The vulnerability of the CRM User Management Framework component of the Oracle Common Applications application in the Oracle E-Business Suite system, which allows a perpetrator to gain unauthorized access to protected information or to modify, add, or delete data.

The vulnerability of the CRM User Management Framework component of the Oracle Common Applications application in the Oracle E-Business Suite exists due to insufficient verification of input data. Exploiting this vulnerability can allow an attacker who operates remotely to gain unauthorized acces...

The vulnerability of the Wireless component of the Oracle Field Service software solution from the Oracle E-Business Suite allows a perpetrator to gain access to and modify data.

The vulnerability of the Wireless component of the Oracle Field Service software in the Oracle E-Business Suite exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to read, modify, add, or delete data...

The vulnerability of the BI Publisher Security component of the Oracle BI Publisher reporting tool, a software platform of Oracle Fusion Middleware, allows a malicious individual to execute arbitrary code and gain full control over the application.

The vulnerability of the E-Business Suite component XDO, a reporting tool within the Oracle BI Publisher software from Oracle Fusion Middleware, is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely and gain full...

The vulnerability of the E-Business Suite component – XDO, a software tool for creating reports within the Oracle BI Publisher software platform of the Oracle Fusion Middleware – allows a malicious individual to execute arbitrary code and gain full control over the application.

The vulnerability of the E-Business Suite component – XDO, a software tool for creating reports within the Oracle BI Publisher and the Oracle Fusion Middleware software platform – is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute...

The vulnerability of the Authorization sub-component of the Oracle Public Sector Financials (International) component of the Oracle E-Business Suite allows a perpetrator to gain unauthorized access to protected information or to modify, add, or delete data.

The vulnerability of the Authorization sub-component of the Oracle Public Sector Financials International component of the Oracle E-Business Suite exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized...

Gamification of Ethical Hacking and Hacking Esports

While ethical hacking is by no means a new or groundbreaking practice, the scale at which organizations and individuals are undertaking such initiatives continues to intensify, especially considering recent events such as the log4j vulnerability. Traditionally, ethical hacking is undertaken by...

Newly Discovered Magecart Infrastructure Reveals the Scale of Ongoing Campaign

A newly discovered Magecart skimming campaign has its roots in a previous attack activity going all the way back to November 2021. To that end, it has come to light that two malware domains identified as hosting credit card skimmer code — "scanalytic.org" and "js.staticounter.net" — are part of a...

Malicious code in e-openflow (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0db8ce24dae85dfa6a8362d73334309e0f9e526850a978189696477fce4d6bf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2640 Malicious code in e-openflow (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0db8ce24dae85dfa6a8362d73334309e0f9e526850a978189696477fce4d6bf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-221 Malicious code in @e-finance/e-finance-tms-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 699d70f7539e2ca2a7c611b3efdf3a3476cf035fcb60c860b581acb445e290fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-222 Malicious code in @e-finance/e-finance-tms-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d138592e7b0a8144ae81a749be39c4091cbb2b5f0a56f81bd5dd3e9b5e96795e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2639 Malicious code in e-finance-tms-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cfc86d38fb345a59766dbd667acd1232dad2d6a729e29bba3d06833e5d7d2aca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in e-finance-tms-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cfc86d38fb345a59766dbd667acd1232dad2d6a729e29bba3d06833e5d7d2aca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

OPENSUSE-SU-2022:10018-1 Security update for atheme

This update for atheme fixes the following issues: atheme was updated to release 7.2.12: CVE-2022-24976: Fixed General authentication bypass in Atheme IRC services with InspIRCd 3 boo1195989 Track SASL login EID Update to release 7.2.11 Add a preliminary Turkish translation Add HMAC-MD5 verify-on...

The vulnerability of the Attachments/File Upload sub-component of the Oracle Applications Framework in the Oracle E-Business Suite allows a perpetrator to modify data or gain unauthorized access to protected information.

The vulnerability of the Attachments/File Upload sub-component of the Oracle Applications Framework in the Oracle E-Business Suite exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker, operating remotely, to modify data or gain unauthorized access ...

The vulnerability of the SDK client integration component of the Oracle Advanced Outbound Telephony component of the Oracle E-Business Suite allows a malicious actor to gain access to read, modify, add, or delete data.

The vulnerability of the SDK client integration component of the Oracle Advanced Outbound Telephony component of the Oracle E-Business Suite exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to read,...

The vulnerability of the Marketing Administration sub-component of the Oracle Marketing component in the Oracle E-Business Suite system allows a malicious actor to gain read access to data and modify it.

The vulnerability of the Marketing Administration sub-component of the Oracle Marketing component in the Oracle E-Business Suite exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to read, modify, add, or...

e-e.ad Cross Site Scripting vulnerability OBB-2653631

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Lógico y Creativo SQL Injection Vulnerability

Lógico y Creativo is an e-commerce service from Lógico y Creativo Argentina. version 1.0 of Lógico y Creativo is vulnerable to SQL injection, which can be exploited by attackers to manipulate parameter ids to cause sql injection problems...

The vulnerability of the E-signatures sub-component of the Oracle E-Records component of the Oracle E-Business Suite system, which allows a violator to gain access to and modify data.

The vulnerability of the E-signatures sub-component of the Oracle E-Records component in the Oracle E-Business Suite exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to read, modify, add, or delete data...