4021 matches found
CVE-2021-21183
CVE-2021-21183: In Google Chrome/Chromium before 89.0.4389.72, an inappropriate implementation in the Performance APIs allowed a remote attacker to leak cross-origin data via a crafted HTML page. The issue is part of a broader set of Chromium-related vulnerabilities fixed in late 2021; Debian adv...
CVE-2021-21183
Inappropriate implementation in performance APIs in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page...
nss: Check length of inputs for cryptographic primitives
A vulnerability was discovered in nss where input text length was not checked when using certain cryptographic primitives. This could lead to a heap-buffer overflow resulting in a crash and data leak. The highest threat is to confidentiality and integrity of data as well as system availability...
Extortion Gang Breaches Cybersecurity Firm Qualys Using Accellion Exploit
Enterprise cloud security firm Qualys has become the latest victim to join a long list of entities to have suffered a data breach after zero-day vulnerabilities in its Accellion File Transfer Appliance FTA server were exploited to steal sensitive business documents. As proof of access to the data...
ant: insecure temporary file vulnerability
Apache Ant 1.1 to 1.9.14 and 1.10.0 to 1.10.7 uses the default temporary directory identified by the Java system property java.io.tmpdir for several tasks and may thus leak sensitive information. The fixcrlf and replaceregexp tasks also copy files from the temporary directory back into the build...
Google Chrome Information Disclosure Vulnerability (CNVD-2021-16856)
Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A side-channel information disclosure vulnerability exists in Network Internals in versions of Google Chrome prior to 89.0.4389.72. An attacker can exploit this...
Google Chrome Site Isolation Improperly Implemented Vulnerability
Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A site isolation improperly implemented vulnerability exists in versions of Google Chrome prior to 89.0.4389.72. A remote attacker can exploit the vulnerability to...
Google Chrome Insufficient Data Validation Vulnerability (CNVD-2021-16860)
Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A data validation insufficiency vulnerability exists in Google Chrome versions prior to 89.0.4389.72 in read mode. An attacker can leak cross-origin data via a...
Passwords, Private Posts Exposed in Hack of Gab Social Network
Distributed Denial of Secrets DDoSecrets, a self-proclaimed “transparency collective,” claim they have received more than 70 gigabytes of data exfiltrated from social media network Gab. Gab, which touts itself as “a social network that champions free speech, individual liberty and the free flow o...
CVE-2021-23953
If a user clicked into a specifically crafted PDF, the PDF reader could be confused into leaking cross-origin information, when said information is served as chunked data. This vulnerability affects Firefox 85, Thunderbird 78.7, and Firefox ESR 78.7...
Health Website Leaks 8 Million COVID-19 Test Results
Yet another human-related error — this time a flaw in a health department website in the state of Bengal, India — has exposed the confidential results of COVID-19 tests as well as personally identifying information PII for an entire geographic region’s population. Test results related to more tha...
Cl0p ransomware gang hits Aviation giant Bombardier, leaks sensitive data
By Waqas The Cl0p ransomware gang has leaked sensitive data belonging to Bombardier on its official website on the dark web accessible through Tor. This is a post from HackRead.com Read the original post: Cl0p ransomware gang hits Aviation giant Bombardier, leaks sensitive data...
Hackers Exploit Accellion Zero-Days in Recent Data Theft and Extortion Attacks
Cybersecurity researchers on Monday tied a string of attacks targeting Accellion File Transfer Appliance FTA servers over the past two months to data theft and extortion campaign orchestrated by a cybercrime group called UNC2546. The attacks, which began in mid-December 2020, involved exploiting...
CVE-2021-27549
Genymotion Desktop (up to 3.2.0) leaks the host clipboard data to the Android application by default. The issue is due to this default behavior, which the vendor states can be changed via Settings > Device screen. Connected sources confirm the affected version range and the remediation path: a...
Cisco Webex Meetings Desktop App Information Disclosure Vulnerability
The Cisco Webex Meetings Desktop App is a video conferencing control application for use in desktop environments from Cisco. An information disclosure vulnerability exists in the Cisco Webex Meetings Desktop App and Webex Productivity Tools, which arises from errors such as configuration during...
PT-2021-17148 · Unknown · Teachers Record Management System
Name of the Vulnerable Software and Affected Versions: Teachers Record Management System version 1.0 Description: The issue concerns a SQL injection vulnerability in the searchteacher POST parameter within the search-teacher.php file. This can be exploited by a remote unauthenticated attacker to...
CVE-2021-20402
IBM Security Verify Information Queue 1.0.6 and 1.0.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 196076...
DEBIAN-CVE-2021-26676
gdhcp in ConnMan before 1.39 could be used by network-adjacent attackers to leak sensitive stack information, allowing further exploitation of bugs in gdhcp...
