Ukraine Arrests Hackers for Selling 100 Million Email, Instagram Accounts

By Waqas Ukrainian police seized a massive trove of 100 million stolen email and Instagram accounts - Three individuals were… This is a post from HackRead.com Read the original post: Ukraine Arrests Hackers for Selling 100 Million Email, Instagram Accounts...

Weak Cryptographic Hash

Liferay Portal is vulnerable to Weak Cryptographic Hash. The vulnerability exists due to the default password hashing algorithm PBKDF2-HMAC-SHA1 having a low work factor in the Liferay Portal. It allows attackers to crack password hashes quickly, potentially compromising user accounts and gaining...

PT-2024-3990

Name of the Vulnerable Software and Affected Versions Progress Telerik Report Server versions 2024 Q1 10.0.24.305 or earlier Description The issue is related to an authentication bypass vulnerability in Progress Telerik Report Server, allowing an unauthenticated attacker to gain access to...

PT-2024-22686

Name of the Vulnerable Software and Affected Versions oauthenticator versions prior to 16.3.0 Description The issue is related to the GoogleOAuthenticator.hosted domain parameter, which is intended to restrict access to Google accounts that are part of one or more Google organizations verified to...

CVE-2023-40278

creationtimestamp| type| source ---|---|--- 2024-03-19 13:26:42+00:00| seen| https://t.me/ctinow/211442 2024-03-19 13:31:16+00:00| seen| https://t.me/ctinow/211461...

Store manager admits SIM swapping his customers

A 42-year-old manager at an unnamed telecommunications company has admitted SIM swapping customers at his store. SIM swapping, also known as SIM jacking, is the act of illegally taking over a target’s cell phone number and re-routing it to a phone under the attackers control. Once an attacker has...

SUSE CVE-2024-22513

djangorestframework-simplejwt version 5.3.1 and before is vulnerable to information disclosure. A user can access web application resources even after their account has been disabled due to missing user validation checks via the foruser method...

CVE-2024-27914

creationtimestamp| type| source ---|---|--- 2024-03-18 18:21:52+00:00| seen| https://t.me/ctinow/210824 2024-03-18 18:26:45+00:00| seen| https://t.me/ctinow/210829...

Bypassing Brute Force Protection via Application Crash and In-Memory Data Loss

Summary An attacker can exploit a chain of vulnerabilities, including a Denial of Service DoS flaw and in-memory data storage weakness, to effectively bypass the application's brute force login protection. This makes the application susceptible to brute force attacks, compromising the security of...

Midnight Blizzard Attack Detection in Trellix Helix

Midnight Blizzard Attack Detection in Trellix Helix By Ian Shefferman · March 18, 2024 On January 25, 2024, Microsoft reported a breach of their systems by the Russian APT group Midnight Blizzard, also known as APT29 and Cozy Bear. The attackers performed a password spray, compromised a Microsoft...

RHSA-2020:0720

creationtimestamp| type| source ---|---|--- 2024-03-16 10:16:46+00:00| seen| https://t.me/ctinow/209458 2024-03-16 10:16:48+00:00| seen| https://t.me/ctinow/209459 2024-03-17 11:41:32+00:00| seen| https://t.me/ctinow/209873...

DEBIAN-CVE-2024-22513

djangorestframework-simplejwt version 5.3.1 and before is vulnerable to information disclosure. A user can access web application resources even after their account has been disabled due to missing user validation checks via the foruser method...

UBUNTU-CVE-2024-22513

djangorestframework-simplejwt version 5.3.1 and before is vulnerable to information disclosure. A user can access web application resources even after their account has been disabled due to missing user validation checks via the foruser method...

CVE-2021-47120

creationtimestamp| type| source ---|---|--- 2024-03-15 22:27:07+00:00| seen| https://t.me/ctinow/209208 2024-03-16 19:56:28+00:00| seen| https://t.me/ctinow/209690...

CVE-2021-47114

creationtimestamp| type| source ---|---|--- 2024-03-15 22:26:58+00:00| seen| https://t.me/ctinow/209202 2024-03-16 20:31:23+00:00| seen| https://t.me/ctinow/209706...

CVE-2024-2537

creationtimestamp| type| source ---|---|--- 2024-03-15 19:26:15+00:00| seen| https://t.me/ctinow/209057 2024-03-15 19:26:18+00:00| seen| https://t.me/ctinow/209060 2024-03-16 21:23:56+00:00| seen| https://t.me/arpsyndicate/4259...

CVE-2024-28318

creationtimestamp| type| source ---|---|--- 2024-03-15 16:21:53+00:00| seen| https://t.me/ctinow/208907 2024-03-15 16:26:33+00:00| seen| https://t.me/ctinow/208917 2026-06-06 10:01:08+00:00| seen| https://bsky.app/profile/sec-news-bot.bsky.social/post/3mnmfhm3pgc2c...

CVE-2024-28053

creationtimestamp| type| source ---|---|--- 2024-03-15 10:21:47+00:00| seen| https://t.me/ctinow/208591 2024-03-15 10:26:43+00:00| seen| https://t.me/ctinow/208596...

CVE-2024-2482

creationtimestamp| type| source ---|---|--- 2024-03-15 07:41:30+00:00| seen| https://t.me/ctinow/208468 2024-03-15 08:26:09+00:00| seen| https://t.me/ctinow/208497 2024-03-15 08:31:55+00:00| seen| https://t.me/ctinow/208505 2024-03-16 21:37:59+00:00| seen| https://t.me/arpsyndicate/4262...

Improper access control

Broken access control in the component /admin/management/users of School Fees Management System v1.0 allows attackers to escalate privileges and perform Administrative actions, including adding and deleting user accounts...