Security
Headlines
HeadlinesLatestCVEs

Tag

#web

CVE-2023-3335: hitachi-sec-2023-140: Information Exposure Vulnerability in Hitachi Ops Center Administrator

Insertion of Sensitive Information into Log File vulnerability in Hitachi Ops Center Administrator on Linux allows local users  to gain sensive information.This issue affects Hitachi Ops Center Administrator: before 10.9.3-00.

CVE
#vulnerability#web#linux
CVE-2023-3967: hitachi-sec-2023-142: DoS Vulnerability in Hitachi Ops Center Common Services

Allocation of Resources Without Limits or Throttling vulnerability in Hitachi Ops Center Common Services on Linux allows DoS.This issue affects Hitachi Ops Center Common Services: before 10.9.3-00.

CVE-2023-43627: 【重要】無線LANアクセスポイント「STモード」における複数の脆弱性と対処方法について | 業務用wifi(無線lan)のフルノシステムズ

Path traversal vulnerability in ACERA 1320 firmware ver.01.26 and earlier, and ACERA 1310 firmware ver.01.26 and earlier allows a network-adjacent authenticated attacker to alter critical information such as system files by sending a specially crafted request. They are affected when running in ST(Standalone) mode.

Meta is using your public Facebook and Instagram posts to train its AI

Categories: News Categories: Personal Categories: Privacy Tags: Meta Tags: Facebook Tags: Instagram Tags: X Tags: xAI Tags: copyright Tags: tweets Social media companies are showing their hand about scraping user data to feed into their AI and large language models. (Read more...) The post Meta is using your public Facebook and Instagram posts to train its AI appeared first on Malwarebytes Labs.

CVE-2023-43980: [CVE-2023-43980] Improper neutralization of SQL parameter in Presto Changeo - Test Site Creator module for PrestaShop

Presto Changeo testsitecreator up to v1.1.1 was discovered to contain a SQL injection vulnerability via the component disable_json.php.

Online Dating: Cybercrime Red Flags

By Owais Sultan Online dating is not a new phenomenon; however, scammers have found ways to exploit it for various purposes,… This is a post from HackRead.com Read the original post: Online Dating: Cybercrime Red Flags

FortiGuard Labs Uncovers Series of Malicious NPM Packages Stealing Data

By Waqas There are over 17 million developers worldwide who use NPM packages, making it a lucrative target for cybercriminals. This is a post from HackRead.com Read the original post: FortiGuard Labs Uncovers Series of Malicious NPM Packages Stealing Data

CVE-2023-43267: CVE-2023-43267

A cross-site scripting (XSS) vulnerability in the publish article function of emlog pro v2.1.14 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the title field.

CVE-2023-43268: GitHub - Fliggyaaa/DeYue-remote-vehicle-management-system

Deyue Remote Vehicle Management System v1.1 was discovered to contain a deserialization vulnerability.

Crypto Industry Lost $685 Million in Q3 2023, 30% by Lazarus Group

By Waqas Immunefi Crypto Losses Report: Q3 2023 Sees Highest Losses of the Year. This is a post from HackRead.com Read the original post: Crypto Industry Lost $685 Million in Q3 2023, 30% by Lazarus Group