CVE-2016-8324

The CVE-2016-8324 entry affects Oracle FLEXCUBE Core Banking (subcomponent: Core) with affected versions 5.1.0, 5.2.0, and 11.5.0. Root cause details are not explicitly provided in the documents, but the vulnerability enables an unauthenticated attacker with network access via HTTP to read data f...

CVE-2016-8322

Vulnerability in the Oracle FLEXCUBE Core Banking component of Oracle Financial Services Applications subcomponent: Core. Supported versions that are affected are 5.1.0, 5.2.0 and 11.5.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2016-8323

CVE-2016-8323 affects Oracle FLEXCUBE Core Banking (Core subcomponent) in Oracle Financial Services Applications. Affected versions: 5.1.0, 5.2.0, 11.5.0. Vulnerability allows a low-privilege, network-accessing attacker over HTTP to perform unauthorized updates/inserts/deletes and read access to ...

CVE-2016-8323

Vulnerability in the Oracle FLEXCUBE Core Banking component of Oracle Financial Services Applications subcomponent: Core. Supported versions that are affected are 5.1.0, 5.2.0 and 11.5.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2016-8314

CVE-2016-8314 affects Oracle FLEXCUBE Core Banking (subcomponent: Core). Affected versions are 5.1.0, 5.2.0 and 11.5.0. The vulnerability is exploitable by a low-privileged attacker with network access over HTTP and can lead to unauthorized read access to a subset of data in Oracle FLEXCUBE Core ...

CVE-2016-5623

Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications subcomponent: Product / Instrument Search. Supported versions that are affected are 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows low privileged attacker with network access...

CVE-2017-3245

Vulnerability in the Oracle FLEXCUBE Direct Banking component of Oracle Financial Services Applications subcomponent: Pre-Login. Supported versions that are affected are 12.0.2 and 12.0.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2016-8307

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Core. Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0 and 12.2.0. Easily exploitable vulnerability allows unauthenticated attacker with...

CVE-2016-8304

CVE-2016-8304 affects Oracle FLEXCUBE Universal Banking (Core) with affected versions 11.3.0, 11.4.0, 12.0.1–12.2.0. The vulnerability allows a low-privileged attacker with network access via HTTP to compromise data security; exploitation requires user interaction. Impact includes unauthorized up...

CVE-2016-8282

CVE-2016-8282 affects Oracle FLEXCUBE Private Banking (Product / Instrument Search) with affected versions 2.0.1, 2.2.0 and 12.0.1. The vulnerability is exploitable over HTTP by an unauthenticated attacker with network access; exploitation requires user interaction. The flaw can allow unauthorize...

CVE-2016-8308

CVE-2016-8308 affects Oracle FLEXCUBE Private Banking (subcomponent: Product / Instrument Search) in affect versions 2.0.1, 2.2.0 and 12.0.1. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise data, with successful attacks requiring a user to interact ...

Dridex Returns With Windows UAC Bypass Method

After a six-month hiatus, the Dridex banking malware is back and targeting large financial institutions in the U.K with a new technique that can bypass Windows User Account Control UAC. Researchers at Flashpoint said they have seen small phishing and spear-phishing campaigns targeting specific...

Банк Хоум Кредит - Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Банк Хоум Кредит published at the 'play' market has multiple vulnerabilities...

Google to Block .js Attachments in Gmail

Spammers and cybercriminals have revived email-based attacks in the last year, giving new life to macro-based malware hidden in Word documents, and with greater intensity of late, .js files that run JavaScript on infected clients, largely to download malware from an attacker’s site. Google...

Bakai Bank Mobile Banking - Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Bakai Bank Mobile Banking published at the 'play' market has multiple vulnerabilities...

Ameria Mobile Banking - BSD license, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Ameria Mobile Banking published at the 'play' market has multiple vulnerabilities...

Unibank Mobile Banking - Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Unibank Mobile Banking published at the 'play' market has multiple vulnerabilities...

Source Code for another Android Banking Malware Leaked

Another bad news for Android users — Source code for another Android banking malware has been leaked online via an underground hacking forum. This newly discovered banking Trojan is designed to steal money from bank accounts of Android devices' owners by gaining administrator privileges on their...

Russian Hacker behind 'NeverQuest' Malware, Wanted by FBI, Is Arrested in Spain

A Russian computer hacker wanted by the FBI on hacking allegations was arrested and jailed in Spain earlier this week, while a decision on his extradition to the United States has yet to be made. The Guardia Civil, Spanish law enforcement agency officers, have detained 32-year-old Stanislav Lisov...

Unspecified Vulnerability in Oracle FLEXCUBE Universal Banking (CNVD-2017-00939)

Oracle FLEXCUBE Universal Banking is the United States Oracle Oracle company's set of real-time, online coverage of retail, group, investment banking, a comprehensive solution. The program supports multi-currency, multi-language and multi-entity operations. A remote security vulnerability exists ...