Zimbra releases critical security patches for multiple vulnerabilities in its Collaboration software, including a severe SQL injection flaw (CVE-2025-25064) with CVSS 9.8, XSS in Classic Web Client, and SSRF in RSS feed parser. Users urged to upgrade to latest versions for protection again...
A high-severity vulnerability (CVE-2025-22217) has been discovered in VMware Avi Load Balancer, allowing unauthenticated SQL injection attacks. Affecting versions 30.1.1 through 30.2.2, the flaw enables attackers with network access to execute malicious SQL queries. Patches are available, ...
Apache Traffic Control has patched a critical SQL injection vulnerability (CVE-2024-45387, CVSS 9.9) affecting versions 8.0.1 and earlier. The flaw allows privileged users to execute arbitrary SQL commands through PUT requests. Users should upgrade to version 8.0.2 immediately to address t...
