CVE-2013-3784

Affected software: Oracle PeopleSoft Enterprise HRMS (Oracle PeopleSoft Products 9.1). CVE-2013-3784 is described as an unspecified vulnerability in Time and Labor that allows remote authenticated users to affect confidentiality and integrity via unknown vectors. CVSS v2 base score is 5.5 (Partia...

CVE-2013-3784

Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 9.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors Time and Labor...

CVE-2013-3784: Undefined Security Weakness

Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 9.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors Time and Labor...

PT-2013-4623

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft Products version 9.1 Description The issue affects confidentiality and integrity, allowing remote authenticated users to exploit it via unknown vectors in the Time and Labor component of PeopleSoft Enterprise HRMS...

USAID a Target of DoL Watering Hole Attackers

One of the nine sites serving malware tied to the recent watering hole attack on the U.S. Department of Labor was located in Cambodia and has ties to the United States Agency for International Development USAID. Speculation has it that the DoL attack was targeting downstream employees at the...

Microsoft Patch Zero Day Used to Attack Deptartment of Labor

Microsoft will ship 10 bulletins in the May edition of Patch Tuesday. The company considers just two of the patches critical, one of which supplements the currently available “Fix it” tool that resolved the IE zero-day vulnerability exploited recently in a watering-hole attack targeting the U.S...

Microsoft Internet Explorer CGenericElement Object Use-After-Free

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 HttpClients::IE,...

Microsoft Internet Explorer CGenericElement Object Use-After-Free

This Metasploit module exploits a vulnerability found in Microsoft Internet Explorer. A use-after-free condition occurs when a CGenericElement object is freed, but a reference is kept on the Document and used again during rendering, an invalid memory that's controllable is used, and allows...

Microsoft Internet Explorer - CGenericElement Object Use-After-Free (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 HttpClients::IE,...

IE 8 Zero Day Widens Scope of DoL Watering Hole Attack

The scope of a watering hole attack targeting the U.S. Department of Labor website widened significantly over the weekend. Researchers are reporting that as many as nine websites, including a European aerospace, defense and security manufacturer as well as a number of non-profit organizations hav...

MS13-038 Microsoft Internet Explorer CGenericElement Object Use-After-Free Vulnerability

This module exploits a vulnerability found in Microsoft Internet Explorer. A use-after-free condition occurs when a CGenericElement object is freed, but a reference is kept on the Document and used again during rendering, an invalid memory that's controllable is used, and allows arbitrary code...

Watering Hole Attack Hits US Department of Labor Website

The United States Department of Labor website is the latest high-profile government site to fall victim to a watering hole attack. Researchers at a number of security companies reported today that the site was hosting malware and redirecting visitors to a site hosting the Poison Ivy remote access...

PT-2012-1522

Name of the Vulnerable Software and Affected Versions IBM Maximo Asset Management versions 6.2 through 7.5 IBM Asset Management Essentials versions 6.2 through 7.5 IBM Tivoli Asset Management for IT versions 6.2 through 7.2 IBM Tivoli Service Request Manager versions 7.1 through 7.2 IBM Maximo...

Australian Newspaper Offices Raided in Hacking Inquiry

Detectives from Australia’s Victoria Police last week executed a raid of offices at The Age, one of the largest newspapers in Melbourne, seizing computers and documents they believe were used in a hacking scheme. Authorities spent eight hours removing computers that were purportedly used by...

CVE-2010-2379

Unspecified vulnerability in the PeopleSoft Enterprise HCM - Time & Labor component in Oracle PeopleSoft and JDEdwards Suite HCM 9.0 Bundle 13 and HCM 9.1 Bundle 2 allows remote authenticated users to affect confidentiality via unknown vectors...

CVE-2010-2379

CVE-2010-2379 affects PeopleSoft Enterprise HCM – Time & Labor, specifically HCM 9.0 Bundle #13 and HCM 9.1 Bundle #2. The description indicates an unspecified vulnerability that could allow remote authenticated users to affect confidentiality via unknown vectors. The available Connected document...

CVE-2010-2379: Undefined Security Weakness

Unspecified vulnerability in the PeopleSoft Enterprise HCM - Time & Labor component in Oracle PeopleSoft and JDEdwards Suite HCM 9.0 Bundle 13 and HCM 9.1 Bundle 2 allows remote authenticated users to affect confidentiality via unknown vectors...