CVE-2017-3283

CVE-2017-3283 affects Oracle E-Business Suite, Oracle Partner Management: User Interface, in versions 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, and 12.2.6. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Oracle Partner Management, with success...

CVE-2017-3280

Vulnerability in the Oracle Partner Management component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network acces...

Oracle E-Business Suite Remote Security Vulnerability (CNVD-2017-00655)

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle Oracle. The software provides customer relationship management, service management, financial management and other functions. A remote vulnerability exists in Oracle Partner...

Oracle E-Business Multiple Vulnerabilities (January 2017 CPU)

The version of Oracle E-Business installed on the remote host is missing the January 2017 Oracle Critical Patch Update CPU. It is, therefore, affected by multiple unspecified vulnerabilities in multiple components and subcomponents, the most severe of which can allow an unauthenticated, remote...

Instacart: XSS in instacart.com/store/partner_recipe

Please open the following url...

Microsoft (MEPN EDU) - Client Side Cross Site Vulnerability

Document Title: =============== Microsoft MEPN EDU - Client Side Cross Site Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1930 MSRC ID: 34153 TRK: 0497000318 Release Date: ============= 2016-12-14 Vulnerability Laboratory ID VL-ID:...

Microsoft (MEPN EDU) - Client Side Cross Site Vulnerability

Document Title: =============== Microsoft MEPN EDU - Client Side Cross Site Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1930 MSRC ID: 34153 TRK: 0497000318 Release Date: ============= 2016-12-14 Vulnerability Laboratory ID VL-ID:...

tallysolutions.com XSS vulnerability

Vulnerable URL: http://www.tallysolutions.com/website/html/partner-new/locate-partner.php?searchEvent="-alertOPENBUGBOUNTY-" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 30366 VI...

Elevation of Privilege Vulnerability in Huawei UTPS

Huawei UTPS Unified Terminal PC suite, also known as Mobile Partner is an application software that runs on a PC to manage the data card, providing functions such as data card setup, dial-up connection, sending and receiving text messages, and managing the phonebook. Huawei UTPS suffers from an...

partner.sdg.msg.t-mobile.com XSS vulnerability

Vulnerable URL: https://partner.sdg.msg.t-mobile.com/tpim/public/login.jsp?loginStatus=failed Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

partner.daoyoudao.com XSS vulnerability

Vulnerable URL: http://partner.daoyoudao.com/comqueryOrderDetails.do?orderCode=705201373076243139=prompt/OPENBUGBOUNTY/...

partners.easymarkets.com XSS vulnerability

Vulnerable URL: https://partners.easymarkets.com//email-unsubscribe.php?u=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

Android Security Bulletin—October 2016Stay organized with collectionsSave and categorize content based on your preferences.

The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Alongside the bulletin, we have released a security update to Nexus devices through an over-the-air OTA update. The Nexus firmware images have also been released to the Google Developer site...

baixaki.com.br XSS vulnerability

Open Bug Bounty ID: OBB-177043 Description| Value ---|--- Affected Website:| baixaki.com.br Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Android Security Bulletin—August 2016Stay organized with collectionsSave and categorize content based on your preferences.

The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Alongside the bulletin, we have released a security update to Nexus devices through an over-the-air OTA update. The Nexus firmware images have also been released to the Google Developer site...

blogs.partner.microsoft.com XSS vulnerability

Vulnerable URL: https://blogs.partner.microsoft.com/mpn/tag/wp-includes/js/mediaelement/flashmediaelement.swf?jsinitfunctio%gn=alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| Yes, at 13.06.2016 Latest check for patch:| 13.06.2016 15:16 GMT Vulnerability type:| XSS Vulnerability...

MyHammer Partner - Corrupted files, Customized SSL, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application MyHammer Partner published at the 'play' market has multiple vulnerabilities...

Uber: Use Partner/Driver App Without Being Activated

This report is a duplicate of 126260 and allows for someone who is not an activated Driver/Partner to log into the Uber Partner app. As stated in 126260 this doesn't allow you to Go Online but does allow you to see how the app functions as if you were a driver/partner...

Uber: Bypassing Uber Partner's 3 Cancel Limit

The Uber Partner app was supposed to log you out of the app if you cancel three requests in a row, temporarily denying the Partner the ability to go online. This report detailed the ability to bypass that limitation...

QIWI: Content Spoofing in mango.qiwi.com

Доброй ночи. Уязвимость найдена по адресу: https://mango.qiwi.com/partner/dashboard Уязвимый параметр: partnerfirstname Exploit Code: POST Запрос: POST /partner/signup HTTP/1.1 Host: mango.qiwi.com Connection: keep-alive Content-Length: 515 Cache-Control: max-age=0 Accept:...