Server side request forgery (ssrf)

An access control issue in Mercedes me IOS APP v1.34.0 and below allows attackers to view the carts of other users via sending a crafted add order request...

PT-2023-30440 · Mercedes · Mercedes Me Ios App

Name of the Vulnerable Software and Affected Versions: Mercedes me IOS APP versions 1.34.0 and below Description: The issue allows attackers to view the carts of other users by sending a crafted add order request, exploiting an access control problem. Recommendations: For Mercedes me IOS APP...

Upserve : Insufficient validation of sides/modifiers quantity

Summary: The Upserve Online Ordering OLO application does not properly verify on the server side the number of sides/modifiers that have been added Description: Certain items allow for selection of a limited number of sides/modifiers, and the application restricts the number of sides/modifies tha...

Threat Outbreak Alert RuleID19784: Email Messages Distributing Malicious Software on December 1, 2015

Medium Alert ID: 42427 First Published: 2015 December 1 20:55 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19784 may contain the following files: Name |...

Threat Outbreak Alert: Fake Product Purchase Order Request Email Messages on November 3, 2013

Medium Alert ID: 31610 First Published: 2013 November 4 20:05 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a purchase order request for the recipient. The text in the email message attempts to convince the recipient t...

Threat Outbreak Alert: Fake Product Order Request Email Messages on July 24, 2013

Medium Alert ID: 30205 First Published: 2013 July 24 14:18 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product order request for the recipient. The text in the email message attempts to convince the recipient to op...

Threat Outbreak Alert: Fake Order Request Details Email Messages on May 16, 2012

Low Alert ID: 25938 First Published: 2012 May 16 14:32 GMT Version: 1 Summary Cisco Security has detected significant activity related to German-language spam e-mail messages that claim to contain order request details for the recipient. The text in the e-mail message attempts to convince the...