CVE-2016-5473

Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect confidentiality via vectors related to File Folders / Attachment, a different vulnerability than CVE-2016-3537...

CVE-2016-3538

Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect integrity and availability via vectors related to File Folders / Attachment, a different vulnerability than CVE-2016-3539...

CVE-2016-3537

Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect confidentiality via vectors related to File Folders / Attachment, a different vulnerability than CVE-2016-5473...

CVE-2016-3509

Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect confidentiality and integrity via vectors related to File Folders / URL Attachment...

PT-2016-6466 · Oracle · Oracle Agile Plm

Name of the Vulnerable Software and Affected Versions: Oracle Agile PLM versions 9.3.4 through 9.3.5 Description: The issue affects confidentiality and can be exploited by remote authenticated users. It is related to vectors involving File Folders and Attachment. Recommendations: For versions 9.3...

PT-2016-5556 · Oracle · Oracle Agile Plm

Name of the Vulnerable Software and Affected Versions: Oracle Agile PLM versions 9.3.4 through 9.3.5 Description: The issue affects confidentiality and can be exploited by remote authenticated users. It is related to vectors involving File Folders and Attachment. Recommendations: For versions 9.3...

Joomla AI Contact Safe 2.0.20 Shell Upload / SQL Injection

Exploit Title : Joomla comaicontactsafe Arbitrary File Upload / SQL injection Vulnerability Exploit Author : xBADGIRL21 Dork : inurl:index.php?option=comaicontactsafe Software link : http://www.algisinfo.com/en/download/category/1-free-extensions.html Vendor Homepage : http://www.algisinfo.com/...

Explorer Search History

Nessus was able to gather evidence of cached search results from Windows Explorer searches. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid92439; scriptversion"1.6"; scriptcvsdate"Date: 2018/11/15 20:50:27"; scriptnameenglish:"Explorer Search History";...

McAfee Email Gateway - Application Protections Bypass

MEG is vulnerable to file attachments containing the null character. The scanning mechanism fails to identify the file name properly. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Threat Outbreak Alert RuleID23684: Email Messages Distributing Malicious Software on June 30, 2016

Medium Alert ID: 46955 First Published: 2016 July 1 12:09 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID23684 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID15448: Email Messages Distributing Malicious Software on August 31, 2016

Medium Alert ID: 46726 First Published: 2016 June 16 20:56 GMT Last Updated: 2016 September 1 13:08 GMT Version: 13 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID15448 a...

Threat Outbreak Alert RuleID23216: Email Messages Distributing Malicious Software on June 1, 2016

Medium Alert ID: 46474 First Published: 2016 June 1 17:43 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID23216 may contain the following files: Name | Size...

Cybozu Garoon Email Read Vulnerability

Cybozu Garoon is a portal-type OA office system of Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin board, document management, etc. and supports free switching among three languages Chinese, Japanese, and English. A security vulnerability exists in Cybozu Garoon...

Threat Outbreak Alert RuleID23078: Email Messages Distributing Malicious Software on May 25, 2016

Medium Alert ID: 46373 First Published: 2016 May 26 22:05 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID23078 may contain the following files: Name | Size...

Targeted Attacks against Banks in the Middle East

UPDATE Dec. 8, 2017: We now attribute this campaign to APT34, a suspected Iranian cyber espionage threat group that we believe has been active since at least 2014. Learn more about APT34 and their late 2017 targeting of a government organization in the Middle East. Introduction In the first week ...

Cerber Ransomware On The Rise, Fueled By Dridex Botnet

Starting in April security experts at FireEye spotted a massive uptick in Cerber ransomware attacks delivered via a rolling wave of spam. Researchers there link the Cerber outbreaks to the fact that attackers are now leveraging the same spam infrastructure credited for making the potent Dridex...

CVE-2016-2458

The compose functionality in AOSP Mail in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 does not properly restrict attachments, which allows attackers to obtain sensitive information via a crafted application, related to ComposeActivity.java and...

CVE-2016-2458

The compose functionality in AOSP Mail in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 does not properly restrict attachments, which allows attackers to obtain sensitive information via a crafted application, related to ComposeActivity.java and...

Moving or deleting an issue leaves the empty attachments subdirectory on the filesystem

To reproduce: Create an issue Attach a file to it Locate the file on the JIRA-server filesystem -- under JIRA "home" directory attachments/..../PROJECT-ISSUE Move the issue to a different project or delete it completely Observe the empty issue subdirectory remaining on the filesystem The director...

Moving or deleting an issue leaves the empty attachments subdirectory on the filesystem

To reproduce: Create an issue Attach a file to it Locate the file on the JIRA-server filesystem -- under JIRA "home" directory attachments/..../PROJECT-ISSUE Move the issue to a different project or delete it completely Observe the empty issue subdirectory remaining on the filesystem The director...