1899 matches found
hortonkirbycesch.org Improper Access Control vulnerability OBB-2251753
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
dancyfood.nl Improper Access Control vulnerability OBB-2241050
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
tapasyadine.co.uk Improper Access Control vulnerability OBB-2225651
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
The Bug Report – October Edition
ARCHIVED STORY The Bug Report – October Edition By Douglas McKee · November 02, 2021 Your Cyber Security Comic Relief Figure 1. Apache server version 2.4.50 CVE-2021-42013 Why am I here? Regardless of the origins, you’ve arrived at Advanced Threat Research team’s monthly bug digest – an overview ...
CVE-2021-35218
creationtimestamp| type| source ---|---|--- 2021-10-30 14:25:18+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/4633...
ESET Cyber Security and ESET Endpoint series vulnerable to denial-of-service (DoS)
Overview ESET Cyber Security and ESET Endpoint series are antivirus software. ESET Cyber Security and ESET Endpoint series for macOS contain a denial-of-service DoS vulnerability CWE-404. Zhou Tingrui of Kaijo Junior & Senior High School reported this vulnerability to the developer and IPA...
Exploit for Cross-site Scripting in Sysaid
CVE-2021-31862 SysAid 20.4.74 allows reflected XSS via the Ke...
CISA Urges Sites to Patch Critical RCE in Discourse
Discourse – the ultra-popular, widely deployed open-source community forum and mailing list management platform – has a critical remote code-execution RCE bug that was fixed in an urgent update on Friday. Tracked as CVE-2021-41163, the flaw is found in Discourse versions 2.7.8 and earlier. It’s...
mediquo.com Improper Access Control vulnerability OBB-2203937
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
mollers.no Improper Access Control vulnerability OBB-2201607
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
lospotrillosweb.com Improper Access Control vulnerability OBB-2178166
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
zurichopenair.ch Improper Access Control vulnerability OBB-2175767
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
coloursandsounds.co.uk Improper Access Control vulnerability OBB-2162415
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Amnesty Intl. accuses Indian cyber security firm of spyware attacks
By Waqas According to Amnesty International, it found evidence that attackers testing the spyware were using the IP address of Indian cyber security firm Innefu Labs. This is a post from HackRead.com Read the original post: Amnesty Intl. accuses Indian cyber security firm of spyware attacks...
Creating Wireless Signals with Ethernet Cable to Steal Data from Air-Gapped Systems
A newly discovered data exfiltration mechanism employs Ethernet cables as a "transmitting antenna" to stealthily siphon highly-sensitive data from air-gapped systems, according to the latest research. "It's interesting that the wires that came to protect the air-gap become the vulnerability of th...
d-tt.nl Cross Site Scripting vulnerability OBB-2152548
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
ACSC Releases Annual Cyber Threat Report
The Australian Cyber Security Centre ACSC has released its annual report on key cyber security threats and trends for the 2020–21 financial year. The report lists the exploitation of the pandemic environment, the disruption of essential services and critical infrastructure, ransomware, the rapid...
Yandex hit by largest DDoS attack involving 200,000 hacked devices
By Waqas Russian search engine giant Yandex has confirmed that its servers were targeted with cyber history’s largest DDoS attack last week. This is a post from HackRead.com Read the original post: Yandex hit by largest DDoS attack involving 200,000 hacked devices...
[Ebook] The Guide for Speeding Time to Response for Lean IT Security Teams
Most cyber security today involves much more planning, and much less reacting than in the past. Security teams spend most of their time preparing their organizations' defenses and doing operational work. Even so, teams often must quickly spring into action to respond to an attack. Security teams...
WordPress Zoho CRM Lead Magnet plugin <= 1.7.2.4 - Stored Cross-Site Scripting (XSS) vulnerability
Stored Cross-Site Scripting XSS vulnerability discovered by Cyber Security Works in WordPress Zoho CRM Lead Magnet plugin versions = 1.7.2.4. Solution Update the WordPress Zoho CRM Lead Magnet plugin to the latest available version at least 1.7.2.5...