PaulShop - SQL Injection

PaulShop - SQL Injection Exploit Title: PaulShop CMS = 2017-03-25 Sql Injection Date: 10-06-2017 Exploit Author: Se0pHpHack3r Vendor Homepage: https://codecanyon.net/item/paulshop-cms-with-shopping-cart-system/18070714 Version: 2017-03-25 1. Description SQL Injection on Shipping Cost page in Cart...

PaulShop - SQL Injection

Exploit Title: PaulShop CMS = 2017-03-25 Sql Injection Date: 10-06-2017 Exploit Author: Se0pHpHack3r Vendor Homepage: https://codecanyon.net/item/paulshop-cms-with-shopping-cart-system/18070714 Version: 2017-03-25 1. Description SQL Injection on Shipping Cost page in Cart, with "country" & "weigh...

Easter Holiday Phishing Scams and Malware Campaigns

As the Easter holiday approaches, US-CERT reminds users to stay aware of holiday scams and cyber campaigns, which may include: unsolicited shipping notifications that may actually be scams by attackers to solicit personal information phishing scams, electronic greeting cards that may contain...

Threat Outbreak Alert RuleID28479: Email Messages Distributing Malicious Software on March 27, 2017

Medium Alert ID: 53173 First Published: 2017 March 27 13:29 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28479 may contain the following files: Name | Si...

Information leakage vulnerability in Yunmai Good Light APP

Yunmai Good Light APP is a special app for smart weight scale launched by Yunmai. There is an information leakage vulnerability in Yunmai Good Light APP. Since the entire APP only uses token as a security restriction, the token generation algorithm can be cracked to obtain sensitive information,...

Threat Outbreak Alert RuleID28005: Email Messages Distributing Malicious Software on February 24, 2017

Medium Alert ID: 52734 First Published: 2017 February 24 20:10 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28005 may contain the following files: Name |...

Courier Management System - SQL Injection

Title : Courier Management System - Sql Injection and non-persistent XSS login portal Date: 17 January 2017 Exploit Author: Sibusiso Sishi [email protected] Tested on: Windows7 x32 Vendor: http://couriermanageme.sourceforge.net/ Version: not supplied Download Software:...

28mall.com XSS vulnerability

Vulnerable URL: http://28mall.com/index.php?act=shipping=jsonlistid=15groupid=7=prompt/OPENBUGBOUNTY/...

CVE-2016-5532

Unspecified vulnerability in the Oracle Shipping Execution component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows remote attackers to affect confidentiality via vectors related to Workflow Events...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Shipping Execution component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows remote attackers to affect confidentiality via vectors related to Workflow Events...

CVE-2016-5532

Unspecified vulnerability in the Oracle Shipping Execution component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows remote attackers to affect confidentiality via vectors related to Workflow Events...

CVE-2016-5532: Improper Access Control

Unspecified vulnerability in the Oracle Shipping Execution component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows remote attackers to affect confidentiality via vectors related to Workflow Events...

PT-2016-6517

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Oracle E-Business Suite versions 12.2.3 through 12.2.6 Description The issue affects confidentiality and can be exploited remotely. It is related to vectors involving Workflow Events in th...

Unspecified Vulnerability in Oracle E-Business Suite Oracle Shipping Execution Component

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. Oracle Shipping Execution is one of the components of the management of transportation information. A remote security vulnerability exists in the...

Override Traversal Vulnerability in the Management of Shipping Addresses of the Kai Distribution Platform Management System

Kai distribution system is a network distribution management system specializing in B2B e-commerce business under Hangzhou Qibo 360shop Technology Co. There is an unauthorized traversal vulnerability in the management of shipping address of the Kai distribution platform management system. Through...

Threat Outbreak Alert RuleID25252: Email Messages Distributing Malicious Software on September 27, 2016

Medium Alert ID: 49058 First Published: 2016 September 28 12:31 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID25252 may contain the following files: Name ...

Threat Outbreak Alert RuleID25150: Email Messages Distributing Malicious Software on September 20, 2016

Medium Alert ID: 48986 First Published: 2016 September 21 14:59 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID25150 may contain the following files: Name ...

norvicshipping.com XSS vulnerability

Vulnerable URL: http://norvicshipping.com/search-results/?co=q=1=31=12=s5eng2=7&gi7;=http%3A%2F%2Fwww.allsitesearch.com%2Falswpstyle.css=0=0=255=0dom=http%3A%2F%2Fnorvicshipping.com%2F|=0=norvicshipping.com=com=+%22%3E%3Cimg+src%3Dx+onerror%3Dprompt%28%2FOPENBUGBOUNTY%2F%29%3E%22 Details:...

Threat Outbreak Alert RuleID23435: Email Messages Distributing Malicious Software on June 15, 2016

Medium Alert ID: 46687 First Published: 2016 June 15 18:32 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID23435 may contain the following files: Name | Siz...

China Shipping Container Lines (Shanghai) Co.

China Shipping e-Pickup System is a product order system for transportation companies. A design logic vulnerability exists in the China Shipping e-Pickup System of China Shipping Container Lines Shanghai Co. Ltd. that allows an attacker to exploit the vulnerability to execute commands and view...