CVE-2020-6490

Insufficient data validation in loader in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had been able to write to disk to leak cross-origin data via a crafted HTML page...

GDPR what? European Parliament breach exposes data of 1000s of people

By Sudais Asif The response of the Vice-President of the European Parliament's IT policy it perfect a "yikes" moment. This is a post from HackRead.com Read the original post: GDPR what? European Parliament breach exposes data of 1000s of people...

wildfly: The 'enabled-protocols' value in legacy security is not respected if OpenSSL security provider is in use

A flaw was found when an OpenSSL security provider is used with Wildfly, the 'enabled-protocols' value in the Wildfly configuration isn't honored. An attacker could target the traffic sent from Wildfly and downgrade the connection to a weaker version of TLS, potentially breaking the encryption...

Multiple Huawei products cross-border read vulnerability (CNVD-2020-28976)

The Huawei Honor Magic 2, among others, is a smartphone from the Chinese company Huawei Huawei. A security vulnerability exists in several Huawei products. Attackers can exploit the vulnerability with the help of a specially crafted application to cause information leakage or service anomalies...

DEBIAN-CVE-2020-1945

Apache Ant 1.1 to 1.9.14 and 1.10.0 to 1.10.7 uses the default temporary directory identified by the Java system property java.io.tmpdir for several tasks and may thus leak sensitive information. The fixcrlf and replaceregexp tasks also copy files from the temporary directory back into the build...

USN-4353-2 firefox regression

USN-4353-1 fixed vulnerabilities in Firefox. The update caused a regression that impaired the functionality of some addons. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Multiple security issues were discovered in Firefox. If a user were tricked in ...

Over 4000 Android Apps Expose Users' Data via Misconfigured Firebase Databases

More than 4,000 Android apps that use Google's cloud-hosted Firebase databases are 'unknowingly' leaking sensitive information on their users, including their email addresses, usernames, passwords, phone numbers, full names, chat messages and location data. The investigation, led by Bob Diachenko...

DigitalOcean Data Leak Incident Exposed Some of Its Customers Data

DigitalOcean, one of the biggest modern web hosting platforms, recently hit with a concerning data leak incident that exposed some of its customers' data to unknown and unauthorized third parties. Though the hosting company has not yet publicly released a statement, it did has started warning...

DigitalOcean Data Leak Incident Exposed Some of Its Customers Data

DigitalOcean, one of the biggest modern web hosting platforms, recently hit with a concerning data leak incident that exposed some of its customers' data to unknown and unauthorized third parties. Though the hosting company has not yet publicly released a statement, it did has started warning...

UBUNTU-CVE-2019-14898

The fix for CVE-2019-11599, affecting the Linux kernel before 5.0.10 was not complete. A local user could use this flaw to obtain sensitive information, cause a denial of service, or possibly have other unspecified impacts by triggering a race condition with mmgetnotzero or gettaskmm calls...

ManageEngine DataSecurity Plus Authentication Bypass

XL-2020-002 - DataSecurity Plus Xnode Server - Authentication Bypass =============================================================================== Identifiers ------------------------------------------------- CVE-2020-11532 XL-20-002 CVSSv3 score ------------------------------------------------...

ManageEngine DataSecurity Plus Path Traversal / Code Execution

XL-2020-001 - DataSecurity Plus Xnode Server - Remote Code Execution via Path Traversal =============================================================================== Identifiers ------------------------------------------------- CVE-2020-11531 XL-20-001 CVSSv3 score...

Adult streaming site CAM4 leaks 7 TB of data with 11 billion records

By Waqas The adult streaming site CAM4 has leaked 7 terabytes of data containing 10.88 billion records... This is a post from HackRead.com Read the original post: Adult streaming site CAM4 leaks 7 TB of data with 11 billion records...

SQL Injection Vulnerability in ShyPost Enterprise Management System Pr***.asp Page

ShyPost Enterprise Management System is a set of intelligent ASP-based website building software. ShyPost Enterprise Management System Pr.asp page has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

ALPINE-CVE-2020-10933

An issue was discovered in Ruby 2.5.x through 2.5.7, 2.6.x through 2.6.5, and 2.7.0. If a victim calls BasicSocketreadnonblockrequestedsize, buffer, exception: false, the method resizes the buffer to fit the requested size, but no data is copied. Thus, the buffer string provides the previous valu...

LA County Hit with DoppelPaymer Ransomware Attack

The DoppelPaymer ransomware operators claim that they’ve hit a Los Angeles county with a ransomware attack – and are now leaking the city’s data online, according to a recent report. Impacted is the city of Torrance, a coastal U.S. city in the South Bay region of LA, which has a population of...

Exercise tech firm Kinomap leaks 40GB database with 42M records

By Waqas Kinomap did not respond to researchers whatsoever and left the database exposed to public access. This is a post from HackRead.com Read the original post: Exercise tech firm Kinomap leaks 40GB database with 42M records...

LJCMS suffers from SQL injection vulnerability (CNVD-2020-26976)

LJCMS is a PHP+MYSQL based, free and open source enterprise website system. LJCMS has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

Logic Flaw Vulnerability in EcoTimes.com Corporate Online Bookkeeping Management System

EcoTimes.com Business Online Bookkeeping Management System PHP is a commercial system. There is a logic flaw vulnerability in the EcoTimes.com Enterprise Online Bookkeeping Management System that can be exploited by attackers to obtain sensitive information...

OPENSUSE-SU-2020:0523-1 Security update for ansible

This update for ansible to version 2.9.6 fixes the following issues: Security issues fixed: - CVE-2019-14904: Fixed a vulnerability in solariszone module via crafted solaris zone boo1157968. - CVE-2019-14905: Fixed an issue where malicious code could craft filename in nxosfilecopy module...