Attackers chained SQL injection with Oracle’s embedded Java capabilities to hide a custom post-exploitation toolkit inside ...

Panel patches CVE-2026-58048, which could let authenticated customers run SQL as database root and, in some setups, ...

Hackers exploited a SQL injection vulnerability to install a post-exploitation toolkit directly inside an Oracle database ...

Attackers compile khunt inside Oracle after a web SQL injection, reach Windows SYSTEM, and stage credential data and registry ...

A critical Metabase SQL injection vulnerability was exploited in zero-day attacks to breach customer instances in data theft ...

A single unauthenticated HTTP request to Metabase's password-reset endpoint was all it took for an attacker to gain full administrator access to an analytics platform trusted by tens of thousands of ...

The critical zero-day can provide direct SQL access to Metabase’s underlying database, potentially exposing credentials, API keys, and other sensitive data.

Monetary penalties are pretty self-explanatory, but are reserved only for the very worst and most flagrant UK GDPR offenses. These can reach up to £17.5 million ($23.6 million), or 4 percent of the ...

A post-exploitation toolkit has been found compiled and stored inside an Oracle database as schema objects, giving attackers ...

The Indian Computer Emergency Response Team (CERT-In) has issued a warning regarding critical vulnerabilities in various Microsoft products, including Teams, Office, and Azure services.

Microsoft and Apple released patches for multiple vulnerabilities across their products, including critical-severity issues.

Customers run the same Base Database Service available in OCI on a compact engineered system called Data Infrastructure Cloud@Customer X11. The 8U system is installed at a customer’s facility, and ...