Design/Logic Flaw

Vulnerability in the Oracle Retail Invoice Matching component of Oracle Retail Applications subcomponent: Security. Supported versions that are affected are 12.0 and 13.0. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Retail...

CVE-2017-3254

Vulnerability in the Oracle Retail Invoice Matching component of Oracle Retail Applications subcomponent: Security. Supported versions that are affected are 12.0 and 13.0. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Retail...

CVE-2017-3254

CVE-2017-3254 affects Oracle Retail Invoice Matching (Security subcomponent) in Oracle Retail Applications, versions 12.0 and 13.0. An unauthenticated network attacker with HTTP access can compromise the component; attacks require user interaction and may lead to unauthorized data access and data...

Harvest: Client can redirect payment, causing payment discrepancy between Harvest and PayPal

Vulnerability details When a client views an invoice through the web interface, it'll show a "Pay with PayPal" button when a standard PayPal integration has been enabled. Clicking this button will submit a POST request to PayPal. This request contains a business parameter, which is the receiver o...

Invoice Template - hash SQL Injection

Invoice Template - hash SQL Injection Exploit Title: Invoice Template v1.0 for PHPRunner/ASPRunnerPro/ASPRunner.NET. - SQL Injection Google Dork: N/A Date: 07.04.2017 Vendor Homepage: https://xlinesoft.com/ Software: https://xlinesoft.com/invoice Demo:...

Invoice Template - hash Parameter SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Invoice Template v1.0 for PHPRunner/ASPRunnerPro/ASPRunner.NET. - SQL Injection Google Dork: N/A Date: 07.04.2017 Vendor Homepage: https://xlinesoft.com/ Software: https://xlinesoft.com/invoice Demo:...

Invoice Template - 'hash' SQL Injection

Exploit Title: Invoice Template v1.0 for PHPRunner/ASPRunnerPro/ASPRunner.NET. - SQL Injection Google Dork: N/A Date: 07.04.2017 Vendor Homepage: https://xlinesoft.com/ Software: https://xlinesoft.com/invoice Demo: https://xlinesoft.com/livedemo/invoice/livedemo1/ Version: 1.0 Tested on: Win7 x64...

Threat Outbreak Alert RuleID28408: Email Messages Distributing Malicious Software on March 22, 2017

Medium Alert ID: 53118 First Published: 2017 March 22 14:47 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28408 may contain the following files: Name | Si...

Threat Outbreak Alert RuleID28368: Email Messages Distributing Malicious Software on March 16, 2017

Medium Alert ID: 53055 First Published: 2017 March 16 15:19 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28368 may contain the following files: Name | Si...

Car Workshop System - SQL Injection

Car Workshop System - SQL Injection Exploit Title: Car Workshop System - SQL Injection Google Dork: N/A Date: 13.03.2017 Vendor Homepage: http://prosoft-apps.com/ Software: https://codecanyon.net/item/car-workshop-system/19562074 Demo: http://workshop.prosoft-apps.com/ Version: N/A Tested on: Win...

Car Workshop System SQL Injection

Exploit Title: Car Workshop System - SQL Injection Google Dork: N/A Date: 13.03.2017 Vendor Homepage: http://prosoft-apps.com/ Software: https://codecanyon.net/item/car-workshop-system/19562074 Demo: http://workshop.prosoft-apps.com/ Version: N/A Tested on: Win7 x64, Kali Linux x64 Exploit Author...

Car Workshop System - SQL Injection

Exploit Title: Car Workshop System - SQL Injection Google Dork: N/A Date: 13.03.2017 Vendor Homepage: http://prosoft-apps.com/ Software: https://codecanyon.net/item/car-workshop-system/19562074 Demo: http://workshop.prosoft-apps.com/ Version: N/A Tested on: Win7 x64, Kali Linux x64 Exploit Author...

Threat Outbreak Alert RuleID28130: Email Messages Distributing Malicious Software on March 3, 2017

Medium Alert ID: 52877 First Published: 2017 March 3 17:17 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28130 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID28097: Email Messages Distributing Malicious Software on March 2, 2017

Medium Alert ID: 52856 First Published: 2017 March 2 19:50 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28097 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID27794: Email Messages Distributing Malicious Software on February 20, 2017

Medium Alert ID: 52693 First Published: 2017 February 21 14:59 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID27794 may contain the following files: Name |...

Threat Outbreak Alert RuleID27588: Email Messages Distributing Malicious Software on February 1, 2017

Medium Alert ID: 52503 First Published: 2017 February 1 14:06 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID27588 may contain the following files: Name |...

Threat Outbreak Alert RuleID27048: Email Messages Distributing Malicious Software on January 5, 2017

Medium Alert ID: 52260 First Published: 2017 January 5 17:45 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID27048 may contain the following files: Name |...

Fedora Update for trytond-account-invoice FEDORA-2016-d961441913

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Threat Outbreak Alert RuleID26464: Email Messages Distributing Malicious Software on November 22, 2016

Medium Alert ID: 49835 First Published: 2016 November 22 16:52 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID26464 may contain the following files: Name |...

Threat Outbreak Alert RuleID25321: Email Messages Distributing Malicious Software on October 21, 2016

Medium Alert ID: 49387 First Published: 2016 October 21 19:20 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID25321 may contain the following files: Name |...