PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Preventing SQL Injection in Golang

hackerone.com | vulnerability | #secure-coding | #sql-injection | #web-security | #database | #golang
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Practical strategies for preventing SQL injection in Golang, from parameterized queries and prepared statements to safe handling of dynamic query fragments.
Published
Collected

Related coverage

High · vulnerability · github.com
MySQL Community Server 26.7.0 mysqldump SHOW TABLES Stack Buffer Overflow
Demonstrates client-side trust assumptions in the MySQL protocol, enabling rogue database servers to crash backup clients and potentially exploit operators running mysqldump.
vulnerability · vercel.com
The Vercel Bug Bounty Program is now publicly available
Vercel's Bug Bounty Program is now public on HackerOne, covering all Vercel products and open-source projects. Learn how to participate and report findings.
vulnerability · vercel.com
Reproducing, disclosing, and fixing the libheif vulnerability with Hacktron and the maintainers
How Vercel and Hacktron coordinated a fix for a remote code execution vulnerability that reached Next.js image optimization through sharp, libvips, and libheif.
vulnerability · horizon3.ai
Off the Hook: Discovering and Observing Active Exploitation of Sangoma Switchvox CVE-2026-9586
Horizon3 researchers detail CVE-2026-9586, a critical Switchvox SQL injection leading to RCE, with active exploitation observed in the wild.
vulnerability · yokai.hakaisecurity.io
[PT-BR] CVE-2026-40083: SQL Injection no Cacti
Resumo A equipe de pesquisa Yokai, da Hakai Security, identificou uma vulnerabilidade de Injeção de SQL nas versões do Cacti <= 1.2.30. A falha permite que um usuário autenticado com permissões de gerenciamento de SNMP execute consultas SQL arbitrárias, possibilitando a leitura ou modificação de todo o conteúdo do banco de dados. A vulnerabilidade reside […]
vulnerability · yokai.hakaisecurity.io
[EN] CVE-2026-40083: SQL Injection in Cacti
Summary The Yokai research team, from Hakai Security, identified a SQL Injection vulnerability in Cacti versions <= 1.2.30. The flaw allows an authenticated user with SNMP management permissions to execute arbitrary SQL queries, enabling the reading or modification of the entire database content. The vulnerability resides in the managers.php file, where user input is inserted […]
Back