https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T19:36:01.772876+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-96428 fkie_cve-2026-96428 2026-09-29T19:36:01.801725+00:00

SQL Injection in the /WebAgenda/SMBAjaxAutoComplete.do API endpoint of Flowring Agentflow 4.0 version before 2025/08/08 allows remote attackers to execute arbitrary SQL commands via the words parameter.

 https://vulnerability.circl.lu/vuln/ghsa-m6wc-2jg2-2vh5 GHSA-m6wc-2jg2-2vh5 2026-09-29T19:36:01.801825+00:00

SQL Injection in the /WebAgenda/SMBAjaxAutoComplete.do API endpoint of Flowring Agentflow 4.0 version before 2025/08/08 allows remote attackers to execute arbitrary SQL commands via the words parameter.