ANTICHAT — форум по информационной безопасности, OSINT и технологиям

Обзор уязвимостей Oracle

Exploits:

Oracle (oidldapd connect) Local Command Line Overflow Exploit
Oracle XDB FTP Service UNLOCK Buffer Overflow Exploit
Oracle Database Server <= 10.1.0.2 Buffer Overflow Exploit
Oracle Database PL/SQL Statement Multiple SQL Injection Exploits
Oracle 9.2.0.1 Universal XDB HTTP Pass Overflow Exploit
Oracle Database Server 9i/10g (XML) Buffer Overflow Exploit
Oracle <= 10g Release 2 (DBMS_EXPORT_EXTENSION) Local SQL Exploit
Oracle <= 9i / 10g (extproc) Local/Remote Command Execution Exploit
Oracle <= 9i / 10g File System Access via utl_file Exploit
Oracle 10g SYS.KUPW$WORKER.MAIN PL/SQL Injection Exploit
Oracle 10g SYS.KUPV$FT.ATTACH_JOB PL/SQL Injection Exploit
Oracle 9i/10g DBMS_EXPORT_EXTENSION SQL Injection Exploit
Oracle 10g KUPW$WORKER.MAIN Grant/Revoke dba Permission Exploit
Oracle 10g KUPV$FT.ATTACH_JOB Grant/Revoke dba Permission Exploit
Oracle 9i/10g DBMS_METADATA.GET_DDL SQL Injection Exploit
Oracle 9i/10g ACTIVATE_SUBSCRIPTION SQL Injection Exploit
Oracle 10g KUPW$WORKER.MAIN SQL Injection Exploit v2
Oracle 10g KUPV$FT.ATTACH_JOB SQL Injection Exploit v2
Oracle 9i/10g DBMS_METADATA.GET_DDL SQL Injection Exploit v2
Oracle 9i/10g ACTIVATE_SUBSCRIPTION SQL Injection Exploit v2
Oracle 10g KUPM$MCP.MAIN SQL Injection Exploit v2
Oracle 10g KUPM$MCP.MAIN SQL Injection Exploit
Oracle 9i/10g evil views Change Passwords Exploit (CVE-2007-3855)
Oracle 10g CTX_DOC.MARKUP SQL Injection Exploit
Oracle 10g/11g SYS.LT.FINDRICSET Local SQL Injection Exploit
Oracle 10g/11g SYS.LT.FINDRICSET Local SQL Injection Exploit (2)
Oracle 10g LT.FINDRICSET Local SQL Injection Exploit (IDS evasion)

Papers:

Bypassing Oracle dbms_assert
Dangling Cursor Snarfing: A New Class of Attack in Oracle
Oracle Forensics Part 4: Live Response
Oracle Forensics Part 3: Isolating Evidence of Attacks
Oracle Forensics Part 2: Locating Dropped Objects
Oracle Forensics Part 1: Dissecting the Redo Logs
Oracle Forensics Part 5: Finding Evidence of Data Theft in the Absence ..



===============================
phporacleview => (page_dir) Remote File Inclusion Exploit
===============================

Discoverd By : Alkomandoz Hacker


HomePge= Asb-May.Net & Mohandko.com & Sniper-sa.com & Tryag.com

================================

Script Name: phporacleview

Download Script: http://webxadmin.free.fr/download/phporacleview.zip


=================================
Bug in :

=======

==================================


Exploit :
--------------------------------

===================================

milw0rm.com