CVE-2016-8323

CVE-2016-8323 affects Oracle FLEXCUBE Core Banking (Core subcomponent) in Oracle Financial Services Applications. Affected versions: 5.1.0, 5.2.0, 11.5.0. Vulnerability allows a low-privilege, network-accessing attacker over HTTP to perform unauthorized updates/inserts/deletes and read access to ...

CVE-2017-3236

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Core. Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0 and 12.2.0. Easily exploitable vulnerability allows unauthenticated attacker with...

CVE-2016-8322

Vulnerability in the Oracle FLEXCUBE Core Banking component of Oracle Financial Services Applications subcomponent: Core. Supported versions that are affected are 5.1.0, 5.2.0 and 11.5.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2016-8304

CVE-2016-8304 affects Oracle FLEXCUBE Universal Banking (Core) with affected versions 11.3.0, 11.4.0, 12.0.1–12.2.0. The vulnerability allows a low-privileged attacker with network access via HTTP to compromise data security; exploitation requires user interaction. Impact includes unauthorized up...

CVE-2016-8300

Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications subcomponent: Product / Instrument Search. Supported versions that are affected are 2.0.1, 2.2.0 and 12.0.1. Difficult to exploit vulnerability allows low privileged attacker with network acce...

Dridex Returns With Windows UAC Bypass Method

After a six-month hiatus, the Dridex banking malware is back and targeting large financial institutions in the U.K with a new technique that can bypass Windows User Account Control UAC. Researchers at Flashpoint said they have seen small phishing and spear-phishing campaigns targeting specific...

Банк Хоум Кредит - Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Банк Хоум Кредит published at the 'play' market has multiple vulnerabilities...

Google to Block .js Attachments in Gmail

Spammers and cybercriminals have revived email-based attacks in the last year, giving new life to macro-based malware hidden in Word documents, and with greater intensity of late, .js files that run JavaScript on infected clients, largely to download malware from an attacker’s site. Google...

Bakai Bank Mobile Banking - Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Bakai Bank Mobile Banking published at the 'play' market has multiple vulnerabilities...

Ameria Mobile Banking - BSD license, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Ameria Mobile Banking published at the 'play' market has multiple vulnerabilities...

Unibank Mobile Banking - Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Unibank Mobile Banking published at the 'play' market has multiple vulnerabilities...

Source Code for another Android Banking Malware Leaked

Another bad news for Android users — Source code for another Android banking malware has been leaked online via an underground hacking forum. This newly discovered banking Trojan is designed to steal money from bank accounts of Android devices' owners by gaining administrator privileges on their...

Russian Hacker behind 'NeverQuest' Malware, Wanted by FBI, Is Arrested in Spain

A Russian computer hacker wanted by the FBI on hacking allegations was arrested and jailed in Spain earlier this week, while a decision on his extradition to the United States has yet to be made. The Guardia Civil, Spanish law enforcement agency officers, have detained 32-year-old Stanislav Lisov...

Unspecified Vulnerability in Oracle FLEXCUBE Universal Banking (CNVD-2017-00945)

Oracle FLEXCUBE Universal Banking is the United States Oracle Oracle company's set of real-time, online coverage of retail, group, investment banking, a comprehensive solution. The program supports multi-currency, multi-language and multi-entity operations. A remote security vulnerability exists ...

Oracle FLEXCUBE Private Banking Security Bypass Vulnerability

Oracle FLEXCUBE Private Banking is a product of Oracle Corporation USA. It plans, records, tracks and manages client wealth across a range of asset classes and tools to increase financial advisor productivity and improve client relationships. A remote security bypass vulnerability exists in Oracl...

Unspecified Vulnerability in Oracle FLEXCUBE Universal Banking (CNVD-2017-00942)

Oracle FLEXCUBE Universal Banking is the United States Oracle Oracle company's set of real-time, online coverage of retail, group, investment banking, a comprehensive solution. The program supports multi-currency, multi-language and multi-entity operations. A remote security vulnerability exists ...

Oracle FLEXCUBE Core Banking Unauthorized Read Vulnerability (CNVD-2017-00889)

Oracle FLEXCUBE Core Banking is a product of Oracle Corporation Oracle. Its application architecture supports agile and business process management using Business Process Execution Language BPEL, Service-Oriented Architecture SOA, and Web services-based models. An unauthorized read vulnerability...

Oracle FLEXCUBE Private Banking Security Bypass Vulnerability (CNVD-2017-00790)

Oracle FLEXCUBE Private Banking is a product of Oracle Corporation USA. It plans, records, tracks and manages client wealth across a range of asset classes and tools to increase financial advisor productivity and improve client relationships. A remote security bypass vulnerability exists in Oracl...

Unspecified Vulnerability in Oracle FLEXCUBE Universal Banking (CNVD-2017-00939)

Oracle FLEXCUBE Universal Banking is the United States Oracle Oracle company's set of real-time, online coverage of retail, group, investment banking, a comprehensive solution. The program supports multi-currency, multi-language and multi-entity operations. A remote security vulnerability exists ...

Unspecified Vulnerability in Oracle FLEXCUBE Universal Banking (CNVD-2017-00943)

Oracle FLEXCUBE Universal Banking is the United States Oracle Oracle company's set of real-time, online coverage of retail, group, investment banking, a comprehensive solution. The program supports multi-currency, multi-language and multi-entity operations. A local security vulnerability exists i...