gnldr.online Open Redirect vulnerability

Open Bug Bounty ID: OBB-1156746 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

Sensitive user data found in Tesla car parts sold on eBay

By Deeba Ahmed A hacker found Spotify passwords, Gmail & Netflix session cookies, etc. on Tesla car parts sold on the e-commerce giant. This is a post from HackRead.com Read the original post: Sensitive user data found in Tesla car parts sold on eBay...

Warning: Citrix ShareFile Flaw Could Let Attackers Steal Corporate Secrets

Since the past few weeks, software giant Citrix has privately been rolling out a critical software update to its enterprise customers that patches multiple security vulnerabilities affecting Citrix ShareFile content collaboration platform. The security advisory—about which The Hacker News learned...

minimunchers.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-1155835 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

Troves of Zoom Credentials Shared on Hacker Forums

Hackers have a new favorite topic of conversation on underground forums: How to obtain – and leverage – valuable credentials for Zoom, Skype, Webex and other web conferencing platforms increasingly used by remote workers. That’s what Etay Maor, chief security officer at IntSights, has discovered...

Apple Patches Two iOS Zero-Days Abused for Years

Update Researchers are reporting two Apple iOS zero-day security vulnerabilities affecting its Mail app on iPhones and iPads. Impacted are iOS 6 and iOS 13.4.1. Apple patched both vulnerabilities in iOS 13.4.5 beta, released last week. A final release of iOS 13.4.5 is expected soon. Both...

Exploit for Improper Input Validation in Joomla Joomla\!

Made by HK CVE-2020-11890: Improper input validations in th...

Hacker returns $25 million after their IP address is exposed

By Sudais Asif In a shocking twist of events, the entire sum has been returned back by the hacker. Here's what happened and how. This is a post from HackRead.com Read the original post: Hacker returns $25 million after their IP address is exposed...

doctor-67.ru Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1147822 Security Researcher geeknik Helped patch 8815 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting doctor-67.ru website and i...

Hackers selling 267 million Facebook records on hacker forum

By Waqas Currently, the trove of 267 million Facebook records are being sold for around $600 on the hacker forum. This is a post from HackRead.com Read the original post: Hackers selling 267 million Facebook records on hacker forum...

neptuneland.ru Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1146655 Security Researcher geeknik Helped patch 8815 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting neptuneland.ru website and...

Malicious Package

Overview action-cablesubscriptionadapter is a malicious package. Affected versions of this package were found to be a Malicious Package, as it utilised typosquatting to run Malicious 3rd party scripts. It replaced genuine packages using an and replaced it with - and vice versa Remediation Avoid...

Malicious Package

Overview acts-ascrafter is a malicious package. Affected versions of this package were found to be a Malicious Package, as it utilised typosquatting to run Malicious 3rd party scripts. It replaced genuine packages using an and replaced it with - and vice versa Remediation Avoid using acts-ascraft...

Malicious Package

Overview arethusa-plugingenerator is a malicious package. Affected versions of this package were found to be a Malicious Package, as it utilised typosquatting to run Malicious 3rd party scripts. It replaced genuine packages using an and replaced it with - and vice versa Remediation Avoid using...

Malicious Package

Overview 1-asidentityfunction is a malicious package. Affected versions of this package were found to be a Malicious Package, as it utilised typosquatting to run Malicious 3rd party scripts. It replaced genuine packages using an and replaced it with - and vice versa Remediation Avoid using...

Malicious Package

Overview active-model-attributesvalidation is a malicious package. Affected versions of this package were found to be a Malicious Package, as it utilised typosquatting to run Malicious 3rd party scripts. It replaced genuine packages using an and replaced it with - and vice versa Remediation Avoid...

Malicious Package

Overview ach-client is a malicious package. Affected versions of this package were found to be a Malicious Package, as it utilised typosquatting to run Malicious 3rd party scripts. It replaced genuine packages using an and replaced it with - and vice versa Remediation Avoid using ach-client...

Over half a million Zoom accounts being sold on hacker forum

By Sudais Asif A hacker is selling 500,000 zoom account credentials on the dark web and an infamous hacker forum putting the privacy of users at risk. This is a post from HackRead.com Read the original post: Over half a million Zoom accounts being sold on hacker forum...

4 million Quidd user accounts dumped on hacker forum for download

By Waqas 4 million Quidd user accounts dumped on hacker forum for download - The hacker forum is letting anyone download the data. This is a post from HackRead.com Read the original post: 4 million Quidd user accounts dumped on hacker forum for download...

Nsauditor 3.2.0.0 - 'Name' Denial of Service (PoC)

Exploit Title: Nsauditor 3.2.0.0 - 'Name' Denial of Service PoC Discovery by: 0xMoHassan Date: 2020-04-04 Vendor Homepage: http://www.nsauditor.com Software Link: http://www.nsauditor.com/downloads/nsauditorsetup.exe Tested Version: 3.2.0.0 Vulnerability Type: Denial of Service DoS Local Tested o...