惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

Google DeepMind News
Google DeepMind News
T
Threatpost
T
Tor Project blog
S
Schneier on Security
Project Zero
Project Zero
Know Your Adversary
Know Your Adversary
P
Proofpoint News Feed
K
Kaspersky official blog
P
Privacy International News Feed
Latest news
Latest news
Cisco Talos Blog
Cisco Talos Blog
T
The Exploit Database - CXSecurity.com
The Hacker News
The Hacker News
D
Docker
aimingoo的专栏
aimingoo的专栏
S
Securelist
C
Cyber Attacks, Cyber Crime and Cyber Security
Spread Privacy
Spread Privacy
TaoSecurity Blog
TaoSecurity Blog
T
The Blog of Author Tim Ferriss
T
Threat Research - Cisco Blogs
Simon Willison's Weblog
Simon Willison's Weblog
博
博客园 - 三生石上(FineUI控件)
人人都是产品经理
人人都是产品经理
Security Latest
Security Latest
V
Visual Studio Blog
WordPress大学
WordPress大学
J
Java Code Geeks
O
OpenAI News
T
Tailwind CSS Blog
S
Secure Thoughts
G
Google Developers Blog
博
博客园_首页
The Cloudflare Blog
The Register - Security
The Register - Security
A
Arctic Wolf
Y
Y Combinator Blog
阮一峰的网络日志
阮一峰的网络日志
B
Blog RSS Feed
IT之家
IT之家
美
美团技术团队
D
Darknet – Hacking Tools, Hacker News & Cyber Security
CTFtime.org: upcoming CTF events
CTFtime.org: upcoming CTF events
G
GRAHAM CLULEY
S
Security Affairs
奇客Solidot–传递最新科技情报
奇客Solidot–传递最新科技情报
Application and Cybersecurity Blog
Application and Cybersecurity Blog
P
Palo Alto Networks Blog
C
CERT Recently Published Vulnerability Notes
W
WeLiveSecurity

