CVE-2019-2763

CVE-2019-2763 affects Oracle Hospitality Gift and Loyalty component of Oracle Food and Beverage Applications, with affected versions 9.0.0 and 9.1.0. The vulnerability allows an unauthenticated, network-accessing attacker over HTTP to compromise data, granting unauthorized access to critical data...

CVE-2019-2763: Undefined Security Weakness

Vulnerability in the Oracle Hospitality Gift and Loyalty component of Oracle Food and Beverage Applications. Supported versions that are affected are 9.0.0 and 9.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Gif...

PT-2019-16475

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Gift and Loyalty versions 9.0.0 through 9.1.0 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Gift and Loyalty, resulting in unauthorized access to...

Reputation management in the age of cyberattacks against businesses

Avid readers of the Malwarebytes Labs blog would know that we strive to prepare businesses of all sizes for the inevitability of cyberattacks. From effectively training employees about basic cybersecurity hygiene to guiding organizations in formulating an incident response IR program, a...

Double-Stuffed: Dunkin’ Hit by Another Credential-Stuffing Attack

Dunkin’ Donuts may have just launched its first double-filled doughnut, but another doubling up is not quite as tasty. The chain has suffered its second credential-stuffing attack in three months. Like the first incident, the attack targeted pastry aficionados that have DD Perks accounts, which i...

Dunkin Donuts Perks loyalty data breach: Change your password

By Waqas Dunkin Donuts says it has suffered a data breach in which customer data of its DD Perks loyalty program may have been stolen - The DD Perk is a reward program for the company's regular customers. According to a now-inaccessible security advisory, Dunkin Donuts stated that the data breach...

ThreatList: 1 Out of 5 Would Ditch a Business After a Data Breach

About a fifth of Americans would ditch a business in the wake of a major data breach, new research has found. In a survey of 2,000 adult consumers across the United States by PCI Pal, almost half 44 percent of them have personally suffered the negative consequences of a security breach or hack. S...

Unspecified Vulnerability in Oracle Food and Beverage Applications Hospitality Gift and Loyalty Component

Oracle Food and Beverage Applications is a suite of food and beverage sales management solutions from Oracle Corporation, of which Hospitality Gift and Loyalty is one of the gift and membership components. An unspecified vulnerability exists in the Oracle Food and Beverage Applications Hospitalit...

CVE-2018-3131

Vulnerability in the Oracle Hospitality Gift and Loyalty component of Oracle Food and Beverage Applications. The supported version that is affected is 9.0. Easily exploitable vulnerability allows low privileged attacker having Report privilege with logon to the infrastructure where Oracle...

CVE-2018-3131

Vulnerability in the Oracle Hospitality Gift and Loyalty component of Oracle Food and Beverage Applications. The supported version that is affected is 9.0. Easily exploitable vulnerability allows low privileged attacker having Report privilege with logon to the infrastructure where Oracle...

Buffer overflow

Vulnerability in the Oracle Hospitality Gift and Loyalty component of Oracle Food and Beverage Applications. The supported version that is affected is 9.0. Easily exploitable vulnerability allows low privileged attacker having Report privilege with logon to the infrastructure where Oracle...

CVE-2018-3131

Vulnerability in the Oracle Hospitality Gift and Loyalty component of Oracle Food and Beverage Applications. The supported version that is affected is 9.0. Easily exploitable vulnerability allows low privileged attacker having Report privilege with logon to the infrastructure where Oracle...

CVE-2018-3131

CVE-2018-3131 affects Oracle Hospitality Gift and Loyalty in Oracle Food and Beverage Applications (component), with version 9.0 identified as affected. The vulnerability permits a low-privileged attacker with Report privilege and logon to the infrastructure running the Gift and Loyalty component...

CVE-2018-3131

Vulnerability in the Oracle Hospitality Gift and Loyalty component of Oracle Food and Beverage Applications. The supported version that is affected is 9.0. Easily exploitable vulnerability allows low privileged attacker having Report privilege with logon to the infrastructure where Oracle...

CVE-2018-3131: Undefined Security Weakness

Vulnerability in the Oracle Hospitality Gift and Loyalty component of Oracle Food and Beverage Applications. The supported version that is affected is 9.0. Easily exploitable vulnerability allows low privileged attacker having Report privilege with logon to the infrastructure where Oracle...

PT-2018-16039

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Gift and Loyalty version 9.0 Description The issue allows a low-privileged attacker with Report privilege and logon access to the infrastructure where Oracle Hospitality Gift and Loyalty is executed to compromise it. This ca...

You bet your mobile app consumers are willing to pay with their smartphone

For almost 10 years, there has been a debate over mobile app versus mobile web. Which strategy is right for your business and will consumers really ever buy something with a mobile device? Some of these questions have been clearly answered with time, but some aspects of the debate continue. The...

What financial service providers should know about blockchain: Opportunities and threats

It seems that every few years, an advanced and innovative new technology emerges and becomes the next big thing for organizations across different industries. Take the cloud and big data, for example - during their buzzword stage, these concepts were being attached to just about everything in the...

stylebop.com XSS vulnerability

Open Bug Bounty ID: OBB-643862 Description| Value ---|--- Affected Website:| stylebop.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Vend VDP: Race Condition : Exploiting the loyalty claim https://xxx.vendhq.com/loyalty/claim/email/xxxxx url and gain x amount of loyalty bonus/cash

Hey Team! I love loyalty bonuses, that turns first time users into returning customers , but sometimes loyalty can be exploited, just like in this chase. LT:DR A firtstime loyalty customer will get x times the amount of loyalty bonus from the story by racing the loyalty link x amount of times in...