3299 matches found
The Small but Mighty Danger of Echo Chamber Extremism
Research shows that relatively few people exist in perfectly sealed-off media bubbles—but they’re still having an outsize impact on US politics...
Contact Us page - Contact people LITE < 3.7.1 - Contact Update/Deletion/Creation via CSRF
The plugin does not have CSRF checks when creating, updating and deleting contacts, which could allow attackers to make logged in users perform such actions via CSRF attacks...
WordPress Contact Us page - Contact people LITE Plugin <= 3.7.0 is vulnerable to Cross Site Request Forgery (CSRF)
Software Contact Us page - Contact people LITE Type Plugin Vulnerable versions = 3.7.0 Fixed in 3.7.1 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-23973 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 924b5ed1c57e Credi...
Hack the Pentagon 3.0: Groundbreaking Bug Bounty Program Is Back
By Habiba Rashid The US military seeks public help in securing its critical cyber infrastructure with "Hack the Pentagon 3.0" bug bounty program. This is a post from HackRead.com Read the original post: Hack the Pentagon 3.0: Groundbreaking Bug Bounty Program Is Back...
US Department of the Interior's passwords "easily cracked"
It's bad news for the US Department of the Interior--a Government watchdogs security audit has revealed its passwords are simply not up to the job of warding off cracking attempts. The audit's wordy title was not kind: P@s$w0rds at the U.S. Department of the Interior: Easily Cracked Passwords, La...
info465.us Cross Site Scripting vulnerability OBB-3144435
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Russian Hackers Targeted Three US Nuclear Research Labs
By Deeba Ahmed The attacks, according to Reuters' report, happened between August and September 2022. This is a post from HackRead.com Read the original post: Russian Hackers Targeted Three US Nuclear Research Labs...
Google Android Denial of Service Vulnerability (CNVD-2023-18908)
Google Android is a Linux-based open source operating system from Google. A denial of service vulnerability exists in Google Android, which can be exploited by this attacker to cause a denial of service...
January 6 Report: 11 Details You May Have Missed
The January 6 Committee’s 841-page report will go down as one of the most important documents in US history. These key details stand out...
Russians Hacked JFK Airport Taxi Dispatch in Line-Skipping Scheme
Plus: An offensive US hacking operation, swatters hacking Ring cameras, a Netflix password-sharing crackdown, and more...
Iran’s Internet Blackouts Are Sabotaging Its Own Economy
A new US State Department assessment highlights the stark economic toll of Tehran’s recent shutdowns and platform control...
PT-2022-6582 · D Link · D-Link Dir-2640-Us
Name of the Vulnerable Software and Affected Versions: D-Link DIR-2640-US versions affected versions not specified Description: The issue is related to the implementation of the HNAP1 protocol in the D-Link DIR-2640-US router's firmware, specifically with the handling of the LocalIPAddress...
Google Android elevation of privilege vulnerability (CNVD-2023-07675)
Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that can be exploited by an attacker to elevate privileges...
FedRAMP just got better – and is here to stay
Today, President Biden signed the National Defense Authorization Act NDAA, taking a giant step forward in securing the federal governments cloud-first mission. The FedRAMP® Federal Risk and Authorization Management Program Authorization Act, outlined in section 5921 of the NDAA, formalizes the...
FBI’s Vetted Info Sharing Network ‘InfraGard’ Hacked
InfraGard, a program run by the U.S. Federal Bureau of Investigation FBI to build cyber and physical threat information sharing partnerships with the private sector, this week saw its database of contact information on more than 80,000 members go up for sale on an English-language cybercrime foru...
Why the US Is Primed for Radicalization
A confluence of factors is leading people in the nation to gravitate toward extremist views...
Google Android Code Execution Vulnerability (CNVD-2022-89776)
Google Android is a Linux-based open source operating system from Google. Google Android has a security vulnerability that can be exploited by attackers to execute arbitrary code on the system...
Google Android Code Execution Vulnerability (CNVD-2022-89774)
Google Android is a Linux-based open source operating system from Google. Google Android has a security vulnerability that can be exploited by attackers to run arbitrary code on the system...
Google Android Elevation of Privilege Vulnerability (CNVD-2023-07644)
Google Android is a Linux-based open-source operating system from the US company Google. Google Android has an elevation of privilege vulnerability that can be exploited by attackers to elevate privileges...