UBUNTU-CVE-2016-8318

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Security: Encryption. Supported versions that are affected are 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to...

CVE-2017-3317

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Logging. Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQ...

CVE-2016-8318

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Security: Encryption. Supported versions that are affected are 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to...

PT-2017-1146

Name of the Vulnerable Software and Affected Versions Java SE versions 6u131, 7u121, and 8u112 Java SE Embedded version 8u111 Description The issue is related to a lack of protection for service data in the Java Platform's Networking component. This allows a remote attacker to gain unauthorized...

PT-2016-7896

Name of the Vulnerable Software and Affected Versions MySQL Server versions 5.5.53 and earlier MySQL Server versions 5.6.34 and earlier MySQL Server versions 5.7.16 and earlier Description The issue allows a low-privileged attacker with logon to the infrastructure where MySQL Server executes to...

Sauter NovaWeb Web HMI Authentication Bypass Vulnerability

Sauter is a leading provider in the building, room automation, energy management and facility management sectors. An authentication bypass vulnerability exists in Sauter NovaWeb Web HMI, which can be exploited by an attacker to bypass security restrictions and perform unauthorized operations...

Al-Khaser v0.65 - Public Malware Techniques Used In The Wild

al-khaser is a PoC malware with good intentions that aimes to stress your anti-malware system. It performs a bunch of nowadays malwares tricks and the goal is to see if you stay under the radar. Possible uses You are making an anti-debug plugin and you want to check its effectiveness. You want to...

China Passes Cybersecurity Law to Tighten its Control over the Internet

China has long been known for its strict censorship policies, which has already made it difficult for foreign companies to do business in the world's most populous country of more than 1.35 Billion people. Now, the Chinese government has approved a broad new controversial cybersecurity regulation...

kernel: HID: core: prevent out-of-bound readings

The hidinputfield function in 'drivers/hid/hid-core.c' in the Linux kernel before 4.6 allows physically proximate attackers to obtain sensitive information from kernel memory or cause a denial of service out-of-bounds read by connecting a device...

CVE-2016-8295

Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft Products 9.2 allows remote authenticated users to affect confidentiality via unknown vectors...

CVE-2016-8295

Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft Products 9.2 allows remote authenticated users to affect confidentiality via unknown vectors...

CVE-2016-8292

Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft Products 9.2 allows remote authenticated users to affect confidentiality and integrity via vectors related to Talent Acquisition Manager...

CVE-2016-8285

Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft Products 9.2 allows remote administrators to affect confidentiality and integrity via vectors related to Candidate Gateway...

Oracle PeopleSoft Enterprise HCM Component Remote Data Read Vulnerability

Oracle PeopleSoft is a suite of enterprise human capital management solutions from Oracle that provides human capital management, financial management, supplier relationship management, etc. PeopleSoft Enterprise HCM is one of the human capital management HCM components. A remote data read...

Unspecified Vulnerability in Oracle PeopleSoft Enterprise HCM

Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle that provides human capital management, financial management, supplier relationship management, etc. PeopleSoft Enterprise HCM is one of the Human Capital Management HCM components. An unspecified...

HMI/SCADA software webaccess 7.2/8.0/8.1 has 4 dll hijack vulnerabilities

WebAccess can build an information management platform for users and synchronize the efficiency of vertical market management development. There are 4 dll hijack vulnerabilities in the HMI/SCADA software webaccess, when bwopctool.dll, bwabout.dll, BwPAlarm.dll, and Webvsid.dll are loaded...

Beware — Someone is dropping Malware-infected USB Sticks into People's Letterbox

Hey! Wait! Wait! Wait! Don't plug in that USB stick into your laptop. It could infect your computer with malware and viruses. Australia's Victoria Police Force has issued a warning regarding unmarked USB flash drives containing harmful malware being dropped inside random people's letterboxes in t...

Uber: Users can falsely declare their own Uber account info on the monthly billing application

When applying for monthly billing, statistics and data regarding account usage that was fetched and subsequently submitted could be tampered with. This data would be reviewed by a human making a credit decision, potentially influencing their decision inappropriately in favor of the applicant. Whe...

Adding CIA to DNA

Threatpost Op-Ed is a regular feature where experts contribute essays and commentary on what’s happening in security and privacy. Today’s contributor is Alexandrea Mellen. White and black hat hackers specialize in altering, accessing and sometimes destroying information. Genetic engineers take th...

Emergency iOS Update Patches Zero Days Used by Government Spyware

Apple rushed an emergency iOS update today after the discovery of three zero-day vulnerabilities used by governments to spy on the activities of human rights activists and journalists. The zero days, called Trident, allow an attacker to take complete control of an iPhone or iPad with just one...