naturalfoodbenefits.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1020621 Security Researcher Dipu1A Helped patch 1008 vulnerabilities Received 6 Coordinated Disclosure badges Received 22 recommendations , a holder of 6 badges for responsible and coordinated disclosure, found a security vulnerability affecting naturalfoodbenefits.com...

A week in security (November 11 – 17)

Last week on Malwarebytes Labs, we offered statistics and information on a sneaky new Trojan malware for Android, inspected a bevy of current Facebook scams, and explained the importance of securing food and agriculture infrastructure. We also released our latest report on cybercrime tactics and...

The vulnerability of the Oracle Hospitality Reporting and Analytics component in the Oracle Food and Beverage Applications software package allows a perpetrator to gain unauthorized access to protected data.

The vulnerability of the Oracle Hospitality Reporting and Analytics component in the Oracle Food and Beverage Applications suite is related to access control deficiencies. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected data usin...

The vulnerability of the Oracle Hospitality RES 3700 component in the Oracle Food and Beverage Applications software package allows a hacker to gain full control over the application.

The vulnerability of the Oracle Hospitality RES 3700 component of the Oracle Food and Beverage Applications software is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain full control over the application through network HTTP protocols...

manchesterfoodanddrinkfestival.nutickets.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1001872 Security Researcher g0bl1nsec Helped patch 3766 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting...

CVE-2019-2952

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality...

CVE-2019-2952

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality...

CVE-2019-2937

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows low privileged attacker having Admin - Configuration privilege with network access via HTTP ...

CVE-2019-2936

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. The supported version that is affected is 9.1.0. Difficult to exploit vulnerability allows low privileged attacker having Admin - Configuration privilege with network access via HTT...

Buffer overflow

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows low privileged attacker having Admin - Configuration privilege with network access via HTTP ...

Buffer overflow

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. The supported version that is affected is 9.1.0. Difficult to exploit vulnerability allows low privileged attacker having Admin - Configuration privilege with network access via HTT...

Buffer overflow

Vulnerability in the Oracle Hospitality RES 3700 component of Oracle Food and Beverage Applications. The supported version that is affected is 5.7. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality RES 3700. While the...

Buffer overflow

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality...

CVE-2019-3025

Vulnerability in the Oracle Hospitality RES 3700 component of Oracle Food and Beverage Applications. The supported version that is affected is 5.7. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality RES 3700. While the...

CVE-2019-3025

Vulnerability in the Oracle Hospitality RES 3700 component of Oracle Food and Beverage Applications. The supported version that is affected is 5.7. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality RES 3700. While the...

CVE-2019-3025

CVE-2019-3025 affects Oracle Hospitality RES 3700, specifically version 5.7. The flaw allows an unauthenticated attacker over HTTP to take over Oracle Hospitality RES 3700, with CVSS v3.1 base score 9.0 (Network, HIGH impact on Confidentiality, Integrity, Availability). Exploit code and public wr...

CVE-2019-2952

CVE-2019-2952 affects Oracle Hospitality Reporting and Analytics (Oracle Food and Beverage Applications) version 9.1.0. The vulnerability allows an unauthenticated attacker who can reach the service over HTTP to compromise data, with exploitation requiring user interaction. The impact, as describ...

CVE-2019-2937

CVE-2019-2937 affects the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications, specifically version 9.1.0. The vulnerability can be exploited over the network via HTTP by a low-privileged attacker with Admin - Configuration privileges, enabling unauthoriz...

CVE-2019-2934

CVE-2019-2934 affects Oracle Hospitality Reporting and Analytics (Oracle Food and Beverage Applications), specifically version 9.1.0. The Red Hat/Oracle/NVD/CVE records describe a vulnerability that allows a low-privileged attacker with Admin – Configuration privileges and network access via HTTP...

CVE-2019-2934

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows low privileged attacker having Admin - Configuration privilege with network access via HTTP ...