CVE-2013-3830

CVE-2013-3830 affects the Oracle Hyperion Hyperion Strategic Finance component (versions 11.1.2.1 and 11.1.2.2 ). It enables remote authenticated users to impact confidentiality , integrity , and availability via unknown vectors related to the Server. The provided documents do not include explici...

PayPal Inc BB #61 - Persistent Mail Encoding Vulnerability

Document Title: =============== PayPal Inc BB 61 - Persistent Mail Encoding Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=846 PayPal Security UID: bzbe1he Release Date: ============= 2013-10-15 Vulnerability Laboratory ID VL-ID:...

Android exposed the new vulnerability: hackers can use a key authentication to steal user passwords-vulnerability warning-the black bar safety net

Close paragraph of time, the hackers in the Android system found a large number of vulnerabilities, including the legitimate Android software into malicious software, the FBI can remotely monitor the Android phone microphone and so on. Now, PCWorld also exposed with the Android a new...

CMS Cameron McKenna 2013 Cross Site Scripting Vunlerability

CMS Cameron McKenna 2013 suffers from a cross site scripting vulnerability. The vendor has been notified of this issue. Note that this advisory has site-specific information. Product: CMS Cameron McKenna Web:http://www.cms-cmck.com Versions: CMS 2013 Date: 25/04/2013 Vendor Notified: 24/04 - 25/0...

Squiz CMS 11654 File Path Traversal Vulnerability

Exploit for php platform in category web applications ======= Summary ======= Name: Squiz CMS - File Path Traversal Release Date: 30 November 2012 Reference: NGS00330 Discoverer: Robert Ray Vendor: Squiz Vendor Reference: 11846 Systems Affected: Squiz CMS V11654 Risk: High Status: Published...

#opIsrael - Hackers hit Israel with mass Cyber Attack over Gaza

Protesting against attacks taking place on Gaza, Anonymous hackers attempts to hack most of the Israel websites in the past few days. "government and private websites are under siege from hackers, who have mounted 44 million cyberattacks in less than a week", the government said. Today Pakistani...

Sophos Products - Multiple Vulnerabilities

Sophos Products - Multiple Vulnerabilities List, I've completed the second paper in my series analyzing Sophos Antivirus internals, titled "Practical Attacks against Sophos Antivirus". As the name suggests, this paper describes realistic attacks against networks using Sophos products. The paper...

Anonymous leaks Classified Documents from Greek Finance Ministry server

Collective hacking group Anonymous leaks username-passwords and classified documents from Greek Finance Ministry server. Just a few days before the Greek Parliament is scheduled to vote on a $17.45 billion spending cut and tax hike plan. Attack was carried out under anonymous operation named -...

CVE-2011-5167

Heap-based buffer overflow in the SetDevNames method of the Tidestone Formula One ActiveX control TTF16.ocx 6.3.5 Build 1 in Oracle Hyperion Strategic Finance 12.x and possibly earlier allows remote attackers to execute arbitrary code via a long string to the DriverName parameter...

Heap overflow

Heap-based buffer overflow in the SetDevNames method of the Tidestone Formula One ActiveX control TTF16.ocx 6.3.5 Build 1 in Oracle Hyperion Strategic Finance 12.x and possibly earlier allows remote attackers to execute arbitrary code via a long string to the DriverName parameter...

CVE-2011-5167

Heap-based buffer overflow in the SetDevNames method of the Tidestone Formula One ActiveX control TTF16.ocx 6.3.5 Build 1 in Oracle Hyperion Strategic Finance 12.x and possibly earlier allows remote attackers to execute arbitrary code via a long string to the DriverName parameter...

CVE-2011-5167

CVE-2011-5167 describes a heap-based buffer overflow in the SetDevNames method of the Tidestone Formula One ActiveX control (TTF16.ocx) version 6.3.5 Build 1 used by Oracle Hyperion Strategic Finance 12.x (and possibly earlier). An attacker could trigger arbitrary code execution by supplying a lo...

Operation Aurora - Other Zero-Day Attacks targeting finance and Energy

The infamous Aurora Trojan horse is just one of many attacks launched by the same group of malware authors over the past three years, according to researchers at Symantec. Security researchers with Symantec have issued a report outlining the techniques used by the so-called "Edgewood" hacking...

'Elderwood' Crew, Tied to Google Aurora Attack, Targeting Defense, Energy, Finance Companies

UPDATE–The same team that attacked Google in the Aurora campaign in 2009 is still active and has been conducting a long-term campaign targeting defense contractors, financial services companies, energy companies, human rights organizations and government agencies using a seemingly inexhaustible...

GAzie 5.20 - Cross-Site Request Forgery

GAzie 5.20 - Cross-Site Request Forgery ======================================== GAzie Date: 5/02/2012 Site: http://www.giudinvx.altervista.org/ -------------------------------------------------------- @Application Info: Multicompany finance application written in PHP using a MySql database backe...

GAzie <= 5.20 Cross Site Request Forgery

Exploit for php platform in category web applications ======================================== GAzie Date: 5/02/2012 Site: http://www.giudinvx.altervista.org/ -------------------------------------------------------- @Application Info: Multicompany finance application written in PHP using a MySql...

GAzie 5.20 - Cross-Site Request Forgery

======================================== GAzie Date: 5/02/2012 Site: http://www.giudinvx.altervista.org/ -------------------------------------------------------- @Application Info: Multicompany finance application written in PHP using a MySql database backend for small to medium enterprise. It le...

Chinese Hackers Use Canadian Law Firms as Backdoor to Client

Hackers operating behind Chinese IP addresses reportedly compromised seven Canadian law firms and the Canadian Finance Ministry and Treasury Board in an attempt to disrupt the high-profile acquisition of the Potash Corporation of Saskatchewan by the Australian mining giant BHP Billiton Ltd...

Oracle Hyperion Strategic Finance Client ActiveX Control Code Execution

A remote code execution vulnerability has been reported in Oracle Hyperion Strategic Finance client...

Oracle Hyperion Strategic Finance Formula One ActiveX控件&quot;SetDevNames()&quot;

Oracle Hyperion Financial Management是综合性的、可扩展的、基于Web的国际财务集成、报告和分析的解决方案。 Oracle Hyperion Strategic Finance在实现上存在安全漏洞，可被恶意用户利用控制用户系统。 此漏洞源于Formula One ActiveX控件TTF16.ocx的"SetDevNames"方法中的边界错误，通过 "DriverName" 参数中传递的超长字符串可造成堆缓冲区溢出。 Oracle Hyperion Strategic Finance 11.x Oracle Hyperion Strategic...