Ransomware Attackers Publish 4K Private Scottish Gov Agency Files

On the heels of a ransomware attack against the Scottish Environmental Protection Agency SEPA, attackers have now reportedly published more than 4,000 files stolen from the agency – including contracts and strategy documents. After hitting SEPA on Christmas Eve with the attack, cybercriminals...

PT-2021-1837

Name of the Vulnerable Software and Affected Versions Cisco Data Center Network Manager DCNM affected versions not specified Description The issue is related to multiple vulnerabilities in the web-based management interface of Cisco Data Center Network Manager DCNM, which could allow an...

SQL Injection Vulnerability in ThinkSaaS Open Source Community Foundation Edition

ThinkSAAS open source community is a lightweight open source community system , is a community system that can be used to build discussion groups , bbs and circles . ThinkSaaS Open Source Community Basic Edition suffers from a SQL injection vulnerability . Attackers can exploit the vulnerability ...

PT-2021-1772

Name of the Vulnerable Software and Affected Versions: Oracle Customer Interaction History versions 12.1.1 through 12.1.3 Oracle Customer Interaction History versions 12.2.3 through 12.2.10 Description: The issue is related to insufficient access control in the Outcome-Result component of Oracle...

PT-2021-15225

Name of the Vulnerable Software and Affected Versions HGiga EIP product affected versions not specified Description The issue allows attackers to inject SQL commands into a specific URL parameter, namely the online registration parameter, to obtain the database schema and data. Recommendations At...

CVE-2021-22852: Improper Neutralization of Special Elements used in an SQL Command

HGiga EIP product contains SQL Injection vulnerability. Attackers can inject SQL commands into specific URL parameter online registration to obtain database schema and data...

SAP Business Warehouse 代码注入漏洞

SAP Business Warehouse BW is SAP's data warehouse solution.SAP BW provides a high-performance infrastructure that helps you evaluate and interpret data. Decision makers can make informed decisions based on the analyzed data and identify target-specific activities. A code injection vulnerability...

Russian Hacker Gets 12-Years Prison for Massive JP Morgan Chase Hack

A U.S. court on Thursday sentenced a 37-year-old Russian to 12 years in prison for perpetrating an international hacking campaign that resulted in the heist of a trove of personal information from several financial institutions, brokerage firms, financial news publishers, and other American...

Russian Hacker Gets 12-Years Prison for Massive JP Morgan Chase Hack

A U.S. court on Thursday sentenced a 37-year-old Russian to 12 years in prison for perpetrating an international hacking campaign that resulted in the heist of a trove of personal information from several financial institutions, brokerage firms, financial news publishers, and other American...

CVE-2021-3118

EVOLUCARE ECSIMAGING aka ECS Imaging through 6.21.5 has multiple SQL Injection issues in the login form and the password-forgotten form such as /reqpassworduser.php?email=. This allows an attacker to steal data in the database and obtain access to the application. The database component runs as...

Sql injection

UNSUPPORTED WHEN ASSIGNED EVOLUCARE ECSIMAGING aka ECS Imaging through 6.21.5 has multiple SQL Injection issues in the login form and the password-forgotten form such as /reqpassworduser.php?email=. This allows an attacker to steal data in the database and obtain access to the application. The...

CVE-2021-3118

EVOLUCARE ECSIMAGING (aka ECS Imaging) vulnerable up to version 6.21.5 due to multiple SQL Injection flaws in the login form and the password-forgotten form (e.g., /req_password_user.php?email=). The database component runs as root, enabling data theft and potential full access to the application...

CVE-2021-3118: Improper Neutralization of Special Elements used in an SQL Command

EVOLUCARE ECSIMAGING aka ECS Imaging through 6.21.5 has multiple SQL Injection issues in the login form and the password-forgotten form such as /reqpassworduser.php?email=. This allows an attacker to steal data in the database and obtain access to the application. The database component runs as...

PT-2021-19199 · Evolucare · Evolucare Ecsimaging

Name of the Vulnerable Software and Affected Versions: EVOLUCARE ECSIMAGING aka ECS Imaging versions 6.21.5 and earlier Description: The issue affects the login form and the password-forgotten form, such as /req password user.php?email=, allowing an attacker to steal data in the database and obta...

Russian hacker jailed in US over $19M fraud, 100M users’ data theft

By Deeba Ahmed The 37-year-old hacker Andrei Tyurin was extradited to the US from Georgia in September 2018. This is a post from HackRead.com Read the original post: Russian hacker jailed in US over $19M fraud, 100M users data theft...

Ransomware Gang Collects Data from Blood Testing Lab

Apex Laboratory, which provides blood work at home for patients in New York City, Long Island and South Florida, has been hit with a ransomware attack that also resulted in patient data being stolen. Though the company just disclosed the attack, it took place on July 25, when “certain systems in...

Ticketmaster Coughs Up $10 Million Fine After Hacking Rival Business

Ticketmaster must pay a hefty $10 million fine after several employees utilized unlawfully obtained passwords to hack a rival company’s computer systems – in attempts to “choke off” its business. The American ticket sales and distribution giant, which is owned by Live Nation, in 2013 hired an...

Hacker selling 368m users records stolen from 26 companies

By Sudais Asif These websites include some notable ones such as Sitepoint. Here is a full list of the websites whose data is currently being sold by the hacker. This is a post from HackRead.com Read the original post: Hacker selling 368m users records stolen from 26 companies...

SQL Injection Vulnerability in Personnel Management System of Jiangxi Huidangjia Information Technology Co.

Jiangxi Huidangjia Information Technology Co., Ltd. is a technology enterprise engaged in the research, development and sales of management information technology products. A SQL injection vulnerability exists in the personnel management system of Jiangxi Huidangjia Information Technology Co. An...

U.S. Dept Of Defense: Reflected XSS on ███████

Summary Reflected XSS on ████████. Description During my explorations I found █████████/search/node, which provides a basic search functionality. If we search something, the value is reflected and not properly sanitized. For example if we search ██████████/search/node/chron0x we can see in the...