Oracle Retail Applications Unspecified Vulnerability in Oracle Retail Service Backbone Component

Oracle Retail Applications is the United States Oracle Oracle company's set of retail application store solutions. Oracle Retail Service Backbone RSB is one of the group contains Web services, ESB and security tools product components. A security vulnerability exists in the Install subcomponent o...

Unspecified Vulnerability in Oracle Retail Applications Oracle Retail Service Backbone Component (CNVD-2016-05461)

Oracle Retail Applications is the United States Oracle Oracle company's set of retail application store solutions. Oracle Retail Service Backbone RSB is one of the group contains Web services, ESB and security tools product components. A security vulnerability exists in the Install subcomponent o...

Dell Pre-Boot Authentication Driver Arbitrary Code Execution Vulnerability

The Dell Pre-Boot Authentication PBA Driver is a Dell USA component used to authenticate users before booting a computer. An arbitrary code execution vulnerability exists in Dell PBA Driver version 1.0.1.5. A remote attacker could exploit this vulnerability to execute arbitrary code within the...

VirtueMart component authentication bypass vulnerability in Joomla!

Joomla! is an open source Content Management System CMS that provides RSS feeds, site search, etc. VirtueMart is one of the e-commerce components. An authentication bypass vulnerability exists in Joomla! VirtueMart that allows remote attackers to bypass restrictions and take control of user...

GE Healthcare Optima MR360 HIPAA Configuration Interface Built-in Account Vulnerability

GE Healthcare CADStream Server is a suite of applications used in the healthcare industry and provides automated analysis and reporting for magnetic resonance imaging. Built-in accounts exist for the GE Healthcare Optima MR360 HIPAA configuration interface, with the root account using the...

GE Healthcare Optima Built-in Account Vulnerability

The GE Healthcare Optima CT680, CT540, CT640, and CT520 are General Electric Company's computed tomography products used in the medical industry. The GE Healthcare Optima CT680, CT540, CT640, and CT520 use a root account with the password 'bigguy', allowing remote attackers to take control of the...

Masque iOS Vulnerability Disclosed

The vulnerability used in the WireLurker attacks has been uncovered and was reported to Apple in July but has yet to be patched, a researcher at FireEye said. Today’s disclosure of the Masque attack, which affects iOS 7.1.1, 7.1.2, 8.0, 8.1, and 8.1.1 beta, revealed that Apple mobile devices are...

Adobe Patches Shockwave, Fixes Two Vulnerabilities

Adobe joined Microsoft in releasing security patches today, sending out a fix for its Shockwave Player. The patch repairs critical vulnerabilities in the platform that could allow an attacker to remotely takeover an affected system. According to a post on its Product Security Incident Response Te...

SCADA Holes Allowed Remote Takedown of Siemens Systems

Security researcher Dillon Beresford decided not to present a talk at the TakedownCon in Dallas on Thursday, citing concerns about mayhem that could have resulted. But in an e-mail, he told Threatpost that the vulnerabilities could allow remote attackers to start or stop Siemens Programmable Logi...

Hacktics Advisory Dec09: Oracle eBusiness Suite - Multiple Vulnerabilities Allow Remote Takeover

Hacktics Research Group Security Advisory http://www.hacktics.com/details=;view=Resources7CAdvisory By Shay Chen, Hacktics. 14-Dec-2009 =========== I. Overview =========== During a penetration test performed by Hacktics' experts, certain vulnerabilities were identified in the Oracle eBusiness Sui...

ASMAX AR 804 gu Web Management Console Arbitrary Shell Command Injection Vulnerability

ASMAX 804 gu router is a SOHO class device. It provides ADSL / WiFi / Ethernet interfaces. 2. There is an unauthenticated maintenance script named 'script' in /cgi-bin/ directory of the web management interface. 3. When 'system' paramether is passed to the script it allows running OS shell...