56 matches found
PwC and Wiz form strategic alliance in the United Kingdom
PwC UK and Wiz have formed an alliance to bring enhanced security solutions to customers...
customerq.pwc.ca Cross Site Scripting vulnerability OBB-3424689
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Google Uncovers Tool Used by Iranian Hackers to Steal Data from Email Accounts
The Iranian government-backed actor known as Charming Kitten has added a new tool to its malware arsenal that allows it to retrieve user data from Gmail, Yahoo!, and Microsoft Outlook accounts. Dubbed HYPERSCRAPE by Google Threat Analysis Group TAG, the actively in-development malicious software ...
GHSA-4MPJ-488R-VH6M Neo4j Graph Database vulnerable to Path Traversal
Impact Directory Traversal Vulnerabilities found in several functions of apoc plugins in Neo4j Graph database. The attacker can retrieve and download files from outside the configured directory on the affected server. Under some circumstances, the attacker can also create files. Patches The users...
connect.pwc.co.uk Cross Site Scripting vulnerability OBB-1474269
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
eGroupWare 1.14 - (spellchecker.php) Remote Command Execution Exploit
Exploit for php platform in category web applications Exploit Title: eGroupWare 1.14 - 'spellchecker.php' Remote Command Execution Exploit Author: Berk KIRAS Vendor Homepage: https://www.egroupware.org/en/ Version: 1.14 Tested on: Apache Berk KIRAS PwC - Cyber Security Specialist !/usr/bin/python...
Sophos VPN Web Panel 2020 Denial Of Service
Exploit Title: Sophos VPN Web Panel 2020 - Denial of Service Poc Date: 2020-06-17 Exploit Author: Berk KIRAS Vendor Homepage: https://www.sophos.com/ Version:2020 Web Panel Tested on: Apache Berk KIRAS PwC - Cyber Security Specialist Sophos VPN Web Portal Denial of Service Vulnerability System...
taxsummaries.pwc.com XSS vulnerability
Vulnerable URL: http://taxsummaries.pwc.com/uk/taxsummaries/wwts.nsf/vwSearch/"'--! Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No...
CVE-2016-9832
PricewaterhouseCoopers PwC ACE-ABAP 8.10.304 for SAP Security allows remote authenticated users to conduct ABAP injection attacks and execute arbitrary code via 1 SAPGUI or 2 Internet Communication Framework ICF over HTTP or HTTPS, as demonstrated by WEBGUI or Report...
CVE-2016-9832
PricewaterhouseCoopers PwC ACE-ABAP 8.10.304 for SAP Security allows remote authenticated users to conduct ABAP injection attacks and execute arbitrary code via 1 SAPGUI or 2 Internet Communication Framework ICF over HTTP or HTTPS, as demonstrated by WEBGUI or Report...
CVE-2016-9832
CVE-2016-9832 involves PwC ACE-ABAP 8.10.304 for SAP Security. A remote authenticated attacker can perform ABAP injection via SAPGUI or Internet Communication Framework (ICF) over HTTP/HTTPS (WEBGUI or Report) to execute arbitrary code. CNVD/related records describe remote code execution and pote...
pwc.com XSS vulnerability
Vulnerable URL: http://www.pwc.com/gx/en/industries/financial-services/publications/female-millenials.html?'"-- Details: Description| Value ---|--- Patched:| Yes, at 09.04.2016 Latest check for patch:| 09.04.2016 13:38 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...
taxsummaries.pwc.com XSS vulnerability
Vulnerable URL: http://taxsummaries.pwc.com/uk/taxsummaries/wwts.nsf/vwSearch?SearchView=%20FIELD%20CountryName%20contains%20United%20States%20AND%20%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E=1=TRUE=0=1=20 Details: Description| Value ---|--- Patched:| Yes, at 23.03.2017 Latest check for patch:...
1 Click Audio Converter v2.3.6 - Activex Buffer Overflow
Document Title: =============== 1 Click Audio Converter v2.3.6 - Activex Buffer Overflow References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1505 View Video: https://www.youtube.com/watch?v=Ad0wHlHz0KU Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1504 Releas...
1 Click Audio Converter v2.3.6 - Activex Buffer Overflow
Document Title: =============== 1 Click Audio Converter v2.3.6 - Activex Buffer Overflow References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1505 View Video: https://www.youtube.com/watch?v=Ad0wHlHz0KU Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1504 Releas...
Oracle Linux 5 : kernel (ELSA-2008-0275)
The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2008-0275 advisory. 2.6.18-53.1.21.0.1.el5 - NET Add entropy support to e1000 and bnx2 John Sobecki ORA 6045759 - NET Fix msi issue with kexec/kdump Michael Chan ORA 62193...
WM Downloader 3.0.0.9 (Windows XP SP3) - PLS PLA
WM Downloader 3.0.0.9 Windows XP SP3 - PLS PLA !/usr/bin/python . . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com Greetz to all Darkc0de ,AI,ICW Memebers Shoutz to...
WM Downloader v3.0.0.9 (.pls) Exploit (WinXP SP3)
Exploit for unknown platform in category local exploits ================================================== WM Downloader v3.0.0.9 PLS PLA Exploit WinXP SP3 ================================================== !/usr/bin/python . . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ /|\...
Mandriva Linux Security Advisory : kernel (MDVSA-2008:105)
The CIFS filesystem in the Linux kernel before 2.6.22, when Unix extension support is enabled, does not honor the umask of a process, which allows local users to gain privileges. CVE-2007-3740 The drm/i915 component in the Linux kernel before 2.6.22.2, when used with i965G and later chipsets,...
Ubuntu Update for linux-source-2.6.15 vulnerabilities USN-578-1
Ubuntu Update for Linux kernel vulnerabilities USN-578-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN5781.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for linux-source-2.6.15 vulnerabilities USN-578-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...