Cl0p Ransomware Strikes Deloitte, Company Refutes Breach

By Waqas In a message on its dark web breach blog, Cl0p Ransomware claims that The company Deloitte doesn't care about its customers; it ignored their security. This is a post from HackRead.com Read the original post: Cl0p Ransomware Strikes Deloitte, Company Refutes Breach...

Microsoft Edge 安全漏洞

Microsoft Edge is a web browser from Microsoft Corporation USA that comes with systems after Windows 10. Microsoft Edge has a security vulnerability that stems from the presence of a spoofing vulnerability...

Intergard SGS 安全漏洞

Intergard SGS is a security appliance from the Brazilian company Intergard. A security vulnerability exists in Intergard SGS version 8.7.0, which stems from the presence of unknown code in the component SQL Query Handler, resulting in the transmission of sensitive information in clear text...

Intergard SGS 安全漏洞

Intergard SGS is a security appliance from Brazilian company Intergard. A security vulnerability exists in Intergard SGS version 8.7.0, which stems from the presence of an unknown feature in the application that causes sensitive information to be stored in plaintext in memory...

Intergard SGS 安全漏洞

Intergard SGS is a security appliance from Brazilian company Intergard. A security vulnerability exists in Intergard SGS version 8.7.0, which stems from the presence of an unknown function in the component Change Password Handler, resulting in a denial of service...

Weintek Weincloud 安全漏洞

Weintek Weincloud is a cloud-based monitoring platform from Weintek, Inc. A security vulnerability exists in Weintek Weincloud version v0.13.6, which stems from a vulnerability that could allow an attacker to cause a denial of service by sending a forged JWT token...

JumpCloud Blames 'Sophisticated Nation-State' Actor for Security Breach

A little over a week after JumpCloud reset API keys of customers impacted by a security incident, the company said the intrusion was the work of a sophisticated nation-state actor. The adversary "gained unauthorized access to our systems to target a small and specific set of our customers," Bob...

MAL-2023-100 Malicious code in anjelo-pogi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0ae3e1d87bbd89236a43688421d25e9529a87f6f5ad872564d2806ba2c6447b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

tvtropes.org Cross Site Scripting vulnerability OBB-3510438

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

GitLab 安全漏洞

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery, and other features. A security vulnerability exists in Gitlab CE/EE, which stems from the fact tha...

KEISEI STORE LIVRE KEISEI 安全漏洞

KEISEI STORE LIVRE KEISEI is a supermarket application from KEISEI STORE, Inc. KEISEI STORE LIVRE A security vulnerability exists in KEISEI version v.13.6.1 that originates from a vulnerability that could allow a remote attacker to gain access to sensitive information via a channel access token i...

Zoom Rooms 安全漏洞

Zoom Rooms is a software-based conferencing system from Zoom USA. A system that allows web conferencing on fixed endpoints, similar to traditional video conferencing systems. A security vulnerability exists in Zoom Rooms prior to version 5.14.5 that stems from improper privilege management. It...

SAP ERP 安全漏洞

SAP ERP is a series of software for ERP management from SAP, Germany. A security vulnerability exists in SAP ERP Defense Forces and Public Security, which arises from an authenticated attacker with administrator privileges being able to write arbitrary data to system log files...

Top Suspect in 2015 Ashley Madison Hack Committed Suicide in 2014

When the marital infidelity website AshleyMadison.com learned in July 2015 that hackers were threatening to publish data stolen from 37 million users, the companys then-CEO Noel Biderman was quick to point the finger at an unnamed former contractor. But as a new documentary series on Hulu reveals...

PT-2023-22871 · Samsung · Samsung Internet

Name of the Vulnerable Software and Affected Versions: Samsung Internet versions prior to 21.0.0.41 Description: The issue is related to an improper configuration that allows an attacker to bypass SameSite Cookie restrictions. This could potentially lead to security breaches, although specific...

mediawiki 安全漏洞

MediaWiki is a suite of free and freely available web-based Wiki engines from the MediaWiki Foundation. The product can be used to deploy internal knowledge management and content management systems. A security vulnerability exists in mediawiki, which stems from the presence of a cross-site...

USN-6199-1 php7.4, php8.1 vulnerability

It was discovered that PHP incorrectly handled certain Digest authentication for SOAP. An attacker could possibly use this issue to expose sensitive information...

LangChain 安全漏洞

LangChain is used to build applications using LLM through composability. A security vulnerability exists in LangChain version v.0.0.199, which stems from a vulnerability that allows an attacker to execute arbitrary code via PALChain in the python exec method...

Orthanc 安全漏洞

Orthanc is a free and open source software from Orthanc. A security vulnerability exists in Orthanc version 1.12.0 that originates from allowing an authenticated attacker to overwrite configuration files and trigger remote code execution RCE...

Telegram 安全漏洞

Telegram is an instant messaging mobile application. A security vulnerability exists in Telegram version v9.6.3, which stems from a vulnerability that allows an attacker to hide critical information on the User Interface by calling the function SFSafariViewController...