Hacker returns $25 million after their IP address is exposed

By Sudais Asif In a shocking twist of events, the entire sum has been returned back by the hacker. Here's what happened and how. This is a post from HackRead.com Read the original post: Hacker returns $25 million after their IP address is exposed...

doctor-67.ru Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1147822 Security Researcher geeknik Helped patch 8815 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting doctor-67.ru website and i...

Hackers selling 267 million Facebook records on hacker forum

By Waqas Currently, the trove of 267 million Facebook records are being sold for around $600 on the hacker forum. This is a post from HackRead.com Read the original post: Hackers selling 267 million Facebook records on hacker forum...

neptuneland.ru Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1146655 Security Researcher geeknik Helped patch 8815 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting neptuneland.ru website and...

Malicious Package

Overview acts-ascrafter is a malicious package. Affected versions of this package were found to be a Malicious Package, as it utilised typosquatting to run Malicious 3rd party scripts. It replaced genuine packages using an and replaced it with - and vice versa Remediation Avoid using acts-ascraft...

Malicious Package

Overview ach-client is a malicious package. Affected versions of this package were found to be a Malicious Package, as it utilised typosquatting to run Malicious 3rd party scripts. It replaced genuine packages using an and replaced it with - and vice versa Remediation Avoid using ach-client...

Malicious Package

Overview 1-asidentityfunction is a malicious package. Affected versions of this package were found to be a Malicious Package, as it utilised typosquatting to run Malicious 3rd party scripts. It replaced genuine packages using an and replaced it with - and vice versa Remediation Avoid using...

Malicious Package

Overview arethusa-plugingenerator is a malicious package. Affected versions of this package were found to be a Malicious Package, as it utilised typosquatting to run Malicious 3rd party scripts. It replaced genuine packages using an and replaced it with - and vice versa Remediation Avoid using...

Malicious Package

Overview action-cablesubscriptionadapter is a malicious package. Affected versions of this package were found to be a Malicious Package, as it utilised typosquatting to run Malicious 3rd party scripts. It replaced genuine packages using an and replaced it with - and vice versa Remediation Avoid...

Malicious Package

Overview active-model-attributesvalidation is a malicious package. Affected versions of this package were found to be a Malicious Package, as it utilised typosquatting to run Malicious 3rd party scripts. It replaced genuine packages using an and replaced it with - and vice versa Remediation Avoid...

Over half a million Zoom accounts being sold on hacker forum

By Sudais Asif A hacker is selling 500,000 zoom account credentials on the dark web and an infamous hacker forum putting the privacy of users at risk. This is a post from HackRead.com Read the original post: Over half a million Zoom accounts being sold on hacker forum...

4 million Quidd user accounts dumped on hacker forum for download

By Waqas 4 million Quidd user accounts dumped on hacker forum for download - The hacker forum is letting anyone download the data. This is a post from HackRead.com Read the original post: 4 million Quidd user accounts dumped on hacker forum for download...

Nsauditor 3.2.0.0 - 'Name' Denial of Service (PoC)

Exploit Title: Nsauditor 3.2.0.0 - 'Name' Denial of Service PoC Discovery by: 0xMoHassan Date: 2020-04-04 Vendor Homepage: http://www.nsauditor.com Software Link: http://www.nsauditor.com/downloads/nsauditorsetup.exe Tested Version: 3.2.0.0 Vulnerability Type: Denial of Service DoS Local Tested o...

Hacker defaces Escrow.com by hacking GoDaddy employee’s account

By Sudais Asif If you are aware of what Escrow.com is, you may also know how huge this cyber attack is. This is a post from HackRead.com Read the original post: Hacker defaces Escrow.com by hacking GoDaddy employee's account...

A Hacker Found a Way to Take Over Any Apple Webcam

The Safari vulnerabilities have been patched, but they would have given an alarming amount of access...

Nsauditor 3.2.0.0 - (Name) Denial of Service Exploit

Exploit Title: Nsauditor 3.2.0.0 - 'Name' Denial of Service PoC Discovery by: 0xMoHassan Date: 2020-04-04 Vendor Homepage: http://www.nsauditor.com Software Link: http://www.nsauditor.com/downloads/nsauditorsetup.exe Tested Version: 3.2.0.0 Vulnerability Type: Denial of Service DoS Local Tested o...

How Just Visiting A Site Could Have Hacked Your iPhone or MacBook Camera

If you use an Apple iPhone or a MacBook, we have a piece of alarming news for you. Turns out merely visiting a website — not just malicious but also legitimate sites unknowingly loading malicious ads as well — using Safari browser could have let remote attackers secretly access your device's...

How To Keep Your Router And WiFi Safe From Hackers

By Waqas Just yesterday it was reported that hackers have been using vulnerable and exposed routers to redirect users to malicious COVID-19 related app aiming at your personal data. Now... This is a post from HackRead.com Read the original post: How To Keep Your Router And WiFi Safe From Hackers...

Hacker Steals & Leaks Xbox Series X GPU Source Code

By Waqas The unknown hacker contacted AMD with information about stolen Xbox Series X Source Code and later leaked it on Github. This is a post from HackRead.com Read the original post: Hacker Steals & Leaks Xbox Series X GPU Source Code...

Myndr: Reflected XSS in https://blocked.myndr.net

Summary: Reflected XSS in Domain https://blocked.myndr.net Steps To Reproduce: 1. Go to the https://blocked.myndr.net. 2. Find the endpoint in the domain -https://blocked.myndr.net/?trg=1 3. Add the payload ?trg="alert1 4. You can see the pop up in your browser. Impact With the help of XSS, a...