Cola-Cola breach: ex-employee stole hard drive with 8,000 workers’ data

By Carolina The world-renowned carbonated soft drink producer Cola-Cola has announced that it has This is a post from HackRead.com Read the original post: Cola-Cola breach: ex-employee stole hard drive with 8,000 workers' data...

Man bought mail bomb from dark web (Alpha Bay market) to kill ex-wife

By Waqas Convict Ordered Contraband Cellphone and Mail Bomb from Dark Web This is a post from HackRead.com Read the original post: Man bought mail bomb from dark web Alpha Bay market to kill ex-wife...

Juniper Junos MAC Move Limit Traffic Handling Remote DoS (JSA10833)

According to its self-reported version number, the remote Junos device is affected by a denial of service vulnerability. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid106390; scriptversion"1.7"; scriptsetattributeattribute:"pluginmodificationdate", value:"2026/04/22...

Juniper Networks Junos OS Denial of Service Vulnerability (CNVD-2018-02840)

Juniper QFX and EX Series switches are both Juniper Networks switches.Junos OS is the set of operating systems that run on them. A denial of service vulnerability exists in Junos OS versions 14.1X53 prior to 14.1X53-D40, 15.1X53 prior to 15.1X53-D55, and 15.1R7 prior to 15.1 on Juniper QFX and EX...

Authentication flaw

An unauthenticated root login may allow upon reboot when a commit script is used. A commit script allows a device administrator to execute certain instructions during commit, which is configured under the system scripts commit stanza. Certain commit scripts that work without a problem during norm...

CVE-2018-0005 Security Bulletin: Junos OS: MAC move limit configured to drop traffic may forward traffic.

QFX and EX Series switches configured to drop traffic when the MAC move limit is exceeded will forward traffic instead of dropping traffic. This can lead to denials of services or other unintended conditions. Affected releases are Juniper Networks Junos OS: 14.1X53 versions prior to 14.1X53-D40;...

CVE-2018-0008 Junos OS: commit script may allow unauthenticated root login upon reboot

An unauthenticated root login may allow upon reboot when a commit script is used. A commit script allows a device administrator to execute certain instructions during commit, which is configured under the system scripts commit stanza. Certain commit scripts that work without a problem during norm...

CVE-2018-0005

CVE-2018-0005 affects Juniper Networks Junos OS on QFX and EX Series switches. When MAC move limit is exceeded, the device forwards instead of dropping, enabling a denial-of-service/unstable behavior. Affected releases: Junos OS 14.1X53 before 14.1X53-D40; 15.1X53 before 15.1X53-D55; 15.1 before ...

ex-celpi.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-424120 Description| Value ---|--- Affected Website:| ex-celpi.com Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Cheat Sheet Vulnerabl...

expatriates.com XSS vulnerability

Open Bug Bounty ID: OBB-413939 Description| Value ---|--- Affected Website:| expatriates.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

Cyberhitmen hired for sustained DDoS attacks against mans ex-employer

By Waqas John Kelsey Gammell, a 46-year-old man from Minneapolis, MN has been charged This is a post from HackRead.com Read the original post: Cyberhitmen hired for sustained DDoS attacks against mans ex-employer...

ex-photo.ru Open Redirect vulnerability

Open Bug Bounty ID: OBB-401596 Description| Value ---|--- Affected Website:| ex-photo.ru Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Cheat Sheet Vulnerable...

Multiple Huawei products cross-border read vulnerability (CNVD-2017-34449)

The AR Series, SRG Series, and NetEngine16EX Services Routing Gateway are Huawei's all-in-one integrated services gateways for small and medium-sized branch offices and SMBs. Huawei SMC2.0 is a video service management platform. An out-of-bounds read vulnerability exists in multiple Huawei...

CVE-2017-10611 Junos: EX Series PFE and MX MPC7E/8E/9E PFE crash when fetching interface stats with 'extended-statistics' enabled

If extended statistics are enabled via 'set chassis extended-statistics', when executing any operation that fetches interface statistics, including but not limited to SNMP GET requests, the pfem process or the FPC may crash and restart. Repeated crashes of PFE processing can result in an extended...

Equifax Says 145.5M Affected by Breach, Ex-CEO Testifies

Equifax, the credit agency behind this summer’s breach of 143 million Americans, said this week the number of victims implicated in the breach has increased. Paulino do Rego Barros, Jr., the company’s interim CEO, announced Monday that 2.5 million additional Americans were also impacted, bringing...

CVE-2017-9961

A vulnerability exists in Schneider Electric's Pro-Face GP Pro EX version 4.07.000 that allows an attacker to execute arbitrary code. Malicious code installation requires an access to the computer. By placing a specific DLL/OCX file, an attacker is able to force the process to load arbitrary DLL...

Apple macOS High Sierra Exploit Lets Hackers Steal Keychain Passwords in Plaintext

Apple yesterday rolled out a new version of its macOS operating system, dubbed High Sierra 10.13—a few hours before an ex-NSA hacker publicly disclosed the details of a critical vulnerability that affects High Sierra as well as all earlier versions of macOS. Patrick Wardle, an ex-NSA hacker and n...

CVE-2017-9961

Schneider Electric Pro-face GP-Pro EX (software) version 4.07.000 is affected by CVE-2017-9961: an Uncontrolled Search Path Element vulnerability (CWE-427) that can force a process to load an arbitrary DLL and execute code in the current process context. Exploitation is local (not remote) and req...

CVE-2017-9961

A vulnerability exists in Schneider Electric's Pro-Face GP Pro EX version 4.07.000 that allows an attacker to execute arbitrary code. Malicious code installation requires an access to the computer. By placing a specific DLL/OCX file, an attacker is able to force the process to load arbitrary DLL...

CVE-2017-10850

Untrusted search path vulnerability in Installers of ART EX Driver for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271 Timestamp of code signing is before 12 Apr 2017 02:04 UTC., PostScript? Driver + Additional Feature Plug-in + PPD File for...