CVE-2017-10094

CVE-2017-10094 affects Oracle’s Agile PLM component within the Oracle Supply Chain Products Suite (subcomponent: Security). Affected versions are 9.3.5 and 9.3.6. The vulnerability allows a low-privilege attacker with network access over HTTP to compromise Oracle Agile PLM, with exploitation requ...

CVE-2017-10214

CVE-2017-10214 affects Oracle Retail Xstore Point of Service (Xstore Office). Affected versions: 6.0.x, 6.5.x, 7.0.x, 7.1.x, 15.0.x, 16.0.0. The vulnerability allows an unauthenticated attacker with network access over HTTP to compromise data, potentially gaining unauthorized access to critical d...

CVE-2017-10183

Vulnerability in the Oracle Retail Xstore Point of Service component of Oracle Retail Applications subcomponent: Point of Sale. Supported versions that are affected are 6.0.x, 6.5.x, 7.0.x, 7.1.x, 15.0.x and 16.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network...

CVE-2017-10048

CVE-2017-10048 affects Oracle Fusion Middleware’s Oracle Enterprise Repository Web Interface, with affected versions 11.1.1.7.0 and 12.1.3.0.0. The vulnerability enables unauthenticated network access via HTTP to compromise Oracle Enterprise Repository, potentially granting unauthorized read/writ...

CVE-2017-10192

The CVE-2017-10192 issue affects Oracle iStore within Oracle E-Business Suite Shopping Cart for multiple 12.1.x/12.2.x versions. It allows an unauthenticated, network-based attacker over HTTP to read a subset of data due to a disclosed information‑exposure in Shopping Cart handling. Practical imp...

CVE-2017-10219

CVE-2017-10219 affects Oracle Hospitality Guest Access Base subcomponent in Oracle Hospitality Applications. Affected versions: 4.2.0.0 and 4.2.1.0. The vulnerability is exploitable by a low-privileged user who can log on to the infrastructure where Oracle Hospitality Guest Access runs, potential...

CVE-2017-10003

Affected software: Oracle Solaris (Solaris 10 on x86 and SPARC). Component: Network Services Library of the Sun Systems Products Suite. Root cause / vulnerability detail: Local vulnerability that allows a low-privileged user with logon to the Solaris host to access or modify Solaris data (unautho...

CVE-2017-10224

CVE-2017-10224 affects the Oracle Hospitality Inventory Management component of Oracle Hospitality Applications (subcomponent: Inventory and Count Cycle). Affected versions are 8.5.1 and 9.0.0. The vulnerability is exploitable by a low-privilege attacker with network access via HTTP , potentially...

CVE-2017-10199

CVE-2017-10199 affects Oracle iLearning, Learner Pages subcomponent, version 6.2. An unauthenticated attacker with network access via HTTP can compromise Oracle iLearning, with user interaction required, potentially leading to unauthorized access to data and to update/insert/delete of Oracle iLea...

Engineering Firm Leaks Data on Dell, SBC and Oracle

A Texas-based firm called Power Quality Engineering publicly exposed sensitive electrical infrastructure data on the public internet. Firms impacted by the leak were Dell Technologies, SBC, Freescale, Oracle, Texas Instruments and the City of Austin. Chris Vickery, cyber risk analyst at security...

Game of Thrones (Season 7) Episode 5 Script Leaked — Hacker Demands Millions in Ransom

The hacking group that recently hacked HBO has just dropped its second trove of documents, including a month emails of one of the company's executives, and a detailed script of the upcoming fifth episode of "Game of Thrones" Season 7, set to be aired on August 13. The latest release is the second...

PT-2017-11055

Name of the Vulnerable Software and Affected Versions Oracle Hospitality 9700 version 4.0 Description The issue allows a low-privileged attacker with logon access to the infrastructure where Oracle Hospitality 9700 executes to compromise the system. Successful attacks can result in unauthorized...

Oracle FLEXCUBE Direct Banking Remote Vulnerability (CNVD-2017-26388)

Oracle Financial Services Applications is a set of core banking, online banking and property management financial services software from Oracle Corporation, of which Oracle FLEXCUBE Direct Banking is an Internet and mobile banking solution component. A security vulnerability exists in the Forgot...

CVE-2017-1495

IBM InfoSphere Information Server 9.1, 11.3, and 11.5 could allow a privileged user to cause a memory dump that could contain highly sensitive information including access credentials. IBM X-Force ID: 128693...

Breach at Third Party Contractor Affects 18,000 Anthem Members

A month after it agreed to settle 2015’s massive data breach, Anthem Inc., the United States’ largest healthcare company, has a new problem on its hands. The Indianapolis-based company began notifying 18,000 members affected by another unrelated data breach last week. Anthem reported the breach o...

Hacker Leaks Data From Mandiant (FireEye) Senior Security Analyst

Reportedly, at least one senior cyber security analyst working with Mandiant, a Virginia-based cybersecurity firm owned by the FireEye, appears to have had its system compromised by hackers, exposing his sensitive information on the Internet. On Sunday, an anonymous group of hackers posted some...

CVE-2017-11693

MEDHOST Document Management System contains hard-coded credentials that are used for customer database access. An attacker with knowledge of the hard-coded credentials and the ability to communicate directly with the database may be able to obtain or modify sensitive patient and financial...

VehicleWorkshop - SQL Injection

Exploit Title: VehicleWorkshop SQL Injection Data: 07.28.2017 Exploit Author: Shahab Shamsi Vendor HomagePage: https://github.com/spiritson/VehicleWorkshop Tested on: Windows Google Dork: N/A ========= Vulnerable Page: ========= /viewvehiclestoremore.php ========== Vulnerable Source: ==========...

6 billion records hacked in 2017 so far; ransomware victims paid $25 million

By Waqas With every passing day, hackers and cyber criminals are becoming This is a post from HackRead.com Read the original post: 6 billion records hacked in 2017 so far; ransomware victims paid $25 million...

July 26, 2017 – Morning Cyber Coffee Headlines – “Wright Brothers” Edition

Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! July 26, 2017 - Headlines Carbon Black in the News: Security expert shares tips...