The vulnerability of the Updater service of the Parallels Desktop hypervisor allows a hacker to downgrade the software version.

The vulnerability of the Updater service in Parallels Desktop operating systems is related to a breach of data protection mechanisms. Exploiting this vulnerability could allow an attacker to downgrade the software version...

SiegedSec Hacks Heritage Foundation; Leaks Data Over “Project 2025”

Hacktivist group "SiegedSec" claims responsibility for a data breach at the Heritage Foundation, stealing details of a potentially…...

MAL-2024-7706 Malicious code in fontaway (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ffda95fb52df4c12dae0bb3325e18027dadc59f0af0b85175318aff095d1e1a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7460 Malicious code in newsda (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eaad42a5ff02b6ba43f9709c03bd924d9e2b62fafcb822b8cb4752e9c06c14d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Internet Systems Consortium Stork Security Breach

Internet Systems Consortium Stork ISC Stork is an open source graphical administration from the Internet Systems Consortium organization. It is used to monitor, troubleshoot and maintain the configuration of Kea DHCP servers. A security vulnerability exists in Internet Systems Consortium Stork...

UAE’s Lulu Hypermarket Data Breach: Hackers Claim Millions of Customer Records

Lulu Hypermarket has experienced a major data breach, exposing over 200,000 customer records. The attack, claimed by IntelBroker…...

Hacker Leaks Thousands of Microsoft and Nokia Employee Details

Hacker "888" leaks personal data of Nokia and Microsoft employees on Breach Forums. Data breaches at third-party contractors…...

CVE-2024-36452

Cross-site request forgery vulnerability exists in ajaxterm module of Webmin versions prior to 2.003. If this vulnerability is exploited, unintended operations may be performed when a user views a malicious page while logged in. As a result, data within a system may be referred, a webpage may be...

CVE-2024-36452

Cross-site request forgery vulnerability exists in ajaxterm module of Webmin versions prior to 2.003. If this vulnerability is exploited, unintended operations may be performed when a user views a malicious page while logged in. As a result, data within a system may be referred, a webpage may be...

CVE-2024-36452

A Cross-Site Request Forgery (CSRF) vulnerability exists in the ajaxterm module of Webmin versions prior to 2.003 . An attacker could perform a CSRF attack by tricking a logged-in user into visiting a specially crafted malicious webpage. This could result in unintended operations , such as referr...

CVE-2024-36451

Improper handling of insufficient permissions or privileges vulnerability exists in ajaxterm module of Webmin prior to 2.003. If this vulnerability is exploited, a console session may be hijacked by an unauthorized user. As a result, data within a system may be referred, a webpage may be altered,...

CVE-2024-36451

Improper handling of insufficient permissions or privileges vulnerability exists in ajaxterm module of Webmin prior to 2.003. If this vulnerability is exploited, a console session may be hijacked by an unauthorized user. As a result, data within a system may be referred, a webpage may be altered,...

Devika Security Breach

Stition Devika is an advanced AI software engineer at Stition USA that understands advanced human commands, breaks them down into steps, researches relevant information, and writes code to achieve a given goal. Devika has a security vulnerability that stems from the presence of relative path...

Decidim security breach

Decidim is a participatory democracy framework, written in Ruby on Rails. A security vulnerability exists in Decidim 0.27.5 and earlier versions, which stems from the possibility of a cross-site scripting XSS attack on the admin panel if an attacker manages to modify some records being uploaded t...

Johnson Controls Software House C CURE 9000 Security Breach

Johnson Controls Software House C CURE 9000 is an access control system from Johnson Controls, Inc. A security vulnerability exists in Johnson Controls Software House C CURE 9000 that stems from the installation program using weak credentials...

Ticketmaster says stolen Taylor Swift Eras Tour tickets are useless

While cybercriminals are offering free tickets to Taylor Swift Eras Tour and other events, Ticketmaster is telling would-be purchasers that these tickets will prove to be worthless. Those who have claimed responsibility for the Ticketmaster data breach say they’ve stolen 440,000 tickets for Taylo...

Billing System security breach

Billing System is a billing system by angel jude suarez personal developer. A security vulnerability exists in Billing System version 1.0, which stems from an SQL injection vulnerability that allows remote attackers to execute arbitrary SQL commands via the username parameter...

idcCMS Security Breach

Net Titanium Technology idcCMS Net Titanium IDC Cloud Management Proxy System is a cloud management proxy system from China's Net Titanium Technology Net Titanium Technology. A security vulnerability exists in idcCMS v1.35, which originates from a cross-site request forgery vulnerability in the...

Airbyte Security Breach

Airbyte is an ETL/ELT data pipeline data integration platform from Airbyte Open Source. A security vulnerability exists in Airbyte versions prior to v0.62.2 that stems from the presence of a remote code execution vulnerability that allows an authenticated, remote attacker to execute arbitrary cod...

Shopify says stolen customer data was taken in third-party breach

Shopify has denied a breach of its systems after a cybercriminal posted alleged Shopify customer details online. Shopify told BleepingComputer and other publications that the incident happened at a third party: "Shopify systems have not experienced a security incident. The data loss reported was...