McGraw Hill
13,500,136 records exposed — Email addresses, Names, Phone numbers, Physical addresses
View incident → Indexed 4 months, 2 weeks ago
Latest Disclosures
Apache ActiveMQ
Apache ActiveMQ Improper Input Validation Vulnerability — Apache ActiveMQ contains an improper input validation vulnerability that allows for code injection.
Microsoft Office
Microsoft Office Remote Code Execution — Microsoft Office Excel contains a remote code execution vulnerability that could allow an attacker to take complete control of an affected system if a user opens a specially craft
Microsoft SharePoint Server
Microsoft SharePoint Server Improper Input Validation Vulnerability — Microsoft SharePoint Server contains an improper input validation vulnerability that allows an unauthorized attacker to perform spoofing over a networ
Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability —
Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability — Microsoft Visual Basic for Applications (VBA) contains an insecure library loading vulnerability that could allow for remote code execution
Microsoft Exchange Server
Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability — Microsoft Exchange Server contains a deserialization of untrusted data that allows an authenticated attacker to achieve remote code execution. —
Fortinet FortiClient EMS
Fortinet FortiClient EMS SQL Injection Vulnerability — Fortinet FortiClient EMS contains a SQL injection vulnerability that may allow an unauthenticated attacker to execute unauthorized code or commands via specifically
Adobe Acrobat
Adobe Acrobat Use-After-Free Vulnerability — Adobe Acrobat contains a use-after-free vulnerability that allows for code execution
Adobe Acrobat and Reader
Adobe Acrobat and Reader Prototype Pollution Vulnerability — Adobe Acrobat and Reader contain a prototype pollution vulnerability that allows for arbitrary code execution.
Hallmark
1,736,520 records exposed — Email addresses, Names, Phone numbers, Physical addresses and 1 more
View incident → Indexed 4 months, 3 weeks ago
Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability — Ivanti Endpoint
Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability — Ivanti Endpoint Manager Mobile (EPMM) contains a code injection vulnerability that could allow attackers to achieve unauthenticated remote code executi
My Lovely AI
106,271 records exposed — Email addresses, Social media profiles
View incident → Indexed 4 months, 3 weeks ago
SongTrivia2
291,739 records exposed — Auth tokens, Avatars, Email addresses, Names and 2 more
View incident → Indexed 5 months ago
TrueConf Client
TrueConf Client Download of Code Without Integrity Check Vulnerability — TrueConf Client contains a download of code without integrity check vulnerability. An attacker who is able to influence the update delivery path ca
ADT
Cybercriminals breached systems and stole limited set of customer and prospective customer data
Intesa Sanpaolo S.p.A.
Employee unlawfully accessed customer data over two years; €31.8m fine for breach transparency failure
Ryanair
Breach exposed legal emails, flight data, and banking details; data claimed on hacker forums
Bank of Baroda (BoB)
Alleged data breach involving sensitive banking and corporate information
ANTS (French ID Agency)
Cyberattack exposed 19 million personal identity records including government data
CISA (US Government)
US agency breached through Cisco vulnerability; FIRESTARTER backdoor allowed access through March
Nissan
Data breach via compromise of third-party vendor file-transfer system
165 organizations breached via compromised Snowflake credentials; ShinyHunters exploited
165 organizations breached via compromised Snowflake credentials; ShinyHunters exploited Anodot access
CISA/US Department
US agency breached through Cisco vulnerability, FIRESTARTER backdoor allowed access through March