Vulnerability Spotlight: TALOS-2018-0560 - ERPNext SQL Injection Vulnerabilities

Summary: Cisco Talos published TALOS-2018-0560 on September 6, 2018, a Vulnerability Spotlight covering SQL injection vulnerabilities in ERPNext. The post is credited to Holger Unterbrink.
What's compelling: SQL injection in an ERP platform puts the system of record for finance and operations directly at risk, and a Talos advisory signals the flaw was serious enough to warrant public disclosure.

Read the original at Cisco Talos ↗

Topics: Supply Chain & AppSec
Related: Kitesurf is now open source Cyber Risks · Nov 13, 2026
Trained to betray: How post-training supply chain attacks hijack coding agents Cyber Risks · Nov 12, 2026
ZDI-26-913: (0Day) Meta fairseq load_audio_path Code Injection Remote Code Execution Vulnerability Cyber Risks · Nov 11, 2026