Open redirect

Unspecified vulnerability in the Oracle Installed Base component in Oracle E-Business Suite 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect integrity via vectors related to Engineering Change Order. NOTE: the previous information is from the July 2016 CPU...

CVE-2016-3472

Unspecified vulnerability in the Siebel Engineering - Installer and Deployment component in Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP2015, and IP2016 allows remote authenticated users to affect confidentiality via vectors related to Web Server...

CVE-2016-3468

Unspecified vulnerability in the Oracle Agile Engineering Data Management component in Oracle Supply Chain Products Suite 6.1.3.0 and 6.2.0.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Install...

CVE-2016-3468

Unspecified vulnerability in the Oracle Agile Engineering Data Management component in Oracle Supply Chain Products Suite 6.1.3.0 and 6.2.0.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Install...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Agile Engineering Data Management component in Oracle Supply Chain Products Suite 6.1.3.0 and 6.2.0.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Install...

Code injection

Unspecified vulnerability in the Siebel Engineering - Installer and Deployment component in Oracle Siebel CRM 8.1.1, 8.2.2, IP2014, IP2015, and IP2016 allows remote authenticated users to affect confidentiality via vectors related to Web Server...

CVE-2016-3468

Unspecified vulnerability in the Oracle Agile Engineering Data Management component in Oracle Supply Chain Products Suite 6.1.3.0 and 6.2.0.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Install...

CVE-2016-3534

CVE-2016-3534 concerns Oracle E-Business Suite’s Installed Base component (Oracle E-Business Suite 12.1.x, 12.2.x) where an unspecified issue related to Engineering Change Order could allow a remote attacker to affect integrity. Multiple sources summarize the vulnerability as an open-redirect cla...

CVE-2016-3468

CVE-2016-3468 affects Oracle Supply Chain Products Suite, specifically the Oracle Agile Engineering Data Management component in versions 6.1.3.0 and 6.2.0.0. The vulnerability is described as an unspecified issue in the Install subcomponent that could impact confidentiality, integrity, and avail...

CVE-2016-3468

Unspecified vulnerability in the Oracle Agile Engineering Data Management component in Oracle Supply Chain Products Suite 6.1.3.0 and 6.2.0.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Install...

CVE-2016-3534

Unspecified vulnerability in the Oracle Installed Base component in Oracle E-Business Suite 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect integrity via vectors related to Engineering Change Order. NOTE: the previous information is from the July 2016 CPU...

CVE-2016-3472

CVE-2016-3472 affects Oracle Siebel CRM 8.1.1, 8.2.2, IP2014–IP2016. The Siebel Engineering - Installer and Deployment (Web Server) subcomponent is vulnerable; remote authenticated users over HTTP can impact confidentiality. No exploit details or patches are provided in the connected documents; r...

Unspecified Vulnerability in Oracle Supply Chain Products Suite Oracle Agile Engineering Data Management Component

Oracle Supply Chain Products Suite is a suite of supply chain solutions from Oracle that provides value chain planning, value chain execution, product lifecycle management, etc. Oracle Agile Engineering Data Management is one of the Data Management component. A security vulnerability exists in th...

Oracle Siebel CRM Siebel Engineering - Unspecified Vulnerability in Installer and Deployment Component

Oracle Siebel CRM is a set of customer relationship management solutions from Oracle USA, which includes modules for sales management, marketing management, customer service system, call center, etc. Siebel Engineering - Installer and Deployment is one of the Siebel Engineering Installer and...

Unspecified Vulnerability in Oracle E-Business Suite Oracle Installed Base Component

Oracle E-Business Suite E-Business Suite is a fully integrated set of global business management software from Oracle Corporation, of which Oracle Installed Base is an installed base component. An unspecified vulnerability exists in the Engineering Change Order subcomponent of the Oracle Installe...

Oracle Weblogic Server Deserialization RCE - MarshalledObject

An unauthenticated attacker with network access to the Oracle Weblogic Server T3 interface can send a serialized object weblogic.corba.utils.MarshalledObject to the interface to execute code on vulnerable hosts. Module Options msf use exploit/multi/misc/weblogic/deserializemarshalledobject msf...

Unspecified Vulnerability in Oracle Supply Chain Products Suite

Oracle Agile Engineering Data Management is a set of asset organization and management solutions from Oracle Corporation, of which Oracle Supply Chain Products Suite is a supply chain solution. An unspecified vulnerability exists in the Web Services Security subcomponent of Oracle Supply Chain...

Reverse engineering DUBNIUM –Stage 2 payload analysis

Recently, we blogged about the basic functionality and features of the DUBNIUM advanced persistent threat APT activity group Stage 1 binary and Adobe Flash exploit used during the December 2015 incident Part 1, Part 2. In this blog, we will go through the overall infection chain structure and the...

Stampado Ransomware Sells on Dark Web for $39

Dirt cheap ransomware selling for as little as $39 on the dark web has security experts concerned the low price coupled with its potency could trigger a wave of new infections. The ransomware is called Stampado and besides its hallmark low price, the ransomware is also unique because it threatens...

Sam Pfanstiel Appointed Director, Solution Architecture for Payments

Coalfire today announced Sam Pfanstiel has joined the company as the Director of Solution Architecture for Payments. Pfanstiels experience spans solution engineering and consulting as well as research and development positions...