CVE-2017-3569

CVE-2017-3569 affects Oracle Hospitality OPERA 5 Property Services (OPERA Business Events) components. Affected versions: 5.4.0.x, 5.4.1.x, 5.4.2.x, 5.4.3.x, 5.5.0.x, 5.5.1.x. Description: a low-privilege, network-accessible attacker (via HTTP) can compromise data in OPERA Property Services, gain...

CVE-2017-3568

Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications subcomponent: OPERA Printing and Login. Supported versions that are affected are 5.4.0.x, 5.4.1.x, 5.4.2.x, 5.4.3.x, 5.5.0.x and 5.5.1.x. Difficult to exploit vulnerability allows...

CVE-2017-3573

Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications subcomponent: OPERA Printing. Supported versions that are affected are 5.4.0.x, 5.4.1.x, 5.4.2.x, 5.4.3.x, 5.5.0.x and 5.5.1.x. Easily "exploitable" vulnerability allows unauthenticated...

CVE-2017-3569

Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications subcomponent: OPERA Business Events. Supported versions that are affected are 5.4.0.x, 5.4.1.x, 5.4.2.x, 5.4.3.x, 5.5.0.x and 5.5.1.x. Easily "exploitable" vulnerability allows low...

CVE-2017-3552

CVE-2017-3552 affects Oracle Hospitality OPERA 5 Property Services (subcomponent: OPERA Room Image/Picture Setup). Affected versions include 5.4.0.x, 5.4.1.x, 5.4.2.x, 5.4.3.x, 5.5.0.x and 5.5.1.x. The vulnerability allows a low-privileged, network-accessible attacker (HTTP) to gain unauthorized ...

CVE-2017-3560

CVE-2017-3560 affects Oracle Hospitality OPERA 5 Property Services (OXI Interface). The vulnerability allows a low-privileged, network-authenticated attacker (via HTTP) to read a subset of data from Oracle Hospitality OPERA 5 Property Services. Affected versions include 5.4.x and 5.5.x series (e....

CVE-2017-3574

CVE-2017-3574 concerns Oracle Hospitality OPERA 5 Property Services, specifically the OPERA License code configuration subcomponent. Affected versions are 5.4.0.x, 5.4.1.x, 5.4.2.x, 5.4.3.x, 5.5.0.x and 5.5.1.x. The vulnerability is exploitable by a low-privileged attacker with network access via...

CVE-2017-3568

CVE-2017-3568 affects Oracle Hospitality OPERA 5 Property Services (subcomponent: OPERA Printing and Login). Affects supported versions 5.4.0.x, 5.4.1.x, 5.4.2.x, 5.4.3.x, 5.5.0.x, 5.5.1.x. The issue is exploitable with user interaction and requires the attacker to have logon to the infrastructur...

Foxit Reader Annotations style Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within Annotation object's...

Oracle Hospitality OPERA 5 Property Services Remote Vulnerability

Oracle OPERA Property is a Cisco asset management system. A remote security vulnerability exists in Oracle Hospitality OPERA 5 Property Services, which can be exploited by a remote attacker to compromise the confidentiality, integrity of the system...

Oracle Hospitality OPERA 5 Property Services Remote Vulnerability (CNVD-2017-05849)

Oracle OPERA Property is a Cisco asset management system. A remote security vulnerability exists in the Oracle Hospitality OPERA 5 Property Services component, which can be exploited by remote attackers to compromise system confidentiality...

Oracle Hospitality OPERA 5 Property Services Local Vulnerability

Oracle OPERA Property is a Cisco asset management system. A local security vulnerability exists in the Oracle Hospitality OPERA 5 Property Services component that could be exploited by an attacker to compromise system confidentiality, integrity, and availability...

Oracle Hospitality OPERA 5 Property Services Remote Vulnerability (CNVD-2017-05848)

Oracle OPERA Property is a Cisco asset management system. A remote security vulnerability exists in the Oracle Hospitality OPERA 5 Property Services component, which can be exploited by remote attackers to compromise system confidentiality...

DEBIAN-CVE-2015-8271

The AMF3CDAddProp function in amf.c in RTMPDump 2.4 allows remote RTMP Media servers to execute arbitrary code...

Moderate: Red Hat Security Advisory: tomcat security update

An update for tomcat is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

Apple Webkit Named Property UXSS

Apple Webkit: UXSS by accessing a named property from an unloaded window CVE-2017-2367 The frame is not detached from an unloaded window. We can access to the new document's named properties via the following function. static bool...

Apple Webkit - Universal Cross-Site Scripting by Accessing a Named Property from an Unloaded Window

Exploit for multiple platform in category web applications document auto& htmlDocument = downcastdocument; auto atomicPropertyName = propertyName.publicName; if atomicPropertyName && htmlDocument.hasWindowNamedItematomicPropertyName JSValue namedItem; if...

libplist 'parse_string_node()' function local denial of service vulnerability

libplist is a small portable C library that handles Apple Property List files in binary or XML. A denial of service vulnerability exists in libimobiledevice libplist version 1.12 in the parsestringnode function in bplist.c, which can cause a denial of service memory allocation error by a local us...

Apple Webkit: UXSS by accessing a named property from an unloaded window (CVE-2017-2367)

The frame is not detached from an unloaded window. We can access to the new document's named properties via the following function. static bool jsDOMWindowPropertiesGetOwnPropertySlotNamedItemGetterJSDOMWindowProperties thisObject, Frame& frame, ExecState exec, PropertyName propertyName,...

PHP Real Estate Property Script SQL Injection

Exploit Title: Real Estate Property Pro Script - SQL Injection Google Dork: N/A Date: 26.03.2017 Vendor Homepage: http://eagletechnosys.com/ Software: http://www.eaglescripts.com/php-property-portal-script Demo: http://realpro.phpscriptsdemo.com/ Version: Pro Tested on: Win7 x64, Kali Linux x64...