2667 matches found
CVE-2020-24416
CVE-2020-24416 affects Marketo Sales Insight plugin for Salesforce, specifically version 1.4355 and earlier, by a blind stored XSS in vulnerable form fields. Exploitation could cause arbitrary JavaScript execution in a victim’s browser when visiting pages containing the affected field. Multiple s...
APSB20-60 Security updates available for Marketo
Marketo has released an update for the Marketo Sales Insight package for Salesforce. This update addresses an important vulnerability. Successful exploitation could lead to arbitrary JavaScript execution in the browser...
Akamai Launches New Digital Badge Program for Channel Partners
Partner enablement framework provides capabilities to manage customer lifecycle from prospecting through implementation for Akamai products. We are introducing digital badges for successful completion of partner enablement certifications. This is an opportunity for Akamai Partner professionals to...
after-sales-service.net Cross Site Scripting vulnerability OBB-1379457
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
tokyoautosalesep.com Cross Site Scripting vulnerability OBB-1375542
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
adelaidetrailersales.com.au Improper Access Control vulnerability OBB-1374239
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Wachovia ERP has a logic flaw vulnerability
Huaxia ERP based on SpringBoot framework , aspires to provide small and medium-sized enterprises with open source and good ERP software , currently focusing on sales and inventory + financial functions . HUAXIA ERP has a logic flaw vulnerability that can be exploited by attackers to obtain...
ThinkAdmin v6 File Disclosure
File disclosure vulnerability in ThinkAdmin admin.html Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...
westchester-rentals-sales.com Cross Site Scripting vulnerability OBB-1341833
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
sales-receipt.com Cross Site Scripting vulnerability OBB-1309247
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Valve: Access to microtransaction sales data for lots of apps from 2014 to present at /valvefinance/sanity/
The Steamworks Product Data web site had an URL route with insufficient access controls, which would allow an authenticated partner to view data for games which they might not otherwise have permissions to view. After mitigation, an audit of accesses to this URL route showed no accesses by partie...
WordPress SRS Simple Hits Counter SQL Injection
SQL Injection vulnerability in SRS Simple Hits Counter postid parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...
arizonapropertysales.com Cross Site Scripting vulnerability OBB-1291458
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Stolen Fortnite Accounts Earn Hackers Millions Per Year
UPDATE Hackers are scoring more than a million dollars annually selling compromised accounts for the popular Fortnite video game in underground forums. With Fortnite’s immense popularity skyrocketing over the past few years – it currently has more than 350 million global players – the game is a...
Oracle E-Business File Disclosure
File disclosure vulnerability in Oracle E-Business bscpgraph.jsp Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...
colemansequipment.equipmentsales.com.au Cross Site Scripting vulnerability OBB-1276909
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Visma Public: Missing authorization allows sales only user to record payment.
The researcher has found a missing authorization issue that allowed a sales only user to record payments that he was not supposed to...
vBulletin 5 SQL Injection
SQL Injection vulnerability in vBulletin nodeId parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...
Visma Public: Improper access control allows sales only user to view bank balance of company accounts.
The researcher has found an access control issue that allowed a sales only user to view the bank balance of company accounts. This details should not be visible for missing permissions users...
Shopify: Low Privileged user can add or remove cash to/from sales register
Low privileged user having no access to Shopify POS and very low permission set is not allowed to add cash to the sales register or remove cash from the sales register. But missing server-side permission checks on the vulnerable request allows a low privileged user to do this. A low privileged ca...