EUVD-2021-24911

Malware in sbrugna...

EUVD-2024-18772

Malicious code in bioql PyPI...

Oracle Database Server <= 11.1 'CREATE ANY DIRECTORY' Privilege Escalation Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/31738/info Oracle Database Server is prone to a privilege-escalation issue related to the 'CREATE ANY DIRECTORY' user privilege. Attackers may exploit this issue to gain full SYSDBA privileges on the vulnerable database...

Oracle 0-day to get SYSDBA access

Tanel Poder has found a way to get SYSDBA access to the Oracle database by utilising a user who has the BECOME USER system privilege, execute privileges on KUPP$PROC.CHANGEUSER and CREATE SESSION. he shows how a user with these privileges can become SYS but not SYSDBA and then use an immediate...