Oracle MICROS POS missing authorisation check

Application: Oracle MICROS POS Versions Affected: Oracle Hospitality Simphony 2.7-2.9 Vendor URL: Oracle Bug: Missing Authentication for Critical Function Reported: 21.07.2017 Vendor response: 22.07.2017 Date of Public Advisory: 17.01.2018 Reference: Oracle CPU January 2018 Author: Dmitry Chastuh...

Memcached - A Story of Failed Patching & Vulnerable Servers

This blog authored by Aleksandar Nikolich and David Maynor with contributions from Nick BiasiniMemcached - Not secure, Not Patched Fast Enough Recently high profile vulnerabilities in systems were used to unleash several global ransomware attacks that greatly impacted organizations. These types o...

There are multiple vulnerabilities in IBM SDK Java Technology Edition

IBM SECURITY ADVISORY First Issued:Wed Jun 21 15:44:57 CDT 2017 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/javaapr2017advisory.asc https://aix.software.ibm.com/aix/efixes/security/javaapr2017advisory.asc...

Information Disclosure in PeopleSoft Listening Connector

Application: Oracle PeopleSoft Versions Affected: Oracle PeopleTools 8.54 – 8.56 Vendor: Oracle Bugs: Information Disclosure Reported: 15.06.2017 Vendor response: 16.06.2017 Date of Public Advisory: 17.01.2018 Reference: Oracle CPU January 2018 Authors: Dmitri Iudin aka @ret5et ERPScan...

CVE-2017-1000367

creationtimestamp| type| source ---|---|--- 2017-06-01 10:30:15+00:00| seen| https://t.me/informationsecuritychannel/5567 2017-06-01 14:48:08+00:00| seen| https://t.me/canyoupwnme/1495 2017-06-01 21:50:00+00:00| exploited| https://t.me/informationsecuritychannel/5599 2025-01-29 16:21:48+00:00|...

ShadowBrokers' Windows Zero-Days Already Patched

Hours after what was thought to be a damaging release of NSA hacking tools for Windows systems, Microsoft quelled some anxiety with a late-night statement on Friday that most of the vulnerabilities disclosed by the ShadowBrokers had already been patched. The biggest surprise was that the most...

Oracle GlassFish Server 2.1.1.x < 2.1.1.30 / 3.0.1.x < 3.0.1.15 / 3.1.2.x < 3.1.2.16 Multiple Vulnerabilities (January 2017 CPU)

Binary data 9947.prm...

SUSE SLED12 / SLES12 Security Update : java-1_8_0-openjdk (SUSE-SU-2017:0346-1)

This update for java-180-openjdk fixes the following issues: Oracle Critical Patch Update of January 2017 bsc1020905 Upgrade to version jdk8u121 icedtea 3.3.0 : - S8138725: Add options for Javadoc generation - S8140353: Improve signature checking - S8151934, CVE-2017-3231: Resolve class resolutio...

Threat Outbreak Alert RuleID27507: Email Messages Distributing Malicious Software on January 30, 2017

Medium Alert ID: 52476 First Published: 2017 January 30 15:33 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID27507 may contain the following files: Name |...

Threat Outbreak Alert RuleID27513: Email Messages Distributing Malicious Software on January 30, 2017

Medium Alert ID: 52468 First Published: 2017 January 30 15:31 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID27513 may contain the following files: Name |...

manutti.com XSS vulnerability

Vulnerable URL:...

Threat Outbreak Alert RuleID27499: Email Messages Distributing Malicious Software on January 27, 2017

Medium Alert ID: 52447 First Published: 2017 January 27 18:10 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID27499 may contain the following files: Name |...

Threat Outbreak Alert RuleID27453: Email Messages Distributing Malicious Software on January 25, 2017

Medium Alert ID: 52419 First Published: 2017 January 25 19:31 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID27453 may contain the following files: Name |...

MySQL Enterprise Monitor 3.1.x < 3.1.4.7895 Agent Subcomponent RCE (January 2017 CPU)

According to its self-reported version, the MySQL Enterprise Monitor application running on the remote host is 3.1.x prior to 3.1.4.7895. It is, therefore, affected by a remote code execution vulnerability in the Agent subcomponent that allows an authenticated, remote attacker to execute arbitrar...

MySQL Enterprise Monitor 3.2.x < 3.2.5.1141 Multiple Vulnerabilities (SWEET32) (January 2017 CPU)

According to its self-reported version, the MySQL Enterprise Monitor application running on the remote host is 3.2.x prior to 3.2.5.1141. It is, therefore, affected by multiple vulnerabilities : - Multiple integer overflow conditions exist in the bundled version of OpenSSL in s3srvr.c, sslsess.c,...

kutupayisi.com XSS vulnerability

Vulnerable URL: http://www.kutupayisi.com/index.php?do=catalog/results=%3C/script%3E%3Cscript%3Ealert%28%22OPENBUGBOUNTY%22%29%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 14:32 GMT Vulnerability type:| XSS Vulnerability status:...

Threat Outbreak Alert RuleID27380: Email Messages Distributing Malicious Software on January 24, 2017

Medium Alert ID: 52399 First Published: 2017 January 24 20:13 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID27380 may contain the following files: Name |...

Threat Outbreak Alert RuleID27397: Email Messages Distributing Malicious Software on January 24, 2017

Medium Alert ID: 52406 First Published: 2017 January 24 18:39 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID27397 may contain the following files: Name |...

Threat Outbreak Alert RuleID27387: Email Messages Distributing Malicious Software on January 24, 2017

Medium Alert ID: 52403 First Published: 2017 January 24 15:13 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID27387 may contain the following files: Name |...

moyfly.ru Open Redirect vulnerability

Open Bug Bounty ID: OBB-208467 Description| Value ---|--- Affected Website:| moyfly.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...