CVE-2019-6781

An Improper Input Validation issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It was possible to use the profile name to inject a potentially malicious link into notification emails...

CVE-2019-6781

An Improper Input Validation issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It was possible to use the profile name to inject a potentially malicious link into notification emails...

Hackers Breach Stack Overflow Q&A Site, Some Users' Data Exposed

Note: We have updated this story to reflect new information after Stack Overflow changed its original announcement and shared more details on the security incident. Stack Overflow, one of the largest question and answer site for programmers, revealed today that unknown hackers managed to exploit ...

Horde Webmail 5.2.22 XSS / CSRF / SQL Injection / Code Execution

Title: Horde Webmail - XSS + CSRF to SQLi, RCE, Stealing Emails var url = "http://webmail.victimserver.com/trean/"; var params = 'iframe=0&popup=0&newFolder=&actionID=addbookmark&url=http%3A%2F%2Ftest.com&title=vulnerability&description=vulnerability&treanBookmarkTags=%22%3...

PT-2019-18340

Name of the Vulnerable Software and Affected Versions GitLab Community and Enterprise Edition versions 11.5.8 and earlier GitLab Community and Enterprise Edition versions 11.6.x through 11.6.5 GitLab Community and Enterprise Edition versions 11.7.x through 11.7.0 Description An Improper Input...

CVE-2019-6781: URL Redirection to Untrusted Site

An Improper Input Validation issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It was possible to use the profile name to inject a potentially malicious link into notification emails...

Information Disclosure

Mozilla Thunderbird is vulnerable to information disclosure vulnerability. An attacker could submit an embedded form and leak the plaintext of decrypted emails by persuading a victim to visit a specially crafted Web site...

Information Disclosure

Thunderbird ESR and Thunderbird are vulnerable to information disclosure. A remote attacker is able to read plaintext of decrypted emails which leak through by user submitting an embedded form...

Information Disclosure

Thunderbird ESR and Thunderbird are vulnerable to information disclosure. A remote unauthenticated attacker could exploit Lightweight Theme component in which the plaintext of decrypted emails can leak through the src attribute of remote images...

Threat spotlight: CrySIS, aka Dharma ransomware, causing a crisis for businesses

CrySIS, aka Dharma, is a family of ransomware that has been evolving since 2006. We have noticed that this ransomware has become increasingly active lately, increasing by a margin of 148 percent from February until April 2019. The uptick in detections may be due to CrySIS' effective use of multip...

Fedora Update for php-PHPMailer FEDORA-2018-a2e9bd6eae

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Popular Online Tutoring Marketplace 'Wyzant' Suffers Data Breach

Wyzant —an online marketplace that makes it easy for parents and students to connect with private tutors, in-person and online, in over 250 different subjects—has suffered a data breach exposing "certain personal identification information" for its customers. The Hacker News received a copy of an...

CVE-2019-7212

SmarterTools SmarterMail 16.x before build 6985 has hardcoded secret keys. An unauthenticated attacker could access other users’ emails and file attachments. It was also possible to interact with mailing lists...

CVE-2019-7212

SmarterTools SmarterMail 16.x before build 6985 has hardcoded secret keys. An unauthenticated attacker could access other users’ emails and file attachments. It was also possible to interact with mailing lists...

CVE-2019-7212

SmarterTools SmarterMail 16.x before build 6985 has hardcoded secret keys. An unauthenticated attacker could access other users’ emails and file attachments. It was also possible to interact with mailing lists...

PT-2019-18464

Name of the Vulnerable Software and Affected Versions SmarterTools SmarterMail versions 16.x before build 6985 Description The issue allows an unauthenticated attacker to access other users' emails and file attachments. It also enables interaction with mailing lists. Recommendations For versions...

Hacker Breaks Into French Government's New Secure Messaging App

A white-hat hacker found a way to get into the French government's newly launched, secure encrypted messaging app that otherwise can only be accessed by officials and politicians with email accounts associated with the government identities. Dubbed "Tchap ," the end-to-end encrypted, open source...

Facebook: Storing Instagram passwords in plain text & harvesting your emails

By Uzair Amir Facebook stored millions of Instagram passwords in a readable format and asked users for their email's passwords for "verification." On 21st March, 2018, the social media giant Facebook admitted that it stored passwords of 600 million users including "tens of thousands" of passwords...

The vulnerability of the Outlook Web Access email server component of the Microsoft Exchange Server allows a attacker to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Outlook Web Access OWA component of the Microsoft Exchange Server email server is related to errors in processing web requests. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of protected information through speciall...

Microsoft Outlook Breach Widens in Scope, Impacting MSN And Hotmail – Report

UPDATE A recently-disclosed Microsoft email-platform breach is reportedly much worse than previously thought, now impacting a large number of Outlook accounts as well as MSN and Hotmail email accounts. On Friday, a slew of Outlook users reported receiving notifications from Microsoft. The...