14 matches found
UDFPwn-CVE-2012-5613
UDFPwn.py MySQL 4.x/5.0 Linux - 用户定义函数UDF动态库2自动化脚本。...
MySQL-Fu.rb
MySQL-Fu.rb MySQL-Fu 是我编写的一个基于 Ruby 的 MySQL 客户端脚本。 它能完成普通 MySQL 客户端可能会做的大部分事情:SQL Shell、更新/删除/Drop 数据库/表、添加/删除用户、转储数据库/表并支持 gzip 压缩选项...... 另外还有一些额外选项 能让渗透测试更轻松一些。 包含多个内置的 PHP 命令 Shell 选项,以及 Pentestmonkey 的 PHP 反向 Shell;此外,还提供多种文件写入和读取选项(所有读取的文件都会在本地记录日志,供后续离线分析);另外还包含 Kingcope 的 CVE-2012-5613...
SUSE: Security Advisory (SUSE-SU-2013:0262-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Oracle MySQL (Windows) - FILE Privilege Abuse (Metasploit)
Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Oracle MySQL for Microsoft Windows FILE Privilege Abuse', 'Description' = %q This module takes advantage of a file privilege misconfiguration problem specifically against Windows MySQL servers. Th...
Oracle MySQL for Microsoft Windows MOF Execution
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...
Oracle MySQL for Windows Elevation of Privilege (CVE-2012-5613)
A remote code execution vulnerability has been reported in Oracle MySQL servers...
SuSE 11.2 Security Update : MySQL (SAT Patch Number 7251)
A stack-based buffer overflow in MySQL has been fixed that could have caused a Denial of Service or potentially allowed the execution of arbitrary code. CVE-2012-5611 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Su...
MySQL FILE privilege elevation
Added: 12/21/2012 CVE: CVE-2012-5613 BID: 56771 OSVDB: 88118 Background MySQL is an open-source database software package available for multiple platforms. Problem A database user who has FILE permission can write arbitrary files to the file system, leading to privilege elevation. Resolution Revo...
MySQL FILE privilege elevation
Added: 12/21/2012 CVE: CVE-2012-5613 BID: 56771 OSVDB: 88118 Background MySQL is an open-source database software package available for multiple platforms. Problem A database user who has FILE permission can write arbitrary files to the file system, leading to privilege elevation. Resolution Revo...
Oracle MySQL for Microsoft Windows MOF Execution Vulnerability
Exploit for windows platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core'...
Oracle MySQL (Windows) - MOF Execution (Metasploit)
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Oracle MySQL for Microsoft Windows MO...
Multiple MySQL database Zero-day vulnerabilities published
Researcher discovered Multiple Zero-day vulnerabilities in MySQL database software including Stack based buffer overrun, Heap Based Overrun, Privilege Elevation, Denial of Service and Remote Preauth User Enumeration. Common Vulnerabilities and Exposures CVE assigned as : CVE-2012-5611 — MySQL Lin...
CVE-2012-5613
creationtimestamp| type| source ---|---|--- 2012-12-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/23077 2012-12-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/23179 2015-01-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/35777 2018-05-29...
Oracle MySQL for Microsoft Windows MOF Execution
This module takes advantage of a file privilege misconfiguration problem specifically against Windows MySQL servers due to the use of a .mof file. This may result in arbitrary code execution under the context of SYSTEM. This module requires a valid MySQL account on the target machine. Module...