Google Pixel Security Breach

Google Pixel is a smartphone from the American company Google. Google Pixel has a security vulnerability which stems from the presence of information leakage...

Google Pixel Security Breach

Google Pixel is a smartphone from the American company Google. Google Pixel has a security vulnerability that stems from the presence of elevation of privilege...

Google Pixel Security Breach

Google Pixel is a smartphone from Google, Inc. in the United States. Google Pixel suffers from a security vulnerability that stems from a missing bounds check in the tmusetpi method of the tmu.c file, which may result in out-of-bounds writes...

AOL AIM Triton Security Breach

AOL AIM Triton is an instant messaging software from AOL. A security vulnerability exists in AOL AIM Triton version 1.0.4, which stems from a denial of service due to the parameter CSeq of the component Invite Handler...

Update on Microsoft Actions Following Attack by Nation State Actor Midnight Blizzard

This blog provides an update on the nation-state attack that was detected by the Microsoft Security Team on January 12, 2024. As we shared, on January 19, the security team detected this attack on our corporate email systems and immediately activated our response process. The Microsoft Threat...

Numbas security breach

Numbas is an open source system from Numbas Open Source. A security vulnerability exists in versions prior to Numbas 7.3 that stems from mishandling of edits to themes and extensions...

PrestaShop Security Breach

PrestaShop is a set of open source e-commerce solutions from PrestaShop, USA. The solution offers multiple payment methods, short message alerts and product image zoom. A security vulnerability exists in PrestaShop CD Custom Fields 4 Orders version 1.0.0 and earlier versions. An attacker exploite...

Customer Support System Security Breach

Customer Support System is a customer support system by oretnom23 Individual Developer that helps a particular business or company to provide customer support after a customer has purchased a product from them. A security vulnerability exists in Customer Support System version v.1.0. An attacker...

Microsoft Edge Security Breach

Microsoft Edge is a web browser from Microsoft Corporation USA that comes with systems after Windows 10. A security vulnerability exists in Microsoft Edge that stems from the presence of spoofing issues...

Lost and Found Information System security breach

Lost and Found Information System is a lost and found information system by oretnom23 Individual Developer. A security vulnerability exists in the Lost and Found Information System that originates from an unauthenticated SQL injection attack via "?page=items/view&id=", which can be escalated to...

BIT-GITLAB-2022-3413

Incorrect authorization during display of Audit Events in GitLab EE affecting all versions from 14.5 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2, allowed Developers to view the project's Audit Events and Developers or Maintainers to view the group's Audit Events. These should...

Toyoko Inn Security Breach

Toyoko Inn is a hotel chain app by the Japanese company Toyoko Inn. Toyoko Inn has a security vulnerability that stems from. , susceptible to incorrect server certificate validation, which could allow an attacker to conduct a man-in-the-middle attack to eavesdrop on encrypted communications...

Ciena Blue Planet Security Breach

Ciena Blue Planet is a network automation and intelligence solution from Ciena. A security vulnerability exists in Ciena Blue Planet version 22.12 and earlier, which stems from a privilege escalation vulnerability in the SAML implementation...

Gallagher Command Centre security breach

Gallagher Command Centre is a centralized control tool for Gallagher access control systems from Gallagher New Zealand. A security vulnerability exists in Gallagher Command Centre that stems from inadequate protection of credentials...

WonderCMS Security Breach

WonderCMS is an open source PHP-based content management system CMS. A security vulnerability exists in WonderCMS v3.1.3, which stems from a Server Request Forgery SSRF vulnerability in the getFileFromRepo function. An attacker can exploit this vulnerability by injecting a specially crafted URL...

Motorola OTA Security Breach

Motorola OTA is a software update service via wireless signal from Motorola USA. A security vulnerability exists in Motorola OTA that stems from the presence of an incorrect export vulnerability that could allow a malicious native application to inject HTML-based messages on the screen UI...

MediaTek Chip Security Breach

MediaTek chips are a variety of chips from MediaTek, a Chinese company MediaTek. A security vulnerability exists in the MediaTek chips, which stems from improper validation of inputs to the da module, which could lead to information disclosure...

PrestaShop Security Breach

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides multiple payment methods, SMS alerts and product image scaling. A security vulnerability previously existed in PrestaShop Product Designer version 1.178.36, which stemmed from a...

PrestaShop Security Breach

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution offers multiple payment methods, SMS alerts, and product image scaling. A security vulnerability previously existed in PrestaShop Super Newsletter version 1.4.21, which originated from a...

LangChain Security Breach

LangChain builds applications using LLM through composability. A security vulnerability exists in LangChain 0.1.10 and earlier versions that stems from a URI traversal vulnerability when loading configuration files...