Ausnahme gefangen: SSL certificate problem: certificate is not yet valid 📌 U.S. Dept Of Defense: PII Leak of USCG Designated Examiner List at https://www.███
Team IT Security Nachrichtenportal Logo

🏠 Team IT Security News

TSecurity.de ist eine Online-Plattform, die sich auf die Bereitstellung von Informationen,alle 15 Minuten neuste Nachrichten, Bildungsressourcen und Dienstleistungen rund um das Thema IT-Sicherheit spezialisiert hat.
Ob es sich um aktuelle Nachrichten, Fachartikel, Blogbeiträge, Webinare, Tutorials, oder Tipps & Tricks handelt, TSecurity.de bietet seinen Nutzern einen umfassenden Überblick über die wichtigsten Aspekte der IT-Sicherheit in einer sich ständig verändernden digitalen Welt.

16.12.2023 - TIP: Wer den Cookie Consent Banner akzeptiert, kann z.B. von Englisch nach Deutsch übersetzen, erst Englisch auswählen dann wieder Deutsch!

Google Android Playstore Download Button für Team IT Security
RSS Feed Symbol für Team IT Security 800+ IT News als RSS Feed abonnieren



📚 U.S. Dept Of Defense: PII Leak of USCG Designated Examiner List at https://www.███


💡 Newskategorie: Sicherheitslücken
🔗 Quelle: vulners.com


image
Hello Dod Team, Summary: PII Leakage of approx 750 personal is being disclosed through the pdf at https://www.██████ which had been uploaded at the 7th of October, this includes Personal phone number and email address. Description: The list presented at the "dereport.pdf" contains personal info such as phone numbers and private emails of personal in contact with the DoD. Step-by-step Reproduction Instructions Navigate to https://www.████ POC █████ ██████████ █████████ Suggested Mitigation/Remediation Actions Provoking the public access to the specified PDF Best Regards, nagli. Impact PII Disclosure of DoD personal, this include email addresses and phone... ...



Sharing is caring on Social Media

🔗 Reddit
🔗 Telegram
🔗 LinkedIn
🔗 Xing
🔗 Twitter
🔗 Whatsapp
🔗 Facebook
🔗 Flipboard

Join the Team IT Security Community

🔗 "IT Sicherheit" Reddit-Gruppe
🔗 "IT Sicherheit" Telegramm-Seite

📌 U.S. Dept Of Defense: PII Leak of USCG Designated Examiner List at https://www.███


📈 158.89 Punkte

📌 U.S. Dept Of Defense: [Partial] SSN & [PII] exposed through iPERMs Presentation Slide.


📈 41.03 Punkte

📌 U.S. Dept Of Defense: Bypassed a fix to gain access to PII of more than 100 Officers


📈 41.03 Punkte

📌 U.S. Dept Of Defense: █████████ IDOR leads to disclosure of PHI/PII


📈 41.03 Punkte

📌 U.S. Dept Of Defense: CRXDE Lite/CRX is on ██████ exposed that leads to PII disclosure


📈 41.03 Punkte

📌 U.S. Dept Of Defense: ████████ portal is open to enumeration once authenticated. Session ID's appear static. All PII available once a valid session ID is found.


📈 41.03 Punkte

📌 U.S. Dept Of Defense: IDOR leaking PII data via VendorId parameter


📈 41.03 Punkte

📌 Netwrix Account Lockout Examiner up to 5.0 improper authentication


📈 35.29 Punkte

📌 Major Data Leak Includes PII Of Employees From U.S.’s Top Aerospace And Defense Contractor – Commentary From Cloud Security Expert


📈 32.76 Punkte

📌 U.S. Dept Of Defense: Reflected XSS on https://█████████html?url


📈 29.13 Punkte

📌 U.S. Dept Of Defense: Examples directory is PUBLIC on https://████████mil, leading to multiple vulns


📈 29.13 Punkte

📌 U.S. Dept Of Defense: Public instance of Jenkins on https://██████████/ with /script enabled


📈 29.13 Punkte

📌 U.S. Dept Of Defense: No Rate Limiting on https://██████/██████████/accounts/password/reset/ endpoint leads to Denial of Service


📈 29.13 Punkte

📌 U.S. Dept Of Defense: Unrestricted file upload leads to stored xss on https://████████/


📈 29.13 Punkte

📌 U.S. Dept Of Defense: Exposed Docker Registry at https://████


📈 29.13 Punkte

📌 U.S. Dept Of Defense: https://█████ is vulnerable to CVE-2020-3452 Read-Only Path Traversal Vulnerability


📈 29.13 Punkte

📌 U.S. Dept Of Defense: Path traversal on https://███ allows arbitrary file read (CVE-2020-3452)


📈 29.13 Punkte

📌 U.S. Dept Of Defense: IDOR to Account Takeover on https://████/index.html


📈 29.13 Punkte

📌 U.S. Dept Of Defense: External Service Interaction | https://█████████.mil


📈 29.13 Punkte

📌 U.S. Dept Of Defense: Sensitive data exposure via https://████████.mil/secure/QueryComponent!Default.jspa - CVE-2020-14179


📈 29.13 Punkte

📌 U.S. Dept Of Defense: CSRF to account takeover in https://███████.mil/


📈 29.13 Punkte

📌 U.S. Dept Of Defense: https://██████ vulnerable to CVE-2020-3187 - Unauthenticated arbitrary file deletion in Cisco ASA/FTD


📈 29.13 Punkte

📌 U.S. Dept Of Defense: hardcoded password stored in javascript of https://████.mil


📈 29.13 Punkte

📌 U.S. Dept Of Defense: Reflected XSS in https://███████ via search parameter


📈 29.13 Punkte

📌 U.S. Dept Of Defense: CSRF to account takeover in https://█████/


📈 29.13 Punkte

📌 U.S. Dept Of Defense: https://██████ vulnerable to CVE-2020-3187 - Unauthenticated arbitrary file deletion in Cisco ASA/FTD


📈 29.13 Punkte

📌 U.S. Dept Of Defense: Reflected XSS on https://████/ (Bypass of #1002977)


📈 29.13 Punkte

📌 U.S. Dept Of Defense: CSRF to Stored HTML injection at https://www.█████


📈 29.13 Punkte

📌 U.S. Dept Of Defense: Sensitive data exposure via https://███████/secure/QueryComponent!Default.jspa - CVE-2020-14179


📈 29.13 Punkte

📌 U.S. Dept Of Defense: Stored XSS at https://www.█████████.mil


📈 29.13 Punkte

📌 U.S. Dept Of Defense: Reflected XSS In https://███████


📈 29.13 Punkte

📌 U.S. Dept Of Defense: Reflected XSS on https://█████


📈 29.13 Punkte

📌 U.S. Dept Of Defense: Unauth RCE on Jenkins Instance at https://█████████/


📈 29.13 Punkte

📌 U.S. Dept Of Defense: Self XSS + CSRF Leads to Reflected XSS in https://████/


📈 29.13 Punkte

📌 U.S. Dept Of Defense: Administration Authentication Bypass on https://█████


📈 29.13 Punkte











matomo

Kontakt

24/7 kontakt@tsecurity.de

Weitere Informationen

Google Android Playstore Download Button für Team IT Security
🔗 Impressum
🔗 Datenschutz
Paypal Spenden für Projekt

Social Media

🔗 Facebook
🔗 Reddit
🔗 Team IT Security als Elektron App
🔗 © 2015-2023 Team IT Security Nachrichtenportal über Cybersecurity
🔗 CMS "myDraft" a PHP Portal Software