adi-mps.com Improper Access Control vulnerability

Open Bug Bounty ID: OBB-625066 Description| Value ---|--- Affected Website:| adi-mps.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...

adi-mps.com XSS vulnerability

Open Bug Bounty ID: OBB-617771 Description| Value ---|--- Affected Website:| adi-mps.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

VMSA-2017-0014:VMware NSX-V Edge updates address OSPF Protocol LSA DoS

VMSA-2017-0014 VMware NSX-V Edge updates address OSPF Protocol LSA DoS VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2017-0014 VMware Security Advisory Severity: Important VMware Security Advisory Synopsis: VMware NSX-V Edge updates address OSPF Protocol LSA DoS VMware...

Critical iOS vulnerability in Configuration Profiles pose malware threat

Israeli mobile security start-up Skycure has exposed a vulnerability that could allow hackers to control and spy on iPhones. A major security vulnerability for iOS configuration profiles pose malware threat. The vulnerability affects a file known as mobileconf files, which are used by cell phone...

CVE-2011-0809

Unspecified vulnerability in the Web ADI component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect integrity via unknown vectors...

Code injection

Unspecified vulnerability in the Web ADI component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect integrity via unknown vectors...

CVE-2011-0809

Oracle E-Business Suite Web ADI component (versions 11.5.10.2, 12.0.6, 12.1.1–12.1.3) has an unspecified vulnerability that can compromise integrity via unknown vectors. The NVD CVE-2011-0809 entry notes network access with partial integrity impact. Red Hat and other records confirm the same issu...

New Attack Against AES-256 a 'Huge Result'

A group of cryptographers has devised a new attack against AES, the de facto standard encryption algorithm, that enables them to recover an encryption key in far less time than had been possible before. The attack can recover an AES-256 key in a small enough amount of time to make the method...

liveboxftp-overflow.txt

Livebox Router vulnerability to REMOTE BUFFER OVERFLOW DoS Discovered by: 0in from DaRk-CodeRs Security & Programming Group! http://dark-coders.4rh.eu DESCRIPTION: Livebox tested on polish "Neostrada TP Livebox" is vulnerability to remote but from local network, because firewall working.. buffer...

Livebox routers format string vulnerability

Format string vulnerability in built-in ADI Convergence Galaxy FTP Server...

ADI Convergence Galaxy FTP Server Password - Remote Denial of Service

// source: https://www.securityfocus.com/bid/28066/info ADI Convergence Galaxy FTP Server is prone to a denial-of-service vulnerability because the application fails to perform adequate boundary checks on user-supplied data. An attacker can exploit this issue to crash the affected application,...

Дырка в Oracle ADI (cleartext passwords)

Пароли содержатся в лог-файле в открытом виде...

Oracle's ADI 7.1.1.10.1 Major security hole

The version of ADI Application Desktop Integrator 7.1.1.10.1 which was recently shipped with Oracle's Financial Applications version 11.5.3 contains a major security breach. Whenever the software is launched, it creates a file called dbg.txt on the local hard drive on the system which contains in...