3471 matches found
CVE-2017-10329
Vulnerability in the Oracle Global Order Promising component of Oracle E-Business Suite subcomponent: Reschedule Sales Orders. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attack...
CVE-2017-10329: Undefined Security Weakness
Vulnerability in the Oracle Global Order Promising component of Oracle E-Business Suite subcomponent: Reschedule Sales Orders. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attack...
WordPress RegistrationMagic-Custom Registration Forms SQL Injection
SQL Injection vulnerability in WordPress RegistrationMagic-Custom Registration Forms plugin includes/classrmdbmanager.php Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...
Trend Micro Data Loss Prevention File Disclosure
File disclosure vulnerability in Trend Micro Data Loss Prevention Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...
Trend Micro Mobile Security for iOS/Android Proxy.php RCE
Remote command execution vulnerability in Trend Micro Mobile Security for iOS/Android Proxy.php T parameter Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...
ICAutosales 2.2 - SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Auto Dealer Car Sales PHP Script 2.2 - SQL Injection Dork: N/A Date: 13.09.2017 Vendor Homepage: http://www.icloudcenter.com/ Software Link: http://www.icloudcenter.com/auto-dealer-car-sales-script.htm Demo:...
ICAutosales 2.2 - SQL Injection
ICAutosales 2.2 - SQL Injection Exploit Title: Auto Dealer Car Sales PHP Script 2.2 - SQL Injection Dork: N/A Date: 13.09.2017 Vendor Homepage: http://www.icloudcenter.com/ Software Link: http://www.icloudcenter.com/auto-dealer-car-sales-script.htm Demo: http://icloudcenter.net/demos/icautosales/...
Threat Outbreak Alert RuleID30578: Email Messages Distributing Malicious Software on September 12, 2017
Medium Alert ID: 55188 First Published: 2017 September 12 19:28 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30578 may contain the following files: Name ...
Schneider Electric Pelco VideoXpert auth_token Cookie Disclosure
Schneider Electric Pelco VideoXpert /portal/ URI path traversal authtoken cookie disclosure Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...
Joomla Component com_surveyforce SQL Injection
SQL Injection vulnerability in Joomla Survey Force Deluxe component invite parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...
Trend Micro OfficeScan Proxy.php RCE
Remote command execution vulnerability in Trend Micro OfficeScan Proxy.php T parameter Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...
Symantec Messaging Gateway RestoreAction.performRestore() RCE
Remote command execution vulnerability in Symantec Messaging Gateway RestoreAction.performRestore localBackupFileSelection parameter Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...
WordPress FAdvertisement SQL Injection
SQL Injection vulnerability in WordPress FAdvertisement plugin id parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...
ClipBucket SQL Injection
SQL Injection vulnerability in ClipBucket viewcollection.php cid parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...
Zomato: [www.zomato.com] Unauthenticated access to Internal Sales Data of Zomato through an unrestricted endpoint
Internal sales dashboard was open. While running through the JS file I discovered a new endpoint, while reading further I found that it shouldn't have been accessible by anyone else apart from the admin. So, I started to find the correct Post Request and within few mins of fuzzing, I found the...
LiveSales 1.0 SQL Injection
Exploit Title: LiveSales 1.0 - SQL Injection Dork: N/A Date: 18.08.2017 Vendor Homepage : http://livecrm.co/ Software Link: https://codecanyon.net/item/livesales-complete-sales-management-crm/20243171 Demo: http://livesales.livecrm.co/livecrm/web/ Version: 1.0 Category: Webapps Tested on:...
Back to school cybersecurity tips for parents and kids
The time to start the new school term is just around the corner. And for parents, the excitement and anxiety may be palpable, especially if it's their kid's first time attending a new school. Ads for back-to-school gear start as early as July, increasing in frequency and urgency until the kiddos...
August 1, 2017 – Morning Cyber Coffee Headlines – “August” Edition
Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! August 1, 2017 - Headlines Carbon Black in the News: Carbon Black Appoints Form...