Design/Logic Flaw

Unspecified vulnerability in the Oracle Agile component in Oracle Supply Chain Products Suite 5.2.2, 6.0.0, and 6.1.1 allows remote attackers to affect integrity, related to SCRM - Company Profiles...

CVE-2012-0581

Technical details for CVE-2012-0581 are not publicly available in the provided documents. Monitor for updates from official advisories and CVE records.

CVE-2012-0581

Unspecified vulnerability in the Oracle Agile component in Oracle Supply Chain Products Suite 5.2.2, 6.0.0, and 6.1.1 allows remote attackers to affect integrity, related to SCRM - Company Profiles...

CVE-2012-0581: Undefined Security Weakness

Unspecified vulnerability in the Oracle Agile component in Oracle Supply Chain Products Suite 5.2.2, 6.0.0, and 6.1.1 allows remote attackers to affect integrity, related to SCRM - Company Profiles...

[SECURITY] Fedora 15 Update: wicd-1.7.0-12.fc15

Wicd is designed to give the user as much control over behavior of network connections as possible. Every network, both wired and wireless, has its own profile with its own configuration options and connection behavior. Wicd will try to automatically connect only to networks the user specifies it...

[SECURITY] Fedora 17 Update: wicd-1.7.2.1-1.fc17

Wicd is designed to give the user as much control over behavior of network connections as possible. Every network, both wired and wireless, has its own profile with its own configuration options and connection behavior. Wicd will try to automatically connect only to networks the user specifies it...

SOL13400 - SSL 3.0/TLS 1.0 BEAST vulnerability CVE-2011-3389 and TLS protocol vulnerability CVE-2012-1870

If the previous table lists a version in the Versions known to be not vulnerable column, you can eliminate this vulnerability by upgrading to the listed version. If the listed version is older than the version you are currently running, or if the table does not list any version in the column, the...

Paul Judge

Paul Judge, chief research officer at Barracuda Networks shared results from a five month study the company conducted in which they analyzed over 3,000 fake Facebook profiles. Barracuda used a tool they created to scour Facebook and detect fake accounts and the mounting risk they can draw. “It’s ...

Infographic: How To Spot A Fake Facebook Friend Profile

A whopping 97 percent of fake Facebook profiles purport to be female, according to this infographic based on a new study, announced today, from security firm Barracuda Networks. In order to expand their networks and entice would-be victims, 58 percent of the phony profiles also claim to be bisexu...

How to Win Friends and Steal Their Facebook Accounts

CANCUN–Facebook is a lot of things, and one of the things that it’s become of late is a fertile green field for attackers and scammers of all stripes. The Koobface worm is perhaps the most famous threat to hit the network, but the more mundane ones, such as scammers generating fake profiles...

Windows Gather WinSCP Saved Password Extraction

This module extracts weakly encrypted saved passwords from WinSCP. It searches for saved sessions in the Windows Registry and the WinSCP.ini file. It cannot decrypt passwords if a master password is used. This module requires Metasploit: https://metasploit.com/download Current source:...

Akiva WebBoard 8.x - SQL Injection

Exploit Title: Akiva Webboard 8.x SQL Injection + Plaintext Passwords in Profiles. Google Dork: " /Powered by WebBoard 8"/ Date: 30.12.2011 Author: Alexander Fuchs Software Link: http://www.akiva.com/default.asp?l=1&id=8 Version: 8.x Tested on: Windows, Linux. CVE : Nope. It is possible to login ...

Akiva WebBoard 8.x SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Akiva Webboard 8.x SQL Injection + Plaintext Passwords in Profiles. Google Dork: " /Powered by WebBoard 8"/ Date: 30.12.2011 Author: Alexander Fuchs Software Link: http://www.akiva.com/default.asp?l=1&id=8 Version: 8.x Tested on...

Windows Gather RazorSQL Credentials

This module stores username, password, type, host, port, database and name collected from profiles.txt of RazorSQL. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'openssl' class MetasploitModule 'Windows...

Stable Channel Update

The Google Chrome team is happy to announce the arrival of Chrome 16.0.912.63 to the Stable Channel for Windows, Mac, Linux, and Chrome Frame. Chrome 16 contains some really great improvements including enhancements to Sync and the ability to create multiple profiles on a single instance of Chrom...

Social network poisoning - They are Following you Everywhere !

Note : This Article is taken from Most Comprehensive and Informative IT Security Magazine by The Hacker News - December Edition Download Here "Be Social" is the imperative of the last years. We live alternative lives, weave dense networks of relationships; we feel the irrepressible urge to be par...

[SECURITY] Fedora 15 Update: colord-0.1.15-1.fc15

colord is a low level system activated daemon that maps color devices to color profiles in the system context...

Fedora Update for colord FEDORA-2011-16451

Check for the Version of colord OpenVAS Vulnerability Test Fedora Update for colord FEDORA-2011-16451 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

CORE-2011-0919: Apple OS X Sandbox Predefined Profiles Bypass

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ Apple OS X Sandbox Predefined Profiles Bypass 1. Advisory Information Title: Apple OS X Sandbox Predefined Profiles Bypass Advisory ID: CORE-2011-0919 Advisory URL:...

Design/Logic Flaw

The kSBXProfileNoNetwork and kSBXProfileNoInternet sandbox profiles in Apple Mac OS X 10.5.x through 10.7.x do not propagate restrictions to all created processes, which allows remote attackers to access network resources via a crafted application, as demonstrated by use of osascript to send Appl...