Programme HackerOne ownCloud ownCloud Submitted by lukasreschke lukasreschke Report Remote Code Execution on ownCloud instances with ImageMagick installed Full Report...
Programme HackerOne Nextcloud Nextcloud Submitted by ctulhu ctulhu Report Ability to read any emails through IDOR on Nextcloud Mail Full...
Programme HackerOne ownCloud ownCloud Submitted by atorralba atorralba Report GitHub Security Lab (GHSL) Vulnerability Report: SQLInjection in FileContentProvider.kt (GHSL-2022-059) Full...
Programme HackerOne HackerOne HackerOne Submitted by refaat01 refaat01 Report adding h1_analyst_* to username for normal users Full Report A...
LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...
LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...
LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...
LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...
LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...
LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...
LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...
LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...
LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...
LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...
Here's a hard question to answer: 'How many service accounts do you have in your environment?'. A harder one is:...
Threat actors using hacking tools from an Israeli surveillanceware vendor named QuaDream targeted at least five members of civil society...
NAME__________Microsoft Windows Win32k privilege escalationPlatforms Affected:Microsoft Windows 11 22H2 for ARM64-based Systems Microsoft Windows 11 22H2 for x64-based SystemsRisk Level:7Exploitability:UnprovenConsequences:Gain...
NAME__________Microsoft Dynamics 365 cross-site scriptingPlatforms Affected:Risk Level:7.6Exploitability:UnprovenConsequences:Cross-Site Scripting DESCRIPTION__________Microsoft Dynamics 365 is vulnerable to cross-site scripting, caused by improper validation...
NAME__________Microsoft Visual Studio Code code executionPlatforms Affected:Microsoft Visual Studio CodeRisk Level:7.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Microsoft Visual Studio Code could allow a remote...
NAME__________SAP CRM security bypassPlatforms Affected:SAP CRM S4FND 102 SAP CRM S4FND 103 SAP CRM S4FND 104 SAP CRM S4FND 105...
NAME__________Apache InLong SQL injectionPlatforms Affected:Apache InLong 1.4.0 Apache InLong 1.5.0Risk Level:6.5Exploitability:UnprovenConsequences:Data Manipulation DESCRIPTION__________Apache InLong is vulnerable to SQL injection. A...
NAME__________SAP Application Interface Framework cross-site scriptingPlatforms Affected:SAP Application Interface Framework 600 SAP Application Interface Framework 700Risk Level:3.7Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________SAP Application...
NAME__________Adobe Acrobat and Adobe Reader code executionPlatforms Affected:Adobe Acrobat DC 23.001.20093 Adobe Acrobat Reader DC 23.001.20093 Adobe Acrobat 2020 20.005.30441...
NAME__________Adobe Acrobat and Adobe Reader information disclosurePlatforms Affected:Adobe Acrobat DC 23.001.20093 Adobe Acrobat Reader DC 23.001.20093 Adobe Acrobat 2020 20.005.30441...
