4764 matches found
CVE-2019-7286
creationtimestamp| type| source ---|---|--- 2019-02-08 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=361 2019-02-08 16:50:09+00:00| exploited| https://t.me/alexmakus/2622 2019-02-08 16:55:16+00:00| exploited| https://t.me/antichat/3546 2019-08-31 11:34:08+00:00| exploite...
Qualifying Encoders with Akamai
Introduction The encoder qualification program was created to improve the process for vendors that wish to align themselves with Akamai network specific requirements. It is also intended to , mitigate the risk of encoder issues before using in production. A formal process is being introduced to...
Oracle Reports Developer Component Cross-site Scripting (CVE-2019-2413)
A cross-site scripting vulnerability exists in Oracle Reports component. Successful exploitation of this vulnerability would allow remote attackers to inject an arbitrary web script into the affected system...
CVE-2018-16858
creationtimestamp| type| source ---|---|--- 2019-02-01 14:25:44+00:00| published-proof-of-concept| https://t.me/DC8044Info/66 2019-02-01 21:48:20+00:00| published-proof-of-concept| https://t.me/antichat/3487 2019-02-02 08:49:18+00:00| published-proof-of-concept| https://t.me/news4hack/233...
Sh00T - A Testing Environment for Manual Security Testers
A Testing Environment for Manual Security Testers. Sh00t is a task manager to let you focus on performing security testing provides To Do checklists of test cases helps to create bug reports with customizable bug templates Features: Dynamic Task Manager to replace simple editors or task managemen...
X (Formerly Twitter): Stored XSS on reports.
Summary: Stored XSS can be submitted on reports, and anyone who will check the report the XSS will trigger. Description: Stored XSS, also known as persistent XSS, is the more damaging than non-persistent XSS. It occurs when a malicious script is injected directly into a vulnerable web application...
Oracle Reports Developer Component 12.2.1.3 - Cross-site Scripting Vulnerability
Exploit for php platform in category web applications Exploit Title: Cross-site Scripting XSS Exploit Author: Mohamed M.Fouad - From SecureMisr Company Vendor Homepage: https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html Version: 12.2.1.3 REQUIRED Tested on: Windows 10 CV...
Oracle Fusion Middleware Reports Developer Access Control Error Vulnerability
Oracle Fusion Middleware Oracle Fusion Middleware is Oracle's Oracle set of business innovation platform for enterprise and cloud environments, which provides middleware, software collections and other features. reports Developer is one of the report development components. An access control erro...
Oracle Reports Developer 12.2.1.3 Cross Site Scripting
Exploit Title: Cross-site Scripting XSS Date: 2019-01-15 Exploit Author: Mohamed M.Fouad - From SecureMisr Company Vendor Homepage: https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html Version: 12.2.1.3 REQUIRED Tested on: Windows 10 CVE : CVE-2019-2413 POC:...
Oracle Reports Developer Component 12.2.1.3 - Cross-site Scripting
Oracle Reports Developer Component 12.2.1.3 - Cross-site Scripting Exploit Title: Cross-site Scripting XSS Date: 2019-01-15 Exploit Author: Mohamed M.Fouad - From SecureMisr Company Vendor Homepage: https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html Version: 12.2.1.3...
Oracle Reports Developer Component 12.2.1.3 - Cross-site Scripting
Exploit Title: Cross-site Scripting XSS Date: 2019-01-15 Exploit Author: Mohamed M.Fouad - From SecureMisr Company Vendor Homepage: https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html Version: 12.2.1.3 REQUIRED Tested on: Windows 10 CVE : CVE-2019-2413 POC:...
CVE-2019-2413
Vulnerability in the Oracle Reports Developer component of Oracle Fusion Middleware subcomponent: Valid Session. The supported version that is affected is 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Reports Developer...
CVE-2019-2413
Vulnerability in the Oracle Reports Developer component of Oracle Fusion Middleware subcomponent: Valid Session. The supported version that is affected is 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Reports Developer...
Design/Logic Flaw
Vulnerability in the Oracle Reports Developer component of Oracle Fusion Middleware subcomponent: Valid Session. The supported version that is affected is 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Reports Developer...
CVE-2019-2413
Vulnerability in the Oracle Reports Developer component of Oracle Fusion Middleware subcomponent: Valid Session. The supported version that is affected is 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Reports Developer...
CVE-2019-2413
Vulnerability in the Oracle Reports Developer component of Oracle Fusion Middleware subcomponent: Valid Session. The supported version that is affected is 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Reports Developer...
CVE-2019-2413
CVE-2019-2413 affects Oracle Fusion Middleware’s Oracle Reports Developer component (subcomponent: Valid Session) in version 12.2.1.3. The flaw allows an unauthenticated attacker with network access over HTTP to compromise Oracle Reports Developer, with human interaction required for exploitation...
Authorization Bypass
foreman is vulnerable to authorization bypass. Failure to properly enforce permissions on the show and destroy actions for reports can lead to an authenticated user with show and/or destroy report permissions to view and/or delete any reports held in Foreman...
CUBA Platform Reporting Addon Cross-Site Scripting Vulnerability
CUBA Platform is an open source Java Web framework for enterprise applications . Reporting Addon aka Reports Addon is one of the reporting addon . A cross-site scripting vulnerability exists in Reporting Addon in CUBA Platform 6.10.x and earlier versions 2019-01-02 and earlier. A remote attacker...