8052 matches found
PT-2023-31434
Name of the Vulnerable Software and Affected Versions Customer Support System version v1 Description A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the subject parameter at "/customer support/index.php?page=new ticket...
PT-2023-31257
Name of the Vulnerable Software and Affected Versions Customer Support System version v1 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the lastname parameter at the "/customer support/ajax.php?action=save user" API endpoint...
PT-2023-31254
Name of the Vulnerable Software and Affected Versions Customer Support System version v1 Description A directory listing issue allows attackers to list directories and sensitive files within the application without requiring authorization. Recommendations For Customer Support System version v1,...
Mr. Cooper leaks personal data of 14 million loan and mortgage customers
A major mortgage and loan company based in Dallas, working under the name Mr. Cooper Group Inc. has released more information on a recent breach. In a data breach notification, the company didnt say what type of cyberattack caused the compromise of customer data, calling it a rather non-descripti...
Exploit for SQL Injection in Oretnom23 Customer_Support_System
CVE-2023-49970 Customer Support System 1.0 - SQL Injection V...
Exploit for SQL Injection in Oretnom23 Customer_Support_System
CVE-2023-49969 Customer Support System 1.0 - SQL Injection V...
Exploit for SQL Injection in Oretnom23 Customer_Support_System
CVE-2023-49968 Customer Support System 1.0 - SQL Injection V...
Exploit for SQL Injection in Oretnom23 Customer_Support_System
CVE-2023-49548 Customer Support System 1.0 - SQL Injection V...
Exploit for SQL Injection in Oretnom23 Customer_Support_System
CVE-2023-49546 Customer Support System 1.0 - SQL Injection V...
Subnet Solutions Inc. PowerSYSTEM Center
View CSAF 1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Subnet Solutions Inc. Equipment: PowerSYSTEM Center Vulnerability: Unquoted Search Path or Element 2. RISK EVALUATION Successful exploitation of this vulnerability could result in an attacker achieving arbitrary...
MongoDB warns customers about data breach after cyberattack
Database provider MongoDB has posted a security notice about a security incident in which attackers obtained unauthorized access to some of its corporate systems. The targeted system contained customer names, phone numbers, and email addresses among other customer account metadata, including syst...
CVE-2023-6483
The vulnerability exists in ADiTaaS Allied Digital Integrated Tool-as-a-Service version 5.1 due to an improper authentication vulnerability in the ADiTaaS backend API. An unauthenticated remote attacker could exploit this vulnerability by sending specially crafted HTTP requests to the vulnerable...
CVE-2023-6483
The vulnerability exists in ADiTaaS Allied Digital Integrated Tool-as-a-Service version 5.1 due to an improper authentication vulnerability in the ADiTaaS backend API. An unauthenticated remote attacker could exploit this vulnerability by sending specially crafted HTTP requests to the vulnerable...
CVE-2023-6483
CVE-2023-6483 affects ADiTaaS (Allied Digital Integrated Tool-as-a-Service) v5.1, via an improper authentication vulnerability in the backend API. The issue allows an unauthenticated remote attacker to send crafted HTTP requests and potentially gain full access to customer data, fully compromisin...
ADiTaaS Authorization Issues Vulnerabilities
ADiTaaS is a service management platform from ADiTaaS, Inc. A security vulnerability exists in ADiTaaS version 5.1 that stems from the presence of an incorrect authentication vulnerability. A remote attacker could exploit the vulnerability by sending a specially crafted HTTP request to gain full...
Citrix FAS - Failed to connect to Citrix Cloud
When using the Federated Authentication Service FAS administration console to connect a FAS server to Citrix Cloud, the following error message is shown. Error Message: "Failed to retrieve your customers, reload the page and if it still fails contact customer support."...
MongoDB Suffers Security Breach, Exposing Customer Data
MongoDB on Saturday disclosed it's actively investigating a security incident that has led to unauthorized access to "certain" corporate systems, resulting in the exposure of customer account metadata and contact information. The American database software company said it first detected anomalous...
Hackers Access Customer Info, Corporate Systems in MongoDB Data Breach
By Waqas The latest cybersecurity incident to impact a large-scale and highly popular company is the MongoDB Data Breach. This is a post from HackRead.com Read the original post: Hackers Access Customer Info, Corporate Systems in MongoDB Data Breach...