DentaQuest
2,553,599 records exposed — Dates of birth, Email addresses, Genders, Government issued IDs and 4 more
Latest Disclosures
Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data Vulnerability —
Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data Vulnerability — Mirasvit Full Page Cache Warmer contains a deserialization of untrusted data vulnerability that could allow unauthenticated attackers to a
Linux Kernel
Linux Kernel Improper Authentication Vulnerability — Linux Kernel contains an improper authentication vulnerability which could allow for privilege escalation via the cgroups v1 release_agent feature.
Android Framework
Android Framework Integer Overflow Vulnerability — Android Framework contains an integer overflow vulnerability that allows for code execution that could allow for local privilege escalation.
Edmunds
177,860 records exposed — Device information, Email addresses, IP addresses, Passwords and 2 more
View incident → Indexed 1 month, 1 week ago
Oracle WebLogic Server
Oracle WebLogic Server Unspecified Vulnerability — Oracle WebLogic contains an unspecified vulnerability that could allow an unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server.
Atlas Menu
63,926 records exposed — Email addresses, IP addresses, Passwords, Support tickets and 1 more
View incident → Indexed 1 month, 1 week ago
Sloppy AI-generated npm infostealer
Sloppy AI-generated npm infostealer leaked its own GitHub token, exposing the operator
Palo Alto Networks PAN-OS
Palo Alto Networks PAN-OS Authentication Bypass Vulnerability — Palo Alto Networks PAN-OS contains an authentication bypass vulnerability that allows attackers to bypass security restrictions and establish an unauthorize
Kemper
269,299 records exposed — Email addresses, Names, Partial credit card data, Phone numbers and 2 more
View incident → Indexed 1 month, 2 weeks ago
Charter
4,851,517 records exposed — Email addresses, Job titles, Names, Phone numbers and 1 more
View incident → Indexed 1 month, 2 weeks ago
All Major LLMs Exposed to Multi-Turn Manipulation, Warn Researchers
All Major LLMs Exposed to Multi-Turn Manipulation, Warn Researchers
Mytheresa
84,108 records exposed — Email addresses, Names, Partial credit card data, Phone numbers and 3 more
View incident → Indexed 1 month, 2 weeks ago
Daemon Daemon Tools Lite
Daemon Tools Lite Embedded Malicious Code Vulnerability — Daemon Tools contains an unspecified vulnerability that has a high impact on confidentiality, integrity, and availability.
TanStack TanStack
TanStack Unspecified Vulnerability — TanStack contains an unspecified vulnerability that allowed malicious versions of the product to be published to the npm registry to publish credential-stealing malware under a truste
Nx Nx Console
Nx Console Embedded Malicious Code Vulnerability — Nx Console contains an embedded malicious code vulnerability that allowed a malicious version of Nx Console to be published. The compromised extension fetched an obfusca
Ameriprise
502,597 records exposed — Email addresses, Employers, Financial transactions, Job titles and 3 more
View incident → Indexed 1 month, 2 weeks ago
India's CERT-In Sets 12-Hour Patch
CERT-In urges 12-hour patching of exposed flaws as AI compresses exploitation timelines
LiteSpeed cPanel Plugin
LiteSpeed cPanel Plugin Privilege Escalation Vulnerability — LiteSpeed cPanel Plugin contains privilege escalation vulnerability that is exposed via the user-end cPanel plugin, which can be abused by any cPanel user acco
7-Eleven
185,256 records exposed — Dates of birth, Email addresses, Names, Phone numbers and 1 more
View incident → Indexed 1 month, 2 weeks ago
Lawmakers in both houses of Congress are demanding answers from the U.S. Cybersecurity
Lawmakers in both houses of Congress are demanding answers from the U.S. Cybersecurity & Infrastructure Security Agency (CISA) after KrebsOnSecurity reported this week that a CISA contractor intentionally published
The infostealer payload in this campaign collect a vast amount of data, from
The infostealer payload in this campaign collect a vast amount of data, from collaboration authentication keys to cryptocurrency wallets
Drupal Core
Drupal Core SQL Injection Vulnerability — Drupal Core contains a SQL injection vulnerability that could allow for privilege escalation and remote code execution via specially crafted requests sent with the database abstr
Windows93 / Myspace93
46,105 records exposed — Email addresses, IP addresses, Passwords, Usernames