CData API Server 安全漏洞

CData API Server is a server for creating, deploying, and managing custom APIs from CData. This server provides a highly scalable platform that helps organizations quickly build and expose APIs to communicate with different data sources. A security vulnerability exists in CData API Server that...

PT-2025-34180

Name of the Vulnerable Software and Affected Versions CData API Server affected versions not specified Description CData API Server installations are susceptible to information disclosure. Remote attackers who have authentication can exploit this issue. The flaw resides in the configuration of...

HealthTech Database Exposed 108GB Medical and Employment Records

A misconfigured database exposed 108.8 GB of sensitive data, including information on over 86,000 healthcare workers affiliated with…...

Builder.ai Database Misconfiguration Exposes 1.29 TB of Unsecured Records

Cybersecurity researcher Jeremiah Fowler discovered a 1.2TB database containing over 3 million records of Builder.ai, a London-based AI software and app development company. Discover the risks, lessons learned, and best practices for data security...

Canadian Eyecare Firm Care1 Exposes 2.2TB of Patient Records

Another day, another healthcare database misconfiguration exposing sensitive patient information...

Mortgage Broker 8Twelve Exposes Data of Canadian Residents

By Habiba Rashid BAD: In total, the personal records of 717,814 Canadians were exposed to the public as a result of a database misconfiguration. This is a post from HackRead.com Read the original post: Mortgage Broker 8Twelve Exposes Data of Canadian Residents...

FOX News Exposed 13 Million Sensitive Records Online

By Waqas The incident was caused due to database misconfiguration in which FOX News exposed around 58 GB worth of… This is a post from HackRead.com Read the original post: FOX News Exposed 13 Million Sensitive Records Online...

Over 4000 Android Apps Expose Users' Data via Misconfigured Firebase Databases

More than 4,000 Android apps that use Google's cloud-hosted Firebase databases are 'unknowingly' leaking sensitive information on their users, including their email addresses, usernames, passwords, phone numbers, full names, chat messages and location data. The investigation, led by Bob Diachenko...

CVE-2015-5643

The installer in ICZ MATCHA INVOICE before 2.5.7 does not properly configure the database, which allows remote attackers to execute arbitrary PHP code via unspecified vectors...

CVE-2015-5643

CVE-2015-5643 affects ICZ MATCHA INVOICE: installer flaw during database configuration allows an unauthenticated attacker to execute arbitrary PHP code on the server. Impact is code injection (CWE-94) via the installer for MATCHA INVOICE 2.5.6 and earlier. Remediation guidance in connected docs i...