+- Sinisterly (https://sinister.li)
+-- Forum: General (https://sinister.li/Forum-General)
+--- Forum: World News (https://sinister.li/Forum-World-News)
+--- Thread: Code Execution Flaw in SQLite affects copius amounts of software (/Thread-Code-Execution-Flaw-in-SQLite-affects-copius-amounts-of-software)
Code Execution Flaw in SQLite affects copius amounts of software - O9A - 12-17-2018
A newly discovered flaw in SQLite affects software made by Microsoft, Google, Adobe, to quote the original post.
"SQLite is one of the most popular database systems and it’s present in a significant number of operating systems, web application frameworks, web browsers, and various applications made by tech giants such as Adobe and Microsoft. In addition to Google Chrome, the open source web browser project Chromium powers Opera, Slimjet Browser, SRWare Iron, Torch, Comodo Dragon, CoolNovo, Yandex Browser, and Vivaldi."
Also a POC for you to mess around with. https://worthdoingbadly.com/sqlitebug/
RE: Code Execution Flaw in SQLite affects copius amounts of software - mothered - 12-18-2018
In terms of vulnerabilities, anything SQL-based, doesn't surprise me one bit.
Quite Interesting to read the number of entities affected.
RE: Code Execution Flaw in SQLite affects copius amounts of software - VilePyromancer - 12-20-2018
I have not had very good luck with SQL attacks. Granted I am relatively new to Kali Linux I still have not been able to successfully exploit any vulnerabilities besides on websites that are found with google dorks that are literally like YEARS old lol. Hey but then again I have not put a ton of research into SQL attacks, mostly have been researching and trying to learn about networks over on Cybrary. What is the best tool to use for SQL Injection? SQLite, SQLninja, SQLmap? Maybe I'm using a currently outdated tool. I noticed that a lot of the preinstalled tools on Kali Linux actually have better versions and alternatives available for download from other sources.