workforcenow.adp.com XSS vulnerability

Open Bug Bounty ID: OBB-282696 Description| Value ---|--- Affected Website:| workforcenow.adp.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

On Ransomware Hitting an Online Casino, Brazil Taking WhatsApp Offline, And More

Mike Mimoso, Chris Brook, and Threatpost’s newest reporter, Tom Spring, discuss the week in news, including a first hand account of an online casino’s experience with a Teslacrypt infection, Brazil shutting down WhatsApp, and attackers mining an ADP portal for W-2s. Download:...

Identity Thieves Used Leaked PII to Steal ADP Payroll Info

Cybercriminals accessed a W-2 portal maintained by payroll company ADP recently to glean sensitive information about employees at a handful of companies. The company is stressing that the company itself wasn’t hacked, but that it appears identity thieves may have been able to create ADP accounts ...

Threat Outbreak Alert RuleID19504: Email Messages Distributing Malicious Software on November 18, 2015

Medium Alert ID: 42157 First Published: 2015 November 18 21:45 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19504 may contain the following files: Name |...

Threat Outbreak Alert RuleID18835: Email Messages Distributing Malicious Software on November 17, 2015

Medium Alert ID: 41616 First Published: 2015 October 20 20:23 GMT Last Updated: 2015 November 18 14:00 GMT Version: 10 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID1883...

Threat Outbreak Alert RuleID18782: Email Messages Distributing Malicious Software on October 17, 2015

Medium Alert ID: 41589 First Published: 2015 October 19 13:34 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID18782 may contain the following files: Name |...

Threat Outbreak Alert RuleID14320: Email Messages Distributing Malicious Software on March 27, 2015

Medium Alert ID: 38092 First Published: 2015 March 27 17:54 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID14320 may contain the following files: Name | Si...

ADP Cloud Service Detection

Binary data 8418.prm...

CVE-2014-5843

The ADP AGENCY Immobiliare aka com.wAdpagencyAndroid application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The ADP AGENCY Immobiliare aka com.wAdpagencyAndroid application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5843

CVE-2014-5843 affects the ADP AGENCY Immobiliare Android app (com.wAdpagencyAndroid) version 0.1. The issue is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and steal sensitive information via a crafted certificate. The NVD...

CVE-2014-5843

The ADP AGENCY Immobiliare aka com.wAdpagencyAndroid application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Threat Outbreak Alert RuleID11363: Email Messages Distributing Malicious Software on September 2, 2014

Medium Alert ID: 35547 First Published: 2014 September 2 15:21 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11363 may contain the following files: Name |...

Vz (Adp) Forum 2.0.3 - Remote Password Disclosure Vulnerablity

No description provided by source. SvADP Forum 2.0.3 Remote Password Disclosure Vulnerablity S.name:ADP Forum Affected version:2.0.3 Download&Demo:http://www.linux.it/fedro/index.php?pag=scripts&lang=en Risk:Very Highly Critical Author:Dr Max Virus Location:Egypt POC:...

ADP Forum 2.0.x Subject Field HTML Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/17047/info ADP Forum is prone to an HTML-injection vulnerability. The application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code wou...

Threat Outbreak Alert RuleID10470: Email Messages Distributing Malicious Software on June 27, 2014

Medium Alert ID: 34779 First Published: 2014 June 27 18:06 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID10470 may contain the following files: Name | Siz...

Threat Outbreak Alert: Fake Software Update Notification Email Messages on December 9, 2013

Medium Alert ID: 32088 First Published: 2013 December 9 15:39 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a software security update notification from ADP. The text in the email message attempts to convince the...

Pony Botnet Controller Has 2 Million Stolen, Weak Passwords

So what’s worse: Finding two million passwords harvested by a botnet, or learning that most of the stolen passwords are terribly weak? Researchers at Trustwave found another Pony botnet controller recently that oversees a trove of close to two million website logins, email account credentials, as...

Threat Outbreak Alert: Fake ADP Security Update Email Messages on November 21, 2013

Medium Alert ID: 31862 First Published: 2013 November 21 21:27 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a security update from ADP for the recipient. The text in the email message attempts to convince the recipien...

Threat Outbreak Alert: Fake Payroll Alert Notification Email Messages on October 30, 2013

Medium Alert ID: 31567 First Published: 2013 October 30 19:00 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a payroll alert notification for the recipient. The text in the email message attempts to convince the recipie...