Oracle - SYS.LT.MERGEWORKSPACE Evil Cursor

-- -- sys-lt-mergeworkspaceV2.sql -- -- -- Oracle SYS.LT.MERGEWORKSPACE exploit 9iR2/10gR1,10gR2,11gR1 -- Evil cursor technique -- -- Grant dba permission to unprivileged user -- -- -- REF: http://www.google.it/search?q=SYS.LT.MERGEWORKSPACE -- -- AUTHOR: Andrea "bunker" Purificato --...

Oracle SYS.LT.COMPRESSWORKSPACETREE Exploit

-- -- sys-lt-compressworkspacetreeV2.sql -- -- -- Oracle SYS.LT.COMPRESSWORKSPACETREE exploit 9iR2/10gR1,10gR2,11gR1 -- Evil cursor technique -- -- Grant dba permission to unprivileged user -- -- -- REF: http://www.google.it/search?q=SYS.LT.COMPRESSWORKSPACETREE -- -- AUTHOR: Andrea "bunker"...

Oracle SYS.LT.REMOVEWORKSPACE Exploit

-- -- sys-lt-removeworkspaceV2.sql -- -- -- Oracle SYS.LT.REMOVEWORKSPACE exploit 9iR2/10gR1,10gR2,11gR1 -- Evil cursor technique -- -- Grant dba permission to unprivileged user -- -- -- REF: http://www.google.it/search?q=SYS.LT.REMOVEWORKSPACE -- -- AUTHOR: Andrea "bunker" Purificato --...

Oracle SYS.LT.MERGEWORKSPACE Exploit

-- -- sys-lt-mergeworkspaceV2.sql -- -- -- Oracle SYS.LT.MERGEWORKSPACE exploit 9iR2/10gR1,10gR2,11gR1 -- Evil cursor technique -- -- Grant dba permission to unprivileged user -- -- -- REF: http://www.google.it/search?q=SYS.LT.MERGEWORKSPACE -- -- AUTHOR: Andrea "bunker" Purificato --...

Oracle exploit for CTXSYS.DRVXTABC.CREATE_TABLES and others

Hi! I've just released the working exploit for CTXSYS.DRVXTABC.CREATETABLES injection on Oracle DB 9i/10g CVE-2009-1991 You can find the code on my site, http://rawlab.mindcreations.com In particular, Classic SQL injection:...

Oracle ctxsys.drvxtabc.create_tables Cursor Exploit

-- -- ctxsys.drvxtabc.createtablesV2.sql -- -- -- Oracle ctxsys.drvxtabc.createtables exploit 9i/10g -- Evil cursor technique -- -- Grant dba permission to unprivileged user -- -- -- REF: http://www.google.it/search?q=ctxsys.drvxtabc.createtables -- -- AUTHOR: Andrea "bunker" Purificato --...

OpenJDK information leaks in mutable variables (6588003,6656586,6656610,6656625,6657133,6657619,6657625,6657695,6660049,6660539,6813167)

Sun Java SE 5.0 before Update 20 and 6 before Update 15, and OpenJDK, might allow context-dependent attackers to obtain sensitive information via vectors involving static variables that are declared without the final keyword, related to 1 LayoutQueue, 2 Cursor.predefined, 3...

OpenJDK information leaks in mutable variables (6588003,6656586,6656610,6656625,6657133,6657619,6657625,6657695,6660049,6660539,6813167)

Sun Java SE 5.0 before Update 20 and 6 before Update 15, and OpenJDK, might allow context-dependent attackers to obtain sensitive information via vectors involving static variables that are declared without the final keyword, related to 1 LayoutQueue, 2 Cursor.predefined, 3...

Oracle DB SQL Injection via SYS.LT.FINDRICSET Evil Cursor Method

This module will escalate an Oracle DB user to DBA by exploiting a sql injection bug in the SYS.LT.FINDRICSET package via Evil Cursor technique. Tested on oracle 10.1.0.3.0 -- should work on thru 10.1.0.5.0 and supposedly on 11g. Fixed with Oracle Critical Patch update October 2007. This module...

Oracle 10g SYS.LT.COMPRESSWORKSPACETREE SQL Injection Exploit

Exploit for multiple platform in category local exploits ============================================================= Oracle 10g SYS.LT.COMPRESSWORKSPACETREE SQL Injection Exploit ============================================================= This is based on cursor injection and does not need...

Oracle 10g - SYS.LT.COMPRESSWORKSPACETREE SQL Injection (2)

Oracle 10g - SYS.LT.COMPRESSWORKSPACETREE SQL Injection 2 This is slightly modified version of: http://milw0rm.com/exploits/7677 This is based on cursor injection and does not need create function privileges: DECLARE D NUMBER; BEGIN D := DBMSSQL.OPENCURSOR; DBMSSQL.PARSED,'declare pragma...

Oracle 10g SYS.LT.COMPRESSWORKSPACETREE SQL Injection

This is slightly modified version of: http://milw0rm.com/exploits/7677 This is based on cursor injection and does not need create function privileges: DECLARE D NUMBER; BEGIN D := DBMSSQL.OPENCURSOR; DBMSSQL.PARSED,'declare pragma autonomoustransaction; begin execute immediate ''grant dba to...

Oracle 10g - 'SYS.LT.COMPRESSWORKSPACETREE' SQL Injection (2)

This is slightly modified version of: http://milw0rm.com/exploits/7677 This is based on cursor injection and does not need create function privileges: DECLARE D NUMBER; BEGIN D := DBMSSQL.OPENCURSOR; DBMSSQL.PARSED,'declare pragma autonomoustransaction; begin execute immediate ''grant dba to...

Firefox browser engine crashes

The browser engine in Mozilla Firefox 3 before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 allows remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via vectors related to 1...

CVE-2009-1710

WebKit in Apple Safari before 4.0 allows remote attackers to spoof the browser's display of 1 the host name, 2 security indicators, and unspecified other UI elements via a custom cursor in conjunction with a modified CSS3 hotspot property...

Design/Logic Flaw

WebKit in Apple Safari before 4.0 allows remote attackers to spoof the browser's display of 1 the host name, 2 security indicators, and unspecified other UI elements via a custom cursor in conjunction with a modified CSS3 hotspot property...

Ubuntu Update for firefox vulnerabilities USN-428-1

Ubuntu Update for Linux kernel vulnerabilities USN-428-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4281.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for firefox vulnerabilities USN-428-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu Update for firefox regression USN-428-2

Ubuntu Update for Linux kernel vulnerabilities USN-428-2 OpenVAS Vulnerability Test $Id: gbubuntuUSN4282.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for firefox regression USN-428-2 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

MS Internet Explorer .ANI files handling Downloader Exploit (MS05-002)

No description provided by source. / Modified by Vertygo aka Ivanm [email protected] all credits goes to houseofdabus Berend-Jan Wever and to milw0rm/ / Added string.h /str0ke / / HOD-ms05002-ani-expl.c: 2005-01-10: PUBLIC v.0.2 Copyright c 2004-2005 houseofdabus. MS05-002 Microsoft Internet Explore...

MS Internet Explorer .ANI files handling Universal Exploit (MS05-002)

No description provided by source. / Added string.h /str0ke / / HOD-ms05002-ani-expl.c: 2005-01-10: PUBLIC v.0.2 Copyright c 2004-2005 houseofdabus. MS05-002 Microsoft Internet Explorer .ANI Files Handling Exploit CAN-2004-1049 .:: houseofdabus ::. universal -- for all affected systems...