Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Znuny through 7.1.3 has an eval injection where config write access can run commands as the backup.pl user. See advisory ZSA-2025-03 and patch.
SQL injection through searchinput in search-report-details.php hits PHPGurukul Bank Locker 1.0. No fix is named, so restrict access and review query code.
SQL injection via mobilenumber in profile.php affects PHPGurukul Bank Locker 1.0. No fix is named, so restrict access and review the query code.
SQL injection via mobilenumber in edit-subadmin.php affects PHPGurukul Bank Locker 1.0. No fix is named, so restrict access and review the query code.
SQL injection via lockersize in edit-locker.php affects PHPGurukul Bank Locker 1.0. No fix is named, so restrict access and review the query code.
SQL injection via mobilenumber in edit-assign-locker.php affects PHPGurukul Bank Locker 1.0. No fix is named, so restrict access and review the query code.
Exim 4.98 before 4.98.1 allows remote SQL injection when SQLite hints and ETRN serialization are used. Update to 4.98.1, or 4.99.1 for rate limit setups.
SQL injection via pagetitle in contact-us.php affects PHPGurukul Bank Locker 1.0. No fix is named, so restrict access and review the query code.
SQL injection via editid in changeimage1.php affects PHPGurukul Bank Locker 1.0. No fix is named, so restrict access and review the query code.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.
