wodat

wodat Windows Oracle Database Attack Tool Simple port of the popular Oracle Database Attack Tool ODAT https://github.com/quentinhardy/odat to C .Net Framework. Credit to https://github.com/quentinhardy/odat as lots of the functionality are ported from his code. Perform password based attacks e.g...

CVE-2012-1675

CVE-2012-1675 Oracle Database TNS Listener Poison Attack Vulnerability nmap -Pn -sT --script=+oracle-tns-poison -p 1521 192.168.2.18 https://www.integrigy.com/files/Integrigy%20Oracle%20TNS%20Poisoning%20Attacks.pdf...

CVE-2026-79822

A security vulnerability in HPE NonStop TNS/X Native Inspect may cause corruption of address and potentially redirect execution flow...

CVE-2026-79822 HPE NonStop TNS/X Native Inspect - Execution flow vulnerability

A security vulnerability in HPE NonStop TNS/X Native Inspect may cause corruption of address and potentially redirect execution flow...

CVE-2026-79822 HPE NonStop TNS/X Native Inspect - Execution flow vulnerability

A security vulnerability in HPE NonStop TNS/X Native Inspect may cause corruption of address and potentially redirect execution flow...

EUVD-2026-101871

A security vulnerability in HPE NonStop TNS/X Native Inspect may cause corruption of address and potentially redirect execution flow...

CVE-2026-79822

A security vulnerability in HPE NonStop TNS/X Native Inspect (specifically version T0903L02^AAL and earlier ) may result in address corruption and potential redirection of the execution flow. The vulnerability is associated with a Heap-based Buffer Overflow (CWE-122) and could lead to Denial of S...

CVE-2026-79822: Heap-based Buffer Overflow

A security vulnerability in HPE NonStop TNS/X Native Inspect may cause corruption of address and potentially redirect execution flow...

PT-2026-114798

A security vulnerability in HPE NonStop TNS/X Native Inspect may cause corruption of address and potentially redirect execution flow...

HPE NonStop TNS/X Native Inspect buffer error vulnerability

The HPE NonStop TNS/X Native Inspect T0903L02^AAL and earlier versions contain a buffer error vulnerability caused by address corruption, which may lead to an execution flow redirection...

NetScaler ADC and Gateway Before 14.1-73.37 Pre-Authentication Memory Overflow

NetScaler ADC and Gateway versions before 14.1-73.37 contain a pre-authentication memory overflow in the Oracle TNS DataStream parser. A malformed runt segment can cause an out-of-bounds write and denial of service. This advisory includes technical analysis and packet-flow conditions...

Tenable Security Center SCAP Audit File Command Injection

This is a Metasploit module that demonstrates how Tenable Security Center versions prior to 6.9.0 allow an authenticated user to achieve command execution as the web service account tns via the SCAP audit file upload flow. This module requires Metasploit: https://metasploit.com/download Current...

Oracle SID Brute

Brute-forces common Oracle SIDs against a TNS listener NSE oracle-sid-brute. !/usr/bin/env python3 -- coding: utf-8 -- """Oracle SID brute NSE oracle-sid-brute.""" from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient from lib.scanner.oracle.detectors import...

Oracle TNS Version

Queries Oracle TNS Listener for version/banner information NSE oracle-tns-version. !/usr/bin/env python3 -- coding: utf-8 -- """Oracle TNS version NSE oracle-tns-version.""" from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient from lib.scanner.oracle.detectors...

Malicious code in tns-py (PyPI)

Source: kam193 186bfba0931ba063bd6e71325785b97c646cbfaaf91c4dca876653673d29c0cc Package is prepared to exfiltrate environmental variables. The wording used clearly states it's part of a campaign targeting cryptocurrency users via malicious projects --- Category: MALICIOUS - The campaign has clear...

OPENSUSE-SU-2026:20855-1 Security update for ffmpeg-4

This update for ffmpeg-4 fixes the following issues: Changes in ffmpeg-4: - Add check for the return value of avmallocarray to avoid potential NULL pointer dereference. CVE-2025-10256, bsc1249431 - Update to version 4.4.7: Codecs, filters and other various bugfixes aacenctns: clamp filter directi...

Nessus Network Monitor < 6.5.4 Multiple Vulnerabilities (TNS-2026-14)

According to its self-reported version, the Nessus Network Monitor running on the remote host is prior to 6.5.4. It is, therefore, affected by multiple vulnerabilities as referenced in the TNS-2026-14 advisory. - An integer overflow can be triggered in SQLite's concatws function. The resulting,...

DEBIAN-CVE-2026-23927

A user able to connect to Agent 2 can inject an Oracle TNS connection string via the 'service' parameter. This can lead to Agent 2 connecting to an attacker-controlled server and leaking Oracle database credentials if they are saved in a named session...

CVE-2026-23927

A user able to connect to Agent 2 can inject an Oracle TNS connection string via the 'service' parameter. This can lead to Agent 2 connecting to an attacker-controlled server and leaking Oracle database credentials if they are saved in a named session...

CVE-2026-23927

The CVE-2026-23927 entry describes a vulnerability in the Agent 2 Oracle plugin where an authenticated user who can connect to Agent 2 can inject an Oracle TNS connection string via the 'service' parameter. This can cause Agent 2 to connect to an attacker-controlled server and may leak Oracle dat...