The FTP server ProFTPD includes a module called mod_sql. It contains an SQL injection vulnerability that can ultimately lead to the execution of injected code.

Two vulnerabilities in the Avada Builder plugin for WordPress, with an estimated one million active installations, allow ...

The company — whose recent vulnerabilities have been hit with zero-day and n-day exploits — also released three patches for ...

Escape, Shannon, Strix, PentAGI, and Claude against a modern vulnerable application. Learn more about their detection rates, false positive rates, and scanning speed.

The use of agentic orchestration in security-critical workflows without multi-layered defense architecture can lead to ...

New research exposes how prompt injection in AI agent frameworks can lead to remote code execution. Learn how these ...

Security vulnerabilities in MCP servers for three popular database projects could let attackers execute unintended SQL statements on Apache Doris, exfiltrate sensitive metadata from Alibaba RDS, and ...

Researchers at security firm AISLE said they recently identified 38 vulnerabilities, including two maximum-severity zero-day flaws in OpenEMR, an open-source ...

SAP has released 15 new security notes, including two addressing critical code injection flaws in S/4HANA and Commerce.

Fortinet and Ivanti have released fixes for multiple vulnerabilities, including critical flaws leading to code execution.

A prompt injection attack hit Claude Code, Gemini CLI, and Copilot simultaneously. Here's what all three system cards reveal — and don't — about agent runtime protection.