CVE-2024-21014

CVE-2024-21014 concerns Oracle Hospitality Simphony, specifically the Simphony Enterprise Server. Technical details in connected docs show: affected versions are 19.1.0 through 19.5.4; root cause is insufficient input validation; attacker needs network access via HTTP and no authentication. Impac...

CVE-2024-21010

Oracle Hospitality Simphony (Simphony Enterprise Server) is affected across versions 19.1.0–19.5.4 due to insufficient input validation. The flaw allows a remote attacker with network access over HTTP and low privileges to execute arbitrary code and potentially take over the Simphony deployment; ...

CVE-2024-20997

CVE-2024-20997 affects Oracle Hospitality Simphony (Simphony Enterprise Server) with vulnerable versions 19.1.0–19.5.4. Root cause: insufficient input validation in Simphony Enterprise Server. Impact: takeover of Oracle Hospitality Simphony, with high confidentiality, integrity, and availability ...

CVE-2024-20989

Oracle Hospitality Simphony (Simphony POS) is affected in versions 19.1.0–19.5.4 due to insufficient input validation in the POS component. The vulnerability allows a remote, unauthenticated attacker with network access (HTTP) to modify, add, or delete data and potentially gain unauthorized acces...

WordPress Restaurant Menu – Food Ordering System – Table Reservation plugin <= 2.4.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by wpdabh Patchstack Alliance in WordPress Plugin Restaurant Menu – Food Ordering System – Table Reservation versions = 2.4.1...

Oracle Food and Beverage Applications 安全漏洞

Oracle Food and Beverage Applications is a food and beverage sales management solution from Oracle Corporation USA. A security vulnerability exists in Oracle Hospitality Simphony for Oracle Food and Beverage Applications. An attacker has exploited the vulnerability to cause the Oracle WebCenter...

Oracle Food and Beverage Applications 安全漏洞

Oracle Food and Beverage Applications is a food and beverage sales management solution from Oracle Corporation USA. A security vulnerability exists in Oracle Hospitality Simphony for Oracle Food and Beverage Applications. An attacker has exploited the vulnerability to cause a takeover of Oracle...

Oracle Food and Beverage Applications 安全漏洞

Oracle Food and Beverage Applications is a food and beverage sales management solution from Oracle Corporation USA. A security vulnerability exists in Oracle Hospitality Simphony for Oracle Food and Beverage Applications. An attacker could exploit the vulnerability to gain update, insert, or dele...

Oracle Food and Beverage Applications 安全漏洞

Oracle Food and Beverage Applications is a food and beverage sales management solution from Oracle Corporation USA. A security vulnerability exists in Oracle Hospitality Simphony for Oracle Food and Beverage Applications. An attacker has exploited the vulnerability to cause a takeover of Oracle...

WordPress Restaurant Menu – Food Ordering System – Table Reservation Plugin <= 2.4.1 is vulnerable to Cross Site Scripting (XSS)

Software Restaurant Menu – Food Ordering System – Table Reservation Type Plugin Vulnerable versions = 2.4.1 Fixed in 2.4.2 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-32579 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID e783a9e89164...

Friday Squid Blogging: The Geopolitics of Eating Squid

New York Times op-ed on the Chinese dominance of the squid industry: Chinas domination in seafood has raised deep concerns among American fishermen, policymakers and human rights activists. They warn that China is expanding its maritime reach in ways that are putting domestic fishermen around the...

pt.openfoodfacts.org Cross Site Scripting vulnerability OBB-3885069

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

WordPress Plugin Restaurant Menu and Food Ordering Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in...

CVE-2024-2557

A vulnerability was found in kishor-23 Food Waste Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/admin.php. The manipulation leads to improper authorization. The attack can be initiated remotely. The exploit has been disclosed t...

CVE-2024-2557

A vulnerability was found in kishor-23 Food Waste Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/admin.php. The manipulation leads to improper authorization. The attack can be initiated remotely. The exploit has been disclosed t...

CVE-2024-2557 kishor-23 Food Waste Management System admin.php improper authorization

A vulnerability was found in kishor-23 Food Waste Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/admin.php. The manipulation leads to improper authorization. The attack can be initiated remotely. The exploit has been disclosed t...

CVE-2024-2557

CVE-2024-2557 affects kishor-23 Food Waste Management System 1.0, with a vulnerability in /admin/admin.php enabling improper authorization. A remote-ready issue has been disclosed publicly; multiple sources indicate it could be exploited to bypass authorization. Risk is rated HIGH by CVSS 3.1 in ...

Food Waste Management System Authorization Issues Vulnerability

Food waste management system is a food waste management system by Kishor L Individual Developer. An authorization issue vulnerability exists in Food Waste Management System version 1.0, which arises from an incorrect operation resulting in improper authorization...

PT-2024-21012 · Unknown · Kishor-23 Food Waste Management System

Name of the Vulnerable Software and Affected Versions: kishor-23 Food Waste Management System version 1.0 Description: A critical issue has been found, affecting unknown code in the /admin/admin.php file, leading to improper authorization. The attack can be initiated remotely. The exploit has bee...

CVE-2023-43292

Cross Site Scripting vulnerability in My Food Recipe Using PHP with Source Code v.1.0 allows a local attacker to execute arbitrary code via a crafted payload to the Recipe Name, Procedure, and ingredients parameters...