CVE-2017-7831

A vulnerability where the security wrapper does not deny access to some exposed properties using the deprecated "exposedProps" mechanism on proxy objects. These properties should be explicitly unavailable to proxy objects. This vulnerability affects Firefox 57...

UBUNTU-CVE-2017-7831

A vulnerability where the security wrapper does not deny access to some exposed properties using the deprecated "exposedProps" mechanism on proxy objects. These properties should be explicitly unavailable to proxy objects. This vulnerability affects Firefox 57...

pfSense Detection Consolidation

Consolidation of pfSense detections. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.112118";...

“Eavesdropper” Flaw Exposes Millions of Call, Texts and Recordings

By Uzair Amir Eavesdropper is a dangerous new vulnerability identified by researchers from This is a post from HackRead.com Read the original post: Eavesdropper Flaw Exposes Millions of Call, Texts and Recordings...

Intel’ Management Engine Tech Just Got Exposed Through USB Ports

By Waqas Back in September 2017, Positive Technologies’ experts had expressed interest This is a post from HackRead.com Read the original post: Intel’ Management Engine Tech Just Got Exposed Through USB Ports...

BOHEMIA INTERACTIVE a.s.: 217.147.95.145 NFS Exposed with Zeus Server configs

NOTE! Thanks for submitting a report! Please replace all the square sections below with the pertinent details. Remember, the more detail you provide, the easier it is for us to verify and then potentially issue a bounty, so be sure to take your time filling out the report! Description:...

The vulnerability of the Windows operating system’s network authentication protocol, NT LAN Manager (NTLM), allows a hacker to access user password hashes.

The vulnerability of the Windows operating system’s Network Authentication Protocol NTLM exists due to the incorrect implementation of the NTLM authentication algorithm. Exploiting this vulnerability allows a malicious actor to obtain access to user password hashes through a specially crafted SCF...

PT-2019-4182

Name of the Vulnerable Software and Affected Versions FasterXML jackson-databind versions 2.0.0 through 2.9.10 Description A Polymorphic Typing issue exists in the jackson-databind library. When Default Typing is enabled for an externally exposed JSON endpoint and the service has the commons-dbcp...

PT-2019-4596

Name of the Vulnerable Software and Affected Versions jackson-databind versions 2.0.0 through 2.9.10 jackson-databind versions prior to 2.9.10.1 jackson-databind versions prior to 2.8.11.5 jackson-databind versions prior to 2.6.7.3 Description A Polymorphic Typing issue in the jackson-databind...

DEBIAN-CVE-2015-2156

Netty before 3.9.8.Final, 3.10.x before 3.10.3.Final, 4.0.x before 4.0.28.Final, and 4.1.x before 4.1.0.Beta5 and Play Framework 2.x before 2.3.9 might allow remote attackers to bypass the httpOnly flag on cookies and obtain sensitive information by leveraging improper validation of cookie name a...

Krebs Given ISSA’s ‘President’s Award’

KrebsOnSecurity was honored this month with the 2017 President's Award for Public Service from the Information Systems Security Association, a nonprofit organization for cybersecurity professionals. The award recognizes an individual's contribution to the information security profession in the ar...

Medical Records and Sensitive Data of 150,000 US Patients Exposed

By Uzair Amir Its another day with yet another Amazon Web Services AWS This is a post from HackRead.com Read the original post: Medical Records and Sensitive Data of 150,000 US Patients Exposed...

Massive Trove of Sensitive ‘Accenture’ Data Exposed Online

By Uzair Amir On September 17th, 2017, Chris Vickery, director of Cyber Risk This is a post from HackRead.com Read the original post: Massive Trove of Sensitive Accenture Data Exposed Online...

NFL Players and Agents Targeted in Database Extortion Attempt

A misconfigured database containing records belonging to 1,133 National Football League players and their agents was exposed via an unsecured Elasticsearch server. The database belongs to the NFL Players Association and includes the home address, phone numbers and IP addresses for hundreds of...

Millions of Accounts From Previous Bitly and Kickstarter Breaches Exposed

By Waqas Its another day with yet another story of a data This is a post from HackRead.com Read the original post: Millions of Accounts From Previous Bitly and Kickstarter Breaches Exposed...

CVE-2017-14349

An authentication vulnerability in HPE SiteScope product versions 11.2x and 11.3x, allows read-only accounts to view all SiteScope interfaces and monitors, potentially exposing sensitive data...

Rockstar Games: Leak IP internal

The researcher found an old marketing web application for one of our previous titles that was not properly decommissioned. As a result, an internal IP address and a set of DB credentials were being exposed. Fortunately, the database in question had already been decommissioned so the credentials...

samuelsagents.co.uk XSS vulnerability

Vulnerable URL: http://www.samuelsagents.co.uk/contact.php?msg=%3C/textarea%3E%22%3E%3Csvg/onload=alert/XSSPOSED/%3E+interested+in+the+Home+titled+ST+LEONARDS+on+sale+for+GBP300%2C000+ref%3D11+DEAN+ST+id%3D2045 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 17.12.2017...

Alaska Voter Database Exposed Online

By Waqas IT security researchers at Kromtech Security Center discovered an unprotected database This is a post from HackRead.com Read the original post: Alaska Voter Database Exposed Online...

Cisco Meeting Server TURN Server Unauthorized Access and Information Disclosure Vulnerability

A vulnerability in the Traversal Using Relay NAT TURN server included with Cisco Meeting Server CMS could allow an authenticated, remote attacker to gain unauthenticated or unauthorized access to components of or sensitive information in an affected system. The vulnerability is due to an incorrec...