278 matches found
impressivefreight.com Cross Site Scripting vulnerability OBB-1262536
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Trailer Power Line Communications
1. EXECUTIVE SUMMARY CVSS v3 4.3 Vendor: Multiple Trailer and Brake Manufacturers Equipment: Power Line Communications Bus / PLC4TRUCKS / J2497 Vulnerability: Exposure of Sensitive Information Through Sent Data 2. RISK EVALUATION The National Motor Freight Traffic Association NMFTA and Assured...
Logic flaws exist in the network freight service platform of Jiangsu Material Run Shiplink Network Co.
Ltd.'s network freight service platform can meet the business needs of new carriers and provide personalized functions such as QR code for private cargo sources. There is a logic flaw vulnerability in the network freight service platform of Jiangsu Material Runnings Shipping Union Network Co., Lt...
WordPress Baggage Freight Shipping Australia plugin 0.1.0 - Unauthenticated Arbitrary File Upload vulnerability
Unauthenticated Arbitrary File Upload vulnerability found by Kaimi in WordPress Baggage Freight Shipping Australia plugin version 0.1.0. Solution 08.01.2019 - we were unable to find a patched version of this plugin...
WordPress Plugin Baggage Freight Shipping Australia Arbitrary File Upload Vulnerability
WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. An arbitrary file upload vulnerability exists in the WordPress plugin Baggage Freight Shipping Australia. Allows an attacker ...
WordPress Baggage Freight Shipping Australia 0.1.0 Plugin - Arbitrary File Upload
Exploit for php platform in category web applications Exploit Title: WordPress Plugin Baggage Freight Shipping Australia 0.1.0 - Arbitrary File Upload Software Link: https://wordpress.org/plugins/baggage-freight/ Exploit Author: Kaimi Website: https://kaimi.io Version: 0.1.0 Category: webapps...
WordPress Plugin Baggage Freight Shipping Australia 0.1.0 - Arbitrary File Upload
WordPress Plugin Baggage Freight Shipping Australia 0.1.0 - Arbitrary File Upload Exploit Title: WordPress Plugin Baggage Freight Shipping Australia 0.1.0 - Arbitrary File Upload Date: 2018-12-24 Software Link: https://wordpress.org/plugins/baggage-freight/ Exploit Author: Kaimi Website:...
WordPress Plugin Baggage Freight Shipping Australia 0.1.0 - Arbitrary File Upload
Exploit Title: WordPress Plugin Baggage Freight Shipping Australia 0.1.0 - Arbitrary File Upload Date: 2018-12-24 Software Link: https://wordpress.org/plugins/baggage-freight/ Exploit Author: Kaimi Website: https://kaimi.io Version: 0.1.0 Category: webapps Unrestricted file upload for unahtorized...
WordPress Baggage Freight Shipping Australia 0.1.0 Shell Upload
Exploit Title: WordPress Plugin Baggage Freight Shipping Australia 0.1.0 - Arbitrary File Upload Date: 2018-12-24 Software Link: https://wordpress.org/plugins/baggage-freight/ Exploit Author: Kaimi Website: https://kaimi.io Version: 0.1.0 Category: webapps Unrestricted file upload for unahtorized...
CVE-2018-19340
Guriddo Form PHP 5.3 has XSS via the demos/jqform/defaultnodb/default.php OrderID, ShipName, ShipAddress, ShipCity, ShipPostalCode, ShipCountry, Freight, or details parameter...
CVE-2018-19340
Guriddo Form PHP 5.3 has XSS via the demos/jqform/defaultnodb/default.php OrderID, ShipName, ShipAddress, ShipCity, ShipPostalCode, ShipCountry, Freight, or details parameter...
Threat Outbreak Alert RuleID33085: Email Messages Distributing Malicious Software on July 3, 2018
Medium Alert ID: 58337 First Published: 2018 July 3 15:33 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID33085 may contain the following files: Name | Size...
better-freight.co.th XSS vulnerability
Open Bug Bounty ID: OBB-332312 Description| Value ---|--- Affected Website:| better-freight.co.th Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Threat Outbreak Alert RuleID30473: Email Messages Distributing Malicious Software on September 1, 2017
Medium Alert ID: 55021 First Published: 2017 September 1 16:56 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30473 may contain the following files: Name |...
Threat Outbreak Alert RuleID30191: Email Messages Distributing Malicious Software on August 14, 2017
Medium Alert ID: 54837 First Published: 2017 August 14 15:17 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30191 may contain the following files: Name |...
aar.org XSS vulnerability
Open Bug Bounty ID: OBB-248538 Description| Value ---|--- Affected Website:| aar.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
SQL injection vulnerability in the SHREF_NO parameter of PSTAR Freight Information Management System of Yinglian Logistics Technology (Shanghai) Co.
PSTAR Logistics Management System V4.0 is a logistics system. There is a SQL injection vulnerability in the SHREFNO parameter of the PSTAR Freight Information Management System of Yinglian Logistics Technology Shanghai Co: http://target/bill/billq.aspx, an attacker can use the vulnerability to...
shop.harborfreight.com XSS vulnerability
Vulnerable URL: https://shop.harborfreight.com/catalogsearch/result?q="';-- Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 09:37 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google...