CVE-2017-3423

Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network...

CVE-2017-3290

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Shared Folder. Supported versions that are affected are VirtualBox prior to 5.0.32 and prior to 5.1.14. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure wher...

CVE-2017-3284

Vulnerability in the Oracle Service Fulfillment Manager component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with...

PT-2017-15787

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM version 16.1 Description The issue affects the Siebel UI Framework component, specifically the Open UI subcomponent. It allows a low-privileged attacker with network access via HTTP to compromise the Siebel UI Framework,...

PT-2017-15875

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.3 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise the Oracle CRM Technical Foundation component. Successful attacks require human interaction from a pers...

PT-2017-15819

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Knowledge Management, requiring human interaction from a person other than the...

PT-2017-15826

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1, 12.1.2, and 12.1.3 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise the Oracle iSupport component. Successful attacks require human interaction from a...

PT-2017-15827

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1, 12.1.2, and 12.1.3 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise the Oracle iSupport component. Successful attacks require human interaction from a...

CVE-2017-3382: Undefined Security Weakness

Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with...

Oracle MySQL Server Denial of Service Vulnerability (CNVD-2017-01023)

Oracle MySQL Server is an open source relational database management system from Oracle. This database system is characterized by high performance, low cost, good reliability and so on. A security vulnerability exists in the Server: DML subcomponent of the MySQL Server component in Oracle MySQL. ...

MySQL Cluster 7.4.x < 7.4.13 Multiple Vulnerabilities (January 2017 CPU)

The version of MySQL Cluster running on the remote host is 7.4.x prior to 7.4.13. It is, therefore, affected by multiple vulnerabilities : - An overflow condition exists in the NDBAPI subcomponent that allows an unauthenticated, remote attacker to update, insert, or delete arbitrary data...

Oracle GlassFish Server 2.1.1.x < 2.1.1.30 / 3.0.1.x < 3.0.1.15 / 3.1.2.x < 3.1.2.16 Multiple Vulnerabilities (January 2017 CPU)

According to its self-reported version number, the Oracle GlassFish Server running on the remote host is 2.1.1.x prior to 2.1.1.30, 3.0.1.x prior to 3.0.1.15, or 3.1.2.x prior to 3.1.2.16. It is, therefore, affected by multiple vulnerabilities : - An unspecified flaw exists in the Security...

Malware exploit: Caberp

Type: Remote Code Execution Author: Xylitol table width="607" border="0" tr tdform method="POST" action="?php basename$SERVER'PHPSELF' ?" label for="carberp"Domain: /label input name="urlz" type="text" id="urlz" value="http://carberpPanel.com" size="50" / input type="submit" name="button"...

Panasonic, IOActive Clash on Vulnerability Report

Panasonic Avionics has pushed back against research released Tuesday by IOActive suggesting that in-flight entertainment system firmware used by more than a dozen airlines contains vulnerabilities that allow a local attacker to manipulate data displayed to passengers, or put their personal data a...

mysql: unspecified vulnerability in subcomponent: Server: DML (CPU October 2016)

Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier allows remote authenticated users to affect availability via vectors related to DML...

WordPress Symposium Plugin SQL Injection (CVE-2015-6522)

An SQL injection vulnerability exists in the WordPress Symposium Plugin. It allows an authenticated remote attacker to inject or manipulate SQL queries in the back-end database, allowing for the manipulation or disclosure of arbitrary data...

Cyber Swiss Army Knife: CyberChef

Cyber Swiss Army Knife CyberChef is a simple, intuitive web app for carrying out all manner of “cyber” operations within a web browser. These operations include creating hexdumps, simple encoding like XOR or Base64, more complex encryption like AES, DES and Blowfish, data compression and...

Social Engineering Attack Vector: QRLJacking

Social Engineering Attack Vector QRLJacking or Quick Response Code Login Jacking is a simple social engineering attack vector capable of session hijacking affecting all applications that rely on “Login with QR code” feature as a secure way to login into accounts. In a simple way, In a nutshell...

Multiple Vulnerabilities in TYPO3 Code Highlighter Extension

TYPO3 is a free and open source content management system maintained by the Swiss TYPO3 Association. Multiple vulnerabilities exist in TYPO3 Code Highlighter Extension. An attacker can exploit the vulnerabilities to perform unauthorized operations or damage the application, access or modify data ...

pycsw SQL Injection Vulnerability

pycsw is a system written in python that implements OGC CSW server functionality. It runs on all major platforms Windows, Linux, Mac OS X. Pycsw suffers from a SQL injection vulnerability, which can be exploited by an attacker to take control of the application, access or modify data, or exploit...