903 matches found
SAP Customer Relationship Management Java administration console cross-site scripting vulnerability
SAP Customer Relationship Management CRM is a set of customer relationship management solutions from SAP. The program includes sales management , marketing management , customer service systems and other modules . Java administration console is one of the Java administration console . A cross-sit...
SAP Customer Relationship Management Java Component Cross-Site Request Forgery Vulnerability
SAP Customer Relationship Management CRM is a set of customer relationship management solutions from SAP. The program includes modules for sales management, marketing management, customer service system , etc. Java component is one of the Java components. A cross-site request forgery vulnerabilit...
CVE-2017-14231
GeniXCMS before 1.1.0 allows remote attackers to cause a denial of service account blockage by leveraging the mishandling of certain username substring relationships, such as the admin username versus the admin username, related to register.php, User.class.php, and Type.class.php...
Error: The trust relationship between this workstation and the primary domain failed
Users cannot log on to a system using Active Directory credentials and the following error message appears: "The trust relationship between this workstation and the primary domain failed.” This issue is seen when the session logon is attempted through Remote Desktop Protocol, ICA, or directly at...
SAP Customer Relationship Management (CRM) IPC Pricing Cross-Site Scripting Vulnerability
SAP Customer Relationship Management is a customer relationship management solution. A cross-site scripting vulnerability exists in SAP Customer Relationship Management CRM IPC Pricing. A remote attacker could exploit the vulnerability to execute arbitrary script code in an unsuspecting user's...
SAP Customer Relationship Management (CRM) WebClient UI Cross-Site Scripting Vulnerability
SAP Customer Relationship Management is a customer relationship management solution. A cross-site scripting vulnerability exists in the SAP Customer Relationship Management CRM WebClient UI. A remote attacker could exploit the vulnerability to execute arbitrary script code in an unsuspecting user...
Open Distributed Threat Intelligence: Yeti
Yeti is a platform meant to organize observables, indicators of compromise, TTPs, and knowledge on threats in a single, unified repository. Yeti will also automatically enrich observables e.g. resolve domains, geolocate IPs so that you don’t have to. Yeti provides an interface for humans shiny...
SugarCRM Incomplete Blacklist Vulnerability
SugarCRM is an open source Customer Relationship Management CRM system from SugarCRM USA. The system supports differentiated marketing, management and distribution of sales leads for different customer needs, and enables information sharing and tracking of sales representatives. An incomplete...
Oracle CRM Technical Foundation Remote Vulnerability (CNVD-2017-26284)
Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management and other functions. Oracle CRM Technical Foundation ...
SAP Customer Relationship Management Cross-Site Scripting Vulnerability
SAP Customer Relationship Management is a customer relationship management solution. A cross-site scripting vulnerability exists in SAP Customer Relationship Management. An attacker could exploit this vulnerability to obtain user login session information...
Major Hole Plugged in Secure File Transfer Tool
Biscom, a secure document delivery provider, recently patched a serious vulnerability in its secure file transfer product that could have allowed an authenticated hacker access to data shared between other users. Privately alerted in April by Rapid7 a Biscom customer, the company released an...
iTunes < 12.6 Multiple Vulnerabilities
Binary data 700114.prm...
Supply Chain Update Software Unknowingly Used in Attacks
Microsoft said a recent attack it calls Operation WilySupply utilized the update mechanism of an unnamed software editing tool to infect targets in the finance and payment industries with in-memory malware. The unnamed editing tool was used to send unsigned malicious updates to users in targeted...
GitLab: Missing/Breach of Internal Security Boundary - Access to Job Queue Results in Remote Code Execution
Test Conditions ============= This issue was tested in GitLab Community Edition using a combination of code review against git commit 6c65b63ca5, April 20 2017 and testing likely issues against a local deployment of Bitnami GitLab Community Edition 9.0.5-0, running on Ubuntu 14.04.5. These are...
Oracle PeopleSoft Enterprise SCM Strategic Sourcing Remote Vulnerability
Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle that provides human capital management, financial management, supplier relationship management, and more.PeopleSoft Enterprise SCM Strategic Sourcing is one of the Supply Chain Strategic Sourcing...
MantisBT 1.3.x < 1.3.8 / 2.1.x < 2.1.2 / 2.2.x < 2.2.2 XSS
Binary data 700051.prm...
OSINT Gathering Tool: Inquisitor
OSINT Gathering Tool Inquisitor is a simple for gathering information on companies and organizations through the use of Open Source Intelligence OSINT sources. The key features of Inquisitor include: 1. The ability to cascade the ownership label of an asset e.g. if a Registrant Name is known to...
March 22, 2017—KB4016636 (OS Build 10586.842)
None None...