3299 matches found
CVE-2023-36682
Technical details about CVE-2023-36682 are not provided in the connected documents. Monitor vendor advisories for patch status and mitigations; initial description notes a CSRF issue in Schema Pro up to version 2.7.7.
CVE-2023-36685
CVE-2023-36685 – CartFlows Pro CSRF (WordPress) A CSRF vulnerability exists in Brainstorm Force US LLC CartFlows Pro插件, affecting CartFlows Pro versions up to 1.11.12. The CVE indicates unauthenticated CSRF could impact users, with high impact on confidentiality, integrity, and availability per N...
The CDC's Gun Violence Research Is in Danger
In a year pocked with fights over US government funding, Republicans are quietly trying to strip the Centers for Disease Control and Prevention of its ability to research gun violence...
US Seizes Bitcoin Mixer Sinbad.io Used by Lazarus Group
By Waqas US Treasury Sanctions Sinbad.io for Laundering Millions in Stolen Funds Linked to North Korea's Lazarus Group. This is a post from HackRead.com Read the original post: US Seizes Bitcoin Mixer Sinbad.io Used by Lazarus Group...
Stack overflow
Tenda AC10 version USAC10V4.0siV16.03.10.13cn was discovered to contain a stack overflow via the time parameter in the function compareparentcontroltime...
cti-us.com Improper Access Control vulnerability OBB-3796513
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
fchs90.us Cross Site Scripting vulnerability OBB-3795917
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Secretive White House Surveillance Program Gives Cops Access to Trillions of US Phone Records
A WIRED analysis of leaked police documents verifies that a secretive government program is allowing federal, state, and local law enforcement to access phone records of Americans who are not suspected of a crime...
Operator of Major Proxy Botnet ‘IPStorm’ Arrested, Pleads Guilty in US
By Waqas The FBI arrested the operator of the IPStorm botnet, a Russian-Moldovan national, in Spain. This is a post from HackRead.com Read the original post: Operator of Major Proxy Botnet IPStorm Arrested, Pleads Guilty in US...
Asian Americans Raise Alarm Over ‘Chilling Effects’ of Section 702 Surveillance Program
More than 60 groups advocating for Asian American and Pacific Islander communities are pushing the US Congress to reform the Section 702 surveillance program as Senate leaders move to renew it...
us-parts-and-tools-store.de Improper Access Control vulnerability OBB-3780357
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
US Privacy Groups Urge Senate Not to Ram Through NSA Spying Powers
An effort to reauthorize a controversial US surveillance program by attaching it to a must-pass spending bill has civil liberties advocates calling foul...
Friday Squid Blogging: The History and Morality of US Squid Consumption
Really interesting article. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Read my blog posting guidelines here...
The NSA Seems Pretty Stressed About the Threat of Chinese Hackers in US Critical Infrastructure
US government officials continue to warn that the public and private sectors need to identify and root out China-backed attackers lurking in industrial control systems...
US Man Sentenced to Over 21 Years for Dark Web Distribution of CSAM
By Waqas You reap what you sow! This is a post from HackRead.com Read the original post: US Man Sentenced to Over 21 Years for Dark Web Distribution of CSAM...
U.S. Treasury Sanctions Russian Money Launderer in Cybercrime Crackdown
The U.S. Department of the Treasury imposed sanctions against a 37-year-old Russian woman for taking part in the laundering of virtual currency for the country's elites and cybercriminal crews, including the Ryuk ransomware group. Ekaterina Zhdanova, per the department, is said to have facilitate...
Microsoft Azure US Accelarators Synapse SAS Token Incorrect Permission Assignment Authentication Bypass Vulnerability
This vulnerability allows remote attackers to bypass authentication on Microsoft Azure. Authentication is not required to exploit this vulnerability. The specific flaw exists within the permissions granted to an SAS token. An attacker can leverage this vulnerability to launch a supply-chain attac...
us-augsburg.de Improper Access Control vulnerability OBB-3772869
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
New Secaucus Point of Presence Increases Resilience for Financial Services
We are thrilled to announce the opening of a new cutting-edge Point of Presence PoP in Secaucus, New Jersey, which adds resilience to our network infrastructure located in the Northeastern United States region. This PoP represents the first build using next generation technology designed to...
US-Led Alliance of 40 Countries Unites to Combat Ransomware Threat
By Waqas No more ransom for cybercriminals! This is a post from HackRead.com Read the original post: US-Led Alliance of 40 Countries Unites to Combat Ransomware Threat...