A week in security (August 14 – August 20)

Last week, we gave some security tips for parents and kids aimed at the new school term. We also took a peek at the inside of the Kronos malware, focusing on how it works and protects itself. And, once again, we spotted a return of Locky ransomware with two new flavors at once, diablo6 and Lukitu...

Meeting and Hotel Booking Provider's Data Found in Public Amazon S3 Bucket

Leaks of personal and business information from unsecured Amazon S3 buckets are piling up. The latest belongs to Groupize, a Boston-area business that sells tools to manage small group meetings as well as a booking engine that handles hotel room-block reservations. Researchers at Kromtech Securit...

Sony PlayStation Social Media Accounts Hacked; Claims PSN Database Breach

After hacking social media accounts of HBO and its widely watched show Game of Thrones, a notorious group of hackers calling itself OurMine took control over the official Twitter and Facebook accounts for Sony's PlayStation Network PSN on Sunday. After taking over the accounts, OurMine, Saudi...

Vendor Exposes Backup of Chicago Voter Roll via AWS Bucket

Voter registration data belonging to the entirety of Chicago’s electoral roll—1.8 million records—was found a week ago in an Amazon Web Services bucket configured for public access. The data was a backup stored in AWS by Election Systems & Software ES&S, a voting machine and election management...

Game of Thrones and HBO — Twitter, Facebook Accounts Hacked

The Game of Thrones hacking saga continues, but this time it's the HBO's and GOT's official Twitter and Facebook accounts got compromised, rather than upcoming episodes. As if the leak of episodes by hackers and the accidental airing of an upcoming episode of Game of Thrones by HBO itself were no...

How Top Companies Accidentally Leaking Terabytes of Sensitive Data Online

An anti-malware detection service provider and premium security firm has been accused of leaking terabytes of confidential data from several Fortune 1000 companies, including customer credentials, financial records, network intelligence and other sensitive data. However, in response to the...

Nextcloud: Access to all files of remote user through shared file

Steps to reproduce 1. User A shares a file "movie.mp4" with user B. 2. User B uses webdav to access files e.g. foldersync or nautilus 3. share is shown as regular file using webdav. 4. Copy the file and paste it to the same folder still using webdav. 5. A new folder will appear with the name...

Code injection

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite subcomponent: Web Access. Supported versions that are affected are 8.3, 8.4, 15.1, 15.2, 16.1 and 16.2. Easily exploitable vulnerability allows low privileged attacker with netwo...

Design/Logic Flaw

Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite subcomponent: Security. Supported versions that are affected are 9.3.5 and 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM...

CVE-2017-10199

CVE-2017-10199 affects Oracle iLearning, Learner Pages subcomponent, version 6.2. An unauthenticated attacker with network access via HTTP can compromise Oracle iLearning, with user interaction required, potentially leading to unauthorized access to data and to update/insert/delete of Oracle iLea...

CVE-2017-10192

The CVE-2017-10192 issue affects Oracle iStore within Oracle E-Business Suite Shopping Cart for multiple 12.1.x/12.2.x versions. It allows an unauthenticated, network-based attacker over HTTP to read a subset of data due to a disclosed information‑exposure in Shopping Cart handling. Practical imp...

CVE-2017-10224

CVE-2017-10224 affects the Oracle Hospitality Inventory Management component of Oracle Hospitality Applications (subcomponent: Inventory and Count Cycle). Affected versions are 8.5.1 and 9.0.0. The vulnerability is exploitable by a low-privilege attacker with network access via HTTP , potentially...

CVE-2017-10225

Summary of CVE-2017-10225 : A vulnerability in the Oracle Hospitality RES 3700 component of Oracle Hospitality Applications (subcomponent OPS Operations) affects version 5.5. The issue is exploitable with local access (physical access is indicated as part of the attack model) and can lead to unau...

CVE-2017-10214

CVE-2017-10214 affects Oracle Retail Xstore Point of Service (Xstore Office). Affected versions: 6.0.x, 6.5.x, 7.0.x, 7.1.x, 15.0.x, 16.0.0. The vulnerability allows an unauthenticated attacker with network access over HTTP to compromise data, potentially gaining unauthorized access to critical d...

CVE-2017-10183

Vulnerability in the Oracle Retail Xstore Point of Service component of Oracle Retail Applications subcomponent: Point of Sale. Supported versions that are affected are 6.0.x, 6.5.x, 7.0.x, 7.1.x, 15.0.x and 16.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network...

CVE-2017-10048

CVE-2017-10048 affects Oracle Fusion Middleware’s Oracle Enterprise Repository Web Interface, with affected versions 11.1.1.7.0 and 12.1.3.0.0. The vulnerability enables unauthenticated network access via HTTP to compromise Oracle Enterprise Repository, potentially granting unauthorized read/writ...

CVE-2017-10094

CVE-2017-10094 affects Oracle’s Agile PLM component within the Oracle Supply Chain Products Suite (subcomponent: Security). Affected versions are 9.3.5 and 9.3.6. The vulnerability allows a low-privilege attacker with network access over HTTP to compromise Oracle Agile PLM, with exploitation requ...

CVE-2017-10003

Affected software: Oracle Solaris (Solaris 10 on x86 and SPARC). Component: Network Services Library of the Sun Systems Products Suite. Root cause / vulnerability detail: Local vulnerability that allows a low-privileged user with logon to the Solaris host to access or modify Solaris data (unautho...

CVE-2017-10201

The CVE-2017-10201 entry concerns Oracle Hospitality Applications, specifically the e7 component (subcomponent: Other), affected in version 4.2.1. The connected sources consistently describe a vulnerability that can be exploited by a low-privileged user who has logged into the infrastructure wher...

CVE-2017-10219

CVE-2017-10219 affects Oracle Hospitality Guest Access Base subcomponent in Oracle Hospitality Applications. Affected versions: 4.2.0.0 and 4.2.1.0. The vulnerability is exploitable by a low-privileged user who can log on to the infrastructure where Oracle Hospitality Guest Access runs, potential...