7783 matches found
Design/Logic Flaw
Vulnerability in the Oracle Marketing product of Oracle E-Business Suite component: Marketing Administration. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing...
CVE-2019-3000
CVE-2019-3000 affects Oracle E-Business Suite Marketing Administration. Affected versions: 12.1.1–12.1.3 and 12.2.3–12.2.9. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Oracle Marketing; attacker interaction is required. Consequences include unau...
CVE-2019-2995
Vulnerability in the Oracle Marketing product of Oracle E-Business Suite component: Marketing Administration. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracl...
Unspecified Vulnerability in Oracle E-Business Suite Marketing Administration Component
Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management and other functions. marketing is one of the...
Exploit for OS Command Injection in Webmin
It is an exploit module for CVE-2019-15107, a vulnerability in Webmin. The target product/service is Webmin, a web-based interface for system administration. The vulnerability class/vector is a remote command execution RCE vulnerability. The probable entry point is the "passwordchange.cgi" script...
Oracle E-Business Suite CVE-2019-2994 Remote Security Vulnerability
Description Oracle E-Business Suite is prone to a remote security vulnerability in the Oracle Marketing. This vulnerability can be exploited over the 'HTTP' protocol. The 'Marketing Administration' component is affected. This vulnerability affect the following supported versions: 12.1.1 through...
Oracle E-Business Suite cpuoct2019 Multiple Security Vulnerabilities
Description Oracle E-Business Suite is prone to multiple security vulnerabilities in Oracle Marketing. These vulnerabilities can be exploited over the 'HTTP' protocol. The 'Marketing Administration' component is affected. These vulnerabilities affect the following supported versions: 12.1.1 throu...
Postenum - A Clean, Nice And Easy Tool For Basic/Advanced Privilege Escalation Techniques
Postenum is a clean, nice and easy tool for basic/advanced privilege escalation vectors/techniques. Postenum tool is intended to be executed locally on a Linux box. Be more than a normal user. be the ROOT. USE ./postenum.sh option ./postenum.sh -s ./postenum.sh -c Options : -a : All -s : Filesyst...
Fin7 Cybergang Retools With New Malicious Code
The Fin7 cybercrime group has ramped up its offensive capabilities by adding new malicious code to its malware arsenal. Researchers said that this is evidence that Fin7 is still a growing threat despite the arrest of several Fin7 members in 2018. The notorious group has adopted a new dropper samp...
SugarCRM 9.0.1 Broken Access Controls
---------------------------------------------------------------- SugarCRM = 9.0.1 Multiple Broken Access Control Vulnerabilities ---------------------------------------------------------------- - Software Link: https://www.sugarcrm.com - Affected Versions: Version 9.0.1 and prior versions, 8.0.3...
SugarCRM 9.0.1 Phar Deserialization
--------------------------------------------------------------- SugarCRM = 9.0.1 Multiple Phar Deserialization Vulnerabilities --------------------------------------------------------------- - Software Link: https://www.sugarcrm.com - Affected Versions: Version 9.0.1 and prior versions, 8.0.3 and...
CVE-2018-1074
The ovirt-engine API and administration web portal exposed Power Management credentials including cleartext passwords to Host Administrators. A Host Administrator could use this flaw to gain access to the power management systems of hosts they control...
SugarCRM Administration Module SQL Injection Vulnerability
SugarCRM is a set of open source customer relationship management software . A SQL injection vulnerability exists in the Administration module of SugarCRM. The vulnerability stems from a lack of input validation. An attacker can exploit this vulnerability to inject custom PHP code...
SugarCRM PHP Object Injection Vulnerability
SugarCRM is a set of open source customer relationship management software . A PHP object injection vulnerability exists in the Administration module of SugarCRM. The vulnerability stems from a lack of input validation. An attacker can exploit the vulnerability to inject custom PHP code...
SugarCRM Administration Module PHP Code Injection Vulnerability
SugarCRM is a set of open source customer relationship management software . A PHP code injection vulnerability exists in the Administration module of SugarCRM. The vulnerability stems from a lack of input validation. An attacker can exploit the vulnerability to execute arbitrary code...
SugarCRM PHP code injection vulnerability (CNVD-2019-34425)
SugarCRM is a set of open source customer relationship management software . A PHP code injection vulnerability exists in the Administration module of SugarCRM. The vulnerability stems from a lack of input validation. An attacker can exploit the vulnerability to execute arbitrary code...
CVE-2019-17298
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows SQL injection in the Administration module by a Developer user...
CVE-2019-17298
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows SQL injection in the Administration module by a Developer user...