Metabase SQLi zero-day exploited in customer data-theft attacks

A critical Metabase SQL injection vulnerability was exploited in zero-day attacks to breach customer instances in data theft ...
SecurityWeek

Metabase Patches Vulnerability Exploited as Zero-Day

A critical-severity SQL injection vulnerability in Metabase has been exploited as a zero-day to gain administrative privileges.
Dark Reading

Metabase SQL Zero-Day Attacks Could Have Wide Blast Radius

A zero-day SQL-injection vulnerability in Metabase Cloud is under exploitation in the wild, and it could spell trouble for many downstream organizations. Metabase, which provides AI-driven business ...

Hackers run khunt post-exploitation toolkit from Oracle database

Hackers exploited a SQL injection vulnerability to install a post-exploitation toolkit directly inside an Oracle database ...
CSO Online

Attackers hid malware inside Oracle Database after SQL injection breach

Attackers chained SQL injection with Oracle’s embedded Java capabilities to hide a custom post-exploitation toolkit inside ...
InfoWorld

Metabase SQLi exploit grants attackers total access

The critical zero-day can provide direct SQL access to Metabase’s underlying database, potentially exposing credentials, API keys, and other sensitive data. Business intelligence (BI) platform ...
Security

CISA, FBI urge manufacturers to eliminate SQL injection vulnerabilities

CISA and the Federal Bureau of Investigation (FBI) released a joint Secure by Design Alert, Eliminating SQL Injection Vulnerabilities in Software. This Alert was crafted in response to a recent, ...
dbta

Addressing SAP’s SQL Injection Attacks and Directory Traversal Vulnerabilities

SAP platforms, used by 99 of the Fortune 100 companies and with over 280 million cloud subscribers worldwide, are among the most reliable business applications. As SAP administrators, your role in ...