Skip to content
Threat Feed
Subscribe

Tag

Impersonation

4 briefs RSS
critical advisory

SQL Injection Vulnerability in Budibase MySQL Integration

A critical SQL injection vulnerability was discovered in Budibase's MySQL integration (versions <= 3.38.1) that allows remote attackers to execute arbitrary SQL commands through user input fields due to the `multipleStatements: true` configuration, leading to complete database compromise.

Budibase Server +1 sql-injection web-application vulnerability nosql-injection data-exfiltration data-destruction application-vulnerability csrft +4
1r 7t
medium advisory

Monitor Email for Brand Abuse via Domain Permutations

This analytic identifies emails claiming to originate from domains similar to those being monitored for abuse by cross-referencing sender addresses with a lookup table of domain permutations, indicating potential phishing or brand impersonation.

Splunk Enterprise +2 brand-abuse email phishing impersonation
2r 1t
critical advisory

Rancher Fleet Helm Impersonation Bypass Vulnerability

Fleet's Helm deployer did not fully apply ServiceAccount impersonation in two code paths, allowing a tenant with git push access to a Fleet-monitored repository to read secrets from any namespace on every downstream cluster targeted by their `GitRepo`.

Fleet +5 rancher helm kubernetes impersonation privilege-escalation cve-2026-41050
2r 1t
critical advisory

Cisco Webex Services SSO Impersonation Vulnerability (CVE-2026-20184)

CVE-2026-20184 allows an unauthenticated, remote attacker to impersonate any user in Cisco Webex Services by exploiting improper certificate validation in single sign-on (SSO) integration with Control Hub, potentially granting unauthorized access.

Webex Services cve-2026-20184 webex sso impersonation authentication
2r 1t 1c