Information leakage vulnerability in Yunmai Good Light APP

Yunmai Good Light APP is a special app for smart weight scale launched by Yunmai. There is an information leakage vulnerability in Yunmai Good Light APP. Since the entire APP only uses token as a security restriction, the token generation algorithm can be cracked to obtain sensitive information,...

Threat Outbreak Alert RuleID28005: Email Messages Distributing Malicious Software on February 24, 2017

Medium Alert ID: 52734 First Published: 2017 February 24 20:10 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28005 may contain the following files: Name |...

Courier Management System - SQL Injection

Title : Courier Management System - Sql Injection and non-persistent XSS login portal Date: 17 January 2017 Exploit Author: Sibusiso Sishi [email protected] Tested on: Windows7 x32 Vendor: http://couriermanageme.sourceforge.net/ Version: not supplied Download Software:...

28mall.com XSS vulnerability

Vulnerable URL: http://28mall.com/index.php?act=shipping=jsonlistid=15groupid=7=prompt/OPENBUGBOUNTY/...

CVE-2016-5532

Unspecified vulnerability in the Oracle Shipping Execution component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows remote attackers to affect confidentiality via vectors related to Workflow Events...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Shipping Execution component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows remote attackers to affect confidentiality via vectors related to Workflow Events...

CVE-2016-5532

Unspecified vulnerability in the Oracle Shipping Execution component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows remote attackers to affect confidentiality via vectors related to Workflow Events...

Unspecified Vulnerability in Oracle E-Business Suite Oracle Shipping Execution Component

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. Oracle Shipping Execution is one of the components of the management of transportation information. A remote security vulnerability exists in the...

Override Traversal Vulnerability in the Management of Shipping Addresses of the Kai Distribution Platform Management System

Kai distribution system is a network distribution management system specializing in B2B e-commerce business under Hangzhou Qibo 360shop Technology Co. There is an unauthorized traversal vulnerability in the management of shipping address of the Kai distribution platform management system. Through...

Threat Outbreak Alert RuleID25252: Email Messages Distributing Malicious Software on September 27, 2016

Medium Alert ID: 49058 First Published: 2016 September 28 12:31 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID25252 may contain the following files: Name ...

Threat Outbreak Alert RuleID25150: Email Messages Distributing Malicious Software on September 20, 2016

Medium Alert ID: 48986 First Published: 2016 September 21 14:59 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID25150 may contain the following files: Name ...

norvicshipping.com XSS vulnerability

Vulnerable URL: http://norvicshipping.com/search-results/?co=q=1=31=12=s5eng2=7&gi7;=http%3A%2F%2Fwww.allsitesearch.com%2Falswpstyle.css=0=0=255=0dom=http%3A%2F%2Fnorvicshipping.com%2F|=0=norvicshipping.com=com=+%22%3E%3Cimg+src%3Dx+onerror%3Dprompt%28%2FOPENBUGBOUNTY%2F%29%3E%22 Details:...

Threat Outbreak Alert RuleID23435: Email Messages Distributing Malicious Software on June 15, 2016

Medium Alert ID: 46687 First Published: 2016 June 15 18:32 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID23435 may contain the following files: Name | Siz...

China Shipping Container Lines (Shanghai) Co.

China Shipping e-Pickup System is a product order system for transportation companies. A design logic vulnerability exists in the China Shipping e-Pickup System of China Shipping Container Lines Shanghai Co. Ltd. that allows an attacker to exploit the vulnerability to execute commands and view...

Starbucks: Parameter Manipulation allowed for editing the shipping address for other user’s teavana.com subscriptions.

@meals discovered a vulnerability which allowed the shipping address for teavana.com order subscriptions to be edited without proper authorization. Thanks @meals!...

Shipping Manager - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Shipping Manager published at the 'play' market has multiple vulnerabilities...

Shopify: Stored XSS via "Free Shipping" option (Discounts)

POC steps: 1 Go to the customers page and add a new search group named as "img src=x onerror=prompt7 see img1.png 2 Go to the discounts page, create a new discount code and mark the "Free Shipping" option. 3 Open a web proxy i.e. tamper data and press the "save discount" button. 4 Through the web...

phpok企业建站系统(越权修改任意用户收货地址)

简要描述： phpok企业建站系统越权修改任意用户收货地址 详细说明： 1.来到个人中心收货地址添加后编辑抓包 2.id地址是23这个 3.登录账号二同样操作 4.账号一包处修改为账号二 5.成功修改 img src="https://images.seebug.org/upload/201511/0920063754939738cf5f2b22ea26d1a08003f88b.png" alt="6.png" width="600" onerror="javascript:erri...

Inside the Conficker-Infected Police Body Cameras

Rarely does one story run such a gamut of security threats, encapsulating in this case, Internet of Things risks, supply chain infiltration and some circa-2008 malware for good measure. But that’s what we have with this week’s saga of the body cameras, marketed for police use, that were shipped...

Threat Outbreak Alert RuleID17920: Email Messages Distributing Malicious Software on September 11, 2015

Medium Alert ID: 40957 First Published: 2015 September 11 15:22 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID17920 may contain the following files: Name ...