This module exploits a buffer overflow when parsing the password used to authenticate a connection via HTTP services.

This module exploits a buffer overflow in the UNLOCK command of the Oracle 9i Database FTP XDB service.

This module exploits a buffer overflow when parsing the username used to authenticate a connection against an Oracle DataBase.

Oracle Database Server is prone to a remote vulnerability that allows attackers to poison the data handled by the remote 'TNS Listener' component of the application. This module tries to verify if the vulnerability is present in the 'TNS Listener' component of the database server, without deploying an agent.

This module exploits a buffer overflow in the arguments of the Oracle Service Listener commands.

This module exploits a stack-based buffer overflow in the Oracle DB Server by sending a specially crafted SQL query.

This module exploits a vulnerability in the Client System Analyzer component of the Oracle Database Server.

This module exploits a stack based buffer overflow in the Oracle process. This is done by sending an 'AUTH_SESSKEY' property longer than the 64 bytes expected.

A missing boundary check in the TLS Heartbeat extension in OpenSSL can be abused by remote attackers to read up to 64 kb of memory from the server. This memory disclosure vulnerability can be used by remote unauthenticated attackers to obtain sensitive information from the affected server, including private keys and session cookies. This module will check if the target machine is vulnerable and it will try to dump memory contents to the Module Log window. This memory dump may contain sensitive data, as explained above.

This module exploits a vulnerability in OpenSSL by sending a "Change Ciper Spec" message to the server.