https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T06:34:02.266073+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-341758 EUVD-2026-341758 2026-10-08T06:34:02.268216+00:00 EUVD-2026-341758 https://cve.radiocsirt.org/vuln/fkie_cve-2026-48236 fkie_cve-2026-48236 2026-10-08T06:34:02.268248+00:00

Open ISES Tickets before 3.44.2 contains a SQL injection vulnerability in db_loader.php where the multiple POST parameters (ticketsdb, ticketshost, ticketsuser, ticketspassword) are concatenated into mysqli connection arguments and dynamic SQL operating against an attacker-controlled database without sanitization. Authenticated attackers can craft requests that alter query semantics to read, modify, or destroy database contents.

 https://cve.radiocsirt.org/vuln/ghsa-4837-8524-277g GHSA-4837-8524-277g 2026-10-08T06:34:02.268279+00:00

Open ISES Tickets before 3.44.2 contains a SQL injection vulnerability in db_loader.php where the multiple POST parameters (ticketsdb, ticketshost, ticketsuser, ticketspassword) are concatenated into mysqli connection arguments and dynamic SQL operating against an attacker-controlled database without sanitization. Authenticated attackers can craft requests that alter query semantics to read, modify, or destroy database contents.