JCPenney
368,418 records exposed — Dates of birth, Email addresses, Government issued IDs, Job titles and 4 more
View incident → Indexed 2 months, 1 week ago
Law Firm Data Breaches (10305 indexed)
CFGI
248,235 records exposed — Email addresses, Employers, Job titles, Names and 2 more
View incident → Indexed 2 months, 1 week ago
Ralph Lauren
139,903 records exposed — Age groups, Email addresses, Genders, Names and 1 more
View incident → Indexed 2 months, 1 week ago
Splunk Enterprise
Splunk Enterprise Missing Authentication for Critical Function Vulnerability — Splunk Enterprise contains a missing authentication for critical function vulnerability which could allow an unauthenticated user to create o
Widget Factory Joomla Content Editor Improper Access Control Vulnerability — Widget
Widget Factory Joomla Content Editor Improper Access Control Vulnerability — Widget Factory Joomla Content Editor contains an improper access control vulnerability which could allow for upload and execution of PHP code v
Berkadia
305,216 records exposed — Email addresses, Employers, Names, Phone numbers and 1 more
View incident → Indexed 2 months, 1 week ago
Infinite Campus
137,123 records exposed — Email addresses, Employers, Job titles, Names and 4 more
View incident → Indexed 2 months, 1 week ago
How the Anubis ransomware group stole and leaked an Italian Adriatic port authority's data
How the Anubis ransomware group stole and leaked an Italian Adriatic port authority's data
Cisco Catalyst SD-WAN Manager
Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability — Cisco Catalyst SD-WAN Manager contains a directory or path traversal vulnerability that could allow an authenticated, remote attacker to create a
LiteSpeed cPanel Plugin
LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability — LiteSpeed cPanel plugin contains a UNIX symbolic link (Symlink) following vulnerability that could allow a user with FTP or web shell access
Oracle PeopleSoft Enterprise PeopleTools
Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability — Oracle PeopleSoft Enterprise PeopleTools contains a missing authentication for critical function vulnerability which c
Extortion-only attacks are increasing as data theft drives most ransomware claims, with
Extortion-only attacks are increasing as data theft drives most ransomware claims, with many organizations unable to stop stolen data from being exposed
Ivanti Sentry
Ivanti Sentry OS Command Injection Vulnerability — Ivanti Sentry (formerly known as MobileIron Sentry) contains an OS command injection vulnerability which could allow a remote unauthenticated user to achieve root-level
University of Nottingham
454,635 records exposed — Academic records, Citizenship statuses, Dates of birth, Disabilities and 11 more
View incident → Indexed 2 months, 2 weeks ago
Cisco Catalyst SD-WAN Manager
Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability — Cisco Catalyst SD-WAN Manager formerly SD-WAN vManage contains an improper encoding or escaping of output vulnerability. This vulnerab
Arista Extensible Operating System
Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability — Arista Extensible Operating System (EOS) contains an incomplete comparison with missing factors vulnerability when the switch
Google Chromium V8
Google Chromium V8 Out-of-Bounds Read and Write Vulnerability — Google Chromium V8 out-of-bounds read and write vulnerability that could allow a remote attacker to execute arbitrary code inside a sandbox via a crafted HT
BerriAI LiteLLM
BerriAI LiteLLM Command Injection Vulnerability — BerriAI LiteLLM contains a command injection vulnerability that could allow any authenticated user, including holders of low-privilege internal-user keys, to run arbitrar
Check Point Security Gateway
Check Point Security Gateway Improper Authentication Vulnerability — Check Point Security Gateway contains an improper authentication vulnerability in IKEv1 key exchange that could allow an unauthenticated remote attacke
Baker Distributing
102,935 records exposed — Email addresses, Names, Phone numbers, Physical addresses and 1 more
View incident → Indexed 2 months, 3 weeks ago
BCD Travel
396,313 records exposed — Email addresses, Employers, Job titles, Names and 3 more
View incident → Indexed 2 months, 3 weeks ago
SolarWinds Serv-U
SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability — SolarWinds Serv-U contains an uncontrolled resource consumption vulnerability that allows specially crafted POST requests using the Content-Encoding: de
DentaQuest
2,553,599 records exposed — Dates of birth, Email addresses, Genders, Government issued IDs and 4 more
Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data Vulnerability —
Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data Vulnerability — Mirasvit Full Page Cache Warmer contains a deserialization of untrusted data vulnerability that could allow unauthenticated attackers to a