A short podcast updating listeners on the security news of the last few days, as prepared by Catalin Cimpanu and read by Claire Aird. You can find the newsletter version of this podcast here ..read more

Apple on Thursday filed a motion to dismiss its lawsuit against NSO Group, a developer of powerful spyware, saying that moving forward in the case would expose critical security information it uses to combat the expanding proliferation of commercial surveillance tools in general. Its efforts have “substantially weakened” the NSO Group, Apple said in its ..read more

Authored by indoushka Auto/Taxi Stand Management System version 1.0 suffers from a php code injection vulnerability. Change Mirror Download =============================================================================================================================================| # Title : Auto/Taxi Stand Management System 1.0 php code injection Vulnerability || # Author : indoushka || # Tested on : windows 10 Fr(Pro) / browser : Mozilla firefox 130.0.0 (64 bits ..read more

Authored by indoushka BP Monitoring Management System version 1.0 suffers from an ignored default credential vulnerability. Change Mirror Download ====================================================================================================================================| # Title : BP Monitoring Management System 1.0 Insecure Settings Vulnerability || # Author : indoushka || # Tested on : windows 10 Fr(Pro) / browser : Mozilla firefox 130.0.0 (64 bits) || # Vendor ..read more

Authored by indoushka Bus Pass Management System version 1.0 suffers from an ignored default credential vulnerability. Change Mirror Download ====================================================================================================================================| # Title : Bus Pass Management System 1.0 Insecure Settings Vulnerability || # Author : indoushka || # Tested on : windows 10 Fr(Pro) / browser : Mozilla firefox 130.0.0 (64 bits) || # Vendor ..read more

Authored by indoushka Car Washing Management System version 1.0 suffers from an ignored default credential vulnerability. Change Mirror Download ====================================================================================================================================| # Title : Car Washing Management System 1.0 Insecure Settings Vulnerability || # Author : indoushka || # Tested on : windows 10 Fr(Pro) / browser : Mozilla firefox 130.0.0 (64 bits) || # Vendor ..read more

Authored by indoushka Webpay E-Commerce version 1.0 suffers from a cross site scripting vulnerability. Change Mirror Download =============================================================================================================================================| # Title : Webpay E-Commerce v1.0 XSS Vulnerability || # Author : indoushka || # Tested on : windows 10 Fr(Pro) / browser : Mozilla firefox 125.0.1 (64 bits) || # Vendor : http://webpay.com.np ..read more

Authored by daniellowrie | Site github.com Proof of concept remote code execution exploit for GeoServer versions prior 2.23.6, 2.24.4, and 2.25.2. advisories | CVE-2024-36401 ..read more

Authored by James Horseman, Horizon3 Attack Team | Site github.com Proof of concept remote code execution exploit for Ivanti EPM versions prior to 2022 SU6 or the 2024 September update. advisories | CVE-2024-29847 ..read more

Sep 13, 2024Ravie LakshmananCyber Attack / Crime British authorities on Thursday announced the arrest of a 17-year-old male in connection with a cyber attack affecting Transport for London (TfL). “The 17-year-old male was detained on suspicion of Computer Misuse Act offenses in relation to the attack, which was launched on TfL on 1 September,” the ..read more