Qilin
You must login to view this content
Aggregator
Airlines KLM and Air France Detail Customer Data Breach
2 weeks 4 days ago
ShinyHunters May Have Struck Again
Airlines Air France and KLM said they suffered a data breach involving a third-party service storing customer data. The alert comes as the ShinyHunters extortion group continues to target Salesforce-using organizations and trick them into sharing direct access to their customer data.
Airlines Air France and KLM said they suffered a data breach involving a third-party service storing customer data. The alert comes as the ShinyHunters extortion group continues to target Salesforce-using organizations and trick them into sharing direct access to their customer data.
Cryptohack Roundup: Verdict in Tornado Cash Founder's Case
2 weeks 4 days ago
Also: Samourai Wallet Co-Founders' Guilty Plea, Coinbase Loss From Data Theft
This week, Tornado Cash co-founder convicted, Samourai Wallet guilty plea, Coinbase insider data theft, a U.S. court overturned an OpenSea executive's fraud conviction, AI-written malware stole crypto, Credix exploit, CZ sought dismissal of FTX claim, July hacks and a FinCEN crypto ATM warning.
This week, Tornado Cash co-founder convicted, Samourai Wallet guilty plea, Coinbase insider data theft, a U.S. court overturned an OpenSea executive's fraud conviction, AI-written malware stole crypto, Credix exploit, CZ sought dismissal of FTX claim, July hacks and a FinCEN crypto ATM warning.
10 Best Red Teaming Companies for Advanced Attack Simulation in 2025
2 weeks 4 days ago
Red teaming companies are specialized cybersecurity firms that use a proactive, adversarial approach to test an organization’s defenses by simulating a real-world cyberattack. Unlike traditional penetration testing, which typically focuses on finding specific vulnerabilities, red teaming emulates the tactics, techniques, and procedures (TTPs) of an advanced persistent threat (APT) actor. The goal is to evaluate […]
The post 10 Best Red Teaming Companies for Advanced Attack Simulation in 2025 appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
CISO Advisory
Germany’s top court holds that police can only use spyware to investigate serious crimes
2 weeks 4 days ago
The plaintiffs argued that a 2017 rules change enabling law enforcement to use spyware to eavesdrop on encrypted chats and messaging platforms could unfairly expose communications belonging to people who are not criminal suspects.
CVE-2018-6363 | Task Rabbit Clone 1.0 single_blog.php ID sql injection (ID 146131 / EDB-43914)
2 weeks 4 days ago
A vulnerability was found in Task Rabbit Clone 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file single_blog.php. The manipulation of the argument ID as part of Parameter leads to sql injection.
This vulnerability is known as CVE-2018-6363. The attack can be launched remotely. Furthermore, there is an exploit available.
vuldb.com
CVE-2018-7474 | Textpattern CMS up to 4.6.2 index.php qty sql injection (EDB-44277)
2 weeks 4 days ago
A vulnerability was found in Textpattern CMS up to 4.6.2. It has been classified as critical. This affects an unknown part of the file index.php. The manipulation of the argument qty as part of Variable leads to sql injection.
This vulnerability is uniquely identified as CVE-2018-7474. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.
vuldb.com
CVE-2018-17391 | Super CMS Blog Pro 1.0 authors_post.php Author sql injection (ID 149519 / EDB-45463)
2 weeks 4 days ago
A vulnerability, which was classified as critical, has been found in Super CMS Blog Pro 1.0. This issue affects some unknown processing of the file authors_post.php. The manipulation of the argument Author as part of Parameter leads to sql injection.
The identification of this vulnerability is CVE-2018-17391. The attack may be initiated remotely. Furthermore, there is an exploit available.
vuldb.com
CVE-2018-17784 | SugarCRM Community Edition 6.5.26 YUI/FlashCanvas cross site scripting (EDB-45594)
2 weeks 4 days ago
A vulnerability classified as problematic was found in SugarCRM Community Edition 6.5.26. This vulnerability affects unknown code of the component YUI/FlashCanvas. The manipulation leads to cross site scripting.
This vulnerability was named CVE-2018-17784. The attack can be initiated remotely. Furthermore, there is an exploit available.
vuldb.com
BlackSuit, Royal ransomware group hit over 450 US victims before last month’s takedown
2 weeks 4 days ago
The Department of Homeland Security said the Russian cybercrime collective received at least $370 million in ransom payments, based on current cryptocurrency valuations.
The post BlackSuit, Royal ransomware group hit over 450 US victims before last month’s takedown appeared first on CyberScoop.
Matt Kapko
CVE-2024-1039 | Gessler WEB-MASTER 7.9 weak credentials (icsa-24-032-01)
2 weeks 4 days ago
A vulnerability classified as very critical has been found in Gessler WEB-MASTER 7.9. Affected is an unknown function. The manipulation leads to use of weak credentials.
This vulnerability is traded as CVE-2024-1039. It is possible to launch the attack remotely. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
CVE-2024-1040 | Gessler WEB-MASTER 7.9 weak hash (icsa-24-032-01)
2 weeks 4 days ago
A vulnerability classified as problematic was found in Gessler WEB-MASTER 7.9. Affected by this vulnerability is an unknown functionality. The manipulation leads to use of weak hash.
This vulnerability is known as CVE-2024-1040. The attack needs to be approached locally. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
CVE-2024-0637 | Centreon updateDirectory sql injection
2 weeks 4 days ago
A vulnerability was found in Centreon. It has been declared as critical. Affected by this vulnerability is the function updateDirectory. The manipulation leads to sql injection.
This vulnerability is known as CVE-2024-0637. The attack can be launched remotely. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
CVE-2024-23116 | Centreon updateLCARelation sql injection
2 weeks 4 days ago
A vulnerability classified as critical has been found in Centreon. This affects the function updateLCARelation. The manipulation leads to sql injection.
This vulnerability is uniquely identified as CVE-2024-23116. It is possible to initiate the attack remotely. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
CVE-2024-23117 | Centreon updateContactServiceCommands sql injection
2 weeks 4 days ago
A vulnerability classified as critical was found in Centreon. This vulnerability affects the function updateContactServiceCommands. The manipulation leads to sql injection.
This vulnerability was named CVE-2024-23117. The attack can be initiated remotely. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
CVE-2024-23118 | Centreon updateContactHostCommands sql injection
2 weeks 4 days ago
A vulnerability, which was classified as critical, has been found in Centreon. This issue affects the function updateContactHostCommands. The manipulation leads to sql injection.
The identification of this vulnerability is CVE-2024-23118. The attack may be initiated remotely. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
CVE-2024-23119 | Centreon insertGraphTemplate sql injection
2 weeks 4 days ago
A vulnerability, which was classified as critical, was found in Centreon. Affected is the function insertGraphTemplate. The manipulation leads to sql injection.
This vulnerability is traded as CVE-2024-23119. It is possible to launch the attack remotely. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
CVE-2024-30338 | Foxit PDF Reader Doc Object use after free
2 weeks 4 days ago
A vulnerability was found in Foxit PDF Reader. It has been declared as critical. This vulnerability affects unknown code of the component Doc Object Handler. The manipulation leads to use after free.
This vulnerability was named CVE-2024-30338. The attack can be initiated remotely. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
CVE-2024-30335 | Foxit PDF Reader AcroForm out-of-bounds
2 weeks 4 days ago
A vulnerability was found in Foxit PDF Reader and classified as problematic. This issue affects some unknown processing of the component AcroForm Handler. The manipulation leads to out-of-bounds read.
The identification of this vulnerability is CVE-2024-30335. The attack may be initiated remotely. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
CVE-2024-30336 | Foxit PDF Reader AcroForm use after free
2 weeks 4 days ago
A vulnerability, which was classified as critical, was found in Foxit PDF Reader. Affected is an unknown function of the component AcroForm Handler. The manipulation leads to use after free.
This vulnerability is traded as CVE-2024-30336. It is possible to launch the attack remotely. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com