Facebook and Instagram passwords were stored in plaintext, Meta fined

Ireland’s privacy watchdog Data Protection Commission DPC has fined Meta €91M $101M after the discovery in 2019 that Meta had stored 600 million Facebook and Instagram passwords in plaintext. The DPC ruled that Meta was in violation of GDPR on several occasions related to this breach. It determin...

CVE-2024-8632

The KB Support – WordPress Help Desk and Knowledge Base plugin for WordPress is vulnerable to unauthorized access and modification of data due to a missing capability check on the 'kbsajaxloadfrontendreplies' and 'kbsajaxmarkreplyasread' functions in all versions up to, and including, 1.6.6. This...

Kaiten 安全漏洞

Kaiten is an employee management platform from Kaiten Inc. A security vulnerability exists in Kaiten version 57.131.12 and prior versions, which stems from a vulnerability that allows an attacker to bypass the PIN authentication mechanism, enabling the attacker to perform a brute force attack to...

Facial DNA provider leaks biometric data via WordPress folder

ChiceDNA exposed 8,000 sensitive records, including biometric images, personal details, and facial DNA data in an unsecured WordPress…...

Meta Fined €91 Million for Storing Millions of Facebook and Instagram Passwords in Plaintext

The Irish Data Protection Commission DPC has fined Meta €91 million $101.56 million as part of a probe into a security lapse in March 2019, when the company disclosed that it had mistakenly stored users' passwords in plaintext in its systems. The investigation, launched by the DPC the next month,...

The vulnerability in the component opencv/modules/imgcodecs/src/grfmt_pxm.cpp of the OpenCV library, which is part of the Open Source Computer Vision Library (OpenCV), allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability in the opencv/modules/imgcodecs/src/grfmtpxm.cpp file of the Computer Vision Library, which is part of the Open Source Computer Vision Library OpenCV, involves a numerical overflow issue. Exploiting this vulnerability could allow an attacker to gain access to confidential data,...

The vulnerability of the WebRTC component in Google Chrome browsers, related to recording beyond the buffer limit, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the WebRTC component in the Google Chrome web browser is related to memory corruption beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to access sensitive data, compromise its integrity, and cause service interruptions...

MAL-2024-9012 Malicious code in lodasher (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08b73faea89567454093d1817401e11424bb581f04b34625535c369fd513c5b7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

HCL Nomad 安全漏洞

HCL Nomad is an application for using and managing the Domino application development platform in mobile devices from HCL USA. A security vulnerability exists in HCL Nomad that stems from vulnerability to insufficient session expiration, where an unauthenticated attacker can obtain old session...

Mattermost Unauthorized Access Vulnerability

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from an unauthorized access vulnerability that stems from failing to properly authorize access to an archive channel when viewing the archive channel is disabled. An attacker could...

YPay 安全漏洞

YPay is an aggregated signature-free payment system for individual webmasters by kacins personal developer. A security vulnerability exists in YPay version 1.2.0, which stems from an arbitrary file upload vulnerability that allows an attacker to execute arbitrary code via a ZIP archive in...

Oceanic Software ValeApp 安全漏洞

ValeApp is a mobile application from Oceanic Software for providing convenient and fast parking services. A security vulnerability previously existed in Oceanic Software ValeApp version 2.0.0, which originated from the inclusion of a sensitive information leak that could lead to JavaScript...

ValeApp 安全漏洞

ValeApp is a mobile application from Oceanic Software for providing convenient and fast parking services. A security vulnerability previously existed in ValeApp version 2.0.0, which stemmed from the inclusion of a brute-force cracking issue...

HCL Traveler 安全漏洞

HCL Traveler is a software from HCL Corporation, USA. used to provide automatic, bi-directional, wireless synchronization between HCL Domino servers and wireless handheld devices. A security vulnerability exists in HCL Traveler versions prior to 3.0.9. An attacker exploited the vulnerability to...

National Keep CyberMath 安全漏洞

National Keep CyberMath is a cybersecurity risk analysis tool for organizations from National Keep. A security vulnerability exists in versions prior to National Keep CyberMath CYBM.240816253 that stems from the presence of an authorization error vulnerability that allows access to functionality...

Cybersecurity Compass: Bridging the Communication Gap

Discover how to use the Cybersecurity Compass to foster effective conversations about cybersecurity strategy between non-technical and technical audiences, focusing on the phases of before, during, and after a breach...

MEANStore 安全漏洞

MEANStore is an e-commerce/retail software solution from the individual developer Michael Lynn. A security vulnerability exists in version 1.0 of MEANStore that originates from user interaction with a carefully constructed password reset link, allowing an attacker to obtain a password reset token...

dingfanzu 安全漏洞

dingfanzu is a php-based takeout ordering website by gk2007 individual developer. A security vulnerability exists in dingfanzu version 1.0, which originates from a cross-site request forgery CSRF vulnerability contained in /admin/doAdminAction.php?act=addCate...

dingfanzu 安全漏洞

dingfanzu is a php-based takeaway ordering website by gk2007 individual developer. A security vulnerability exists in dingfanzu version 1.0, which originates from a cross-site request forgery CSRF vulnerability via /admin/doAdminAction.php?act=delCate&id=31...

Hewlett Packard Enterprise Aruba Networks Instant 安全漏洞

Hewlett Packard Enterprise Aruba Networks Instant is a wireless network from Hewlett Packard Enterprise, Inc. provides the only Wi-Fi solution that is easy to set up. A security vulnerability exists in Hewlett Packard Enterprise Aruba Networks Instant. An attacker could execute arbitrary code by...