Threat Outbreak Alert RuleID30706: Email Messages Distributing Malicious Software on September 21, 2017

Medium Alert ID: 55356 First Published: 2017 September 21 13:13 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30706 may contain the following files: Name ...

Threat Outbreak Alert RuleID30698: Email Messages Distributing Malicious Software on September 19, 2017

Medium Alert ID: 55336 First Published: 2017 September 19 16:10 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30698 may contain the following files: Name ...

Online Invoice System 3.0 SQL Injection

Exploit Title: Online Invoice System 3.0 - SQL Injection Dork: N/A Date: 07.09.2017 Vendor Homepage: http://www.onlineinvoicesystem.com/ Software Link: http://www.onlineinvoicesystem.com/indexv3.html Demo: http://www.onlineinvoicesystem.com/onlineinvoicesystem3/index.php Version: 3.0 Category:...

EzInvoice 6.02 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: EzInvoice - Invoice Management System 6.0.2 - SQL Injection Dork: N/A Date: 07.09.2017 Vendor Homepage: http://www.mysticdreams.net/ Software Link: http://www.mysticdreams.net/resources/ezinvoicedemo.zip Demo:...

EzInvoice 6.02 - SQL Injection

EzInvoice 6.02 - SQL Injection Exploit Title: EzInvoice - Invoice Management System 6.0.2 - SQL Injection Dork: N/A Date: 07.09.2017 Vendor Homepage: http://www.mysticdreams.net/ Software Link: http://www.mysticdreams.net/resources/ezinvoicedemo.zip Demo:...

Online Invoice System 3.0 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Online Invoice System 3.0 - SQL Injection Dork: N/A Date: 07.09.2017 Vendor Homepage: http://www.onlineinvoicesystem.com/ Software Link: http://www.onlineinvoicesystem.com/indexv3.html Demo:...

Online Invoice System 3.0 - SQL Injection

Online Invoice System 3.0 - SQL Injection Exploit Title: Online Invoice System 3.0 - SQL Injection Dork: N/A Date: 07.09.2017 Vendor Homepage: http://www.onlineinvoicesystem.com/ Software Link: http://www.onlineinvoicesystem.com/indexv3.html Demo:...

EzInvoice 6.02 - SQL Injection

Exploit Title: EzInvoice - Invoice Management System 6.0.2 - SQL Injection Dork: N/A Date: 07.09.2017 Vendor Homepage: http://www.mysticdreams.net/ Software Link: http://www.mysticdreams.net/resources/ezinvoicedemo.zip Demo: http://www.mysticdreams.net/products/ezinvoice/ Version: 6.0.2 Category:...

Online Invoice System 3.0 - SQL Injection

Exploit Title: Online Invoice System 3.0 - SQL Injection Dork: N/A Date: 07.09.2017 Vendor Homepage: http://www.onlineinvoicesystem.com/ Software Link: http://www.onlineinvoicesystem.com/indexv3.html Demo: http://www.onlineinvoicesystem.com/onlineinvoicesystem3/index.php Version: 3.0 Category:...

Threat Outbreak Alert RuleID30447: Email Messages Distributing Malicious Software on September 4, 2017

Medium Alert ID: 55099 First Published: 2017 September 5 15:00 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30447 may contain the following files: Name |...

Invoice Manager 3.1 - Cross-Site Request Forgery (Add Admin)

Invoice Manager 3.1 - Cross-Site Request Forgery Add Admin ======================================================== Invoice Manager v3.1 Cross site request forgery Add Admin Description : Invoice Manager v3.1 is vulnerable to CSRF attack No CSRF token in place which if an admin user can be tricke...

Invoice Manager 3.1 - Cross-Site Request Forgery (Add Admin)

======================================================== Invoice Manager v3.1 Cross site request forgery Add Admin Description : Invoice Manager v3.1 is vulnerable to CSRF attack No CSRF token in place which if an admin user can be tricked to visit a crafted URL created by attacker via spear...

Threat Outbreak Alert RuleID29694: Email Messages Distributing Malicious Software on July 6, 2017

Medium Alert ID: 54425 First Published: 2017 July 6 17:06 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29694 may contain the following files: Name | Size...

Oracle Retail Invoice Matching Information Disclosure Vulnerability

Oracle Retail Applications is a suite of retail applications store solutions from Oracle Corporation, of which Oracle Retail Invoice Matching is a component with retail invoice amount matching functionality, and Security is a security subcomponent. An information disclosure vulnerability exists i...

InvoicePlane 1.4.10 File Upload / Cross Site Scripting Vulnerabilities

InvoicePlane version 1.4.10 suffers from cross site scripting and remote file upload vulnerabilities. title: Arbitrary File Upload & Stored XSS product: InvoicePlane vulnerable version: 1.4.10 fixed version: 1.5.2 CVE number: - impact: High homepage: https://invoiceplane.com/ found: 2017-04-10 by...

Threat Outbreak Alert RuleID29182: Email Messages Distributing Malicious Software on May 19, 2017

Medium Alert ID: 53899 First Published: 2017 May 20 03:07 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29182 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID29123: Email Messages Distributing Malicious Software on May 15, 2017

Medium Alert ID: 53833 First Published: 2017 May 15 20:01 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29123 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID29034: Email Messages Distributing Malicious Software on May 9, 2017

Medium Alert ID: 53778 First Published: 2017 May 9 19:51 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29034 may contain the following files: Name | Size ...

Threat Outbreak Alert RuleID28887: Email Messages Distributing Malicious Software on April 25, 2017

Medium Alert ID: 53564 First Published: 2017 April 25 15:39 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28887 may contain the following files: Name | Si...

CVE-2017-3254

Vulnerability in the Oracle Retail Invoice Matching component of Oracle Retail Applications subcomponent: Security. Supported versions that are affected are 12.0 and 13.0. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Retail...