1013 matches found
trade-mark.ca Cross Site Scripting vulnerability OBB-1248635
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
US Charges 2 Chinese Hackers for Targeting COVID-19 Research and Trade Secrets
The U.S. Department of Justice DoJ yesterday revealed charges against two Chinese nationals for their alleged involvement in a decade-long hacking spree targeting dissidents, government agencies, and hundreds of organizations in as many as 11 countries. The 11-count indictment, which was unsealed...
Online Trade - Online trading and cryptocurrency investment system security breach
Online Trade - Online trading and cryptocurrency investment system is an online forex and currency trading system developed using the Laravel framework. A security vulnerability exists in Online Trade - Online trading and cryptocurrency investment system. A remote attacker can exploit this...
smart2.trade Cross Site Scripting vulnerability OBB-1229731
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2020-14665
Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite component: Invoice. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Trade...
CVE-2020-14665
Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite component: Invoice. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Trade...
Design/Logic Flaw
Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite component: Invoice. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Trade...
CVE-2020-14665
Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite component: Invoice. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Trade...
CVE-2020-14665
Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite component: Invoice. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Trade...
Unspecified Vulnerability in Oracle E-Business Suite (CNVD-2020-44275)
Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management and other functions. trade Management is one of the...
Oracle Oracle E-Business Suite (Jul 2020 CPU)
The versions of Oracle E-Business Suite installed on the remote host are affected by multiple vulnerabilities as referenced in the July 2020 CPU advisory, including the following: - Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite component: Invoice. Supported...
database.arabtradeunion.org Cross Site Scripting vulnerability OBB-1212104
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CS Money: [cs.money] Open Redirect Leads to Account Takeover
Summary: I found an open redirect on https://cs.money domain, using this payload https://cs.money///google.com we can redirect into any domain that we want, you can see the request and response from this image below : ███ Steps To Reproduce: The final payload is having an account takeover as the...
Online Trade - Online trading and cryptocurrency investment system security breach
Online Trade - Online trading and cryptocurrency investment system is a set of online foreign exchange and currency trading system developed using the Laravel framework. A security vulnerability exists in Online Trade - Online trading and cryptocurrency investment system. A remote attacker can...
The vulnerability of the Budget component of the Oracle Trade Management application, which allows a perpetrator to gain unauthorized access to protected information
The vulnerability of the Budget component in the Oracle Trade Management application is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information through the HTTP network protocol...
The vulnerability of the Claims component in the Oracle Trade Management application allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Claims component in Oracle Trade Management is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information via the HTTP network protocol...
nzagritrade.co.nz Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1168030 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
Switching from a “Just in Time” delivery system should include planning ahead
As it becomes clear that some things will never again be the same after the global coronavirus pandemic, it is time to prepare for the future. The cybersecurity implications of upcoming changes will be most noticeable in organizations that rely on security models like the software defined...
SemCms suffers from SQL injection vulnerability (CNVD-2020-26981)
SemCMS is a set of open source foreign trade enterprise website management system, written in php language, can be run under window or linux system. SemCMS has SQL injection vulnerability. Attackers can exploit the vulnerability to obtain sensitive database information...
Unspecified Vulnerability in Oracle E-Business Suite Trade Management
Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management and other functions. trade Management is one of the...