June 5, 2018—KB4338548 (OS Build 17134.83)

None None...

App Layering: Recipe for QuickBooks

QuickBooks is an application that licenses and registers to the volume serial number of the local hard disk. When the license is created an encrypted file is stored that can only be unencrypted if the volume serial number matches the system it was installed on. When Unidesk creates a new desktop,...

QuickBooks Recipe

QuickBooks is an application that licenses and registers to the volume serial number of the local hard disk. When the license is created an encrypted file is stored that can only be unencrypted if the volume serial number matches the system it was installed on. When Unidesk creates a new desktop,...

Intuit QuickBooks Desktop 2017 Credential Disclosure Vulnerability

Intuit QuickBooks Desktop 2017 suffers from an administrative credential disclosure vulnerability. + Credits: Maxim Tomashevich + Website: https://www.thegrideon.com/quickbooks-forensics.html + Details: https://www.thegrideon.com/qb-internals-2017.html Vendor: --------------------- www.intuit.com...

Intuit QuickBooks Desktop 2017 Credential Disclosure

Credits: Maxim Tomashevich + Website: https://www.thegrideon.com/quickbooks-forensics.html + Details: https://www.thegrideon.com/qb-internals-2017.html Vendor: --------------------- www.intuit.com www.intuit.ca Product: --------------------- QuickBooks Desktop versions: 2017 Vulnerability Type:...

login.quickbooks.com XSS vulnerability

Open Bug Bounty ID: OBB-198619 Description| Value ---|--- Affected Website:| login.quickbooks.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Intuit QuickBooks SQL Injection Vulnerability

Intuit QuickBooks is a suite of small financial management software from Intuit, USA. A SQL injection vulnerability exists in Intuit QuickBooks versions 2007 to 2016, which can be exploited by an attacker to take full control of the program and access or modify data...

Intuit QuickBooks Desktop 2007 2016 - Arbitrary Code Execution

Intuit QuickBooks Desktop 2007 2016 - Arbitrary Code Execution + Credits: Maxim Tomashevich from Thegrideon Software + Website: https://www.thegrideon.com/ + Details: https://www.thegrideon.com/qb-internals-sql.html Vendor: --------------------- www.intuit.com www.intuit.ca www.intuit.co.uk...

Intuit QuickBooks Desktop 2007 < 2016 - Arbitrary Code Execution

Exploit for windows platform in category local exploits + Credits: Maxim Tomashevich from Thegrideon Software + Website: https://www.thegrideon.com/ + Details: https://www.thegrideon.com/qb-internals-sql.html Vendor: --------------------- www.intuit.com www.intuit.ca www.intuit.co.uk Product:...

Intuit QuickBooks Desktop 2007 < 2016 - Arbitrary Code Execution

Credits: Maxim Tomashevich from Thegrideon Software + Website: https://www.thegrideon.com/ + Details: https://www.thegrideon.com/qb-internals-sql.html Vendor: --------------------- www.intuit.com www.intuit.ca www.intuit.co.uk Product: --------------------- QuickBooks Desktop versions: 2007 -...

Threat Outbreak Alert RuleID22503: Email Messages Distributing Malicious Software on April 27, 2016

Medium Alert ID: 44853 First Published: 2016 April 27 13:48 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID22503 may contain the following files: Name | Si...

Threat Outbreak Alert RuleID22043: Email Messages Distributing Malicious Software on April 1, 2016

Medium Alert ID: 44457 First Published: 2016 April 4 13:51 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID22043 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID22041: Email Messages Distributing Malicious Software on April 1, 2016

Medium Alert ID: 44420 First Published: 2016 April 1 16:21 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID22041 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID21931: Email Messages Distributing Malicious Software on March 25, 2016

Medium Alert ID: 44322 First Published: 2016 March 25 20:44 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID21931 and RuleID21931KVR may contain the followi...

Threat Outbreak Alert RuleID20754: Email Messages Distributing Malicious Software on January 27, 2016

Medium Alert ID: 43240 First Published: 2016 January 27 19:50 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20754 may contain the following files: Name |...

Threat Outbreak Alert RuleID19510: Email Messages Distributing Malicious Software on November 18, 2015

Medium Alert ID: 42153 First Published: 2015 November 18 21:45 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19510 may contain the following files: Name |...

QUICKBOOKS ONLINE Cloud Service Detection

Binary data 8504.prm...

phpmoneybooks 1.03 - Stored XSS

No description provided by source. Exploit Title: phpmoneybooks 1.03 Stored XSS Date: Jun 28, 2012 Exploit Author: chap0 - chap0.blogspot.com - @chap0 Vendor Homepage: http://phpmoneybooks.com/ Software Link: http://sourceforge.net/projects/phpmoneybooks/files/phpMoneyBooks103.zip/download Versio...

CVE-2010-5198

Multiple untrusted search path vulnerabilities in Intuit QuickBooks 2010 allow local users to gain privileges via a Trojan horse 1 dbicudtx11.dll, 2 mfc90enu.dll, or 3 mfc90loc.dll file in the current working directory, as demonstrated by a directory that contains a .des, .qbo, or .qpg file. NOTE...

Design/Logic Flaw

Multiple untrusted search path vulnerabilities in Intuit QuickBooks 2010 allow local users to gain privileges via a Trojan horse 1 dbicudtx11.dll, 2 mfc90enu.dll, or 3 mfc90loc.dll file in the current working directory, as demonstrated by a directory that contains a .des, .qbo, or .qpg file. NOTE...