Design/Logic Flaw

Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 12.0.2 and 12.0.3 allows remote attackers to affect confidentiality and integrity via vectors related to Pre-Login...

CVE-2016-0672

Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 12.0.2 and 12.0.3 allows remote attackers to affect confidentiality and integrity via vectors related to Pre-Login...

CVE-2016-0699

CVE-2016-0699 affects Oracle Financial Services Software’s FLEXCUBE Direct Banking component (versions 12.0.2 and 12.0.3 ). The vulnerability is in the Login sub-component and can be exploited remotely over the network to compromise confidentiality and integrity . The NVD entry lists a CVSSv3 bas...

CVE-2016-3463

Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 12.0.3 allows remote attackers to affect confidentiality and integrity via vectors related to Pre-Login...

CVE-2016-3464

CVE-2016-3464 concerns Oracle FLEXCUBE Direct Banking (Oracle Financial Services Software) 12.0.3. A vulnerability in the Accounts subcomponent allows remote authenticated users to affect confidentiality. The root cause isnot fully detailed in the provided sources; no exploit, vectors, or specifi...

CVE-2016-0672

Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 12.0.2 and 12.0.3 allows remote attackers to affect confidentiality and integrity via vectors related to Pre-Login...

CVE-2016-0672

CVE-2016-0672 affects Oracle FLEXCUBE Direct Banking (Oracle Financial Services Software) versions 12.0.2 and 12.0.3. The issue is described as an unspecified vulnerability exploitable via Pre-Login that can affect confidentiality and integrity. Connected sources confirm the vulnerability in the ...

CVE-2016-3463

Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 12.0.3 allows remote attackers to affect confidentiality and integrity via vectors related to Pre-Login...

CVE-2016-3464

Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 12.0.3 allows remote authenticated users to affect confidentiality via vectors related to Accounts...

CVE-2016-0699

Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 12.0.2 and 12.0.3 allows remote attackers to affect confidentiality and integrity via vectors related to the Login sub-component...

CVE-2016-0699

Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 12.0.2 and 12.0.3 allows remote attackers to affect confidentiality and integrity via vectors related to the Login sub-component...

CVE-2016-3463

CVE-2016-3463 affects the Oracle FLEXCUBE Direct Banking component of Oracle Financial Services Software 12.0.3. The connected CNVD entry describes an unspecified Pre-Login vulnerability in this component that can be exploited remotely to read, update, insert, or delete data, thereby impacting co...

CVE-2016-3464

Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 12.0.3 allows remote authenticated users to affect confidentiality via vectors related to Accounts...

Creators of SpyEye Virus Sentenced to 24 Years in Prison

In Brief Two International hackers, Aleksandr Andreevich Panin and Hamza Bendelladj, have been sentenced to a combined 24 years and 6 months in prison for their roles in developing and distributing SpyEye banking trojan, a powerful botnet similar to the infamous ZeuS malware. Both hackers were...

Bank Trojans Nymaim, Gozi Merge Create GozNym

Two powerful Trojans, Nymaim and Gozi ISFB, have been combined to create a “double-headed beast” called GozNym. The Trojan has managed to steal $4 million since it was first discovered just two weeks ago, according to IBM X-Force Research. It reports the hybrid Trojan is currently engaged in an...

ZeuS Banking Trojan Resurfaces As Atmos Variant

Old nemeses die hard, especially when you’re banking malware named ZeuS. According to Denmark-based Heimdal Security, the potent 9-year-old malware ZeuS has morphed into the up-and-coming Atmos malware – now targeting banks in France. Researchers are warning that the criminals behind Atmos have...

UBS Mobile Banking - BSD license, Customized SSL, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application UBS Mobile Banking published at the 'play' market has multiple vulnerabilities...

Meine Bank - Runtime privilege escalation, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Meine Bank published at the 'play' market has multiple vulnerabilities...

My Bank - Customized SSL, External URLs, KeyStore usage vulnerabilities

HackApp vulnerability scanner discovered that application My Bank published at the 'play' market has multiple vulnerabilities...

REINER SCT ONLINEBANKING - Corrupted files, Native code usage, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application REINER SCT ONLINEBANKING published at the 'play' market has multiple vulnerabilities...