Hacker Leaks Data of 390 Million Users from VK, a Russian Social Network

Hacker HikkI-Chan leaks personal data of over 390 million VK users on Breach Forums, including city, country, full…...

BPL Personal Weighing Scale PWS-01BT IND/09/18/599 安全漏洞

BPL Personal Weighing Scale PWS-01BT IND/09/18/599 is a personal weighing scale from BPL. A security vulnerability exists in BPL Personal Weighing Scale PWS-01BT IND/09/18/599 that originates from sending sensitive information in unencrypted BLE packets...

TinaCMS 安全漏洞

TinaCMS is an open source headless CMS for Markdown, MDX and JSON. A security vulnerability exists in TinaCMS versions prior to 1.6.2, which stems from a search token that may be leaked via a lock file...

The vulnerability of the __nf_register_nethook() function in the netfilter component of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the nfregisternethook function in the netfilter component of the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

Tracelo Location Tracker Data Breach: 1.4 Million Users’ Data Dumped Online

Tracelo, a smartphone geolocation tracker service, was breached on September 1, 2024, exposing data from both its customers…...

Why Incident Response Planning is Critical for Cybersecurity Resilience

Cyber threats are inevitable, making preparedness necessary. In 2023, the average cost of a data breach reached $4.45…...

A week in security (August 26 – September 1)

Last week on Malwarebytes Labs: Iranian cybercriminals are targeting WhatsApp users in spear phishing campaign Fake Canva home page leads to browser lock Telegram CEO Pavel Durov charged with allowing criminal activity CODAC Behavioral Healthcare, US Marshalls are latest ransomware targets SMS...

MAL-2024-8121 Malicious code in @diotoborg/aliquam-dolorum-ipsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bce9c9c0d3eda227797ce38f8f935009e0f87f4df739e3f697f79216a5f395c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8327 Malicious code in @diotoborg/explicabo-laboriosam-maxime (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 55ef48ecbc216be6aa561723cf4641349fc2cb8f1a7073c919f6e78f4cd5ddf7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8653 Malicious code in @diotoborg/temporibus-ea (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4822012ec1a833f674cfa9f32eb442ad1a087d5edf1a5b693743f06491fb2bb8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/inventore-quasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1a444ee9d9ec3755821d71ca496eca8ca75e781195b51f3a0439d262ad700c37 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/enim-veritatis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 737670d0d2eedade6a5643d52aeb3e04a8ef9889aa8d86a3cd1dcfc862183930 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/ducimus-ducimus-sed (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 51e3d070dd2234e66afab6a0c54ee82655fefcf13aa9b18bacd181aa7beb102e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8391 Malicious code in @diotoborg/labore-aspernatur-nobis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a6ceed3753292748ba1d0950f8a70059d5db5098e87c6f79c41047850c4bdea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Overleaf 安全漏洞

Overleaf is an open source online real-time collaborative LaTeX editor from Overleaf Open Source. A security vulnerability exists in Overleaf. An attacker can exploit the vulnerability to load a dictionary file with an arbitrary filename...

gitoxide 安全漏洞

gitoxide is a git implementation written in Rust by the individual developer Sebastian Thiel. A security vulnerability exists in gitoxide versions prior to 0.10.10. An attacker can exploit this vulnerability to obtain sensitive information...

Overleaf 安全漏洞

Overleaf is an open source online real-time collaborative LaTeX editor from Overleaf Open Source. A security vulnerability exists in Overleaf that stems from an insecure configuration of the LaTeX compiler by default...

Halo 安全漏洞

Halo is a powerful and easy-to-use open source website builder from Halo Open Source. A security vulnerability exists in Halo versions prior to 2.17.0. An attacker exploited the vulnerability to execute malicious scripts in a user's browser via specific HTML and JavaScript code...

PT-2024-30647 · Unknown · Easytest Online Test Platform

Name of the Vulnerable Software and Affected Versions: Easytest Online Test Platform versions 24E01 and earlier Description: The issue allows remote authenticated users to execute arbitrary SQL commands via the search parameter in the search course titles function. This enables attackers to run...

CVE-2024-8285

A flaw was found in Kroxylicious. When establishing the connection with the upstream Kafka server using a TLS secured connection, Kroxylicious fails to properly verify the server's hostname, resulting in an insecure connection. For a successful attack to be performed, the attacker needs to perfor...