Web-School ERP 跨站脚本漏洞

Web-School ERP is an application from Web-School India, Inc. An ERP application. A cross-site scripting vulnerability exists in School ERP Pro+Responsive version 1.0, which originates from a cross-site scripting vulnerability in the /schoolerp/officeadmin/ page for the esbankacc, esbankname,...

PT-2024-25048 · Sap · Sap Bank Account Management

Name of the Vulnerable Software and Affected Versions: SAP Bank Account Management affected versions not specified Description: The issue results from a lack of necessary authorization checks for authorized users, leading to an escalation of privileges. This has a low impact on the system's...

Who Stole 3.6M Tax Records from South Carolina?

For nearly a dozen years, residents of South Carolina have been kept in the dark by state and federal investigators over who was responsible for hacking into the states revenue department in 2012 and stealing tax and bank account information for 3.6 million people. The answer may no longer be a...

CVE-2024-30217

Cash Management in SAP S/4 HANA does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. By exploiting this vulnerability, an attacker can approve or reject a bank account application affecting the integrity of the application...

CVE-2024-30217

CVE-2024-30217 – SAP S/4HANA Cash Management : The vulnerability arises because the Cash Management component does not perform necessary authorization checks for an authenticated user, enabling privilege escalation to approve or reject a bank account application. This specifically affects the int...

PT-2024-23262 · Sap · Sap S/4Hana

Name of the Vulnerable Software and Affected Versions: SAP S/4 HANA affected versions not specified Description: The issue is related to the Cash Management component in SAP S/4 HANA, which fails to perform necessary authorization checks for an authenticated user. This results in an escalation of...

CVE-2024-24739

SAP Bank Account Management BAM allows an authenticated user with restricted access to use functions which can result in escalation of privileges with low impact on confidentiality, integrity and availability of the application...

CVE-2024-24739

SAP Bank Account Management BAM allows an authenticated user with restricted access to use functions which can result in escalation of privileges with low impact on confidentiality, integrity and availability of the application...

Design/Logic Flaw

SAP Bank Account Management BAM allows an authenticated user with restricted access to use functions which can result in escalation of privileges with low impact on confidentiality, integrity and availability of the application...

CVE-2024-24739 Missing authorization check in SAP BAM (Bank Account Management)

SAP Bank Account Management BAM allows an authenticated user with restricted access to use functions which can result in escalation of privileges with low impact on confidentiality, integrity and availability of the application...

SAP Bank Account Management Security Vulnerability

SAP Bank Account Management is a bank account management system from SAP, Germany. A security vulnerability exists in SAP Bank Account Management BAM that originates from allowing authenticated users with restricted access to use functionality, which could result in an escalation of privileges...

PT-2024-3900 · Sap · Sap Bank Account Management

Name of the Vulnerable Software and Affected Versions: SAP Bank Account Management BAM affected versions not specified Description: The issue is related to the lack of an authorization procedure in SAP Bank Account Management BAM, which can allow a remote attacker to escalate their privileges. Th...

CVE-2024-21736

SAP S/4HANA Finance for Advanced Payment Management - versions SAPSCORE 128, S4CORE 107, does not perform necessary authorization checks. A function import could be triggered allowing the attacker to create in-house bank accounts leading to low impact on the confidentiality of the application...

SAP S/4HANA Authorization Issues Vulnerability

SAP S/4HANA is an enterprise resource management software based on the SAP HANA in-memory database system from SAP, Germany. An authorization issue vulnerability exists in SAP S/4HANA Finance that stems from not performing required authorization checks. A function import can be triggered, allowin...

Top Industries Significantly Impacted by Illicit Telegram Networks

In recent years the rise of illicit activities conducted within online messaging platforms has become a growing concern for countless industries. One of the most notable platforms that has been host to many malicious actors and nefarious activities has been Telegram. Thanks to its accessibility,...

Microsoft Excel Spoofing

Title: Microsoft Excel Spoofing Vulnerability Author: nu11secur1ty Date: 04.06.2023 Vendor: https://www.microsoft.com/ Software: https://www.microsoft.com/en-us/microsoft-365/excel Reference: https://www.rapid7.com/fundamentals/spoofing-attacks/ CVE-2023-23398 Description: The attack itself is...

Microsoft Excel Spoofing Vulnerability

Title: Microsoft Excel Spoofing Vulnerability Author: nu11secur1ty Vendor: https://www.microsoft.com/ Software: https://www.microsoft.com/en-us/microsoft-365/excel Reference: https://www.rapid7.com/fundamentals/spoofing-attacks/ CVE-2023-23398 Description: The attack itself is carried out locally...

Security News This Week: Sensitive US Military Emails Exposed

Plus: Iran’s secret torture black sites, hacking a bank account with AI-generated voice, and Lance Bass’ unhinged encounter in Russia...

SAP Bank Account Management Information Disclosure Vulnerability

SAP Bank Account Management is a bank account management system from SAP. An information disclosure vulnerability exists in the SAP Bank Account Management application, which stems from the fact that when a user clicks on a smart link to navigate to another application, personal data is displayed...

CVE-2022-46163 travel-support-program vulnerable to data exfiltration via Ransack query injection

Travel support program is a rails app to support the travel support program of openSUSE TSP. Sensitive user data bank account details, password Hash can be extracted via Ransack query injection. Every deployment of travel-support-program below the patched version is affected. The...