Oracle 9i/10g DBMS_METADATA.GET_DDL SQL Injection Exploit

No description provided by source. !/usr/bin/perl Remote Oracle DBMSMETADAT.GETDDL exploit 9i/10g Grant or revoke dba permission to unprivileged user Tested on "Oracle Database 10g Enterprise Edition Release 10.1.0.3.0" REF: http://www.securityfocus.com/bid/16287 AUTHOR: Andrea "bunker"...

Oracle 9i/10g ACTIVATE_SUBSCRIPTION SQL Injection Exploit v2

No description provided by source. !/usr/bin/perl Remote Oracle DBMSCDCSUBSCRIBE.ACTIVATESUBSCRIPTION exploit 9i/10g - Version 2 - New "evil cursor injection" tip! - No "create procedure" privileg needed! - See: http://www.databasesecurity.com/ Cursor Injection Grant or revoke dba permission to...

Oracle 10g KUPV$FT.ATTACH_JOB SQL Injection Exploit v2

No description provided by source. !/usr/bin/perl Remote Oracle KUPV$FT.ATTACHJOB exploit 10g - Version 2 - New "evil cursor injection" tip! - No "create procedure" privileg needed! - See: http://www.databasesecurity.com/ Cursor Injection Grant or revoke dba permission to unprivileged user Tested...

oracleas-sql.txt

!/usr/bin/perl Remote Oracle DBMSCDCSUBSCRIBE.ACTIVATESUBSCRIPTION exploit 9i/10g Grant or revoke dba permission to unprivileged user Tested on "Oracle Database 10g Enterprise Edition Release 10.1.0.3.0" REF: http://www.securityfocus.com/archive/1/396133 AUTHOR: Andrea "bunker" Purificato...

oracledmgd-sql.txt

!/usr/bin/perl Remote Oracle DBMSMETADAT.GETDDL exploit 9i/10g Grant or revoke dba permission to unprivileged user Tested on "Oracle Database 10g Enterprise Edition Release 10.1.0.3.0" REF: http://www.securityfocus.com/bid/16287 AUTHOR: Andrea "bunker" Purificato http://rawlab.mindcreations.com...

oracleaj-perm.txt

!/usr/bin/perl Remote Oracle KUPV$FT.ATTACHJOB exploit 10g Grant or revoke dba permission to unprivileged user Tested on "Oracle Database 10g Enterprise Edition Release 10.1.0.3.0" REF: http://www.securityfocus.com/bid/16294 AUTHOR: Andrea "bunker" Purificato http://rawlab.mindcreations.com DATE:...

Oracle 9i/10g ACTIVATE_SUBSCRIPTION SQL Injection Exploit

Exploit for unknown platform in category remote exploits ========================================================= Oracle 9i/10g ACTIVATESUBSCRIPTION SQL Injection Exploit ========================================================= !/usr/bin/perl Remote Oracle DBMSCDCSUBSCRIBE.ACTIVATESUBSCRIPTION...

Oracle 10g - KUPV$FT.ATTACH_JOB GrantRevoke dba Permission

Oracle 10g - KUPV$FT.ATTACHJOB GrantRevoke dba Permission !/usr/bin/perl Remote Oracle KUPV$FT.ATTACHJOB exploit 10g Grant or revoke dba permission to unprivileged user Tested on "Oracle Database 10g Enterprise Edition Release 10.1.0.3.0" REF: https://www.securityfocus.com/bid/16294 AUTHOR: Andre...

Oracle 10g - KUPW$WORKER.MAIN GrantRevoke dba Permission

Oracle 10g - KUPW$WORKER.MAIN GrantRevoke dba Permission !/usr/bin/perl Remote Oracle KUPW$WORKER.MAIN exploit 10g Grant or revoke dba permission to unprivileged user Tested on "Oracle Database 10g Enterprise Edition Release 10.1.0.3.0" REF: http://www.securityfocus.com/archive/1/440439 AUTHOR:...

