CVE-2020-2879

CVE-2020-2879 affects Oracle E-Business Suite, Oracle Scripting (component: Miscellaneous). Affected are versions 12.1.1–12.1.3 and 12.2.3–12.2.9. The vulnerability allows an unauthenticated, network-accessible attacker over HTTP to compromise Oracle Scripting, potentially leading to unauthorized...

CVE-2020-2860

The CVE-2020-2860 entry concerns Oracle E-Business Suite’s Oracle Marketing (Marketing Administration) vulnerability affecting 12.1.1–12.1.3. The flaw allows an unauthenticated attacker with network access via HTTP to compromise Oracle Marketing, with attacks requiring user interaction. The impac...

CVE-2020-2834

CVE-2020-2834 is a vulnerability in the Oracle Marketing component (Marketing Administration) of Oracle E-Business Suite. Affected versions are 12.1.1–12.1.3. An unauthenticated attacker with network access via HTTP can compromise Oracle Marketing, with attacks requiring human interaction. The vu...

CVE-2020-2837

The CVE-2020-2837 entry describes a vulnerability in Oracle Marketing (component: Marketing Administration) within Oracle E-Business Suite. Affected versions are 12.1.1–12.1.3. The issue allows an unauthenticated attacker with network access over HTTP to compromise Oracle Marketing, with attacks ...

CVE-2020-2796

CVE-2020-2796 affects Oracle E-Business Suite Email Center, component Message Display. Affected versions are 12.1.1–12.1.3 and 12.2.3–12.2.9. The vulnerability allows unauthenticated, remote HTTP access to compromise Oracle Email Center, with user interaction required and potential unauthorized a...

CVE-2020-2744

CVE-2020-2744 affects Oracle Transportation Management (Oracle Supply Chain) Security component in versions 6.3.7, 6.4.2 and 6.4.3. The vulnerability enables an attacker with network access over HTTP and low privileges to compromise data, including unauthorized read and (potentially) update/inser...

CVE-2020-2741

CVE-2020-2741 affects Oracle VM VirtualBox (Core) with affected releases before 5.2.40, 6.0.20 and 6.1.6. The vulnerability allows a high-privilege user who can log on to the host infrastructure running VirtualBox to potentially compromise VirtualBox and, per sources, may lead to unauthorized acc...

Oracle HTTP Server Remote Code Execution Vulnerability

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle. The platform provides middleware, software collection and other functions. HTTP Server is one of the HTTP server component. A security vulnerability exist...

Keep Zoombombing cybercriminals from dropping a load on your meetings

While shelter in place has left many companies struggling to stay in business during the COVID-19 epidemic, one company in particular has seen its fortunes rise dramatically. Zoom, the US-based maker of teleconferencing software, has become the web conference tool of choice for employees working...

Exclusive: Personal data of 1.41m US doctors sold on hacker forum

By Waqas In the latest, a crook on a hacker forum is selling personal and contact details of 1.41 million doctors based in the United States. This is a post from HackRead.com Read the original post: Exclusive: Personal data of 1.41m US doctors sold on hacker forum...

2 San Francisco Int. airport websites hacked with info-stealer code

By Deeba Ahmed According to a data breach notification released by authorities... This is a post from HackRead.com Read the original post: 2 San Francisco Int. airport websites hacked with info-stealer code...

SFO Websites Hacked: Airport Discloses Data Breach

The San Francisco International Airport SFO disclosed this week two of its websites had been hacked and lead to the disclosure of some users’ login credentials at both sites. The attacks occurred in March and compromised were SFOConnect.com and SFOConstruction.com, both relatively low-traffic...

A billion-dollar US firm caught exposing highly sensitive database online

By Sudais Asif Another day, another data breach - This time, database of a US firm named has surfaced online containing highly sensitive data. This is a post from HackRead.com Read the original post: A billion-dollar US firm caught exposing highly sensitive database online...

Login details of verified Zoom accounts posted on Dark Web

By Deeba Ahmed These Zoom accounts are currently on the dark web but not for sale but free rather for a very wrong reason against Zoom users. This is a post from HackRead.com Read the original post: Login details of verified Zoom accounts posted on Dark Web...

Italian email provider Email.it hacked with data on sale

By Sudais Asif Italian email provider by the name of Email.it was hacked leading to a breach of the data of its 600,000 customers. This is a post from HackRead.com Read the original post: Italian email provider Email.it hacked with data on sale...

A week in security (March 30 – April 5)

Last week on Malwarebytes Labs, we offered readers tips for safe online shopping now that cybercriminals are ramping up Internet-based attacks, showed the impact that GDPR has around the world, and helped users understand how social media platforms mine their personal data. We also hosted our...

The vulnerability of the pg_ctlcluster script in the postgresql-common package involves insecure privilege management. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the pgctlcluster script in the postgresql-common package is related to an access rights rollback error during the creation of temporary directories for sockets/stats. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrit...

Digital wallet app leaks millions of users’ credit cards & Govt IDs

By Waqas Another day, another treasure trove of data exposed online. This time, a Digital wallet app leaked highly sensitive data online. This is a post from HackRead.com Read the original post: Digital wallet app leaks millions of users' credit cards & Govt IDs...

Marriott Was Hacked -- Again

Marriott announced another data breach, this one affecting 5.2 million people: At this point, we believe that the following information may have been involved, although not all of this information was present for every guest involved: Contact Details e.g., name, mailing address, email address, an...

Terabytes of OnlyFans data being sold on hacking forum

By Waqas Last month reports emerged that OnlyFans website was targeted by hackers after a massive database... This is a post from HackRead.com Read the original post: Terabytes of OnlyFans data being sold on hacking forum...