Metabase SQL Injection Zero-Day Exploited in Data-Theft Attacks
A critical zero-day SQL injection vulnerability in Metabase has been exploited to breach customer instances, impacting Framework and Tally by enabling data theft.
Tag
#SQL Injection
3 results in the archive.
Attackers Use Oracle SQL Injection to Compile Khunt Toolkit for SYSTEM Access
An Oracle database SQL injection vulnerability was exploited to compile and run the Khunt post-exploitation toolkit entirely within the database engine, avoiding writing executables to disk.
WordPress Core SQL Injection Vulnerability CVE-2026-63030 Exploited
A critical SQL injection vulnerability identified as CVE-2026-63030 affects WordPress Core and is actively exploited, allowing unauthenticated remote code execution.