QR Code Phishing Soars 587%: Users Falling Victim to Social Engineering Scams

By Deeba Ahmed QR Code Phishing has surged by a staggering 587%, with scammers exploiting it to steal login credentials and deploy malware. This is a post from HackRead.com Read the original post: QR Code Phishing Soars 587%: Users Falling Victim to Social Engineering Scams...

Trezor Data Breach Exposes Email and Names of 66,000 Users

By Waqas The latest Trezor data breach places users at risk of phishing scams, potentially leading to the theft of additional login credentials. This is a post from HackRead.com Read the original post: Trezor Data Breach Exposes Email and Names of 66,000 Users...

New Phishing Scam Hooks META Businesses with Trademark Threats

By Waqas Scammers are sending phishing links to the inboxes of Meta business owners and Facebook page administrators, aiming to obtain their login credentials. This is a post from HackRead.com Read the original post: New Phishing Scam Hooks META Businesses with Trademark Threats...

CVE-2023-50974

In Appwrite CLI before 3.0.0, when using the login command, the credentials of the Appwrite user are stored in a /.appwrite/prefs.json file with 0644 as UNIX permissions. Any user of the local system can access those credentials...

CVE-2023-27098

TP-Link Tapo APK up to v2.12.703 uses hardcoded credentials for access to the login panel...

CVE-2023-37608

CVE-2023-37608 affects Automatic Systems SOC FL9600: FirstLane V06 lego_T04E00 and FastLine V06 legoT04E00 with a hardcoded super admin credential (Login: automaticsystems, Password: astech). A remote attacker could obtain sensitive information due to this hardcoded password. Exploit details are ...

CVE-2022-3010

The Priva TopControl Suite contains predictable credentials for the SSH service, based on the Serial number. Which makes it possible for an attacker to calculate the login credentials for the Priva TopControll suite...

The Anatomy of HTML Attachment Phishing

The Anatomy of HTML Attachment Phishing: One Code, Many Variants By Mathanraj Thangaraju, Niranjan Hegde, and Sijo Jacob · June 14, 2023 Introduction Phishing is the malevolent practise of pretending to be a reliable entity in electronic communication to steal sensitive data, such as login...

CVE-2023-5885

The discontinued FFS Colibri product allows a remote user to access files on the system including files containing login credentials for other users...

Code injection

The discontinued FFS Colibri product allows a remote user to access files on the system including files containing login credentials for other users...

CVE-2023-5885

CVE-2023-5885 affects Franklin Electric Fueling Systems Colibri (discontinued Colibri product). The vulnerability is a Path Traversal (CWE-35) that allows a remote attacker to access files on the system, including files containing login credentials for other users. Affected scope: Colibri firmwar...

CVE-2023-5885 Franklin Electric Fueling Systems Colibri Path Traversal

The discontinued FFS Colibri product allows a remote user to access files on the system including files containing login credentials for other users...

Franklin Fueling System Colibri Path Traversal Vulnerability

Franklin Fueling System Colibri is a fuel system from Franklin Fueling System, Inc. in the United States. The system monitors fuel density and inventory levels. A security vulnerability exists in Franklin Fueling System Colibri that originates from allowing an attacker to access files on the...

PT-2023-32394 · Unknown · Ffs Colibri

Name of the Vulnerable Software and Affected Versions: FFS Colibri affected versions not specified Description: The issue allows a remote user to access files on the system, including files that contain login credentials for other users. Recommendations: At the moment, there is no information abo...

Rocky Linux 8 : container-tools:rhel8 (RLSA-2019:3403)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2019:3403 advisory. - The containers/image library used by the container tools Podman, Buildah, and Skopeo in Red Hat Enterprise Linux version 8 and CRI-O in OpenShift...

Rocky Linux 8 : container-tools:1.0 (RLSA-2019:3494)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2019:3494 advisory. - The containers/image library used by the container tools Podman, Buildah, and Skopeo in Red Hat Enterprise Linux version 8 and CRI-O in OpenShift...

PT-2023-30279 · Totolink · Totolink X6000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK X6000R version 9.4.0cu.852 B20230719 Description: The issue concerns incorrect access control, allowing attackers to reset login and WIFI passwords without proper authentication. Recommendations: For TOTOLINK X6000R version 9.4.0cu.8...

Authentication flaw

Missing authentication in the SetDB method in IDAttend’s IDWeb application 3.1.052 and earlier allows denial of service or theft of database login credentials...

CVE-2023-26573 Missing Authentication In IDAttend’s IDWeb Application

Missing authentication in the SetDB method in IDAttend’s IDWeb application 3.1.052 and earlier allows denial of service or theft of database login credentials...

Advantech R-SeeNet 安全漏洞

Advantech R-SeeNet is an industrial monitoring software from Advantech, China. An information disclosure vulnerability exists in Advantech R-SeeNet, which can be exploited by an attacker to obtain login credentials and the default SNMP group string from the snmpmon.ini file and use this informati...