1492 matches found
2.6 million DuoLingo users have scraped data released
An unknown party has released the scraped data of 2.6 million DuoLingo users on a hacking forum. While they offered the data set for sale in January for $1,500, it's now been released on a new version of the Breached hacking forum for 8 site credits, worth only $2.13. DuoLingo is an educational...
Gigabud RAT Android Banking Malware Targets Institutions Across Countries
Account holders of over numerous financial institutions in Thailand, Indonesia, Vietnam, the Philippines, and Peru are being targeted by an Android banking malware called Gigabud RAT. "One of Gigabud RAT's unique features is that it doesn't execute any malicious actions until the user is authoriz...
UK Electoral Commission Admits Major Data Breach Spanning Over a Year
By Habiba Rashid The compromised electoral registers contained information from 2014 to 2022, including the names and addresses of voters, both domestic and overseas. This is a post from HackRead.com Read the original post: UK Electoral Commission Admits Major Data Breach Spanning Over a Year...
Spoofing Attacks
firefox is vulnerable to Spoofing Attacks. The vulnerability occurs when a website uses the window.open function to open a new window. If the new window is opened in full-screen mode, the malicious website can use the document.querySelector function to find the full-screen notification and then...
Ivanti Addressed A Critical Zero-Day Flaw in EPMM Software
Threat Level Vulnerability Report For a detailed threat advisory, download the pdf file here Summary The vulnerability in Ivanti Endpoint Manager Mobile allows unauthorized remote access to personal information and enables limited server changes, posing significant security risks to affected...
CVE-2023-35078 - Remote Unauthenticated API Access Vulnerability
Last Modified Date Sep 29, 2023 7:08:14 PM...
CVE-2023-30200
In the module “Image: WebP, Compress, Zoom, Lazy load, Alt & More” ultimateimagetool in versions up to 2.1.02 from Advanced Plugins for PrestaShop, a guest can download personal informations without restriction by performing a path traversal attack...
CVE-2023-30200
In the module “Image: WebP, Compress, Zoom, Lazy load, Alt & More” ultimateimagetool in versions up to 2.1.02 from Advanced Plugins for PrestaShop, a guest can download personal informations without restriction by performing a path traversal attack...
PT-2023-22583
Name of the Vulnerable Software and Affected Versions Image: WebP, Compress, Zoom, Lazy load, Alt & More ultimateimagetool versions up to 2.1.02 Description The issue allows a guest to download personal information without restriction by performing a path traversal attack. This can be exploited i...
PT-2023-22577
Name of the Vulnerable Software and Affected Versions Linea Grafica Detailed Order module for PrestaShop versions up to 1.1.20 Description The issue allows a guest to download personal information without restriction, formatted in json, in the "Detailed Order" module. Recommendations For versions...
CVE-2023-30195
In the module "Detailed Order" lgdetailedorder in version up to 1.1.20 from Linea Grafica for PrestaShop, a guest can download personal informations without restriction formatted in json...
Design/Logic Flaw
GLPI is a free asset and IT management software package. Versions of the software starting with 0.68 and prior to 10.0.8 have an incorrect rights check on a on a file accessible by an authenticated user. This allows access to the list of all users and their personal information. Users should...
CVE-2023-34106: Improper Access Control
GLPI is a free asset and IT management software package. Versions of the software starting with 0.68 and prior to 10.0.8 have an incorrect rights check on a on a file accessible by an authenticated user. This allows access to the list of all users and their personal information. Users should...
US Auto Insurance Price Comparison Site RateForce Leaks Massive PII Data
By Habiba Rashid The leaked database contained a staggering 96,175 folders that housed 255,756 records, totaling a size of 93.93 GB. This is a post from HackRead.com Read the original post: US Auto Insurance Price Comparison Site RateForce Leaks Massive PII Data...
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : SUSE Manager Client Tools (SUSE-SU-2023:2575-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2575-1 advisory. grafana: - Version update from 8.5.22 to 9.5.1 jscPED-3694: Security fixes: - CVE-2023-1410:...
SUSE: Security Advisory (SUSE-SU-2023:2578-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE SLES15: bind / bind-chrootenv / bind-devel / bind-devel-32bit / bind-doc / etc (SUSE-SU-2023:2578-1)
The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2578-1 advisory. bind: - Provide bind dependencies and solve installation issues on SUSE Linux Enterprise Micro - There are no source...
Setting Strong and Unique Passwords: The First Line of Defense for PS5 Security
By Owais Sultan A strong password for your PS5 enhances security, thwarting unauthorized access and protecting your personal information and gaming… This is a post from HackRead.com Read the original post: Setting Strong and Unique Passwords: The First Line of Defense for PS5 Security...
Setting Strong and Unique Passwords: The First Line of Defense for PS5 Security
By Owais Sultan A strong password for your PS5 enhances security, thwarting unauthorized access and protecting your personal information and gaming… This is a post from HackRead.com Read the original post: Setting Strong and Unique Passwords: The First Line of Defense for PS5 Security...
