OpenJDK: newline injection in the FTP client (Networking, 8170222)

A newline injection flaw was discovered in the FTP client implementation in the Networking component in OpenJDK. A remote attacker could possibly use this flaw to manipulate FTP connections established by a Java application...

OpenJDK: newline injection in the FTP client (Networking, 8170222)

A newline injection flaw was discovered in the FTP client implementation in the Networking component in OpenJDK. A remote attacker could possibly use this flaw to manipulate FTP connections established by a Java application...

PT-2017-10803 · Go +3 · Net/Http Package +3

Name of the Vulnerable Software and Affected Versions: net/http package affected versions not specified Description: The issue arises when the net/http package's Request.ParseMultipartForm method handles large multipart requests, potentially leading to a denial-of-service situation. An attacker c...

Tim Berners-Lee, Inventor of the Web, Wins $1 Million Turing Award 2016

Sir Tim Berners-Lee — the inventor of the World Wide Web — has won this year's A.M. Turing Award, which is frequently described as the "Nobel Prize of Computing," by the Association for Computing Machinery ACM. Turing Award is named after Alan Mathison Turing, the British mathematician and comput...

CVE-2016-8273

Huawei PC client software HiSuite 4.0.5.300OVE uses insecure HTTP for upgrade software package download and does not check the integrity of the software package before installing; an attacker can launch an MITM attack to interrupt or replace the downloaded software package and further compromise...

CVE-2017-7183

The TFTP server in ExtraPuTTY 0.30 and earlier allows remote attackers to cause a denial of service crash via a large 1 read or 2 write TFTP protocol message...

ALPINE-CVE-2016-10130

The httpconnect function in transports/http.c in libgit2 before 0.24.6 and 0.25.x before 0.25.1 might allow man-in-the-middle attackers to spoof servers by leveraging clobbering of the error variable...

NetGain Enterprise Manager 7.2.562 Command Execution

Exploit Title: NetGain Enterprise Manager a aPinga Command Injection Date: 23.02.2017 Exploit Author: MrChaZ Vendor Homepage: http://www.netgain-systems.com/ Version: = v7.2.562 build 853 Tested on: Windows 10 Pro 64-bit 10,0 Build 14393 Description:...

SysGauge Buffer Overflow Vulnerability

SysGauge is a free system and performance monitoring utility. SysGauge suffers from a buffer overflow vulnerability. It allows an attack vector to send a long 220 also known as "service ready" string via a crafted SMTP daemon...

SAP KERNEL SAP Message Server HTTP Daemon Denial of Service Vulnerability

SAP KERNEL is a set of basic technology platforms written in the C language. A security vulnerability in SAP KERNEL's SAP Message Server HTTP daemon can be exploited by remote attackers to submit a special request that could crash the application...

CVE-2016-5786

An issue was discovered in OmniMetrix OmniView, Version 1.2. The OmniView web application transmits credentials with the HTTP protocol, which could be sniffed by an attacker that may result in the compromise of account credentials...

snoopy: incomplete fixes for command execution flaws

Various command-execution flaws were found in the Snoopy library included with Nagios. These flaws allowed remote attackers to execute arbitrary commands by manipulating Nagios HTTP headers...

CVE-2017-3414

Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with...

CVE-2017-3402

Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with...

CVE-2016-8311

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Core. Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0 and 12.2.0. Easily exploitable vulnerability allows low privileged attacker with...

Oracle E-Business Suite Remote Security Vulnerability (CNVD-2017-00646)

Oracle E-Business Suite is a fully integrated suite of global business management software from Oracle Corporation. Oracle Fulfillment Manager is one of the components that provide telecommunications providers, ISPs Internet Service Providers, and similar vendor companies with the ability to mana...

Oracle PeolpeSoft Enterprise HCM ePerformance Remote Vulnerability

Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle that provides human capital management, financial management, supplier relationship management, etc. PeopleSoft Enterprise HCM is one of the Human Capital Management HCM components. A remote securit...

Oracle E-Business Suite Remote Security Vulnerability (CNVD-2017-00641)

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle Oracle. The software provides customer relationship management, service management, financial management and other functions. A remote vulnerability exists in Oracle iStore for...

Oracle E-Business Suite Remote Security Vulnerability (CNVD-2017-00643)

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle Oracle. The software provides customer relationship management, service management, financial management and other functions. A remote vulnerability exists in Oracle XML Gateway i...

Oracle E-Business Suite Remote Security Vulnerability (CNVD-2017-00656)

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle Oracle. The software provides customer relationship management, service management, financial management and other functions. A remote vulnerability exists in Oracle One-to-One...