Nextcloud Security Breach

Nextcloud is an open source suite of self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. A security vulnerability exists in Nextcloud Server. An attacker could use this vulnerability to brute-force break the client secrets of a configured OAuth...

OPPO OnePlus Mall Security Breach

OPPO OnePlus Mall is a mobile application from OPPO Guangdong Mobile Communications OPPO, China. A security vulnerability exists in OPPO OnePlus Mall version 3.0.2023, which stems from a remote code execution RCE vulnerability in the webview component...

Police Security Breach Rattles Northern Ireland’s Security Landscape

By Habiba Rashid The Police Service of Northern Ireland PSNI experienced a severe security breach, unintentionally revealing personal details of its entire workforce, including officers and civilian staff. This is a post from HackRead.com Read the original post: Police Security Breach Rattles...

Voter data stolen in UK Electoral Commission systems breach

The UK's Electoral Commission has revealed it suffered a compromise which has the potential to expose aspects of registered voters' data. While much of this data may already be public, there are some privacy and safety concerns to consider. First of all, lets take a look at whats been affected. T...

HashiCorp Consul Security Breach

HashiCorp Consul is a suite of distributed, highly available data center-aware solutions from HashiCorp USA. The product is used to connect and configure applications across dynamically distributed infrastructures. A security vulnerability exists in HashiCorp Consul version 1.16.0 that stems from...

ESDS Emagic Data Center Management Suit Code Issue Vulnerability

ESDS Emagic Data Center Management Suit is an all-in-one virtual data center suite from ESDS, Inc. A security vulnerability exists in ESDS Emagic Data Center Management Suit v6.0 and prior versions, which stems from a session cookie that does not expire, and by reusing the stolen cookie, a remote...

Dangerzone Security Breach

Dangerzone is a software application. There are potentially dangerous PDF files, office documents, pictures and convert them into a secure PDF. Dangerzone 0.4.2 prior to the version of a security vulnerability, the vulnerability stems from the dangerzone-cli command to file cleanup container outp...

MAL-2023-1237 Malicious code in misk-tailwind-css (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 567443deccb6eabc476eeb33858fd2ea51f98ab82ab3a814e02bacda56979a09 The OpenSSF Package Analysis project identified 'misk-tailwind-css' @ 1.0.3 npm as malicious. It is considered malicious because: - The package...

Microsoft Signing Key Stolen by Chinese

A bunch of networks, including US Government networks, have been hacked by the Chinese. The hackers used forged authentication tokens to access user email, using a stolen Microsoft Azure account consumer signing key. Congress wants answers. The phrase "negligent security practices" is being tosse...

Resort Reservation System Security Breach

Resort Reservation System is a resort reservation system by the individual developer Carlo Montero. A security vulnerability exists in Resort Reservation System version 1.0, which stems from an incorrect manipulation of the parameter page that can lead to file inclusion. An attacker could use thi...

Microsoft Teams used in phishing campaign to bypass multi-factor authentication

Attackers believed to have ties to Russia's Foreign Intelligence Service SVR are using Microsoft Teams chats as credential theft phishing lures. Microsoft Threat Intelligence has posted details about the perceived attacks targeted at fewer than 40 unique global organizations. The targeted...

Russian Midnight Blizzard Hackers Hit MS Teams in Precision Attack

By Waqas The group of Russian hackers involved in this attack is Midnight Blizzard aka NOBELIUM. This is a post from HackRead.com Read the original post: Russian Midnight Blizzard Hackers Hit MS Teams in Precision Attack...

answer Security breach

answer is an open source knowledge-based community software. A security vulnerability exists in versions of answer prior to 1.1.1, which stems from a misconfiguration of permissions that allows low-privileged users to create tags...

Palantir Foundry Issues Security Breach

Palantir Foundry Issues is an application from Palantir USA. A security vulnerability exists in Palantir Foundry Issues that stems from a vulnerability that allows an attacker to create a phishing link via a request sent when creating an issue...

answer Security breach

answer is an open source knowledge-based community software. A security vulnerability exists in versions of answer prior to 1.1.0 that stems from a weak password policy when creating an account...

GitLab Security Breach

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery, and other features. A security vulnerability exists in GitLab CE/EE, which stems from a...

Palantir Foundry Security Breach

Palantir Foundry is a business process management platform from US-based Palantir. A security vulnerability exists in Foundry Campaigns versions prior to 0.623.0 that stems from an information disclosure vulnerability in the rest endpoint...

answer Security breach

answer is an open source knowledge-based community software. A security vulnerability exists in answerdev/answer versions prior to 1.1.1, which stems from a conditional contention issue in threads...

Tadiran Telecom Composit 安全漏洞

Tadiran Telecom Composit is a unified communications and collaboration platform from Tadiran Telecom, Israel. A security vulnerability exists in Tadiran Telecom Composit that stems from a CSV file with improper element neutralization...

Apple Music 安全漏洞

Apple Music is a music software program from the American company Apple. Apple Music for Android version 4.2.0 suffers from a security vulnerability that stems from the fact that the application may be able to access contacts...