Aggregator

DraftKings hacker sentenced to prison, ordered to pay $1.4 Million

Security Affairs
5 days 3 hours ago
A DraftKings hacker got 30 months in prison for selling stolen credentials and must pay over $1.4 million in fines and restitution. Kamerin Stokes, 23, from Memphis (aka TheMFNPlug), received a 30-month prison sentence for his role in a 2022 credential stuffing attack against DraftKings. He continued selling stolen login data online even after pleading […]
Pierluigi Paganini

Attackers Weaponize CVE-2026-39987 to Spread Blockchain-Based Backdoor Via Hugging Face

Cyber Security News
5 days 3 hours ago

A critical vulnerability in the marimo Python notebook platform is now being actively used by attackers to deploy a blockchain-powered backdoor on developer systems. The flaw, tracked as CVE-2026-39987, allows remote code execution without authentication, making it a dangerous entry point for threat actors leveraging it to install a new variant of the NKAbuse malware […]

The post Attackers Weaponize CVE-2026-39987 to Spread Blockchain-Based Backdoor Via Hugging Face appeared first on Cyber Security News.

Tushar Subhra Dutta

Fake Ledger Hardware Wallets on Chinese Marketplaces Steal Crypto Seeds and PINs

Cyber Security News
5 days 3 hours ago

A Brazilian cybersecurity researcher has exposed a sophisticated, large-scale supply chain scam involving counterfeit Ledger Nano S Plus hardware wallets sold through a Chinese marketplace, devices engineered from the ground up to silently drain cryptocurrency across roughly 20 blockchains. The findings, posted to Reddit by user u/Past_Computer2901, have sent shockwaves through the crypto security community, […]

The post Fake Ledger Hardware Wallets on Chinese Marketplaces Steal Crypto Seeds and PINs appeared first on Cyber Security News.

Guru Baran

CVE-1999-0871 | Microsoft Internet Explorer 4.0/4.0.1 Frame privileges management (MS98-013 / XFDB-3668)

Vuldb Updates
5 days 3 hours ago
A vulnerability identified as critical has been detected in Microsoft Internet Explorer 4.0/4.0.1. The impacted element is an unknown function of the component Frame Handler. The manipulation leads to improper privilege management. This vulnerability is traded as CVE-1999-0871. It is possible to initiate the attack remotely. There is no exploit available. To fix this issue, it is recommended to deploy a patch.
vuldb.com

CVE-1999-1048 | GNU Bash 1.4.17/2.0.0 Directory Name memory corruption (XFDB-3414 / OSVDB-8345)

Vuldb Updates
5 days 3 hours ago
A vulnerability labeled as critical has been found in GNU Bash 1.4.17/2.0.0. This affects an unknown function of the component Directory Name Handler. The manipulation results in memory corruption. This vulnerability is known as CVE-1999-1048. Attacking locally is a requirement. Furthermore, an exploit is available. It is recommended to add additional authentication.
vuldb.com

CVE-1999-0056 | Sun Solaris 2.3/2.4/2.5/2.5.1 ping memory corruption (ID 00174 / XFDB-1365)

Vuldb Updates
5 days 3 hours ago
A vulnerability marked as problematic has been reported in Sun Solaris 2.3/2.4/2.5/2.5.1. This impacts an unknown function of the file ping. This manipulation causes memory corruption. This vulnerability is handled as CVE-1999-0056. It is possible to launch the attack on the local host. There is not any exploit available. It is suggested to upgrade the affected component.
vuldb.com

CVE-1999-1265 | Seattle Lab Software SLmail 3.1 Command denial of service (XFDB-1664 / SBV-5036)

Vuldb Updates
5 days 3 hours ago
A vulnerability classified as problematic was found in Seattle Lab Software SLmail 3.1. Affected by this issue is some unknown functionality of the component Command Handler. Executing a manipulation with the input (SEND can lead to denial of service. The identification of this vulnerability is CVE-1999-1265. The attack may be launched remotely. There is no exploit available. Upgrading the affected component is advised.
vuldb.com

CVE-1999-1054 | Globetrotter FLEXlm LicenseManager 6.0d lmdown denial of service

Vuldb Updates
5 days 3 hours ago
A vulnerability, which was classified as problematic, has been found in Globetrotter FLEXlm LicenseManager 6.0d. This affects an unknown part of the component lmdown. The manipulation leads to denial of service. This vulnerability is referenced as CVE-1999-1054. Remote exploitation of the attack is possible. No exploit is available. It is advisable to upgrade the affected component.
vuldb.com

CVE-1999-1228 | US Robotics Modem 33.6 ATH Command privileges management (Nessus ID 10020 / XFDB-3320)

Vuldb Updates
5 days 3 hours ago
A vulnerability, which was classified as critical, was found in US Robotics Modem 33.6. This vulnerability affects unknown code of the component ATH Command Handler. The manipulation with the input +++ results in improper privilege management. This vulnerability is identified as CVE-1999-1228. The attack can be executed remotely. There is not any exploit available. This vulnerability has historical importance owing to its background and reception.
vuldb.com

CVE-1999-0969 | Microsoft Windows NT 4.0 RPC Server Snork denial of service (MS98-014 / XFDB-1372)

Vuldb Updates
5 days 3 hours ago
A vulnerability has been found in Microsoft Windows NT 4.0 and classified as problematic. This issue affects some unknown processing of the component RPC Server. This manipulation causes denial of service (Snork). This vulnerability is tracked as CVE-1999-0969. The attack is possible to be carried out remotely. No exploit exists. This vulnerability is considered historic because of its background and reception. To fix this issue, it is recommended to deploy a patch.
vuldb.com

CVE-1999-1181 | SGI IRIX 6.2/6.4 On-Line Customer Registration privileges management (19980901-01-PX / XFDB-7441)

Vuldb Updates
5 days 3 hours ago
A vulnerability was found in SGI IRIX 6.2/6.4 and classified as problematic. Impacted is an unknown function of the component On-Line Customer Registration. Such manipulation leads to improper privilege management. This vulnerability is listed as CVE-1999-1181. The attack must be carried out locally. There is no available exploit. It is suggested to upgrade the affected component.
vuldb.com

CVE-1999-0870 | Microsoft Internet Explorer 4.01 File Upload Control privileges management (MS98-015 / XFDB-2213)

Vuldb Updates
5 days 3 hours ago
A vulnerability identified as critical has been detected in Microsoft Internet Explorer 4.01. Affected is an unknown function of the component File Upload Control Handler. This manipulation causes improper privilege management. This vulnerability appears as CVE-1999-0870. The attack may be initiated remotely. There is no available exploit. This vulnerability has a historic impact because of its background and how it was received. It is suggested to install a patch to address this issue.
vuldb.com

Managed ad