Hackers run khunt post-exploitation toolkit from Oracle database

Hackers exploited a SQL injection vulnerability to install a post-exploitation toolkit directly inside an Oracle database that was used to breach a corporate network. [...]

• bleepingcomputer.com/news/security/hackers-run-khunt-post-exploitation-toolkit-from-oracle-database/ (opens in a new tab)

• Hackers Start Probing Fresh Oracle EBS VulnerabilityHighVulnerability2026-10-28
• CVE-2026-115418: aws-redshift-alpha · AWSHighVulnerability2026-10-26
• EasyAppointments 1.5.1 · Blind SQL InjectionHighVulnerability2026-09-01
• Payload CMS 3.72.0 · Blind SQL InjectionHighVulnerability2026-09-01
• Attackers Exploit Third Arista VCO Zero-Day in Four MonthsCriticalVulnerability2026-10-23