CVE-2018-2709

Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications subcomponent: Core module. Supported versions that are affected are 12.3.0 and 12.4.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2018-2709

CVE-2018-2709 affects the Oracle Banking Corporate Lending Core module of Oracle Financial Services Applications , with impacted versions 12.3.0 and 12.4.0 . The vulnerability allows a low-privileged attacker with network access via HTTP to compromise data confidentiality, per CVSSv3.0 base score...

CVE-2018-2709

Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications subcomponent: Core module. Supported versions that are affected are 12.3.0 and 12.4.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2018-2706

Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications subcomponent: Core module. Supported versions that are affected are 12.3.0 and 12.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromi...

CVE-2018-2707

The CVE-2018-2707 entry describes a vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (Core module). Affected versions are 12.3.0 and 12.4.0. The flaw allows a low-privileged attacker with network access via HTTP to compromise Oracle Banking...

CVE-2018-2707

Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications subcomponent: Core module. Supported versions that are affected are 12.3.0 and 12.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromi...

SQL Injection Vulnerability in Diyou p2p Lending System V4.1

Diyou P2P lending system is a cloud-based p2p lending system, p2p lending program software and online financial investment system. A SQL injection vulnerability exists in emperor friend p2p lending system V4.1, the vulnerability is due to the program failing to effectively filter the data submitt...

openroadlending.com XSS vulnerability

Open Bug Bounty ID: OBB-388607 Description| Value ---|--- Affected Website:| openroadlending.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Che...

Lending And Borrowing - pid Parameter SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Lending And Borrowing Script - SQL Injection Dork: N/A Date: 22.09.2017 Vendor Homepage: http://www.i-netsolution.com/ Software Link: http://www.i-netsolution.com/product/lending-borrowing-script/ Demo:...

mycashvalley.com XSS vulnerability

Vulnerable URL: https://www.mycashvalley.com/lending-policy.php?k=1/-///'/"//--...

Auto Lender Exposes Loan Data For Up To 1 Million Applicants

A California auto loan company left the names, addresses, credit scores and partial Social Security numbers of up to 1 million people exposed on an insecure online database. The company behind the database is Alliance Direct Lending Corporation, according to Kromtech Security Research Center, whi...

绿麻雀 p2p网贷系统sql注入漏洞

No description provided by source...

Multiple SQL Injection Vulnerabilities in Moneybookers Online Lending System

The P2P P2B/P2C network lending platform software is a comprehensive network lending business management system designed and developed for a variety of microfinance network lending models including P2P, P2B/P2C business models. There are multiple SQL injection vulnerabilities in the Moneybookers...

CVE-2014-7769

The Accurate Lending aka com.soln.S7B193908AEA1937C7CBB4E889A46D3C0 application 1.0021.b0021 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Accurate Lending aka com.soln.S7B193908AEA1937C7CBB4E889A46D3C0 application 1.0021.b0021 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7769

CVE-2014-7769 affects The Accurate Lending Android app (package com.soln.S7B193908AEA1937C7CBB4E889A46D3C0), version 1.0021.b0021, which does not verify X.509 certificates from SSL servers. This allows MITM attackers to spoof servers and access sensitive information via a crafted certificate. Per...

CVE-2014-7769

The Accurate Lending aka com.soln.S7B193908AEA1937C7CBB4E889A46D3C0 application 1.0021.b0021 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6940

The Absolute Lending Solutions aka com.soln.S008F6C05EC0B63264B429F6D76286562 application 1.0073.b0073 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Absolute Lending Solutions aka com.soln.S008F6C05EC0B63264B429F6D76286562 application 1.0073.b0073 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6940

CVE-2014-6940 : The Absolute Lending Solutions Android app (package com.soln.S008F6C05EC0B63264B429F6D76286562) version 1.0073.b0073 does not verify X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certifi...