vulnerabilities in Oracle MySQL

Oracle has identified vulnerabilities in Oracle MySQL Cluster and Oracle MySQL Connector/ODBC. Versions of Oracle MySQL Cluster from 8.0.0 to 8.0.48, 8.4.0 to 8.4.11, and 9.7.0 to 9.7.2 contain vulnerabilities that allow unauthorized external attackers to cause denial of service through network...

pwnacle-fusion

pwnacle-fusion Oracle Reports 用の自動エクスプロイト、CVE-2012-3153 / CVE-2012-3152 開示してくれた @misssudo にクレジット 使い方: ./pwnacle.rb targeturl payloadurl このエクスプロイトは両方の CVE を使用して、payloadurl から .jsp シェルをアップロードします。アップロードされたシェルは /reports/images/shell.jsp からアクセス可能になります。 payloadurl には .jsp...

CVE-2010-3600-PythonHackOracle11gR2

此存储库没有 README。...

vulnerabilities present in Oracle Java SE

Oracle has identified vulnerabilities in Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition. These vulnerabilities affect several supported versions of Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition. An unauthorized attacker with network...

Vulnerabilities in Oracle Business Intelligence Enterprise Edition and Oracle BI Publisher

Oracle has identified several vulnerabilities in Oracle Business Intelligence Enterprise Edition and Oracle BI Publisher. These vulnerabilities exist in various versions of Oracle Business Intelligence Enterprise Edition versions 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0 and Oracle BI Publisher...

Vulnerabilities found in Oracle Financial Services

Oracle has identified vulnerabilities in various Financial Services Enterprise modules. These vulnerabilities exist in third-party products such as Apache Kafka, Log4j, and the Spring Framework. Updates have been released by the developers for these products. These updates are now integrated into...

Vulnerabilities are managed in Oracle Enterprise Manager

Oracle has identified several vulnerabilities in various components of Oracle Enterprise Manager. The vulnerabilities in Oracle Enterprise Manager Base Platform and Oracle Enterprise Manager for Systems Infrastructure involve multiple issues where an attacker with low privileges—or even without...

vulnerabilities present in Oracle E-Business Suite

Oracle has identified vulnerabilities in various components of the Oracle E-Business Suite, including General Ledger, Payments, Workflow, Sales, Purchasing, Call Center Technology, and other modules within versions 12.2.3 through 12.2.15. These vulnerabilities enable attackers with low to high...

Vulnerabilities found in Oracle Communications

Oracle has identified vulnerabilities in various communication modules, including Oracle Communications Cloud Native Core Network Exposure Function, Oracle Commerce Guided Search, and Oracle Communications Unified Inventory Management. These vulnerabilities include stack-based buffer overflows,...

Vulnerabilities in Oracle Commerce Platform

Oracle has identified several vulnerabilities in the Oracle Commerce Platform version 11.4.0. These vulnerabilities allow unauthorized attackers with network access to perform critical actions without authentication. This includes gaining unauthorized access to sensitive data, modifying, deleting...

Vulnerabilities in Oracle Database Products

Oracle has identified vulnerabilities in various database products, including the Database Server, Essbase, Autonomous Health Framework, and Oracle Application Testing Suite. The Oracle Database Server versions 19.3 to 23.26.3 contains critical vulnerabilities in the RDBMS and Portable Clusterwar...

Vulnerabilities in Oracle Fusion Middleware

Oracle has identified 262 vulnerabilities in various Oracle products, including Oracle WebLogic Server, Oracle Identity Manager, Oracle WebCenter Portal, Oracle WebCenter Content, Oracle WebCenter Sites, Oracle WebCenter Enterprise Capture, Oracle Reports Developer, Oracle Fusion Middleware, Orac...

CVE-2023-3163-SQL-Injection-Prevention

CVE-2023-3163-SQL-Injection-Prevention Oracle SQL Developer가 SQL 인젝션CVE-2023-3163에 취약한지 확인하는 간단하고 빠른 방법입니다. 이 취약점은 SQL Developer 버전 23.1.0에서 가장 흔히 발생합니다. CVE-2023-21969 익스플로잇 - SQL Developer 취약점 점검 설명 이 저장소는 SQL Developer 버전 23.1.0 미만에서 발견된 취약점인 CVE-2023-21969를 위한 간단하고 직관적인 익스플로잇을 포함하고 있습니다. 이...

CVE-2020-14882

CVE-2020-14882 이 스크립트는 인증되지 않은 GET 요청을 사용하여 Oracle WebLogic Server에서 원격 코드 실행RCE을 가능하게 합니다. CVE-2020-14882 취약점을 악용합니다. 임의의 명령어를 실행하여 공격자가 서버에 무단으로 액세스할 수 있습니다. 익스플로잇 세부 정보 Exploit Title: Oracle WebLogic Server, GET 요청을 통한 인증되지 않은 RCE Exploit Author: Danny Safaya CVE: CVE-2020-14882 Vendor Homepag...

CVE-2024-21111

이 바이너리들은 mansk1es의 코드를 사용하여 소스에서 빌드되었습니다. https://github.com/mansk1es/CVE-2024-21111 Oracle VM Virtual box 7.0.16 이전 버전의 권한 상승을 위한 사전 빌드된 바이너리...

CVE-2023-22047

説明: CVE-2023-22047 は、Oracle PeopleSoft における認証なしのファイル読み取り脆弱性です。ただし、高度なエクスプロイトにより、攻撃者はこの脆弱性を利用してリモートコード実行 RCE を実行できます。 PeopleSoft アプリケーションの「Portal.war」内のサーブレット「WSRP Consumer ResourceProxy」は、ファイルの読み取りと任意のホストへのリクエスト送信 SSRF を可能にします。 この脆弱性により、攻撃者は影響を受けるサーバー上で容易にリモートコード実行 RCE を達成でき、実際の深刻度は割り当てられた CVSS...

OpenJDK 8 <= 8u502 / 11.0.0 <= 11.0.32 / 17.0.0 <= 17.0.20 / 21.0.0 <= 21.0.12 / 25.0.0 <= 25.0.4 / 26.0.0 <= 26.0.2 Multiple Vulnerabilities (2026-08-18)

The version of OpenJDK installed on the remote host is 8 prior to 8u502 / 11.0.0 prior to 11.0.32 / 17.0.0 prior to 17.0.20 / 21.0.0 prior to 21.0.12 / 25.0.0 prior to 25.0.4 / 26.0.0 prior to 26.0.2. It is, therefore, affected by multiple vulnerabilities as referenced in the 2026-08-18 advisory...

Oracle Linux 8 : kernel (ELSA-2026-54246)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-54246 advisory. - udf: fix partition descriptor append bookkeeping Ravi Singh RHEL-179571 CVE-2026-45991 Tenable has extracted the preceding description block directl...

Oracle Linux 8 : python3 (ELSA-2026-56219)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-56219 advisory. 3.6.8-78.0.1 - Add Oracle Linux distribution in platform.py Orabug: 20812544 3.6.8.openela.0 - Add openela to supported dists 3.6.8-78 - Security fix for...

Oracle Linux 10 : mysql8.4 (ELSA-2026-56007)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-56007 advisory. 8.4.11-1 - Rebase to 8.4.11 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus...