CVE-2018-11452

A vulnerability has been identified in Firmware variant IEC 61850 for EN100 Ethernet module All versions V4.33, Firmware variant PROFINET IO for EN100 Ethernet module All versions, Firmware variant Modbus TCP for EN100 Ethernet module All versions, Firmware variant DNP3 TCP for EN100 Ethernet...

ThreatList: Popular Apps Get Enterprise Blacklisted

Mobile apps on BYOD handhelds tend to keep enterprise security pros worried. Between apps that are malicious, others that leak data and ones with pushy permissions – it’s hard to determine what’s safe and what might violate company rules. On Wednesday, Appthority released its annual list of the...

CVE-2018-2936

Vulnerability in the Oracle Communications Messaging Server component of Oracle Communications Applications subcomponent: Web Client. The supported version that is affected is 3.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2018-2936

Vulnerability in the Oracle Communications Messaging Server component of Oracle Communications Applications subcomponent: Web Client. The supported version that is affected is 3.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

Buffer overflow

Vulnerability in the Oracle Communications Messaging Server component of Oracle Communications Applications subcomponent: Web Client. The supported version that is affected is 3.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2018-2936

Vulnerability in the Oracle Communications Messaging Server component of Oracle Communications Applications subcomponent: Web Client. The supported version that is affected is 3.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2018-2936

Vulnerability in the Oracle Communications Messaging Server component of Oracle Communications Applications subcomponent: Web Client. The supported version that is affected is 3.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2018-2936

CVE-2018-2936 affects Oracle Communications Messaging Server (subcomponent: Web Client) in Oracle Communications Applications, with version 3.x affected. The root cause is a vulnerability in the Web Client subcomponent that allows unauthenticated attackers over HTTP to compromising data confident...

Unspecified Vulnerability in Oracle Communications Messaging Server

Oracle Communications Applications is a suite of Oracle applications for rapidly delivering and monetizing digital life communications.Communications Messaging Server is one of the messaging email server components. A security vulnerability exists in the Web Client subcomponent of the...

PT-2018-15921

Name of the Vulnerable Software and Affected Versions Oracle Communications Messaging Server version 3.x Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Communications Messaging Server. Successful attacks require human interaction from a...

CVE-2018-2936: Undefined Security Weakness

Vulnerability in the Oracle Communications Messaging Server component of Oracle Communications Applications subcomponent: Web Client. The supported version that is affected is 3.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

Unsanctioned Apps Invite Fox into Cybersecurity Hen House

Conventional wisdom has shown there’s a short line between a company’s highest point of risk – its employees and a compromise. Unsanctioned, or shadow applications, are apps that haven’t been cleared by a company’s information security team. These apps, on employee machines, have long been a...

CVE-2018-13850

The "Firebase Cloud Messaging FCM + Advance Admin Panel" component supporting Firebase Push Notification on iOS through 2017-10-26 allows SQL injection via the /advancepush/public/login username parameter...

Sql injection

The "Firebase Cloud Messaging FCM + Advance Admin Panel" component supporting Firebase Push Notification on iOS through 2017-10-26 allows SQL injection via the /advancepush/public/login username parameter...

CVE-2018-13850

The "Firebase Cloud Messaging FCM + Advance Admin Panel" component supporting Firebase Push Notification on iOS through 2017-10-26 allows SQL injection via the /advancepush/public/login username parameter...

CVE-2018-13850

The CVE-2018-13850 entry affects the Firebase Cloud Messaging (FCM) + Advance Admin Panel component used for Firebase Push Notification on iOS (up to 2017-10-26). The underlying issue is a SQL injection vulnerability triggered via the username parameter in /advance_push/public/login. This results...

CVE-2018-13850: Improper Neutralization of Special Elements used in an SQL Command

The "Firebase Cloud Messaging FCM + Advance Admin Panel" component supporting Firebase Push Notification on iOS through 2017-10-26 allows SQL injection via the /advancepush/public/login username parameter...

PT-2018-12223

Name of the Vulnerable Software and Affected Versions Firebase Cloud Messaging FCM + Advance Admin Panel versions prior to 2017-10-26 Description The issue allows SQL injection via the "/advance push/public/login" API endpoint, specifically through the username parameter. This could potentially...

Symantec Messaging Gateway 10.6.1 File Disclosure

File disclosure vulnerability in Symantec Messaging Gateway com.ve.kavachart.servlet.ChartStream sn parameter Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

Micro Focus Secure Messaging Gateway Detection

Detection of Micro Focus Secure Messaging Gateway. The script sends a connection request to the server and attempts to detect Micro Focus Secure Messaging Gateway. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...