Anonshop Security Breach

Anonshop is an online shopping system from Anon shop open source. A security vulnerability exists in Anonshop that stems from allowing credentials to be stored in plain text...

Google Pixel Security Breach

Google Pixel is a smartphone from Google, an American company. A security vulnerability exists in Google Pixel, which stems from a lack of bounds checking in the v4l2smfcqbuf module of smfc-v4l2-ioctls.c, where out-of-bounds writes may exist...

Google Pixel Security Breach

Google Pixel is a smartphone from the American company Google Google. Google Pixel has a security vulnerability that stems from privilege bypass...

Google Pixel Security Breach

Google Pixel is a smartphone from Google, an American company. A security vulnerability exists in Google Pixel, which stems from a type confusion in the handleinit module of goodix/main/main.c, where memory corruption may occur...

Google Pixel Security Breach

Google Pixel is a smartphone from Google, Inc USA. A security vulnerability exists in Google Pixel, which stems from an integer overflow in the prepareresponse module of lwisperiodicio.c, where out-of-bounds writes are possible...

Google Pixel Security Breach

Google Pixel is a smartphone from Google, an American company. Google Pixel suffers from a security vulnerability that stems from remotely blocking access to cellular services without user interaction...

Google Pixel Security Breach

Google Pixel is a smartphone from Google USA. Google Pixel suffers from a security vulnerability that stems from a side channel information disclosure, which may have information leakage...

Anonshop Security Breach

Anonshop is an online shopping system from Anon shop open source. A security vulnerability exists in Anonshop. An attacker exploits the vulnerability to send an error message via a specially crafted HTTP request...

Google Pixel Security Breach

Google Pixel is a smartphone from Google, an American company. A security vulnerability exists in Google Pixel, which stems from a competing condition in the secmediaprotect module of media.c, where a privilege bypass is possible...

Google Pixel Security Breach

Google Pixel is a smartphone from the American company Google Google. Google Pixel has a security vulnerability that stems from improper use of encryption and possible elevation of privilege...

Lessons from the Snowflake Breaches

Last week, the notorious hacker gang, ShinyHunters, sent shockwaves across the globe by allegedly plundering 1.3 terabytes of data from 560 million users. This colossal breach, with a price tag of $500,000, could expose the personal information of a massive swath of a live event company's...

WooCommerce Security Breach

WooCommerce is an open source e-commerce platform built on WordPress by WooCommerce, Inc. A security vulnerability exists in WooCommerce version 8.8, which stems from vulnerability to cross-site scripting attacks that may allow an attacker to hijack content, data, and sessions stored in the brows...

GitLab Security Breach

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery, and other features. A security vulnerability exists in GitLab that stems from the presence of a...

hw: amd: Instruction raise #VC exception at exit

A vulnerability was found in AMD SEV-SNP, where a malicious hypervisor can potentially break confidentiality and integrity of SEV-SNP on Linux guests by injecting interrupts. An attacker can inject interrupt 0x80, which is used by Linux for legacy 32-bit system calls, and arbitrarily change the...

How Cynet Makes MSPs Rich & Their Clients Secure

Managed service providers MSPs are on the front lines of soaring demand for cybersecurity services as cyberattacks increase in volume and sophistication. Cynet has emerged as the security vendor of choice for MSPs to capitalize on existing relationships with SMB clients and profitably expand thei...

23andMe data breach under joint investigation in two countries

The British and Canadian privacy authorities have announced they will undertake a joint investigation into the data breach at global genetic testing company 23andMe that was discovered in October 2023. On Friday October 6, 2023, 23andMe confirmed via a somewhat opaque blog post that cybercriminal...

CVE-2024-3723 Advanced Contact form 7 DB <= 2.0.2 - Sensitive Information Exposure

The Advanced Contact form 7 DB plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.0.2 via the wp-content/uploads/advanced-cf7-upload directory. This makes it possible for unauthenticated attackers to extract sensitive data uploaded via thi...

CyberGhostVPN Security Breach

CyberGhostVPN is a highly optimized VPN server from CyberGhostVPN Romania. A security vulnerability exists in CyberGhostVPN version 8.4.3.12823, which stems from a process that remains open after logging out, allowing an attacker to obtain user credentials by dumping the process memory and parsin...

The vulnerability of GE HealthCare’s ultrasonic diagnostic system’s Kiosk Mode allows intruders to bypass security restrictions, gain unauthorized access to protected information, and enhance their privileges.

The vulnerability of GE HealthCare’s ultrasonic diagnostic system’s Kiosk Mode feature is related to a breach in data protection mechanisms. Exploiting this vulnerability can allow attackers to circumvent security restrictions, gain unauthorized access to protected information, and enhance their...

Aimeos Security Breach

Aimeos is an open source e-commerce framework for online stores from Aimeos Open Source. A security vulnerability exists in Aimeos versions prior to 2022.10.17, 2023.10.17, and 2024.04, which stems from SaaS , marketplace settings are potentially vulnerable to denial of service attacks...