Spyse: All-In-One Cybersecurity Search Engine

Spyse is a cybersecurity search engine for finding technical information about different internet entities, business data, and vulnerabilities. It’s an all-in-one platform for fast and effortless reconnaissance without using any additional tools. Spyse engine implements a ready-to-use database wi...

snakeyaml: Billion laughs attack via alias feature

The Alias feature in SnakeYAML before 1.26 allows entity expansion during a load operation, a related issue to CVE-2003-1564...

Adult streaming site CAM4 leaks 7 TB of data with 11 billion records

By Waqas The adult streaming site CAM4 has leaked 7 terabytes of data containing 10.88 billion records... This is a post from HackRead.com Read the original post: Adult streaming site CAM4 leaks 7 TB of data with 11 billion records...

Adult Cam Site CAM4 Exposed 10.88 Billion Records Online

CAM4 has taken the server offline, but not before it leaked 7TB of user data...

France’s largest newspaper exposed 8 TB of data with 7.4 billion records

By Sudais Asif Data breaches today still remain one of the most common security issues for companies judging by their frequency but... This is a post from HackRead.com Read the original post: France's largest newspaper exposed 8 TB of data with 7.4 billion records...

CVE-2020-3946

InstallBuilder AutoUpdate tool and regular installers enabling built with versions earlier than 19.11 are vulnerable to Billion laughs attack denial-of-service...

CVE-2020-3946

InstallBuilder AutoUpdate tool and regular installers enabling built with versions earlier than 19.11 are vulnerable to Billion laughs attack denial-of-service...

Design/Logic Flaw

InstallBuilder AutoUpdate tool and regular installers enabling built with versions earlier than 19.11 are vulnerable to Billion laughs attack denial-of-service...

CVE-2020-3946

InstallBuilder AutoUpdate tool and regular installers enabling built with versions earlier than 19.11 are vulnerable to Billion laughs attack denial-of-service...

CVE-2020-3946

CVE-2020-3946 affects VMware InstallBuilder (AutoUpdate tool and regular installers) where builds using prior to version 19.11 are vulnerable to a Billion Laughs denial-of-service. Multiple sources in connected documents confirm the affected component and the pre-19.11 versions as vulnerable, wi...

Topcoder: SVG file upload leads to XML injection

Summary: Upload Avatar option allows the user to upload image/ . Thus enabling the upload of many file formats including SVG files MIME type: image/svg+xml SVG files are XML based graphics files in 2D images. Thus, this opens up an attack vector to upload specially crafted malicious SVG files. Th...

Cyber Security firm exposes 5 billion+ login credentials

By Deeba Ahmed On 16th March an Elasticsearch database reportedly owned by the UK-based cyber security firm Keepnet Labs... This is a post from HackRead.com Read the original post: Cyber Security firm exposes 5 billion+ login credentials...

2 in 5 Android devices found vulnerable worldwide – That’s over a billion

By Sudais Asif Another day, another Android vulnerability - This time there are multiple though, thanks to Google for ignoring old devices. This is a post from HackRead.com Read the original post: 2 in 5 Android devices found vulnerable worldwide - That's over a billion...

New Wi-Fi Encryption Vulnerability Affects Over A Billion Devices

Cybersecurity researchers today uncovered a new high-severity hardware vulnerability residing in the widely-used Wi-Fi chips manufactured by Broadcom and Cypress—apparently powering over a billion devices, including smartphones, tablets, laptops, routers, and IoT gadgets. Dubbed 'Kr00k ' and...

Denial Of Service (DoS)

snakeyaml is vulnerable to denial of service. The library allows an attacker to crash the application through an entity expansion attack, also known as billion laughs attack, by providing a malicious YAML file to be parsed...

MGASA-2020-0051 Updated c3p0 packages fix security vulnerabilities

An XML external entity processing vulnerability was found in extractXmlConfigFromInputStream function in c3p0 CVE-2018-20433. c3p0 version 0.9.5.4 may be exploited by a billion laughs attack when loading XML configuration due to missing protections against recursive entity expansion when loading...

Feds seize WeLeakInfo.com for selling stolen databases

By Sudais Asif WeLeakInfo.com was home to over 10,000 data breaches containing over 12 billion indexed records. This is a post from HackRead.com Read the original post: Feds seize WeLeakInfo.com for selling stolen databases...

Billion Smart Energy Router SG600R2 Command Execution Vulnerability

The Billion Smart Energy Router SG600R2 is a router device. A security vulnerability exists in the Billion Smart Energy Router SG600R2 using firmware version 3.02.rc6. The vulnerability can be exploited to gain root execute privileges with the help of a hidden etcro/web/adm/systemcommand.asp shel...

Billion Smart Energy Router SG600R2 DHCP Lease Status Form Cross-Site Scripting Vulnerability

The Billion Smart Energy Router SG600R2 is a router device. A cross-site scripting vulnerability exists in the Billion Smart Energy Router SG600R2 DHCP lease status form, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to gain...

CVE-2019-14920

Billion Smart Energy Router SG600R2 Firmware v3.02.rc6 allows an authenticated attacker to gain root execution privileges over the device via a hidden etcro/web/adm/systemcommand.asp shell feature...