17606 matches found
Global Hack Exposes Personal Data: Implications & Privacy Protection – Axios Security Group
By Cyber Newswire In a digital age where information is the new currency, the recent global hack has once again highlighted… This is a post from HackRead.com Read the original post: Global Hack Exposes Personal Data: Implications & Privacy Protection - Axios Security Group...
Joint Guidance on Deploying AI Systems Securely
Today, the National Security Agency’s Artificial Intelligence Security Center NSA AISC published the joint Cybersecurity Information Sheet Deploying AI Systems Securely in collaboration with CISA, the Federal Bureau of Investigation FBI, the Australian Signals Directorate’s Australian Cyber...
CVE-2024-2757
An infinite loop vulnerability was found in PHP. Certain inputs provided to mbencodemimeheader trigger an endless loop. Mitigation Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and...
CVE-2024-2756
An improper input validation vulnerability was found in PHP. Due to an incomplete fix to CVE-2022-31629, network and same-site attackers can set a standard insecure cookie in the victim's browser. Mitigation Mitigation for this issue is either not available or the currently available options don'...
Multiple vulnerabilities in BUFFALO wireless LAN routers
Overview Multiple wireless LAN routers provided by BUFFALO INC. contain multiple vulnerabilities listed below. Plaintext storage of a password CWE-256 OS Command Injection CWE-78 Satoru Nagaoka of Cyber Defense Institute, Inc. reported these vulnerabilities to IPA. JPCERT/CC coordinated with the...
Open Information Security Foundation Suricata Installed (Windows)
Binary data oisfsuricatawininstalled.nbin...
Open Information Security Foundation Suricata Installed (Linux)
Binary data oisfsuricatanixinstalled.nbin...
Moodle 3.10.1 - Authenticated Blind Time-Based SQL Injection - _sort_ parameter
Exploit Title: Moodle Authenticated Time-Based Blind SQL Injection - "sort" Parameter Google Dork: Date: 04/11/2023 Exploit Author: Julio Ángel Ferrari Aka. T0X1Cx Vendor Homepage: https://moodle.org/ Software Link: Version: 3.10.1 Tested on: Linux CVE : CVE-2021-36393 import requests import stri...
markuskolinen.fi Cross Site Scripting vulnerability OBB-3916342
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2024-2201
creationtimestamp| type| source ---|---|--- 2024-04-11 10:54:16+00:00| published-proof-of-concept| https://t.me/itsecnews/4303 2024-04-11 16:46:05+00:00| published-proof-of-concept| https://t.me/truesecator/5627 2024-12-19 20:32:25+00:00| seen|...
CVE-2024-31259
Insertion of Sensitive Information into Log File vulnerability in Searchiq SearchIQ.This issue affects SearchIQ: from n/a through 4.5...
CVE-2024-31245
Insertion of Sensitive Information into Log File vulnerability in ConvertKit.This issue affects ConvertKit: from n/a through 2.4.5...
CVE-2024-31245
CVE-2024-31245 is an unauthenticated Information Exposure vulnerability in ConvertKit (WordPress plugin) affecting versions up to 2.4.5. The issue involves insertion of sensitive information into log files, with confidentiality impact rated High. Exploitation details are not provided in the suppl...
CVE-2024-31259
CVE-2024-31259 relates to the SearchIQ WordPress plugin and corresponds to an Insecure Information Exposure issue described as an Unauthenticated Sensitive Information Exposure in public advisories. The affected product is SearchIQ with a stated impact through version 4.5 (i.e., up to 4.5). The p...
CVE-2024-3235 Essential Grid <= 3.1.1 - Unauthenticated Private Post Disclosure
The Essential Grid Gallery WordPress Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.1.1 via the onfrontajaxaction function. This makes it possible for unauthenticated attackers to view private and password protected posts that m...