1944 matches found
PT-2024-24732
Name of the Vulnerable Software and Affected Versions ATCMD affected versions not specified Description The issue arises from a misinterpretation of a value in ATCMD by the printf function, leading to incorrect output and potential out-of-bounds memory access. Recommendations At the moment, there...
A week in security (April 8 – April 14)
Last week on Malwarebytes Labs: How to change your Social Security Number Apple warns people of mercenary attacks via threat notification system How to check if your data was exposed in the AT&T breach Microsoft’s April 2024 Patch Tuesday includes two actively exploited zero-day vulnerabilities H...
MAL-2024-1260 Malicious code in trip-component-platform-online-footer (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2b1894dd696dfb0e732a29e63d51abc46571ac2e0b0528d22359a070066b65d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
How to check if your data was exposed in the AT&T breach
AT&T has notified US state authorities and regulators about its recent or not data breach, saying 51,226,382 people were affected. For those that have missed the story so far: Back in 2021, a hacker named Shiny Hunters claimed to have breached AT&T. On March 20, 2024, we reported how the data of...
MAL-2024-1243 Malicious code in @lbnqduy11805/turbo-octo-memory (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7bd870e9a4b756cffdd1e5cfba86cd8edb34d34c9ca9467057155fc0e9b0d750 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
agnes-at-work.de Cross Site Scripting vulnerability OBB-3913442
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
k19.at Cross Site Scripting vulnerability OBB-3909729
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
at-caprice.com Cross Site Scripting vulnerability OBB-3908904
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
nodejs: improper handling of wildcards in --allow-fs-read and --allow-fs-write
A flaw was found in the Node.js Permission Model, where it is not clarified in the documentation that wildcards should only be used as the last character of a file path. For example: --allow-fs-read=/home/node/.ssh/.pub will ignore pub and give access to everything after .ssh/...
AT&T confirms 73 million people affected by data breach
Telecommunications giant AT&T has finally confirmed that 73 million current and former customers have been caught up in a massive dark web data leak. The leaked data includes names, addresses, mobile phone numbers, dates of birth, and social security numbers. Malwarebytes VP of Consumer Privacy,...
After Denial, AT&T Confirms Data Breach Affecting 73 Million Users
By Waqas Another day, another massive data breach affecting critical infrastructure in the United States! This is a post from HackRead.com Read the original post: After Denial, AT&T Confirms Data Breach Affecting 73 Million Users...
CVE-2021-31156
Allied Telesis AT-S115 1.2.0 devices before 1.00.024 with Boot Loader 1.00.006 allow Directory Traversal to achieve partial access to data...
Allied Telesis AT-S115 安全漏洞
The Allied Telesis AT-S115 is a Gigabit Ethernet Smart Switch from Allied Telesis Japan. A security vulnerability exists in the Allied Telesis AT-S115 version prior to 1.2.0 1.00.024, which stems from a vulnerability that allows an attacker to perform a directory traversal attack to access some...
PT-2024-10928 · Allied Telesis · At-S115
Name of the Vulnerable Software and Affected Versions: Allied Telesis AT-S115 version 1.2.0 before 1.00.024 with Boot Loader 1.00.006 Description: The issue allows Directory Traversal, which can lead to partial access to data. Recommendations: For Allied Telesis AT-S115 version 1.2.0 before...
CVE-2021-31156
Allied Telesis AT-S115 devices (firmware 1.2.0 before 1.00.024 with Boot Loader 1.00.006) contain a directory traversal vulnerability that can lead to partial data access. The issue is triggered via the affected boot loader/firmware chain, enabling unintended data exposure on vulnerable units. Pu...
CVE-2021-31156
Allied Telesis AT-S115 1.2.0 devices before 1.00.024 with Boot Loader 1.00.006 allow Directory Traversal to achieve partial access to data...
CVE-2024-25393
A stack buffer overflow occurs in net/at/src/atserver.c in RT-Thread through 5.0.2...
CVE-2024-25393
A stack buffer overflow occurs in net/at/src/atserver.c in RT-Thread through 5.0.2...
RT-Thread 安全漏洞
RT-Thread is an open source IoT real-time operating system RTOS open-sourced by RT-Thread. RT-Thread suffers from a buffer overflow vulnerability that stems from net/at/src/atserver.c failing to properly validate the length size of input data, which can be exploited by remote attackers to execute...