"Event 10053 logs TDE wallet password in cleartext" - This advisory gives a detailed example of how setting event 10053 can be used to reveal the wallet password. This event is normally used to reveal how the Cost Based Optimizer evaluated the execution path for a query. Wolfgang Breitling famously describes how this works in his well known paper "A Look Under the Hood of CBO The 10053 Event"
"Transparent Data Encryption stores key unencrypted in the SGA" - This advisory goes through a detailed example of how the dumpsga utility can be used to dump a clear text wallet password from the SGA.
"Read parts of any XML-file via customize parameter in Oracle Reports" - This advisory shows how the customize parameter of Oracle reports can be used to read the contents of any XML file on the server.
"Read parts of any file via desformat in Oracle Reports" - This advisory shows how the DESFORMAT parameter can be used without Oracle Reports to read parts of any file.
"Overwrite any file via desname in Oracle Reports" - This advisory shows how the DESNAME parameter can be used to overwrite any file using Oracle Reports. Alex also details comprehensive workaounds for this issue.