Unspecified Vulnerability in Oracle E-Business Suite E-Business Intelligence

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management and other functions. E-Business Intelligence is one o...

Unspecified Vulnerability in Oracle Fusion Middleware Business Intelligence Enterprise Edition

Oracle Fusion Middleware Oracle Fusion Middleware is a suite of business innovation platforms for enterprise and cloud environments from Oracle. The platform provides middleware, software collections and other features. business Intelligence Enterprise Edition is one of the components for the...

Threat Hunting: Adoption, Expertise Grow, but Work Remains

Threat hunting, an often misunderstood but powerful security practice, is gaining traction, as more organizations reap benefits from it and get better at it. However, there is still a lot of room for adoption to increase and for practices to improve. Those were key findings from the SANS...

CVE-2018-3204

Vulnerability in the Oracle Business Intelligence Enterprise Edition component of Oracle Fusion Middleware subcomponent: Analytics Server. The supported version that is affected is 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2018-3204

Vulnerability in the Oracle Business Intelligence Enterprise Edition component of Oracle Fusion Middleware subcomponent: Analytics Server. The supported version that is affected is 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2018-3190

Vulnerability in the Oracle E-Business Intelligence component of Oracle E-Business Suite subcomponent: Overview Page/Report Rendering. Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP ...

Buffer overflow

Vulnerability in the Oracle Business Intelligence Enterprise Edition component of Oracle Fusion Middleware subcomponent: Analytics Server. The supported version that is affected is 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2018-3190

Vulnerability in the Oracle E-Business Intelligence component of Oracle E-Business Suite subcomponent: Overview Page/Report Rendering. Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP ...

CVE-2018-3204

CVE-2018-3204 affects Oracle Fusion Middleware’s Oracle BI Enterprise Edition Analytics Server (subcomponent) in the 12.2.1.3.0 release. An unauthenticated attacker with network access over HTTP can compromise data; user interaction is required. CVSS v3.0 base score is 8.2 (High). The vulnerabili...

CVE-2018-3204

Vulnerability in the Oracle Business Intelligence Enterprise Edition component of Oracle Fusion Middleware subcomponent: Analytics Server. The supported version that is affected is 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2018-3204

Vulnerability in the Oracle Business Intelligence Enterprise Edition component of Oracle Fusion Middleware subcomponent: Analytics Server. The supported version that is affected is 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2018-3190

CVE-2018-3190 concerns Oracle E-Business Intelligence within Oracle E-Business Suite. Affects versions 12.1.1, 12.1.2, and 12.1.3. The vulnerability allows unauthenticated, network-accessible access via HTTP, potentially enabling unauthorized reading and modification of Oracle E-Business Intellig...

CVE-2018-3190: Undefined Security Weakness

Vulnerability in the Oracle E-Business Intelligence component of Oracle E-Business Suite subcomponent: Overview Page/Report Rendering. Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP ...

CVE-2018-3204: Undefined Security Weakness

Vulnerability in the Oracle Business Intelligence Enterprise Edition component of Oracle Fusion Middleware subcomponent: Analytics Server. The supported version that is affected is 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

PT-2018-2237

Name of the Vulnerable Software and Affected Versions Oracle Business Intelligence Enterprise Edition version 12.2.1.3.0 Description The issue is related to inadequate access control in the Analytics Server subcomponent of Oracle Business Intelligence Enterprise Edition, part of Oracle Fusion...

PT-2018-2235

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Description The issue is related to inadequate access control in the Overview Page/Report Rendering subcomponent of Oracle E-Business Intelligence. This can be exploited by a remote attack...

Old dog, new tricks - Analysing new RTF-based campaign distributing Agent Tesla, Loki with PyREbox

This blog post was authored by Edmund Brumaghin and Holger Unterbrink with contributions from Emmanuel Tacheau. Executive Summary Cisco Talos has discovered a new malware campaign that drops the sophisticated information-stealing trojan called "Agent Tesla," and other malware such as the Loki...

Malwarebytes Labs Cybercrime Tactics and Techniques Report (CTNT) shows shift to business targets in Q3

Once again, it's that time of year: time for the quarterly Malwarebytes Labs Cybercrime Tactics and Techniques Report. Strap in your seat belts, folks, because the third quarter of 2018 was quite a wild ride. After a sleepy first two quarters, cybercriminals shook out the cobwebs and revved up...

List of Operating Systems for OSINT (Open-Source Intelligence)

PenTestIT RSS Feed All of you must be well versed with the term OSINT and it's meaning. Wikipedia defines OSINT as the data collected from publicly available sources to be used in an intelligence context. There are multiple sources and tools which help you find this information. A good example is...

Adding Cb ThreatHunter to the Cb Predictive Security Cloud (PSC)

This is another big day for Carbon Black. Earlier, we announced Cb ThreatHunter, our newest offering on the Cb Predictive Security Cloud PSC, which delivers powerful threat hunting and incident response IR capabilities to the platform. The announcement of Cb ThreatHunter, which will be the fourth...