The vulnerability of microprogrammed software in switching equipment such as GigaOrion and GigaLynx, as well as external switching modules like ApexLynx, ApexOrion, and StrataLink, stems from the use of pre-installed user accounts. This allows a malicious individual to gain access to the embedded operating system with administrator privileges.

The vulnerability of microprogrammed switching equipment such as GigaOrion and GigaLynx, as well as external switching modules like ApexLynx, ApexOrion, and StrataLink, is related to the use of a pre-installed root account. Exploiting this vulnerability allows an attacker operating remotely to ga...

Uber Paid Hackers $100k to Hide Massive Theft of 75M Accounts

By Waqas It’s surprising to some and shocking to many. Despite a This is a post from HackRead.com Read the original post: Uber Paid Hackers $100k to Hide Massive Theft of 75M Accounts...

CVE-2017-1000395

Jenkins 2.73.1 and earlier, 2.83 and earlier provides information about Jenkins user accounts which is generally available to anyone with Overall/Read permissions via the /user/username/api remote API. This included e.g. Jenkins users' email addresses if the Mailer Plugin is installed. The remote...

10 tips for safe online shopping on Cyber Monday

Shoppers familiar with the Cyber Monday circus know they’re stepping into the lion’s den. The Internet has always been a lawless place, but it becomes particularly rough during the holiday shopping season. In preparation for the frenzy, cyber villains have crafted a virtual onslaught of social...

#AVGater vulnerability does not affect Windows Defender Antivirus, MSE, or SCEP

On November 10, 2017, a vulnerability called AVGater was discovered affecting some antivirus products. The vulnerability requires a non-administrator-level account to perform a restore of a quarantined file. Windows Defender Antivirus and other Microsoft antimalware products, including System...

CVE-2017-1221

IBM Tivoli Endpoint Manager IBM BigFix 9.2 and 9.5 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 123861...

CVE-2017-1221

IBM Tivoli Endpoint Manager IBM BigFix 9.2 and 9.5 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 123861...

IT threat evolution Q3 2017. Statistics

Q3 figures According to KSN data, Kaspersky Lab solutions detected and repelled 277,646,376 malicious attacks from online resources located in 185 countries all over the world. 72,012,219 unique URLs were recognized as malicious by web antivirus components. Attempted infections by malware that ai...

The vulnerability of D-Link Corp.’s DVG-N5402SP router software, related to the use of pre-installed user accounts, allows a hacker to gain administrator privileges.

The vulnerability of D-Link Corp.’s DVG-N5402SP router software is related to the use of pre-set user accounts. The “root” and “tw” passwords have been set for the “root” and “tw” user accounts, respectively. Exploiting this vulnerability could allow a remote attacker to gain administrator...

The vulnerability of WIFICAM IP cameras’ microprogramming software lies in the use of pre-installed user accounts, allowing intruders to gain access to the root account.

The vulnerability of the authentication service for WIFICAM microprogrammed software cameras relates to the use of pre-installed accounts. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to the root account through a TELNET connection...

The vulnerability of the ftptpd component in the microprogramming software of TP-Link Technologies CO.,LTD.’s C2 and C20i routers allows attackers to compromise the confidentiality, integrity, and accessibility of data.

The vulnerability of the ftptpd component in the C2 and C20i router microprogramming systems is related to the use of pre-installed accounts admin, guest, and test, with passwords “1234”, “guest”, and “test” respectively. Exploiting this vulnerability allows a malicious actor to compromise the...

Zhuhai Light Point Culture Communication Co., Ltd Light Point APP has information leakage vulnerability

Light Dot APP is a reading APP focusing on comics, which integrates comics, stories and knowledge to provide users with a light reading comics platform. There is an information leakage vulnerability when registering and retrieving password to get verification code in Light APP, attackers can...

Cross site scripting

In TinyWebGallery v2.4, an XSS vulnerability is located in the mkname, mkitem, and item parameters of the Add/Create module. Remote attackers with low-privilege user accounts for backend access are able to inject malicious script codes into the TWG Explorer item listing. The request method to...

CVE-2017-16636

In Bludit v1.5.2 and v2.0.1, an XSS vulnerability is located in the new page, new category, and edit post function body message context. Remote attackers are able to bypass the basic editor validation to trigger cross site scripting. The XSS is persistent and the request method to inject via edit...

CVE-2017-16636

In Bludit v1.5.2 and v2.0.1, an XSS vulnerability is located in the new page, new category, and edit post function body message context. Remote attackers are able to bypass the basic editor validation to trigger cross site scripting. The XSS is persistent and the request method to inject via edit...

CVE-2017-16635

In TinyWebGallery v2.4, an XSS vulnerability is located in the mkname, mkitem, and item parameters of the Add/Create module. Remote attackers with low-privilege user accounts for backend access are able to inject malicious script codes into the TWG Explorer item listing. The request method to...

VerticalScope hacked again; 2.7 million user accounts affected

By Waqas In June 2016 we reported that the well-known Toronto, Canada-based This is a post from HackRead.com Read the original post: VerticalScope hacked again; 2.7 million user accounts affected...

Unauthorized Access Vulnerability in Goodbody Knowledge Android APP of Tongfang Co.

Good Body Knowledge Android App is a software to detect the health data in your body. There is an override access vulnerability in the Good Body Knowledge Android APP of Tongfang Co. The attacker registers and logs into the system while grabbing packets and modifying the user ID to query any user...

The vulnerability of the Oracle Identity Manager (OIM), a software platform of Oracle Fusion Middleware, allows a perpetrator to gain full control over the system.

The vulnerability of the Oracle Identity Manager OIM, a software platform of Oracle Fusion Middleware, is related to the use of pre-installed system accounts. Exploiting this vulnerability could allow an attacker, operating remotely, to gain full control over the Oracle Identity Manager using the...

Hardcoded credentials

EMC AppSync Server prior to 3.5.0.1 contains database accounts with hardcoded passwords that could potentially be exploited by malicious users to compromise the affected system...