Oracle Document Capture BlackIceDevMode.ocx ActiveX Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle Document Capture. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Hack Battle at 'The Hacker Conference 2013' with CTF365

The Hacker Conference partnered up with CTF365 to provide the best CTF experience during the conference. While trying to find out more about their product and also about their CTF surprise, I got an interview with Marius Corici Co-founder and CEO for CTF365. Q: November 2012 was when you first...

[Wireshark v1.10.0 RC1] The world’s foremost network protocol analyzer

Wireshark is the world’s foremost network protocol analyzer. It lets you capture and interactively browse the traffic running on a computer network. It is the de facto and often de jure standard across many industries and educational institutions. Wireshark development thrives thanks to the...

Researchers detected the Malware that targets the Russian stock-trading platform QUIK

Security Researcher from Group-IB Group-IB is one of the leading companies in global cybercrime prevention and hi-tech crime investigations has found a new kind of malware that targets the Russian stock-trading platform QUIK. It was detected during several targeted attacks starting in November 20...

Ubuntu Update for xorg-server USN-1803-1

Check for the Version of xorg-server OpenVAS Vulnerability Test $Id: gbubuntuUSN18031.nasl 8448 2018-01-17 16:18:06Z teissa $ Ubuntu Update for xorg-server USN-1803-1 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

CVE-2013-0139

The Arecont Vision AV1355DN MegaDome camera allows remote attackers to cause a denial of service video-capture outage via a packet to UDP port 69...

[Cuckoo Sandbox v0.6] Software for Automating Analysis of Suspicious Files

Cuckoo Sandbox is an Open Source software for automating analysis of suspicious files. To do so it makes use of custom components that monitor the behavior of the malicious processes while running in an isolated environment. Cuckoo generates a handful of different raw data which include: Native...

Hacking Facebook users just from chat box using multiple vulnerabilities

Nir Goldshlager, Founder/CEO at Break Security known for finding serious flaws in Facebook once again on The Hacker News for sharing his new finding i.e Stored Cross-site Scripting XSS in Facebook Chat, Check In and Facebook Messenger. Stored Cross-site Scripting XSS is the most dangerous type of...

CVE-2013-1520

Unspecified vulnerability in the Oracle Clinical Remote Data Capture Option component in Oracle Industry Applications 4.6.0 and 4.6.6 allows remote authenticated users to affect confidentiality and integrity via vectors related to HTML Surround...

CVE-2013-1516

Unspecified vulnerability in the Oracle WebCenter Capture component in Oracle Fusion Middleware 10.1.3.5.1 allows remote authenticated users to affect availability via unknown vectors related to Import Server...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Clinical Remote Data Capture Option component in Oracle Industry Applications 4.6.0 and 4.6.6 allows remote authenticated users to affect confidentiality and integrity via vectors related to HTML Surround...

Design/Logic Flaw

Unspecified vulnerability in the Oracle WebCenter Capture component in Oracle Fusion Middleware 10.1.3.5.1 allows remote authenticated users to affect availability via unknown vectors related to Import Server...

CVE-2013-1520

Unspecified vulnerability in the Oracle Clinical Remote Data Capture Option component in Oracle Industry Applications 4.6.0 and 4.6.6 allows remote authenticated users to affect confidentiality and integrity via vectors related to HTML Surround...

CVE-2013-1516

Unspecified vulnerability in the Oracle WebCenter Capture component in Oracle Fusion Middleware 10.1.3.5.1 allows remote authenticated users to affect availability via unknown vectors related to Import Server...

CVE-2013-1520

CVE-2013-1520 affects Oracle Industry Applications (Oracle Clinical Remote Data Capture Option) 4.6.0 and 4.6.6. The vulnerability is described as unspecified in the Oracle RDC component, enabling remote authenticated users to impact confidentiality and integrity via vectors related to HTML Surro...

CVE-2013-1516

Unspecified vulnerability in the Oracle WebCenter Capture component in Oracle Fusion Middleware 10.1.3.5.1 allows remote authenticated users to affect availability via unknown vectors related to Import Server...

CVE-2013-1516

CVE-2013-1516 concerns a buffer overflow in the BlackIceDevMode.ocx ActiveX control used by Oracle WebCenter Capture (formerly Oracle Document Capture). The Import Server subcomponent is affected, allowing command execution when a user loads a malicious page that calls SetAnnotationFont. Exploita...

Oracle Document Capture BlackIceDevMode.ocx ActiveX Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle Document Capture. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. Recent assessments: wchen-r7 at Septembe...

Arecont Vision model AV1355DN camera vulnerable to denial of service

Overview The Arecont Vision model AV1355DN MegaDome surveillance camera is reported to be affected by a denial-of-service vulnerability by sending a UDP packet to port 69 on the device. Description The Arecont Vision model AV1355DN MegaDome surveillance camera is reported to be affected by a...

thinksns V3 getshell vulnerabilities attached to the use of the method-vulnerability warning-the black bar safety net

tick test re-test is that the results of the proceedings I applied for didn't let me into listening to friends say this I'll probably see you found a getshell Anyway all tested so many hackers surely by the time someone dug out might as well put out attachaction.class.php | 1 | public function...