Frictionless Assessment Asset Inventory

Nessus collected information about the target host to create an inventory for Frictionless Assessment TRUSTED...

Backdoor.Win32.NerTe.772 Code Execution

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/464d7073f884b586b17950eef2908a6eB.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.NerTe.772 Vulnerability: Unauthenticated Remote Command Execution Description: The...

CVE-2021-20486

IBM Cloud Pak for Data 3.0 could allow an authenticated user to obtain sensitive information when installed with additional plugins. IBM X-Force ID: 197668...

CVE-2021-20486

IBM Cloud Pak for Data 3.0 could allow an authenticated user to obtain sensitive information when installed with additional plugins. IBM X-Force ID: 197668...

The vulnerability of the API sub-component of the Oracle Installed Base component of the Oracle E-Business Suite allows a perpetrator to gain unauthorized access to the device.

The vulnerability of the API sub-component of the Oracle Installed Base component in the Oracle E-Business Suite system for automating business operations is related to code errors. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to the device...

CVE-2021-2231

Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite component: APIs. The supported version that is affected is 12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Installed Base. Successful attacks of...

CVE-2021-2231

Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite component: APIs. The supported version that is affected is 12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Installed Base. Successful attacks of...

CVE-2021-2231

Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite component: APIs. The supported version that is affected is 12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Installed Base. Successful attacks of...

CVE-2021-2231

CVE-2021-2231 affects Oracle E‑Business Suite, Oracle Installed Base (API component) version 12.1.3. The vulnerability is exploitable remotely over HTTP by a low‑privileged attacker, potentially leading to unauthorized data creation/deletion/modification or full access to Oracle Installed Base da...

Unspecified Vulnerability in Oracle Installed Base

Oracle Installed Base is a project lifecycle management application from Oracle Corporation Oracle. It provides enterprise-wide internal lifecycle project management and tracking capabilities. A security vulnerability exists in the APIs component of Oracle Installed Base version 12.1.3. An attack...

Oracle Installed Base 安全漏洞

Oracle Installed Base is a project lifecycle management application from Oracle Corporation Oracle. It provides enterprise-wide internal lifecycle project management and tracking capabilities. A security vulnerability exists in the APIs component of Oracle Installed Base version 12.1.3. An attack...

Java Detection and Identification (Windows)

Binary data javajreinstalledwin.nbin...

CVE-2021-25356

An improper caller check vulnerability in Managed Provisioning prior to SMR APR-2021 Release 1 allows unprivileged application to install arbitrary application, grant device admin permission and then delete several installed application...

Gigaset Android Update Server Hacked to Install Malware on Users' Devices

Gigaset has revealed a malware infection discovered in its Android devices was the result of a compromise of a server belonging to an external update service provider. Impacting older smartphone models — GS100, GS160, GS170, GS180, GS270 plus, and GS370 plus series — the malware took the form of...

Citrix Virtual Apps and Desktops Installed

Binary data citrixvirtualappsanddesktopsinstalled.nbin...

How to customize message for storefront where there is no receiver installed in client side

By default ,is there is no receiver or citrix workspace app installed at client side, after user opens the storefront URL,it will pop up below message .And sometimes administrator would like to customize the message to more specific one...

Pre-Installed Malware Dropper Found On German Gigaset Android Phones

In what appears to be a fresh twist in Android malware, users of Gigaset mobile devices are encountering unwanted apps that are being downloaded and installed through a pre-installed system update app. "The culprit installing these malware apps is the Update app, package name com.redstone.ota.ui,...

OpenJDK Java Detection (Linux / Unix)

Binary data openjdknixinstalled.nbin...

Google limits which apps can access the list of installed apps on your device

Apps on Android have been able to infer the presence of specific apps, or even collect the full list of installed apps on the device. What's more, an app can also set to be notified when a new app is installed. Apart from all the usual concerns about misuse of such a data grab, the information ca...

The vulnerability of the is_blog_installed function (wp-includes/functions.php) in the WordPress content management system involves a lack of input validation mechanisms. This allows attackers to access sensitive data, compromise its integrity, and cause service interruptions.

The vulnerability of the isbloginstalled function in the WordPress content management system’s functions.php file is related to improper checking of whether the WordPress system has been installed. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromi...