CVE-2020-14863

The CVE-2020-14863 entry affects Oracle E-Business Suite One-to-One Fulfillment Print Server in versions 12.1.1–12.1.3. An unauthenticated attacker with network access via HTTP can compromise the component; attacks require user interaction and may lead to unauthorized access to data and unauthori...

CVE-2020-14851

CVE-2020-14851 affects Oracle E-Business Suite Trade Management (UI) with affected versions 12.1.1–12.1.3 and 12.2.3–12.2.10. An unauthenticated network attacker can compromise Trade Management via HTTP; attacks require human interaction and may lead to unauthorized access to data and unauthorize...

CVE-2020-14834

CVE-2020-14834 affects Oracle E-Business Suite Trade Management (UI) with affected versions 12.1.1–12.1.3 and 12.2.3–12.2.10. The issue is exploitable over HTTP by a remote attacker and can lead to unauthorized access or data manipulation in Oracle Trade Management data; CVSS v3.1 base score 8.2 ...

CVE-2020-14767

The CVE-2020-14767 entry relates to Oracle Hyperion BI+ (IQR-Foundation service) with affected version 11.1.2.4. The vulnerability is described as exploitable by a high-privilege attacker with network access via multiple protocols, requiring user interaction, and capable of granting access to all...

Life of Maze ransomware

In the past year, Maze ransomware has become one of the most notorious malware families threatening businesses and large organizations. Dozens of organizations have fallen victim to this vile malware, including LG, Southwire, and the City of Pensacola. The history of this ransomware began in the...

Pharma Giant Pfizer Leaks Customer Prescription Info, Call Transcripts

UPDATE Pharma giant Pfizer has leaked the private medical data of prescription-drug users in the U.S. for months or even years, thanks to an unprotected Google Cloud storage bucket. The exposed data includes phone-call transcripts and personally-identifiable information PII, according to...

Dickey's BBQ Breach: Meaty 3M Payment Card Upload Drops on Joker's Stash

Popular U.S. smoked-meat franchise Dickey’s Barbecue Pit has been hit with a data breach, with cybercriminals posting the fat cap of the compromised data – 3 million payment cards – on the popular Joker’s Stash underground marketplace this week. The Dallas-based franchise, which is a subsidiary o...

PT-2020-13891

Name of the Vulnerable Software and Affected Versions Gitea versions 1.1.0 through 1.12.5 Description The git hook feature in Gitea might allow for authenticated remote code execution in customer environments where the documentation was not understood. The vendor has indicated this is not a...

Broadvoice Leak Exposes 350M Records, Personal Voicemail Transcripts

UPDATE Broadvoice, a well-known VoIP provider that serves small- and medium-sized businesses, has leaked more than 350 million customer records related to the company’s “b-hive” cloud-based communications suite. The data includes hundreds of thousands of voicemail transcripts, many involving...

Barnes & Noble Hack: A Reading List for Phishers and Crooks

UPDATE Barnes & Noble is warning that it has been hacked, potentially exposing personal data for shoppers – and offering phishers an early holiday gift. The book purveyor sent out emailed notices to customers very late Wednesday night and in the wee hours of Thursday morning, warning that a...

Carnival Corp. Ransomware Attack Affects Three Cruise Lines

Hackers accessed personal information of guests, employees and crew for three cruise line brands and the casino operations of Carnival Corp. in a ransomware attack the company suffered on Aug. 15, officials have confirmed. Carnival Cruise Line, Holland America Line and Seabourn were the brands...

U.S. Dept Of Defense: PII Leak of USCG Designated Examiner List at https://www.███

Hello Dod Team, Summary: PII Leakage of approx 750 personal is being disclosed through the pdf at https://www.██████ which had been uploaded at the 7th of October, this includes Personal phone number and email address. Description: The list presented at the "dereport.pdf" contains personal info...

Software AG Data Released After Clop Ransomware Strike – Report

Clop and the group’s signature malware has struck again — this time hitting a giant target in the form of German software conglomerate Software AG. The company isn’t paying a mammoth $23 million ransom so far, and over the weekend it confirmed that the crooks were releasing company data, accordin...

Clop ransomware hits Software AG, demands $20 million+ ransom

By Waqas Software AG, a German tech giant had its helpdesk and internal communication systems disrupted after the Clop ransomware attack. Over the weekend, Germanys second-largest tech firm Software AG suffered a ransomware attack. The company had to shut down many of its internal systems...

U.S. Dept Of Defense: IDOR + Account Takeover [UNAUTHENTICATED]

1- Open the burp suite. 2- Switch the "Repeater" tab. 3- Paste the content of the attached request into the repeater. 4- Replace the "UID2 = 4820041" value in the cookie with the ID value of the user to be attacked. Also write the user's email in the "userName" input. 5- Replace the victim user's...

Marketing firm Friendemic exposed 2.7 million customer records

By Deeba Ahmed Exposed data belonged to Friendemic and included full names, email addresses, and contact numbers of its customers. This is a post from HackRead.com Read the original post: Marketing firm Friendemic exposed 2.7 million customer records...

Chowbus food delivery service suffers breach; trove of data stolen

By Deeba Ahmed The data breach could have affected hundreds of thousands of customers of Fantuan Group Inc. owned Chowbus. This is a post from HackRead.com Read the original post: Chowbus food delivery service suffers breach; trove of data stolen...

Russian Who Hacked LinkedIn, Dropbox Sentenced to 7 Years in Prison

A Russian hacker who was found guilty of hacking LinkedIn, Dropbox, and Formspring over eight years ago has finally been sentenced to 88 months in United States prison, that's more than seven years by a federal court in San Francisco this week. Yevgeniy Aleksandrovich Nikulin, 32, of Moscow hacke...

Shopify Sufferd Data Breach Because of “Rogue” Employees

By Deeba Ahmed Shopify has blamed 2 of its support team members for stealing customer data from 200 merchants This is a post from HackRead.com Read the original post: Shopify Sufferd Data Breach Because of "Rogue" Employees...

Negotiating with Ransomware Gangs

Really interesting conversation with someone who negotiates with ransomware gangs: For now, it seems that paying ransomware, while obviously risky and empowering/encouraging ransomware attackers, can perhaps be comported so as not to break any laws like anti-terrorist laws, FCPA, conspiracy and...