3741 matches found
PT-2024-3165 Ā· GoogleĀ +5 Ā· Google ChromeĀ +6
Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 124.0.6367.78 Microsoft Edge affected versions not specified Description: The issue is related to an out of bounds read in the V8 JavaScript engine handler interface, which can allow a remote attacker to leak...
Google Pixel å®å Øę¼ę“
Google Pixel is a smartphone from the American company Google Google. Google Pixel suffers from an out-of-bounds read vulnerability that stems from a lack of boundary checking in the TMUIPCGETTABLE module, which can be exploited by an attacker to obtain local information...
AZL-38281 CVE-2023-45288 affecting package etcd for versions less than 3.5.18-1
An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames. Maintaining HPACK state requires parsing and processing all HEADERS and CONTINUATION frames on a connection. When a request's headers exceed MaxHeaderBytes, no...
IntelBroker Leaks Alleged National Security Data Tied to US Contractor Acuity Inc.
By Waqas The leaked data was previously being sold by the IntelBroker hacker for just $3,000 in Monero XMR cryptocurrency. This is a post from HackRead.com Read the original post: IntelBroker Leaks Alleged National Security Data Tied to US Contractor Acuity Inc...
Israeli LGBTQ App Atraf Faces Data Leak, 700,000 Users Affected
By Waqas Another day, another alleged data breach putting hundred of thousands of unsuspecting users at risk. This is a post from HackRead.com Read the original post: Israeli LGBTQ App Atraf Faces Data Leak, 700,000 Users Affected...
CVE-2024-29200 API returns timesheet entries a user should not be authorized to view
Kimai is a web-based multi-user time-tracking application. The permission viewothertimesheet performs differently for the Kimai UI and the API, thus returning unexpected data through the API. When setting the viewothertimesheet permission to true, on the frontend, users can only see timesheet...
PT-2024-22803 Ā· Kimai Ā· Kimai
Name of the Vulnerable Software and Affected Versions: Kimai versions prior to 2.13.0 Description: The permission view other timesheet performs differently for the Kimai UI and the API, thus returning unexpected data through the API. When setting the view other timesheet permission to true, on th...
INC Ransomware Hits NHS Scotland, Threatens Leak of 3TB Patient Data
By Waqas As seen by Hackread.com, the INC ransomware gang claims to have obtained patient records as part of their cyberattack. This is a post from HackRead.com Read the original post: INC Ransomware Hits NHS Scotland, Threatens Leak of 3TB Patient Data...
EulerOS Virtualization 2.11.1 : grub2 (EulerOS-SA-2024-1399)
According to the versions of the grub2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An out-of-bounds write flaw was found in grub2's NTFS filesystem driver. This issue may allow an attacker to present a specially...
CVE-2024-2630
CVE-2024-2630 affects Google Chrome on iOS, describing an inappropriate implementation that allowed a remote attacker to leak cross-origin data via a crafted HTML page. The issue is tied to Chromium/Chrome prior to version 123.0.6312.58. Public advisories in connected feeds confirm remediation by...
CVE-2024-2630
Inappropriate implementation in iOS in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
SUSE CVE-2024-2630
Inappropriate implementation in iOS in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
Moby å®å Øę¼ę“
Moby is an open source project that aims to drive containerization of software and help the ecosystem mainstream container technology. Moby has a security vulnerability that stems from an external DNS request that could lead to a data leak...
ALPINE-CVE-2023-5388
NSS was susceptible to a timing side-channel attack when performing RSA decryption. This attack could potentially allow an attacker to recover the private data. This vulnerability affects Firefox 124, Firefox ESR 115.9, and Thunderbird 115.9...
PT-2024-2478
Name of the Vulnerable Software and Affected Versions: Ruby StringIO versions 3.0.1 through 3.0.6 Ruby StringIO versions 3.1.x through 3.1.4 Description: A buffer-overread issue was discovered in StringIO, where the ungetbyte and ungetc methods can read past the end of a string, and a subsequent...
CVE-2024-29156
In OpenStack Murano through 16.0.0, when YAQL before 3.0.0 is used, the Murano service's MuranoPL extension to the YAQL language fails to sanitize the supplied environment, leading to potential leakage of sensitive service account information...
The LockBit story: Why the ransomware affiliate model can turn takedowns into disruptions
In ancient Greek mythos, the mighty Hercules faced a seemingly insurmountable challenge when he encountered the Lernaean Hydra. This fearsome serpent had a terrifying ability: For every head that Hercules severed, two more would spring forth, creating a never-ending cycle of regrowth and renewal...
Fedora 38 : opensc (2024-b92d44f141)
The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-b92d44f141 advisory. New upstream release with security fixes for CVE-2023-5992 and CVE-2024-1454 Tenable has extracted the preceding description block directly from the...
LockBit Ransomware Hacker Ordered to Pay $860,000 After Guilty Plea in Canada
A 34-year-old Russian-Canadian national has been sentenced to nearly four years in jail in Canada for his participation in the LockBit global ransomware operation. Mikhail Vasiliev, an Ontario resident, was originally arrested in November 2022 and charged by the U.S. Department of Justice DoJ wit...
USN-6673-2 python-cryptography vulnerability
USN-6673-1 provided a security update for python-cryptography. This update provides the corresponding update for Ubuntu 16.04 LTS. Original advisory details: Hubert Kario discovered that python-cryptography incorrectly handled errors returned by the OpenSSL API when processing incorrect padding i...