Cybersecurity-Capstone-Project

Cybersecurity-Capstone-Project Overview This repository contains my Cybersecurity Capstone Project completed as part of NCSC Nashama CyberCamp 11 , delivered in collaboration with IT Security C &T. The project demonstrates a complete vulnerability assessment workflow for two enterprise-level...

CVE-2022-27434

CVE-2022-27434 UNIT4 TETA Mobile Edition 29HF13 was discovered to contain a SQL injection vulnerability via the ProfileName parameter in the errorReporting page. The vulnerability exist in the error page generated by the application in this case: while changing password. Adding quotation mark to...

cve-2023-21987-poc

cve-2023-21987-poc Oracle VirtualBox VGA OOB-Read Vulnerability This Proof of Concept PoC is designed for a Linux guest OS running on a Windows host OS. The purpose of this PoC is to demonstrate the ability to leak addresses of VirtualBox components. You may need to adjust the pointer values with...

CVE-2026-9998-Insecure-Deserialization-in-Blockchain-Oracle

10. CVE-2026-9998 – Insecure Deserialization in Blockchain Oracle Overview A blockchain oracle node deserializes data from a smart contract event using Python’s pickle, allowing an attacker to execute arbitrary commands. Severity: Critical Full Node Compromise Oracle Simulation & Exploit...

CVE-2018-3191

Usage: java -jar weblogic-spring-jndi.jar Example: java -jar weblogic-spring-jndi.jar rmi://:1099/Object Note: weblogic-spring-jndi-12.2.1.3.jar for weblogic: 12.2.1.3 weblogic-spring-jndi-10.3.6.0.jar for weblogic: 10.3.6.0 12.2.1.0 12.1.3.0 12.2.1.1...

Enterprise-Information-Security-Risk-Assessment-Oracle-E-Business-Suite-Case-Study

Information Security: GDPR Compliance & Incident Response A comprehensive security and privacy compliance framework for high-risk biometric surveillance systems CCTV, Facial Recognition Technology, and centralised contact tracing, including comparative framework analysis ISO 27001, Cyber...

ESAPI-SQLinjection-CVE-2025-5878-Exploit

Affected: ESAPI.encoder.encodeForSQL method and OracleCodec class Affected versions: 2.2.0.0-2.6.2.0 Usage: similar to sqlmap usage: esapi-sqlinjection.py -h -u URL -c COOKIE --dbs --tables --columns -D DB -T TABLE -C COLUMN --dump esapi-sqlinjection.py: error: the following arguments are require...

CVE-2026-60206

CVE-2026-60206 – Oracle WebLogic Server SAML Authentication Bypass PoC This repository provides a proof‑of‑concept exploit for CVE‑2026‑60206 , a critical authentication bypass vulnerability in the SAML implementation of Oracle WebLogic Server. The flaw allows a remote, low‑privileged attacker to...

Ashwesker-CVE-2026-21962

😈 CVE-2026-21962 — Critical Security Vulnerability 😈 🚨 Severity CVSS Score: 10.0 / 10 Critical Published: January 20, 2026 Risk Level: 🔥 Maximum — immediate action recommended 🧠 What is it? A critical vulnerability affecting: Oracle HTTP Server Oracle WebLogic Server Proxy Plug-in for Apache & II...

CVE-2025-61882-Oracle-BI-Publisher-RCE

Affected Software: Oracle BI Publisher versions 12.2.1.4.0, 12.2.1.3.0. Vulnerability Type: Remote code execution via insecure deserialization in the BI Publisher integration component. Description: The BI Publisher integration component deserializes untrusted data without validation, allowing...

CVE-2024-21182

Oracle WebLogic Server JNDI Vulnerability For educational purpose only...

ONe-TIME-ecb-oracle-attack-AES

ONe-TIME-ecb-oracle-attack-AES...

cve-2025-61882-oracle_ebs_rce_reproduction

CVE-2025-61882 — Oracle E-Business Suite Unauthenticated Remote Code Execution CVSS 9.8 CRITICAL Overview CVE-2025-61882 is an unauthenticated remote code execution vulnerability in Oracle E-Business Suite EBS, affecting the Concurrent Processing and BI Publisher components. The flaw allows an...

CVE-2025-61882-POC

CVE-2025-61882 Security Testing Tool 🚨 CRITICAL LEGAL WARNING See our blog post for technical details THIS TOOL IS FOR AUTHORIZED SECURITY TESTING ONLY ╔══════════════════════════════════════════════════════════════╗ ║ ║ ║ 🚨 UNAUTHORIZED ACCESS TO COMPUTER SYSTEMS IS ILLEGAL 🚨 ║ ║ ║ ║ By using th...

cve-2019-9053-py3

CVE-2019-9053 — CMS Made Simple SQLi Exploit Python 3 Disclaimer: This tool is intended for authorized penetration testing and educational purposes only. Running this against systems without explicit written permission is illegal. The author assumes no liability for misuse. Overview This is a...

Oracle-Weblogic-Server-AsyncResponseService-Deserialization-Remote-Code-Execution-CVE-2019-2725

CVE-2019-2725 – Oracle WebLogic Unauthenticated Remote Code Execution Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Web Services. Supported versions that are affected are 10.3.6.0.0 and 12.1.3.0.0. An easily exploitable vulnerability allows an...

CVE-2020-14882

Oracle WebLogic Unauthenticated RCE Exploit This PowerShell script exploits CVE-2020-14882 to achieve unauthenticated remote code execution on Oracle WebLogic Server versions: 10.3.6.0.0 12.1.3.0.0 12.2.1.3.0 12.2.1.4.0 14.1.1.0.0 Usage .\exploit.ps1 -target 'https://target:7001' -command...

CVE-2020-2978

CVE-2020-2978 CVE-2020-2978 refrence link for PoC: https://databasesecurityninja.wordpress.com/2020/12/01/cve-2020-2978-rman-audit-table-point-in-time-recovery-not-logged/...

poodle-attack-sandbox

poodle-attack-sandbox Overview This code is the test code for POODLE CVE-2014-3566. POODLE stands for "Padding Oracle On Downgraded Legacy Encryption" and is a vulnerability in SSLv3.0. Warning If you use this code to carry out an attack, you may be arrested by the judicial authorities of your...

CVE-2023-22074

CVE-2023-22074 CVE-2023-22074 vulnerability in oracle database sharding component 19c,21c,23c https://databasesecurityninja.wordpress.com/2023/10/25/cve-2023-22074-oracle-database-password-hash-exposure-in-sharding-component/...