4590 matches found
The vulnerability of the parser_get_next_char function in iCal calendar software for email processing in Thunderbird software relates to the occurrence of operations outside the buffer in memory. This vulnerability allows attackers to compromise data integrity, gain unauthorized access to protected information, and cause service failures.
The vulnerability of the parsergetnextchar function in iCal calendar software for email processing in Thunderbird is related to buffer overflows in dynamic memory during message processing. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its...
The vulnerability of the icalmemory_strdup_and_dequote function in the iCal calendar software for Thunderbird email processing, related to the execution of operations outside the buffer in memory. This vulnerability allows an attacker to compromise data integrity, gain unauthorized access to protected information, and cause service failures.
The vulnerability of the icalmemorystrdupanddequote function in the iCal calendar software for Thunderbird email processing is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and cau...
The vulnerability of the software for implementing the hypertext environment MediaWiki relates to the possibility of bypassing the repeated authentication process. This allows a violator to compromise data integrity, gain unauthorized access to protected information, and cause service interruptions.
The vulnerability of the software for implementing the hypertext environment MediaWiki is related to the possibility of bypassing the repeated authentication process. Exploiting this vulnerability can allow an intruder operating remotely to compromise data integrity, gain unauthorized access to...
Instagram clamps down on fake messages with anti-phishing tool
Instagram accounts will always be a popular target for scammers. You might not think it’s a big deal if someone has their account swiped, but it’s often the vanguard of many online businesses. A takeover, or a deletion, can be absolutely devastating. Smart hacking crews are always in the...
A week in security (October 7 – 13)
Last week on Malwarebytes Labs, we peered into the possible future of cybersecurity insurance, described the process for securing today’s managed service provider, and provided an in-depth explainer on the business espionage tactic known as “war shipping.” Further, in considering the intersection...
PT-2019-6196 · FFmpeg +5 · Ffmpeg +5
Name of the Vulnerable Software and Affected Versions: Ffmpeg version 4.2.1 Description: The issue is related to an Integer Overflow vulnerability in the filter16 prewitt function within the libavfilter/vf convolution.c component of the Ffmpeg library. This vulnerability can be exploited by a...
Imperva: Data Breach Caused by Amazon Cloud Misconfiguration
Imperva, the security vendor, said this week that a misconfiguration of an Amazon Web Services AWS cloud instance allowed hackers to exfiltrate information on customers using its Cloud Web Application Firewall WAF product. Formerly known as Incapsula, the Cloud WAF analyzes requests coming into...
CVE-2010-5335
IceWarp Webclient before 10.2.1 has a directory traversal vulnerability. The issue arises from inadequate sanitisation of input passed to a parameter in script to basic/minimizer/index.php, allowing an attacker to read arbitrary files on the IceWarp Mailserver or potentially the underlying OS. Mu...
vBulletin Flaw Exploited in Dutch Sex-Work Forum Breach
Hackers have stolen the account details of 250,000 users of Dutch sex-work forum Hookers.nl – including email addresses of both escorts and customers. The website provides a forum for escorts and customers to discuss sex work — including clients discussing their experiences with sex workers. A...
Breaches are now commonplace, but Reason Cybersecurity lets users guard their privacy
There has been no shortage of massive security breaches so far this year. Just last July, Capital One disclosed that it was hit by a breach that affected more than 100 million customers. Also recently, researchers came across an unsecured cloud server that contained the names, phone numbers, and...
Podcast: Vendors, Suppliers, Partners – Oh My! Who Will Increase Your Risk of Account Takeover?
Your users’ login credentials are available for sale on the criminal underground — and criminals know it. For the third year running, the 2019 Verizon Data Breach Report calls out the use of weak and stolen credentials as the most common hacking tactic. This podcast is sponsored by SpyCloud The...
annuaire.histoiredefrance.net Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-990020 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
Intimate Details on Healthcare Workers Exposed as Cloud Security Lags
Yet another non-password protected cloud database has come to light, this time exposing a raft of highly personal information on healthcare workers and traveling nurses – including drug tests and arrest records. The incident showcases the unfortunate reality that cloud data security remains a...
U.S. Dept Of Defense: Information disclousure by clicking on the link shown in http://████████/
Description: Looking at some subdomains using aquatone I noticed http://█████/ I clicked it and then started navigating the page, if I go to this link: https://█████████/██████████wireframes/admin/round12/tsp0-awarded.html it is completely valid and shows some information that I'm unsure it shoul...
Zendesk Exposes 10,000 Accounts to Unknown Third Party
Cloud-based customer service company Zendesk notified customers that account information for 10,000 users was accessed prior to November 2016. In a note posted Wednesday, Zendesk said email addresses, user names, and phone numbers were accessed for customers and users of its Support and Chat...
Gaming giant Zynga data breach: 218 million records stolen
By Sudais In the still earlier years of Facebook, around 2009, Farmville was the go-to game for me and thousands of users on Facebook. Built by Zynga, an American game developer, it surely made our lives more fun. This is a post from HackRead.com Read the original post: Gaming giant Zynga data...
Comodo Forums Hack Exposes 245,000 Users' Data — Recent vBulletin 0-day Used
If you have an account with the Comodo discussion board and support forums, also known as ITarian Forum, you should change your password immediately. Cybersecurity company Comodo has become one of the major victims of a recently disclosed vBulletin 0-day vulnerability, exposing login account...
Comodo Forums Hack Exposes 245,000 Users' Data — Recent vBulletin 0-day Used
If you have an account with the Comodo discussion board and support forums, also known as ITarian Forum, you should change your password immediately. Cybersecurity company Comodo has become one of the major victims of a recently disclosed vBulletin 0-day vulnerability, exposing login account...
The vulnerability of the fly-admin-local-se component in the FLY operating system of the Astra Linux platform allows a attacker to compromise data integrity, gain unauthorized access to protected information, and cause service interruptions.
The vulnerability of the fly-admin-local-se component in the FLY operating system of Astra Linux is related to logging errors when changing user privileges, as well as errors in creating rules for devices with the same name. Exploiting this vulnerability can allow attackers to compromise data...
A week in security (September 23 – 29)
Last week on Labs, we highlighted an Emotet campaign using Snowden’s new book as a lure, discussed how 15,000 webcams are vulnerable to attack, how insurance data security laws skirt political turmoil, and how the new iOS exploit checkm8 allows permanent compromise of iPhones. Other cybersecurity...