CVE-2024-21074

CVE-2024-21074 affects Oracle E-Business Suite, Oracle Trade Management (Finance LOV) with affected versions 12.2.3–12.2.13. The issue allows an unauthenticated attacker, over HTTP, to access Oracle Trade Management data due to insufficient input validation (root cause). Impact is unauthorized ac...

PT-2024-4897 · Oracle · Oracle Trade Management +1

Name of the Vulnerable Software and Affected Versions: Oracle E-Business Suite component: Finance LOV versions 12.2.3 through 12.2.13 Description: A vulnerability in the Oracle Trade Management product allows an unauthenticated attacker with network access via HTTP to compromise Oracle Trade...

Oracle E-Business Suite 安全漏洞

Oracle E-Business Suite E-Business Suite and Oracle Trade Management are both products of Oracle Corporation.Oracle E-Business Suite is a fully integrated suite of global business management software. The software provides customer relationship management, service management, financial management...

Oracle E-Business Suite 的 Oracle Trade Management 安全漏洞

Oracle E-Business Suite E-Business Suite and Oracle Trade Management are both products of Oracle Corporation.Oracle E-Business Suite is a fully integrated suite of global business management software. The software provides customer relationship management, service management, financial management...

Oracle E-Business Suite 安全漏洞

Oracle E-Business Suite E-Business Suite is a fully integrated set of global business management software from Oracle. The software provides customer relationship management, service management, financial management and other functions. A security vulnerability exists in Oracle Trade Management f...

Oracle E-Business Suite 的 Oracle Trade Management 安全漏洞

Oracle E-Business Suite E-Business Suite and Oracle Trade Management are both products of Oracle Corporation.Oracle E-Business Suite is a fully integrated suite of global business management software. The software provides customer relationship management, service management, financial management...

Oracle E-Business Suite 安全漏洞

Oracle E-Business Suite E-Business Suite and Oracle Trade Management are both products of Oracle Corporation.Oracle E-Business Suite is a fully integrated suite of global business management software. The software provides customer relationship management, service management, financial management...

digitaltradelaw.ch Cross Site Scripting vulnerability OBB-3898975

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

trade-glaze.com Cross Site Scripting vulnerability OBB-3898745

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

SEMCMS 安全漏洞

SEMCMS is a foreign trade website content management system CMS that supports multiple languages. A security vulnerability exists in SEMCMS v.4.8, which originates from a SQL injection vulnerability in the lgid parameter in Banner.php...

Friday Squid Blogging: The Geopolitics of Eating Squid

New York Times op-ed on the Chinese dominance of the squid industry: Chinas domination in seafood has raised deep concerns among American fishermen, policymakers and human rights activists. They warn that China is expanding its maritime reach in ways that are putting domestic fishermen around the...

SEMCMS 安全漏洞

SEMCMS is a foreign trade web content management system CMS that supports multiple languages. A security vulnerability exists in SEMCMS version 4.8, which stems from vulnerability to incorrect access control...

Russian Hackers Stole Microsoft Source Code—and the Attack Isn’t Over

Plus: An ex-Google engineer gets arrested for allegedly stealing trade secrets, hackers breach the top US cybersecurity agency, and X’s new feature exposes sensitive user data...

A Close Up Look at the Consumer Data Broker Radaris

If you live in the United States, the data broker Radaris likely knows a great deal about you, and they are happy to sell what they know to anyone. But how much do we know about Radaris? Publicly available data indicates that in addition to running a dizzying array of people-search websites, the...

Ex-Google Engineer Arrested for Stealing AI Technology Secrets for China

The U.S. Department of Justice DoJ announced the indictment of a 38-year-old Chinese national and a California resident for allegedly stealing proprietary information from Google while covertly working for two China-based tech companies. Linwei Ding aka Leon Ding, a former Google engineer who was...

events-trade-shows.press-library.com Cross Site Scripting vulnerability OBB-3854138

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-6441 SQLi in UNI-PA's University Information System

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in UNI-PA University Marketing & Computer Internet Trade Inc. University Information System allows SQL Injection. This issue affects University Information System: before 12.12.2023...

CVE-2023-7184

A vulnerability was found in 7-card Fakabao up to 1.0build20230805 and classified as critical. Affected by this issue is some unknown functionality of the file shop/notify.php. The manipulation of the argument outtradeno leads to sql injection. The exploit has been disclosed to the public and may...

PT-2023-32929 · Unknown · 7-Card Fakabao

Name of the Vulnerable Software and Affected Versions: 7-card Fakabao versions up to 1.0 build20230805 Description: A critical issue was found in the software, affecting some unknown functionality of the file shop/notify.php. The manipulation of the out trade no argument leads to sql injection. T...

PT-2023-32931 · Unknown · 7-Card Fakabao

Name of the Vulnerable Software and Affected Versions: 7-card Fakabao versions 1.0 build20230805 and earlier Description: A critical issue was found in the member/notify.php file, where the manipulation of the out trade no argument leads to SQL injection. The exploit has been disclosed to the...