Signal Is Finally Testing Usernames

Plus: A DDoS attack shuts down ChatGPT, Lockbit shuts down a bank, and a communications breakdown between politicians and Big Tech...

Iranian Hackers Launch Destructive Cyber Attacks on Israeli Tech and Education Sectors

Israeli higher education and tech sectors have been targeted as part of a series of destructive cyber attacks that commenced in January 2023 with an aim to deploy previously undocumented wiper malware. The intrusions, which took place as recently as October, have been attributed to an Iranian...

perden.com Cross Site Scripting vulnerability OBB-3763709

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

tech-med.ro Cross Site Scripting vulnerability OBB-3743676

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-35071

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in MRV Tech Logging Administration Panel allows SQL Injection. This issue affects Logging Administration Panel: before 20230915...

CVE-2023-35071

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in MRV Tech Logging Administration Panel allows SQL Injection. This issue affects Logging Administration Panel: before 20230915...

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in MRV Tech Logging Administration Panel allows SQL Injection.This issue affects Logging Administration Panel: before 20230915...

CVE-2023-35071

CVE-2023-35071 is an SQL injection vulnerability in MRV Tech’s Logging Administration Panel, arising from improper neutralization of special elements in SQL commands. Affected: Logging Administration Panel prior to 20230915. Root cause reported as SQL injection flaw; exploitation details are not ...

CVE-2023-35071 SQLi in MRV Tech's Logging Administration Panel

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in MRV Tech Logging Administration Panel allows SQL Injection. This issue affects Logging Administration Panel: before 20230915...

CVE-2023-35071 SQLi in MRV Tech's Logging Administration Panel

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in MRV Tech Logging Administration Panel allows SQL Injection. This issue affects Logging Administration Panel: before 20230915...

Threat Report: High Tech Industry targeted the most with 46% of attack traffic tagged by NLX

How To Use This Report Enhance situational awareness of techniques used by threat actors Identify potential attacks targeting your industry Gain insights to help improve and accelerate your organization's threat response Summary of Findings The Network Effect Threat Report offers insights based o...

Hive Pro Partners with Tech Titan to Fortify Cybersecurity Landscape in Southeast Asia

HERNDON, VA., Sept. 26, 2023 - Hive Pro®, a pioneer vendor in Threat Exposure Management, is thrilled to announce a strategic partnership with Tech Titan Group, a leading IT Solutions Provider renowned for its innovation-driven approach and dedication to addressing evolving customer needs across...

dieselgeneratortech.com Cross Site Scripting vulnerability OBB-3705689

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

The US Congress Has Trust Issues. Generative AI Is Making It Worse

Senators are meeting with Silicon Valley's elite to learn how to deal with AI. But can Congress tackle the rapidly emerging tech before working on itself?...

How China Demands Tech Firms Reveal Hackable Flaws in Their Products

Some foreign companies may be complying—potentially offering China’s spies hints for hacking their customers...

CVE-2023-37222

Farsight Tech Nordic AB ProVide version 14.5 - Multiple XSS vulnerabilities CWE-79 can be exploited by a user with administrator privilege...

Cross site scripting

Farsight Tech Nordic AB ProVide version 14.5 - Multiple XSS vulnerabilities CWE-79 can be exploited by a user with administrator privilege...

CVE-2023-37222 Farsight Tech Nordic AB ProVide

Farsight Tech Nordic AB ProVide version 14.5 - Multiple XSS vulnerabilities CWE-79 can be exploited by a user with administrator privilege...

CVE-2023-37222 Farsight Tech Nordic AB ProVide

Farsight Tech Nordic AB ProVide version 14.5 - Multiple XSS vulnerabilities CWE-79 can be exploited by a user with administrator privilege...

CVE-2023-37222

CVE-2023-37222 affects Farsight Tech Nordic AB ProVide 14.5. The vulnerability is multiple Cross-Site Scripting (CWE-79) in the web interface that can be exploited by a user with administrator privileges, with user interaction required. CVSS details from NVD indicate a low/moderate overall impact...