oracleasp-bypass.txt

Affected Software/Device: Oracle Application Server Portal Vulnerability: Authentication Bypass Tested Version: 10G Risk: Medium Description: Oracle Application Server Portal OracleAS Portal is a Web-based application for building and deploying portals. It provides a secure, manageable environmen...

[Full-disclosure] Oracle - Hardcoded Password and Password Reset of OUTLN User [DB13]

Oracle - Hardcoded Password and Password Reset of OUTLN User DB13 Systems Affected 9i Rel. 1 - 10g Rel. 2 Severity High Risk Category Hardcoded Default Password & Password Reset Vendor URL http://www.oracle.com/ Author Alexander Kornbrust Advisory 16 April 2008 V 1.00 Advisory URL...

[Full-disclosure] Oracle - SQL Injection in package SDO_UTIL [DB05]

Oracle - SQL Injection in package SDOUTIL DB05 Systems Affected 10g Rel. 1, 10g Rel. 2 Severity High Risk Category SQL Injection Vendor URL http://www.oracle.com/ Author Alexander Kornbrust Advisory 16 April 2008 V 1.00 Advisory URL...

Oracle XDB component PITRIG_TRUNCATE buffer overflow

Added: 02/01/2008 CVE: CVE-2008-0339 BID: 27229 OSVDB: 40300 Background The PITRIGTRUNCATE function is included in the XDB.XDBPITRIGPKG package which is included with Oracle Database. Problem A buffer overflow vulnerability in the PITRIGTRUNCATE function allows remote, authenticated attackers to...

Oracle 10g R1 pitrig_drop PLSQL Injection (get users hash)

No description provided by source. // / Oracle 10g R1 xDb.XDBPITRIGPKG.PITRIGDROP / / SQL Injection Exploit / // / sploit get password Hashes / // / BY Sh2kerr Digital Security / // / tested on oracle 10.1.0.2.0 / // // / Date of Public EXPLOIT: January 28, 2008 / / Written by: &...

Oracle 10g R1 xdb.xdb_pitrig_pkg Buffer Overflow Exploit (PoC)

No description provided by source. // / Oracle 10g R1 xDb.XDBPITRIGPKG.PITRIGTRUNCATE / / BUFFER OVERFLOW / // / POC exploit , Crash database / // / BY Sh2kerr Digital Security / // / tested on oracle 10.1.0.2.0 / // //...

Oracle Database 10G CTXSYS.DRVXTABX — PLSQL Injection

Application: Oracle Database 10G Versions Affected: Oracle 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4 Vendor URL: Bugs: PL/SQL Injections Exploits: YES Reported: 29.01.2008 Vendor response: 31.01.2008 CVE: CVE-2009-1991 SVSS2: 3.6 Date of Public Advisory: 26.10.2009 Solution: YES Non official Author:...

Oracle 10g R1 pitrig_truncate PLSQL Injection (get users hash)

No description provided by source. // / Oracle 10g R1 xDb.XDBPITRIGPKG.PITRIGTRUNCATE / / SQL Injection Exploit / // / sploit get password Hashes / // / BY Sh2kerr Digital Security / // / tested on oracle 10.1.0.2.0 / // // / Date of Public EXPLOIT: January 28, 2008 / / Written by: &nbsp...

Oracle 10g R1 xdb.xdb_pitrig_pkg PLSQL Injection (change sys password)

No description provided by source. // / Oracle 10g R1 xDb.XDBPITRIGPKG.PITRIGDROP / / SQL Injection Exploit / // / exploit change system password / // / BY Sh2kerr Digital Security / // / tested on oracle 10.1.0.2.0 / // // / Date of Public EXPLOIT: January 25, 2008 / / Written by: &nbs...

Oracle 10g R1 - xdb.xdb_pitrig_pkg PLSQL Injection (Change Sys Password)

Oracle 10g R1 - xdb.xdbpitrigpkg PLSQL Injection Change Sys Password // / Oracle 10g R1 xDb.XDBPITRIGPKG.PITRIGDROP / / SQL Injection Exploit / // / exploit change system password / // / BY Sh2kerr Digital Security / // / tested on oracle 10.1.0.2.0 / // // / Date of Public EXPLOIT: January 25,...

