https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 17:42:29 +0000 https://cve.radiocsirt.org/vuln/cve-2026-81674 <p><strong>Affected:</strong> TOOOLS iSquad</p> <p>The endpoint ‘/ws/apiprensa/getVideoNextPrev’ is vulnerable to SQL injection via the id_ambito parameter. Unsanitized input is directly incorporated into a MariaDB query, allowing attackers to inject SQL syntax that interrupts the query&#39;s execution. The vulnerability results in detailed database error messages and exposes the internal structure of the queries, which could facilitate further exploitation.</p> <p><strong>Affected:</strong> TOOOLS iSquad</p> <p>The endpoint ‘/ws/apiprensa/getVideoNextPrev’ is vulnerable to SQL injection via the id_ambito parameter. Unsanitized input is directly incorporated into a MariaDB query, allowing attackers to inject SQL syntax that interrupts the query&#39;s execution. The vulnerability results in detailed database error messages and exposes the internal structure of the queries, which could facilitate further exploitation.</p> https://cve.radiocsirt.org/vuln/cve-2026-81674