CVE-2021-2266

CVE-2021-2266 affects Oracle VM VirtualBox (Core) with impact of information disclosure. Affected products are VirtualBox released before version 6.1.20; exploitation could allow a high-privilege attacker with logon to the host infrastructure to access sensitive data or, in some entries, take ove...

CVE-2021-2254

CVE-2021-2254 affects Oracle E-Business Suite, Hold Management in Oracle Project Contracts (versions 12.1.1–12.1.3). The vulnerability allows a network-based, low-privilege attacker to compromise data integrity and confidentiality (C) via HTTP, with potential unauthorized creation, deletion, or m...

CVE-2021-2242

CVE-2021-2242 affects Oracle Fusion Middleware’s Oracle Outside In Technology (Outside In Filters). The affected product is Outside In Technology within Fusion Middleware, with version 8.5.5 affected. The vulnerability is exploitable with network access via HTTP by an unauthenticated attacker and...

CVE-2021-2241

CVE-2021-2241 affects Oracle iStore in Oracle E-Business Suite (Shopping Cart component) and is listed for affected versions 12.1.1–12.1.3. The Red Hat, CNVD, CNNVD, NVD, PRION, and other feeds confirm that a low-privilege attacker with network access over HTTP can compromise Oracle iStore, enabl...

CVE-2021-2229

The CVE-2021-2229 entry describes a vulnerability in Oracle E-Business Suite (Depot Repair LOVs component) affecting 12.1.1–12.1.3. The issue allows a network-based, low-privilege attacker (via HTTP) to trigger unauthorized creation/deletion/modification of data or gain access to sensitive data w...

CVE-2021-2223

CVE-2021-2223 affects Oracle E-Business Suite with Oracle Receivables (component: Receipts) for versions 12.1.1–12.1.3. The Red Hat and NVD records describe an easily exploitable issue where a low-privilege, network-accessing attacker over HTTP can compromise Oracle Receivables, potentially causi...

CVE-2021-2185

CVE-2021-2185 affects Oracle E-Business Suite's Oracle iStore Shopping Cart. Affected versions are 12.1.1–12.1.3 and 12.2.3–12.2.10. The issue is exploitable by an unauthenticated attacker over HTTP and requires user interaction; successful exploits can grant unauthorized access to Oracle iStore ...

Backdoor Found in Codecov Bash Uploader

Developers have discovered a backdoor in the Codecov bash uploader. Its been there for four months. We dont know who put it there. Codecov said the breach allowed the attackers to export information stored in its users continuous integration CI environments. This information was then sent to a...

Unspecified Vulnerability in Oracle E-Business Suite (CNVD-2021-39948)

Oracle E-Business Suite is an extension of the original Application ERP, including ERP Enterprise Resource Planning, HR Human Resource Management, CRM Customer Relationship Management, and so on, a collection of management software, is a seamless integration of a management suite. oracle iStore i...

GEICO Alerts Customers Hackers Stole Driver License Data for Two Months

Threat actors stole driver license numbers from customers of GEICO insurance for nearly two months earlier this year due to a security flaw on its website that has since been fixed. The second-largest auto insurance provider in the United States disclosed the vulnerability in a data breach notice...

ParkMobile parking app data breach – 21M user records stolen, sold

By Habiba Rashid The sample data from ParkMobile shared by a hacker on a cybercrime forum reveals data allegedly belonging to some big names. This is a post from HackRead.com Read the original post: ParkMobile parking app data breach - 21M user records stolen, sold...

CVE-2021-29437

ScratchOAuth2 is an OAuth implementation for Scratch. A third party can read and modify data that a user could, by tricking the user into posting a ScratchOAuth2 login code, enabling the third party to complete login and gain full access to the user’s Scratch account. The attack proceeds via a us...

How far have we come? The evolution of securing identities

The security community is continuously changing, growing, and learning from each other to better position the world against cyber threats. In the latest Voice of the Community blog series post, Microsoft Product Marketing Manager Natalia Godyla talks with Troy Hunt, founder of Have I Been Pwned,...

ParkMobile Breach Exposes License Plate Data, Mobile Numbers of 21M Users

Someone is selling account information for 21 million customers of ParkMobile, a mobile parking app thats popular in North America. The stolen data includes customer email addresses, dates of birth, phone numbers, license plate numbers, hashed passwords and mailing addresses. KrebsOnSecurity firs...

Indian Brokerage Firm Upstox Suffers Data Breach Leaking 2.5 Millions Users' Data

Online trading and discount brokerage platform Upstox has become the latest Indian company to suffer a security breach of its systems, resulting in the exposure of sensitive information of approximately 2.5 million users on the dark web. The leaked information includes names, email addresses, dat...

623K Payment Cards Stolen from Cybercrime Forum

The Swarmshop cyber-underground “card shop” has been hit by hackers, who lifted the site’s database of stolen payment-card data and leaked it online. That’s according to researchers at Group-IB, who said that the database was posted on a rival underground forum. Card shops, are online cybercrimin...

Caught on Camera: Rethinking IoT Security

We all know that we're on camera pretty much constantly -- most coffee shops, convenience stores, and even offices employ security cameras for protection. But what happens when those devices built to keep us safe become unsafe? Hacks are becoming more frequent and attacking personal, private data...

Data from 500M LinkedIn Users Posted for Sale Online

Personal data from more than 500 million LinkedIn users has been posted for sale online in yet another incident of threat actors scraping data from public profiles and slinging it online for potential cybercriminal misuse. Hackers posted an archive containing data they said includes LinkedIn IDs,...

Hackers leak data, 600k card info from Swarmshop cybercrime forum

By Habiba Rashid Swarmshop data breach took place on March 17th, 2021 when an unknown hacker group leaked the data on underground hacker forums. This is a post from HackRead.com Read the original post: Hackers leak data, 600k card info from Swarmshop cybercrime forum...

CVE-2021-29626

In FreeBSD 13.0-STABLE before n245117, 12.2-STABLE before r369551, 11.4-STABLE before r369559, 13.0-RC5 before p1, 12.2-RELEASE before p6, and 11.4-RELEASE before p9, copy-on-write logic failed to invalidate shared memory page mappings between multiple processes allowing an unprivileged process t...