CVE-2017-10353

Vulnerability in the Oracle Hospitality Hotel Mobile component of Oracle Hospitality Applications subcomponent: Suite8/RESTAPI. The supported version that is affected is 1.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2017-10353

The CVE-2017-10353 entry affects Oracle Hospitality Hotel Mobile, specifically the Suite8/RESTAPI subcomponent, with version 1.1 identified as affected. The vulnerability is exploitable by a low-privilege attacker who can access the service over HTTP over the network, leading to unauthorized acce...

CVE-2017-10353

Vulnerability in the Oracle Hospitality Hotel Mobile component of Oracle Hospitality Applications subcomponent: Suite8/RESTAPI. The supported version that is affected is 1.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2017-10014

Vulnerability in the Oracle Hospitality Hotel Mobile component of Oracle Hospitality Applications subcomponent: Suite8/RESTAPI. The supported version that is affected is 1.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2017-10014

CVE-2017-10014 affects the Oracle Hospitality Hotel Mobile component (Suite8/RESTAPI), version 1.1. The vulnerability arises in Oracle Hospitality Applications, allowing a low-privilege attacker with network access via HTTP to potentially modify data, with the attack requiring user interaction. I...

Unspecified Vulnerability in Oracle Hospitality Hotel Mobile

Oracle Hospitality Applications is a suite of business applications, servers, and storage solutions for hotel management from Oracle Corporation. The solution provides human resources cost management, provide customer service throughout the journey tracking management to improve customer...

Unspecified Vulnerability in Oracle Hospitality Hotel Mobile (CNVD-2017-31691)

Oracle Hospitality Applications is a suite of business applications, servers, and storage solutions for hotel management from Oracle Corporation. The solution provides human resources cost management, provide customer service throughout the journey tracking management to improve customer...

Hyatt Hit By Credit Card Breach, Again

Hyatt Corp., hotel guests are being warned of a credit card breach, the second since December 2015. On Thursday, the hotelier identified 41 of its hotels spread across 13 countries where it confirmed unauthorized access to payment card information. China is the hardest hit by the breach with 18...

Hyatt Hotels Suffers 2nd Card Breach in 2 Years

Hyatt Corp. is alerting customers about another credit card breach at some hotels, the second major incident with the hospitality chain in as many years. Hyatt said its cyber security team discovered signs of unauthorized access to payment card information from cards manually entered or swiped at...

hotel-mahogany.com XSS vulnerability

Vulnerable URL: http://www.hotel-mahogany.com/activite.php?id=13'"160〈=en Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinate...

finesthotels.net XSS vulnerability

Vulnerable URL: https://www.finesthotels.net/en/hotel-offers/offers.html?query=STOPSENDINGMESPAM=alert/OPENBUGBOUNTY/...

Stored Cross-Site Scripting Vulnerability in Vienna Hotel App

Vienna Hotel App is a hotel booking software officially launched by Vienna Hotel. Vienna Hotel App has a stored cross-site scripting vulnerability that allows an attacker to insert malicious js code into a page to obtain information such as user cookies...

hotel-arbanassi.com XSS vulnerability

Vulnerable URL: http://www.hotel-arbanassi.com/pictureen.php?photourl=xss" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 15.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinat...

ICHotelReservation 3.3 - (key) Parameter SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Hotel Reservation Site Script 3.3 - SQL Injection Dork: N/A Date: 13.09.2017 Vendor Homepage: http://www.icloudcenter.com/ Software Link: http://www.icloudcenter.com/hotel-reservation-site-script.htm Demo:...

Hotel Reservation Site Script 3.3 - (key) Parameter SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Hotel Reservation Site Script 3.3 - SQL Injection Dork: N/A Date: 13.09.2017 Vendor Homepage: http://www.icloudcenter.com/ Software Link: http://www.icloudcenter.com/hotel-reservation-site-script.htm Demo:...

ICHotelReservation 3.3 - 'key' SQL Injection

Exploit Title: Hotel Reservation Site Script 3.3 - SQL Injection Dork: N/A Date: 13.09.2017 Vendor Homepage: http://www.icloudcenter.com/ Software Link: http://www.icloudcenter.com/hotel-reservation-site-script.htm Demo: http://icloudcenter.net/demos/ichotelreservation/ Version: 3.3 Category:...

unitravel.com XSS vulnerability

Vulnerable URL: https://www.unitravel.com/net/paris/hotel/villaroyalemontsouris/zoom/?paramlang=xss"loccountry=FRAloc=HIPARidhtl=18273=roomsℑurl=xss" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 6664981 VIP...

Meeting and Hotel Booking Provider's Data Found in Public Amazon S3 Bucket

Leaks of personal and business information from unsecured Amazon S3 buckets are piling up. The latest belongs to Groupize, a Boston-area business that sells tools to manage small group meetings as well as a booking engine that handles hotel room-block reservations. Researchers at Kromtech Securit...

hotel-city-gallery.de XSS vulnerability

Vulnerable URL: http://www.hotel-city-gallery.de/UserPage.aspx?lang=%22%3E%3Cimg%20src=x%20onerror=prompt%27OPENBUGBOUNTY%27%3E=1=einzelzimmer Details: Description| Value ---|--- Patched:| No Latest check for patch:| 15.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

Russian Hackers Spying on VIP Hotel Guests Using Leaked NSA Tool

By Waqas Fancy Bear 1 or APT28 2 is a Russia hacker This is a post from HackRead.com Read the original post: Russian Hackers Spying on VIP Hotel Guests Using Leaked NSA Tool...