Accenture Mercury Code Issue Vulnerability

Accenture Mercury is a microservices rapid development platform. A code issue vulnerability exists in Accenture Mercury versions prior to 1.12.28. The vulnerability arises from an improperly designed or implemented code development process for a web-based system or product. No detailed...

CVE-2020-10990

An XXE issue exists in Accenture Mercury before 1.12.28 because of the platformlambda/core/serializers/SimpleXmlParser.java component...

CVE-2020-10990

CVE-2020-10990 affects Accenture Mercury before 1.12.28 due to the platformlambda/core/serializers/SimpleXmlParser.java component, describing an XXE issue. The connected sources consistently identify this as an XXE vulnerability rooted in that component/version range. No detailed exploit vectors,...

Cisco UCS Director, Cisco Integrated Management Controller Supervisor - Multiple Vulnerabilities

Multiple critical vulnerabilities in Cisco UCS Director, Cisco Integrated Management Controller Supervisor and Cisco UCS Director Express for Big Data Discovered by Pedro Ribeiro email protected from Agile Information Security ================================================================...

iNSYNQ Ransom Attack Began With Phishing Email

A ransomware outbreak that hit QuickBooks cloud hosting firm iNSYNQ in mid-July appears to have started with an email phishing attack that snared an employee working in sales for the company, KrebsOnSecurity has learned. It also looks like the intruders spent roughly ten days rooting around...

MegaCortex Ransomware Revamps for Mass Distribution

A dangerous enterprise-focused ransomware, MegaCortex, has been retooled to become a weapon for wide-scale attacks. Previously used only in manual, post-network-exploitation, targeted campaigns on carefully selected targets, MegaCortex now has a second variant that adds automation to the kill...

GE Communicator

1. EXECUTIVE SUMMARY CVSS v3 7.6 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: GE Equipment: Communicator Vulnerability: Heap-based Buffer Overflow 2. RISK EVALUATION Exploitation could allow attackers to execute arbitrary code or create a denial-of-service condition. 3...

dh.aiam.accenture.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-633810 Description| Value ---|--- Affected Website:| dh.aiam.accenture.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

Data Pours from Cloud—And ‘The Enemy is Us’

Accenture, Verizon, Dow Jones and Deep Root Analytics are just the tip of the iceberg when it comes to the millions of private records and sensitive enterprise data exposed on cloud backends this year. And the problem is getting worse not better. “The enemy is us,” said Chris Vickery, director of...

Massive Trove of Sensitive ‘Accenture’ Data Exposed Online

By Uzair Amir On September 17th, 2017, Chris Vickery, director of Cyber Risk This is a post from HackRead.com Read the original post: Massive Trove of Sensitive Accenture Data Exposed Online...

Internal Accenture Data, Customer Information Exposed in Public Amazon S3 Bucket

A potentially devastating Amazon S3 bucket exposure left internal Accenture private keys, secret API data and other information publicly available to anyone who could then leverage it to attack the global consulting firm and its clients. The exposure was privately reported to Accenture on Sept. 1...

Logstash vulnerability CVE-2015-5378

Summary: Logstash 1.5.2 and prior versions are vulnerable to a SSL/TLS security issue called the FREAK attack. If you are using the Lumberjack input, FREAK allows an attacker to successfully implement a man in the middle attack, intercepting communication between the Logstash Forwarder agent and...