CVE-2018-2655

Vulnerability in the Oracle Work in Process component of Oracle E-Business Suite subcomponent: Assemble/Configure to Order. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker...

CVE-2018-2655

Affected product: Oracle E-Business Suite — Work in Process component (subcomponent Assemble/Configure to Order). Vulnerable versions: 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7. Description from multiple sources confirms an easily exploitable vulnerability allowing an unauthe...

XenMobile Samsung Knox and Android for work integration

XenMobile + Samsung Knox bulk enrollment + AFW integration CurrentlyKnox bulk enrollment and Android for Work enrollment are not supported in conjunction with each other – only one of them can be chosen as the enrollment mode. Created an Enhancement Request to include this feature in the Roadmap...

Unspecified Vulnerability in Oracle E-Business Suite (CNVD-2018-02404)

Oracle E-Business Suite is based on the original Application ERP expansion, including ERP Enterprise Resource Planning, HR Human Resource Management, CRM Customer Relationship Management, and so on a variety of management software collection, is a seamless integration of a management suite. An...

my-work-experience.com XSS vulnerability

Open Bug Bounty ID: OBB-477778 Description| Value ---|--- Affected Website:| my-work-experience.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

PHP Scripts Mall Co-work Space Search Script SQL Injection Vulnerability

PHP Scripts Mall Co-work Space Search Script is a set of PHP based shared space search script by PHP Scripts Mall India. The script supports users to list workspace websites, amenities, location details, contact information etc. A SQL injection vulnerability exists in PHP Scripts Mall Co-work Spa...

CVE-2017-17606

Co-work Space Search Script 1.0 has SQL Injection via the /list city parameter...

CVE-2017-17606

Co-work Space Search Script 1.0 has SQL Injection via the /list city parameter...

Sql injection

Co-work Space Search Script 1.0 has SQL Injection via the /list city parameter...

CVE-2017-17606

Co-work Space Search Script 1.0 has SQL Injection via the /list city parameter...

CVE-2017-17606

CVE-2017-17606 affects the PHP Scripts Mall Co-work Space Search Script 1.0, with a SQL injection vulnerability in the /list endpoint via the city parameter. The root cause is unsanitized input allowing arbitrary SQL execution, leading to potential data disclosure/ modification. In the connected ...

How cryptocurrency mining works: Bitcoin vs. Monero

Ever wondered why websites that are mining in the background don’t mine for the immensely hot Bitcoin, but for Monero instead? We can explain that. As there are different types of cryptocurrencies, there are also different types of mining. After providing you with some background information abou...

Co-work Space Search Script 1.0 SQL Injection

Exploit Title: Co-work Space Search Script 1.0 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/co-work-space-search-script/ Demo: http://ordermanagementscript.com/demo/co-work-space/ Version: 1.0...

Co-work Space Search Script 1.0 - city SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Co-work Space Search Script 1.0 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/co-work-space-search-script/ Demo:...

Co-work Space Search Script 1.0 - 'city' SQL Injection

Exploit Title: Co-work Space Search Script 1.0 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/co-work-space-search-script/ Demo: http://ordermanagementscript.com/demo/co-work-space/ Version: 1.0...

Co-work Space Search Script 1.0 - city SQL Injection

Co-work Space Search Script 1.0 - city SQL Injection Exploit Title: Co-work Space Search Script 1.0 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/co-work-space-search-script/ Demo:...

Denial of Service Against GlobalProtect

A vulnerability exists in PAN-OS that could lead to denying access to GlobalProtect portal, GlobalProtect gateway or preventing configuration commits. Ref PAN-78127 / CVE-2017-15942 PAN-OS contains a vulnerability in GlobalProtect that may allow a non-authenticated third party to mount a Denial o...

How to remove Android for Work v2 configuration

Remove Android For Work v2 configuration from XenMobile Admin Console...

Clarifying the behavior of mandatory ASLR

Last week, the CERT/CC published an advisory describing some unexpected behavior they observed when enabling system-wide mandatory Address Space Layout Randomization ASLR using Windows Defender Exploit Guard WDEG and EMET on Windows 8 and above. In this blog post, we will explain the configuratio...

How to Opt Out of Equifax Revealing Your Salary History

A KrebsOnSecurity series on how easy big-three credit bureau Equifax makes it to get detailed salary history data on tens of millions of Americans apparently inspired a deeper dive on the subject by Fast Company, which examined how this Equifax division has been one of the company's best...