keycloak: user impersonation via stolen uuid code

A flaw was found in Keycloak's OpenID Connect user authentication, which may incorrectly authenticate requests. An authenticated attacker who could obtain information from a user request within the same realm could use that data to impersonate the victim and generate new session tokens. This issu...

PT-2022-13539

Name of the Vulnerable Software and Affected Versions ShowDoc versions prior to 2.10.4 Description The issue is a stored cross-site scripting XSS vulnerability that occurs via file upload. This means an attacker can upload a malicious file to the system, which then executes the script when the fi...

PT-2019-13547

Name of the Vulnerable Software and Affected Versions OX App Suite versions 7.10.1 through 7.10.2 Description The issue allows for cross-site scripting XSS, which is a type of attack where an attacker can inject malicious scripts into a website, potentially allowing them to steal user data or tak...

Ransomhack; a new attack blackmailing business owners using GDPR

By Waqas Hackers are threatening companies to leak stolen user data online This is a post from HackRead.com Read the original post: Ransomhack; a new attack blackmailing business owners using GDPR...