wodat

wodat Windows Oracle Database Attack Tool Simple port of the popular Oracle Database Attack Tool ODAT https://github.com/quentinhardy/odat to C .Net Framework. Credit to https://github.com/quentinhardy/odat as lots of the functionality are ported from his code. Perform password based attacks e.g...

CVE-2023-22074

CVE-2023-22074 CVE-2023-22074 vulnerability in oracle database sharding component 19c,21c,23c https://databasesecurityninja.wordpress.com/2023/10/25/cve-2023-22074-oracle-database-password-hash-exposure-in-sharding-component/...

CVE-2022-21445-for-12.2.1.3.0-Weblogic

Overview CVE-2022-21445 CVSS 9.8, a vulnerability is an untrusted data deserialization, identified in the ADF Faces component, which can be exploited remotely by attackers without authentication pre-authentication to perform RCE. This vulnerability was discovered by two cybersecurity experts:...

CVE-2026-88892 OpenPanel SSRF via Unguarded Importer File URL Fetch

OpenPanel is an analytics platform. In all versions no patched release available at time of publication, the data importer fetches a caller-supplied URL with plain fetch instead of the project's existing SSRF guard apps/api/src/utils/safe-fetch.ts. In packages/importer/src/providers/umami.ts,...

EUVD-2026-75440

OpenPanel through commit cd24bb8 contains an SQL injection vulnerability in the analytics filter builder that fails to validate profile. filter column identifiers before interpolating them into ClickHouse WHERE clauses. An authenticated attacker with project-scoped read or root export credentials...

Oracle-WebLogic-CVE-2022-21371

Oracle-WebLogic-CVE-2022-21371 Oracle WebLogic Server Local File Inclusion : CVE-2022-21371 Affected Version: Version: 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0 Description: The Oracle Fusion Middleware's Oracle WebLogic Server product Web Container component is vulnerable to local file...

CVE-2024-21006

1、Nothing much to say, it's just an LDAP exploitation. 2、Please check the LDAP service request log. 3、The target version needs Oracle WebLogic Server 12.2.1.4.0 and 14.1.1.0.0. And a low-version JDK is required. 4、Use JNDIExploit-1.4-SNAPSHOT.jar to start the LDAP service...

MS10-070

MS-10-070 CVE-2010-3332 Oracle Padding Vulnerability in Microsoft ASP.NET...

CVE-2024-21182

CVE-2024-21182 — Oracle WebLogic Server T3/IIOP JNDI Injection → RCE lab A self-contained, one-command Docker lab to reproduce and validate the Oracle WebLogic Server OpaqueReference JNDI-injection vulnerability family CVE-2024-21182, a patch bypass of CVE-2023-21839 and turn it into...

CVE-2020-14882

WebLogic CVE-2020-14882 / CVE-2020-14883 Test Script This project provides a simple Bash script for testing whether an Oracle WebLogic server is vulnerable to the authentication bypass CVE-2020-14882 and the associated remote code execution vector CVE-2020-14883. The script sends a POST request t...

OAMBuster

OAMBuster Multithreaded Padding Oracle Attack on Oracle OAM CVE-2018-2879 Authors Red Timmy Marco Ortisi, Stefan Broeder, Ahmad Mahfouz Description This multithreaded exploit was developed to greatly increase the speed of the attack as compared to the single threaded version. For more information...

CVE-2025-61882-CVE-2025-61884

CVE-2025-61882 & CVE-2025-61884 EDIT: Oracle just disclosed a new vulnerability CVE-2025-61884, the detection script for that vuln can be found in this repo or originally here:https://gist.github.com/rxerium/6c70bc6b72fc0d1365c85937d35d9550. As quoted from Oracle's security advisory: This Securit...

CVE-2018-3245

Weblogic-CVE-2018-3245 CVE-2018-3245 0x00 Introduction On October 16 local time, and in the early hours of October 17 Beijing time, Oracle officially released the October Q3 Critical Patch Update CPU, which fixed a Weblogic remote code execution vulnerability CVE-2018-2893 that was not fully...

POC-CVE-2026-60206

CVE-2026-60206 — Oracle WebLogic SAML Auth Bypass CVSS 9.9 — SAML authentication bypass in Oracle WebLogic Server Core. Affected: 12.2.1.4.0 14.1.1.0.0 14.1.2.0.0 15.1.1.0.0 ⚠️ Authorized security testing only. Install root@kitploit: git clone https://github.com/imbas007/CVE-2026-60206.git cd...

snowpick

snowpick is a ServiceNow exposure scanner that finds misconfigured widget ACLs, REST API access controls, and unauthenticated data exposure. ServiceNow exposes data through two common public surfaces: Service Portal widgets and the Table REST API. When access controls on either surface are...

CVE-2026-60206-PoC-Exploit

CVE-2026-60206 - Oracle WebLogic SAML Auth Bypass Exploit Framework-Toolkit Oracle WebLogic Server — SAML Authentication Bypass → Admin Takeover Exploit Framework & Mass Scanner For authorized security testing only. ⚖️ Legal Disclaimer & Responsible Use This tool is provided for educational and...

padre

padre padre es un explotador avanzado para ataques de Padding Oracle contra el modo de cifrado CBC Características: implementación ultrarrápida y concurrente descifrado de tokens cifrado de datos arbitrarios huella digital automática de oráculos de relleno detección automática de la longitud del...

Blackash-CVE-2025-61757

🚨 CVE-2025-61757 — Pre-Auth RCE Alert 🚨 🧩 Summary ID: CVE-2025-61757 Product: Oracle Identity Manager Oracle Fusion Middleware Component: REST WebServices Affected Versions: 12.2.1.4.0 & 14.1.2.1.0 Severity: 🔴 Critical — 9.8 CVSS 3.1 Published: Oct 21, 2025 Type: Missing Authentication for Critic...

CVE-2026-60206

🚨 CVE-2026-60206 — WebLogic SAML Takeover Oracle WebLogic Server SAML Authentication Vulnerability A technical analysis of CVE-2026-60206 affecting Oracle WebLogic Server. 📖 Overview CVE-2026-60206 is a Critical CVSS 9.9 vulnerability affecting Oracle WebLogic Server. According to Oracle, a...

CVE-2026-76904

GeoServer WFS Inventory and Authorized Verification This repository contains two Python scripts for investigating GeoServer WFS endpoints. Overview wfsinventory.py Purpose: Inventory layers, XSD fields, and WFS values, and optionally verify candidates via a time-based check. Execution examples:...