3290 matches found
Malware-Infested Smart Card Reader
Brian Krebs has an interesting story of a smart ID card reader with a malware-infested Windows driver, and US government employees who inadvertently buy and use them. But by all accounts, the potential attack surface here is enormous, as many federal employees clearly will purchase these readers...
The Mystery of China’s Sudden Warnings About US Hackers
The Chinese government recently began saber-rattling about American cyberespionage. The catch? It’s all old news...
Google Android Competitive Conditions Issue Vulnerability (CNVD-2022-42126)
Google Android is a Linux-based open source operating system from Google. Google Android has a security vulnerability. An attacker exploits the vulnerability to cause local privilege escalation...
egypt.ab3.us Cross Site Scripting vulnerability OBB-2623411
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
US Warns Firms About North Korean Hackers Posing as IT Workers
By Deeba Ahmed US government has warned organizations to beware of hackers in the guise of IT freelancers claiming to be… This is a post from HackRead.com Read the original post: US Warns Firms About North Korean Hackers Posing as IT Workers...
Cardiologist Charged for Developing Jigsaw v.2 and Thanos Ransomware
By Deeba Ahmed The multi-tasking physician ran a Ransomware-as-a-Service and rented dangerous ransomware to cybercriminals. The US Department of Justice has unsealed a… This is a post from HackRead.com Read the original post: Cardiologist Charged for Developing Jigsaw v.2 and Thanos Ransomware...
US Courts Are Coming After Crypto Exchanges That Skirt Sanctions
A newly unsealed opinion is likely the first decision from a US federal court to find that cryptocurrencies can't be used to evade sanctions...
Iran’s COBALT MIRAGE Threat Group Behind Ransomware Attacks in US
By Deeba Ahmed Cobalt Mirage is an Irani threat group believed to be linked to the Iranian Cobalt Illusion threat group,… This is a post from HackRead.com Read the original post: Irans COBALT MIRAGE Threat Group Behind Ransomware Attacks in US...
Virtual credit cards coming to Chrome: What you need to know
When youre buying things online, reducing the exposure of payment details during transactions is one way to help reduce the risk of data theft. If you can hide this payment data and switch it out for something else entirely, even better. Google is proposing to do just that for customers in the US...
The Hidden Race to Protect the US Bioeconomy From Hacker Threats
A biotech threat intelligence group is gaining supporters as urgency mounts around an overlooked vulnerable sector...
F5 Access for Android Information Disclosure Vulnerability
F5 Access is a US-based company that uses VPN and optimization technologies to protect and accelerate mobile device access to enterprise networks and applications. f5 Access for Android is vulnerable to an information disclosure vulnerability that could be exploited by attackers to gain access to...
Subrion CMS Cross-Site Scripting Vulnerability (CNVD-2022-72212)
Subrion CMS is a PHP-based content management system CMS from the Subrion team. A cross-site scripting vulnerability exists in Subrion CMS version 4.2.1 and earlier, which stems from a lack of data validation of user-supplied data and output in the "Contact Us" plugin of the "Topic List". data an...
Every ISP in the US Must Block These 3 Pirate Streaming Services
The 96 internet service providers were told to enforce the orders “by any technological means available.”...
Apache XML Security For Java vulnerable to authentication bypass by HMAC truncation
The design of the W3C XML Signature Syntax and Processing XMLDsig recommendation, as implemented in multiple products. The Apache XML Security Java is affected by the vulnerability published in US-Cert VU 466161. See: http://www.kb.cert.org/vuls/id/466161 for more information. This bug can allow ...
Subrion CMS Cross-site Scripting (XSS) vulnerability in the `contact us` plugin
A cross-site scripting XSS vulnerability exists in the contact us plugin for Subrion CMS = 4.2.1 version via List of subjects. This can be exploited by someone with administrative privileges when they log in to the admin panel...
GHSA-JV64-2M3X-6V4Q Subrion CMS Cross-site Scripting (XSS) vulnerability in the `contact us` plugin
A cross-site scripting XSS vulnerability exists in the contact us plugin for Subrion CMS = 4.2.1 version via List of subjects. This can be exploited by someone with administrative privileges when they log in to the admin panel...
U.S. Dept Of Defense: [CVE-2020-3452] Unauthenticated file read in Cisco ASA
i found out that https://█████/ was vulnerable to CVE-2020-3452 The IP has a SSL certificate pointing to ██████████ curl -kv https://███████/ Output; Server certificate: ███ Impact Anyone can read any file present on the server. System Hosts █████ Affected Products and Versions CVE Numbers...
CVE-2021-41948
A cross-site scripting XSS vulnerability exists in the "contact us" plugin for Subrion CMS = 4.2.1 version via "List of subjects"...
