CVE-2021-30172

Special characters of picture preview page in the Quan-Fang-Wei-Tong-Xun system are not filtered in users’ input, which allow remote authenticated attackers can inject malicious JavaScript and carry out Reflected XSS Cross-site scripting attacks, additionally access and manipulate customer’s...

CVE-2021-30171

Special characters of ERP POS news page are not filtered in users’ input, which allow remote authenticated attackers can inject malicious JavaScript and carry out stored XSS Stored Cross-site scripting attacks, additionally access and manipulate customer’s information...

CVE-2021-30170

Special characters of ERP POS customer profile page are not filtered in users’ input, which allow remote authenticated attackers can inject malicious JavaScript and carry out stored XSS Stored Cross-site scripting attacks, additionally access and manipulate customer’s information...

CVE-2021-30172

Special characters of picture preview page in the Quan-Fang-Wei-Tong-Xun system are not filtered in users’ input, which allow remote authenticated attackers can inject malicious JavaScript and carry out Reflected XSS Cross-site scripting attacks, additionally access and manipulate customer’s...

CVE-2021-30170

Special characters of ERP POS customer profile page are not filtered in users’ input, which allow remote authenticated attackers can inject malicious JavaScript and carry out stored XSS Stored Cross-site scripting attacks, additionally access and manipulate customer’s information...

竣禾科技 ERP POS 跨站脚本漏洞

Junghwa Technology ERP POS System is an application software of China Junghwa Technology Co. System for ERP management. ERP POS suffers from a cross-site scripting vulnerability that originates from special characters on the news page not being filtered during user input, which allows remote...

Apache Unomi Injection Vulnerability

Apache Unomi is the United States Apache Software Apache Foundation's set of open source customer data platform. The platform is mainly written in Java language. An injection vulnerability exists in Apache Unomi versions prior to 1.5.5. The vulnerability stems from the failure of a networked syst...

Whistleblower: Ubiquiti Breach “Catastrophic”

On Jan. 11, Ubiquiti Inc. NYSE:UI -- a major vendor of cloud-enabled Internet of Things IoT devices such as routers, network video recorders and security cameras -- disclosed that a breach involving a third-party cloud provider had exposed customer account credentials. Now a source who participat...

Hacker dumps Guns.com database with customers, admin data

By Waqas Among other sensitive data, the database includes Guns.com administrator, WordPress, and Cloud log in credentials in plain-text format. This is a post from HackRead.com Read the original post: Hacker dumps Guns.com database with customers, admin data...

Microsoft Internal Solorigate Investigation - Final Update

We believe the Solorigate incident is an opportunity to work with the community, to share information, strengthen defenses and respond to attacks. We have now completed our internal investigation into the activity of the actor and want to share our findings, which confirm that we found no evidenc...

Microsoft Internal Solorigate Investigation - Final Update

We believe the Solorigate incident is an opportunity to work with the community, to share information, strengthen defenses and respond to attacks. We have now completed our internal investigation into the activity of the actor and want to share our findings, which confirm that we found no evidenc...

Yandex Data Breach Exposes 4K+ Email Accounts

Yandex – one of Europe’s largest internet companies – is warning of a data breach that compromised 4,887 email accounts. The breach stems from an insider threat. Yandex is the most-used search engine in Russia – and the fifth most-popular search engine worldwide. Beyond its search engine, Yandex’...

Cybersecurity firm Stormshield breach; customer data, source code stolen

By Saad Rajpoot Stormshield suspects that there is a possibility that the attacker has the Technical Exchanges and Personal Data of the users. A French cybersecurity firm Stormsheild has identified a security breach. The breach affected their technical portal which is used by the users for the...

Oracle iStore Web interface component information disclosure vulnerability

Oracle E-Business Suite E-Business Suite is a fully integrated set of global business management software from Oracle USA. The software provides customer relationship management, service management, financial management and other functions. iStore is one of the business can effectively build,...

Importance of Application Security and Customer Data Protection to a Startup

When you are a startup, there are umpteen things that demand your attention. You must give your hundred percent probably even more! to work effectively and efficiently with the limited resources. Understandably, the application security importance may be pushed at the bottom of your things-to-do...

T-Mobile Faces Yet Another Data Breach

T-Mobile USA has reported a data breach – its fourth in three years. The wireless carrier disclosed the breach last week via its website, saying that it detected and shut down “malicious, unauthorized access to some information” related to T-Mobile accounts. Specifically, that data consisted of...

Japanese Aerospace Firm Kawasaki Warns of Data Breach

Japanese aerospace company Kawasaki Heavy Industries on Monday warned of a security incident that may have led to unauthorized access of customer data. According to the company’s data breach notification, it first discovered unauthorized parties accessing a server in Japan, from an overseas offic...

Sophos breach: Customer data exposed due to permission access flaw

By Sudais Asif Sophos has acknowledged the breach by sending email notifications to targeted customers. Here's what happened and what data was exposed. This is a post from HackRead.com Read the original post: Sophos breach: Customer data exposed due to permission access flaw...

Safeguard Identity Data at the Source

Leverage Identity Cloud's built-in tooling to safeguard your customers' data from unnecessary exposure When your customers create an account on your website or application, they are entrusting their valuable information with you in order to establish a relationship. To maintain that relationship,...

The vulnerability of the integration component of the Magento Commerce software development and management platform, related to authentication errors, allows attackers to gain unauthorized access to protected information and delete customer data through the REST API without authorization.

The vulnerability of the integration component of the Magento Commerce software for online store development and management is related to authentication errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information and delete customer data throug...