PT-2020-2308

Name of the Vulnerable Software and Affected Versions Oracle Depot Repair versions 12.1.1 through 12.1.3 Description The issue is related to insufficient access control in the Estimate and Actual Charges component of Oracle Depot Repair, allowing a remote attacker to gain unauthorized access to...

customexchangeinc.com XSS vulnerability

Vulnerable URL: http://www.customexchangeinc.com/estimate.php?estimateid=1"...

Invoice & Estimate Invoice2go - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Invoice & Estimate Invoice2go published at the 'play' market has multiple vulnerabilities...

Invoice & Estimate on the Go - Customized SSL, Insecure KeyStore, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Invoice & Estimate on the Go published at the 'play' market has multiple vulnerabilities...

WordPress Plugin WP-Client 3.8.7 - Persistent Cross-Site Scripting

WordPress Plugin WP-Client 3.8.7 - Persistent Cross-Site Scripting Application: WP-Client Version: 3.8.7 Author: Pier-Luc Maltais from COSIG Twitter: @COSIG 1 Introduction 2 Report Timeline 3 Technical details 4 POC =============== 1 Introduction =============== One plugin configures multiple are...

Multiple libtiff flaws (CVE-2006-3460 CVE-2006-3461 CVE-2006-3462 CVE-2006-3463 CVE-2006-3464 CVE-2006-3465)

The EstimateStripByteCounts function in TIFF library libtiff before 3.8.2 uses a 16-bit unsigned short when iterating over an unsigned 32-bit value, which allows context-dependent attackers to cause a denial of service via a large tdnstrips value, which triggers an infinite loop...