PT-2025-6136 · Sap · Sap Supplier Relationship Management

Name of the Vulnerable Software and Affected Versions: SAP Supplier Relationship Management Master Data Management Catalog version 7.52 Description: The issue allows an unauthenticated attacker to use a publicly available servlet to download an arbitrary file over the network without any user...

SAP Supplier Relationship Management 路径遍历漏洞

SAP Supplier Relationship Management is a leading procurement supply chain management software designed to help companies optimize supplier relationships and improve procurement efficiency and quality. SAP Supplier Relationship Management suffers from a path traversal vulnerability that can be...

The vulnerability of the Access and Security component of the Oracle Hyperion Data Relationship Management data management application allows a attacker to access protected information.

The vulnerability of the Access and Security component of the Oracle Hyperion Data Relationship Management data management application relates to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to protected...

Paying It Forward: Giving and Receiving Mentorship in Tech

I’ve never actually seen the 2000 romantic drama Pay It Forward , but the movie’s core idea has stayed with me since I first heard of it: The best way to repay a favor or good deed is to do one for someone else. You ‘pay it forward,’ and ask that person to do likewise, creating an expanding web o...

The vulnerability of the amoCRM cloud-based customer relationship management system lies in the lack of measures taken to protect the website structure, allowing attackers to perform cross-site scripting attacks (XSS).

The vulnerability of the amoCRM customer relationship management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

CVE-2025-21569

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion component: Web Services. The supported version that is affected is 11.2.19.0.000. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle...

CVE-2025-21569

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion component: Web Services. The supported version that is affected is 11.2.19.0.000. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle...

CVE-2025-21569

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion component: Web Services. The supported version that is affected is 11.2.19.0.000. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle...

CVE-2025-21568

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion component: Access and Security. The supported version that is affected is 11.2.19.0.000. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle...

Oracle Hyperion 安全漏洞

Oracle Hyperion is a suite of financial modeling applications from Oracle Corporation. It provides financial close, report creation, and other functions.Hyperion Data Relationship Management is one of the data relationship management components. A security vulnerability exists in Oracle Hyperion...

PT-2025-4289 · Oracle · Oracle Hyperion Data Relationship Management

Name of the Vulnerable Software and Affected Versions: Oracle Hyperion Data Relationship Management version 11.2.19.0.000 Description: The issue is related to the Access and Security component of Oracle Hyperion Data Relationship Management, allowing a high-privileged attacker with network access...

Oracle Hyperion 安全漏洞

Oracle Hyperion is a suite of financial modeling applications from Oracle Corporation USA. The software provides financial closing, report creation, and other functions. A security vulnerability exists in Oracle Hyperion version 11.2.19.0.000. An attacker could exploit this vulnerability to gain...

CVE-2024-54994

MonicaHQ v4.1.2 was discovered to contain multiple Client-Side Injection vulnerabilities via the firstname and lastname parameters in the Add a new relationship feature...

CVE-2024-54687

Vtiger CRM v.6.1 and before is vulnerable to Cross Site Scripting XSS via the Documents module and function uploadAndSaveFile in CRMEntity.php...

CVE-2024-54994

MonicaHQ v4.1.2 was discovered to contain multiple Client-Side Injection vulnerabilities via the firstname and lastname parameters in the Add a new relationship feature...

PT-2025-3085

Name of the Vulnerable Software and Affected Versions MonicaHQ version 4.1.2 Description The issue is related to multiple Client-Side Injection vulnerabilities found in MonicaHQ. These vulnerabilities occur via the first name and last name parameters in the Add a new relationship feature...

CVE-2024-54994

MonicaHQ v4.1.2 was discovered to contain multiple Client-Side Injection vulnerabilities via the firstname and lastname parameters in the Add a new relationship feature...

MonicaHQ 安全漏洞

MonicaHQ is a relationship management system from MonicaHQ, Inc. A security vulnerability exists in MonicaHQ version v4.1.2 that stems from the firstname and lastname parameters in the Add New Relationship feature containing multiple client-side injections...

CVE-2024-54994

MonicaHQ v4.1.2 was discovered to contain multiple Client-Side Injection vulnerabilities via the firstname and lastname parameters in the Add a new relationship feature...

WordPress Ni CRM Lead plugin <= 1.3.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by thiennv Patchstack Alliance in WordPress Plugin Ni CRM Lead versions = 1.3.0...