GitLab Security Breach

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD continuous integration and continuous delivery, and other features. GitLab suffers from a security vulnerability that originates from a...

GitLab Security Breach

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD continuous integration and continuous delivery, and other features. A security vulnerability exists in GitLab that stems from the possibility of...

PrestaShop Security Breach

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides multiple payment methods, SMS alerts and product image scaling. PrestaShop themevolty v.4.0.8 version before the security vulnerability , the vulnerability stems from through...

PrestaShop Security Breach

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution offers multiple payment methods, short message alerts and product image zoom. A security vulnerability exists in PrestaShop CSV Feeds PRO prior to version 2.6.1, which stems from the...

Kimai Security Breach

kimai is a web-based multi-user time tracking application from the individual developer of kimai. A security vulnerability exists in Kimai 2.1.0 and prior versions, which stems from vulnerability to a server-side template injection SSTI attack that can be escalated to Remote Code Execution RCE wh...

PrestaShop Security Breach

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides multiple payment methods, short message alerts and product image zoom and other features. A security vulnerability exists in PrestaShop idnovate superuser before version v2.4.2, whic...

PrestaShop Security Breach

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution offers multiple payment methods, SMS alerts and product image scaling. A security vulnerability exists in Prestashop franfinance prior to version v.2.0.27, which stems from the ability to...

DouHaocms Security Breach

DouHaocms comma CMS is a content publishing platform. A security vulnerability exists in DouHaocms version v.3.3, which stems from the presence of a cross-site request forgery CSRF vulnerability that allows remote attackers to execute arbitrary code via the adminAction.class.php file...

Lenovo ThinkPad Security Breach

Lenovo ThinkPad is a portable computer from Lenovo, a Chinese company. A security vulnerability exists in the Lenovo ThinkPad that stems from improper write protection of UEFI variables, which could allow an attacker with physical or local access and elevated privileges to bypass secure boot...

Lenovo Vantage Security Breach

Lenovo Vantage is a computer management application from the Chinese company Lenovo Lenovo. The program supports driver updates, device status diagnostics and computer configuration. A security vulnerability exists in Lenovo Vantage SystemUpdate Plugin version 2.0.0.212 and prior versions, which...

Infodrom Software E-Invoice Approval System Security Breach

Infodrom Software E-Invoice Approval System is an electronic invoice approval system from Infodrom Software, Turkey. A security vulnerability exists in Infodrom Software E-Invoice Approval System version 2.1 that stems from improper protection of outbound error messages and alert signals...

breidbach-events.de Improper Access Control vulnerability OBB-3766046

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-39736

The leakage of the client secret in Fukunagamemberscard Line 13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messages...

Okta's Latest Security Breach Is Haunted by the Ghost of Incidents Past

A recent breach of authentication giant Okta has impacted nearly 200 of its clients. But repeated incidents and the company’s delayed disclosure have security experts calling foul...

Palantir Security Breach

Palantir is a data platform from US-based Palantir that reimagines how people use data by removing the barriers between back-end data management and front-end data analysis. A security vulnerability exists in Palantir Tiles1 versions prior to 4.326.0 that stems from a lack of authentication and...

Apple macOS Security Breach

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS Sonoma version 14.1, which stems from an application that may be able to access sensitive user data...

Line Security Breach

Line is an instant messaging platform from Line Inc. Line suffers from a security vulnerability that stems from an information disclosure issue that allows an attacker to obtain a channel access token and send a carefully crafted broadcast message...

D-Tale Security Breach

Man Group D-Tale is a pandas data structure visualization tool from Man Group. A security vulnerability exists in D-Tale versions prior to 3.7.0 that stems from a possible vulnerability to remote code execution attacks, which could allow an attacker to run malicious code on the server...

Line Security Breach

Line is an instant messaging platform from Line Inc. Line suffers from a security vulnerability that stems from an information disclosure issue that allows an attacker to obtain a channel access token and send a carefully crafted broadcast message...

Line Security Breach

Line is an instant messaging platform from Line Inc. Line suffers from a security vulnerability that stems from an information disclosure issue that allows an attacker to obtain a channel access token and send a carefully crafted broadcast message...