In a recent SQL assessment, participants faced a unique challenge: they were not allowed to run their code to check the results. The test consisted of four problems, split evenly between medium and hard difficulties, to be completed within 25 minutes. These problems often required complex operations such as multiple joins and Common Table Expressions (CTEs). Participants managed to complete three out of the four problems but received no feedback on the accuracy of their solutions. Instead, the assessment focused solely on the logical soundness of the code. This approach differs from common practice resources like LeetCode and Data Lemur, where running code is typically permitted.
N$
@nav1n0x
·
2h CVE-2025-32993 issued for my latest finding: an SQL Injection in a widely used Help Desk & Live Chat platform. Full write-up with PoC:
https://nav1n.medium.com/sql-injection-in-vision-helpdesk-tools-a83dfc27f3ab…
#BugBounty #Infosec #CVE #SQLi
Mustafa Can İPEKÇİ
@mcipekci
·
Feb 2 While life hits hard due to decisions made in seconds, I always believed that sharing is caring. Despite some suggesting I open a course on SQL injection, I will never do it.
Here’s how I exploited SQL injection on applications with limited verbose errors and no single quotes
Pogman
@Mahfuzurocks
·
Apr 10 I can’t run the job, I can’t deploy the job, I can’t view the dataI literally can only push code but can’t run any of it. I hate permissions
CVEFind.com
@CveFindCom
·
21h [CVE-2025-22371: CRITICAL] SQL Injection vulnerability in SicommNet BASEC login page allows remote attackers to bypass authentication & execute SQL commands. No patch available as of date.#cybersecurity,#vulnerability https://cvefind.com/CVE-2025-22371
Intigriti
@intigriti
·
Feb 12 You’ve found an SQL injection vulnerability
But keywords such as SELECT, SLEEP, and UNION are all filtered and removed from your input…
What do you use to prove your SQL injection?
J.J.
@JJ_BarSinister
·
Apr 11 Check your joins or any logic operations in your SQL statements.
Look up using EXPLAIN ANALYZE and/or Performance Schema to ascertain what’s holding you back.
To provide the best experiences, we use technologies like cookies to store and/or access device information. Consenting to these technologies will allow us to process data such as browsing behavior or unique IDs on this site. Not consenting or withdrawing consent, may adversely affect certain features and functions.
Functional
Always active
The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network.
Preferences
The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.
Statistics
The technical storage or access that is used exclusively for statistical purposes.The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.
Marketing
The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes.
