CVE-2018-2729

Vulnerability in the Oracle Financial Services Funds Transfer Pricing component of Oracle Financial Services Applications subcomponent: User Interface. Supported versions that are affected are 6.1.x and 8.0.x. Easily exploitable vulnerability allows low privileged attacker with network access via...

CVE-2018-2729

The CVE-2018-2729 entry concerns the Oracle Financial Services Funds Transfer Pricing component of Oracle Financial Services Applications (subcomponent: User Interface). Affected versions are 6.1.x and 8.0.x. The vulnerability allows a low-privileged attacker who can reach the system over HTTP to...

CVE-2018-2728

CVE-2018-2728 affects Oracle Financial Services Applications, Funds Transfer Pricing component (UI). Affects 6.1.x and 8.0.x. The flaw allows an unauthenticated attacker with network access via HTTP to compromise Funds Transfer Pricing, with attacks requiring human interaction. Impact includes un...

CVE-2018-2728

Vulnerability in the Oracle Financial Services Funds Transfer Pricing component of Oracle Financial Services Applications subcomponent: User Interface. Supported versions that are affected are 6.1.x and 8.0.x. Easily exploitable vulnerability allows unauthenticated attacker with network access vi...

notebrag.com XSS vulnerability

Open Bug Bounty ID: OBB-369617 Description| Value ---|--- Affected Website:| notebrag.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Shee...

Zerodium Offers $500K for Secure Messaging App Zero Days

Zerodium, a vendor operating in the nebulous exploit acquisition market, has put a premium on zero-day vulnerabilities in secure messaging applications in a new pricing structure announced today. Remote code execution and local privilege elevation zero days in messaging apps such as WhatsApp,...

SAP Customer Relationship Management (CRM) IPC Pricing Cross-Site Scripting Vulnerability

SAP Customer Relationship Management is a customer relationship management solution. A cross-site scripting vulnerability exists in SAP Customer Relationship Management CRM IPC Pricing. A remote attacker could exploit the vulnerability to execute arbitrary script code in an unsuspecting user's...

Uber Drivers Hacking the System to Cause Surge Pricing

Interesting story about Uber drivers who have figured out how to game the company's algorithms to cause surge pricing: According to the study. drivers manipulate Uber's algorithm by logging out of the app at the same time, making it think that there is a shortage of cars. ... The study said drive...

Did you see what the Black Hat newsletter said about Trend Micro?

This year’s Black Hat® conference is right around the corner. Now, amazingly, in its 20th year, Black Hat is one of the world’s top gathering of information security professionals. Friends in the industry refer to this as “Security Summer Camp” and it’s true, between the training, briefings,...

kmap-state-ks.us XSS vulnerability

Vulnerable URL: https://www.kmap-state-ks.us/Provider/pricing/disclaimer.asp?response=view=1"...

teknion.com XSS vulnerability

Vulnerable URL: http://www.teknion.com/pricingmodule/filing-storageledger/default.asp?country=canada%22%27%20Style=position:fixed;top:0;left:0;font-size:999px;%20Onmouseenter=confirmOPENBUGBOUNTY%20//=filingstorage=all=ledger=pricing==Accessories=LFA= Details: Description| Value ---|--- Patched:|...

Analyzing Cyber Insurance Policies

There's a really interesting new paper analyzing over 100 different cyber insurance policies. From the abstract: In this research paper, we seek to answer fundamental questions concerning the current state of the cyber insurance market. Specifically, by collecting over 100 full insurance policies...

tekniontextiles.ca XSS vulnerability

Vulnerable URL: http://www.tekniontextiles.ca/pricingmodule/filing-storageuniversal/default.asp?country=canada%27%22%20/Style=position:fixed;top:0;left:0;font-size:999px;%20/Onmouseenter=confirm%60OPENBUGBOUNTY%60%20//=filingstorage=all=universal=pricing==Accessories=LFA= Details: Description|...

act-on.com XSS vulnerability

Vulnerable URL: https://www.act-on.com/pricing/get-started/ Details: Description| Value ---|--- Patched:| Yes, at 29.11.2016 Latest check for patch:| 29.11.2016 08:26 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 97489 VIP website status:| No Check act-on.com...

CVE-2016-5557

Unspecified vulnerability in the Oracle Advanced Pricing component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows remote attackers to affect confidentiality and integrity via unknown vectors...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Advanced Pricing component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows remote attackers to affect confidentiality and integrity via unknown vectors...

CVE-2016-5557

Unspecified vulnerability in the Oracle Advanced Pricing component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows remote attackers to affect confidentiality and integrity via unknown vectors...

Unspecified Vulnerability in Oracle E-Business Suite Oracle Advanced Pricing Component

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle Oracle, which provides customer relationship management, service management, financial management and other functions. The software provides customer relationship management,...

Uber: Avoiding Surge Pricing

Please have a look at the video in this video link which shows the bug and helps you reproduce the same following the steps. As you can see, there is surge of 1.3x in that area. But with this bug, one can avoid the surge. To explain the video in brief First I selected Uber Go with the pickup...

Zendesk: Cross-site Scripting https://www.zendesk.com/product/pricing/

Hello. https://www.zendesk.com/product/pricing/?cvosid1=%22/alert%28%221%22%29/%22 This XSS can be done on most pages of this site. Vulnerable param is cvosid1. For the XSS i used "/alert"1"/" Tested in Mozilla Firefox...