Hackable HTTP proxy: Toxy

toxy is a fully programmatic and hackable HTTP proxy to simulate server failure scenarios and unexpected network conditions It was mainly designed for fuzzing/evil testing purposes, when toxy becomes particularly useful to cover fault tolerance and resiliency capabilities of a system, especially ...

Unauthorized Access Vulnerability in Multiple Dedicated Micros DVR Products

Dedicated Micros DV-IP Express, SD Advanced, SD, EcoSense and DS2 are hard disk recorders from Dedicated Micros UK. A security vulnerability exists in several Dedicated Micros products, allowing remote attackers to exploit the vulnerability for unauthorized access to the devices...

Threat Outbreak Alert RuleID16970: Email Messages Distributing Malicious Software on July 27, 2015

Medium Alert ID: 40165 First Published: 2015 July 27 21:06 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID16970 may contain the following files: Name | Siz...

SEC Consult SA-20150716-0 :: Permanent Cross-Site Scripting in Oracle Application Express

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SEC Consult Vulnerability Lab Security Advisory 20150716-0 ======================================================================= title: Permanent Cross-Site Scripting product: Oracle Application Express vulnerable version: All versions prior to...

Unspecified Vulnerability in Oracle Database Application Express Component (CNVD-2015-04810)

Oracle Database is a large database of commercial nature. A security vulnerability exists in the Oracle Database Application Express component that allows an authenticated user to compromise system integrity, confidentiality...

Unspecified Vulnerability in Oracle Database Application Express Component (CNVD-2015-04809)

Oracle Database is a large database of commercial nature. A security vulnerability exists in the Oracle Database Application Express component that allows an authenticated user to affect system availability...

Unspecified Vulnerability in Oracle Database Application Express Component (CNVD-2015-04808)

Oracle Database is a large database of commercial nature. A security vulnerability exists in the Oracle Database Application Express component that allows an authenticated user to affect system availability...

Oracle Application Express Cross Site Scripting Vulnerability

Exploit for multiple platform in category web applications title: Permanent Cross-Site Scripting product: Oracle Application Express vulnerable version: All versions prior to 4.2.3.00.08 fixed version: 4.2.3.00.08 CVE number: CVE-2015-2655 impact: high homepage: https://apex.oracle.com/i/index.ht...

Oracle Database Multiple Vulnerabilities (July 2015 CPU)

The remote Oracle database server is missing the July 2015 Critical Patch Update CPU. It is, therefore, affected by multiple vulnerabilities in the following components : - Application Express CVE-2015-2655, CVE-2015-2585, CVE-2015-2586 - Core RDBMS CVE-2015-0468 - Java VM CVE-2015-2629 - Oracle...

Oracle Application Express Cross Site Scripting

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Permanent Cross-Site Scripting product: Oracle Application Express vulnerable version: All versions prior to 4.2.3.00.08 fix...

CVE-2015-2614

Unspecified vulnerability in Oracle Sun Solaris 11.2 allows local users to affect availability via vectors related to NVM Express SSD driver...

CVE-2015-2586

Unspecified vulnerability in the Application Express component in Oracle Database Server before 4.2.1 allows remote attackers to affect availability via unknown vectors...

CVE-2015-2585

Unspecified vulnerability in the Application Express component in Oracle Database Server before 5.0 allows remote authenticated users to affect availability via unknown vectors...

Design/Logic Flaw

Unspecified vulnerability in Oracle Sun Solaris 11.2 allows local users to affect availability via vectors related to NVM Express SSD driver...

CVE-2015-2586

Unspecified vulnerability in the Application Express component in Oracle Database Server before 4.2.1 allows remote attackers to affect availability via unknown vectors...

CVE-2015-2655

Unspecified vulnerability in the Application Express component in Oracle Database Server before 4.2.3.00.08 allows remote authenticated users to affect confidentiality and integrity via unknown vectors...

CVE-2015-2614

CVE-2015-2614 affects Oracle Solaris 11.2 via the NVM Express SSD driver. The CNVD entry describes a local-denial-of-service condition where a local attacker can crash the system due to a vulnerability in the NVM Express SSD driver component. The NVD entry similarly notes a local attack vector wi...

CVE-2015-2585

CVE-2015-2585: Oracle Database Server’s Application Express component (before version 5.0) is affected. The vulnerability allows remote authenticated users to impact availability via unknown vectors; CVSSv2 base score 2.1 (Low) with network access and high authentication complexity. Connected sou...

CVE-2015-2614

Unspecified vulnerability in Oracle Sun Solaris 11.2 allows local users to affect availability via vectors related to NVM Express SSD driver...

CVE-2015-2655: Undefined Security Weakness

Unspecified vulnerability in the Application Express component in Oracle Database Server before 4.2.3.00.08 allows remote authenticated users to affect confidentiality and integrity via unknown vectors...