Postgres Plus SQL authentication bypass

Unauthorized access to DBA Management Server TCP/9000, TCP/9363...

The Oracle Quarterly Patch Update

January 18th marks the 6th anniversary of the Oracle Critical Patch Update CPU in its current form as a quarterly patch. For those who remember, before the CPU, Oracle released patches as Security Alerts, the last being Security Alert 68 at the end of August 2004. In the past 6 years, CPUs have...

DBA Gets 1-Year Sentence for Hacking Employer

A former senior database administrator for GEXA Energy in Houston was sentenced to 12 months in prison for hacking into his former employer’s computer network. Read the full article. Help Net Security...

Oracle DB SQL Injection in MDSYS.SDO_TOPO_DROP_FTBL Trigger

This module will escalate an Oracle DB user to MDSYS by exploiting a sql injection bug in the MDSYS.SDOTOPODROPFTBL trigger. After that exploit escalate user to DBA using "CREATE ANY TRIGGER" privilege given to MDSYS user by creating evil trigger in system scheme 2-stage attack. This module...

Oracle 10g - Multiple Privilege Escalation Vulnerabilities

Oracle 10g - Multiple Privilege Escalation Vulnerabilities source: https://www.securityfocus.com/bid/38115/info Oracle Database is prone to multiple remote privilege-escalation issues because it fails to properly restrict access to certain packages. The attacker can exploit these issues to escala...

Fedora 11 : rt3-3.8.2-12.fc11 (2009-12827)

Fri Dec 4 2009 Ralf Corsepius - 3.8.2-12 - Add rt-3.8.2-rh-bz543962.diff BZ 543962. - Tue Oct 13 2009 Ralf Corsepius - 3.8.2-11 - Update rt-3.8.2-rh-bz526870.diff. - Mon Oct 12 2009 Ralf Corsepius - 3.8.2-10 - Add rt-3.8.2-rh-bz526870.diff BZ 526870. - Wed Jun 24 2009 Ralf Corsepius - 3.8.2-9 -...

Oracle SYS.LT.MERGEWORKSPACE Evil Cursor Exploit

No description provided by source. EDB-ID: 10264 CVE-ID: Title: Oracle SYS.LT.MERGEWORKSPACE Evil Cursor Exploit Author: Andrea "bunker" Purificato Published: 2009-12-01 Download Exploit Code Download N/A -- -- sys-lt-mergeworkspaceV2.sql -- -- -- Oracle SYS.LT.MERGEWORKSPACE exploit...

Oracle SYS.LT.REMOVEWORKSPACE Evil Cursor Exploit

No description provided by source. EDB-ID: 10268 CVE-ID: Title: Oracle SYS.LT.REMOVEWORKSPACE Evil Cursor Exploit Author: Andrea "bunker" Purificato Published: 2009-12-01 Download Exploit Code Download N/A -- -- sys-lt-removeworkspaceV2.sql -- -- -- Oracle SYS.LT.REMOVEWORKSPACE exploit...

Oracle - SYS.LT.COMPRESSWORKSPACETREE Evil Cursor

Oracle - SYS.LT.COMPRESSWORKSPACETREE Evil Cursor -- -- sys-lt-compressworkspacetreeV2.sql -- -- -- Oracle SYS.LT.COMPRESSWORKSPACETREE exploit 9iR2/10gR1,10gR2,11gR1 -- Evil cursor technique -- -- Grant dba permission to unprivileged user -- -- -- REF:...

Oracle SYS.LT.COMPRESSWORKSPACETREE Evil Cursor Exploit

Exploit for unknown platform in category local exploits ======================================================= Oracle SYS.LT.COMPRESSWORKSPACETREE Evil Cursor Exploit ======================================================= Title: Oracle SYS.LT.COMPRESSWORKSPACETREE Evil Cursor Exploit CVE-ID:...

Oracle SYS.LT.REMOVEWORKSPACE Evil Cursor Exploit

Exploit for unknown platform in category local exploits ================================================= Oracle SYS.LT.REMOVEWORKSPACE Evil Cursor Exploit ================================================= Title: Oracle SYS.LT.REMOVEWORKSPACE Evil Cursor Exploit CVE-ID: OSVDB-ID: Author: Andrea...

