teknion.com XSS vulnerability

Vulnerable URL: http://www.teknion.com/pricingmodule/filing-storageledger/default.asp?country=canada%22%27%20Style=position:fixed;top:0;left:0;font-size:999px;%20Onmouseenter=confirmOPENBUGBOUNTY%20//=filingstorage=all=ledger=pricing==Accessories=LFA= Details: Description| Value ---|--- Patched:|...

Analyzing Cyber Insurance Policies

There's a really interesting new paper analyzing over 100 different cyber insurance policies. From the abstract: In this research paper, we seek to answer fundamental questions concerning the current state of the cyber insurance market. Specifically, by collecting over 100 full insurance policies...

tekniontextiles.ca XSS vulnerability

Vulnerable URL: http://www.tekniontextiles.ca/pricingmodule/filing-storageuniversal/default.asp?country=canada%27%22%20/Style=position:fixed;top:0;left:0;font-size:999px;%20/Onmouseenter=confirm%60OPENBUGBOUNTY%60%20//=filingstorage=all=universal=pricing==Accessories=LFA= Details: Description|...

act-on.com XSS vulnerability

Vulnerable URL: https://www.act-on.com/pricing/get-started/ Details: Description| Value ---|--- Patched:| Yes, at 29.11.2016 Latest check for patch:| 29.11.2016 08:26 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 97489 VIP website status:| No Check act-on.com...

CVE-2016-5557

Unspecified vulnerability in the Oracle Advanced Pricing component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows remote attackers to affect confidentiality and integrity via unknown vectors...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Advanced Pricing component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows remote attackers to affect confidentiality and integrity via unknown vectors...

CVE-2016-5557

Unspecified vulnerability in the Oracle Advanced Pricing component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows remote attackers to affect confidentiality and integrity via unknown vectors...

Unspecified Vulnerability in Oracle E-Business Suite Oracle Advanced Pricing Component

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle Oracle, which provides customer relationship management, service management, financial management and other functions. The software provides customer relationship management,...

Uber: Avoiding Surge Pricing

Please have a look at the video in this video link which shows the bug and helps you reproduce the same following the steps. As you can see, there is surge of 1.3x in that area. But with this bug, one can avoid the surge. To explain the video in brief First I selected Uber Go with the pickup...

Zendesk: Cross-site Scripting https://www.zendesk.com/product/pricing/

Hello. https://www.zendesk.com/product/pricing/?cvosid1=%22/alert%28%221%22%29/%22 This XSS can be done on most pages of this site. Vulnerable param is cvosid1. For the XSS i used "/alert"1"/" Tested in Mozilla Firefox...

Easy Icon Maker 5.01 - Crash PoC

No description provided by source. Exploit Title: Easy Icon Maker Version 5.01 Crash Poc vulnerability Date: 28-04-2013 Exploit Author: Asesino04 Vendor Homepage: link Software Link: http://www.icon-maker.com/iconmaker.exe Version: 5.01 & old versions Tested on: Windows 7 Introduction :...

Hacking Maytag: Coin-Operated Laudromat Machines

Most Maytag commercial washers and dryers out there use a common controller platform. It dates back to the 80s and is still produced. So almost all Maytag with digital control panel is exploitable in this way. The identifying features are green vacuum florescent display with a four-digit numerica...

Threat Outbreak Alert: Fake Product Pricing Information Request Email Messages on March 18, 2014

Medium Alert ID: 33379 First Published: 2014 March 18 16:11 GMT Last Updated: 2014 March 19 14:00 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product inquiry for the recipient. The text in the email message attempt...

TESCO Customers' account details leaked online

You all were busy in celebrating Valentine’s Day with your loved ones, and the cyber criminals were too celebrating the day in their own way, and this time, with the TESCO customers. A list of over 2,240 Tesco.com Internet Shopping accounts was posted Online on the Pastebin website by some unknow...

Easy Icon Maker 5.01 - Crash (PoC)

Easy Icon Maker 5.01 - Crash PoC Exploit Title: Easy Icon Maker Version 5.01 Crash Poc vulnerability Date: 28-04-2013 Exploit Author: Asesino04 Vendor Homepage: link Software Link: http://www.icon-maker.com/iconmaker.exe Version: 5.01 & old versions Tested on: Windows 7 Introduction :...

Easy Icon Maker 5.01 - Crash (PoC)

Exploit Title: Easy Icon Maker Version 5.01 Crash Poc vulnerability Date: 28-04-2013 Exploit Author: Asesino04 Vendor Homepage: link Software Link: http://www.icon-maker.com/iconmaker.exe Version: 5.01 & old versions Tested on: Windows 7 Introduction : ----------------- Easy icon maker is sufferi...

AVAVoIP 1.5.12 Cross Site Scripting / Shell Upload

Exploit for php platform in category web applications Title: ====== AVAVoIP v1.5.12 - Multiple Web Vulnerabilities Introduction: ============= Designed from the ground up to empower VoIP and to meet the needs of the changing business environment, the AVA VoIP platform provides best in class...

ellistonSPORT Remote SQL Injection Vulnerability

Exploit for php platform in category web applications ellistonSPORT Remote SQL Injection Vulnerability Software : ellistonSPORT Date : 4/1/2012 Vendor : http://ellistonsport.com/ Get App. : http://ellistonsport.com/pricing.php Price : $59.99 Dork : inurl:"/showPlayer.php?id=" intext:"powered by...

Secure Section Macro

This is a suggestion to create a new Macro/Plugin that worked similar to the Column Macro with the major difference being when the user edits the Macro they are allowed to select user and group access options. The idea is that if the user/group is not selected in the access list then this Macro a...

Secure Section Macro

panel:bgColor=e7f4fa NOTE: This suggestion is for Confluence Cloud. Using Confluence Server? See the corresponding suggestion|http://jira.atlassian.com/browse/CONFSERVER-23637. panel This is a suggestion to create a new Macro/Plugin that worked similar to the Column Macro with the major differenc...