Skip to content
Threat Feed
Subscribe

Product

CRM

2 briefs RSS
high advisory

Unauthenticated SQL Injection in Chanjet CRM (CVE-2021-48008)

Chanjet CRM contains an unauthenticated SQL injection vulnerability in the webservice endpoint, enabling remote attackers to extract sensitive data via the site_id parameter.

CRM web-application-vulnerability sql-injection cve-2021-48008
1r 1t 1c
critical advisory

Exploitation of CVE-2026-44747 in SAP NetWeaver ABAP via Memory Corruption

An authenticated attacker can exploit CVE-2026-44747, an out-of-bounds write vulnerability in SAP NetWeaver Application Server ABAP, to cause memory corruption leading to unauthorized data access, modification, or system unavailability, severely impacting confidentiality, integrity, and availability.

SAP NetWeaver Application Server ABAP +25 cve-2026-44747 memory-corruption sap netweaver abap out-of-bounds-write
4t 3c updated