Feedly
SQL Injection Vulnerabilities Discovered in Kolay and DATABASE Software
First seen 20 Feb 2026, 23:17 UTC
•
•39.1
Export
Article Content
Browse articles
Two SQL injection vulnerabilities have been identified in software from Kolay Software Inc. and DATABASE Software Training Consulting Ltd. The vulnerabilities, CVE-2025-10970 and CVE-2025-9953, allow unauthenticated attackers to execute SQL injection attacks, potentially bypassing authorization controls. Both vendors were contacted but did not respond to the disclosures.
Analyzing cluster data...
Referenced clusters:
Something went wrong. Please try again.
Timeline
2026-02-19
CVE-2025-9953 published
2026-02-19
CVE-2026-25755 published
2026-02-20
CVE-2025-10970 published
More articles in this cluster
Continue Reading
CISA Warns U.S. After Cyberattack on Poland's Energy Grid Linked to Russian Hackers
Critical Zero-Day Vulnerability CVE-2026-20182 Exploited in Cisco SD-WAN Systems
Critical Joomla JCE Vulnerability Under Active Exploitation
Critical SonicWall SMA1000 Vulnerabilities Under Active Exploitation
Critical WebLogic RCE Vulnerability Exploited in the Wild
Critical Exploitation of Cisco CM and Samsung KNOX Vulnerabilities