7856 matches found
Vulnerability in core server (CVE-2007-2138)
A vulnerability involving insecure searchpath settings allows unprivileged users to gain the SQL privileges of the owner of any SECURITY DEFINER function they are allowed to call. Securing such a function requires both a software update and changes to the function definition...
PostgreSQL privilege escalation
By using temporary objects, unprivileged user can execute function with permissions of security-definer...
EEYE: Windows VDM Zero Page Race Condition Privilege Escalation
Windows VDM Zero Page Race Condition Privilege Escalation Release Date: April 10, 2007 Date Reported: December 12, 2006 Severity: Medium Local Privilege Escalation to Kernel Systems Affected: Windows NT 4.0 SP6 Windows 2000 SP4 Windows XP SP2 x86 Windows Server 2003 SP2 x86 Overview: eEye Digital...
Oracle 10g DBMS_AQ.ENQUEUE SQL Injection Exploit
No description provided by source. !/usr/bin/perl 0-day Remote Oracle DBMSAQ.ENQUEUE exploit 10g Grant or revoke dba permission to unprivileged user Tested on "Oracle Database 10g Enterprise Edition Release 10.1.0.3.0" AUTHOR: Andrea "bunker" Purificato http://rawlab.mindcreations.com DATE:...
dbms_aq-enqueue.txt
!/usr/bin/perl 0-day Remote Oracle DBMSAQ.ENQUEUE exploit 10g Grant or revoke dba permission to unprivileged user Tested on "Oracle Database 10g Enterprise Edition Release 10.1.0.3.0" AUTHOR: Andrea "bunker" Purificato http://rawlab.mindcreations.com DATE: Copyright 2007 - Mon Apr 2 11:54:22 CEST...
oracle-inject-bunker.txt
!/usr/bin/perl Remote Oracle KUPM$MCP.MAIN exploit 10g Grant or revoke dba permission to unprivileged user Tested on "Oracle Database 10g Enterprise Edition Release 10.1.0.3.0" REF: http://www.red-database-security.com/ AUTHOR: Andrea "bunker" Purificato http://rawlab.mindcreations.com DATE:...
Oracle 10g KUPM$MCP.MAIN SQL Injection Exploit
No description provided by source. !/usr/bin/perl Remote Oracle KUPM$MCP.MAIN exploit 10g Grant or revoke dba permission to unprivileged user Tested on "Oracle Database 10g Enterprise Edition Release 10.1.0.3.0" REF: http://www.red-database-security.com/ AUTHOR: Andrea "bunker" Purificato...
Oracle 10g - KUPM$MCP.MAIN SQL Injection
!/usr/bin/perl Remote Oracle KUPM$MCP.MAIN exploit 10g Grant or revoke dba permission to unprivileged user Tested on "Oracle Database 10g Enterprise Edition Release 10.1.0.3.0" REF: http://www.red-database-security.com/ AUTHOR: Andrea "bunker" Purificato http://rawlab.mindcreations.com DATE:...
[Reversemode Advisory] Microsoft Windows Ndistapi.sys IRQL escalation
MICROSOFT WINDOWS Ndistapi.sys IRQL escalation Ruben Santamarta ruben at reversemode dot com Email concealed Affected products: Microsoft Windows XP SP2 Microsoft Windows 2003 Server SP1 Introduction ------------- NDISTAPI.sys is a kernel-mode component that exposes connectionless miniport driver...
Oracle 9i/10g ACTIVATE_SUBSCRIPTION SQL Injection Exploit
No description provided by source. !/usr/bin/perl Remote Oracle DBMSCDCSUBSCRIBE.ACTIVATESUBSCRIPTION exploit 9i/10g Grant or revoke dba permission to unprivileged user Tested on "Oracle Database 10g Enterprise Edition Release 10.1.0.3.0" REF: http://www.securityfocus.com/archive/1/396133 AUTHOR:...
