PT-2019-11636 · Postgresql Global Development Group · Postgresql

Name of the Vulnerable Software and Affected Versions: Postgresql versions prior to 11.5 Postgresql versions prior to 10.10 Postgresql versions prior to 9.6.15 Postgresql versions prior to 9.5.19 Postgresql versions prior to 9.4.24 Description: The issue allows a superuser to write a password to ...

Unprotected Database Exposes Personal Info of 80 Million American Households

A team of security researchers has claims to have found a publicly-accessible database that exposes information on more than 80 million U.S. households—nearly 65 percent of the total number of American households. Discovered by VPNMentor's research team lead by hacktivists Noam Rotem and Ran Loca...

The vulnerability of Cisco Umbrella’s security cloud service arises from the lack of protection for website structures. This allows attackers to execute arbitrary code in users’ browsers or gain access to confidential information.

The vulnerability of Cisco Umbrella security service exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in a user’s browser or gain access to confidential information through a specially craft...

The vulnerability of the win32k component of the Windows operating system, which allows a hacker to compromise the confidentiality of protected information

The vulnerability of the win32k component in the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability allows an attacker to compromise the confidentiality of protected information through a specially created application...

The vulnerability in the setup of Azure DevOps Server and Team Foundation Server, a system for project management and version control, exists due to the lack of protective measures for the website structure. This allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Azure DevOps Server and Team Foundation Server project management and version control systems exists due to the lack of protective measures for the website structure. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality and integri...

Over 100 Million JustDial Users' Personal Data Found Exposed On the Internet

An unprotected database belonging to JustDial , India's largest local search service, is leaking personally identifiable information of its every customer in real-time who accessed the service via its website, mobile app, or even by calling on its fancy "88888 88888" customer care number, The...

Over 100 Million JustDial Users' Personal Data Found Exposed On the Internet

An unprotected database belonging to JustDial, India's largest local search service, is leaking personally identifiable information of its every customer in real-time who accessed the service via its website, mobile app, or even by calling on its fancy "88888 88888" customer care number, The Hack...

540 Million Facebook User Records Found On Unprotected Amazon Servers

It's been a bad week for Facebook users. First, the social media company was caught asking some of its new users to share passwords for their registered email accounts and now… ...the bad week gets worse with a new privacy breach. More than half a billion records of millions of Facebook users hav...

540 Million Facebook User Records Found On Unprotected Amazon Servers

It's been a bad week for Facebook users. First, the social media company was caught asking some of its new users to share passwords for their registered email accounts and now… ...the bad week gets worse with a new privacy breach. More than half a billion records of millions of Facebook users hav...

Thousands of Unprotected Kibana Instances Exposing Elasticsearch Databases

In today's world, data plays a crucial role in the success of any organization, but if left unprotected, it could be a cybercriminal's dream come true. Poorly protected MongoDB, CouchDB, and Elasticsearch databases recently got a lot more attention from cybersecurity firms and media lately. More...

PortSwigger Web Security: DLL Hijacking in Burp Suite Pro 2.0.19 Installer

I've found that the latest installer of Burp Suite Pro tries to load some DLLs from an unprotected folder. After providing it with admin privileges required to install it tries to load these DLLs: C:\Users\bortto\AppData\Local\Temp\e4jA5E5.tmpdir1553882416\jre\bin\WINMM.dll...

CVE-2018-19879

An issue was discovered in /cgi-bin/luci on Teltonika RTU9XX e.g., RUT950 R31.04.89 before R00.05.00.5 devices. The authentication functionality is not protected from automated tools used to make login attempts to the application. An anonymous attacker has the ability to make unlimited login...

The vulnerability of the Windows Print Spooler component of the Windows operating system, which allows a hacker to disclose protected information

The vulnerability of the Windows Print Spooler component of the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of the Windows operating system’s kernel, which allows a hacker to disclose protected information

The vulnerability of the Windows operating system’s kernel is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose protected information through a specially created application...

Semmle: Unprotected Api EndPoints

Summary: I am able to automate the get/post requests of the following api end-points with a python script which can lead to heavy load to server resulting in dos attack or buffer overflow. /internalapi/v0.2/getSuggestedProjects /internalapi/v0.2/getLanguages /internalapi/v0.2/getLoggedInUser...

NetLinx Controller Unprotected Access (Telnet)

The NetLinx Controller is accessible via an unprotected Telnet connection. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

The vulnerability of the Windows operating system, related to the lack of protection for service data, allows a perpetrator to read the contents of files on the disk.

The vulnerability of the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability allows an attacker to read the contents of files on the disk using a specially created application...

Almost Half A Million Delhi Citizens' Personal Data Exposed Online

Exclusive — A security researcher has identified an unsecured server that was leaking detailed personal details of nearly half a million Indian citizens... thanks to another MongoDB database instance that company left unprotected on the Internet accessible to anyone without password. In a report...

The vulnerability of the Cisco Connected Mobile Experiences software lies in the lack of protection for operational data, which allows an attacker to gain access to protected information.

The vulnerability of the Cisco Connected Mobile Experiences software lies in the lack of protection for sensitive data. Exploiting this vulnerability could allow an attacker to gain access to protected information by sending HTTP GET requests to the vulnerable device...

The vulnerability of the Lazy FPU context switching function in Intel processors allows a hacker to gain access to protected information.

The vulnerability of the Lazy FPU context switching function in Intel processors is related to insufficient protection of data in the FPU registers of the processor. Exploiting this vulnerability can allow an attacker to access protected information...