https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T13:11:42.666890+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-14603 CVE-2025-14603 — Use of user input in raw SQL queries in vsDesk leading to blind SQL injection 2026-10-09T13:11:42.683336+00:00

Affected: vsDesk

The application component processes user-supplied parameters insecurely, passing them into SQL queries. This can enable blind SQL injection, potentially exposing database contents or causing the application to become unresponsive.  Apply patch from vendor https://vsdesk.ru/ . Versions 14.0101 and on have the patch.