CVE-2020-2650

Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications component: Promotions. The supported version that is affected is 16.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi...

CVE-2020-2650

Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications component: Promotions. The supported version that is affected is 16.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi...

CVE-2019-18421

An issue was discovered in Xen through 4.12.x allowing x86 PV guest OS users to gain host OS privileges by leveraging race conditions in pagetable promotion and demotion operations. There are issues with restartable PV type change operations. To avoid using shadow pagetables for PV guests, Xen...

Issues with restartable PV type change operations

ISSUE DESCRIPTION To avoid using shadow pagetables for PV guests, Xen exposes the actual hardware pagetables to the guest. In order to prevent the guest from modifying these page tables directly, Xen keeps track of how pages are used using a type system; pages must be "promoted" before being used...

mybb -- multiple vulnerabilities

mybb Team reports: Medium risk: Tasks Local File Inclusion Medium risk: Forum Password Check Bypass Low risk: Admin Permissions Group Title XSS Low risk: Attachment types file extension XSS Low risk: Moderator Tools XSS Low risk: Security Questions XSS Low risk: Settings Management XSS Low risk:...

Google to ban cryptocurrency and ICO ads from June 2018

By Waqas Google will ban all advertisements promoting cryptocurrencies and Initial Coin Offering ICO This is a post from HackRead.com Read the original post: Google to ban cryptocurrency and ICO ads from June 2018...

Authorization

An improper authorization vulnerability exists in Jenkins Promoted Builds Plugin 2.31.1 and earlier in Status.java and ManualCondition.java that allow an attacker with read access to jobs to perform promotions...

CVE-2018-1000114

An improper authorization vulnerability exists in Jenkins Promoted Builds Plugin 2.31.1 and earlier in Status.java and ManualCondition.java that allow an attacker with read access to jobs to perform promotions...

What to expect for this year's Black Friday and Cyber Monday

Last year during holidays, US online sales surpassed $122 billion. This represented a 12 percent increase over the previous year. But beyond the overall growth, what's more interesting is that sales at physical stores dropped by 10 percent, the result of ongoing consumer comfort with and adoption...

CVE-2015-8974

The CVE affects MyBB (MyBulletinBoard) and relates to a SQL injection in the Group Promotions module of the admin control panel. Affected versions are MyBB before 1.6.18 and 1.8.x before 1.8.6; the issue allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Root cause...

promotions.coral.co.uk XSS vulnerability

Vulnerable URL: http://promotions.coral.co.uk/landing-pages/verify/?username=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unkno...

Facebook Promotions <= 1.3.3 - SQL Injection

The fbpromotions WordPress plugin was affected by a SQL Injection security vulnerability...

WordPress Facebook Promotions plugin <= 1.3.3 - SQL Injection Vulnerability

No description provided by source. Exploit Title: WordPress Facebook Promotions plugin = 1.3.3 SQL Injection Vulnerability Date: 2011-08-28 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/fbpromotions.1.3.3.zip Version: 1.3.3...

Spree promotions_controller.rb calculator_type Parameter Arbitrary Ruby Object Instantiation Command Execution

Spree contains a flaw that is triggered when handling input passed via the 'calculatortype' parameter to promotionscontroller.rb. This may allow a remote authenticated attacker to instantiate arbitrary Ruby objects and potentially execute arbitrary commands...

Bogus Facebook apps spreading Android malware

Bogus Facebook apps spreading Android malware Third-party Android markets have traditionally been the main source of infection since the Android boom, as they are less strict than the genuine Play when it comes to bouncing malware. Today Gmanetwork reports that, Users of mobile devices running...

WordPress Facebook Promotions 1.3.3 SQL Injection

Exploit Title: WordPress Facebook Promotions plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0--%20 --------------- Vulnerable code --------------- if$REQUEST'action'=="activate" $key = md5getoption"key".$REQUEST'name'.$REQUEST'id'; ... $sql = "UPDATE fbpromotions SET...

WordPress Plugin Facebook Promotions 1.3.3 - SQL Injection

WordPress Plugin Facebook Promotions 1.3.3 - SQL Injection Exploit Title: WordPress Facebook Promotions plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0--%20 --------------- Vulnerable code --------------- if$REQUEST'action'=="activate" $key = md5getoption"key".$REQUEST'name'.$REQUEST'id...

WordPress Plugin Facebook Promotions 1.3.3 - SQL Injection

Exploit Title: WordPress Facebook Promotions plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0--%20 --------------- Vulnerable code --------------- if$REQUEST'action'=="activate" $key = md5getoption"key".$REQUEST'name'.$REQUEST'id'; ... $sql = "UPDATE fbpromotions SET...

WordPress Facebook Promotions Plugin <= 1.3.3 - SQL Injection

Facebook Promotions plugin is prone to an SQL injection. This vulnerability allows an attacker to modify data, alter queries to the application SQL database, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Upgrade the plugin...

PHP car rental complete System V1.2 SQL Injection Vulnerability

Exploit for php platform in category web applications =============================================================== PHP car rental complete System V1.2 SQL Injection Vulnerability =============================================================== Title:PHP car rental complete System V1.2 SQli...