9184 matches found
5 million payment card details stolen in painful reminder to monitor Christmas spending
Another day, another exposed S3 bucket. This time, 5 million US credit cards and personal details were leaked online. The Leakd.com security team discovered that 5 terabytes of sensitive screenshots were exposed in a freely accessible Amazon S3 bucket. An S3 bucket is like a virtual file folder i...
CVE-2024-8475 Protection Mechanism Failure in Digital Operation Services' WiFiBurada
Authentication Bypass by Assumed-Immutable Data vulnerability in Digital Operation Services WiFiBurada allows Manipulating User-Controlled Variables. This issue affects WiFiBurada: before 1.0.5...
CVE-2024-8475
CVE-2024-8475 affects Digital Operation Services’ WiFiBurada prior to version 1.0.5. The issue is described as an Authentication Bypass by Assumed-Immutable Data, enabling manipulation of user‑controlled variables. Documented impact is limited to authentication bypass with no explicit exploitatio...
Digital Operation Services WiFiBurada 安全漏洞
Digital Operation Services WiFiBurada is an application from Digital Operation Services, Inc. A security vulnerability exists in Digital Operation Services WiFiBurada that stems from the inclusion of an authentication bypass vulnerability...
Digital Operation Services WiFiBurada 安全漏洞
Digital Operation Services WiFiBurada is an application from Digital Operation Services, Inc. A security vulnerability exists in Digital Operation Services WiFiBurada that stems from improperly limiting excessive authentication attempts...
BIT-NODE-MIN-2024-22017
setuid does not affect libuv's internal iouring operations if initialized before the call to setuid. This allows the process to perform privileged operations despite presumably having dropped such privileges through a call to setuid. This vulnerability affects all users using version greater or...
Ukrainian Minors Recruited for Cyber Ops and Reconnaissance in Russian Airstrikes
The Security Service of Ukraine SBU or SSU has exposed a novel espionage campaign suspected to be orchestrated by Russia's Federal Security Service FSB that involves recruiting Ukrainian minors for criminal activities under the guise of "quest games." Law enforcement officials said that it detain...
[SECURITY] Fedora 40 Update: linux-firmware-20241210-1.fc40
This package includes firmware files required for some devices to operate...
[SECURITY] Fedora 41 Update: linux-firmware-20241210-1.fc41
This package includes firmware files required for some devices to operate...
JFinalCMS Cross-Site Request Forgery Vulnerability (CNVD-2024-49644)
JFinalCMS is a content management system. A cross-site request forgery vulnerability exists in JFinalCMS version 1.0, which stems from the /admin/tag/save file not adequately verifying that a request comes from a trusted user. An attacker can exploit this vulnerability to forge a malicious reques...
PT-2025-3667
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue arises in the Linux kernel's netfs subsystem, specifically when handling the copy to cache on write-begin operation for ceph filesystems. At the end of netfs unlock read folio,...
CBL Mariner 2.0 Security Update: kernel (CVE-2024-53052)
The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-53052 advisory. - In the Linux kernel, the following vulnerability has been resolved: iouring/rw: fix missing NOWAIT check for...
Europol Dismantles 27 DDoS Attack Platforms Across 15 Nations; Admins Arrested
A global law enforcement operation has failed 27 stresser services that were used to conduct distributed denial-of-service DDoS attacks and took them offline as part of a multi-year international exercise called PowerOFF. The effort, coordinated by Europol and involving 15 countries, dismantled...
WordPress plugin Cookie Consent for WP 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exist...
PT-2025-3668
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue concerns the exfat component of the Linux kernel, where a new buffer was not zeroed before writing. This could lead to uninitialized data in the page cache being written. The...
OpenSC PKCS15-INIT Code Execution
The vulnerability of the openpgpGenerateKeyRsa function in the personalization utility for smart cards, part of the software and library suite for working with OpenSC smart cards, stems from an operation that occurs outside the buffer in memory during key generation. Exploiting this vulnerability...
kernel: scsi: qedf: Make qedf_execute_tmf() non-preemptible
A vulnerability was found in the Linux kernel's qedf driver function qedfexecutetmf, where the function call smpprocessorid is done from preemptible code before acquiring a lock which can result in BUGON when running an RT kernel. This can result in system inconsistencies...
Phone Phishing Gang Busted: Eight Arrested in Belgium and Netherlands
Belgian and Dutch authorities have arrested eight suspects in connection with a "phone phishing" gang that primarily operated out of the Netherlands with an aim to steal victims' financial data and funds. As part of the international operation, law enforcement agencies carried out 17 searches in...
Hackers Weaponize Visual Studio Code Remote Tunnels for Cyber Espionage
A suspected China-nexus cyber espionage group has been attributed to an attacks targeting large business-to-business IT service providers in Southern Europe as part of a campaign codenamed Operation Digital Eye. The intrusions took place from late June to mid-July 2024, cybersecurity companies...
