CVE-2012-3186

CVE-2012-3186 concerns an unspecified vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (versions 6.x, 7.x, up to 11.1.1.6.0). The issue is described as allowing remote authenticated users to affect confidentiality and integrity via unknown vectors related to the A...

Oracle WebCenter Sites (AKA FatWire) XSS / SQL Injection / CSRF

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple vulnerabilities in Oracle WebCenter Sites product: Oracle WebCenter Sites former FatWire Content Server vulnerable version: 6.1, 6.2, 6.3.x, 7, 7.0.1, 7.0.2,...

CVE-2012-3184

Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 6.1, 6.2, 6.3.x, 7, 7.0.1, 7.0.2, 7.0.3, 7.5, 7.6.1, 7.6.2, and 11.1.1.6.0 allows remote attackers to affect integrity via unknown vectors related to Advanced UI...

CVE-2012-3184

CVE-2012-3184 affects Oracle WebCenter Sites (formerly FatWire Content Server) across multiple versions (6.1, 6.2, 6.3.x, 7, 7.0.1, 7.0.2, 7.0.3, 7.5, 7.6.1, 7.6.2, 11.1.1.6.0). The SEC Consult advisory and related NS/EX references describe multiple issues in the UI-related subcomponents, includi...

CVE-2012-3183

Affected product: Oracle WebCenter Sites (Oracle Fusion Middleware) versions 6.1, 6.2, 6.3.x, 7, 7.0.1, 7.0.2, 7.0.3, 7.5, 7.6.1, 7.6.2, and 11.1.1.6.0. Vulnerability in the UI Subcomponent allows remote authenticated users to affect confidentiality and integrity via unknown vectors; for CVE-2012...

CVE-2012-3183

Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 6.1, 6.2, 6.3.x, 7, 7.0.1, 7.0.2, 7.0.3, 7.5, 7.6.1, 7.6.2, and 11.1.1.6.0 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Advanced UI, a differen...

Oracle WebCenter Sites (FatWire Content Server) - Multiple Vulnerabilities

Oracle WebCenter Sites FatWire Content Server - Multiple Vulnerabilities SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple vulnerabilities in Oracle WebCenter Sites product: Oracle WebCenter Sites former FatWire...

Oracle WebCenter Sites (FatWire Content Server) - Multiple Vulnerabilities

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple vulnerabilities in Oracle WebCenter Sites product: Oracle WebCenter Sites former FatWire Content Server vulnerable version: 6.1, 6.2, 6.3.x, 7, 7.0.1, 7.0.2,...

Anonymous identified cyber stalker who drove Amanda Todd to suicide

Hacker group Anonymous may have tracked down the sex-obsessed cyberbully who drove a 15-year-old girl to kill herself last week. Today Anonymous posted a video on YouTube naming a 32-year-old man from British Columbia, as the person responsible for the October 10th suicide of 15-year-old Amanda...

Steam Browser Protocol Vulnerability can allow hackers to hijack PC

Italian security Researchers Luigi Auriemma and Donato Ferrante from 'ReVuln' reported the flaw in Steam Browser Protocol. Stream the popular online distribution platform with 54 million users. The flaw allow the attacker to write arbitrary text to file and direct victims to external payloads and...

Oracle WebCenter Sites (FatWire Content Server) Multiple Vulnerabilities

Exploit for php platform in category web applications ======================================================================= title: Multiple vulnerabilities in Oracle WebCenter Sites product: Oracle WebCenter Sites former FatWire Content Server vulnerable version: 6.1, 6.2, 6.3.x, 7, 7.0.1, 7.0....

Virus conducting DDoS attack from infected systems

Russian anti-virus company Doctor Web is warning users about the malicious program which is helping attackers carry out mass spam mailings and allow attacker to use victim's PC as slave of his DDOS Army. According to researchers from the company they have discovered a Trojan "Trojan.Proxy.23012"...

Megapolis.Portal Manager Cross Site Scripting

Hello list! I want to warn you about multiple Cross-Site Scripting vulnerabilities in Megapolis.Portal Manager. It's commercial CMS from Softline-IT earlier Softline, which in particularly widespread among Ukrainian government sites including ministry, parliament, two special services and many...

Hunting Badware

Security often is discussed in super-serious terms, using metaphors and analogies from the military or medical communities to underscore the gravity of the situation. But the truth is, some of this stuff is pretty funny, and the folks at StopBadware.org know this. To explain the way that attacker...

CVE-2012-5234

Open redirect vulnerability in index.php in ocPortal before 7.1.6 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect parameter...

Anonymous Brings Government Sites Offline in Philippines to Petition Cybercrime Law

The National Telecommunications Commission NTC of the Philipines has asked for assistance from law enforcement after a handful of government sites in the country, including the NTC’s site, were brought offline this morning in a hack allegedly carried out by PrivateX, an offshoot of the hacktivist...

Janito Sql injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Janito sql injection Vulnerability Date: 26/09/2012 Author: The Black Devils Home: 1337day Exploit DataBase 1337day.com Software Link: http://www.t-sites.de/ Category : webapps Dork : janito inurl:page.php?PageId= Type : php...

StartMarketplace File Upload Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

CRIME Attack Uses Compression Ratio of TLS Requests as Side Channel to Hijack Secure Sessions

The new attack on TLS developed by researchers Juliano Rizzo and Thai Duong takes advantage of an information leak in the compression ratio of TLS requests as a side channel to enable them to decrypt the requests made by the client to the server. This, in turn, allows them to grab the user’s logi...

PersianSoft SQL Injection Vulnerability

Exploit for php platform in category web applications + Author: TUNISIAN CYBER + Home: 1337day.com Inj3ct0r Exploit DataBase + Exploit Title: PersianSoft SQL Injection Vulnerability + Date: 07-09-2012 + Category: WebApp + Google Dork: intext:Powered & Designed By PersianSoft.org newsview.php?id= ...