CVE-2020-14688

The CVE covers a vulnerability in Oracle E-Business Suite’s Common Applications component (CRM User Management Framework). Affected: Oracle E-Business Suite versions 12.1.3 and 12.2.3–12.2.9. Condition: unauthenticated network access via HTTP can compromise Oracle Common Applications, with requir...

CVE-2020-14703

CVE-2020-14703 affects Oracle VM VirtualBox (Core) with fixes in VirtualBox 5.2.44, 6.0.24, and 6.1.12. Affected versions are prior to these releases. The advisory notes that a high-privilege attacker with local access to the host could compromise Oracle VM VirtualBox, potentially leading to unau...

CVE-2020-14694

CVE-2020-14694 affects Oracle VM VirtualBox (Core) with affected branches prior to 5.2.44, 6.0.24, and 6.1.12. The issue is described as locally exploitable by a high-privileged user who can log on to the infrastructure where VirtualBox executes, potentially leading to unauthorized access to data...

CVE-2020-14670

CVE-2020-14670 affects Oracle E-Business Suite, Advanced Outbound Telephony (Settings) for versions 12.1.1–12.1.3 and 12.2.3–12.2.9. The flaw allows an unauthenticated attacker with network access via HTTP to compromise the Telephony component; however, exploitation requires user interaction from...

CVE-2020-14660

CVE-2020-14660 affects Oracle E-Business Suite Oracle CRM Technical Foundation (Preferences component); vulnerable versions are 12.1.3 and 12.2.3–12.2.9. The issue allows unauthenticated, network-accessible attacks over HTTP, with user interaction required, to gain unauthorized access to data or ...

CVE-2020-14574

CVE-2020-14574 affects Oracle Communications Interactive Session Recorder (component: FACE) in Oracle Communications Applications, versions 6.1–6.4. The connected documents state a vulnerability that, while difficult to exploit, could allow a high-privileged attacker with local logon to the infra...

CVE-2020-14587

CVE-2020-14587 affects Oracle PeopleSoft Enterprise FIN Expenses (component: Expenses) in the PeopleSoft 9.2 line. The connected documents consistently describe a network-accessible vulnerability with low-privilege, low-complexity exploitation that can lead to unauthorized read, update, insert, o...

Unspecified Vulnerability in Oracle Construction and Engineering Primavera P6 Enterprise Project Portfolio Management

Oracle Construction and Engineering Suite is a suite of portfolio management solutions for construction projects from Oracle Corporation.Primavera P6 Enterprise Project Portfolio Management P6 is one of the components for planning, managing and executing projects. Primavera P6 Enterprise Project...

Citrix allegedly hacked exposing database with 2000,000 users

By Sudais Asif In March 2019, about 6 TB of data from Citrix was hacked by an Iranian group. This is a post from HackRead.com Read the original post: Citrix allegedly hacked exposing database with 2000,000 users...

142 million MGM customers’ data sold on dark web marketplace

By Deeba Ahmed The hacker has put up for sale around 142,479,937 records on sale on a prominent dark web marketplace. This is a post from HackRead.com Read the original post: 142 million MGM customers' data sold on dark web marketplace...

Leaked Details of 142 Million MGM Hotel Guests Found for Sale Online

Researchers have found 142 million personal details from former guests at the MGM Resorts hotels for sale on the dark web, evidence that a data leak from the hotel chain last summer may be far bigger in scope than previously thought. An advertisement on a hacker forum has put 142,479,937 details...

Leaked Details of 142 Million MGM Hotel Guests Found for Sale on Dark Web

Researchers have found 142 million personal details from former guests at the MGM Resorts hotels for sale on the Dark Web, evidence that a data leak from the hotel chain last summer may be far bigger in scope than previously thought. An advertisement on a hacker forum has put 142,479,937 details...

CVE-2020-15105

Django Two-Factor Authentication (django-two-factor-auth) vulnerability CVE-2020-15105 affects versions up to 1.11. It stores the user’s password in clear text (base64-encoded) in the user session after the user submits credentials, until authentication completes via a 2FA code. Depending on sess...

User passwords are stored in clear text in the Django session

Impact django-two-factor-auth versions 1.11 and before store the user's password in clear text in the user session base64-encoded. The password is stored in the session when the user submits their username and password, and is removed once they complete authentication by entering a two-factor...

BlueLeaks Server Seized By German Police: Report

German authorities have reportedly seized a server hosting the massive BlueLeaks data dump, which was released earlier in June and exposed thousands of sensitive police department and law enforcement files. According to a Wednesday report by PCMag, the server was based in Falkenstein, Germany and...

CVE-2020-3973

The VeloCloud Orchestrator does not apply correct input validation which allows for blind SQL-injection. A malicious actor with tenant access to Velocloud Orchestrator could enter specially crafted SQL queries and obtain data to which they are not privileged...

Sql injection

The VeloCloud Orchestrator does not apply correct input validation which allows for blind SQL-injection. A malicious actor with tenant access to Velocloud Orchestrator could enter specially crafted SQL queries and obtain data to which they are not privileged...

New study shows customers save time, resources and improve security with Microsoft Cloud App Security

The global pandemic has forever changed our workplaces and reshaped our cybersecurity priorities. While in recent months cloud apps have helped people around the globe stay productive and connected. They also pose an increased cybersecurity risk to businesses large and small, especially when you...

Fitness firm V Shred exposes 606 GB worth of sensitive customer data

By Waqas V Shred was launched in 2016. This is a post from HackRead.com Read the original post: Fitness firm V Shred exposes 606 GB worth of sensitive customer data...

Facebook exposed user data to thousands of app developers

By Zara Khan Facebook 'Privacy Matters' reveals 5000 app developers accessed user data. This is a post from HackRead.com Read the original post: Facebook exposed user data to thousands of app developers...