4893 matches found
odat
Quentin HARDY --- [email protected] [email protected] ODAT ODAT Oracle Database Attacking Tool é uma ferramenta de teste de penetração open source que testa a segurança de Bases de Dados Oracle remotamente. Exemplos de uso do ODAT: Tens uma base de dados Oracle à escuta remotamente e...
odat
Quentin HARDY --- [email protected] [email protected] ODAT ODAT Oracle Database Attacking Tool is an open source penetration testing tool that tests the security of Oracle Databases remotely. Usage examples of ODAT: You have an Oracle database listening remotely and want to find valid...
CVE-2012-1675
CVE-2012-1675 Vulnerabilidade de Ataque de Envenenamento do TNS Listener do Oracle Database nmap -Pn -sT --script=+oracle-tns-poison -p 1521 192.168.2.18 https://www.integrigy.com/files/Integrigy%20Oracle%20TNS%20Poisoning%20Attacks.pdf...
wodat
wodat Windows Oracle Database Angriffswerkzeug Einfacher Port des beliebten Oracle Database Attack Tool ODAT https://github.com/quentinhardy/odat nach C .Net Framework. Dank an https://github.com/quentinhardy/odat, da viele Funktionen aus seinem Code portiert wurden. Führt passwortbasierte Angrif...
CVE-2022-27434
CVE-2022-27434 Descobriu-se que o UNIT4 TETA Mobile Edition 29HF13 contém uma vulnerabilidade de injeção de SQL por meio do parâmetro ProfileName na página de relatório de erros. A vulnerabilidade existe na página de erro gerada pela aplicação neste caso: ao alterar a senha. Adicionar uma aspa ao...
CVE-2021-2173
CVE-2021-2173 CVE-2021-2173 A PoC está explicada aqui: https://databasesecurityninja.wordpress.com/2021/06/04/cve-2021-2173-pdb-isolation-is-broken-through-metadata-exposure/ Aviso de Atualização Crítica da Oracle – Abril de 2021: https://www.oracle.com/security-alerts/cpuapr2021.html...
oracleShell
oracleShell execução de comandos no banco de dados oracle Ambiente de teste - Privilégios DBA: SELECT FROM v$version Oracle Database 11g Enterprise Edition Release 11.2.0.1.0 - Production PL/SQL Release 11.2.0.1.0 - Production "CORE 11.2.0.1.0 Production" TNS for 32-bit Windows: Version 11.2.0.1....
CVE-2023-22074
CVE-2023-22074 CVE-2023-22074 vulnerabilidade no componente de sharding do oracle database 19c,21c,23c https://databasesecurityninja.wordpress.com/2023/10/25/cve-2023-22074-oracle-database-password-hash-exposure-in-sharding-component/...
CVE-2020-2969
CVE-2020-2969 O PoC para CVE-2020-2969 está documentado aqui: Acesso não autorizado ao hash de senha do Oracle Database...
CVE-2026-103253
n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain an SQL injection vulnerability in the Oracle Database node's Delete Table Drop operation. Attackers can inject single quotes in the table or schema fields to append arbitrary SQL statements and execute D...
EUVD-2026-90647
n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain an SQL injection vulnerability in the Oracle Database node's Delete Table Drop operation. Attackers can inject single quotes in the table or schema fields to append arbitrary SQL statements and execute D...
CVE-2026-103253 n8n before 1.123.80, 2.39.6, and 2.40.1 SQL Injection via Oracle Database Drop Table
n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain an SQL injection vulnerability in the Oracle Database node's Delete Table Drop operation. Attackers can inject single quotes in the table or schema fields to append arbitrary SQL statements and execute D...
CVE-2026-103253 n8n before 1.123.80, 2.39.6, and 2.40.1 SQL Injection via Oracle Database Drop Table
n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain an SQL injection vulnerability in the Oracle Database node's Delete Table Drop operation. Attackers can inject single quotes in the table or schema fields to append arbitrary SQL statements and execute D...
CVE-2026-103253 n8n before 1.123.80, 2.39.6, and 2.40.1 SQL Injection via Oracle Database Drop Table
n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain an SQL injection vulnerability in the Oracle Database node's Delete Table Drop operation. Attackers can inject single quotes in the table or schema fields to append arbitrary SQL statements and execute D...
CVE-2026-103253
The n8n automation tool (versions before 1.123.80, 2.0.0 to 2.39.6, and 2.40.0 to 2.40.1) is vulnerable to an SQL injection flaw in the Oracle Database node 's Delete Table Drop operation. The root cause allows attackers to inject single quotes into table or schema fields to append arbitrary SQL ...
PT-2026-103786
n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain an SQL injection vulnerability in the Oracle Database node's Delete Table Drop operation. Attackers can inject single quotes in the table or schema fields to append arbitrary SQL statements and execute D...
CVE-2026-103253: Improper Neutralization of Special Elements used in an SQL Command
n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain an SQL injection vulnerability in the Oracle Database node's Delete Table Drop operation. Attackers can inject single quotes in the table or schema fields to append arbitrary SQL statements and execute D...
CVE-2026-83083
creationtimestamp| type| source ---|---|--- 2026-09-23 09:47:25+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-11...