33 matches found
EUVD-2025-2539
Malicious code in bioql PyPI...
EUVD-2023-26067
Malicious code in bioql PyPI...
CVE-2025-21550
Vulnerability in the Oracle Financial Services Behavior Detection Platform product of Oracle Financial Services Applications component: Web UI. Supported versions that are affected are 8.0.8.1, 8.1.2.7 and 8.1.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network acce...
CVE-2023-21902
Vulnerability in the Oracle Financial Services Behavior Detection Platform product of Oracle Financial Services Applications component: Application. The supported version that is affected is 8.0.8.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...
CVE-2025-21550
Vulnerability in the Oracle Financial Services Behavior Detection Platform product of Oracle Financial Services Applications component: Web UI. Supported versions that are affected are 8.0.8.1, 8.1.2.7 and 8.1.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network acce...
Oracle Financial Services Applications 安全漏洞
Oracle Financial Services Applications is a suite of financial services software from Oracle Corporation USA. The product includes core banking, online banking, and estate management. A security vulnerability exists in Oracle Financial Services Behavior Detection Platform for Oracle Financial...
PT-2025-4272 · Oracle · Oracle Financial Services Behavior Detection Platform
Name of the Vulnerable Software and Affected Versions: Oracle Financial Services Behavior Detection Platform versions 8.0.8.1, 8.1.2.7, 8.1.2.8 Description: The issue is related to insufficient input validation in the Oracle Financial Services Behavior Detection Platform, allowing an...
MAL-2024-10558 Malicious code in dancer-pipeline (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 02d1f4c0f5ff76788a930b3387f90983f8ef4ae8e8b2064c4829e76954feee04 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-10572 Malicious code in xcasset-gen (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 55e5f7e5d499d4113f36ddf1be5df2ac0a49176ca22b7b86e106077f936801fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Identity Threat Detection and Response Solution Guide
The Emergence of Identity Threat Detection and Response Identity Threat Detection and Response ITDR has emerged as a critical component to effectively detect and respond to identity-based attacks. Threat actors have shown their ability to compromise the identity infrastructure and move laterally...
MAL-2024-7621 Malicious code in sap-birthdate (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8c22fde65593fe72b69b423a1bef3e0af246fed12b8644cd5d69ab128818e82d The OpenSSF Package Analysis project identified 'sap-birthdate' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...
CVE-2023-21902
Vulnerability in the Oracle Financial Services Behavior Detection Platform product of Oracle Financial Services Applications component: Application. The supported version that is affected is 8.0.8.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...
CVE-2023-21902
Vulnerability in the Oracle Financial Services Behavior Detection Platform product of Oracle Financial Services Applications component: Application. The supported version that is affected is 8.0.8.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...
Buffer overflow
Vulnerability in the Oracle Financial Services Behavior Detection Platform product of Oracle Financial Services Applications component: Application. The supported version that is affected is 8.0.8.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...
CVE-2023-21902
CVE-2023-21902 affects Oracle Financial Services Behavior Detection Platform (Oracle Financial Services Applications) version 8.0.8.1. The issue is described as insufficient input validation in a subcomponent, allowing a low-privilege, network-access attacker via HTTP to read a subset of data. Th...
PT-2023-2629 · Oracle · Oracle Financial Services Behavior Detection Platform
Name of the Vulnerable Software and Affected Versions: Oracle Financial Services Behavior Detection Platform version 8.0.8.1 Description: The issue is related to insufficient input validation in a subcomponent of the Oracle Financial Services Behavior Detection Platform, which is part of the Orac...
Oracle Financial Services Applications 安全漏洞
Oracle Financial Services Applications is a suite of financial services software from Oracle USA. The product includes core banking, online banking, and estate management. A security vulnerability exists in Oracle Financial Services Behavior Detection Platform version 8.0.8.1 for Oracle Financial...
The Future of Network Security: Predictive Analytics and ML-Driven Solutions
As the digital age evolves and continues to shape the business landscape, corporate networks have become increasingly complex and distributed. The amount of data a company collects to detect malicious behaviour constantly increases, making it challenging to detect deceptive and unknown attack...
New MortalKombat ransomware and Laplas Clipper malware threats deployed in financially motivated campaign
Since December 2022, Cisco Talos has been observing an unidentified actor deploying two relatively new threats, the recently discovered MortalKombat ransomware and a GO variant of the Laplas Clipper malware, to steal cryptocurrency from victims. Talos observed the actor scanning the internet for...
Vulnerabilities fixed in Oracle Financial Services Applications
Vulnerabilities have been fixed in Oracle Financial Services Applications. The vulnerabilities allow a malicious party to perform attacks that result in the following categories of damage: Denial-of-Service DoS Manipulation of data Circumvention of security measure Remote code execution User righ...