cpx_proftpd

cpxproftpd PoC by Daniel Aldana for CVE-2015-3306 exploitation. Bug reported by Vadim Melihow. METHOD 1: usage: python cpxproftp.py ex: python cpxproftp.py 127.0.0.1 /etc/passwd /var/www/pass.txt then try: http://127.0.0.1/pass.txt METHOD 2: usage: python cpxproftp.py ex: python cpxproftp.py...

CVE-2021-40859

CVE-2021-40859 Auerswald VoIP System Secret Backdoors -PoC Tool usage: CVE-2021-40859.py http://target:port...

Mesop AI Sandbox <= 1.2.2 - Remote Code Execution

Mesop = 1.2.2 contains an unrestricted remote code execution caused by unauthenticated ingestion and execution of base64-encoded Python code in the /exec-py endpoint of ai/testing module, letting attackers execute arbitrary commands on the host, exploit requires HTTP access to the server. id:...

Oracle HRMS (Republic of Korea) security vulnerabilities

A security vulnerability exists in Oracle HRMS Republic of Korea versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Korean Payroll component and may allow low-privilege attackers to gain HTTP access, thereby accessing critical data or all accessible data without...

Oracle Enterprise Manager for Siebel security vulnerabilities

Versions 13.5 and 24.1 of Oracle Enterprise Manager for Siebel contain a security vulnerability stemming from issues in the Configuration Management component. This vulnerability may allow attackers with low privileges to gain HTTP access and take control of Oracle Enterprise Manager for Siebel...

Oracle Strategic Network Optimization security vulnerability

A security vulnerability exists in Oracle Strategic Network Optimization versions 12.2.3 through 12.2.15. This vulnerability stems from issues related to the Installation of the SNO component, potentially allowing unauthenticated attackers to gain HTTP access and take control of Strategic Network...

Oracle Essbase security vulnerabilities

Oracle Essbase version 21.8.3.0.0 contains a security vulnerability stemming from issues with the Java Based Agent component. This vulnerability may allow unauthenticated attackers to gain HTTP access and unauthorizedly read certain accessible data within Oracle Essbase...

Oracle Siebel Apps - Financial Services security vulnerabilities

Oracle Siebel Apps – Versions 17.0 through 26.9 contain a security vulnerability stemming from issues in the Financial Accounts component. This vulnerability may allow unauthenticated attackers to gain HTTP access, leading to unauthorized access to critical data or all accessible data, as well as...

Oracle Cost Management security vulnerability

A security vulnerability exists in Oracle Cost Management versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Cost Maintenance component and may allow attackers with limited privileges to gain HTTP access and take control of Oracle Cost Management...

Oracle WebCenter Content security vulnerability

Versions 12.2.1.4.0 and 14.1.2.0.0 of Oracle WebCenter Content contain a security vulnerability stemming from issues within the Content Portal Suite component. This vulnerability may allow attackers with limited privileges to gain HTTP access and take control of Oracle WebCenter Content...

Oracle Siebel CRM Deployment information disclosure vulnerability

Versions 17.0 through 26.9 of Oracle Siebel CRM contain an information disclosure vulnerability. This vulnerability stems from issues within the Cloud Gateway component, potentially allowing unauthenticated attackers to gain HTTP access and thereby access critical or all accessible data...

Oracle Commerce Platform security vulnerabilities

Oracle Commerce Platform 11.4.0 has security vulnerabilities. These vulnerabilities stem from issues with the Dynamo Commerce Server component. They may allow low-privilege attackers with network HTTP access rights to unauthorizedly create, delete, or modify critical data or all accessible data, ...

Oracle Siebel CRM Deployment security vulnerability

A security vulnerability exists in Oracle Siebel CRM Deployment versions 17.0 through 26.9. This vulnerability stems from issues within the Server Infrastructure component, potentially allowing low-privilege attackers to gain HTTP access, thereby unauthorizedly accessing critical data or all data...

Oracle One-to-One Fulfillment security vulnerability

A security vulnerability exists in Oracle One-to-One Fulfillment versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Documents component and may allow low-privilege attackers to create, delete, or modify critical or all accessible data via HTTP access. It can also lea...

Oracle WebCenter Content authorization issue vulnerability

Versions 12.2.1.4.0 and 14.1.2.0.0 of Oracle WebCenter Content contain an authorization issue vulnerability. This vulnerability stems from issues within the Content Server component and may allow unauthenticated attackers to gain HTTP access, thereby taking control of Oracle WebCenter Content...

Oracle SOA Suite security vulnerabilities

Versions 12.2.1.4.0 and 14.1.2.0.0 of Oracle SOA Suite contain a security vulnerability stemming from issues in the Fabric Layer component. This vulnerability may allow unauthenticated attackers to gain HTTP access, thereby enabling unauthorized access to critical data or all accessible data...

Oracle REST Data Services security vulnerabilities

A security vulnerability exists in Oracle REST Data Services versions 24.2.0 through 26.1.0. This vulnerability stems from issues within the Core component and may allow unauthenticated attackers to gain HTTP access. Under user interaction, they can create, delete, or modify critical data or all...

Oracle SOA Suite security vulnerabilities

Versions 12.2.1.4.0 and 14.1.2.0.0 of Oracle SOA Suite contain a security vulnerability stemming from issues in the Fabric Layer component. This vulnerability may allow low-privilege attackers to create, delete, or modify critical data or all accessible data via HTTP access, potentially resulting...

Oracle Outside In Technology security vulnerability

Oracle Outside In Technology version 8.5.8 contains a security vulnerability stemming from issues within the Outside In Clean Content SDK component. This vulnerability may allow unauthenticated attackers to gain HTTP access, potentially leading to service suspension or frequent crashes...

Oracle Application Object Library security vulnerability

A security vulnerability exists in Oracle Application Object Library versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Flexfields component; attackers with low privileges can exploit it via HTTP access, potentially leading to the takeover of the Oracle Application...