CVE-2018-2724

Vulnerability in the Oracle Financial Services Loan Loss Forecasting and Provisioning component of Oracle Financial Services Applications subcomponent: User Interface. The supported version that is affected is 8.0.x. Easily exploitable vulnerability allows low privileged attacker with network...

CVE-2018-2712

Vulnerability in the Oracle Financial Services Loan Loss Forecasting and Provisioning component of Oracle Financial Services Applications subcomponent: User Interface. The supported version that is affected is 8.0.x. Easily exploitable vulnerability allows unauthenticated attacker with network...

CVE-2018-2724

Vulnerability in the Oracle Financial Services Loan Loss Forecasting and Provisioning component of Oracle Financial Services Applications subcomponent: User Interface. The supported version that is affected is 8.0.x. Easily exploitable vulnerability allows low privileged attacker with network...

CVE-2018-2712

The CVE-2018-2712 entry concerns Oracle Financial Services Applications – Loan Loss Forecasting and Provisioning, UI subcomponent, affected in 8.0.x. The issue is described as an unauthenticated, network-accessible vulnerability in the User Interface that requires human interaction and can lead t...

Arbitrary User Registration and Arbitrary User Password Reset Vulnerabilities in Loan Plus Plus App

Loan Plus Plus App is a loan software platform. The Loan Plus Plus APP is vulnerable to arbitrary user registration and arbitrary user password reset. An attacker can register any user and reset any password by capturing the verification code in a packet...

Lend a Little Loan App Has Arbitrary User Registration Vulnerability

Lend a little with a loan app is an emergency loan platform. There is an arbitrary user registration vulnerability in Lend a Little with Loan APP. Attackers can register any account by grabbing packets and blasting CAPTCHA...

business.natwest.com XSS vulnerability

Vulnerable URL: https://www.business.natwest.com/business/business-lending-at-natwest/small-business-loan.htmltab= Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 15.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

tuckerbloomington.com XSS vulnerability

Vulnerable URL: http://www.tuckerbloomington.com/Public/Calculator/MortgageLoan.asp?Amount=1"...

swedbank.se XSS vulnerability

Vulnerable URL: https://www.swedbank.se/privat/privatlan-och-krediter/lana-till-bil/index.htm?formsubmittedok=CID1565612'...

Онлайн займ на карту за 5 мин - Customized SSL, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Онлайн займ на карту за 5 мин published at the 'play' market has multiple vulnerabilities...

IRS Announces Safeguards to Protect Taxpayer Information

The Internal Revenue Service IRS has issued two news releases addressing new safeguards to protect taxpayers and strengthen authentication requirements. The electronic filing e-File PIN, an alternative signature verification tool used to assist with electronic tax filing, will no longer be...

iLoan大型P2P借贷系统_articleview_page_article_id注入

No description provided by source...

Dswjcms Win/Index/loanAjax.html,Loan/loanAjax.html 两处SQL注入

No description provided by source...

Easy loan calculator - Dynamic Code Loading, External URLs, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Easy loan calculator published at the 'play' market has multiple vulnerabilities...

Loan Calculator IQ - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Loan Calculator IQ published at the 'play' market has multiple vulnerabilities...

Loan Calculator - Customized SSL, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Loan Calculator published at the 'play' market has multiple vulnerabilities...

Department of Education Lambasted Over Database Vulnerabilities

Like the Office of Personnel Management before it, the Department of Education has failed to heed repeated warnings that its systems contain multiple weaknesses. In a House Committee on Oversight and Government Reform hearing held this week, Congressman and committee chair Jason Chaffetz R-Utah...

帝友P2C借贷系统前台getshell#1

简要描述： 帝友P2C借贷系统前台getshell1 详细说明： 这次是帝友公司旗下出的另一套电子商务cms 不是帝友p2p！ 官方最新版本是 帝友P2C借贷系统V1.01 上传头像处存在getshell 已官方演示站做演示 已注册账号，账号密码都是test1a 访问 http://p2c.diyou.cc/?user&m=approve/safe 上传头像，抓包 修改数据包，插入一句话木马，修改后缀为php后缀 虽然回显500，但是phpshell已经上传了 dyupfiles/avatar/diyou/用户id.php 得到...

Threat Outbreak Alert: Fake Loan Offer Email Messages on June 14, 2013

Medium Alert ID: 29674 First Published: 2013 June 17 11:46 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a loan offer for the recipient. The text in the email message attempts to convince the recipient to open the...

Fortune Favors the Bold? Man Steals Microsoft Founder's Identity, Credit Card

When one Pennsylvanian man couldn’t foot his bills, he opted to steal the identity of someone that could – one of the world’s richest men, Microsoft co-founder and billionaire Paul Allen. An AWOL solider from Pittsburgh swiped Allen’s Citibank credit card account information earlier this year to...