Primecoin 安全漏洞

Primecoin is an experimental cryptocurrency open-sourced by Ziftr. A security vulnerability exists in Primecoin version 0.8.4rc1 and earlier versions, which stems from the fact that incorrect manipulation of the parameter strUserPass/strRPCUserColonPass can lead to noticeable timing differences...

JOBE 安全漏洞

JOBE is a server for running small programming jobs in various programming languages by Richard Lobb, a personal developer. A security vulnerability exists in JOBE version 1.6.4 and earlier versions, which stems from the handling of the parameter sourcefilename that can lead to unknown...

Nuntium 安全漏洞

Nuntium is an open source free platform developed by InSTEDD open source. Nuntium has a security vulnerability that originates from a problem with an unknown function in the file app/controllers/geopollcontroller.rb, where manipulation of the parameter signature can lead to observable timing...

LastPass Breach

Last August, LastPass reported a security breach, saying that no customer information--or passwords--were compromised. Turns out the full story is worse: While no customer data was accessed during the August 2022 incident, some source code and technical information were stolen from our developmen...

Hackers Breach Okta's GitHub Repositories, Steal Source Code

Okta, a company that provides identity and access management services, disclosed on Wednesday that some of its source code repositories were accessed in an unauthorized manner earlier this month. "There is no impact to any customers, including any HIPAA, FedRAMP, or DoD customers," the company sa...

Apiman 安全漏洞

Apiman is Apiman Open Source, a flexible open source API management platform for enterprise users. A security vulnerability exists in Apiman versions 1.5.7 through 2.2.3.Final, which stems from insufficient checking of read permissions in the Apiman Manager REST API...

ctrlo lenio 安全漏洞

lenio is an open source facility management system from ctrlo. A security vulnerability exists in ctrlo lenio, which stems from unknown code in the views/task.tt file of its Task Handler component that operates on the parameters site.org.name/check.name/task.tasktype allowing an attacker to...

Shoplazza 安全漏洞

Shoplazza LifeStyle is an e-commerce site from Shoplazza, Inc. A security vulnerability exists in Shoplazza version 1.1 that stems from cross-site scripting due to incorrect manipulation of the parameter Title...

Uber data stolen via third-party vendor

Uber is facing a new cybersecurity incident after threat actors stole some of its data from Teqtivity, a third-party vendor that provides asset management and tracking services. "We are aware of customer data that was compromised due to unauthorized access to our systems by a malicious third...

Microsoft-Signed Drivers Helped Hackers Breach System Defenses

By Habiba Rashid Researchers at Sophos X-Ops Rapid Response RR, Mandiant, and SentinelOne have confirmed Microsoft's blunder. This is a post from HackRead.com Read the original post: Microsoft-Signed Drivers Helped Hackers Breach System Defenses...

FBI’s Security Platform InfraGard Hacked; 87k Members’ Data Sold Online

By Waqas As seen by Hackread.com, the hacker is selling the stolen InfraGard database which contains the personal data of its members for $50,000. This is a post from HackRead.com Read the original post: FBIs Security Platform InfraGard Hacked; 87k Members Data Sold Online...

PT-2022-25778 · Sap · Sap Businessobjects Bi Platform

Name of the Vulnerable Software and Affected Versions: SAP Business Objects Platform versions 420, and 430 Description: The issue allows an attacker with normal BI user privileges to upload or replace any file on the Business Objects server at the operating system level. This enables the attacker...

Boa 安全漏洞

Boa is an open source code for embedded applications from Boa Open Source. A security vulnerability exists in Boa Web Server versions 0.94.13 through 0.94.14 that stems from an inability to validate the correct security constraints on the HEAD HTTP method, allowing anyone to bypass the basic...

Design/Logic Flaw

A network misconfiguration is present in versions prior to 1.0.9.90 of the NETGEAR RAX30 AX2400 series of routers. IPv6 is enabled for the WAN interface by default on these devices. While there are firewall restrictions in place that define access restrictions for IPv4 traffic, these restrictions...

Western Digital My Cloud 安全漏洞

Western Digital My Cloud is a personal cloud storage device from Western Digital. A security vulnerability exists in Western Digital My Cloud prior to version 5.25.124, which stems from an insufficiently protected credentials vulnerability in the Remote Backup application, which could allow an...

Rackspace confirms it suffered a ransomware attack

It's not been a great week for cloud computing service provider Rackspace. On December 2, customers began experiencing problems connecting and logging into their Exchange environments. Rackspace started investigating and discovered an issue that affected its Hosted Exchange environments. Now...

RuoYi 安全漏洞

RuoYi is a backend management system by the individual developer RuoYi in China. A security vulnerability exists in RuoYi, which stems from some unknown functions in its JSON Handler component that allow an attacker to implement cross-site scripting. The attack method has been made public and can...

pb-cms 安全漏洞

pb-cms is a content management system by LinZhaoguan Personal Developer. A security vulnerability exists in pb-cms version 2.0, which stems from its IpUtil.getIpAddr function that allows attackers to implement cross-site scripting. The attack method has been made public and can be initiated...

CVE-2022-40259 MegaRAC Default Credentials Vulnerability

MegaRAC Default Credentials Vulnerability...

Eufy "no cloud" security cameras streaming data to the cloud

Eufy home security cameras are currently in a spot of trouble as a result of door camera footage. This is because it turns out that data which should not have been going to the cloud was doing so anyway in certain conditions. Securing your home: a complicated proposition Insecure cameras,...