Vulnerabilities
Block TCF Servlet Access to Stop Oracle EBS Remote Code Execution
Horizon3 researchers found an unauthenticated SQL injection in Oracle E-Business Suite that allows attackers to run commands on application servers without logging in.
SQL Injection
Everything BlueTeam Herald has reported about SQL Injection: 6 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Upgrade TYPO3 File Manager to 3.1.3 to fix CVE-2026-112238 SQLi and prevent sensitive data leaks
Unquoted search terms in the File Manager extension allow database queries to break out, exposing sensitive data to attackers.
Vulnerabilities
Update Helical Insight Past 7.0.0 to Stop Viewers From Injecting SQL and Altering Data Sources
Authenticated viewers can exploit CVE-2026-111634 to manipulate data sources via crafted report parameters in Helical Insight through version 7.0.0.
Vulnerabilities
Secure Slican IPx WebCTI Against SQL Injection in Admin Endpoint
Authenticated attackers can exploit SQL injection in Slican IPx WebCTI services running versions prior to 6.62.0100, requiring immediate patching.
Vulnerabilities
Upgrade WeGIA to 3.8.6 to stop CVSS 9.8 SQL injection from exposing billing and credentials
A critical SQL injection in WeGIA versions prior to 3.8.6 allows attackers to manipulate billing and credential data without authentication.
Data Breaches
Database Security FAQ: Protecting Records from Internal and External Threats
Most database breaches occur through misconfigured access controls rather than external hacking, meaning your internal policies matter more than your firewall rules.