Oracle ctxsys.drvxtabc.create_tables Evil Cursor Exploit

Exploit for unknown platform in category local exploits ======================================================== Oracle ctxsys.drvxtabc.createtables Evil Cursor Exploit ======================================================== Title: Oracle ctxsys.drvxtabc.createtables Evil Cursor Exploit CVE-ID:...

Oracle - ctxsys.drvxtabc.create_tables

Oracle - ctxsys.drvxtabc.createtables -- -- ctxsys.drvxtabc.createtables -- -- -- Oracle ctxsys.drvxtabc.createtables exploit 9i/10g -- -- Grant dba permission to unprivileged user -- -- -- REF: http://www.google.it/search?q=ctxsys.drvxtabc.createtables -- -- AUTHOR: Andrea "bunker" Purificato --...

Oracle ctxsys.drvxtabc.create_tables Exploit

Exploit for unknown platform in category local exploits ============================================ Oracle ctxsys.drvxtabc.createtables Exploit ============================================ Title: Oracle ctxsys.drvxtabc.createtables Exploit CVE-ID: OSVDB-ID: Author: Andrea Purificato Published:...

Oracle - SYS.LT.REMOVEWORKSPACE Evil Cursor

-- -- sys-lt-removeworkspaceV2.sql -- -- -- Oracle SYS.LT.REMOVEWORKSPACE exploit 9iR2/10gR1,10gR2,11gR1 -- Evil cursor technique -- -- Grant dba permission to unprivileged user -- -- -- REF: http://www.google.it/search?q=SYS.LT.REMOVEWORKSPACE -- -- AUTHOR: Andrea "bunker" Purificato --...

Oracle - ctxsys.drvxtabc.create_tables

-- -- ctxsys.drvxtabc.createtables -- -- -- Oracle ctxsys.drvxtabc.createtables exploit 9i/10g -- -- Grant dba permission to unprivileged user -- -- -- REF: http://www.google.it/search?q=ctxsys.drvxtabc.createtables -- -- AUTHOR: Andrea "bunker" Purificato -- http://rawlab.mindcreations.com -- --...

Oracle - ctxsys.drvxtabc.create_tables Evil Cursor

-- -- ctxsys.drvxtabc.createtablesV2.sql -- -- -- Oracle ctxsys.drvxtabc.createtables exploit 9i/10g -- Evil cursor technique -- -- Grant dba permission to unprivileged user -- -- -- REF: http://www.google.it/search?q=ctxsys.drvxtabc.createtables -- -- AUTHOR: Andrea "bunker" Purificato --...

Oracle - ctxsys.drvxtabc.create_tables Evil Cursor

Oracle - ctxsys.drvxtabc.createtables Evil Cursor -- -- ctxsys.drvxtabc.createtablesV2.sql -- -- -- Oracle ctxsys.drvxtabc.createtables exploit 9i/10g -- Evil cursor technique -- -- Grant dba permission to unprivileged user -- -- -- REF: http://www.google.it/search?q=ctxsys.drvxtabc.createtables ...

Oracle SYS.LT.MERGEWORKSPACE Evil Cursor Exploit

Exploit for unknown platform in category local exploits ================================================ Oracle SYS.LT.MERGEWORKSPACE Evil Cursor Exploit ================================================ Title: Oracle SYS.LT.MERGEWORKSPACE Evil Cursor Exploit CVE-ID: OSVDB-ID: Author: Andrea...

Oracle - SYS.LT.MERGEWORKSPACE Evil Cursor

Oracle - SYS.LT.MERGEWORKSPACE Evil Cursor -- -- sys-lt-mergeworkspaceV2.sql -- -- -- Oracle SYS.LT.MERGEWORKSPACE exploit 9iR2/10gR1,10gR2,11gR1 -- Evil cursor technique -- -- Grant dba permission to unprivileged user -- -- -- REF: http://www.google.it/search?q=SYS.LT.MERGEWORKSPACE -- -- AUTHOR...