CVE-2013-3816

Oracle Policy Automation (Oracle Web Determinations) in Oracle Industry Applications is affected by CVE-2013-3816. Affected versions are Oracle Industry Applications 10.2.x prior to 10.2.0.124, 10.3.x prior to 10.3.1.61, and 10.4.x prior to 10.4.3. The vulnerability is described as unspecified an...

The Rapidly Changing World of Mobile Application Payment Systems Compliance

In this series of Compliance Talk, Dirk and Ken are back at their favorite coffee shop, this time joined by Dan Fritsche. Dan is Coalfires Director of Solution Validated Services and is considered a thought leader on mobile payments, P2PE and other emerging trends in the payments industry...

Operation b54 Knocks 1,000+ Citadel Botnets Offline

UPDATE – Calling it the company’s “most aggressive” botnet operation operation to date, Microsoft has joined with the FBI for a massive disruption of the Citadel botnet. More than 1,400 individual botnets associated with the Citadel malware affecting more than five million people in total were...

Chinese hackers access major U.S. weapon system Designs

According to report published by for the Defense Department and government and defense industry officials, Chinese hackers have gained access to the designs of many of the nation's most sensitive advanced weapons systems. The compromised U.S. designs included those for combat aircraft and ships, ...

Taobao-Taobao guest black industry uncovered-vulnerability warning-the black bar safety net

See someone tan 9 piece free mp3, just try to search a bit, point into the cheapest, find out how selected no baby.。。。。 Try to select a bit。。。。 Found a lot of transparent pictures, click on after the jump to the days of the cat. In this case click Back, find back to PayPal. it. Multi-Station...

Downloadify Allowed Songs to be Downloaded for Free

One of the largest online music streaming services was briefly singing a different tune after learning a new Google Chrome plug-in allowed users to download copies of songs for free. Google this week pulled from its Chrome Web Store the browser extension known as Downloadify, which exploited a...

Finger-Pointing on Cyberespionage Does Little Good Without Plan

In its annual report to Congress detailing the capabilities of and threats from China, Pentagon officials spend dozens of pages explaining the People’s Liberation Army’s strengths and weaknesses in each area, from nuclear weapons to artillery to information warfare. It reads the way you would...

Vulnerabilities Drop Per Site, Most Sites Remain Vulnerable

For at least the third year in a row, the number of serious vulnerabilities per website has fallen. That sounds like good news until you look at the numbers and realize that the average website carried an astonishing 56 holes in 2012, according to statistics compiled by WhiteHat Security...

Design/Logic Flaw

The ISHMED-PATREDTRANSACTRFCCALL function in the IS-H Industry-Specific Component Hospital subsystem in SAP Healthcare Industry Solution, and the SAP ERP central component aka ECC 6, allows remote authenticated users to bypass intended transaction restrictions via unspecified vectors...

CMS Cameron McKenna 2013 Cross Site Scripting Vunlerability

CMS Cameron McKenna 2013 suffers from a cross site scripting vulnerability. The vendor has been notified of this issue. Note that this advisory has site-specific information. Product: CMS Cameron McKenna Web:http://www.cms-cmck.com Versions: CMS 2013 Date: 25/04/2013 Vendor Notified: 24/04 - 25/0...

Google Joins FIDO Alliance Effort to Move Beyond Passwords

Google, which gradually has been moving its users away from using passwords as their main form of authentication for Web services, has joined a young organization whose goal is to phase out passwords and replace them with various forms of strong authentication. The FIDO Alliance, formed last year...

Google Transparency Report Requests Up to Remove Information

Google has released a new Transparency Report, this time pointing out sharp increases in the number of government requests from Brazil and Russia it received to remove content from Google-branded websites. This is the seventh time the Mountain View-based company has released the report that...

[ESNC-2013-001] Privilege Escalation in SAP Healthcare Industry Solution

ESNC-2013-001 Privilege Escalation in SAP Healthcare Industry Solution Please refer to www.esnc.de for the original security advisory, updates and additional information. ------------------------------------------------------------------------ 1. Business Impact...

Comment Crew's Operation Beebus Stealing Drone Tech

FireEye experts have been tracking the Operation Beebus campaign for a few months now, and their latest research suggests that whomever is responsible for the attacks is ultimately interested in stealing drone technology-related secrets. Operation Beebus is an APT-style attack campaign targeting...

CVE-2013-2397

Unspecified vulnerability in the Oracle Retail Central Office component in Oracle Industry Applications 13.1, 13.2, 13.3, and 13.4 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Customer Operations Add, Search...

CVE-2013-2397

Technical details about CVE-2013-2397 are not provided in the connected documents; no specifics on affected product, impact, or remediation are given here. Monitor for updates from official advisories.

CVE-2013-1525

Unspecified vulnerability in the Oracle Retail Integration Bus component in Oracle Industry Applications 13.0, 13.1, and 13.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Retail Integration Bus Manager...

CVE-2013-1520

Unspecified vulnerability in the Oracle Clinical Remote Data Capture Option component in Oracle Industry Applications 4.6.0 and 4.6.6 allows remote authenticated users to affect confidentiality and integrity via vectors related to HTML Surround...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Retail Integration Bus component in Oracle Industry Applications 13.0, 13.1, and 13.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Retail Integration Bus Manager...

CVE-2013-1520

Unspecified vulnerability in the Oracle Clinical Remote Data Capture Option component in Oracle Industry Applications 4.6.0 and 4.6.6 allows remote authenticated users to affect confidentiality and integrity via vectors related to HTML Surround...