13612 matches found
LockBit Ransomware Group Resurfaces After Law Enforcement Takedown
The threat actors behind the LockBit ransomware operation have resurfaced on the dark web using new infrastructure, days after an international law enforcement exercise seized control of its servers. To that end, the notorious group has moved its data leak portal to a new .onion address on the TO...
Armeria Security Breach
Armeria is an open source library for building asynchronous microservers that use HTTP/2 as the session layer protocol. A security vulnerability exists in versions of Armeria prior to 1.27.2 that stems from allowing authentication to be bypassed using malicious SAML messages...
LangChain Security Breach
LangChain is used to build applications using LLM through composability. A security vulnerability exists in LangChain versions prior to 0.1.8 that stems from a vulnerability that allows an attacker to bypass and execute arbitrary code via properties in Python code...
Microsoft Expands Free Logging Capabilities for all U.S. Federal Agencies
Microsoft has expanded free logging capabilities to all U.S. federal agencies using Microsoft Purview Audit irrespective of the license tier, more than six months after a China-linked cyber espionage campaign targeting two dozen organizations came to light. "Microsoft will automatically enable th...
Hackers Leak 2.5M Private Plane Owners’ Data Linked to LA Intl. Airport Breach
By Waqas The IntelBroker hacker has claimed responsibility for the breach. This is a post from HackRead.com Read the original post: Hackers Leak 2.5M Private Plane Owners Data Linked to LA Intl. Airport Breach...
PrestaShop Security Breach
PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides multiple payment methods, short message alerts, and product image scaling. A security vulnerability exists in Ecomiz for PrestaShop 2.0.0 and prior versions, which originated from a...
CVE-2024-24309
The Survey TMA (ecomiz_survey_tma) module for PrestaShop , versions up to 2.0.0 by Ecomiz, contains a design/logic flaw allowing unauthenticated guests to download personal information without restriction. This vulnerability results in the exposure of sensitive information to unauthorized actors....
CVE-2024-1053
CVE-2024-1053 affects the WordPress plugin “Event Tickets and Registration.” A missing capability check on the email action in versions up to and including 5.8.1 allows authenticated users with contributor-level access and above to email the attendees list to themselves. Impact is listed as data ...
sheffield.camra.org.uk Improper Access Control vulnerability OBB-3855989
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Agro-School Management System security breach
Agro-School Management System is an agricultural school management system. A security vulnerability exists in Agro-School Management System version 1.0 that stems from improper access control...
ChurchCRM Security Breach
ChurchCRM is an open source CRM system for churches. A security vulnerability exists in ChurchCRM version 5.5.0, which is caused by a reflected cross-site scripting vulnerability in the type parameter of the EventAttendance.php page...
ChurchCRM Security Breach
ChurchCRM is an open source CRM system for churches. A security vulnerability exists in ChurchCRM version 5.5.0, which stems from a time-based SQL blind injection vulnerability in the CurrentFundraiser GET parameter of the FRCertificates.php page...
Event Tickets and Registration < 5.8.2 - Missing Authorization
Description The Event Tickets and Registration plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'email' action in all versions up to, and including, 5.8.1. This makes it possible for authenticated attackers, with contributor-level access a...
CVE-2024-1340
CVE-2024-1340 affects the WordPress plugin Login Lockdown – Protect Login Form (
Wyze Cameras Glitch: 13,000 Users Saw Footage from Others’ Homes
By Deeba Ahmed Third-Party Library Blamed for Wyze Camera Security Lapse. This is a post from HackRead.com Read the original post: Wyze Cameras Glitch: 13,000 Users Saw Footage from Others Homes...
Wyze cameras show the wrong feeds to customers. Again.
Last September, we wrote an article about how Wyze home cameras temporarily showed other people’s security feeds. As far as home cameras go, we said this is absolutely up there at the top of the “things you don’t want to happen” list. Turning your customers into Peeping Tom against their will and...
Cyber security for Credit Unions 101
American consumers have two clear yet vastly differing choices when it comes to banking. Many opt for a large-sized national or regional bank. Folks select this option for a variety of reasons, typically due to the vast services and ease of use these powerhouses provide. Roughly 60% of Americans...
LockBit, the world’s worst ransomware, is down
For the last two years the absolute worst, most prolific, most globally significant "big game" ransomware gang has been LockBit. This evening its position as ransomwares biggest beast is suddenly in doubt, following some non-consensual website redecoration at the hands of the UKs National Crime...
Timo Security Breach
Timo is a backend management system for auntvt individual developers. A security vulnerability exists in Timo version v.2.0.3, which originated from a vulnerability that allows remote attackers to execute arbitrary code via a file type restriction in the UploadController.java component...
Simple Job Board < 2.11.0 - Missing Authorization to Unauthenticated Information Disclosure
Description The Simple Job Board plugin for WordPress is vulnerable to unauthorized access of data| due to insufficient authorization checking on the fetchquickjob function in all versions up to, and including, 2.10.8. This makes it possible for unauthenticated attackers to fetch arbitrary posts,...