Modern POS 1.3 - Arbitrary File Download Vulnerability

Exploit for php platform in category web applications Exploit Title: Modern POS 1.3 - Arbitrary File Download Exploit Author: Ihsan Sencan Vendor Homepage: http://itsolution24.com/ Software Link: https://codecanyon.net/item/modern-pos-point-of-sale-with-stock-management-system/22702683 Version: 1...

Flaw in Twitter form may have been abused by nation states

Twitter announced in a blog post on Monday that they discovered and addressed a security flaw on one of their support forms. The discovery was made on November 15 — more than a month ago — and was promptly fixed the next day. From the Twitter blog on this issue: We have become aware of an issue...

The Market of Billions -- Are You Prepared For The Peaks?

Yes, we truly are the market of billions! I love Graham D. Brown's distinctive representation of this massive business opportunity in South Asia in his Asia Matters report. In 2018, over 50% of the world's total online retail sales happened in the Asia-Pacific region. eMarketer reports that onlin...

londonstockexchange.com XSS vulnerability

Open Bug Bounty ID: OBB-676063 Description| Value ---|--- Affected Website:| londonstockexchange.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

alu-stock.es XSS vulnerability

Open Bug Bounty ID: OBB-657323 Description| Value ---|--- Affected Website:| alu-stock.es Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

SLiMS 8 Akasia Stock Take Module Cross-Site Scripting Vulnerability

SLiMS 8 Akasia is an open source, free library management system.Stock Take module is one of the book inventory statistics module. A cross-site scripting vulnerability exists in the Stock Take module in SLiMS 8 Akasia version 8.3.1. A remote attacker can use...

CVE-2018-12658

Reflected Cross-Site Scripting XSS exists in the Stock Take module in SLiMS 8 Akasia 8.3.1 via an admin/modules/stocktake/index.php?keywords= URI...

CVE-2018-12658

Reflected Cross-Site Scripting XSS exists in the Stock Take module in SLiMS 8 Akasia 8.3.1 via an admin/modules/stocktake/index.php?keywords= URI...

CVE-2018-12658

Reflected Cross-Site Scripting XSS exists in the Stock Take module in SLiMS 8 Akasia 8.3.1 via an admin/modules/stocktake/index.php?keywords= URI...

CVE-2018-12658

Reflected Cross-Site Scripting XSS exists in the Stock Take module in SLiMS 8 Akasia 8.3.1 via an admin/modules/stocktake/index.php?keywords= URI...

PT-2018-11313

Name of the Vulnerable Software and Affected Versions SLiMS version 8.3.1 Description A Reflected Cross-Site Scripting XSS issue exists in the Stock Take module. This can be exploited via the /admin/modules/stock take/index.php?keywords= API endpoint, specifically through the keywords variable...

CVE-2018-12658: Improper Neutralization of Input During Web Page Generation

Reflected Cross-Site Scripting XSS exists in the Stock Take module in SLiMS 8 Akasia 8.3.1 via an admin/modules/stocktake/index.php?keywords= URI...

Confirmed—Microsoft Buys GitHub For $7.5 Billion

Here's the biggest news of the week—Microsoft has reportedly acquired GitHub for $7.5 billion. For those unaware, GitHub is a popular code repository hosting service that allows developers to host their projects, documentation, and code in the cloud using the popular Git source management system,...

online-stock-exchange.com XSS vulnerability

Open Bug Bounty ID: OBB-618803 Description| Value ---|--- Affected Website:| online-stock-exchange.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

stock-bureau.fr XSS vulnerability

Open Bug Bounty ID: OBB-605415 Description| Value ---|--- Affected Website:| stock-bureau.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

stock-channel.net XSS vulnerability

Open Bug Bounty ID: OBB-605407 Description| Value ---|--- Affected Website:| stock-channel.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Hyperbole Swirls Around AMD Processor Security Threat

Maybe it was the exaggerated threats against AMD’s business or the semi-unprofessional way the threats were brought to light but no matter — security start-up CTS-Labs claims of security holes in the chipmaker’s Ryzen and Epic processor lines are now being lambasted across the security community...

stock-garden.co.il XSS vulnerability

Open Bug Bounty ID: OBB-577970 Description| Value ---|--- Affected Website:| stock-garden.co.il Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Posnic Stock Management System - SQL Injection Exploit

Exploit for php platform in category web applications --==IndiSh3LL==-- body font-family: Tahoma; color: white; background: 444444; input border : solid 2px ; border-color : black; BACKGROUND-COLOR: 444444; font: 8pt Verdana; color: white; submit BORDER: buttonhighlight 2px outset;...

Security Breaches Don't Affect Stock Price

Interesting research: "Long-term market implications of data breaches, not," by Russell Lange and Eric W. Burger. Abstract: This report assesses the impact disclosure of data breaches has on the total returns and volatility of the affected companies' stock, with a focus on the results relative to...