idccms 安全漏洞

Net Titanium Technology idcCMS Net Titanium IDC Cloud Management Agent System is a cloud management agent system from China's Net Titanium Technology, Inc. A security vulnerability exists in idccms v1.35, which was discovered via the component /admin/cadeal.php?mudi=add&nohrefStr=close and contai...

Breach Forums Plans Dark Web Return This Week Despite FBI Crackdown

By Waqas The strange and tricky world of cybercrime and the dark web is getting stranger and trickier! This is a post from HackRead.com Read the original post: Breach Forums Plans Dark Web Return This Week Despite FBI Crackdown...

Lunary 安全漏洞

Lunary is a production toolkit for LLM that is open sourced by lunary. A security vulnerability exists in Lunary version 1.2.2 that stems from allowing unprivileged users to rename items to which they are not authorized to have access...

NASA AIT-Core 安全漏洞

NASA AIT-Core is a Python-based software suite organized by NASA. A security vulnerability exists in NASA AIT-Core version v2.5.2 that stems from the inclusion of multiple SQL injection vulnerabilities via the querypackets and insert functions...

HackerOne: Program Member Could Duplicate Report To A Non Related Program Original Report

The vulnerability allowed a program member to duplicate a report to a report that was not related to the original program. This could lead to integrity issues, as the duplicate report should only be from reports within the original program...

Dell Data Breach: Personal Information of 49 Million Customers Compromised due to latest API Abuse

Dell recently issued a notice regarding a data breach that occurred on May 9, which has reportedly affected over 49 million customers across the globe. According to a report by BleepingComputer, Dell initiated the distribution of notifications cautioning its customers that their personally...

Financial institutions ordered to notify customers after a breach, have an incident response plan

The Securities and Exchange Commission SEC has announced rules around breaches for certain financial institutions—registered broker-dealers, investment companies, investment advisers, and transfer agents— that require them to have written incident response policies and procedures that can be used...

ASUS多款产品安全漏洞

ASUS RT-AX3000 and others are products of Asus China.ASUS RT-AX3000 is a router.ASUS RT-AX88U is a wireless router.ASUS RT-AC68U is a router. A security vulnerability exists in multiple ASUS products that stems from a susceptibility to a code execution vulnerability that could allow a remote...

Adobe Illustrator Buffer Overflow Vulnerability (CNVD-2024-24293)

Adobe Illustrator is a set of vector-based image creation software from the American company Audobee Adobe. A buffer overflow vulnerability exists in Adobe Illustrator versions 28.4 and 27.9.3, which stems from an out-of-bounds read vulnerability when parsing a carefully crafted file, which could...

Breach Forums Admin ShinyHunters Claims Domain Reclaimed from FBI

By Waqas Breach Forums, a notorious cybercrime hub, could be back online with the same domain even after the FBI seizure. Hackers claim to have regained access to the clear web domain, while the dark web version remains in a tug-of-war. This is a post from HackRead.com Read the original post:...

New XM Cyber Research: 80% of Exposures from Misconfigurations, Less Than 1% from CVEs

A new report from XM Cyber has found – among other insights - a dramatic gap between where most organizations focus their security efforts, and where the most serious threats actually reside. The new report, Navigating the Paths of Risk: The State of Exposure Management in 2024, is based on...

GitLab 11.6.0 < 13.5.6 / 13.6.0 < 13.6.4 / 13.7.0 < 13.7.2 (CVE-2021-22170)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - Assuming a database breach, nonce reuse issues in GitLab 11.6+ allows an attacker to decrypt some of the database's encrypted content CVE-2021-22170 Note that Nessus has not tested for this issue but...

Notorious data leak site BreachForums seized by law enforcement

BreachForums—probably the largest dark web marketplace for stolen data to be leaked and sold—has been seized by law enforcement. Now, both the regular and the TOR domain of BreachForums are plastered with a message telling visitors the site is now under control of the FBI. The FBI said BreachForu...

CVE-2024-31409 CyberPower PowerPanel business Incorrect Authorization

Certain MQTT wildcards are not blocked on the CyberPower PowerPanel system, which might result in an attacker obtaining data from throughout the system after gaining access to any device...

Popular Cyber Crime Forum Breach Forums Seized by Police

By Waqas In a major blow to cybercrime, Breach Forums, a notorious online marketplace for stolen data, has been seized by the FBI and Department of Justice DoJ. This unprecedented takedown includes not just the clear web domain, but also the dark web, escrow sections and Telegram accounts. This i...

Bonitasoft 安全漏洞

Bonitasoft is an open source BPM software from Bonitasoft. Bonitasoft has a security vulnerability that stems from a lack of dynamic permissions, which leads to an IDOR vulnerability...

Budget Management security breach

SourceCodester Budget Management System is an application from SourceCodester, Inc. It provides the ability to calculate exact costs through a web application. A security vulnerability exists in Budget Management version 1.0 that stems from the vulnerability to cross-site scripting XSS attacks vi...

Stakater Forecastle 安全漏洞

Stakater Forecastle is a control panel from Stakater that dynamically discovers and provides a launchpad to access applications deployed on Kubernetes. A security vulnerability exists in Stakater Forecastle versions 1.0.139 and earlier, which stems from allowing directory traversal in a website...

wolfictl 安全漏洞

wolfictl is a Wolfictl open source command line tool for use with Wolfi. A security vulnerability exists in Wolfictl versions prior to 0.16.10, which stems from a GitHub token that could be leaked to a remote non-GitHub git server...

Budget Management security breach

SourceCodester Budget Management System is an application from SourceCodester, Inc. It provides a function to calculate exact expenses through a web application. A security vulnerability exists in Budget Management version 1.0 that stems from the vulnerability to SQL injection attacks via the...