CVE-2016-0482: Undefined Security Weakness

Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality via unknown vectors related to Test Manager for Web Apps, a different vulnerability than CVE-2016-0480,...

CVE-2016-0480: Undefined Security Weakness

Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality via unknown vectors related to Test Manager for Web Apps, a different vulnerability than CVE-2016-0481,...

CVE-2016-0488: Undefined Security Weakness

Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Load Testing for Web Apps, a different vulnerability than...

PT-2016-4245

Name of the Vulnerable Software and Affected Versions Oracle Application Testing Suite affected versions not specified Description The issue is related to a Directory Traversal and Information Disclosure vulnerability in the DownloadServlet reportName Parameter of the Oracle Application Testing...

PT-2016-4237

Name of the Vulnerable Software and Affected Versions Oracle Application Testing Suite affected versions not specified Description The issue is related to a Directory Traversal and Information Disclosure vulnerability in the DownloadServlet reportName Parameter of the Oracle Application Testing...

PT-2016-4243

Name of the Vulnerable Software and Affected Versions Oracle Application Testing Suite affected versions not specified Description The issue is related to a Directory Traversal and Information Disclosure vulnerability in the DownloadServlet file parameter. This could potentially allow unauthorize...

PT-2016-4251

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Grid Control versions 12.4.0.2 through 12.5.0.2 Description The issue affects the integrity and availability of the system, allowing remote attackers to exploit it via unknown vectors related to Load Testing for Web...

PT-2016-4238

Name of the Vulnerable Software and Affected Versions Oracle Application Testing Suite affected versions not specified Description The issue is related to a directory traversal vulnerability in the DownloadServlet, allowing for information disclosure. This could potentially lead to unauthorized...

PT-2016-4239

Name of the Vulnerable Software and Affected Versions Oracle Application Testing Suite affected versions not specified Description The issue is related to a Directory Traversal and Information Disclosure vulnerability in the DownloadServlet scriptName Parameter of the Oracle Application Testing...

CVE-2016-0492: Undefined Security Weakness

Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Load Testing for Web Apps, a different vulnerability than...

CVE-2016-0486: Undefined Security Weakness

Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality via unknown vectors related to Test Manager for Web Apps, a different vulnerability than CVE-2016-0480,...

CVE-2016-0477: Undefined Security Weakness

Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality via unknown vectors related to Load Testing for Web Apps, a different vulnerability than CVE-2016-0476 and...

Network Time Protocol ntpq Special Character Filtering Vulnerability

Summary The ntpq saveconfig command does not do adequate filtering of special characters from the supplied filename. Only back slash and forward slash are currently filtered out. There are other special characters that are allowed in the filename which can cause issues during globbing. In additio...

Multi protocol Test Suite

MTS Multi protocol Test Suite is a multi protocol testing tool specially designed for telecom IP-based architectures. With MTS Multi protocol Test Suite you get the powerful tool to: Test protocols with functional and regression tests Test load endurance and stress tests Simulate all network...

Penbox - A Tool That Has All The Tools, Penetration Tester'S Repo

PenBox A Penetration Testing Framework , The Hacker's Repo our hope is in the last version we will have evry script that a hacker needs : Requirements Python 2 sudoer Versions Version v1.1 : DrupalHacking : 1: Drupal Bing Exploiter 2: Get Drupal Websites 3: Drupal Mass Exploiter PrivatTools: 1 Ge...

General Motors GM Vulnerability Disclosure Program

General Motors’ new vulnerability disclosure program puts it alongside Tesla as the only major automakers with a mechanism for security researchers to report flaws. Unlike Tesla’s program, however, GM’s does not offer a monetary reward. GM launched its program last week via the HackerOne platform...

[SECURITY] Fedora 23 Update: jenkins-1.625.3-1.fc23

Jenkins is an award-winning, cross-platform, continuous integration and continuous delivery application that increases your productivity. Use Jenkins to build and test your software projects continuously making it easier for developers to integrate changes to the project, and making it easier for...

HackerOne: HackerOne is still prone to Internet Explorer UXSS

Hi, I have managed to leverage CVE 2015-0072, so that the attack will work with any framed resource protected by X-Frame-Options: DENY header. According to 103787, only https://hackerone.com/cdn-cgi/trace was unprotected and now its already fixed. In my PoC I used several X-Frame-Options protecte...

InterPhoto 2.3.0 Persians Database Disclosure

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : http://0day.today 0 1 + Support e-mail :...

NASA Cross Site Scripting

Exploit Title : NASA Subdomain XSS Vulnerability Exploit Author : 4TT4CK3R Date : 2015/12/27 Tested on : Kali linux , Windows 8.1 Vendor HomePage : https://ghrc.nsstc.nasa.gov/ Google Dork : No Category : Web Application : Vulnerable Location :https://ghrc.nsstc.nasa.gov/hydro/search.pl : Using...