AIS Logistics ESEL-Server SQL Injection / Code Execution Exploit

This Metasploit module will execute an arbitrary payload on an "ESEL" server used by the AIS logistic software. The server typically listens on port 5099 without TLS. There could also be server listening on 5100 with TLS but the port 5099 is usually always open. The login process is vulnerable to...

AIS logistics ESEL-Server - Unauthenticated SQL Injection Remote Code Execution (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'AIS logistics ESEL-Server Unauth SQL Injection RCE', 'Description' = %q This module will execute an arbitrary payload on an "ESEL" server used by...

AIS Logistics ESEL-Server SQL Injection / Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'AIS logistics ESEL-Server Unauth SQL Injection RCE', 'Description' = %q This module will execute an arbitrary payload on an "ESEL" server used by...

AIS logistics ESEL-Server Unauth SQL Injection RCE

This module will execute an arbitrary payload on an "ESEL" server used by the AIS logistic software. The server typically listens on port 5099 without TLS. There could also be server listening on 5100 with TLS but the port 5099 is usually always open. The login process is vulnerable to an SQL...

shop-logistics.ru XSS vulnerability

Open Bug Bounty ID: OBB-710628 Description| Value ---|--- Affected Website:| shop-logistics.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidde...

logisticshandling.com XSS vulnerability

Open Bug Bounty ID: OBB-709947 Description| Value ---|--- Affected Website:| logisticshandling.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...

Compromising vital infrastructure: transport and logistics

Back when I was a dispatcher for a courier and trucking company, we used to joke that it only took a few strategically-placed accidents to cause a traffic jam that could completely stop circulation around the city of Rotterdam. Rotterdam is one of the major ports in the world and consequently,...

Universal Password Login Vulnerability in Rongda's Backend Logistics Support System

Ltd. is a large-scale catering industry application software development and system integration as the core, while engaging in advanced management software development, sales, consulting, computer supplies, accessories and electronic products sales of high-tech industry companies. A universal...

SQL Injection Vulnerability in xycms Logistics and Transportation System v1.9

Jiangsu Xinyue Technology hereinafter referred to as "Xinyue Technology", a pioneer in the domestic website building industry, is a technology enterprise with independent intellectual property rights. xycms logistics and transportation company website building system v1.9 SQL injection...

Threat Outbreak Alert RuleID32811: Email Messages Distributing Malicious Software on May 23, 2018

Medium Alert ID: 57940 First Published: 2018 May 23 16:58 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32811 may contain the following files: Name | Size...

jit.championlogisticsgroup.com XSS vulnerability

Open Bug Bounty ID: OBB-613299 Description| Value ---|--- Affected Website:| jit.championlogisticsgroup.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Hackers Behind Healthcare Espionage Infect X-Ray and MRI Machines

Security researchers have uncovered a new hacking group that is aggressively targeting healthcare organizations and related sectors across the globe to conduct corporate espionage. Dubbed "Orangeworm," the hacking group has been found installing a wormable trojan on machines hosting software used...

Threat Outbreak Alert RuleID31991: Email Messages Distributing Malicious Software on February 13, 2018

Medium Alert ID: 56799 First Published: 2018 February 13 16:13 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31991 may contain the following files: Name |...

sinotrans-logistics.com XSS vulnerability

Open Bug Bounty ID: OBB-548787 Description| Value ---|--- Affected Website:| sinotrans-logistics.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated...

logisticsworkforce.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-347563 Description| Value ---|--- Affected Website:| logisticsworkforce.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Cloud Storage Privilege Leakage Vulnerability in Ropeway APP

Rookie Shao Shao is an application that provides the ability to check and send express delivery. A cloud storage access leakage vulnerability exists in the app. Due to the use of AliCloudoss, accessKeyId and accessKeySecret are built into the mobile application, resulting in credential leakage. A...

Struts2 S2-016 Remote Command Execution Vulnerability in Shenzhen Huan Yu Huan Tong Logistics Website Management System

Shenzhen HuanYuHuTong Logistics Website Management System is a logistics website management system developed and maintained by HuanYuHuTong Information Technology Co. Shenzhen HuanYuHuTong logistics website management system uses Apache Struts xwork as the website application framework, due to th...

portal.vanguardlogistics.com XSS vulnerability

Vulnerable URL: https://portal.vanguardlogistics.com/apps/dashboard/?reqir=';%3C/script%3E%3Cscript%3Ealert'OPENBUGBOUNTY';%3C/script%3E%3Cscript%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

SQL injection vulnerability in the SHREF_NO parameter of PSTAR Freight Information Management System of Yinglian Logistics Technology (Shanghai) Co.

PSTAR Logistics Management System V4.0 is a logistics system. There is a SQL injection vulnerability in the SHREFNO parameter of the PSTAR Freight Information Management System of Yinglian Logistics Technology Shanghai Co: http://target/bill/billq.aspx, an attacker can use the vulnerability to...

Threat Outbreak Alert RuleID23837: Email Messages Distributing Malicious Software on July 14, 2016

Medium Alert ID: 47082 First Published: 2016 July 14 19:32 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID23837 may contain the following files: Name | Siz...