This 'classic' decades-old SQL injection flaw could let hackers take over entire Windows servers

Huntress spotted a white whale - a malicious toolkit stored as a database object.
CSO Online

Attackers hid malware inside Oracle Database after SQL injection breach

Attackers chained SQL injection with Oracle’s embedded Java capabilities to hide a custom post-exploitation toolkit inside the database and gain SYSTEM-level access to the underlying Windows server.