CVE-2018-2991

CVE-2018-2991 affects Oracle E-Business Suite, specifically the Trade Management UI. Affected versions are 12.1.1–12.2.7. The vulnerability is exploitable over HTTP and does not require authentication, with a prerequisite of user interaction; successful exploitation can grant unauthorized access ...

Unspecified Vulnerability in Oracle E-Business Suite (CNVD-2018-24103)

Oracle E-Business Suite is based on the original Application ERP expansion, including ERP Enterprise Resource Planning, HR Human Resource Management, CRM Customer Relationship Management, and so on a variety of management software collection, is a seamless integration of a management suite. An...

Unspecified Vulnerability in Oracle E-Business Suite (CNVD-2018-24104)

Oracle E-Business Suite is based on the original Application ERP expansion, including ERP Enterprise Resource Planning, HR Human Resource Management, CRM Customer Relationship Management, and so on a variety of management software collection, is a seamless integration of a management suite. An...

SemCMS php version of foreign trade website SEMCMS_Ba****.php page has SQL injection vulnerability

SemCms is a set of open source foreign trade enterprise website management system, mainly used for foreign trade enterprises, compatible with IE, Firefox , google, 360 and other mainstream browsers.SemCms php version written in php language, combined with apache, in window, or linux system to run...

Friday Squid Blogging: Squid Unexpectedly Playing a Part in US/China Trade War

Chinese buyers are canceling orders to buy US squid in advance of an expected 25% tariff. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Read my blog posting guidelines here...

Online Trade - Information Disclosure Vulnerability

Exploit for php platform in category web applications Exploit Title: Online Trade 1 - Information Disclosure Exploit Author: L0RD Vendor Homepage: https://codecanyon.net/item/online-trade-online-forex-and-cryptocurrency-investment-system/21987193?srank=14 CVE: CVE-2018-12908 Version: 1 Tested on:...

Design/Logic Flaw

Brynamics "Online Trade - Online trading and cryptocurrency investment system" allows remote attackers to obtain sensitive information via a direct request for the /dashboard/deposit URI, as demonstrated by discovering database credentials...

CVE-2018-12908

Brynamics "Online Trade - Online trading and cryptocurrency investment system" allows remote attackers to obtain sensitive information via a direct request for the /dashboard/deposit URI, as demonstrated by discovering database credentials...

CVE-2018-12908

Brynamics "Online Trade - Online trading and cryptocurrency investment system" allows remote attackers to obtain sensitive information via a direct request for the /dashboard/deposit URI, as demonstrated by discovering database credentials...

CVE-2018-12908

CVE-2018-12908 affects Brynamics “Online Trade” system. Connected documents describe an information-disclosure vulnerability where remote attackers can obtain sensitive data by directly requesting several dashboard endpoints, notably /dashboard/deposit (and related paths such as /dashboard/addpla...

Unspecified Vulnerability in GOAL Bonanza tradeTrap

GOAL Bonanza GOAL is a tradable Ether ERC20 token. A security vulnerability exists in the GOAL Bonanza tradeTrap. The vulnerability stems from the fact that GOAL Bonanza's smart contract implementation of the mintToken function has no expiration date constraints. The vulnerability can be exploite...

CVE-2018-12068

The sell function of a smart contract implementation for Target Coin TGT, a tradable Ethereum ERC20 token, allows a potential trap that could be used to cause financial damage to the seller, because of overflow of the multiplication of its argument amount and a manipulable variable sellPrice, aka...

CVE-2018-12067

Summary: CVE-2018-12067 affects Substratum (SUB), an Ethereum ERC20 token. Multiple sources describe a vulnerability in the tradeTrap mechanism: the sell function can overflow due to the multiplication of the input amount and a manipulable variable sellPrice, enabling a potential financial loss t...

FTC, Partners Help Small Businesses Stop Scams

The Federal Trade Commission FTC has launched Operation Main Street, an effort with the Better Business Bureau BBB and law enforcement to educate small business owners on how to stop scams targeting their businesses. Accordingly, FTC released Scams and Your Small Business, a guide for businesses...

epsomguardian.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-630461 Description| Value ---|--- Affected Website:| epsomguardian.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

SQL Injection Vulnerability in PHP Multilingual Version V2.7 of SEMCMS Foreign Trade Web Site

SemCms is a set of open source foreign trade enterprise website management system, mainly used for foreign trade enterprises, compatible with IE, Firefox and other mainstream browsers.SemCms using php and vb language writing, combined with apache or iis running. SEMCMS foreign trade website PHP...

bridportnews.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-627851 Description| Value ---|--- Affected Website:| bridportnews.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Facebook Accused of Giving Over 60 Device-Makers Deep Access to User Data

After being embroiled into controversies over its data sharing practices, it turns out that Facebook had granted inappropriate access to its users' data to more than 60 device makers, including Amazon, Apple, Microsoft, Blackberry, and Samsung. According to a lengthy report published by The New...

FTC Releases Alert on Exposed Twitter Passwords

The Federal Trade Commission FTC has issued guidance for Twitter users on changing their passwords. Users should change their Twitter passwords as well as any other accounts that use the same password. NCCIC encourages consumers to review the FTC alert for more information. Refer to the NCCIC Tip...

medica-tradefair.com XSS vulnerability

Open Bug Bounty ID: OBB-608102 Description| Value ---|--- Affected Website:| medica-tradefair.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...