1.1 Million Affected by CareFirst BlueCross BlueShield Breach

CareFirst BlueCross BlueShield announced yesterday that attackers gained access to a single company database containing the sensitive and personal information of more than a million of its current and former health insurance customers. BlueCross BlueShield BCBS is a federation of health insurance...

Cisco Unified Customer Voice Portal Cross-Site Request Forgery Vulnerability

Cisco Unified Customer Voice Portal CVP provides voice and video self-service. A cross-site request forgery vulnerability exists in Cisco Unified Customer Voice Portal, where the program fails to properly validate user input, allowing a remote attacker to construct a malicious URI, trick the user...

CVE-2015-0735

Cross-site request forgery CSRF vulnerability in Cisco Unified Customer Voice Portal CVP 10.51 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCut93970...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Cisco Unified Customer Voice Portal CVP 10.51 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCut93970...

American telecommunications giant Verizon aeration have significant security vulnerabilities, leakage of customer information-vulnerability warning-the black bar safety net

The United States largest wireless communications provider Verizon to 4 4 billion USD acquisition of Aol AOL message Board this week to foreign media news headlines. However, BuzzFeed's latest report shows that Verizon in the design of a major security vulnerability could allow the...

SAP CRM Business Rules Framework SQL Injection Vulnerability

SAP CRM is a customer relationship management solution. A SQL injection vulnerability exists in SAP CRM's Business Rules Framework CRM-BF-BRF, which allows remote attackers to exploit the vulnerability by submitting specially crafted SQL queries to manipulate or obtain database data...

SAP CRM Business Rules Framework Arbitrary Code Execution Vulnerability

SAP CRM is a customer relationship management solution. SAP CRM's Business Rules Framework CRM-BF-BRF fails to properly filter user-submitted input, allowing remote attackers to exploit the vulnerability by submitting specially crafted requests to execute arbitrary code...

Sally Beauty Investigating Second Data Breach

Sally Beauty Supply, a seller of beauty products in the U.S., says it is investigating reports of fraudulent activities involving payment cards used at some of the chain’s retail locations. In March 2014, Sally Beauty admitted that hackers compromised its payment systems, exposing the sensitive...

SendGrid Email Delivery Service Hack

SendGrid, which sells a cloud-based email delivery service, has admitted that the extent of a hack disclosed three weeks ago was much more serious than originally reported. The company said an employee account was compromised and used to access other systems that contained customer and employee...

SevenIT SevDesk 3.10 - Multiple Web Vulnerabilities

Exploit for multiple platform in category web applications Document Title: =============== SevenIT SevDesk 3.10 - Multiple Web Vulnerabilities Product & Service Introduction: =============================== The integrated customer management, digital customer file is the central record for a sing...

Important: Red Hat Security Advisory: Red Hat JBoss Data Grid 6.4.1 update

Red Hat JBoss Data Grid 6.4.1, which fixes several security issues, multiple bugs, and adds various enhancements, is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base...

Important: Red Hat Security Advisory: Red Hat JBoss Fuse Service Works 6.0.0 security update

Red Hat JBoss Fuse Service Works 6.0.0 roll up patch 4, which fixes multiple security issues and various bugs, is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base score...

Breach at Premera Blue Cross Affects 11 Million

Hackers wriggled their way into the servers of health insurance provider Premera Blue Cross 10 months ago, and potentially exposed the information of 11 million members, employees and other associates. The provider announced yesterday that customer information, including names, dates of birth,...

[security bulletin] HPSBHF03279 rev.1 - HP Point of Sale PCs Running Windows with OPOS Drivers, Remote Execution of Code

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04583185 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04583185 Version: 1 HPSBHF03279 rev....

CVE-2015-1875

Elastix 2.5.0 and earlier is affected by an SQL injection in a2billing/customer/iridium_threed.php, exploitable via the transactionID parameter. The vulnerability allows remote attackers to execute arbitrary SQL commands, potentially impacting data confidentiality and integrity and possibly other...

Design/Logic Flaw

The OLE Point of Sale OPOS drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via vectors involving OPOSLineDisplay.ocx for Retail RP7 VFD Customer Display monitors, Retail Integrated 2x20 Display monitors, Retail Integrated 2x20 Complex...

CVE-2014-7889

HP OPOS OPOSLineDisplay.ocx in HP Point of Sale Windows PCs (before v1.13.003) is vulnerable to remote code execution due to an unspecified flaw in the Open method of OPOSLineDisplay.ocx. The HP Security Bulletin and ZDI advisory tie CVE-2014-7889 to remote code execution via OPOSLineDisplay.ocx ...

CVE-2015-2168

CVE-2015-2168 is rejected; this candidate was withdrawn and does not represent an active security issue.

Facebook Employees can Access your Account without Password

Do you know that your Facebook account can be accessed by Facebook engineers and that too without entering your account credentials? Recent details provided by the social network giant show who can access your Facebook account and when. No doubt, Facebook and other big tech companies including...

TalkTalk Admits Customer Data Breach, warns of Scam Calls

TalkTalk, one of the biggest UK-based phone, TV and Internet service provider with 4 million customers, has admitted it suffered a major Data Breach. TalkTalk said customer information was accessed after a breach at a third-party company, in which names, addresses, phone numbers and TalkTalk...