CVE-2013-1516

Unspecified vulnerability in the Oracle WebCenter Capture component in Oracle Fusion Middleware 10.1.3.5.1 allows remote authenticated users to affect availability via unknown vectors related to Import Server...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Clinical Remote Data Capture Option component in Oracle Industry Applications 4.6.0 and 4.6.6 allows remote authenticated users to affect confidentiality and integrity via vectors related to HTML Surround...

Design/Logic Flaw

Unspecified vulnerability in the Oracle WebCenter Capture component in Oracle Fusion Middleware 10.1.3.5.1 allows remote authenticated users to affect availability via unknown vectors related to Import Server...

CVE-2013-1520

Unspecified vulnerability in the Oracle Clinical Remote Data Capture Option component in Oracle Industry Applications 4.6.0 and 4.6.6 allows remote authenticated users to affect confidentiality and integrity via vectors related to HTML Surround...

CVE-2013-1516

Unspecified vulnerability in the Oracle WebCenter Capture component in Oracle Fusion Middleware 10.1.3.5.1 allows remote authenticated users to affect availability via unknown vectors related to Import Server...

CVE-2013-1520

CVE-2013-1520 affects Oracle Industry Applications (Oracle Clinical Remote Data Capture Option) 4.6.0 and 4.6.6. The vulnerability is described as unspecified in the Oracle RDC component, enabling remote authenticated users to impact confidentiality and integrity via vectors related to HTML Surro...

CVE-2013-1516

Unspecified vulnerability in the Oracle WebCenter Capture component in Oracle Fusion Middleware 10.1.3.5.1 allows remote authenticated users to affect availability via unknown vectors related to Import Server...

CVE-2013-1516

CVE-2013-1516 concerns a buffer overflow in the BlackIceDevMode.ocx ActiveX control used by Oracle WebCenter Capture (formerly Oracle Document Capture). The Import Server subcomponent is affected, allowing command execution when a user loads a malicious page that calls SetAnnotationFont. Exploita...

Oracle Document Capture BlackIceDevMode.ocx ActiveX Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle Document Capture. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. Recent assessments: wchen-r7 at Septembe...

Arecont Vision model AV1355DN camera vulnerable to denial of service

Overview The Arecont Vision model AV1355DN MegaDome surveillance camera is reported to be affected by a denial-of-service vulnerability by sending a UDP packet to port 69 on the device. Description The Arecont Vision model AV1355DN MegaDome surveillance camera is reported to be affected by a...

thinksns V3 getshell vulnerabilities attached to the use of the method-vulnerability warning-the black bar safety net

tick test re-test is that the results of the proceedings I applied for didn't let me into listening to friends say this I'll probably see you found a getshell Anyway all tested so many hackers surely by the time someone dug out might as well put out attachaction.class.php | 1 | public function...

[Wireshark v1.9.2] World’s Foremost Network Protocol Analyzer

Wireshark is the world’s foremost network protocol analyzer. It lets you capture and interactively browse the traffic running on a computer network. It is the de facto and often de jure standard across many industries and educational institutions. Wireshark development thrives thanks to the...

[Password Sniffer Console] Password Sniffing Tool to capture Email, Web and FTP login passwords

Password Sniffer Console is the all-in-one command-line based Password Sniffing Tool to capture Email, Web and FTP login passwords passing through the network. It automatically detects the login packets on network for various protocols and instantly decodes the passwords. Here is the list of...

[OSForensics V2.0] Digital investigation Tool

OSForensics updated to version 2.0. OSForensics allows you to identify suspicious files and activity with hash matching, drive signature comparisons, e-mails, memory and binary data. It lets you extract forensic evidence from computers quickly with advanced file searching and indexing and enables...

IE generic JSON hijacking vulnerabilities-vulnerability warning-the black bar safety net

Brief description: Due to the certain resource container data improper handling lead to json hijacking vulnerabilities. Detailed description: Since ie supports vbscript,so the script elements may be specified to the vbscript language: script language=vbscript/script When but we specify that a js...

Microsoft Word UNC Path Injector

This module modifies a .docx file that will, upon opening, submit stored netNTLM credentials to a remote host. It can also create an empty docx file. If emailed the receiver needs to put the document in editing mode before the remote server will be contacted. Preview and read-only mode do not wor...

Hunt CCTV Credential Disclosure

Hunt CCTV and generics brands Insufficient Authentication January 17, 2013 - A. Ramos -- CVE ID: CVE-2013-1391 reserved -- Affected Vendors: Hunt CCTV http://www.huntcctv.com/ generic brands from Hunt Capture CCTV http://www.capturecctv.ca/ NoVus CCTV http://www.novuscctv.com/ Well-Vision Inc...

wireshark: multiple file parser vulnerabilities (wnpa-sec-2012-01)

The dissectpacket function in epan/packet.c in Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remote attackers to cause a denial of service application crash via a long packet in a capture file, as demonstrated by an airopeek file...

Wireshark: Dos via large buffer allocation request

Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remote attackers to cause a denial of service application crash via a long packet in a 1 Accellent 5Views aka .5vw file, 2 I4B trace file, or 3 NETMON 2 capture file...

Nexpose Security Console Session Capture

Product: Nexpose Security Console Vendor: Rapid7 Version: ’ is replaced by ‘nexposeCCSessionID=;time-zone-offset=000. 5. Success. Vendor Notified: Yes Vendor Response: Quickly escalated and resolved. Vendor Update: Remediated in 5.5.4. Reference: CVE-2012-6494...