This page collects WhisperX intelligence signals tagged #Data Breach Risk. It is designed for humans, search engines, and AI agents: each item links to a canonical source-backed record with sector, source, timestamp, credibility, and exportable structured data.
A critical SQL injection vulnerability has been publicly disclosed in PHPGurukul's Daily Expense Tracking System, version 1.1. The flaw resides in the `/register.php` file, where the 'email' parameter is not sanitized before being used in database queries. This allows attackers to inject malicious SQL code directly, po...
A critical SQL injection vulnerability has been identified within a core application file, exposing a direct path for attackers to execute arbitrary database commands. The flaw resides in a single line of code where user input is directly concatenated into an SQL query string without any sanitization or parameterizatio...
An autonomous security system has flagged a critical, active SQL injection vulnerability in a live application's login endpoint, directly exposing user data and triggering significant compliance and financial risk calculations. The vulnerability, automatically detected and verified by the KAVACH (Autonomous Defender) s...
An autonomous security system has flagged a live, low-severity vulnerability on a web application, directly linking the technical flaw to significant regulatory and financial exposure. The KAVACH Autonomous Defender, operating in Phase 7, generated an alert classified as 'recon_complete' against the root endpoint (`/`)...
A critical security vulnerability has been detected in Supabase projects, exposing database tables to public read, edit, and delete access. The flaw stems from the absence of Row-Level Security (RLS), a fundamental access control mechanism. Without RLS enabled, anyone possessing a project's URL can gain unrestricted, a...
A critical security flaw has been identified in the administrative API infrastructure where sensitive authentication credentials were being transmitted in plaintext API responses. The vulnerability, documented as issue #3246, affected the admin dashboard endpoint in src/routes/admin.js and exposed both Stripe API keys ...