE-2024-22369 - Deserialization of Untrusted Data in Apache Camel SQL Component — Full Analysis & Exploit Example

CVE-2024-22369 uncovers a serious vulnerability in the Apache Camel SQL component resulting from unsafe deserialization of untrusted data. This flaw affects critical Apache Camel versions,

Feb 19, 2024 SQL Java pgjdbc

CVE-2024-1597 - SQL Injection in PostgreSQL JDBC Driver (`pgjdbc`) via PreferQueryMode=SIMPLE

A recent vulnerability, CVE-2024-1597, affects the PostgreSQL JDBC Driver, also known as pgjdbc. This flaw allows attackers to perform SQL injection attacks if the driver

Feb 17, 2024 Exploit SQL Java Oracle Oracle Corporation Database - Enterprise Edition

CVE-2024-20903 - Exploiting Java VM in Oracle Database Server – A Hands-On Explainer

In January 2024, Oracle disclosed a new vulnerability—CVE-2024-20903—located in the Java VM component of the Oracle Database Server, impacting versions 19.3 through

Feb 13, 2024 RCE Windows Microsoft Exploit SQL Windows 11 version 22H2

CVE-2024-21420 - Remote Code Execution in Microsoft WDAC OLE DB Provider for SQL Server—Details, Exploit, and Mitigation

--- Introduction In early 2024, Microsoft quietly patched a critical vulnerability—CVE-2024-21420—in the Windows Defender Application Control (WDAC) OLE DB Provider for SQL Server.