ProFTPD: Code injection via mod_sql possible

The FTP server ProFTPD includes a module called mod_sql. It contains an SQL injection vulnerability that can ultimately lead ...
Dark Reading

AI Finds 38 Security Flaws in Electronic Health Record Platform

Flaws in OpenEMR's platform — used by more than 100,000 healthcare providers — enabled database compromise, remote code ...
GitHub

unnormalized-store-table-example.sql

-- Note: This table lacks 1NF because several rows contain multi-valued attributes (grouping). (101, '2023-10-01', 5001, 'Alice Smith', '[email protected]', 'USA ...
Mena FN

Operant AI Launches Codeinjectionguard To Defend AI Agents Against Runtime Code Injection Attacks

(MENAFN- GlobeNewsWire - Nasdaq) New capability intercepts and blocks malicious code at the point of execution, closing the critical gap between vulnerability discovery and real-time threat prevention ...
SecurityWeek

Claude Code, Gemini CLI, GitHub Copilot Agents Vulnerable to Prompt Injection via Comments

A researcher has disclosed the details of a prompt injection attack method named ‘Comment and Control’, which has been found to work against several popular AI code security and automation tools. The ...