
Vulnerabilities
Znuny SQL Injection in Ticket Search Allows Data Theft
Unpatched Znuny instances are vulnerable to SQL injection via the ContentSearch parameter, risking unauthorized access to ticket data.
Read moreEverything BlueTeam Insider has reported about SQL injection: 3 stories, newest first. Part of our Vulnerabilities coverage.

Unpatched Znuny instances are vulnerable to SQL injection via the ContentSearch parameter, risking unauthorized access to ticket data.
Read more
Many developers believe modern frameworks prevent SQL injection, yet raw string concatenation in dynamic queries remains a persistent and easily overlooked vulnerability in enterprise applications.
Read more
A critical flaw in PHPNuxBill’s FreeRADIUS endpoint enables attackers to steal customer records without credentials using blind SQL injection techniques.
Read more