13198 matches found
A Critical Analysis of the Medibank Health Data Breach and Differential Privacy Solutions
This paper critically examines the 2022 Medibank health insurance data breach, which exposed sensitive medical records of 9.7 million individuals due to unencrypted storage, centralized access, and the absence of privacy-preserving analytics. To address these vulnerabilities, we propose an...
MediaTek chipsets 安全漏洞
MediaTek Chipsets is a line of chipsets from China's MediaTek Corporation MediaTek. A security vulnerability exists in MediaTek chipsets that stems from memory corruption due to reuse after release, which could lead to local elevation of privilege...
Sony BRAVIA Digital Signage 安全漏洞
Sony BRAVIA Digital Signage is a digital signage system from Sony Corporation of Japan. A security vulnerability exists in Sony BRAVIA Digital Signage version 1.7.8, which originates from an information disclosure vulnerability that could lead to unauthenticated access to network interface...
badkeys 安全漏洞
badkeys is an open source library of tools from badkeys to check cryptographic public keys for vulnerabilities. A security vulnerability exists in badkeys version 0.0.15 and earlier, which stems from the fact that an attacker can inject content containing ASCII control characters, potentially...
NordVPN Denies Breach After Hacker Claims Access to Salesforce Dev Data
A hacker using the alias 1011 has claimed to breach a NordVPN development server, posting what appears to…...
PostgREST API Server Detected
PostgREST is a standalone web server that turns your PostgreSQL database directly into a RESTful API. By default, PostgREST does not implement any authentication or access control mechanisms, which can lead to unauthorized access to sensitive data if the server is exposed to untrusted networks...
Centreon 安全漏洞
Centreon is a set of open source system monitoring tools from the French company Centreon . The product provides monitoring capabilities for resources such as networks, systems and applications. A security vulnerability exists in Centreon versions prior to 25.10.2, 24.10.15, and 24.04.19, which...
Coolify 安全漏洞
Coolify is an open source and self-hosted Heroku/Netlify/Vercel replacement from coolLabs Open Source. A security vulnerability exists in Coolify v4.0.0-beta.420.8 and earlier versions, which stems from an information leak in the API endpoint that could lead to unauthorized email address changes...
Coolify 安全漏洞
Coolify is an open source and self-hosted Heroku/Netlify/Vercel replacement from coolLabs Open Source. A security vulnerability exists in Coolify v4.0.0-beta.434 and earlier versions, which stems from a low-privileged user being able to use an invitation link sent to an administrator, potentially...
Coolify 安全漏洞
Coolify is an open source and self-hosted Heroku/Netlify/Vercel replacement from coolLabs Open Source. A security vulnerability exists in Coolify v4.0.0-beta.434 and earlier versions, which stems from a low-privileged user being able to invite a high-privileged user, potentially resulting in...
Resecurity Says ShinyHunters Fell for Honeypot After Breach Claim
Resecurity denies breach claims by ShinyHunters, says attackers accessed a honeypot with fake data. No real systems or customer info were compromised...
ShinyHunters Claim Breach of US Cybersecurity Firm Resecurity (Updated)
Editor’s Note Updated: This article has been edited to reflect clarifications provided by Resecurity, including the company’s December…...
Tokyo FM Data Breach: Hacker Claims Over 3 Million Records Stolen
Tokyo FM is investigating claims of a massive data breach involving 3 million records. Learn what information was allegedly taken and how you can stay safe...
EmpireSoft EmpireCMS 安全漏洞
EmpireSoft EmpireCMS Empire Content Management System is an open source content management system CMS from EmpireSoft, Inc. A security vulnerability exists in EmpireSoft EmpireCMS 8.0 and earlier versions, which stems from an incorrect operation of the function egetip in the file...
gpsd 安全漏洞
gpsd is a daemon program for receiving GPS data. A security vulnerability exists in gpsd that stems from an integer underflow in the nextstate function, which could lead to 100% CPU utilization and a denial of service...
REDCap 安全漏洞
REDCap is a data collection and management web application from REDCap Open Source. A security vulnerability exists in REDCap version 14.3.13 that stems from an observable difference between login attempts and could lead an attacker to enumerate usernames...
itsourcecode School Management System 安全漏洞
itsourcecode School Management System is an open source school management system by itsourcecode. A security vulnerability exists in version 1.0 of itsourcecode School Management System, which stems from an incorrect manipulation of the parameter ID in the file /student/index.php, which could lea...
Hacker Claims European Space Agency Breach, Selling 200GB of Data
This article has been updated with a tweet from the agency acknowledging that it is investigating these claims.…...
Badaso 安全漏洞
Badaso is an open source Laravel Vue headless CMS from Uasoft Open Source. A security vulnerability exists in Badaso 2.9.7 and earlier versions, which stems from a weak password recovery mechanism in the getPassword function in the Token Handler component file...
