o5logon-fetch

o5logon-fetch A small Java program that attempts to exploit CVE-2012-3137 on vulnerable Oracle 11 servers. By exploiting this vulnerability, you can run offline brute force attacks until you discover a given user’s password, without any apparent audit trail. Vulnerability Details A good writeup o...

cve-2012-3137

This repository does not have a README...

CVE-2012-3137

creationtimestamp| type| source ---|---|--- 2026-09-01 20:01:16+00:00| seen| https://t.me/hackingAttack/77426 2026-09-02 01:01:33+00:00| seen| https://t.me/hackingAttack/77426 2026-09-05 04:00:03+00:00| published-proof-of-concept| https://t.me/hackingAttack/77426 2026-09-06 00:00:58+00:00|...

Oracle database vulnerability analysis: the need for a username and password to access your database-vulnerability warning-the black bar safety net

Summary General database vulnerabilities that are in a successful connection or login to the database after the invasion; this article describes two in 2 0 1 2 years of exposure to the Oracle, by these two vulnerabilities combined may not grasp the username/password of the case of the invasion of...

Oracle Database O5Logon Protocol Information Disclosure (CVE-2012-3137)

An information disclosure vulnerability has been discovered in the Oracle authentication protocol O5Logon. The vulnerability is due to an error in the authentication protocol. A remote attacker can exploit this vulnerability by sending a specially crafted Connect request to an Oracle Database...

CVE-2012-3137

CVE-2012-3137 affects Oracle Database Server (10.2.x, 11.1.x, 11.2.x series). The issue is a flaw in the O5LOGIN authentication protocol that lets remote attackers obtain the session key and salt for arbitrary users, leaking information about the password hash and enabling brute-force password gu...