finance-watch.org Improper Access Control vulnerability OBB-1257240

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

KLA11936 ACE vulnerability in Microsoft Dynamics

A remote code execution vulnerability was found in Microsoft Dynamics. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2020-1182 Related products Microsoft-Dynamics-365 CVE list CVE-2020-1182 critical KB list Solution Install necessary updates fro...

PT-2020-3977 · Microsoft · Dynamics 365 For Finance/Operations

Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 for Finance and Operations version 10.0.11 Description: The issue is related to errors in input data processing, which can allow a remote attacker to execute arbitrary code. An authenticated attacker with privileges to...

finance-magazin.de Cross Site Scripting vulnerability OBB-1243482

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

CVE-2020-14587

Vulnerability in the PeopleSoft Enterprise FIN Expenses product of Oracle PeopleSoft component: Expenses. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise FIN Expenses...

Over 100 New Chrome Browser Extensions Caught Spying On Users

Google recently removed 106 more extensions from its Chrome Web Store after they were found illegally collecting sensitive user data as part of a "massive global surveillance campaign" targeting oil and gas, finance, and healthcare sectors. Awake Security, which disclosed the findings late last...

finance.cad.go.th Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1188849 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

CVE-2019-20809

The price oracle in PriceOracle.sol in Compound Finance Compound Price Oracle 1.0 through 2.0 allows a price poster to set an invalid asset price via the setPrice function, and consequently violate the intended limits on price swings...

CVE-2019-20809

The price oracle in PriceOracle.sol in Compound Finance Compound Price Oracle 1.0 through 2.0 allows a price poster to set an invalid asset price via the setPrice function, and consequently violate the intended limits on price swings...

Design/Logic Flaw

The price oracle in PriceOracle.sol in Compound Finance Compound Price Oracle 1.0 through 2.0 allows a price poster to set an invalid asset price via the setPrice function, and consequently violate the intended limits on price swings...

CVE-2019-20809

CVE-2019-20809 affects Compound Finance’s PriceOracle.sol (Compound Price Oracle 1.0–2.0). A price poster can call setPrice to set an invalid asset price, violating intended swing limits and potentially manipulating downstream pricing. Exploitation details are not provided in the connected docume...

CVE-2019-20809

The price oracle in PriceOracle.sol in Compound Finance Compound Price Oracle 1.0 through 2.0 allows a price poster to set an invalid asset price via the setPrice function, and consequently violate the intended limits on price swings...

Beijing Chain Home Real Estate Brokerage Co. Chain Home app suffers from denial-of-service vulnerability

Chain Home App is an official client of Chain Home, a large-scale real estate leasing and trading website. Chain Home App provides services of second-hand houses, new houses, rental houses, real estate finance and wealth management, real estate appraisal and other business types. There is a...

Targeted Phishing Attacks Successfully Hacked Top Executives At 150+ Companies

In the last few months, multiple groups of attackers successfully compromised corporate email accounts of at least 156 high-ranking officers at various firms based in Germany, the UK, Netherlands, Hong Kong, and Singapore. Dubbed 'PerSwaysion,' the newly spotted cyberattack campaign leveraged...

Advanced Persistent Threat 2020 - Golden_hands (DE|EU)

Document Title: =============== Advanced Persistent Threat 2020 - Goldenhands DE|EU References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2256 Document: https://www.vulnerability-lab.com/resources/documents/2256.rar Magazine Article:...

L'Oréal L'Oréal Finance app has unauthorized access vulnerability

L'Oréal Finance app is the news app of L'Oréal Group, which allows users to browse the latest L'Oréal Group financial information in English and French on L'Oréal Finance. An unauthorized access vulnerability exists in the L'Oréal L'Oréal Finance app. An attacker could exploit the vulnerability t...

Amid COVID-19, Global Orgs See a 148% Spike in Ransomware Attacks; Finance Industry Heavily Targeted

Cyber criminals often exploit fear and uncertainty during major world events by launching cyberattacks. These attacks are often performed with social engineering campaigns leveraging malicious emails that lure victims to install malware that steals financial data and other valuable personal...

Cumulative Update 54 for Microsoft Dynamics NAV 2016 (Build 51811)

Cumulative Update 54 for Microsoft Dynamics NAV 2016 Build 51811 This article applies to Microsoft Dynamics NAV 2016 for all countries and all language locales. An information disclosure vulnerability exists if Microsoft Dynamics Business Central/NAV on-premises does not correctly hide the value ...

Cumulative Update 28 for Microsoft Dynamics NAV 2018 (Build 41920)

Cumulative Update 28 for Microsoft Dynamics NAV 2018 Build 41920 This article applies to Microsoft Dynamics NAV 2018 for all countries and all language locales. An information disclosure vulnerability exists if Microsoft Dynamics Business Central/NAV on-premises does not correctly hide the value ...

Cumulative Update 53 for Microsoft Dynamics NAV 2016 (Build 51775)

Cumulative Update 53 for Microsoft Dynamics NAV 2016 Build 51775 This article applies to Microsoft Dynamics NAV 2016 for all countries and all language locales.A remote code execution vulnerability exists in Microsoft Dynamics NAV. A user who has the permission to access certain features that...