Apache James Deserialization RCE(CVE-2017-12628)

Analysis of CVE-2017-12628 This morning I spotted a tweet mentioning an “Apache James 3.0.1 JMX Server Deserialization” vulnerability, CVE-2017-12628, which caught my eye because I wrote a generic JMX deserialization exploit which is included in my RMI attack tool BaRMIe. A quick search for more...

Kaltura Remote PHP Code Execution over Cookie

This module exploits an Object Injection vulnerability in Kaltura. By exploiting this vulnerability, unauthenticated users can execute arbitrary code under the context of the web server user. Kaltura makes use of a hardcoded cookie secret which allows to sign arbitrary cookie data. After passing...

Unspecified Vulnerability in Oracle PeopleSoft Products PeopleSoft Enterprise FSCM Component

Oracle PeopleSoft is a set of enterprise human capital management solutions from Oracle, which provides human capital management, financial management, supplier relationship management, etc. PeopleSoft Enterprise FSCM is one of the financial and supply chain management components. An unspecified...

Mac malware OSX.Proton strikes again

The hackers responsible for the Mac malware OSX.Proton have struck again, this time infecting a copy of the Elmedia Player app that was being distributed from the official Eltima website. At this time, it is still unknown how long their website was providing the hijacked app. Proton was silently...

CVE-2017-5636

In Apache NiFi before 0.7.2 and 1.x before 1.1.2 in a cluster environment, the proxy chain serialization/deserialization is vulnerable to an injection attack where a carefully crafted username could impersonate another user and gain their permissions on a replicated request to another node...

CVE-2017-5636

In Apache NiFi before 0.7.2 and 1.x before 1.1.2 in a cluster environment, the proxy chain serialization/deserialization is vulnerable to an injection attack where a carefully crafted username could impersonate another user and gain their permissions on a replicated request to another node...

CVE-2017-5636

CVE-2017-5636 affects Apache NiFi before 0.7.2 and 1.x before 1.1.2 in a cluster environment. The issue is a vulnerability in the proxy chain serialization/deserialization that can be exploited by crafting a username to impersonate another user and gain their permissions on a replicated request t...

CVE-2017-10299

Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite subcomponent: Security. Supported versions that are affected are 9.3.5 and 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM...

Design/Logic Flaw

Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite subcomponent: Security. Supported versions that are affected are 9.3.5 and 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM...

CVE-2017-10299

Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite subcomponent: Security. Supported versions that are affected are 9.3.5 and 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM...

CVE-2017-10299

CVE-2017-10299 affects Oracle Agile PLM within Oracle Supply Chain Products Suite (subcomponent: Security). Affected versions are 9.3.5 and 9.3.6. The vulnerability allows a low-privileged attacker with network access over HTTP to read a subset of Oracle Agile PLM data (unauthorized read access)....

CVE-2017-10308

Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite subcomponent: Performance. Supported versions that are affected are 9.3.5 and 9.3.6. Easily exploitable vulnerability allows physical access to compromise Oracle Agile PLM. Successful attacks of this vulnerabili...

CVE-2017-10161

Vulnerability in the Oracle Engineering Data Management component of Oracle Supply Chain Products Suite subcomponent: Web Services Security. Supported versions that are affected are 6.1.3.0 and 6.2.2.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTT...

CVE-2017-10161

Vulnerability in the Oracle Engineering Data Management component of Oracle Supply Chain Products Suite subcomponent: Web Services Security. Supported versions that are affected are 6.1.3.0 and 6.2.2.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTT...

CVE-2017-10161

CVE-2017-10161 affects Oracle Engineering Data Management in the Oracle Supply Chain Products Suite (Web Services Security). Affected versions are 6.1.3.0 and 6.2.2.0. The vulnerability can be exploited by an unauthenticated attacker over HTTP to perform unauthorized update, insert, or delete ope...

CVE-2017-10308

Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite subcomponent: Performance. Supported versions that are affected are 9.3.5 and 9.3.6. Easily exploitable vulnerability allows physical access to compromise Oracle Agile PLM. Successful attacks of this vulnerabili...

CVE-2017-10308

CVE-2017-10308 affects the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: Performance). Affected versions: 9.3.5 and 9.3.6. The vulnerability allows physical access to compromise Oracle Agile PLM, enabling unauthorized update/insert/delete operations and unauthori...

Oracle Supply Chain Products Suite Information Disclosure Vulnerability (CNVD-2017-30733)

Oracle Supply Chain Products Suite is the Oracle Supply Chain Products Suite. A security vulnerability exists in the Security component of Oracle Agile PLM for Oracle Supply Chain Products Suite, which can be exploited by attackers to compromise system confidentiality...

Oracle Supply Chain Products Suite Information Disclosure Vulnerability

Oracle Supply Chain Products Suite is the Oracle Supply Chain Products Suite. A security vulnerability exists in the Performance component of Oracle Agile PLM for Oracle Supply Chain Products Suite, which can be exploited by attackers to compromise the confidentiality and integrity of the system...

Oracle Supply Chain Products Suite Information Disclosure Vulnerability (CNVD-2017-30732)

Oracle Supply Chain Products Suite is the Oracle Supply Chain Products Suite. A security vulnerability exists in the Web Services Security component of Oracle Agile Engineering Data Management for Oracle Supply Chain Products Suite, which can be exploited by attackers to compromise the...