4570 matches found
A week in security (April 1 – April 7)
A list of topics we covered in the week of April 1 to April 7 of 2024 Last week on Malwarebytes Labs: 60% of small businesses are concerned about cybersecurity threats Cookie consent choices are just being ignored by some websites Bing ad for NordVPN leads to SecTopRAT Jackson County hit by...
UP-RESULT 0.1 2024 SQL Injection
Title: upresult0.1-2024 Multiple-SQLi Author: nu11secur1ty Date: 04/08/2024 Vendor: https://www.mayurik.com/ Software: https://www.sourcecodester.com/php/15653/best-student-result-management-system-project-source-code-php-and-mysql-free-download Reference:...
PT-2024-3188
Name of the Vulnerable Software and Affected Versions Telesquare TLR-2005Ksh versions 1.0.0 and 1.1.4 Description A firmware issue in the control plane fails to properly sanitize data, allowing an unauthenticated remote attacker to execute arbitrary system commands. This is achieved by exploiting...
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : go1.22 (SUSE-SU-2024:1121-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:1121-1 advisory. - CVE-2023-45288: Fixed denial of service via HTTP/2 continuation frames bsc1221400 Tenable has extracted...
Hacker Leaks 8.5M U.S. Environmental Protection Agency (EPA) Contact Data (UPDATED)
By Waqas CISA Cybersecurity and Infrastructure Security Agency informed Hackread.com that the data was already publicly available. This is a post from HackRead.com Read the original post: Hacker Leaks 8.5M U.S. Environmental Protection Agency EPA Contact Data UPDATED...
57,000 Kaspersky Fan Club Forum User Data Leaked in Hosting Breach
By Waqas Hacker group RGB claims responsibility for breaching Kaspersky's fan club and the Prosecutor's Office of the Russian Federation, leaking over 100,000 criminal records. This is a post from HackRead.com Read the original post: 57,000 Kaspersky Fan Club Forum User Data Leaked in Hosting Bre...
Alleged Home Depot Data Breach: IntelBroker Leaks 22,000 Employee Data
By Waqas Another day, another data breach by IntelBroker hacker targeting a US-based giant! This is a post from HackRead.com Read the original post: Alleged Home Depot Data Breach: IntelBroker Leaks 22,000 Employee Data...
MAL-2024-1201 Malicious code in lodash-electron (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a8bd312773fbb24be9c3b0b0f20151edfa60314696b7db82861805252d9fc24 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
AT&T confirms 73 million people affected by data breach
Telecommunications giant AT&T has finally confirmed that 73 million current and former customers have been caught up in a massive dark web data leak. The leaked data includes names, addresses, mobile phone numbers, dates of birth, and social security numbers. Malwarebytes VP of Consumer Privacy,...
Vulnerability of software for modeling, designing, and drawing in AutoCAD, related to the execution of operations beyond buffer boundaries in memory. This allows attackers to gain unauthorized access to protected information, execute arbitrary code, or cause system failures.
The vulnerability of the software for modeling, designing, and drawing in AutoCAD is related to the operation of writing data beyond the buffer boundaries in memory when processing an SLDPRT file with the ODXSWDLL.dll library. Exploiting this vulnerability can allow an attacker to gain unauthoriz...
After Denial, AT&T Confirms Data Breach Affecting 73 Million Users
By Waqas Another day, another massive data breach affecting critical infrastructure in the United States! This is a post from HackRead.com Read the original post: After Denial, AT&T Confirms Data Breach Affecting 73 Million Users...
A week in security (March 25 – March 31)
Last week on Malwarebytes Labs: MFA bombing taken to the next level How to back up your Mac How to back up your Windows 10/11 PC to OneDrive How to back up your iPhone to a Windows computer How to back up your iPhone to a Mac How to back up your iPhone to iCloud Powering the future of ThreatDown...
Israeli LGBTQ App Atraf Faces Data Leak, 700,000 Users Affected
By Waqas Another day, another alleged data breach putting hundred of thousands of unsuspecting users at risk. This is a post from HackRead.com Read the original post: Israeli LGBTQ App Atraf Faces Data Leak, 700,000 Users Affected...
PT-2024-23398 · Woocommerce · Wholesale For Woocommerce
Name of the Vulnerable Software and Affected Versions: Wholesale For WooCommerce versions prior to 2.3.0 Description: A Missing Authorization issue has been identified. This issue allows unauthorized access, potentially leading to data breaches or other security incidents. The estimated number of...
SQL Injection Vulnerability in UFIDA NC Cloud (CNVD-2024-21816)
UFIDA NC Cloud inventory is a large enterprise digitalization platform. UFIDA NC Cloud suffers from a SQL injection vulnerability that can be exploited by attackers to obtain sensitive information from the database...
Multiple Page Generator Plugin – MPG < 3.4.1 - Missing Authorization via mpg_get_log_by_project_id
Description The Multiple Page Generator Plugin – MPG plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'mpggetlogbyprojectid' function in versions up to, and including, 3.4.0. This makes it possible for authenticated attackers, with...
U.S. Charges 7 Chinese Nationals in Major 14-Year Cyber Espionage Operation
The U.S. Department of Justice DoJ on Monday unsealed indictments against seven Chinese nationals for their involvement in a hacking group that targeted U.S. and foreign critics, journalists, businesses, and political officials for about 14 years. The defendants include Ni Gaobin 倪高彬, Weng Ming 翁...
The vulnerability of the formSetDeviceName function (/goform/SetOnlineDevName) in the Tenda AC10U router’s microprogramming software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the formSetFirewallCfg function /goform/SetFirewallCfg in the Tenda AC10U router software is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected informati...
Vans warns customers of data breach
Skater brand Vans emailed customers last week to tell them about a recent “data incident.” On December 13, 2023, Vans said it detected unauthorized activities on its IT systems, attributed to "external threat actors." An investigation revealed that the incident involved some personal information ...
A week in security (March 18 – March 24)
Last week on Malwarebytes Labs: New Go loader pushes Rhadamanthys stealer Canada revisits decision to ban Flipper Zero Patch Ivanti Standalone Sentry and Ivanti Neurons for ITSM now 19 million plaintext passwords exposed by incorrectly configured Firebase instances Apex Legends Global Series...