AcademyA critical SQL injection vulnerability in an authentication endpoint allows attackers to execute arbitrary SQL commands, access sensitive data, and manipulate the database.
AcademyPre-authenticated Remote Code Execution on POST /api/v1/projects via a stacked SQL injection in the JSON field tableName (interpolated by String.format into the FROM clause), abusing PgJDBC's multi-statement handling and a PostgreSQL superuser role to invoke COPY ... TO PROGRAM and run arbitrary OS commands as the postgres user.
AcademyA WebSSO path-normalization bypass (static-asset extension + %2e%2e) exposed a legacy connector's executor servlet, which concatenates a request parameter verbatim as a PL/SQL package name → unauthenticated arbitrary PL/SQL execution on production Oracle (error-based cross-schema read + reversible write proof).