#auth

Prepay wireless provider TracFone has been slapped on the wrist to the tune of $16 million for insufficient customer data protection

Players can only access the game by first joining its Telegram channel, with some going astray in copycat channels with hidden malware.

SIM Wisuda version 1.0 suffers from an insecure direct object reference vulnerability.

SLiMS CMS version 2.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.

Ubuntu Security Notice 6910-1 - Chess Hazlett discovered that Apache ActiveMQ incorrectly handled certain commands. A remote attacker could possibly use this issue to terminate the program, resulting in a denial of service. This issue only affected Ubuntu 16.04 LTS. Peter Stoeckli discovered that Apache ActiveMQ incorrectly handled hostname verification. A remote attacker could possibly use this issue to perform a person-in-the-middle attack. This issue only affected Ubuntu 16.04 LTS.

StarTask CRM version 1.9 suffers from a remote SQL injection vulnerability that allows for authentication bypass.

UBM CMS version 1.2 suffers from an insecure direct object reference vulnerability.

TAIF LMS version 5.8.0 suffers from a remote shell upload vulnerability.

Ubuntu Security Notice 6911-1 - Arnaud Morin discovered that Nova incorrectly handled certain raw format images. An authenticated user could use this issue to access arbitrary files on the server, possibly exposing sensitive information.

Vencorp version 2.1.1 suffers from a remote SQL injection vulnerability that allows for authentication bypass.