CVE-2016-5786

CVE-2016-5786 affects OmniMetrix OmniView (Version 1.2). The vulnerability arises because the OmniView web application transmits credentials using HTTP (cleartext), enabling network-level interception and potential credential compromise. The issue is categorized under cleartext transmission of se...

CVE-2016-5786

An issue was discovered in OmniMetrix OmniView, Version 1.2. The OmniView web application transmits credentials with the HTTP protocol, which could be sniffed by an attacker that may result in the compromise of account credentials...

About the security content of Safari 10 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...

Oracle FLEXCUBE Private Banking Security Bypass Vulnerability (CNVD-2017-00790)

Oracle FLEXCUBE Private Banking is a product of Oracle Corporation USA. It plans, records, tracks and manages client wealth across a range of asset classes and tools to increase financial advisor productivity and improve client relationships. A remote security bypass vulnerability exists in Oracl...

Unspecified Vulnerability in Oracle FLEXCUBE Universal Banking (CNVD-2017-00939)

Oracle FLEXCUBE Universal Banking is the United States Oracle Oracle company's set of real-time, online coverage of retail, group, investment banking, a comprehensive solution. The program supports multi-currency, multi-language and multi-entity operations. A remote security vulnerability exists ...

Oracle Application Testing Suite Remote Vulnerability

The Application Testing Suite is a comprehensive, integrated testing solution that ensures the quality, scalability and availability of Web applications and Web services. A remote security vulnerability exists in Oracle Application Testing Suite. An attacker exploiting the vulnerability via the...

Oracle E-Business Suite Remote Vulnerability (CNVD-2017-00964)

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. Oracle Universal Work Queue is one of the universal work queue component. A remote vulnerability exists in the Oracle Universal Work Queue component o...

Unspecified Vulnerability in Oracle FLEXCUBE Universal Banking (CNVD-2017-00946)

Oracle FLEXCUBE Universal Banking is the United States Oracle Oracle company's set of real-time, online coverage of retail, group, investment banking, a comprehensive solution. The program supports multi-currency, multi-language and multi-entity operations. A remote security vulnerability exists ...

Oracle FLEXCUBE Private Banking Security Bypass Vulnerability (CNVD-2017-00792)

Oracle FLEXCUBE Private Banking is a product of Oracle Corporation USA. It plans, records, tracks and manages client wealth across a range of asset classes and tools to increase financial advisor productivity and improve client relationships. A remote security bypass vulnerability exists in Oracl...

Unspecified Vulnerability in Oracle FLEXCUBE Universal Banking (CNVD-2017-00950)

Oracle FLEXCUBE Universal Banking is the United States Oracle Oracle company's set of real-time, online coverage of retail, group, investment banking, a comprehensive solution. The program supports multi-currency, multi-language and multi-entity operations. A remote security vulnerability exists ...

Oracle VM VirtualBox Remote Vulnerability (CNVD-2017-00984)

Oracle VM VirtualBox is a cross-platform virtual machine software from Oracle. The software supports running multiple operating systems, creating VM groups, sharing folders, etc. on the same computer. A remote security vulnerability exists in Oracle VM VirtualBox versions prior to 5.0.32 and prio...

Oracle E-Business Suite Remote Vulnerability (CNVD-2017-00966)

Oracle E-Business Suite E-Business Suite is a fully integrated suite of global business management software from Oracle Corporation, of which Oracle One-to-One Fulfillment is a component that sends information, letters and statements to customers. A remote vulnerability exists in the Oracle...

Oracle FLEXCUBE Private Banking Security Bypass Vulnerability (CNVD-2017-00787)

Oracle FLEXCUBE Private Banking is a product of Oracle Corporation USA. It plans, records, tracks and manages client wealth across a range of asset classes and tools to increase financial advisor productivity and improve client relationships. A remote security bypass vulnerability exists in Oracl...

Oracle E-Business Suite Remote Vulnerability (CNVD-2017-00963)

Oracle E-Business Suite E-Business Suite is a fully integrated suite of global business management software from Oracle Corporation, of which Oracle Advanced Outbound Telephony is a component that improves the efficiency of customer interaction calls. A remote vulnerability exists in the Oracle...

UBUNTU-CVE-2016-8606

The REPL server --listen in GNU Guile 2.0.12 allows an attacker to execute arbitrary code via an HTTP inter-protocol attack...

Downloads Resources over HTTP

Overview Affected versions of appium-chromedriver insecurely download resources over HTTP. In scenarios where an attacker has a privileged network position, they can modify or read items send over HTTP at will. In this case, that includes the chromedriver binary, which may result in remote code...

Oracle Linux 7 : python (ELSA-2016-2586)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-2586 advisory. - Fix for CVE-2016-1000110 HTTPoxy attack Resolves: rhbz1359164 - Fix for CVE-2016-5636: possible integer overflow and heap corruption in zipimporter.getdata...

python security, bug fix, and enhancement update

2.7.5-48.0.1 - Add Oracle Linux distribution in platform.py orabug 20812544 2.7.5-48 - Fix for CVE-2016-1000110 HTTPoxy attack Resolves: rhbz1359164 2.7.5-47 - Fix for CVE-2016-5636: possible integer overflow and heap corruption in zipimporter.getdata Resolves: rhbz1356364 2.7.5-46 - Drop patch 2...

Hijacking NodeMCU Development Board-vulnerability warning-the black bar safety net

Long before the want to play the Board, The do nothing poor and can't afford it. Just the school issued a NodeMCU, although it is a cheap Board, play play is also good. This Board also let me play for several days, a start is to build a good car, in teacher to a Scratch on the play for a moment,...

MS15-0 3 4 IIS 7.0 HTTP.sys a remote code execution vulnerability(CVE-2 0 1 5-1 6 3 5) POC-vulnerability warning-the black bar safety net

Detection script: Python----beebeeto http://www.beebeeto.com/pdb/poc-2015-0081/ !/ usr/bin/env python coding=utf-8 """ Site: http://www.beebeeto.com/ Framework: https://github.com/n0tr00t/Beebeeto-framework """ import socket import random import urlparse from baseframe import BaseFrame class...