cashIT Access Control Error Vulnerability

cashIT is an old cell phone recycling website by cashIT India. cashIT suffers from an Access Control Error vulnerability that originates from an origin bypass via the host header in HTTP requests...

cashIT Code Injection Vulnerability

cashIT is an old cell phone recycling website by cashIT India. cashIT suffers from a code injection vulnerability that originates from the ability to execute remote code via an HTTP endpoint exposed to the network...

Number withdrawn

Projectworlds Online Movie Ticket Booking System is an online movie ticket booking system from Projectworlds India. This CVE number has been withdrawn...

Number withdrawn

Projectworlds Online Movie Ticket Booking System is an online movie ticket booking system from Projectworlds India. This CVE number has been withdrawn...

Number withdrawn

Projectworlds Online Movie Ticket Booking System is an online movie ticket booking system from Projectworlds India. This CVE number has been withdrawn...

csa-india.org Cross Site Scripting vulnerability OBB-3711018

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

sauvequiveut.asso.fr Cross Site Scripting vulnerability OBB-3701186

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

babynames.india-biz.in Cross Site Scripting vulnerability OBB-3587312

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

India Passes New Digital Personal Data Protection Bill (DPDPB), Putting Users' Privacy First

The Indian President Droupadi Murmu on Friday granted assent to the Digital Personal Data Protection Bill DPDPB after it was unanimously passed by both houses of the parliament last week, marking a significant step towards securing people's information. "The Bill provides for the processing of...

"Mysterious Team Bangladesh" Targeting India with DDoS Attacks and Data Breaches

A hacktivist group known as Mysterious Team Bangladesh has been linked to over 750 distributed denial-of-service DDoS attacks and 78 website defacements since June 2022. "The group most frequently attacks logistics, government, and financial sector organizations in India and Israel,"...

Patchwork Hackers Target Chinese Research Organizations Using EyeShell Backdoor

Threat actors associated with the hacking crew known as Patchwork have been spotted targeting universities and research organizations in China as part of a recently observed campaign. The activity, according to KnownSec 404 Team, entailed the use of a backdoor codenamed EyeShell. Patchwork, also...

Aicte India LMS 3.0 SQL Injection

==================================================================================================================================== | Title : Aicte india LMS 3.0 SQL injection Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 115.0.264-bit...

Hashed Emergent Announces India Blockchain Week (IBW) Conference

By Owais Sultan India Blockchain Week is part of a week-long series of web3-focused events taking place from December 4-10, 2023.… This is a post from HackRead.com Read the original post: Hashed Emergent Announces India Blockchain Week IBW Conference...

coolandfantastic.com Cross Site Scripting vulnerability OBB-3476534

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

MULTI#STORM Campaign Sets Sights on India and U.S. with RAT

Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary The MULTISTORM phishing campaign employs JavaScript files to disseminate RATs throughout compromised systems. This intricate attack utilizes a multi-stage procedure that commences when the victim engages...

lehingle.fr Cross Site Scripting vulnerability OBB-3463640

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

MULTI#STORM Campaign Targets India and U.S. with Remote Access Trojans

A new phishing campaign codenamed MULTISTORM has set its sights on India and the U.S. by leveraging JavaScript files to deliver remote access trojans on compromised systems. "The attack chain ends with the victim machine infected with multiple unique RAT remote access trojan malware instances, su...

MULTI#STORM Campaign Targets India and U.S. with Remote Access Trojans

A new phishing campaign codenamed MULTISTORM has set its sights on India and the U.S. by leveraging JavaScript files to deliver remote access trojans on compromised systems. "The attack chain ends with the victim machine infected with multiple unique RAT remote access trojan malware instances, su...

india-store.de Cross Site Scripting vulnerability OBB-3454144

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Over 100,000 Stolen ChatGPT Account Credentials Sold on Dark Web Marketplaces

Over 101,100 compromised OpenAI ChatGPT account credentials have found their way on illicit dark web marketplaces between June 2022 and May 2023, with India alone accounting for 12,632 stolen credentials. The credentials were discovered within information stealer logs made available for sale on t...