7174 matches found
Terabytes of OnlyFans data being sold on hacking forum
By Waqas Last month reports emerged that OnlyFans website was targeted by hackers after a massive database... This is a post from HackRead.com Read the original post: Terabytes of OnlyFans data being sold on hacking forum...
Personal details & phone numbers of 42M Iranians sold on a hacking forum
By Waqas Iranians, unfortunately, have been hit hard by Coronavirus and the last thing they would like to have is getting their privacy breached. This is a post from HackRead.com Read the original post: Personal details & phone numbers of 42M Iranians sold on a hacking forum...
Annual Protest to ‘Fight Krebs’ Raises €150K+
In 2018, KrebsOnSecurity unmasked the creators of Coinhive -- a now-defunct cryptocurrency mining service that was being massively abused by cybercriminals -- as the administrators of a popular German language image-hosting forum. In protest of that story, forum members donated hundreds of...
XSS Vulnerability in Swordfish Forum v1.5.0
Swordfish Forum is a bbs forum system officially and publicly released by Catfish CMS. Swordfish Forum v1.5.0 has an XSS vulnerability, which can be exploited by attackers to obtain sensitive information such as user cookies...
File Upload Vulnerability in Swordfish Forum v1.5.0
Swordfish Forum is a bbs forum system officially and publicly released by Catfish CMS. Swordfish Forum v1.5.0 has a file upload vulnerability that can be exploited by attackers to gain control of the web server...
Emerging APT Mounts Mass iPhone Surveillance Campaign
A recently discovered, mass-targeted watering-hole campaign has been aiming at Apple iPhone users in Hong Kong – infecting website visitors with a newly developed custom surveillance malware. The bad code – the work of a new APT called “TwoSail Junk” – is delivered via a multistage exploit chain...
Russians Shut Down Huge Card Fraud Ring
Federal investigators in Russia have charged at least 25 people accused of operating a sprawling international credit card theft ring. Cybersecurity experts say the raid included the charging of a major carding kingpin thought to be tied to dozens of carding shops and to some of the bigger data...
Simple Machines Forum (SMF) < 2.0.17 SSRF Vulnerability
Simple Machines Forum SMF is prone to a server-side request forgery SSRF vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Simple Machines Forum Code Issue Vulnerability
Simple Machines Forum SMF is an open source web forum system by the SMF team in the United States. A code issue vulnerability exists in Simple Machines Forum SMF release prior to version 2.0.17. No details of the vulnerability are available at this time...
CVE-2019-11574
An issue was discovered in Simple Machines Forum SMF before release 2.0.17. There is SSRF related to Subs-Package.php and Subs.php because user-supplied data is used directly in curl calls...
CVE-2019-11574
An issue was discovered in Simple Machines Forum SMF before release 2.0.17. There is SSRF related to Subs-Package.php and Subs.php because user-supplied data is used directly in curl calls...
Server side request forgery (ssrf)
An issue was discovered in Simple Machines Forum SMF before release 2.0.17. There is SSRF related to Subs-Package.php and Subs.php because user-supplied data is used directly in curl calls...
CVE-2019-11574
Simple Machines Forum (SMF) prior to release 2.0.17 is affected by a server-side request forgery (SSRF) in Subs-Package.php and Subs.php, where user-supplied data is used directly in curl calls. Affects SMF versions before 2.0.17; CVE-2019-11574 details an SSRF condition with high impact per CVSS...
Change the Rules Speaker Event
Akamai's Women's Forum Americas, OHANA and In Reach Employee Resource Groups recently hosted Cross ERG 'Change the Rules' Keynote - Celebration of Black History Month in our Chicago office. We were excited to have notable Michelle Silverthorn, CEO of Inclusion Nation, a company that focuses on...
Mail.ru: Stored XSS In mlbootcamp.ru
XSS in mlbootcamp.ru via forum post...
Let's Encrypt Issued A Billion Free SSL Certificates in the Last 4 Years
Let's Encrypt, a free, automated, and open certificate signing authority CA from the nonprofit Internet Security Research Group ISRG, has said it's issued a billion certificates since its launch in 2015. The CA issued its first certificate in September 2015, before eventually reaching 100 million...
CVE-2013-4395
Simple Machines Forum SMF through 2.0.5 has XSS...
Cross site scripting
Simple Machines Forum SMF through 2.0.5 has XSS...
