what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 3 of 3

Files from Mert Suoglu

PwC ACE Software For SAP Security 8.10.304 ABAP Injection

Posted Dec 7, 2016

Authored by Ertunga Arsal, Mert Suoglu | Site esnc.de

PwC ACE software has a remotely exploitable security vulnerability which allows injection and execution of malicious ABAP code on the remote SAP system. Version 8.10.304 is affected.

tags | advisory, remote

advisories | CVE-2016-9832

SHA-256 | 09d0145e8338540901d89d889ba9cd283557db57962fdcd684e04dc0bbc61648

Download | Favorite | View

SAP GRC Bypass / Privilege Escalation / Program Execution

Posted Nov 12, 2014

Authored by Ertunga Arsal, Mert Suoglu | Site esnc.de

SAP Governance, Risk and Compliance (SAP GRC) suffers from SoD bypass, privilege escalation, and remote arbitrary program execution vulnerabilities.

tags | advisory, remote, arbitrary, vulnerability

advisories | CVE-2013-3678

SHA-256 | 2c6f6dd2ccedd0df4f801c917ff9f40ee8c504126cec43a0f77af7dde206d446

Download | Favorite | View

SAP Production Planning / Control Privilege Escalation

Posted Apr 16, 2013

Authored by Ertunga Arsal, Mert Suoglu | Site esnc.de

SAP Production Planning and Control suffers from a privilege escalation vulnerability. This vulnerability allows bypassing authority checks that exist before executing a transaction. A transaction in SAP terminology is the execution of a program. By exploiting this vulnerability, an attacker can also control the transaction to be executed, allowing it to obtain critical rights in the system and bypassing certain segregation of duties (SoD) restrictions.

tags | advisory

advisories | CVE-2013-3062

SHA-256 | eff7e22f57554cfb6fb76dc4a0134bc770589d4294f8621e081e553afee5d7da

Download | Favorite | View