Security Advisory 0043

Security Advisory 0043 PDF Date: November 6th, 2019 Version: 1.0 Revision | Date | Changes ---|---|--- 1.0 | November 6th, 2019 | Initial Release The CVE-IDs tracking this issue: CVE-2019-9512, CVE-2019-9514, and CVE-2019-9515 CVSSv3 Base Score: 7.5 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Description...

Oracle Critical Patch Update - October 2018

A Critical Patch Update is a collection of patches for multiple security vulnerabilities. Critical Patch Update patches are usually cumulative, but each advisory describes only the security fixes added since the previous Critical Patch Update advisory. Thus, prior Critical Patch Update advisories...

Buffer overflow

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS Core Components. Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.2 and 12.2.1.3. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP t...

CVE-2018-2933

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS Core Components. Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.2 and 12.2.1.3. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP t...

CVE-2015-0473

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control MOS 12.1.0.5 and 12.1.0.6 allows remote attackers to affect integrity via unknown vectors related to My Oracle Support Plugin...

CVE-2015-0473

CVE-2015-0473 affects Oracle Enterprise Manager Grid Control (MOS) Base Platform, specifically the Enterprise Manager Base Platform component in MOS 12.1.0.5 and 12.1.0.6. The vulnerability is described as unspecified, with remote attackers able to impact integrity via unknown vectors related to ...

Oracle Reports Developer Version Release 9i to 10gr2 Database Disclosure

An undocumented PARSEQUERY function in Oracle Forms and Reports allows dumping database username and passwords unauthenticated. The patch / workaround just appears to obfuscate the issue but not actually address it. Affected systems include versions 9iAS, 9iDS, 10G DS and AS, and 10G AS...

Oracle Forms And Reports Database Disclosure

PARSEQUERY http://docs.oracle.com/cd/E1676401/bi.1111/b32121/pbrcla007.htmi640592 Description Use PARSEQUERY to parse an rwservlet query and display the constructed Reports Server command line. Syntax http://yourwebserver/reports/rwservlet/parsequery?server=servername&authid=username/password...

Oracle E-Business Suite password disclosure vulnerability

Overview Oracle E-Business Suite 12.0-12.1, when used with the native login pages or single sign-on SSO / Oracle Access Management OAM with the native login pages, contains a credential exposure vulnerability. Description Oracle E-Business Suite administrators who have applied CPU patches for Jul...

SuSE Update for seamonkey openSUSE-SU-2012:0935-1 (seamonkey)

Check for the Version of seamonkey OpenVAS Vulnerability Test $Id: gbsuse201209351.nasl 8249 2017-12-27 06:29:56Z teissa $ SuSE Update for seamonkey openSUSE-SU-2012:0935-1 seamonkey Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This...

Joomla ACStartSeite SQL Injection

Joomla Component comacstartseite Sql Injection Vulnerability ============================================================== .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Home : www.sec-attack.com/vb Sec Attack Team .:. Bug Type : Sql InjectionMysql .:. Dork : inurl:"comacstartseite" === Exploit =...

CVE-2009-4199

The CVE-2009-4199 entry describes multiple SQL injection vulnerabilities in the Mambo Resident component (com_mosres) version 1.0f used with Mambo/Joomla!. The root cause is input handling when magic_quotes_gpc is disabled, allowing remote attackers to inject SQL via two parameters: property_uid ...

Joomla Momres Component SQL Injection

================================================================================== Joomla Component commosres propertyuid SQL injection Vulnerability ================================================================================== + Author : Chip D3 Bi0s + Author Name : Russell... + Email :...

Joomla! Component com_mosres - Multiple SQL Injections

Joomla! Component commosres - Multiple SQL Injections ================================================================================== Joomla Component commosres propertyuid SQL injection Vulnerability ================================================================================== + Author :...

Joomla Component n-forms 1.01 Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ========================================================= Joomla Component n-forms 1.01 Blind SQL Injection Exploit ========================================================= !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1...

mamboarticles-sql.txt

!/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print " \n"; print " \n"; print " Mambo Component Articles Blind SQL Injection Exploit \n"; print " Author:Ded MustD!e www.antichat.ru \n"; print " \n"; print " Dork : inurl:option=articles artid \n"; print " Usage: perl exploit.pl ho...

Mambo Component Simpleboard 1.0.3 (catid) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ===================================================================== Mambo Component Simpleboard 1.0.3 catid SQL Injection Vulnerability ===================================================================== Mambo Simpleboard Forum Compone...

Mambo Component Catalogshop 1.0b1 SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= Mambo Component Catalogshop 1.0b1 SQL Injection Vulnerability ============================================================= joomla SQL Injectioncomcatalogshop DorKs 1 : allinurl...

Mambo Component AkoGallery 2.5b SQL Injection Vulnerability

Exploit for asp platform in category web applications =========================================================== Mambo Component AkoGallery 2.5b SQL Injection Vulnerability =========================================================== joomla SQL Injectioncomakogallery DorKs 1 : allinurl:...

Joomla Component com_resman SQL Injection Vulnerability

Exploit for php platform in category web applications ======================================================= Joomla Component comresman SQL Injection Vulnerability ======================================================= InformatioN Title : Joomla Mosets Tree : "; $dir = ; chop $dir; if $dir =...