Oracle XSS
quality 2/10 · low quality
0 net
AI Summary
Brief blog post about finding and reporting an XSS vulnerability on Oracle's education subdomain (education.oracle.com) that was eventually patched and acknowledged. No technical details about the vulnerability, exploitation, or root cause are provided.
Entities
Oracle Corporation
education.oracle.com
Shashank
Shashank's Security Blog: Oracle xss Home Home Need my service? Sunday, 17 November 2013 Oracle xss Every one knows about ORACLE. Oracle Corporation is an American multinational computer technology corporation headquartered in Redwood City, California, United States. I spotted some security issues on their website, and finally, they have fixed it. One of them was cross-site scripting issue in oracle's sub-domain http://education.oracle.com they took a long time in fixing but after the fix, they acknowledged me on their website. Oracle Critical Patch Update Advisory - January 2013 - Beta Oracle CVRF http://www.oracle.com/ocom/groups/public/@otn/documents/webcontent/1841213.xml And Oracle Critical Patch Update Advisory - July 2013 - Beta Oracle CVRF http://www.oracle.com/ocom/groups/public/@otn/documents/webcontent/1841215.xml cheers :) Posted by Shashank at 14:08 Email This BlogThis! Share to X Share to Facebook Share to Pinterest No comments: Post a Comment Newer Post Older Post Home Subscribe to: Post Comments (Atom) Follow Me Follow @cyberboyIndia Blog Archive ► 2020 (3) ► November (1) ► August (1) ► July (1) ► 2019 (2) ► May (1) ► March (1) ► 2018 (3) ► March (1) ► February (1) ► January (1) ► 2017 (3) ► November (2) ► October (1) ► 2015 (2) ► October (1) ► March (1) ► 2014 (1) ► January (1) ▼ 2013 (7) ► December (4) ▼ November (1) Oracle xss ► October (2) Popular Posts Writing a silent cryptocurrency miner (Monero) in 6 lines of code Hidden Crypto currency mining has always been a game for blackhat hackers to make money out of it. After reading a lot of blog and news abo... From a 500 error to Django admin takeover This bug is about a private target I was hunting. I passed all the subdomains to FFUF , a great tool written in GoLang to brute force direct... CRLF injection in blockchain.info This bug was reported by me to "Blockchain.info" for their bug-bounty program. For those who don't know about blockchain.in... Oracle xss Every one knows about ORACLE. Oracle Corporation is an American multinational computer technology corporation headquartered in Redwood City... How Apollo Hospitals leaked 1 million customer details About Apollo Hospitals:- In 2015, Apollo Hospitals introduced its digital platform, Ask Apollo. The platform provides remote healthcare s... Heroku Directory Transversal Long back I spotted a Directory Traversal bug in Heroku. "Heroku is a cloud platform is a cloud application platform – a new way of ... Stealing bitcoin wallet backups from blockchain.info Oauth, where many bugs arise :) This was one of my finding for the bug-bounty program of blockchain.info, where I was able to steal anyo... Taking Over Publicly Editable Github Wiki in Masses Let's get familiar with a few things first! What is Github? GitHub is a web-based hosting service for version control using Git. Git... LFI in Nokia maps Well, this is my first blog-post, and I am going to share a Local File inclusion bug which I spotted in Nokia maps. http://maps.nokia.com... Escalating a GitHub leak to takeover entire organization I was hunting on a private program. One of the common things I do is look for leaked credentials on Github. I give special attention to dele...