CVE-2014-6561

Unspecified vulnerability in the Oracle Payments component in Oracle E-Business Suite 12.0.4, 12.0.6, 12.1.1, 12.1.2, 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality via unknown vectors related to Separate Remittance Advice...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Payments component in Oracle E-Business Suite 12.0.4, 12.0.6, 12.1.1, 12.1.2, 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality via unknown vectors related to Separate Remittance Advice...

CVE-2014-6561

Unspecified vulnerability in the Oracle Payments component in Oracle E-Business Suite 12.0.4, 12.0.6, 12.1.1, 12.1.2, 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality via unknown vectors related to Separate Remittance Advice...

MGASA-2014-0388 Updated bash packages fix CVE-2014-6271

Updated bash packages fix security vulnerability: A flaw was found in the way Bash evaluated certain specially crafted environment variables. An attacker could use this flaw to override or bypass environment restrictions to execute shell commands. Certain services and applications allow remote...

CVE-2014-5973

The Aquarium Advice aka com.socialknowledge.aquariumadvice application 3.7.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Aquarium Advice aka com.socialknowledge.aquariumadvice application 3.7.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5973

The CVE-2014-5973 entry affects the Aquarium Advice Android app (com.socialknowledge.aquariumadvice) version 3.7.6. The vulnerability is due to the app not verifying X.509 certificates from SSL servers, allowing a man-in-the-middle to spoof servers and obtain sensitive information via a crafted c...

CPNI Releases Paper on Improving Defenses Against Targeted Attack

The United Kingdom's Centre for the Protection of National Infrastructure CPNI has released a report on its “Improving Defenses Against Targeted Attack" iDATA cyber research program. The report contains descriptions and outcomes from a number of projects aimed at addressing threats posed by natio...

Joomla Component com_alfresco SQL Injection Vulnerability

No description provided by source. ------------------- header data start ------------------- Joomla Component comalfresco SQL Injection Vulnerability Author : FL0RiX Name : comalfresco Greez : PyskE,Dr.Kacak And All Friends Bug Type : SQL Injection Infection : Admin login bilgileri alinabilir. De...

Joomla Component com_j-projects Blind SQL Injection Vulnerability

No description provided by source. ------------------- header data start ------------------- Joomla Component comj-projects Blind SQL Injection Vulnerability Author : Pyske Name : comj-projects Bug Type : Blind SQL Injection Infection : Admin login bilgileri al?nabilir. Bug Fix Advice : Zararli...

Joomla Component com_tpjobs Blind SQL injection Vulnerability

Joomla Component comtpjobs Blind SQL injection Vulnerability author : FL0RiX Name : comtpjobs Bug Type : Blind SQL Injection Infection : Admin login bilgileri alnabilir. Demo Vuln. : TRUE+ » http://server/index.php?option=comtpjobs&task=resadvsearch&keyword=&idc=1 and 1=1 FALSE- »...

Important: Red Hat Bug Fix Advisory: Red Hat OpenShift Enterprise 2.1 Release Advisory

Red Hat OpenShift Enterprise release 2.1, which fixes several bugs and includes various enhancements, is now available. OpenShift Enterprise by Red Hat is the company's cloud computing Platform-as-a-Service PaaS solution designed for on-premise or private cloud deployments. The OpenShift Enterpri...

Threat Outbreak Alert: Fake Tax Information Request Email Messages on March 31, 2014

Medium Alert ID: 33579 First Published: 2014 March 31 15:42 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a request for tax information for the recipient. The text in the email message attempts to convince the recipien...

Threat Outbreak Alert: Fake Weight Loss Advice Email Messages on January 15, 2014

Medium Alert ID: 32457 First Published: 2014 January 16 17:20 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain weight loss advice for the recipient. The text in the email message attempts to convince the recipient to open...

Threat Outbreak Alert: Fake Account Payment Information Email Messages on April 24, 2014

Medium Alert ID: 32294 First Published: 2014 January 2 19:14 GMT Last Updated: 2014 April 25 12:30 GMT Version: 70 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain payment information for the recipient. The text in the email message...

Moderate: Red Hat Security Advisory: Red Hat JBoss Operations Network 3.2.0 update

Red Hat JBoss Operations Network 3.2.0, which fixes multiple security issues and several bugs, is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, whi...

Threat Outbreak Alert: Fake Payment Advice Notification Email Messages on December 11, 2013

Medium Alert ID: 32135 First Published: 2013 December 12 16:31 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain payment advice for the recipient. The text in the email message attempts to convince the recipient to open th...

Threat Outbreak Alert: Fake Payment Advice Notification Email Messages on October 15, 2013

Medium Alert ID: 31284 First Published: 2013 October 16 14:14 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a payment advice notification for the recipient. The text in the email message attempts to convince the...

Real Estate PHP Script Cross Site Scripting

Cross Site Scripting Application Name : Real Estate Php Script Vulnerable Type : Post Cross Site Scripting Infection : Yönetici ve User cookie’leri çalýnabilir. Bug Fix Advice : Zararlý karakterler filtrelenmelidir. Author : Lazmania61 | Bug Researchers Example :...

sensiGal 2.0 SQL Injection

Application Name : sensiGal v2.0 Vulnerable Type : SqL Injection Infection : Kullanýcý ve Yönetici Bilgileri Çekilebilir. Bug Fix Advice : Zararlý karakterler filtrelenmelidir. Author : Lazmania61 Example : http://www.galerie.edor.org/index.php?id=album&aid=193...