Microsoft Windows 2000/XP/2003/Vista ReadDirectoryChangesW informaton leak

Title: Microsoft Windows 2000/XP/2003/Vista ReadDirectoryChangesW informaton leak Author: 3APA3A, Affected: Microsoft Windows 2000,XP,2003,Vista Exploitable: Yes Type: Remote from local network, authentication required NULL session was not tested. Class: Information leak CVE: Intro: It's very...

VMWare guest system weak permissions

Unprivileged user of guest system with VMWare tools installed can perform some privileged operations, such enabling/disabling network interface...

Exploits "ps" command (also /usr/ucb/ps) on HP OSF1 v5.1 Alpha

No description provided by source. !/bin/ksh osf1tru64ps.ksh exploit Tested on OSF1 V5.1 1885 alpha ps executable - information leak Author: Andrea "bunker" Purificato http://rawlab.mindcreations.com the "ps" command also /usr/ucb/ps on HP OSF1 v5.1 Alpha,...

HP Tru64 Alpha OSF1 v5.1 (ps) Information Leak Exploit

No description provided by source. !/bin/ksh osf1tru64ps.ksh exploit Tested on OSF1 V5.1 1885 alpha ps executable - information leak Author: Andrea "bunker" Purificato http://rawlab.mindcreations.com the "ps" command also /usr/ucb/ps on HP OSF1 v5.1 Alpha, developed without an eye to security,...

HP Tru64 Alpha OSF1 v5.1 (ps) Information Leak Exploit

Exploit for tru64 platform in category local exploits ====================================================== HP Tru64 Alpha OSF1 v5.1 ps Information Leak Exploit ====================================================== !/bin/ksh osf1tru64ps.ksh exploit Tested on OSF1 V5.1 1885 alpha ps executable -...

HP Tru64 Alpha OSF1 5.1 - ps Information Leak

HP Tru64 Alpha OSF1 5.1 - ps Information Leak !/bin/ksh osf1tru64ps.ksh exploit Tested on OSF1 V5.1 1885 alpha ps executable - information leak Author: Andrea "bunker" Purificato http://rawlab.mindcreations.com the "ps" command also /usr/ucb/ps on HP OSF1 v5.1 Alpha, developed without an eye to...

HP Tru64 Alpha OSF1 5.1 - 'ps' Information Leak

!/bin/ksh osf1tru64ps.ksh exploit Tested on OSF1 V5.1 1885 alpha ps executable - information leak Author: Andrea "bunker" Purificato http://rawlab.mindcreations.com the "ps" command also /usr/ucb/ps on HP OSF1 v5.1 Alpha, developed without an eye to security, allows unprivileged users to see valu...

oracle-sql.txt

!/usr/bin/perl Remote Oracle dbmsexportextension exploit any version Grant or revoke dba permission to unprivileged user Tested on Oracle 10g - Release 10.2.0.1.0 Oracle 9i - Release 9.2.0.2.0 REF: http://www.securityfocus.com/bid/17699 AUTHOR: Andrea "bunker" Purificato...

[Full-disclosure] PS Information Leak on HP True64 Alpha OSF1 v5.1 1885

After months of silence from the "HP Software Security Response Team" -Type: Information leak -Risk: low -Author: Andrea "bunker" Purificato - http://rawlab.mindcreations.com -Description: the "ps" command also /usr/ucb/ps on HP OSF1 v5.1 Alpha, developed without an eye to security, allows...

Multiple QNX security vulnerabilites

Unprivileged user can debug suid applications. Clipboard is world accessible...

Microsoft Excel Opcode Handling Unspecified Remote Code Execution Vulnerability

Description Microsoft Excel is reportedly prone to an unspecified remote code-execution vulnerability. Successfully exploiting this issue allows attackers to execute arbitrary code in the context of targeted users. Note that Microsoft Office applications include functionality to embed Office file...