Oracle 10g R1 xdb.xdb_pitrig_pkg PLSQL Injection (change sys password)

Exploit for multiple platform in category local exploits ====================================================================== Oracle 10g R1 xdb.xdbpitrigpkg PLSQL Injection change sys password ====================================================================== // / Oracle 10g R1...

Oracle 10g R1 pitrig_drop PLSQL Injection (get users hash)

Exploit for multiple platform in category local exploits ========================================================== Oracle 10g R1 pitrigdrop PLSQL Injection get users hash ========================================================== // / Oracle 10g R1 xDb.XDBPITRIGPKG.PITRIGDROP / / SQL Injection...

Oracle 10g R1 - 'PITRIG_TRUNCATE' Get Users Hash / PL/SQL Injection

// / Oracle 10g R1 xDb.XDBPITRIGPKG.PITRIGTRUNCATE / / SQL Injection Exploit / // / sploit get password Hashes / // / BY Sh2kerr Digital Security / // / tested on oracle 10.1.0.2.0 / // // / Date of Public EXPLOIT: January 28, 2008 / / Written by: Alexandr "Sh2kerr" Polyakov / / email:...

Oracle 10g R1 - pitrig_drop Get Users Hash PLSQL Injection

Oracle 10g R1 - pitrigdrop Get Users Hash PLSQL Injection // / Oracle 10g R1 xDb.XDBPITRIGPKG.PITRIGDROP / / SQL Injection Exploit / // / sploit get password Hashes / // / BY Sh2kerr Digital Security / // / tested on oracle 10.1.0.2.0 / // // / Date of Public EXPLOIT: January 28, 2008 / / Written...

Oracle 10g R1 - PITRIG_TRUNCATE Get Users Hash PLSQL Injection

Oracle 10g R1 - PITRIGTRUNCATE Get Users Hash PLSQL Injection // / Oracle 10g R1 xDb.XDBPITRIGPKG.PITRIGTRUNCATE / / SQL Injection Exploit / // / sploit get password Hashes / // / BY Sh2kerr Digital Security / // / tested on oracle 10.1.0.2.0 / // // / Date of Public EXPLOIT: January 28, 2008 / /...

Oracle 10g R1 xdb.xdb_pitrig_pkg Buffer Overflow Exploit (PoC)

Exploit for multiple platform in category dos / poc ============================================================== Oracle 10g R1 xdb.xdbpitrigpkg Buffer Overflow Exploit PoC ============================================================== // / Oracle 10g R1 xDb.XDBPITRIGPKG.PITRIGTRUNCATE / / BUFFE...

Oracle 10g R1 - xdb.xdb_pitrig_pkg Buffer Overflow (PoC)

// / Oracle 10g R1 xDb.XDBPITRIGPKG.PITRIGTRUNCATE / / BUFFER OVERFLOW / // / POC exploit , Crash database / // / BY Sh2kerr Digital Security / // / tested on oracle 10.1.0.2.0 / // // / Date of Public EXPLOIT: January 28, 2008 / / Written by: Alexandr "Sh2kerr" Polyakov / / email:...

Oracle 10g R1 - xdb.xdb_pitrig_pkg PLSQL Injection (Change Sys Password)

// / Oracle 10g R1 xDb.XDBPITRIGPKG.PITRIGDROP / / SQL Injection Exploit / // / exploit change system password / // / BY Sh2kerr Digital Security / // / tested on oracle 10.1.0.2.0 / // // / Date of Public EXPLOIT: January 25, 2008 / / Written by: Alexandr "Sh2kerr" Polyakov / / email:...

oracle-dropsql.txt

// / Oracle 10g R1 xDb.XDBPITRIGPKG.PITRIGDROP / / SQL Injection Exploit / // / exploit change system password / // / BY Sh2kerr Digital Security / // / tested on oracle 10.1.0.2.0 / // // / Date of Public EXPLOIT: January 25, 2008 / / Written by: Alexandr "Sh2kerr" Polyakov / / email:...

Oracle 10g R1 - xdb.xdb_pitrig_pkg Buffer Overflow (PoC)

Oracle 10g R1 - xdb.xdbpitrigpkg Buffer Overflow PoC // / Oracle 10g R1 xDb.XDBPITRIGPKG.PITRIGTRUNCATE / / BUFFER OVERFLOW / // / POC exploit , Crash database / // / BY Sh2kerr Digital Security / // / tested on oracle 10.1.0.2.0 / // // / Date of Public EXPLOIT: January 28, 2008 / / Written by:...