CVE-2017-10073

CVE-2017-10073 affects Oracle FLEXCUBE Universal Banking (Infrastructure subcomponent). Affected versions: 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0, 12.3.0. Described as easily exploitable: a low-privileged attacker with network access via HTTP can compromise data, with possible una...

CVE-2017-10103

Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications subcomponent: Miscellaneous. Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows low privileged attacker with network access via HT...

CVE-2017-10005

Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications subcomponent: Miscellaneous. Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via...

CVE-2017-10098

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0 and 12.3.0. Easily exploitable vulnerability allows low privileg...

CVE-2017-10103

CVE-2017-10103 describes a vulnerability in the Oracle FLEXCUBE Private Banking component (Miscellaneous subcomponent) of Oracle Financial Services Applications. Affected versions are 2.0.0, 2.0.1, 2.2.0 and 12.0.1. The issue allows a low-privileged attacker who can reach the system over HTTP via...

CVE-2017-10012

CVE-2017-10012 (Oracle FLEXCUBE Private Banking) affects Oracle Financial Services Applications, FLEXCUBE Private Banking; Operations subcomponent. Affected versions: 2.0.0, 2.0.1, 2.2.0, and 12.0.1. The vulnerability allows a low-privilege attacker with network access via HTTP to perform unautho...

CVE-2017-10009

Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications subcomponent: Miscellaneous. Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows low privileged attacker with network access via HT...

CVE-2017-10008

Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications subcomponent: Miscellaneous. Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows low privileged attacker with network access via HT...

CVE-2017-10007

Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications subcomponent: Miscellaneous. Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows low privileged attacker with network access via HT...

CVE-2017-10007

CVE-2017-10007 affects Oracle FLEXCUBE Private Banking (Oracle Financial Services Applications), specifically the Miscellaneous subcomponent. Affected versions are 2.0.0, 2.0.1, 2.2.0 and 12.0.1. The vulnerability allows a low-privileged attacker with network access via HTTP to read data from the...

CVE-2017-10007

Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications subcomponent: Miscellaneous. Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows low privileged attacker with network access via HT...

CVE-2017-10072

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: All Modules. Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0 and 12.3.0. Easily exploitable vulnerability allows low privileged...

jobfinder.com.au XSS vulnerability

Open Bug Bounty ID: OBB-276503 Description| Value ---|--- Affected Website:| jobfinder.com.au Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Marcus Hutchins (MalwareTech) Gets $30,000 Bail, But Can't Leave United States

Marcus Hutchins, the malware analyst who helped stop global Wannacry menace, has reportedly pleaded not guilty to charges of creating and distributing the infamous Kronos banking malware and is set to release on $30,000 bail on Monday. Hutchins, the 23-year-old who operates under the alias...

Threat Round-up for July 28 - August 4

Today, Talos is publishing a glimpse into the most prevalent threats we've observed between July 28 and August 04. As with previous round-ups, this post isn't meant to be an in-depth analysis. Instead, this post will summarize the threats we've observed by highlighting key behavior characteristic...

Oracle FLEXCUBE Universal Banking Remote Vulnerability (CNVD-2017-26287)

Oracle Financial Services Applications is a suite of financial services software from Oracle that combines core banking, online banking, and property management.Oracle FLEXCUBE Universal Banking is one of the real-time, online coverage of retail, group...Oracle FLEXCUBE Universal Banking is a...

WannaCry Hero Arrested, One of Two Charged with Distribution of Kronos Malware

Marcus Hutchins, the researcher hailed for his work in blunting the WannaCry ransomware outbreak in May, was arrested Wednesday in Las Vegas and charged with creating and distributing the Kronos banking malware. Hutchins, known online as Malwaretech, is a U.K. citizen and arrived in Las Vegas las...

Oracle FLEXCUBE Direct Banking Remote Vulnerability (CNVD-2017-26388)

Oracle Financial Services Applications is a set of core banking, online banking and property management financial services software from Oracle Corporation, of which Oracle FLEXCUBE Direct Banking is an Internet and mobile banking solution component. A security vulnerability exists in the Forgot...

WannaCry Inspires Banking Trojan to Add Self-Spreading Ability

Although the wave of WannaCry and Petya ransomware has now been slowed down, money-motivated hackers and cyber criminals have taken lessons from the global outbreaks to make their malware more powerful. Security researchers have now discovered at least one group of cyber criminals that are...

Oracle FLEXCUBE Private Banking Remote Vulnerability (NVD-C-2017-93430)

Oracle Financial Services Applications is a set of core banking, online banking and property management financial services software from Oracle Corporation, of which Oracle FLEXCUBE Private Banking is a private banking component. A security vulnerability exists in the Miscellaneous subcomponent o...