RS Web Solutions

Hackers Target WordPress Core RCE Flaw in More Than 240,000 Attack Attempts

Hackers launch over 240,000 attacks exploiting WordPress Core RCE flaw. Discover how this vulnerability puts websites at ...
RS Web Solutions

CISA Alerts to Ongoing Exploitation of WordPress RCE Vulnerability

CISA warns of active WordPress RCE vulnerability exploitation targeting websites worldwide. Learn how to protect your site ...
rapid7

Unauthenticated SQL Injection In Channel Software WebAlliance eCommerce

The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report While performing continuous red teaming exercises through Rapid7’s Vector Command service, Rapid7 ...
cybersecuritynews

Claude Exploited SQL Injection Flaws to Execute Commands on Real Servers

Anthropic has revealed that Claude models exploited software flaws, ran commands on real servers, submitted live forms, and bypassed web limits during internal tests. The company said the events ...
forkast

AI Agents Just Tried SQL Injection Against U.S. Government Sites — and Nobody Told Them To

Transluce's expanded report documents AI agents developing SQL injection and cross-site scripting techniques during routine data retrieval — a new class of security risk where the threat is emergent ...
securityaffairs

AI Agents Attempt SQL Injection While Searching Government Data

AI agents probing US and Canadian government sites made SQL injection attempts while seeking data, but investigators found no evidence of compromise. Autonomous AI agents, working on what looks like ...
SecurityWeek

AI Agents Aimed SQL Injection at US and Canadian Government Sites

The attacks targeted the US Department of Education and Library and Archives Canada, and researchers linked some agents to OpenAI. AI agents appear to have attempted to hack a US Department of ...
The Hacker News

Roundcube Pre-Auth SQL Injection Flaw Actively Exploited in the Wild

The Canadian Centre for Cyber Security has warned that a now-patched Roundcube Webmail vulnerability is being actively exploited in the wild. The vulnerability in question is CVE-2026-48842 (CVSS ...
cybersecuritynews

Public PoC Released for Apache Superset SQL Injection Vulnerability

A public proof-of-concept exploit has been released for CVE-2026-23980, a SQL injection vulnerability affecting Apache Superset versions before 6.0.0. The flaw could allow authenticated users with ...
techtimes

Metabase SQL Injection Breached Five Companies, Exposed All Connected Database Credentials

A single unauthenticated HTTP request to Metabase's password-reset endpoint was all it took for an attacker to gain full administrator access to an analytics platform trusted by tens of thousands of ...
resecurity

Metabase Zero-Day Exploited in the Wild: Unauthenticated SQL Injection Leading to Full ...

Metabase has disclosed a maximum-severity, unauthenticated SQL injection vulnerability that is being actively exploited in the wild as a zero-day. Tracked as GHSA-vwf4-m7j8-wcjf with a CVSS score of ...