CVE-2018-3115

Vulnerability in the Oracle Retail Sales Audit component of Oracle Retail Applications subcomponent: Operational Insights. Supported versions that are affected are 15.0 and 16.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

WordPress Quick Chat SQL Injection

SQL Injection vulnerability in WordPress Quick Chat plugin Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

Shopify: H1514 Stored XSS on Wholesale sales channel allows cross-organization data leakage

Summary: There exists a stored XSS vulnerability via the Wholesale sales channel at https://wholesale.shopifyapps.com. This allows an attacker who shares one shop with an account owner to access the Wholesale sales channel of any shop belonging to the owner. Steps To Reproduce: 1. Visit...

It will take more than web pages that load faster to boost holiday conversion

When designing websites to meet peak traffic demands, it is vital to look beyond basic metrics such as page load speed. Providing visual content optimized for both desktop and mobile devices, and combating security threats will help you drive traffic and improve conversion rates during the holida...

The Apollo Breach Included Billions of Data Points

Sales intelligence firm Apollo left a "staggering amount" of exposed online, including 125 million email addresses and nine billion data points...

bluewateryachtsales.net XSS vulnerability

Open Bug Bounty ID: OBB-679535 Description| Value ---|--- Affected Website:| bluewateryachtsales.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

ManageEngine Multiple Products File Disclosure

File disclosure vulnerability in ManageEngine Firewall Analyzer, NetFlow Analyzer, Network Configuration Manager, OpManager and OpUtils Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

You bet your mobile app consumers are willing to pay with their smartphone

For almost 10 years, there has been a debate over mobile app versus mobile web. Which strategy is right for your business and will consumers really ever buy something with a mobile device? Some of these questions have been clearly answered with time, but some aspects of the debate continue. The...

Google Secretly Tracks What You Buy Offline Using Mastercard Data

Over a week after Google admitted the company tracks users' location even after they disable location history, it has now been revealed that the tech giant has signed a secret deal with Mastercard that allows it to track what users buy offline. Google has paid Mastercard millions of dollars in...

NUUO NVRmini2 / NVRsolo File Upload

File upload vulnerability in NUUO NVRmini2 / NVRsolo upload.php Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

OpenEMR File Disclosure

File disclosure vulnerability in OpenEMR importtemplate.php docid parameter Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

OpenEMR find_appt_popup_user.php SQL Injection

SQL Injection vulnerability in OpenEMR findapptpopupuser.php catid parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

optifinow.com XSS vulnerability

Open Bug Bounty ID: OBB-662967 Description| Value ---|--- Affected Website:| optifinow.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

trip.com XSS vulnerability

Open Bug Bounty ID: OBB-651173 Description| Value ---|--- Affected Website:| trip.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

ManageEngine Applications Manager SQL Injection

SQL Injection vulnerability in ManageEngine Applications Manager jusername parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

ManageEngine Applications MyPage.do Manager SQL Injection

SQL Injection vulnerability in ManageEngine Applications Manager MyPage.do forpage parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

Trend Micro Endpoint Application Control FileDrop Servlet File Upload

File upload vulnerability in Trend Micro Endpoint Application Control FileDrop Servlet Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

Symantec Messaging Gateway 10.6.1 File Disclosure

File disclosure vulnerability in Symantec Messaging Gateway com.ve.kavachart.servlet.ChartStream sn parameter Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

uWSGI Path Traversal File Disclosure

File disclosure vulnerability in uWSGI Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

GDPR Is Here: How GDPR Readiness Can Boost Your Business

Most discussions about the EU’s General Data Protection Regulation GDPR have naturally focused on best practices for achieving compliance and avoiding penalties. With GDPR now a reality for all companies that store and process personal data of EU residents, an often overlooked aspect has been the...