SAP CRM WebClient UI Cross-Site Scripting Vulnerability (CNVD-2019-04862)

SAP CRM Customer Relationship Management is a set of German SAP SAP company's customer relationship management solutions. The program includes sales management, marketing management, customer service systems and other modules. SAPSCORE, S4FND and WEBCUIF are among the Web client interface...

3 Infosec Reflections to Kick off 2019 & Finally Shift the Balance of Power Back to Defenders

Wow. It's already 2019. Talk about a year in 2018 that flew by! I won’t spend this entire blog talking about 2018 but, needless to say, a lot happened in 2018 and it doesn’t look to slow down anytime soon. This time of year, I like to stop and reflect on the previous year and think about moving...

Unspecified Vulnerability in Oracle Hyperion Data Relationship Management Component

Oracle Hyperion is a set of Oracle's financial modeling applications, which provides financial closure, report production, etc. Hyperion Data Relationship Management is one of the data relationship management components. An unspecified vulnerability exists in the Oracle Hyperion Data Relationship...

CVE-2018-3208

Vulnerability in the Hyperion Data Relationship Management component of Oracle Hyperion subcomponent: Access and Security. The supported version that is affected is 11.1.2.4.345. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Hyperion Da...

CVE-2018-3208

Vulnerability in the Hyperion Data Relationship Management component of Oracle Hyperion subcomponent: Access and Security. The supported version that is affected is 11.1.2.4.345. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Hyperion Da...

Design/Logic Flaw

Vulnerability in the Hyperion Data Relationship Management component of Oracle Hyperion subcomponent: Access and Security. The supported version that is affected is 11.1.2.4.345. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Hyperion Da...

CVE-2018-3208

Vulnerability in the Hyperion Data Relationship Management component of Oracle Hyperion subcomponent: Access and Security. The supported version that is affected is 11.1.2.4.345. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Hyperion Da...

CVE-2018-3208

Summary: CVE-2018-3208 affects the Oracle Hyperion Data Relationship Management component, specifically the Access and Security subcomponent, in version 11.1.2.4.345. The vulnerability is exploitable by a low-privilege attacker who has network access via HTTP, potentially leading to unauthorized ...

CVE-2018-3208

Vulnerability in the Hyperion Data Relationship Management component of Oracle Hyperion subcomponent: Access and Security. The supported version that is affected is 11.1.2.4.345. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Hyperion Da...

Buffer overflow

Info-ZIP UnZip 6.0 has a buffer overflow in list.c, when a ZIP archive has a crafted relationship between the compressed-size value and the uncompressed-size value, because a buffer size is 10 and is supposed to be 12...

30 Million Facebook Accounts Were Hacked: Check If You're One of Them

Late last month Facebook announced its worst-ever security breach that allowed an unknown group of hackers to steal secret access tokens for millions of accounts by taking advantage of a flaw in the 'View As' feature. At the time of the initial disclosure, Facebook estimated that the number of...

Sound, Fury, And Nothing One Year After Equifax

One year ago today, Equifax suffered what remains one of the largest and most impactful data breaches in U.S. history. Last September, it was revealed that the personal information of 145 million Americans, almost 700,000 UK citizens, and 19,000 Canadians was stolen by cybercriminals. This...

The Vulnerability Disclosure Process: Still Broken

Despite huge progress in the vulnerability disclosure process, things remain broken when it comes to vendor-researcher relationships. Case in point: Last year when Leigh-Anne Galloway a cybersecurity resilience lead at Positive Technologies found a gaping hole in the Myspace website, she reported...

SAP SRM MDM Catalog Authentication Bypass Vulnerability

SAP SRM is a supplier relationship management solution from SAP, of which MDM Catalog is a component with catalog content management and purchasing catalog functionality. An authentication bypass vulnerability in SAP SRM MDM Catalog versions 3.73, 7.31, and 7.32, which originates from a failure o...

Fortnite APK Download for Android Won't Be Available on Google Play Store

There's both good news and bad news for Fortnite game lovers. Fortnite, one of the most popular games in the world right now, is coming to Android devices very soon, but players would not be able to downloadFortnite APK from the Google Play Store. Instead, Epic Games software development company...

Samsung Syncthru Web Service Multiple Vulnerabilities (Jul 2018)

Samsung Syncthru Web Service is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Oracle Hyperion Hyperion Data Relationship Management Component Access Control Error Vulnerability

Oracle Hyperion is a set of Oracle's financial modeling applications, which provides financial closure, report production, etc. Hyperion Data Relationship Management is one of the data relationship management components. An access control error vulnerability exists in the Oracle Hyperion Data...

CVE-2018-3052

Vulnerability in the MICROS Relate CRM Software component of Oracle Retail Applications subcomponent: Internal Operations. Supported versions that are affected are 10.8.x and 11.4.x. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise MICROS...

CVE-2018-2915

Vulnerability in the Hyperion Data Relationship Management component of Oracle Hyperion subcomponent: Access and security. The supported version that is affected is 11.1.2.4.330. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Hyperion...

Design/Logic Flaw

Vulnerability in the Hyperion Data Relationship Management component of Oracle Hyperion subcomponent: Access and security. The supported version that is affected is 11.1.2.4.330. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Hyperion...