Unspecified Vulnerability in Oracle E-Business Suite (CNVD-2017-15383)

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle Corporation, of which Oracle Partner Management is a partner management component. A security vulnerability exists in the User Interface subcomponent of the Oracle Partner...

Unspecified Vulnerability in Oracle E-Business Suite (CNVD-2017-15384)

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle Corporation, of which Oracle Partner Management is a partner management component. A security vulnerability exists in the User Interface subcomponent of the Oracle Partner...

Mail.ru: Apache Server-Status Detected

prosieben.icq.com was delegated to a partner site as a part of a partner program and this site exposes Apache server-status. An issue is related to partner host outside of ICQ control, does not affect ICQ users and was accepted outside of bug bounty scope...

latesttraveloffers.com XSS vulnerability

Open Bug Bounty ID: OBB-257525 Description| Value ---|--- Affected Website:| latesttraveloffers.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Shopify: IDOR [partners.shopify.com] - User with ONLY Manage apps permission is able to get shops info and staff names from inside the shop

SUMMARY ---------- Hello, I have found a permission problem in https://partners.shopify.com that allows a member with only "Manage apps" permission to get various show information and also list the staff account from inside that shop without having access the shop's admin area REPLICATION STEPS...

partner.amd.com XSS vulnerability

Vulnerable URL: http://partner.amd.com/en-us/Pages/article-amd-processor-lineup-stronger.aspx?FollowSite=0=%27-confirm/OPENBUGBOUNTY/-%27 Details: Description| Value ---|--- Patched:| Yes, at 26.11.2017 Latest check for patch:| 26.11.2017 14:54 GMT Vulnerability type:| XSS Vulnerability status:|...

Getting started in sales: Q&A with Eric Erston

Today we're excited to introduce a key leader in Rapid7s sales organization: Eric Erston is Rapid7's senior vice president of sales for the Americas region. He has extensive experience in a variety of sales roles, including leading go-to-market functions for mergers and acquisitions. Prior to...

Cuvva: Sensitive Support Mail Disclosure

An issue with our handling of Intercom sessions existed in one of our partner dashboards. Exact details being kept under wraps for now, as it's an issue which exists in a large number of Intercom installations...

Decade Long Partnership = Global Partner Innovation Award

Here at Trend Micro we highly value the relationships we’ve build with our partners, especially those that have spanned several years. However, it’s particularly gratifying when those partners choose to recognize our work with an award. So, excuse us while we toot our own horn’s for a bit...

form.partner-versicherung.de XSS vulnerability

Vulnerable URL: https://form.partner-versicherung.de/788209f76fa36092a4da7d5992b23348/form.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

Instacart: XSS at in instacart.com/store/partner_recipe

Summary Hi team, i found that this endpoint - https://www.instacart.com/store/partnerrecipe? at param imageurl is vulnerable to XSS Reproduction Steps & PoC 1Go to...

obm.vodafonepartnerservices.co.uk XSS vulnerability

Vulnerable URL: https://obm.vodafonepartnerservices.co.uk/cgi-bin/WebObjects/OBMVPS.woa/wa/resetPassword%22'--!%3E%3CImage%0CSrcset%3DK%0COnerror%3Dconfirm%60OPENBUGBOUNTY%60%0C/ Details: Description| Value ---|--- Patched:| Yes, at 14.09.2017 Latest check for patch:| 14.09.2017 12:18 GMT...

skinlearning.at XSS vulnerability

Vulnerable URL: http://www.skinlearning.at/partner/grafik/PS468x60.swf?clickTag=javascript:alert%27OPENBUGBOUNTY%27 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 12563238 VIP...

HelpDEZK 1.1.1 - Cross-Site Request Forgery / Code Execution Vulnerabilities

Exploit for php platform in category web applications Exploit Title: Multiple CSRF Remote Code Execution Vulnerability on HelpDEZK 1.1.1 Date: 05-April-2017 Exploit Author: @runggareksya, @yokoacc, @AdyWikradinata, @dickysofficial, @dvnrcy Vendor Homepage: http://www.helpdezk.org/ Software Link:...

HelpDEZK 1.1.1 CSRF / Code Execution

Exploit Title: Multiple CSRF Remote Code Execution Vulnerability on HelpDEZK 1.1.1 Date: 05-April-2017 Exploit Author: @runggareksya, @yokoacc, @AdyWikradinata, @dickysofficial, @dvnrcy Vendor Homepage: http://www.helpdezk.org/ Software Link: https://codeload.github.com/albandes/helpdezk/zip/v1.1...

HelpDEZK 1.1.1 - Cross-Site Request Forgery / Code Execution

Exploit Title: Multiple CSRF Remote Code Execution Vulnerability on HelpDEZK 1.1.1 Date: 05-April-2017 Exploit Author: @runggareksya, @yokoacc, @AdyWikradinata, @dickysofficial, @dvnrcy Vendor Homepage: http://www.helpdezk.org/ Software Link: https://codeload.github.com/albandes/helpdezk/zip/v1.1...

edubourse.com XSS vulnerability

Vulnerable URL: http://www.edubourse.com/divers/moteur.php?cx=partner-pub-0344181344710516:4002401842=FORID:10=ISO-8859-1="alertString.fromCharCode79,80,69,78,66,85,71,66,79,85,78,84,89;...

partner.orange.com XSS vulnerability

Vulnerable URL: https://partner.orange.com/partner-showcase/?country=89'...

amigo-browser.ru XSS vulnerability

Vulnerable URL: http://amigo-browser.ru/dkit-hps/?chid=12930partnerid=dse.1:812270,dse.2:812274,hp.1:812269,hp.2:812273,pult.1:812271,pult.2:812275,any.2:812272,any:812268=fDrYpMqTUQ=818068=hdclub"alert/OPENBUGBOUNTY/...

partner.microsoft.com Open Redirect vulnerability

Vulnerable URL: http://partner.microsoft.com/login?authType=Federation=http%3a%2f%2fopenbugbounty.org%2f Details: Description| Value ---|--- Patched:| Yes, at 10.04.2017 Latest check for patch:| 10.04.2017 13:58 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alex...