3164 matches found
Axiell Iguana CMS 跨站脚本漏洞
Axiell Iguana CMS is a control-based platform from Axiell Inc. for personalizing and communicating with customers. Axiell Iguana CMS has a security vulnerability that stems from the title parameter in twitter.php not properly neutralizing user input. An attacker exploited the vulnerability to...
CISA Warns of Actively Exploited Critical Oracle Fusion Middleware Vulnerability
The U.S. Cybersecurity and Infrastructure Security Agency CISA on Monday added a critical flaw impacting Oracle Fusion Middleware to its Known Exploited Vulnerabilities KEV Catalog, citing evidence of active exploitation. The vulnerability, tracked as CVE-2021-35587, carries a CVSS score of 9.8 a...
Hacker Leaks 5.3M Twitter Accounts as Claims of Larger Breach Surface
By Habiba Rashid A hacker has leaked 5.3 million Twitter account details on a cybercrime forum while another researcher, Chad Loder, claims there is another Twitter breach involving "perhaps over 100 million accounts." This is a post from HackRead.com Read the original post: Hacker Leaks 5.3M...
Elon Musk Confirms Twitter 2.0 will Bring End-to-End Encryption to Direct Messages
Twitter chief executive Elon Musk confirmed plans for end-to-end encryption E2EE for direct messages on the platform. The feature is part of Musk's vision for Twitter 2.0, which is expected to be what's called an "everything app." Other functionalities include longform tweets and payments,...
Better Click to Tweet < 5.10.4 - Settings Update via CSRF
The plugin lacks CSRF protection when updating the bctt-twitter-handle option, allowing an attacker to change the plugin settings by tricking a logged in admin to submit a form. PoC curl -b .cookies -d bctt-twitter=$NEWHANDLE 'https://example.com/wp-admin/?page=bctt-welcome=welcome'...
Meta Takes Down Fake Facebook and Instagram Accounts Linked to Pro-U.S. Influence Operation
Meta Platforms on Tuesday said it took down a network of accounts and pages across Facebook and Instagram that were operated by people associated with the U.S. military to spread narratives that depicted the country in a favorable light in the Middle East and Central Asia. The network, which...
Trojan.Win32.Platinum.gen MVID-2022-0657 Code Execution
Discovery / credits: Malvuln John Page aka hyp3rlinx c 2022 Original source: https://malvuln.com/advisory/71a76adeadc7b51218d265771fc2b0d1.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Trojan.Win32.Platinum.gen Vulnerability: Arbitrary Code Execution Description: The malware...
TaoSecurity on Mastodon
--- I am now using Mastodon as a replacement for the blue bird. This is my attempt to verify myself via my blog. I am no longer posting to my old bird account. Copyright 2003-2020 Richard Bejtlich and TaoSecurity taosecurity.blogspot.com and www.taosecurity.com...
Here’s How Bad a Twitter Mega-Breach Would Be
Elon Musk laid off half the staff, and mass resignations seem likely. If nobody’s there to protect the fort, what’s the worst that could happen?...
Failures in Twitter’s Two-Factor Authentication System
Twitter is having intermittent problems with its two-factor authentication system: Not all users are having problems receiving SMS authentication codes, and those who rely on an authenticator app or physical authentication token to secure their Twitter account may not have reason to test the...
North Korean Hackers Targeting Europe and Latin America with Updated DTrack Backdoor
Hackers tied to the North Korean government have been observed using an updated version of a backdoor known as Dtrack targeting a wide range of industries in Germany, Brazil, India, Italy, Mexico, Switzerland, Saudi Arabia, Turkey, and the U.S. "Dtrack allows criminals to upload, download, start ...
Twitter’s SMS Two-Factor Authentication Is Melting Down
Problems with the important security feature may be some of the first signs that Elon Musk’s social network is fraying at the edges...
Elon Musk Introduces Twitter Mayhem Mode
Plus: US midterms survive disinformation efforts, the government names the alleged Lockbit ransomware attacker, and the Powerball drawing hits a security snag...
Elon Musk's Twitter Blue Verification Is a Gift to Scammers
Anyone can get a blue tick on Twitter without proving who they are. And it’s already causing a ton of problems...
Your Guide To Navigating Mastodon, an Alternative to Twitter
By Habiba Rashid In this article, we will address what is Mastodon and how it works. Basically, this is one of those "everything you should know about" articles. Enjoy! This is a post from HackRead.com Read the original post: Your Guide To Navigating Mastodon, an Alternative to Twitter...
Twitter’s Unpredictable Path Under Elon Musk
By Habiba Rashid Hints of the impending doom that was inevitable with Elon Musk’s $44 billion acquisition of Twitter began to… This is a post from HackRead.com Read the original post: Twitters Unpredictable Path Under Elon Musk...
CVE-2022-27516
creationtimestamp| type| source ---|---|--- 2022-11-08 19:50:16+00:00| seen| https://t.me/cKure/10382 2022-11-09 12:21:41+00:00| seen| https://t.me/truesecator/3678 2024-11-20 14:08:12+00:00| seen| https://twitter.com/i/web/status/1590326328553013248 2025-05-01 20:15:52+00:00| seen|...
CVE-2022-27513
creationtimestamp| type| source ---|---|--- 2022-11-08 19:50:16+00:00| seen| https://t.me/cKure/10382 2022-11-09 12:21:41+00:00| seen| https://t.me/truesecator/3678 2024-11-20 14:08:12+00:00| seen| https://twitter.com/i/web/status/1590326328553013248 2025-05-01 20:15:51+00:00| seen|...
CVE-2022-27510
creationtimestamp| type| source ---|---|--- 2022-11-08 19:50:16+00:00| seen| https://t.me/cKure/10382 2022-11-08 21:54:53+00:00| seen| Telegram/vIZjlKRmTVOu4u-rU3xW7TZC7oekoViYQG3Lcwz9AcFtsBE 2022-11-09 11:45:41+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus21/2022 2022-11-0...