8220 Gang Exploiting Oracle WebLogic Server Vulnerability to Spread Malware
December 19th, 2023 | ๐
iSpeech.org ๎ Dec 19, 2023๎ NewsroomCryptojacking / Cyber Threat The threat actors associated with the 8220 Gang have been observed exploiting a
Browsing the "oracle" Tag
Oracle 19c / 21c Sharding Component Password Hash Exposure – Torchsec
October 26th, 2023 | ๐
TTS Title: CVE-2023-22074 โ Oracle database password hash exposure in sharding componentProduct: DatabaseManufacturer: OracleAffected Version(s): 19c,21c 19.3-19.20 and 21.3-21.11]Tested Version(s):
Oracle RMAN Missing Auditing – Torchsec
September 3rd, 2023 | ๐
portuguese tts Title: CVE-2021-2207 - RMAN Controlfile Operation Not AuditedProduct: DatabaseManufacturer: OracleAffected Version(s): 12.1.0.2, 12.2.0.1, 18c, 19cTested Version(s): 19cRisk Level:
Oracle Weblogic PreAuth Remote Command Execution – Torchsec
June 12th, 2023 | ๐
https://www.ispeech.org/text.to.speech ### This module requires Metasploit: https://metasploit.com/download# Current source: https://github.com/rapid7/metasploit-framework## class MetasploitModule < Msf::Exploit::RemoteRank = ExcellentRankinginclude Msf::Exploit::Remote::Tcpinclude Exploit::Remote::JndiInjectionprepend Msf::Exploit::Remote::AutoCheck #
Oracle RMAN Missing Auditing – Torchsec
May 5th, 2023 | ๐
https://www.ispeech.org Title: CVE-2020-2978 - Oracle RMAN Audit table point in time recovery not recordedProduct: DatabaseManufacturer: OracleAffected Version(s): 12.1.0.2, 12.2.0.1, 18c,
Oracle DB Broken PDB Isolation / Metadata Exposure – Torchsec
March 15th, 2023 | ๐
iSpeech Title: CVE-2021-2173 โ PDB Isolation is broken through metadata exposureProduct: DatabaseManufacturer: OracleAffected Version(s): 12.1.0.2, 12.2.0.1, 18c, 19cTested Version(s): 19cRisk
Oracle 19c Access Bypass – Torchsec
March 7th, 2023 | ๐
Convert Text to Speech Title: Oracle Database Vault Protected Table With Realm Data Extraction VulnerabilityProduct: DatabaseManufacturer: OracleAffected Version(s): 19c 19.18
Oracle E-Business Suite (EBS) Unauthenticated Arbitrary File Upload – Torchsec
March 1st, 2023 | ๐
british text to speech ### This module requires Metasploit: https://metasploit.com/download# Current source: https://github.com/rapid7/metasploit-framework##require 'rex/zip' class MetasploitModule < Msf::Exploit::RemoteRank = ExcellentRanking
Optivโs gTIC Prioritized Software and Services List + MITRE Tactics Part III: Oracle WebLogic
February 26th, 2023 | ๐
iSpeech.org This blog is a continuation of our Source Zero blog series, which outlines the Optiv Global Threat Intelligence Centerโs
Oracle Database 12.1.0.2 Spatial Component Privilege Escalation – Torchsec
February 3rd, 2023 | ๐
iSpeech.org Title: Oracle Database Privilege Escalation Through Oracle Spatial ComponentProduct: DatabaseManufacturer: OracleAffected Version(s): 12.1.0.2Tested Version(s): 12cR1Risk Level: HighSolution Status: Fixed
CISA Alert: Oracle E-Business Suite and SugarCRM Vulnerabilities Under Attack – The Hacker News
February 3rd, 2023 | ๐
https://www.ispeech.orgCISA Alert: Oracle E-Business Suite and SugarCRM Vulnerabilities Under Attack The Hacker News Source link
Mythics has a new majority owner – Washington Technology
January 12th, 2023 | ๐
https://www.ispeech.orgMythics has a new majority owner Washington Technology Source link
Oracle Database Vault Metadata Exposure – Torchsec
January 5th, 2023 | ๐
Text to Speech Title: CVE-2021-2175 โ Oracle Database Vault Metadata Exposure VulnerabilityProduct: DatabaseManufacturer: OracleAffected Version(s): 12.1.0.2, 12.2.0.1, 18c, 19cTested Version(s):
Oracle DBMS_REDACT Dynamic Data Masking Bypass – Torchsec
January 3rd, 2023 | ๐
https://www.ispeech.org/text.to.speech Title: ByPassing DBMS_REDACT Dynamic Data Masking security feature in Oracle database systemProduct: DatabaseManufacturer: OracleAffected Version(s): 19c,21cTested Version(s): 19c,21cCVE Reference:
-
Donate Via Wallets
-
MetaMask -
Trust Wallet -
Binance Wallet -
WalletConnect
-
-
Popular
Event Management 1.0 SQL Injection – Torchsec March 28, 2024 # Exploit Title: Event Management - SQL Injection# Application: Event… (11)- Red Hat Security Advisory 2024-1367-03 – Torchsec March 19, 2024 The following advisory data is extracted from:https://access.redhat.com/security/data/csaf/v2/advisories/2024/rhsa-2024_1367.jsonRed Hat officially shut… (8)
- Artica Proxy Unauthenticated PHP Deserialization… March 27, 2024 ### This module requires Metasploit: https://metasploit.com/download# Current source: https://github.com/rapid7/metasploit-framework##class MetasploitModule… (8)
- Siklu MultiHaul TG Series Credential Disclosure… March 29, 2024 # Exploit Title: Siklu MultiHaul TG series - unauthenticated credential… (8)
๐ฅMembers
-
๐ Forum Groups
-
linktr.ee/obewyn
Gloss