11771 matches found
How to Comply with PCI DSS 4.0 Requirements 6.4.3 and 11.6.1
The countdown to compliance is in its final stretch. With the third and final phase of PCI DSS 4.0 requirements taking effect on March 31, 2025, organizations are under increasing pressure to ensure their client-side security measures meet the new requirements. At Imperva, we’re committed to...
GHSA-G38C-WH3C-5H9R
creationtimestamp| type| source ---|---|--- 2025-02-24 12:05:45+00:00| seen| https://bsky.app/profile/azu.bsky.social/post/3liwcoiudqz2q 2025-04-02 14:16:10+00:00| seen| https://bsky.app/profile/tanfonto.wspanialy.eu.ap.brid.gy/post/3lltl6a4sptj2...
Data Leak Exposes TopSec's Role in China's Censorship-as-a-Service Operations
An analysis of a data leak from a Chinese cybersecurity company TopSec has revealed that it likely offers censorship-as-a-service solutions to prospective customers, including a state-owned enterprise in the country. Founded in 1995, TopSec ostensibly offers services such as Endpoint Detection an...
CVE-2025-0352 Rapid Response Monitoring My Security Account App Authorization Bypass Through User-Controlled Key
Rapid Response Monitoring My Security Account App utilizes an API that could be exploited by an attacker to modify request data, potentially causing the API to return information about other users...
PT-2025-7458
Name of the Vulnerable Software and Affected Versions Rapid Response Monitoring My Security Account App affected versions not specified Description The issue concerns an API utilized by the Rapid Response Monitoring My Security Account App, which could be exploited by an attacker to modify reques...
Nagios XI security vulnerabilities
Nagios XI is a suite of IT infrastructure monitoring solutions from the US-based Nagios. The solution supports monitoring and alerting of applications, services, operating systems, and more. A security vulnerability exists in Nagios XI version 2024R1.2.2, which stems from a tool page that does no...
Rapid Response Monitoring: Vulnerabilities in My Security Account App
Rapid Response Monitoring My Security Account App is an account security program from Rapid Response Monitoring. A security vulnerability exists in Rapid Response Monitoring My Security Account App that stems from a failure to validate requested data modifications. An attacker exploiting this...
CVE-2025-0352: Authorization Bypass Through User-Controlled Key
Rapid Response Monitoring My Security Account App utilizes an API that could be exploited by an attacker to modify request data, potentially causing the API to return information about other users...
CVE-2024-27994
creationtimestamp| type| source ---|---|--- 2025-02-19 21:02:51+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3likodsycm625...
PT-2025-7286 · Phpjabbers · Phpjabbers Hotel Booking System
Name of the Vulnerable Software and Affected Versions: PHPJabbers Hotel Booking System version 4.0 Description: A lack of rate limiting in the "Login Section, Forgot Email" feature allows attackers to send an excessive amount of reset requests for a legitimate user, leading to a possible Denial o...
Elastic Defend DoS
The vulnerability of the software for detecting, monitoring, and responding to Elastic Defend threats is related to insufficient handling of exceptional states. Exploiting this vulnerability can allow attackers to cause service failures...
CVE-2024-13152
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in BSS Software Mobuy Online Machinery Monitoring Panel allows SQL Injection. This issue affects Mobuy Online Machinery Monitoring Panel: before 2.0...
CVE-2024-13152
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in BSS Software Mobuy Online Machinery Monitoring Panel allows SQL Injection. This issue affects Mobuy Online Machinery Monitoring Panel: before 2.0...
CVE-2024-13152
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in BSS Software Mobuy Online Machinery Monitoring Panel allows SQL Injection. This issue affects Mobuy Online Machinery Monitoring Panel: before 2.0...
PT-2025-6533
Name of the Vulnerable Software and Affected Versions BSS Software Mobuy Online Machinery Monitoring Panel versions prior to 2.0 Description The issue affects BSS Software Mobuy Online Machinery Monitoring Panel, allowing SQL Injection due to an Authorization Bypass Through User-Controlled SQL...
BSS Mobuy Online Machinery Monitoring Panel SQL Injection Vulnerability
BSS Mobuy Online Machinery Monitoring Panel is a software system for online monitoring of machinery and equipment from the Turkish company BSS. A SQL injection vulnerability exists in BSS Mobuy Online Machinery Monitoring Panel versions prior to 2.0, which is caused by SQL injection from a...
CVE-2024-13152: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in BSS Software Mobuy Online Machinery Monitoring Panel allows SQL Injection. This issue affects Mobuy Online Machinery Monitoring Panel: before 2.0...
CVE-2024-53310
creationtimestamp| type| source ---|---|--- 2025-02-13 22:26:30+00:00| seen| https://infosec.exchange/users/cve/statuses/113998927579207625 2025-02-13 23:15:58+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li3sytdf2k2h 2025-02-14 00:35:11+00:00| seen|...
CVE-2023-5122
Grafana is an open-source platform for monitoring and observability. The CSV datasource plugin is a Grafana Labs maintained plugin for Grafana that allows for retrieving and processing CSV data from a remote endpoint configured by an administrator. If this plugin was configured to send requests t...