CVE-2017-10381

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: PIA Core Technology. Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi...

Intel Active Management Technology WPA2 Key Reinstallation Vulnerabilities - KRACK (INTEL-SA-00101)

WPA2 as used in Intel Active Management Technology is prone to multiple security weaknesses aka Key Reinstallation Attacks KRACK SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Linksys Device Detection (HTTP)

HTTP based detection of Linksys devices. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.812041";...

UBUNTU-CVE-2017-10350

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: JAX-WS. Supported versions that are affected are Java SE: 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protoco...

Post Cyberattack: The Next Steps Your Business Needs to Take

By Ryan De Souza Technology has transformed the face of modern business, and thanks This is a post from HackRead.com Read the original post: Post Cyberattack: The Next Steps Your Business Needs to Take...

The Shift from Securing our Networks to Enabling the Digital Transformation of our Enterprises

It’s not yet Thursday, but attendees at Qualys Security Conference 2017 were treated to a major “throwback” as CEO and Chairman Philippe Courtot journeyed back centuries during QSC17’s opening keynote to illustrate the seismic changes of today’s digital revolution. Courtot cited some of history’s...

When an “Outstanding” rating from CNET isn’t enough

The editors at respected tech site CNET/Download.com recently awarded Malwarebytes for Windows with an “outstanding” rating of 4.5 stars out of five. In the review, editor Tom McNamara recommended Malwarebytes because the scanning engine is of “high quality,” it works well with Windows 10, and do...

Unspecified Vulnerability in Oracle Applications Technology Stack

Oracle E-Business Suite E-Business Suite is a set of Oracle's fully integrated global business management software, of which the Oracle Applications Technology Stack is a component. An unspecified vulnerability exists in the Oracle Forms subcomponent of the Oracle Applications Technology Stack...

Unspecified Vulnerability in Oracle Applications Technology Stack (CNVD-2017-31498)

Oracle E-Business Suite E-Business Suite is a set of Oracle's fully integrated global business management software, of which the Oracle Applications Technology Stack is a component. An unspecified vulnerability exists in the Oracle Forms subcomponent of the Oracle Applications Technology Stack...

CodeIgniter: If the developer forgets to remove the built in controller welcome.php it helps the attacker to identify that the site is built with Codeigniter

The attacker can check the website's backend technology simply by typing sitename/index.php/welcome/index it will display the codeigniter welcome page if the developer dosen't removed the built in controller and view welcome.php and welcomemessage.php i attaching a screenshot below as a proof of...

Today’s Predictions for Tomorrow’s Internet

This weekend I realized just how much the future of securing the Internet of Things IoT will become a critical component to maintain our lifestyle. CyberPatriot is the National Youth Cyber Education Program created by the Air Force Association to encourage careers in STEM. Each year the program...

Factorization Flaw in TPM Chips Makes Attacks on RSA Private Keys Feasible

A flawed Infineon Technology chipset used on PC motherboards to securely store passwords, certificates and encryption keys risks undermining the security of government and corporate computers protected by RSA encryption keys. In a nutshell, the bug makes it possible for an attacker to calculate a...

SQL Injection Vulnerability in Zhangjiakou Extraordinary Technology Website Building System

Zhangjiakou Extraordinary Technology Co., Ltd Extraordinary Technology for short, is an Internet service provider in the field of enterprise informationization construction and application services. Zhangjiakou Extraordinary Technology website building system has a SQL injection vulnerability,...

Oracle OIT ContentAccess libvs_word+63AC Code Execution Vulnerability(CVE-2016-3592)

Description Partially controlled memory write vulnerability exists in Mac Word file format parsing code of Oracle Outside In Technology Content Access SDK. An unchecked pointer arithmetic leads to an out of bounds memory overwrite resulting in code execution. Tested Versions Oracle Outside In...

Oracle OIT ImageExport libvs_bmp BMP BI_RLE8 Width Code Execution Vulnerability(CVE-2016-3596)

Description When parsing a specially crafted BMP file, an erroneous memory copy operation can cause a heap buffer overflow leading to arbitrary code execution. Tested Versions Oracle Outside In Technology Content Access SDK 8.5.1. Product URLs...

Oracle OIT libim_gem2 Gem_Text Code Execution Vulnerability(CVE-2016-3595)

Description An integer overflow vulnerability exists in file parsing code of Oracle Outside In Technology libimgem2 library. A specially crafted Gem file can trigger an integer overflow leading to multiple heap based buffer overflows which can be abused to achieve remote code execution. Tested...

Oracle OIT ContentAccess libvs_word Denial of Service Vulnerability(CVE-2016-3590)

Description A partially controlled memory write vulnerability exists in Mac Word file format of Oracle Outside In Technology Content Access SDK. An unchecked pointer arithmetic creates a bitwise OR on out of bounds memory address, resulting in memory corruption and likely program termination...

Oracle OIT libim_psi2 psiparse Code Execution Vulnerability(CVE-2016-3594)

Description A memory corruption vulnerability exists in file parsing code of Oracle Outside In Technology libimpsi2 library. Specifically, a integer overflow leading to an undersized memory allocation and a memory copy operation leading to buffer overflow in psiparse function can write 8 controll...

My Blogging

Blog regulars will notice that I haven't been posting as much lately as I have in the past. There are two reasons. One, it feels harder to find things to write about. So often it's the same stories over and over. I don't like repeating myself. Two, I am busy writing a book. The title is still:...

Technology to Out Sex Workers

Two related stories: PornHub is using machine learning algorithms to identify actors in different videos, so as to better index them. People are worried that it can really identify them, by linking their stage names to their real names. Facebook somehow managed to link a sex worker's clients unde...