CVE-2017-3293

CVE-2017-3293 is a Use-After-Free vulnerability in the Oracle Outside In Technology (Outside In Filters) used by Oracle Fusion Middleware. Affected versions include 8.5.2 and 8.5.3. The issue arises in the RTF/Outside In Filters parsing path where freed memory can be reused (notably during handli...

CVE-2017-3359

CVE-2017-3359 affects Oracle E-Business Suite’s Oracle Customer Intelligence (User Interface), specifically versions 12.1.1–12.1.3. The vulnerability allows network-access, unauthenticated or semi-authenticated access via HTTP to compromise Oracle Customer Intelligence; attacks may leverage user ...

CVE-2017-3348

CVE-2017-3348 affects Oracle E-Business Suite Oracle Marketing (User Interface subcomponent). Affected versions: 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6. Description: an unauthenticated attacker with network access via HTTP can compromise Oracle Marketing; successful attacks requir...

CVE-2017-3296

CVE-2017-3296 affects Oracle Commerce Platform (Dynamo Application Framework) with affected versions 10.0.3.5, 10.2.0.5, and 11.2.0.2. The vulnerability allows an unauthenticated attacker, with network access via HTTP, to compromise the platform and read a subset of data; exploitation requires hu...

CVE-2017-3286

CVE-2017-3286 describes a vulnerability in the Oracle Applications DBA component of Oracle E-Business Suite (subcomponent: Patching). Affected supported versions are 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. The description states that an easily exploitable vulnerability could allow a high-privi...

CVE-2016-8299

CVE-2016-8299 affects Oracle FLEXCUBE Universal Banking (Core) across multiple supported versions (11.3.0, 11.4.0, 12.0.1–12.2.0). The vulnerability lies in the Core subcomponent and is exploitable by a low-privileged attacker with network access over HTTP, potentially allowing unauthorized updat...

CVE-2017-3370

CVE-2017-3370 affects Oracle E-Business Suite's iSupport User Interface (versions 12.1.1–12.1.3). The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise iSupport, with human interaction required for exploitation and potential unauthorized access/update/del...

CVE-2017-3318

CVE-2017-3318 affects the MySQL Server component of Oracle MySQL (subcomponent: Server: Error Handling). Affected versions are 5.5.53 and earlier, 5.6.34 and earlier, and 5.7.16 and earlier. The issue is described as difficult to exploit, requiring a high-privilege attacker with logon to the infr...

CVE-2017-3359

Vulnerability in the Oracle Customer Intelligence component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Orac...

CVE-2016-9932

CVE-2016-9932 affects the Xen hypervisor (CMPXCHG8B emulation) from Xen 3.3.x through 4.7.x on x86. It allows local HVM guest OS users to disclose sensitive host stack memory via a supposedly-ignored operand size prefix. Connected advisories note this as XSA-200 and document patched versions in X...

Half of Ransomware Victims Pay Criminals' Demands to Recover Data

A report on ransomware sheds new light on attacks in 2016, starting with the fact that 48 percent of businesses hit by ransomware said they paid the ransom. That’s in spite of pleas from cyber security experts and the FBI not to do so. Other insights include the average ransom payment was $2,500...

wirefirst.com XSS vulnerability

Vulnerable URL: http://www.wirefirst.com/newsdetail.php?ID=3845'"--!confirmOPENBUGBOUNTY...

Information disclosure

An information disclosure vulnerability in the MediaTek driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID:...

Phone-Hacking Firm Cellebrite Got Hacked; 900GB Of Data Stolen

The company that sells digital forensics and mobile hacking tools to others has itself been hacked. Israeli firm Cellebrite, the popular company that provides digital forensics tools and software to help law enforcement access mobile phones in investigations, has had 900 GB of its data stolen by ...

Hello Kitty Database of 3.3 Million Users Surfaces

A cache of data including 3.3 million user credentials belonging to Hello Kitty parent company Sanrio surfaced over the weekend. The breach was originally reported in December 2015, but at the time Sanrio denied any data was stolen as part of the breach. The breach was tied to a misconfigured...

On IoT Botnets, Ransomware, and More

Mike Mimoso, Tom Spring, and Chris Brook recap 2016’s biggest news stories, including the proliferation of IoT botnets, the rise of ransomware, the FBI vs. Apple battle, Yahoo, and a rash of old password breaches. Download: Threatpost2016YearinReview.mp3 Music by Chris Gonsalves...

Stolen Yahoo Data Sold to Spammers, One Government Client

A database of one billion stolen Yahoo accounts has been sold to at least three different buyers for $300,000 each, and the group selling the data and behind the 2013 intrusion—the largest data breach on record—is a criminal operation, not a state-sponsored attack group as Yahoo claims. Andrew...

Insecure NAS Device Exposes 350 Ameriprise Investment Accounts

A trove of data belonging to Ameriprise Financial was found earlier this month that included Social Security numbers, decryption keys and confidential internal company documents. The breach is related to the use of a network attacked storage device that insecurely backed up data from an internal...

1-Billion Yahoo Users' Database Reportedly Sold For $300,000 On Dark Web

Recently Yahoo disclosed a three-year-old massive data breach in its company that exposed personal details associated with more than 1 Billion user accounts, which is said to be the largest data breach of any company ever. The new development in Yahoo!'s 2013 data breach is that the hacker sold i...

CVE-2015-8542

Open-Xchange Guard prior to 2.2.0-rev8 is affected. The getprivkeybyid API allows downloading a user’s PGP Private Key after authentication. The auth parameter contains a hashed password, used as a single point of authentication, and, because id and cid are sequential, an attacker can iterate the...