Oracle 9i/10g DBMS_METADATA.GET_DDL SQL Injection Exploit
No description provided by source. !/usr/bin/perl Remote Oracle DBMSMETADAT.GETDDL exploit 9i/10g Grant or revoke dba permission to unprivileged user Tested on "Oracle Database 10g Enterprise Edition Release 10.1.0.3.0" REF: http://www.securityfocus.com/bid/16287 AUTHOR: Andrea "bunker"...
Oracle 10g KUPW$WORKER.MAIN Grant/Revoke dba Permission Exploit
No description provided by source. !/usr/bin/perl Remote Oracle KUPW$WORKER.MAIN exploit 10g Grant or revoke dba permission to unprivileged user Tested on "Oracle Database 10g Enterprise Edition Release 10.1.0.3.0" REF: http://www.securityfocus.com/archive/1/440439...
Oracle 10g KUPV$FT.ATTACH_JOB SQL Injection Exploit v2
No description provided by source. !/usr/bin/perl Remote Oracle KUPV$FT.ATTACHJOB exploit 10g - Version 2 - New "evil cursor injection" tip! - No "create procedure" privileg needed! - See: http://www.databasesecurity.com/ Cursor Injection Grant or revoke dba permission to unprivileged user Tested...
Oracle 9i/10g ACTIVATE_SUBSCRIPTION SQL Injection Exploit v2
No description provided by source. !/usr/bin/perl Remote Oracle DBMSCDCSUBSCRIBE.ACTIVATESUBSCRIPTION exploit 9i/10g - Version 2 - New "evil cursor injection" tip! - No "create procedure" privileg needed! - See: http://www.databasesecurity.com/ Cursor Injection Grant or revoke dba permission to...
oracledmgd-sql.txt
!/usr/bin/perl Remote Oracle DBMSMETADAT.GETDDL exploit 9i/10g Grant or revoke dba permission to unprivileged user Tested on "Oracle Database 10g Enterprise Edition Release 10.1.0.3.0" REF: http://www.securityfocus.com/bid/16287 AUTHOR: Andrea "bunker" Purificato http://rawlab.mindcreations.com...
oracleaj-perm.txt
!/usr/bin/perl Remote Oracle KUPV$FT.ATTACHJOB exploit 10g Grant or revoke dba permission to unprivileged user Tested on "Oracle Database 10g Enterprise Edition Release 10.1.0.3.0" REF: http://www.securityfocus.com/bid/16294 AUTHOR: Andrea "bunker" Purificato http://rawlab.mindcreations.com DATE:...
oracleas-sql.txt
!/usr/bin/perl Remote Oracle DBMSCDCSUBSCRIBE.ACTIVATESUBSCRIPTION exploit 9i/10g Grant or revoke dba permission to unprivileged user Tested on "Oracle Database 10g Enterprise Edition Release 10.1.0.3.0" REF: http://www.securityfocus.com/archive/1/396133 AUTHOR: Andrea "bunker" Purificato...
Oracle 9i/10g ACTIVATE_SUBSCRIPTION SQL Injection Exploit
Exploit for unknown platform in category remote exploits ========================================================= Oracle 9i/10g ACTIVATESUBSCRIPTION SQL Injection Exploit ========================================================= !/usr/bin/perl Remote Oracle DBMSCDCSUBSCRIBE.ACTIVATESUBSCRIPTION...
Microsoft Windows 2000/XP/2003/Vista ReadDirectoryChangesW informaton leak
Title: Microsoft Windows 2000/XP/2003/Vista ReadDirectoryChangesW informaton leak Author: 3APA3A, Affected: Microsoft Windows 2000,XP,2003,Vista Exploitable: Yes Type: Remote from local network, authentication required NULL session was not tested. Class: Information leak CVE: Intro: It's very...
Oracle 10g - KUPW$WORKER.MAIN GrantRevoke dba Permission
Oracle 10g - KUPW$WORKER.MAIN GrantRevoke dba Permission !/usr/bin/perl Remote Oracle KUPW$WORKER.MAIN exploit 10g Grant or revoke dba permission to unprivileged user Tested on "Oracle Database 10g Enterprise Edition Release 10.1.0.3.0" REF: http://www.securityfocus.com/archive/1/440439 AUTHOR:...