PT-2020-2307

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Description The issue is related to inadequate access control in the Estimate and Actual Charges component of Oracle Depot Repair, allowing an unauthenticated attacker with network access...

PT-2020-2306

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Description The issue is related to inadequate access controls in the Estimate and Actual Charges component of Oracle Depot Repair. It allows an unauthenticated attacker with network acces...

PT-2020-2310

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Description The issue is related to inadequate access control in the Estimate and Actual Charges component of Oracle Depot Repair, allowing an unauthenticated attacker with network access...

PT-2020-2309

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Description The issue is related to inadequate access controls in the Estimate and Actual Charges component of Oracle Depot Repair. It allows an unauthenticated attacker with network acces...

PT-2020-2305

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Description The issue is related to inadequate access controls in the Estimate and Actual Charges component of Oracle Depot Repair, allowing an unauthenticated attacker with network access...

PT-2020-2313

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Description The issue is related to inadequate access control in the Estimate and Actual Charges component of Oracle Depot Repair. It allows an unauthenticated attacker with network access...

customexchangeinc.com XSS vulnerability

Vulnerable URL: http://www.customexchangeinc.com/estimate.php?estimateid=1"...

Invoice & Estimate Invoice2go - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Invoice & Estimate Invoice2go published at the 'play' market has multiple vulnerabilities...

Invoice & Estimate on the Go - Customized SSL, Insecure KeyStore, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Invoice & Estimate on the Go published at the 'play' market has multiple vulnerabilities...

WordPress Plugin WP-Client 3.8.7 - Persistent Cross-Site Scripting

WordPress Plugin WP-Client 3.8.7 - Persistent Cross-Site Scripting Application: WP-Client Version: 3.8.7 Author: Pier-Luc Maltais from COSIG Twitter: @COSIG 1 Introduction 2 Report Timeline 3 Technical details 4 POC =============== 1 Introduction =============== One plugin configures multiple are...

Multiple libtiff flaws (CVE-2006-3460 CVE-2006-3461 CVE-2006-3462 CVE-2006-3463 CVE-2006-3464 CVE-2006-3465)

The EstimateStripByteCounts function in TIFF library libtiff before 3.8.2 uses a 16-bit unsigned short when iterating over an unsigned 32-bit value, which allows context-dependent attackers to cause a denial of service via a large tdnstrips value, which triggers an infinite loop...