France’s largest newspaper exposed 8 TB of data with 7.4 billion records

By Sudais Asif Data breaches today still remain one of the most common security issues for companies judging by their frequency but... This is a post from HackRead.com Read the original post: France's largest newspaper exposed 8 TB of data with 7.4 billion records...

cartridgecollectors.org Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1155536 Security Researcher Tanzil Helped patch 187 vulnerabilities Received 2 Coordinated Disclosure badges Received 7 recommendations , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting cartridgecollectors.org websi...

Tokopedia hacked – Login details of 91 million users sold on dark web

By Waqas Another day, another data breach - This time hackers have targeted Tokopedia and stole login data of 91 million user accounts. This is a post from HackRead.com Read the original post: Tokopedia hacked - Login details of 91 million users sold on dark web...

emacs, git, gitk, gitweb, perl security update

CentOS Errata and Security Advisory CESA-2020:1511 An update for git is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Join Us for the Virtual Connect 2020 Conference

Every year, VMware Carbon Black Connect brings together some of the best and brightest in security to collaborate on solving today’s most pressing problems and to learn about the future of endpoint security. While 2020 marks the first year that Connect will be held in a virtual setting, it does n...

Hackers Leak Biopharmaceutical Firm's Data Stolen in Ransomware Attack

The Clop ransomware group attacked biopharmaceutical company ExecuPharm and reportedly leaked some of the company’s compromised data on underground forums. ExecuPharm, a Pennsylvania-based subsidiary of the U.S. biopharmaceutical giant Parexel, provides clinical trial management tools for...

PT-2020-5576 · Sophos · Sophos Sfos +1

Name of the Vulnerable Software and Affected Versions: Sophos XG Firewall versions 17.0, 17.1, 17.5 Sophos XG Firewall versions 18.0 through 2020-04-25 Description: A SQL injection vulnerability exists in Sophos XG Firewall, allowing for potential remote code execution and data exfiltration. The...

Pwned - Simple CLI Script To Check If You Have A Password That Has Been Compromised In A Data Breach

Pwned is a simple command-line python script to check if you have a password that has been compromised in a data breach. This script uses haveibeenpwned API to check whether your passwords were leaked during one of the many breaches of online services. This API uses k-Anonymity model that allows ...

Nintendo accounts hacked: 160,000 accounts accessed by hackers

By Waqas Nintendo suffered a massive data breach in which upto 160,000 Nintendo accounts were accessed by hackers. This is a post from HackRead.com Read the original post: Nintendo accounts hacked: 160,000 accounts accessed by hackers...

CVE-2019-4735

Summary: CVE-2019-4735 affects IBM MaaS360 for iOS. The vulnerability could allow an attacker with physical access to obtain sensitive information from the MaaS360 agent outside the container on devices running 3.96.62 (and prior) when on iOS 13 or greater. Root cause / affected scope (as stated)...

The vulnerability of the Symfony software platform for developing and managing web applications stems from insufficient validation of input data, allowing attackers to compromise data integrity.

The vulnerability of the Symfony software development and management platform is related to an application error where unvalidated user input is passed as a file. Exploiting this vulnerability allows an attacker to compromise data integrity remotely...

Small Businesses Tapping COVID-19 Loans Hit with Data Exposure

A data breach at the agency in charge of providing financial relief to small businesses during the COVID-19 crisis may have exposed sensitive information of 8,000 business that applied, and may delay payouts, a government official said. The Small Business Administration SBA, which oversees the...

metatraderdemo.net IFRAME Injection vulnerability

Open Bug Bounty ID: OBB-1146257 Security Researcher myNickName Helped patch 200 vulnerabilities Received 2 Coordinated Disclosure badges , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting metatraderdemo.net website and its users. Following...

sws-georgenthal.de Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1145282 Security Researcher Hchabik Helped patch 2424 vulnerabilities Received 5 Coordinated Disclosure badges Received 2 recommendations , a holder of 5 badges for responsible and coordinated disclosure, found a security vulnerability affecting sws-georgenthal.de website...

'Double Extortion' Ransomware Attacks Spike

Victims of ransomware attacks now face a double whammy of headaches. Cybercriminals are increasingly inflicting more pain on ransomware victims by threatening to leak compromised data or use it in future spam attacks, if ransom demands aren’t met. The ransomware tactic, call “double extortion,”...

CVE-2020-2834

Vulnerability in the Oracle Marketing product of Oracle E-Business Suite component: Marketing Administration. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing...

Design/Logic Flaw

Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite component: User Interface. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Advanced...

CVE-2020-2956

CVE-2020-2956 affects Oracle E-Business Suite Human Resources, Hierarchy Diagrammers (and related Hierarchy Viewer components). Connected advisories describe an SQL injection/unsafe input handling in the Position Hierarchy Viewer and Organization Hierarchy Viewer that can lead to unauthorized dat...

CVE-2020-2946

Vulnerability in the Application Performance Management product of Oracle Enterprise Manager component: EM Request Monitoring. Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...

CVE-2020-2890

The CVE-2020-2890 entry concerns Oracle E-Business Suite’s Oracle Applications Framework (Diagnostics). Affected are 12.1.3 and 12.2.3–12.2.9. The flaw allows an unauthenticated remote attacker, over HTTP, to compromise the Oracle Applications Framework. Attacks require human interaction and can ...