CVE-2016-7919

Summary: CVE-2016-7919 affects Moodle 3.1.2 and relates to an SQL Injection in the Administration panel during the installation process that could allow remote attackers to obtain sensitive information. The vendor disputes the suitability of this report, arguing that an attacker would need databa...

CVE-2016-8287

Unspecified vulnerability in Oracle MySQL 5.7.13 and earlier allows remote administrators to affect availability via vectors related to Server: Replication...

CVE-2016-5635

Unspecified vulnerability in Oracle MySQL 5.7.13 and earlier allows remote administrators to affect availability via vectors related to Server: Security: Audit...

CVE-2016-8285

Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft Products 9.2 allows remote administrators to affect confidentiality and integrity via vectors related to Candidate Gateway...

CVE-2016-5584

Unspecified vulnerability in Oracle MySQL 5.5.52 and earlier, 5.6.33 and earlier, and 5.7.15 and earlier allows remote administrators to affect confidentiality via vectors related to Server: Security: Encryption...

CVE-2016-5570

Unspecified vulnerability in the Oracle Applications DBA component in Oracle E-Business Suite 12.2.3 through 12.2.6 allows remote administrators to affect confidentiality and integrity via vectors related to AD Utilities...

Oracle E-Business Suite Applications DBA Component Remote Information Disclosure Vulnerability (CNVD-2016-09786)

Oracle E-Business Suite E-Business Suite is Oracle's fully integrated suite of global business management software.Oracle Applications DBA is one of the application database administrator component. A remote information disclosure vulnerability exists in the AD Utilities subcomponent of the Oracl...

Russian Hacker who was wanted by FBI arrested in Prague

UPDATE — It Turns out that the Russian Hacker arrested by the FBI is responsible for 2012 LinkedIn Data Breach. Read latest update here Czech police, in cooperation with the FBI, has arrested a Russian citizen in Prague suspected of participating in conducting cyber-attacks against the United...

UBUNTU-CVE-2016-5584

Unspecified vulnerability in Oracle MySQL 5.5.52 and earlier, 5.6.33 and earlier, and 5.7.15 and earlier allows remote administrators to affect confidentiality via vectors related to Server: Security: Encryption...

PHP Image Database - Multiple Vulnerabilities

PHP Image Database - Multiple Vulnerabilities Exploit Title: PHP Image Database - Multiple Vulnerabilities Date: 2016-10-16 Exploit Author: larrycompress Contact: [email protected] Type: webapps Platform: PHP Vendor Homepage: http://www.pagereactions.com/product.php?pku=3 Software Link:...

RDL Web Tasarim Administration Page Authentication Bypass Vulnerability

An authentication bypass vulnerability exists in the RDL Web Tasarim administrator page, which could allow an attacker to bypass login authentication to access backend administration pages...

PHP Press Release Cross-Site Scripting Vulnerability

PHP Press Release is a software that allows you to manage your organization's press releases via the web, and the public can access recent releases via the web. A stored cross-site scripting vulnerability exists in the title parameter of the administration.php page of PHP Press Release, which can...

PHP Press Release - Persistent Cross-Site Scripting

PHP Press Release - Persistent Cross-Site Scripting Exploit Title : PHP Press Release - Stored Cross Site Scripting Author : Besim Google Dork : - Date : 09/10/2016 Type : webapps Platform : PHP Vendor Homepage : http://www.pagereactions.com/product.php?pku=1 Software link :...

baserCMS plugin Mail vulnerable to cross-site scripting

Overview baserCMS provided by baserCMS User Group is an opensource content management system. baserCMS and bundled plugin Mail contain a stored cross-site scripting vulnerability. Isao Takaesu of Mitsui Bussan Secure Directions, Inc. and Norihiko Hirukawa of FiveDrive Inc. reported this...

Medical Devices Should Withstand Rigor, Expert Says

CAMBRIDGE, Ma.—When it comes to managing medical device security risk, hospital administrators should focus on weathering the storm and not necessarily prevention, Dr. Kevin Fu, a noted medical device security expert, encouraged this week. “How do you fail gracefully when things go wrong? Will yo...

RHEL 6 : Virtualization Manager (RHSA-2016:1929)

An update for org.ovirt.engine-root is now available for RHEV Manager version 3.6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

3Pixels Media Administration Page Bypass Vulnerability

3Pixels is a media software that combines technology and consulting services. A security bypass vulnerability exists in 3Pixels Media. An attacker could exploit this vulnerability to bypass security restrictions and perform unauthorized operations...

CVE-2016-6373

Cisco Cloud Services Platform (CSP) 2100 web GUI vulnerability (CVE-2016-6373) affects CSP2100 2100 series running 2.0 and 2.x prior to 2.1.0. An authenticated remote attacker can inject commands via crafted platform requests to execute arbitrary OS commands with root privileges. The issue stems ...

Moderate: Red Hat Security Advisory: Red Hat Virtualization Manager (RHV) bug fix 3.6.9

An update for org.ovirt.engine-root is now available for RHEV Manager version 3.6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Synology DiskStation Manager (DSM) Web Administration Interface Default Credentials

The web administration interface for the Synology DiskStation Manager DSM application running on the remote host uses a default blank password for the administrator account. A remote attacker can exploit this to gain administrative access to the web interface. C Tenable Network Security, Inc...