7247 matches found
Buffer overflow
Vulnerability in the Oracle Hospitality Reporting and Analytics product of Oracle Food and Beverage Applications component: Reporting. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracl...
Oracle Hospitality Reporting and Analytics 安全漏洞
Oracle Hospitality Reporting and Analytics is an Oracle platform for hotels that generates reports for analyzing operational data. Oracle Hospitality Reporting and Analytics has a security vulnerability that can be exploited by an attacker to cause unauthorized access to critical data or full...
CVE-2023-21828
CVE-2023-21828 affects Oracle Hospitality Reporting and Analytics, Reporting component, version 9.1.0. The root cause is insufficient input validation in the Reporting module, enabling a low-privileged attacker with network access via HTTPS to compromise the system. Consequences documented includ...
CVE-2023-21826
Oracle Hospitality Reporting and Analytics (Reporting component) is affected in version 9.1.0 due to insufficient input validation. An attacker with network access via HTTPS and low privileges, after user interaction, can gain unauthorized access to critical data, obtain complete access to all ac...
APTRS - Automated Penetration Testing Reporting System
APTRS Automated Penetration Testing Reporting System is an automated reporting tool in Python and Django. The tool allows Penetration testers to create a report directly without using the Traditional Docx file. It also provides an approach to keeping track of the projects and vulnerabilities...
PT-2023-1243 · Oracle · Oracle Hospitality Reporting/Analytics
Name of the Vulnerable Software and Affected Versions: Oracle Hospitality Reporting and Analytics version 9.1.0 Description: The issue is related to insufficient input validation in the Reporting component of Oracle Hospitality Reporting and Analytics. This easily exploitable vulnerability can be...
PT-2023-1269 · Oracle · Oracle Hospitality Reporting/Analytics
Name of the Vulnerable Software and Affected Versions: Oracle Hospitality Reporting and Analytics version 9.1.0 Description: The issue is related to insufficient input validation in the Reporting component of Oracle Hospitality Reporting and Analytics. This easily exploitable vulnerability allows...
wfilm.de Cross Site Scripting vulnerability OBB-3156176
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Detection of Vulnerabilities in JavaScript Libraries
JavaScript is a popular programming language which is an integral component while developing interactive and dynamic web applications. It allows developers to create engaging and responsive user interfaces, handling complex web page elements, enhancing the overall functionality of the application...
Security Bulletin: The IBM® Engineering Lifecycle Engineering products using IBM® SDK, Java™ Technology Edition are affected by multiple vulnerabilities (CVE-2022-21628, CVE-2022-21626, CVE-2022-21624, CVE-2022-21619)
Summary This covers all applicable Java SE CVEs published by Oracle as part of their October 2022 Critical Patch Update. Following IBM® Engineering Lifecycle Engineering products are vulnerable to this attack, it has been addressed in this bulletin: Jazz Foundation, IBM Engineering Lifecycle...
hrylabour.gov.in Cross Site Scripting vulnerability OBB-3155685
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
bananamall.co.kr Cross Site Scripting vulnerability OBB-3149656
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
hcdigo.com Cross Site Scripting vulnerability OBB-3145799
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Open redirect on government website sends users to adult content
Fake websites and open redirects have conspired to make things awkward for a UKGOV website. The site in question, riverconditionsdotenvironment-agencydotgovdotuk, was being abused in search engine results to redirect to various sites which arent associated with UKGOV--most of which were adult...
GHSA-22M9-M3WW-53H3 Flarum post mentions can be used to read any post on the forum without access control
Using the mentions feature provided by the flarum/mentions extension, users can mention any post ID on the forum with the special @""p syntax. The following behavior never changes no matter if the actor should be able to read the mentioned post or not: A URL to the mentioned post is inserted into...
CVE-2023-21558
Windows Error Reporting Service Elevation of Privilege Vulnerability...
CVE-2023-21558
Windows Error Reporting Service Elevation of Privilege Vulnerability...
CVE-2023-21558
Windows Error Reporting Service Elevation of Privilege Vulnerability...