cs.DB updates on arXiv.org

Block-Sphere Vector Quantization GroupAffect-4: A Multimodal Dataset of Four-Person Collaborative Interaction CogScale: Scalable Benchmark for Sequence Processing TextAlign: Preference Alignment for Text Rendering with Hierarchical Rewards LogRouter: Adaptive Two-Level LLM Routing for Log Question Answering in Big Data Systems Agentic Cost-Aware Query Planning with Knowledge Distillation for Big Data Analytics Covariance Structure and Coordinate Heterogeneity Govern Binary Quantization of Contrastive Embeddings IVF-TQ: Calibration-Free Streaming Vector Search via a Codebook-Free Residual Layer Automatic Unsupervised Ensemble Outlier Model Selection--Extended Version A Generative AI Framework for Intelligent Utility Billing CO 2 Analytics and Sustainable Resource Optimisation Towards Foundation Models for Relational Databases with Language Models and Graph Neural Networks Gaussian Relational Graph Transformer Croissant Baker: Metadata Generation for Discoverable, Governable, and Reusable ML Datasets Reducing Hallucination in Vision-Language Models via Stage-wise Preference Optimization under Distribution Shift A Horn extension of DL-Lite with NL data complexity 3D Primitives are a Spatial Language for VLMs Enabling AI-Native Mobility in 6G: A Real-World Dataset for Handover, Beam Management, and Timing Advance A CAP-like Trilemma for Large Language Models: Correctness, Non-bias, and Utility under Semantic Underdetermination EpiCastBench: Datasets and Benchmarks for Multivariate Epidemic Forecasting FERMI: Exploiting Relations for Membership Inference Against Tabular Diffusion Models Toward Multi-Database Query Reasoning for Text2Cypher Autonomous FAIR Digital Objects: From Passive Assertions to Active Knowledge HOME-KGQA: A Benchmark Dataset for Multimodal Knowledge Graph Question Answering on Household Daily Activities Detect, Localize, and Explain: Interactive Hierarchical Log Anomaly Analytics with LLM Augmentation Open Ontologies: Tool-Augmented Ontology Engineering with Stable Matching Alignment Machine Learning-Based Pre-Test Risk Stratification for PCR-Confirmed Chlamydia Using Patient-Reported Data and Urine Biomarkers Reconciling Consistency-Based Diagnosis with Actual-Causality-Based Explanations PrepBench: How Far Are We from Natural-Language-Driven Data Preparation? Anatomy of a Query: W5H Dimensions and FAR Patterns for Text-to-SQL Evaluation Building informative materials datasets beyond targeted objectives Cross-Model Consistency of Feature Importance in Electrospinning: Separating Robust from Model-Dependent Features LUCAS-MEGA: A Large-Scale Multimodal Dataset for Representation Learning in Soil-Environment Systems Inconsistent Databases and Argumentation Frameworks with Collective Attacks Workspace-Bench 1.0: Benchmarking AI Agents on Workspace Tasks with Large-Scale File Dependencies FINER-SQL: Boosting Small Language Models for Text-to-SQL Efficient Temporal Datalog Materialisation for Composite Event Recognition EGREFINE: An Execution-Grounded Optimization Framework for Text-to-SQL Schema Refinement Reliable Answers for Recurring Questions: Boosting Text-to-SQL Accuracy with Template Constrained Decoding FineState-Bench: Benchmarking State-Conditioned Grounding for Fine-grained GUI State Setting ObjectGraph: From Document Injection to Knowledge Traversal -- A Native File Format for the Agentic Era A Toolkit for Detecting Spurious Correlations in Speech Datasets SiriusHelper: An LLM Agent-Based Operations Assistant for Big Data Platforms Evergreen: Efficient Claim Verification for Semantic Aggregates CacheRAG: A Semantic Caching System for Retrieval-Augmented Generation in Knowledge Graph Question Answering Health System Scale Semantic Search Across Unstructured Clinical Notes Mining Negative Sequential Patterns to Improve Viral Genomic Feature Representation and Classification Prior-Aligned Data Cleaning for Tabular Foundation Models Spark Policy Toolkit: Semantic Contracts and Scalable Execution for Policy Learning in Spark Versioned Late Materialization for Ultra-Long Sequence Training in Recommendation Systems at Scale EPM-RL: Reinforcement Learning for On-Premise Product Mapping in E-Commerce How Hard is it to Decide if a Fact is Relevant to a Query? Towards Universal Tabular Embeddings: A Benchmark Across Data Tasks Using ASP(Q) to Handle Inconsistent Prioritized Data A Demonstration of SQLyzr: A Platform for Fine-Grained Text-to-SQL Evaluation and Analysis Self-Aware Vector Embeddings for Retrieval-Augmented Generation: A Neuroscience-Inspired Framework for Temporal, Confidence-Weighted, and Relational Knowledge VTouch++: A Multimodal Dataset with Vision-Based Tactile Enhancement for Bimanual Manipulation Pre-Execution Query Slot-Time Prediction in Cloud Data Warehouses: A Feature-Scoped Machine Learning Approach Revisiting RaBitQ and TurboQuant: A Symmetric Comparison of Methods, Theory, and Experiments DW-Bench: Benchmarking LLMs on Data Warehouse Graph Topology Reasoning PersonalHomeBench: Evaluating Agents in Personalized Smart Homes NeuroLip: An Event-driven Spatiotemporal Learning Framework for Cross-Scene Lip-Motion-based Visual Speaker Recognition Blue Data Intelligence Layer: Streaming Data and Agents for Multi-source Multi-modal Data-Centric Applications RELOAD: A Robust and Efficient Learned Query Optimizer for Database Systems Credo: Declarative Control of LLM Pipelines via Beliefs and Policies Leveraging LLM-GNN Integration for Open-World Question Answering over Knowledge Graphs IndicDB -- Benchmarking Multilingual Text-to-SQL Capabilities in Indian Languages Multi-modal panoramic 3D outdoor datasets for place categorization Gypscie: A Cross-Platform AI Artifact Management System ODUTQA-MDC: A Task for Open-Domain Underspecified Tabular QA with Multi-turn Dialogue-based Clarification Graph Query Generation with Constraint-guided Large Language Agents CubeGraph: Efficient Retrieval-Augmented Generation for Spatial and Temporal Data LLM+Graph@VLDB'2025 Workshop Summary Memory in the LLM Era: Modular Architectures and Strategies in a Unified Framework Stream2LLM: Overlap Context Streaming and Prefill for Reduced Time-to-First-Token (TTFT) HeiSD: Hybrid Speculative Decoding for Embodied Vision-Language-Action Models with Kinematic Awareness Exploring Urban Land Use Patterns by Pattern Mining and Unsupervised Learning 100x Cost & Latency Reduction: Performance Analysis of AI Query Approximation using Lightweight Proxy Models From Natural Language to PromQL: A Catalog-Driven Framework with Dynamic Temporal Resolution for Cloud-Native Observability A Domain-Specific Language for LLM-Driven Trigger Generation in Multimodal Data Collection SpotIt+: Verification-based Text-to-SQL Evaluation with Database Constraints Relational In-Context Learning via Synthetic Pre-training with Structural Prior A Pythonic Functional Approach for Semantic Data Harmonisation in the ILIAD Project TableNet A Large-Scale Table Dataset with LLM-Powered Autonomous DPSQL+: A Differentially Private SQL Library with a Minimum Frequency Rule Sonar-TS: Search-Then-Verify Natural Language Querying for Time Series Databases KRONE: Scalable LLM-Augmented Log Anomaly Detection via Hierarchical Abstraction Hunt Instead of Wait: Evaluating Deep Data Research on Large Language Models OVT-MLCS: An Online Visual Tool for MLCS Mining from Long or Big Sequences Sufficient Explanations in Databases and their Connections to Database Repairs Gradient-Based Join Ordering Presenting DiaData for Research on Type 1 Diabetes Factual Inconsistencies in Multilingual Wikipedia Tables MINT: Multi-Vector Search Index Tuning Think2SQL: Reinforce LLM Reasoning Capabilities for Text2SQL In-depth Analysis of Graph-based RAG in a Unified Framework Knapsack Optimization-based Schema Linking for LLM-based Text-to-SQL Generation Goal-Driven Query Answering over First- and Second-Order Dependencies with Equality BEAVER: An Enterprise Benchmark for Text-to-SQL Auto-FP: An Experimental Study of Automated Feature Preprocessing for Tabular Data Querying Inconsistent Prioritized Data with ORBITS: Algorithms, Implementation, and Experiments
Data Retrieval over DNS in SQL Injection Attacks
Miroslav Stampar · 2013-03-13 · via cs.DB updates on arXiv.org

This paper describes an advanced SQL injection technique where DNS resolution process is exploited for retrieval of malicious SQL query results. Resulting DNS requests are intercepted by attackers themselves at the controlled remote name server extracting valuable data. Open source SQL injection tool sqlmap has been adjusted to automate this task. With modifications done, attackers are able to use this technique for fast and low profile data retrieval, especially in cases where other standard ones fail.

此内容由惯性聚合(RSS阅读器)自动聚合整理，仅供阅读参考。 原文来自 — 版权归原作者所有。