CVE-2019-18626

Harris Ormed Self Service before 2019.1.4 allows an authenticated user to view W-2 forms belonging to other users via an arbitrary empNo value to the ORMEDMIS/Data/PY/T4W2Service.svc/RetrieveW2EntriesForEmployee URI, thus exposing sensitive information including employee tax information, social...

CVE-2025-13953 Bypass in the authentication method of the GTT Sistema de Información Tributario application

Bypass vulnerability in the authentication method in the GTT Tax Information System application, related to the Active Directory LDAP login method. Authentication is performed through a local WebSocket, but the web application does not properly validate the authenticity or origin of the data...

CVE-2025-13953 Bypass in the authentication method of the GTT Sistema de Información Tributario application

Bypass vulnerability in the authentication method in the GTT Tax Information System application, related to the Active Directory LDAP login method. Authentication is performed through a local WebSocket, but the web application does not properly validate the authenticity or origin of the data...

PT-2025-50321

Bypass vulnerability in the authentication method in the GTT Tax Information System application, related to the Active Directory LDAP login method. Authentication is performed through a local WebSocket, but the web application does not properly validate the authenticity or origin of the data...

EUVD-2001-0461

Malware in sbrugna...

EUVD-2019-8350

Malware in sbrugna...

Code injection

Harris Ormed Self Service before 2019.1.4 allows an authenticated user to view W-2 forms belonging to other users via an arbitrary empNo value to the ORMEDMIS/Data/PY/T4W2Service.svc/RetrieveW2EntriesForEmployee URI, thus exposing sensitive information including employee tax information, social...

FBI Warns Of Spike In W-2 Phishing Campaigns

The Federal Bureau of Investigation is warning businesses about a spike in phishing campaigns requesting W-2 information from payroll personnel. In a recent security advisory the FBI warned it has seen an increase since January in reports of compromised or spoofed emails involving W-2 forms. Thes...

Threat Outbreak Alert: Fake Tax Information Document Email Messages on May 7, 2014

Medium Alert ID: 34150 First Published: 2014 May 7 13:40 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a fake tax information document for the recipient. The email message attempts to convince the recipient to open the...

Threat Outbreak Alert: Fake Tax Information Notice Email Messages on April 2, 2014

Medium Alert ID: 33628 First Published: 2014 April 2 19:39 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain tax information for the recipient. The text in the email message attempts to convince the recipient to open the...

Threat Outbreak Alert: Fake Tax Information Request Email Messages on March 31, 2014

Medium Alert ID: 33579 First Published: 2014 March 31 15:42 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a request for tax information for the recipient. The text in the email message attempts to convince the recipien...

Threat Outbreak Alert: Fake Tax Information Report Email Messages on January 8, 2014

Medium Alert ID: 32373 First Published: 2014 January 8 21:39 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain tax information for the recipient. The text in the email message attempts to convince the recipient to open the...

Security Advisory - MyTaxexpress 2003

Original Advisory: Tuesday, March 25, 2003 Severity: Medium - High Description: Unencrypted tax-return information saved in C:My Documents by default can pose security risks, and may disclose financial/personal information to the Internet via peer-to-peer P2P networks. Version: Tested on the...