https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-14T17:33:11.250532+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-24417 CVE-2026-24417 — OpenSTAManager has a Time-Based Blind SQL Injection with Amplified Denial of Service 2026-10-14T17:33:11.251708+00:00

Affected: devcode-it openstamanager

OpenSTAManager is an open source management software for technical assistance and invoicing. OpenSTAManager v2.9.8 and earlier contain a critical Time-Based Blind SQL Injection vulnerability in the global search functionality. The application fails to properly sanitize the term parameter before using it in SQL LIKE clauses across multiple module-specific search handlers, allowing attackers to inject arbitrary SQL commands and extract sensitive data through time-based Boolean inference.