CVE-2022-27479

Apache Superset before 1.4.2 is vulnerable to SQL injection in chart data requests. Users should update to 1.4.2 or higher which addresses this issue...

Sql injection

Apache Superset before 1.4.2 is vulnerable to SQL injection in chart data requests. Users should update to 1.4.2 or higher which addresses this issue...

PYSEC-2022-188

Apache Superset before 1.4.2 is vulnerable to SQL injection in chart data requests. Users should update to 1.4.2 or higher which addresses this issue...

CVE-2022-27479

Apache Superset before 1.4.2 is vulnerable to SQL injection in chart data requests. Users should update to 1.4.2 or higher which addresses this issue...

CVE-2022-27479: Improper Neutralization of Special Elements used in an SQL Command

Apache Superset before 1.4.2 is vulnerable to SQL injection in chart data requests. Users should update to 1.4.2 or higher which addresses this issue...

Hackers Using Fake Police Data Requests against Tech Companies

Brian Krebs has a detailed post about hackers using fake police data requests to trick companies into handing over data. Virtually all major technology companies serving large numbers of users online have departments that routinely review and process such requests, which are typically granted as...

Hackers Gaining Power of Subpoena Via Fake “Emergency Data Requests”

There is a terrifying and highly effective "method" that criminal hackers are now using to harvest sensitive customer data from Internet service providers, phone companies and social media firms. It involves compromising email accounts and websites tied to police departments and government...

WordPress plugin information leakage vulnerability

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports personal blog sites on servers running PHP and MySQL.WordPress Plugin is an open source application plugin for WordPress. An information disclosure vulnerability exists in the...

CVE-2021-34570

Multiple Phoenix Contact PLCnext control devices in versions prior to 2021.0.5 LTS are prone to a DoS attack through special crafted JSON requests...

Cisco SD-WAN vManage Unauthorized Access

The vulnerability in the vManage web interface of the Cisco SD-WAN program-defined network is related to insufficient neutralization of specific elements in data requests. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

Code injection

IBM MQ Internet Pass-Thru 2.1 and 9.2 could allow a remote user to cause a denial of service by sending malformed MQ data requests which would consume all available resources. IBM X-Force ID: 188093...

CVE-2020-4766: Uncontrolled Resource Consumption

IBM MQ Internet Pass-Thru 2.1 and 9.2 could allow a remote user to cause a denial of service by sending malformed MQ data requests which would consume all available resources. IBM X-Force ID: 188093...

PT-2021-12172

Name of the Vulnerable Software and Affected Versions IBM MQ Internet Pass-Thru versions 2.1 through 9.2 Description The issue allows a remote user to cause a denial of service by sending malformed MQ data requests which would consume all available resources. Recommendations For IBM MQ Internet...

IBM MQ Internet Pass-Thru Denial of Service Vulnerability

IBM MQ Internet Pass-Thru is an American IBM product used to support the realization of messaging between remote sites on the Internet. The product is an extended functionality component of IBM MQ that acts as a protocol channel or proxy for establishing protocols during interactions, making it...

IBM MQ Internet Pass-Thru resource management error vulnerability

IBM MQ Internet Pass-Thru is an American IBM product used to support the realization of messaging between remote sites on the Internet. The product is an extended functionality component of IBM MQ that acts as a protocol channel or proxy for establishing protocols during interactions, making it...

Red Hat JBoss Enterprise Application Platform 7.x < 7.2.5 Multiple Vulnerabilities

The version of Red Hat JBoss Enterprise Application Platform EAP installed on the remote host is 7.x prior to 7.2.5. It is therefore, affected my multiple vulnerabilities as referenced in the RHSA-2019:4021 advisory: - undertow: HTTP/2: large amount of data requests leads to denial of service...

CVE-2018-20981

The ninja-forms plugin before 3.3.9 for WordPress has insufficient restrictions on submission-data retrieval during Export Personal Data requests...

Telcos Singled Out for Prioritizing Government Requests for Data Over Privacy

Telecommunications giants don’t seem to have any interest in shaking their legacy of complicity with government requests for user data. The Electronic Frontier Foundation’s latest Who Has Your Back report singles out AT&T, Verizon, T-Mobile and Comcast as its lowest performers, saying that the...

Google Handles Record Number of Government Requests for Data

Google fielded a record number of government requests for user data during the first half of 2016, according to its updated Transparency Report. It was also able to report that it received at least one National Security Letter during the six months between July and December 2015. “Pursuant to the...

Snapchat: Bypassing "You've requested your data the maximum number of times today." + "Please Verify an email address with snapchat to continue"

Hello Again , I found an 2 issues in accounts.snapchat.com/accounts/downloadmydata - The first one : Bypassing The maximum number of Data Requests per day and download the Account Data any time the Attacker wants. - The Second : Download The Account Data without any Email verification. Requiremen...