India's CERT-In Sets 12-Hour Patch
CERT-In urges 12-hour patching of exposed flaws as AI compresses exploitation timelines
Latest Disclosures
7-Eleven
185,256 records exposed — Dates of birth, Email addresses, Names, Phone numbers and 1 more
View incident → Indexed 3 months, 1 week ago
Lawmakers in both houses of Congress are demanding answers from the U.S. Cybersecurity
Lawmakers in both houses of Congress are demanding answers from the U.S. Cybersecurity & Infrastructure Security Agency (CISA) after KrebsOnSecurity reported this week that a CISA contractor intentionally published
The infostealer payload in this campaign collect a vast amount of data, from
The infostealer payload in this campaign collect a vast amount of data, from collaboration authentication keys to cryptocurrency wallets
Drupal Core
Drupal Core SQL Injection Vulnerability — Drupal Core contains a SQL injection vulnerability that could allow for privilege escalation and remote code execution via specially crafted requests sent with the database abstr
Dragonica Lunaris
126,293 records exposed — Dates of birth, Email addresses, Names, Passwords and 2 more
View incident → Indexed 3 months, 1 week ago
Windows93 / Myspace93
46,105 records exposed — Email addresses, IP addresses, Passwords, Usernames
Grafana Labs has
Grafana Labs has confirmed a recent data breach was caused by the TanStack supply chain attack
Langflow Langflow
Langflow Origin Validation Error Vulnerability — Langflow contains an origin validation error vulnerability in which an overly permissive CORS configuration combined with a refresh token cookie configured as SameSite=Non
Trend Micro Apex One
Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability — Trend Micro Apex One (on-premise) contains a directory traversal vulnerability that could allow a pre-authenticated local attacker to modify a key tab
Microsoft Defender
Microsoft Defender Link Following Vulnerability — Microsoft Defender contains a link following vulnerability that allows an authorized attacker to elevate privileges locally.
Microsoft Internet Explorer
Microsoft Internet Explorer Use-After-Free Vulnerability — Microsoft Internet Explorer contains an use-after-free vulnerability that could allow remote attackers to execute arbitrary code via vectors involving access to
Microsoft Defender
Microsoft Defender Denial of Service Vulnerability — Microsoft Defender contains an unspecified vulnerability that allows for denial of service.
Microsoft Windows
Microsoft Windows Buffer Overflow Vulnerability — Microsoft Windows contains a buffer overflow vulnerability in the Windows Server Service that allows remote attackers to execute arbitrary code via a crafted RPC request
Microsoft DirectX
Microsoft DirectX NULL Byte Overwrite Vulnerability — Microsoft DirectX contains a NULL byte overwrite vulnerability in the QuickTime Movie Parser Filter in quartz.dll in DirectShow which could allow remote attackers to
Adobe Acrobat and Reader
Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability — Adobe Acrobat and Reader contain a heap-based buffer overflow vulnerability which could allow remote attackers to execute arbitrary code via a crafted P
Microsoft Internet Explorer
Microsoft Internet Explorer Use-After-Free Vulnerability — Microsoft Internet Explorer contains an use-after-free vulnerability that could allow remote attackers to execute arbitrary code by accessing a pointer associate
CTT
468,124 records exposed — Email addresses, Names, Phone numbers
View incident → Indexed 3 months, 2 weeks ago
Addi
34,532,941 records exposed — Age groups, Credit scores, Device information, Email addresses and 9 more
View incident → Indexed 3 months, 2 weeks ago
Microsoft Microsoft
Microsoft Exchange Server Cross-Site Scripting Vulnerability — Microsoft Exchange Server contains a cross-site scripting vulnerability during web page generation in Outlook Web Access and when certain interaction conditi
Abrigo
711,099 records exposed — Email addresses, Employers, Job titles, Names and 2 more
View incident → Indexed 3 months, 2 weeks ago
Cisco Catalyst SD-WAN
Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability — Cisco Catalyst SD-WAN Controller & Manager contain an authentication bypass vulnerability that allows an unauthenticated, remote attacker to bypass a
Instructure
Instructure says it reached an agreement with ShinyHunters over the Canvas breach data
Canada Life
237,810 records exposed — Email addresses, Job titles, Names, Phone numbers and 3 more