2352 matches found
Wawa Breach May Have Compromised More Than 30 Million Payment Cards
In late December 2019, fuel and convenience store chain Wawa Inc. said a nine-month-long breach of its payment card processing systems may have led to the theft of card data from customers who visited any of its 850 locations nationwide. Now, fraud experts say the first batch of card data stolen...
Insolar: XDSI(Cross Domain Script Inclusion)
Summary: As I did not get the proper CWE id over id to add but the proper CWE id is 829: The page includes one or more script files from a third-party domain. Here you are including in your website, someone else's code; You don't have any control over what is in that code, and you don't have any...
fondtaktak.org Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1076299 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
CVE-2020-2716
The CVE-2020-2716 entry concerns Oracle Banking Corporate Lending (Core) within Oracle Financial Services Applications. Affected versions are 12.3.0–12.4.0 and 14.0.0–14.3.0. The vulnerability enables a low-privileged, network-accessible attacker to compromise the system via HTTP, potentially lea...
CVE-2020-2704
CVE-2020-2704 affects Oracle VM VirtualBox (Core) with affected versions prior to 5.2.36, 6.0.16, and 6.1.2. The vulnerability is described as easily exploitable, allowing a low-privileged attacker with local logon to compromise the VirtualBox instance and potentially gain access to all data with...
CVE-2020-2688
Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications component: Object Migration. Supported versions that are affected are 8.0.4-8.0.8. Easily exploitable vulnerability allows low privileged attacker with network...
CVE-2020-2678
CVE-2020-2678 affects Oracle VM VirtualBox (Core) with vulnerable versions prior to 5.2.36, 6.0.16 and 6.1.2. The issue allows a low-privileged, logon-authenticated attacker to compromise VirtualBox, potentially leading to unauthorized creation, deletion or modification of data, and unauthorized ...
Unspecified Vulnerability in Oracle GraalVM Enterprise Edition (CNVD-2020-09692)
Oracle GraalVM is the United States Oracle Oracle company's set of instant compiler written in the Java language. The product supports a variety of programming languages and execution modes.GraalVM Enterprise Edition is the enterprise version of GraalVM. An unspecified vulnerability exists in...
CVE-2012-3823
Arial Campaign Enterprise before 11.0.551 stores passwords in clear text and these may be retrieved...
CVE-2012-3823
Arial Campaign Enterprise before 11.0.551 stores passwords in clear text and these may be retrieved...
IR & Forensics in the Cloud
More and more organisations are moving their business to the cloud. This makes securing data and being able to respond effectively to incidents in cloud environments an important topic. Having the skills on hand to properly collect digital forensics data in response to a legal dispute or during a...
Securing Databases with Qualys Policy Compliance
Data is the most valuable asset that an organization holds, and the most common target for malicious attackers. According to Forbes, in the first six months of 2019, data breach incidents exposed an astounding 4.1 billion records worldwide. Hackers successfully attacked government agencies as wel...
Design/Logic Flaw
Cybozu Office 10.0.0 to 10.8.3 allows remote authenticated attackers to bypass access restriction which may result in obtaining data without access privileges via the application 'Address'...
kelbycarr.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1049989 Security Researcher g0bl1nsec Helped patch 3741 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting kelbycarr.com website and...
CVE-2012-5639
LibreOffice and OpenOffice automatically open embedded content...
The Zero Trust Approach to Data Security – 2020 Trend #2
As 2019 comes to an end, our security experts are looking ahead to the new year to predict cybersecurity trends that will shape the landscape in 2020. Imperva CTO Kunal Anand blogged about his “Top 5 Cybersecurity Trends to Prepare for in 2020,” last week. This week, we’re digging deeper into his...
14 Ways to Evade Botnet Malware Attacks On Your Computers
Cybercriminals are busy innovators, adapting their weapons and attack strategies, and ruthlessly roaming the web in search of their next big score. Every manner of sensitive information, such as confidential employee records, customers' financial data, protected medical documents, and government...
CVE-2019-16779
In CVE-2019-16779, RubyGem excon before 0.71.0 contains a race condition on persistent connections where an interrupted connection can leave data on the socket, causing subsequent requests to return content from the previous response. This affects ruby-excon packages across multiple distributions...
How safe is business data stored in third-party supplier websites?
By Uzair Amir For any modern business, the data that they hold is among their most valuable assets. Whether it is data about customers or about the business itself... This is a post from HackRead.com Read the original post: How safe is business data stored in third-party supplier websites?...
Top 5 Cybersecurity Trends to Prepare for in 2020
I don’t need a crystal ball to predict that in 2020 cybersecurity attacks will accelerate and the tactics will evolve. We’ll continue to be hounded by greater volumes of the attacks that have threatened us for years and, as businesses adopt new innovations, new vulnerabilities to threats will...