CVE-2017-10228

Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications subcomponent: Module. The supported version that is affected is 8.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2017-10220

CVE-2017-10220 affects Oracle Hospitality Applications, Hospitality Property Interfaces Parser (v8.10.x). A local, unauthenticated attacker with logon can access and read data via the Parser, causing confidentiality impact (CVSSv3 base 4.0). No exploitation details are provided in the documents; ...

CVE-2017-10216

Vulnerability in the Hospitality Property Interfaces component of Oracle Hospitality Applications subcomponent: Parser. The supported version that is affected is 8.10.x. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Hospitality Property...

CVE-2017-10228

The CVE-2017-10228 entry covers Oracle Hospitality Cruise Shipboard Property Management System (Module) version 8.0.0.0. The vulnerability allows a low-privilege, network-access attacker (HTTP) to modify or delete some data and to read additional data in the system. This is identified with CVSS v...

CVE-2017-10056

Affected product: Oracle Hospitality 9700, subcomponent Property Management Systems, version 4.0. Vulnerability allows a low-privilege, logged-on attacker to compromise Oracle Hospitality 9700, potentially leading to unauthorized access to data or complete access to all data. CVSS v3.0 base score...

CVE-2017-10228

Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications subcomponent: Module. The supported version that is affected is 8.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2017-10182

The CVE-2017-10182 issue affects Oracle Hospitality OPERA 5 Property Services, specifically the OPERA Export Functionality subcomponent. Affected versions are 5.4.0.x, 5.4.1.x and 5.4.3.x. The vulnerability could be exploited by a high-privilege attacker with network access via HTTP to gain unaut...

Ultimate Property Listing Component SQL Injection Vulnerability in Joomla!

Joomla! is an open source, cross-platform content management system developed using PHP and MySQL. A SQL injection vulnerability exists in the sfselectuserid parameter in Joomla! Ultimate Property Listing, which can be exploited by attackers to access or modify database data...

Joomla Ultimate Property Listing Component SQL Injection Vulnerability

Joomla is an open source, cross-platform content management system developed using PHP and MySQL. A SQL injection vulnerability exists in the Joomla Ultimate Property Listing component, which can be exploited by an attacker to obtain sensitive information from a database...

Joomla Ultimate Property Listing 1.0.2 SQL Injection

Exploit Title: Joomla! Component Ultimate Property Listing v1.0.2 - SQL Injection Dork: N/A Date: 02.08.2017 Vendor : http://faboba.com/ Software: https://extensions.joomla.org/extensions/extension/vertical-markets/real-estate/ultimate-property-listing/ Demo: http://demoupl.faboba.com/ Version:...

Joomla! Component Ultimate Property Listing 1.0.2 - SQL Injection

Exploit Title: Joomla! Component Ultimate Property Listing v1.0.2 - SQL Injection Dork: N/A Date: 02.08.2017 Vendor : http://faboba.com/ Software: https://extensions.joomla.org/extensions/extension/vertical-markets/real-estate/ultimate-property-listing/ Demo: http://demoupl.faboba.com/ Version:...

Joomla Ultimate Property Listing 1.0.2 Component - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component Ultimate Property Listing v1.0.2 - SQL Injection Dork: N/A Date: 02.08.2017 Vendor : http://faboba.com/ Software:...

Oracle Hospitality Cruise Shipboard Property Management System Remote Vulnerability

Oracle Hospitality Applications is a suite of business applications, servers, and storage solutions for hospitality management from Oracle Corporation. The solution provides human resource cost management, tracking and management of services throughout a customer's journey to improve customer...

Joomla! Component Ultimate Property Listing 1.0.2 - SQL Injection

Joomla! Component Ultimate Property Listing 1.0.2 - SQL Injection Exploit Title: Joomla! Component Ultimate Property Listing v1.0.2 - SQL Injection Dork: N/A Date: 02.08.2017 Vendor : http://faboba.com/ Software:...

tomcat: system property disclosure

It was discovered that when a SecurityManager was configured, Tomcat's system property replacement feature for configuration files could be used by a malicious web application to bypass the SecurityManager and read system properties that should not be visible...

Mitsubishi Electric E-Designer SetupAlarm Font Property Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Mitsubishi Electric E-Designer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

Unspecified Vulnerability in Oracle Hospitality 9700

Oracle Hospitality Applications is a suite of business applications, servers, and storage solutions for hospitality management from Oracle.Hospitality 9700 is one of the hospitality management components. A security vulnerability exists in the Property Management Systems subcomponent of the...

leadingpropertygroupspain.com XSS vulnerability

Open Bug Bounty ID: OBB-265520 Description| Value ---|--- Affected Website:| leadingpropertygroupspain.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Fedora 26 : pcre2 (2017-e4c6ab648b)

This release fixes a crash when finding a Unicode property for a character with a code point greater than 0x10ffff in UTF-32 library while UTF mode is disabled and JIT mode is enabled. It also fixes an incortect cast in UTF validation routine. Note that Tenable Network Security has extracted the...

Fedora 26 : pcre (2017-188135cba8)

This release fixes a crash when finding a Unicode property for a character with a code point greater than 0x10ffff in UTF-32 library while UTF mode is disabled and JIT mde enabled. It also fixes a buffer overlflow in pcretest tool when copying a string in UTF-32 mode. Note that Tenable Network...