CVE-2021-35563

Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite component: Workflow Events. Supported versions that are affected are 12.2.6-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Shipping...

Oracle E-Business Suite 安全漏洞

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle Oracle. The software provides customer relationship management, service management, financial management and other functions. An information disclosure vulnerability exists in...

Iran-linked DEV-0343 targeting defense, GIS, and maritime sectors

DEV-0343 is a new activity cluster that the Microsoft Threat Intelligence Center MSTIC first observed and began tracking in late July 2021. MSTIC has observed DEV-0343 conducting extensive password spraying against more than 250 Office 365 tenants, with a focus on US and Israeli defense technolog...

CVE-2021-36454

Cross Site Scripting XSS vulnerability in Naviwebs Navigate Cms 2.9 via the navigate-quickse parameter to 1 backups\backups.php, 2 blocks\blocks.php, 3 brands\brands.php, 4 comments\comments.php, 5 coupons\coupons.php, 6 feeds\feeds.php, 7 functions\functions.php, 8 items\items.php, 9...

Zibo Shining Network Technology Co., Ltd. ships 100cms with SQL injection vulnerability

Shipping 100cms is a virtual goods auto shipping system/article pay to read system, no need to manually manned, customers can buy online to automatically complete the transaction. There is a SQL injection vulnerability in Shipping 100cms by Zibo Shining Network Technology Co. Attackers can use th...

SQL Injection Vulnerability in Shipping 100 Autoship System

Shipping 100 is a virtual goods autoship system/article pay to read system. A SQL injection vulnerability exists in the Shipment 100 Autoship System. An attacker can exploit the vulnerability to obtain sensitive information from the database...

Arbitrary File Read Vulnerability in Shipping 100 Virtual Goods Autoship System

Shipping 100 Virtual Goods Autoship System is a virtual goods autoship system/article pay to read system. An arbitrary file read vulnerability exists in the Ship 100 Virtual Goods Autoship System. An attacker can exploit this vulnerability to read arbitrary files...

CVE-2021-24293

In the eCommerce module of the NextGEN Gallery Pro WordPress plugin before 3.1.11, there is an action to call getcartitems via photocratiajax , after that the settingsshippingaddressname is able to inject malicious javascript...

CVE-2021-24293

In the eCommerce module of the NextGEN Gallery Pro WordPress plugin before 3.1.11, there is an action to call getcartitems via photocratiajax , after that the settingsshippingaddressname is able to inject malicious javascript...

WordPress NextGEN Gallery 跨站脚本漏洞

WordPress is a blogging platform developed by the WordPress Wordpress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.NextGEN Gallery is an image gallery plugin used in it. WordPress plugin NextGEN Gallery Pro before 3.1.11 version has a...

Second Click Here to Kill Everybody Sale

For a limited time, I am selling signed copies of Click Here to Kill Everybody in hardcover for just $6, plus shipping. I have 600 copies of the book available. When theyre gone, the sale is over and the price will revert to normal. Order here. Please be patient on delivery. Its a lot of work to...

SQL Injection Vulnerability in Shipping 100 Virtual Goods Auto-Shipping System of Zibo Shining Network Technology Co. Ltd (CNVD-2021-34231)

Shipping 100 virtual goods automatic shipping system is a powerful virtual goods automatic shipping system. A SQL injection vulnerability exists in Ship100 Virtual Goods Auto Shipment System, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in Shipping 100 Cards Consignment System

Ship 100 Cachet Consignment System is a set of virtual goods auto-shipment system/article pay to read system, no manual duty, customers can buy online to automatically complete the transaction. SQL injection vulnerability exists in Shipment 100 Consignment System, which can be exploited by...

SQL Injection Vulnerability in Shipment 100 Virtual Goods Auto-shipment System (CNVD-2021-30193)

Shipping 100 Virtual Goods Autoship System is a powerful virtual goods autoship system/article pay to read system. Shipping 100 Virtual Goods Autoship System suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in Shining Shipping 100 Virtual Goods Auto-Shipping System

Shipping 100-Virtual Goods Autoship System is a powerful virtual goods autoship system/article pay to read system. Shipping 100 Virtual Goods Autoship System suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

Sensitive data from US shipping management software firm exposed online

By Habiba Rashid In total, 103 GB worth of data belonging to New Jersy based Descartes Aljex Software was left exposed on a misconfigured AWS S3 Bucket. This is a post from HackRead.com Read the original post: Sensitive data from US shipping management software firm exposed online...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS. GET /checkout/shippingrates crashes the server when checkout step has already advanced from Delivery step using the web. Server crashes and needs to be restarted. Details Denial of Service DoS describes a family o...

File Upload Vulnerability in Shipping 100 Virtual Goods Autoship System

Shipping 100 Virtual Goods Autoship System is a virtual goods autoship system/article pay to read system. A file upload vulnerability exists in the Ship 100 Virtual Goods Autoship System. An attacker can exploit this vulnerability to gain server privileges...

SQL Injection Vulnerability in Shipping 100 Virtual Goods Autoship System T1

Shipping 100-Virtual Goods Auto-Shipping System is a powerful virtual goods automatic shipping system/article pay to read the system, without manual supervision, customers can buy online to automatically complete the transaction. There is a SQL injection vulnerability in T1 of Shipment100 Virtual...

Prestashop Input Validation Error Vulnerability

Prestashop is a set of open source e-commerce solutions from the United States Prestashop. The solution provides multiple payment methods, short message alerts and product image scaling. An input validation error vulnerability exists in Prestashop Opart devis prior to version 4.0.2, which allows ...