Hackers leak 7m Dave.com accounts; 17m Couchsurfing accounts for sale

By Sudais Asif Leaked and For Sale - Dave.com and Couchsurfing.com in trouble. This is a post from HackRead.com Read the original post: Hackers leak 7m Dave.com accounts; 17m Couchsurfing accounts for sale...

Zomato: Availing Zomato gold by using a random third-party `wallet_id`

We received a report from @pandaaaa wherein he demonstrated a way to avail Zomato Gold membership using random Zomato User's wallet. The report was triaged and rewarded with critical severity with a CVSS score of 9.3. It was considered critical since a random user's wallet could have been used fo...

Chris Vickery: AI Will Drive Tomorrow’s Data Breaches

From malicious hacks to accidental misconfigurations, Chris Vickery has seen it all. But as cybercriminals continue to innovate, Vickery, the director of risk research with UpGuard, said one emerging security threat will “blindside” the world: “fakeable” voices. More bad actors using artificial...

Software firm leaks 25GB worth of subscription & Ancestry.com user data

By Waqas Here's how Ancestry.com users were implacted. This is a post from HackRead.com Read the original post: Software firm leaks 25GB worth of subscription & Ancestry.com user data...

gotowereklamy.eu Cross Site Scripting vulnerability OBB-1232188

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Google funded delivery service Dunzo hacked; 11GB worth of data leaked

By Waqas The exact date of Dunzo data breach is unclear however its database was leaked last week. This is a post from HackRead.com Read the original post: Google funded delivery service Dunzo hacked; 11GB worth of data leaked...

Twitter Hack Update: What We Know (and What We Don't)

UPDATED 7/18 at 12:50 p.m. ET Earlier this week, Twitter locked down thousands of verified accounts, including the accounts of Joe Biden, Bill Gates, Elon Musk, Apple, Uber and others, after it became clear that hackers had been able to compromise them. The tip-off? Suddenly these high-profile...

Enterprise Data Security: It’s Time to Flip the Established Approach

There’s an old saying when it comes to big undertakings: Don’t boil the ocean. Well, there’s hardly any bigger project in information security than trying to protect corporate data. But the reality is that too many organizations today are, in fact, “boiling the ocean” when it comes to their...

CVE-2020-3450

Cisco Vision Dynamic Signage Director is affected by CVE-2020-3450 via the web-based management interface. The issue is a SQL injection caused by improper validation of user-submitted parameters, exploitable by an authenticated attacker with administrative credentials. Successful exploitation cou...

CVE-2020-14694

CVE-2020-14694 affects Oracle VM VirtualBox (Core) with affected branches prior to 5.2.44, 6.0.24, and 6.1.12. The issue is described as locally exploitable by a high-privileged user who can log on to the infrastructure where VirtualBox executes, potentially leading to unauthorized access to data...

CVE-2020-14703

CVE-2020-14703 affects Oracle VM VirtualBox (Core) with fixes in VirtualBox 5.2.44, 6.0.24, and 6.1.12. Affected versions are prior to these releases. The advisory notes that a high-privilege attacker with local access to the host could compromise Oracle VM VirtualBox, potentially leading to unau...

CVE-2020-14688

The CVE covers a vulnerability in Oracle E-Business Suite’s Common Applications component (CRM User Management Framework). Affected: Oracle E-Business Suite versions 12.1.3 and 12.2.3–12.2.9. Condition: unauthenticated network access via HTTP can compromise Oracle Common Applications, with requir...

CVE-2020-14670

CVE-2020-14670 affects Oracle E-Business Suite, Advanced Outbound Telephony (Settings) for versions 12.1.1–12.1.3 and 12.2.3–12.2.9. The flaw allows an unauthenticated attacker with network access via HTTP to compromise the Telephony component; however, exploitation requires user interaction from...

CVE-2020-14660

CVE-2020-14660 affects Oracle E-Business Suite Oracle CRM Technical Foundation (Preferences component); vulnerable versions are 12.1.3 and 12.2.3–12.2.9. The issue allows unauthenticated, network-accessible attacks over HTTP, with user interaction required, to gain unauthorized access to data or ...

CVE-2020-14587

CVE-2020-14587 affects Oracle PeopleSoft Enterprise FIN Expenses (component: Expenses) in the PeopleSoft 9.2 line. The connected documents consistently describe a network-accessible vulnerability with low-privilege, low-complexity exploitation that can lead to unauthorized read, update, insert, o...

CVE-2020-14574

CVE-2020-14574 affects Oracle Communications Interactive Session Recorder (component: FACE) in Oracle Communications Applications, versions 6.1–6.4. The connected documents state a vulnerability that, while difficult to exploit, could allow a high-privileged attacker with local logon to the infra...

Unspecified Vulnerability in Oracle Construction and Engineering Primavera P6 Enterprise Project Portfolio Management

Oracle Construction and Engineering Suite is a suite of portfolio management solutions for construction projects from Oracle Corporation.Primavera P6 Enterprise Project Portfolio Management P6 is one of the components for planning, managing and executing projects. Primavera P6 Enterprise Project...

Citrix allegedly hacked exposing database with 2000,000 users

By Sudais Asif In March 2019, about 6 TB of data from Citrix was hacked by an Iranian group. This is a post from HackRead.com Read the original post: Citrix allegedly hacked exposing database with 2000,000 users...

142 million MGM customers’ data sold on dark web marketplace

By Deeba Ahmed The hacker has put up for sale around 142,479,937 records on sale on a prominent dark web marketplace. This is a post from HackRead.com Read the original post: 142 million MGM customers' data sold on dark web marketplace...

Leaked Details of 142 Million MGM Hotel Guests Found for Sale Online

Researchers have found 142 million personal details from former guests at the MGM Resorts hotels for sale on the dark web, evidence that a data leak from the hotel chain last summer may be far bigger in scope than previously thought. An advertisement on a hacker forum has put 142,479,937 details...