[SECURITY] Fedora 31 Update: drupal7-webform-4.21-1.fc31

Webform is the module for making forms and surveys in Drupal. After a submission, users may be sent an e-mail "receipt" as well as sending a notification to administrators. Results can be exported into Excel or other spreadsheet applications. Webform also provides some basic statistical review an...

receipt-bank.com Cross Site Scripting vulnerability

Security Researcher MrRain1996 Helped patch 907 vulnerabilities Received 4 Coordinated Disclosure badges Received 9 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting receipt-bank.com website and its users. Following...

Online Receipt Computer Advantage Buffer Overflow Vulnerability

Online Receipt Computer Advantage CRCA is a medical accounting software package from ORCA Management Organization, Japan. The software supports features such as electronic medical record management and collaborative software extensions. A buffer overflow vulnerability exists in ORCA, which can be...

Buffer overflow

Buffer overflow in Ubuntu14.04 ORCA Online Receipt Computer Advantage 4.8.0 panda-client2 1:1.4.9+p41-u4jma1 and earlier, Ubuntu14.04 ORCA Online Receipt Computer Advantage 5.0.0 panda-client2 1:2.0.0+p48-u4jma1 and earlier, and Ubuntu16.04 ORCA Online Receipt Computer Advantage 5.0.0 panda-clien...

CVE-2018-0643

The CVE-2018-0643 entry concerns ORCA (Online Receipt Computer Advantage) for Ubuntu 14.04. Affects ORCA 4.8.0 (panda-server) and earlier. The root cause is an OS command injection vulnerability (CWE-78) that could allow an attacker with administrator rights to execute arbitrary OS commands on th...

AdvisorsBot Downloader Emerges in Raft of Malware Campaigns

A new downloader was disclosed today, sporting significant anti-analysis features and increasingly sophisticated distribution techniques. Researchers at Proofpoint have been tracking the downloader as a first-stage payload in campaigns since May 2018. Dubbed AdvisorsBot due to early...

CVE-2018-14927

Matera Banco 1.0.0 is vulnerable to path traversal allowing access to system files outside the default application folder via the /contingency/servlet/ServletFileDownload file parameter, related to /contingency/web/receiptQuery/receiptDisplay.jsp...

JVN#37376131: Multiple vulnerabilities in ORCA(Online Receipt Computer Advantage)

ORCAOnline Receipt Computer Advantage provided by ORCA Management Organization Co., Ltd contains vulnerabilities listed below. OS command injectionCWE-78 - CVE-2018-0643 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:A/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L| Base Score: 4.1 CVSS v2|...

UBUNTU-CVE-2018-5161

Crafted message headers can cause a Thunderbird process to hang on receiving the message. This vulnerability affects Thunderbird ESR 52.8 and Thunderbird 52.8...

EasyService Billing 1.0 SQL Injection / Cross Site Scripting

------------------- Exploit 1 of 2: Exploit Title: EasyService Billing 1.0 - 'template.php' SQL Injection / Cross-Site Scripting Dork: N/A Date: 22.05.2018 Exploit Author: Azkan Mustafa AkkuA AkkuS Vendor Homepage:...

Panic attack: Apple scams apply pressure

We've seen a number of Apple-related phishes in circulation over the last few days. While most of them already lead to deactivated phishing sites, we thought it was worth highlighting some of the tricks being used to bait people into handing over payment details at the moment. Fake receipt emails...

Threat Outbreak Alert RuleID31931: Email Messages Distributing Malicious Software on February 7, 2018

Medium Alert ID: 56699 First Published: 2018 February 7 16:27 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31931 may contain the following files: Name |...

Buyers Beware of Tampered Gift Cards

Prepaid gift cards make popular presents and no-brainer stocking stuffers, but before you purchase one be on the lookout for signs that someone may have tampered with it. A perennial scam that picks up around the holidays involves thieves who pull back and then replace the decals that obscure the...

Threat Outbreak Alert RuleID31356: Email Messages Distributing Malicious Software on November 20, 2017

Medium Alert ID: 55980 First Published: 2017 November 20 16:37 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31356 may contain the following files: Name |...

Threat Outbreak Alert RuleID30307: Email Messages Distributing Malicious Software on August 24, 2017

Medium Alert ID: 54938 First Published: 2017 August 24 17:14 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30307 may contain the following files: Name |...

Override Access Vulnerability in BuyGift.com App (Android Version)

BuyGift.com APP is a mobile client that provides users with online shopping services. A vulnerability exists in BuyGift.com APP Android version that allows an attacker to gain unauthorized access to other people's receipt information...

Dridex and Locky Return Via PDF Attachments in Latest Campaigns

Dridex and Locky, two prolific malware families that made waves in 2016 after being distributed in several high-volume spam campaigns, have returned after a brief hiatus. FireEye observed a decline in the volume of Dridex and Locky in the latter half of 2016, but we recently observed two new larg...

receipt-bank.com XSS vulnerability

Vulnerable URL: https://www.receipt-bank.com/find-a-partner/?countryname=uk"redirectperformed=yes Details: Description| Value ---|--- Patched:| Yes, at 14.06.2017 Latest check for patch:| 14.06.2017 09:09 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 63435 VIP...

Threat Outbreak Alert RuleID28592: Email Messages Distributing Malicious Software on April 3, 2017

Medium Alert ID: 53302 First Published: 2017 April 3 17:31 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28592 may contain the following files: Name | Siz...

Tax-themed phishing and malware attacks proliferate during the tax filing season

Tax-themed scams and social engineering attacks are as certain as death or tax itself. Every year we see these attacks, and 2017 is no different. These attacks circulate year-round as cybercriminals take advantage of the different country and region tax schedules, but they peak in the months...