The vulnerability of the Firefox browser allows a hacker to gain access to a full list of disabled plugins.

The vulnerability of Firefox browsers is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to gain access to a complete list of disabled plugins, by using cascading style sheets and pseudo-classes...

ownCloud/Nextcloud Unprotected Data Directory (HTTP)

ownCloud/Nextcloud is exposing an unprotected data directory. SPDX-FileCopyrightText: 2016 SCHUTZWERK GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

Voter Database Leak Exposes 154 Million Sensitive Records

White hat hacker Chris Vickery uncovered a database of 154 million U.S. voter profiles on an unprotected server chockfull of sensitive data that includes voter names, addresses, email addresses, phone numbers, gun ownership information, preferences on gay marriage and links to individual social...

The vulnerability of the Microsoft .NET Framework software platform, which allows a perpetrator to gain access to protected information

The vulnerability of the Microsoft .NET Framework software platform is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to protected information by using data in open text format within the client-server da...

The vulnerabilities of PDF viewer programs such as Adobe Reader, Adobe Reader Document Cloud, and PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat allow attackers to obtain confidential information.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Adobe Reader Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to the lack of protection for operational data. Exploiting these vulnerabilities can allow a malicious...

The vulnerability of the Debian GNU/Linux operating system allows a perpetrator to read arbitrary files in the configuration directory.

The vulnerability in the xymond component of the Debian GNU/Linux operating system is related to the lack of protection for configuration data. Exploiting this vulnerability allows a malicious actor to read arbitrary files from the configuration directory using the “config” command...

The vulnerability of the Android operating system, which allows a perpetrator to obtain confidential information

The vulnerability of the exchange/eas/EasAutoDiscover.java function in the implementation of the Autodiscover component of the Android operating system’s Exchange ActiveSync component is related to the lack of protection for service data. Exploiting this vulnerability could allow a malicious acto...

The vulnerability of the Internet Explorer browser allows a violator to detect the presence of files.

The vulnerability of the Internet Explorer browser is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to determine the presence of certain files by using specially crafted JavaScript code...

The vulnerability of the server operating system OS X Server, which allows a hacker to obtain confidential information from the Wiki pages

The vulnerability of the OS X Server wiki server operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to obtain confidential information from the wiki pages...

The vulnerability of the OpenSSL library, which allows a hacker to compromise RSA keys

The vulnerability of the MODEXPCTIMECOPYFROMPREBUF function crypto/bn/bnexp.c in the OpenSSL library is related to the lack of protection for service data. Exploiting this vulnerability could allow a local attacker to extract RSA keys by running a specially created application...

The vulnerability of the Android operating system allows a hacker to gain access to screen shots and enhance their privileges.

The vulnerability of the SystemUI component in the Android operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to screen shots and enhance their privileges through a specially created...

Pornhub: Unprotected Memcache Installation running

The consultant was able to connect to the stage.pornhub.com subdomain via port 60893, it was determined that the target host was running memcached and required no authentication...

The vulnerability in Microsoft Edge’s browser allows a hacker to bypass the Anti-Spyware Protection Mechanism (ASLR).

The vulnerability of Microsoft Edge relates to the absence of protection for service data. Exploiting this vulnerability allows a malicious actor to bypass the ASLR protection mechanism by using a specially crafted web page...

The vulnerability of the Windows operating system, which allows a hacker to gain access to user accounts

The vulnerability of the Netlogon service in the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to gain access to user accounts due to configuration errors in the domain controller...

The vulnerability of the Windows operating system, which allows a hacker to bypass the ASLR protection mechanism

The vulnerability of graphical device interfaces in the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to bypass the ASLR protection mechanism...

The vulnerability of the Android operating system, which allows a perpetrator to obtain confidential information

The vulnerability of the Bluetooth component in the Android operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow a perpetrator to obtain confidential information about contacts by establishing a connection...

The vulnerability of the Android operating system, which allows a perpetrator to obtain confidential information

The vulnerability of the Wi-Fi module in the Android operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to obtain confidential information about wireless network parameters by gaining access to the local physical environment...

The vulnerability of the AMS Device Manager system allows a perpetrator to increase their privileges.

The vulnerability of the AMS Device Manager system control mechanism is related to the lack of protection for the SQL query structure. Exploiting this vulnerability allows an attacker to enhance their privileges by making incorrect data inputs remotely...

The vulnerability of the Windows operating system, which allows a hacker to bypass the KASLR security mechanism

The vulnerability of the Windows operating system’s kernel is related to the lack of protection for service data. Exploiting this vulnerability allows a local attacker to bypass the KASLR protection mechanism through a specially crafted application...

The vulnerability of the Firefox browser, which allows a hacker to gain access to log files

The vulnerability of Firefox browsers is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to log files through a specially created application...