146 matches found
EUVD-2012-2407
Malware in sbrugna...
EUVD-2007-4454
Malware in sbrugna...
EUVD-2010-5157
Malware in sbrugna...
Linux Distros Unpatched Vulnerability : CVE-2018-6951
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in GNU patch through 2.7.6. There is a segmentation fault, associated with a NULL pointer dereference, leading to a denial of service in...
CVE-2010-5198
Multiple untrusted search path vulnerabilities in Intuit QuickBooks 2010 allow local users to gain privileges via a Trojan horse 1 dbicudtx11.dll, 2 mfc90enu.dll, or 3 mfc90loc.dll file in the current working directory, as demonstrated by a directory that contains a .des, .qbo, or .qpg file. NOTE...
The vulnerability of the intuit_diff_type() function in the pch.c component of the Patch program allows a hacker to trigger a service failure.
The vulnerability of the intuitdifftype function in the pch.c component of the Patch program is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a service failure...
Mailchimp breach feels like deja vu
A threat actor successfully used compromised employee credentials to gain access to 133 accounts on Mailchimp, the mainstream Intuit-owned email marketing platform, in a security incident that recently came to light. "On January 11, the Mailchimp Security team identified an unauthorized actor...
Intuit phish says “we have put a temporary hold on your account”
Intuit released a warning about a phishing email being sent to its customers. The phishing emails tell recipients that their account has been put on hold, and try to trick users into “validating their account” to release it again. Intuit Intuit Inc. is an American business software company that...
Attackers Target Intuit Users by Threatening to Cancel Tax Accounts
Just in time for tax season, Intuit is warning customers of a phishing campaign that threatens to close user accounts if they don’t click on a malicious link. The attacks on the accounting-software specialist that many people use for filing U.S. income tax forms comes as phishers overall are...
Intuit to Share Payroll Data from 1.4M Small Businesses With Equifax
Financial services giant Intuit this week informed 1.4 million small businesses using its QuickBooks Online Payroll and Intuit Online Payroll products that their payroll information will be shared with big-three consumer credit bureau Equifax starting later this year unless customers opt out by t...
quickbooks.intuit.com Cross Site Scripting vulnerability OBB-1339510
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
An issue was discovered in GNU patch through 2.7.6. There is a segmentation fault associated with a NULL pointer dereference leading to a denial of service in the intuit_diff_type function in pch.c aka a "mangled rename" issue.
...
CVE-2018-14833
Intuit Lacerte 2017 has Incorrect Access Control...
CVE-2018-14833
Intuit Lacerte 2017 has Incorrect Access Control...
Improper access control
Intuit Lacerte 2017 has Incorrect Access Control...
CVE-2018-14833
CVE-2018-14833 concerns Intuit Lacerte 2017 with an improper access control vulnerability. The connected records describe a client/server scenario where the server transmits the entire customer list in cleartext over SMB after authentication, enabling an attacker on the network to sniff sensitive...
CVE-2018-14833
Intuit Lacerte 2017 has Incorrect Access Control...
PT-2019-9055
Name of the Vulnerable Software and Affected Versions Intuit Lacerte version 2017 Description The issue is related to Incorrect Access Control. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was...
CVE-2018-14833: Improper Access Control
Intuit Lacerte 2017 has Incorrect Access Control...
Intuit Quicken Deluxe 2018 for Mac Password Protection Authentication Bypass Vulnerability
Summary An exploitable information disclosure vulnerability exists in the password protection functionality of Quicken Deluxe 2018 for Mac version 5.2.2. A specially crafted sqlite3 request can cause the removal of the password protection, allowing an attacker to access and modify the data withou...