» Tag

sql-injection

3 posts

Jul 18, 20269.011
Pre-Auth SQL Injection in WordPress Core via Batch API Desync
Array desync in WordPress's REST batch API enables pre-auth SQL injection (CVE-2026-63030/60137); details plus a fast bitmask extraction technique.
cve rest-api sql-injection vulnerability-research
Aug 18, 20268.31
GeoServer jsonArrayContains SQLi Confirmed Regression of CVE-2023-25158
GeoServer's GHSA-mqjf-5f49-2fjh SQL injection is a confirmed regression of CVE-2023-25158, enabling unauthenticated RCE. Patch and mitigation details inside.
cve geoserver geotools postgis
Jul 7, 20267.50
Why Trusting the Database for API Auth Is a Security Risk
A technical look at how HMAC-SHA512 signing, cryptographic peppers, and layered tenancy checks prevent SQL injection attacks from turning into full tenant takeovers.
api-security authentication backend-architecture cryptography
Ad
CommitBrief — AI code reviews, right in your terminal
A provider-agnostic, local-first CLI that reviews your staged changes, a historic range, or a whole GitHub pull request. Zero telemetry, no server. Free and open source.
commitbrief.com