Skip to content
Brand Logo

CIRCLE WITH A DOT
  • T

    πŸ”΄ CRITICAL SQL Injection: CVE-2026-5963 Exposed!

    Uncategorized cybersecurity sqlinjection vulnerability infosec databreach
    1
    0 Votes
    1 Posts
    0 Views
    T
    CRITICAL SQL Injection: CVE-2026-5963 Exposed!A 9.8 CVSS score vulnerability just dropped! Hackers can steal your entire database without logging in.https://www.youtube.com/shorts/4FUiJ0eHrP4#cybersecurity #sqlinjection #vulnerability #infosec #databreach #cybersecurity #infosec #hacking #cve #vulnerability
  • offseq@infosec.exchangeO

    🚨 CRITICAL SQL Injection (CVE-2026-6887) in BorG SPM 2007: unauthenticated remote attackers can manipulate databases.

    Uncategorized offseq sqlinjection vuln infosec
    1
    1
    0 Votes
    1 Posts
    1 Views
    offseq@infosec.exchangeO
    CRITICAL SQL Injection (CVE-2026-6887) in BorG SPM 2007: unauthenticated remote attackers can manipulate databases. No patch, product EOL. Isolate or discontinue use ASAP. Details: https://radar.offseq.com/threat/cve-2026-6887-cwe-89-improper-neutralization-of-sp-f0a62364 #OffSeq #SQLInjection #Vuln #InfoSec
  • bsidesluxembourg@infosec.exchangeB

    πŸš€ New Talk Dropped for BSides Luxembourg 2026!

    Uncategorized bsidesluxembour graphql appsec websecurity sqlinjection
    1
    0 Votes
    1 Posts
    1 Views
    bsidesluxembourg@infosec.exchangeB
    New Talk Dropped for BSides Luxembourg 2026!️ π—ͺ𝗛𝗔𝗧’𝗦 π—’π—Ÿπ—— π—œπ—¦ π—‘π—˜π—ͺ: π—˜π—«π—£π—Ÿπ—’π—œπ—§π—œπ—‘π—š π—–π—Ÿπ—”π—¦π—¦π—œπ—– π—©π—¨π—Ÿπ—‘π—˜π—₯π—”π—•π—œπ—Ÿπ—œπ—˜π—¦ π—œπ—‘ π—šπ—₯π—”π—£π—›π—€π—Ÿ π—”π—£π—œπ—¦ – Aleksa ZatezaloModern tech doesn’t mean modern security. This session walks through a real-world penetration test where a production GraphQL API backed by PostgreSQL was compromised using classic attack techniquesβ€”from schema enumeration to identifying vulnerable resolvers and injection points.Follow the full exploitation chain from blind SQL injection to database superuser access, and uncover how broken authentication logic in GraphQL can expose sensitive data. With a live demo of GrapeQL, attendees will gain practical testing workflows and defensive strategies to properly secure GraphQL APIs.Aleksa Zatezalo is a security engineer and offensive security researcher with experience in cloud security, penetration testing, and exploit development. A contributor to projects like Metasploit and an active member of the security community, he focuses on building practical tools and techniques to uncover and fix real-world vulnerabilities. Conference Dates: 6–8 May 2026 | 09:00–18:00 14, Porte de France, Esch-sur-Alzette, Luxembourg️ Tickets: [https://2026.bsides.lu/tickets/](https://2026.bsides.lu/tickets/) Schedule Link: [https://pretalx.com/bsidesluxembourg-2026/schedule/](https://pretalx.com/bsidesluxembourg-2026/schedule/) View full schedule & build your agenda: [https://hackertracker.app/schedule?conf=BSIDESLUX2026](https://hackertracker.app/schedule?conf=BSIDESLUX2026) #BSidesLuxembourg2026 #GraphQL #AppSec #WebSecurity #SQLInjection #CyberSecurity