Semiconductor Stocks Surge: #Nvidia Sparks Nikkei Rally as #AI Optimism Reignites

https://undercodenews.com/semiconductor-stocks-surge-nvidia-sparks-nikkei-rally-as-ai-optimism-reignites/

@Undercode_News

#Nvidia Unveils RTX 50 Series: A Game-Changing Leap in GPU Performance at CES 2025

https://undercodenews.com/nvidia-unveils-rtx-50-series-a-game-changing-leap-in-gpu-performance-at-ces-2025/

@Undercode_News

🎮 #Nvidia Unveils GeForce RTX 5000 Series: The Future of #Gaming and #AI at CES 2025

https://undercodenews.com/nvidia-unveils-geforce-rtx-5000-series-the-future-of-gaming-and-ai-at-ces-2025/

@Undercode_News

🛡️ Israel Bolsters Defense Independence with Billion-Shekel Elbit Systems Deal

https://undercodenews.com/israel-bolsters-defense-independence-with-billion-shekel-elbit-systems-deal/

@Undercode_News

🌐 Navigating the Dynamic Landscape of Nigeria’s Thriving Online Casino Industry in 2024

https://undercodenews.com/navigating-the-dynamic-landscape-of-nigerias-thriving-online-casino-industry-in-2024/

@Undercode_News

📱 Revolutionizing K-12 Education with #AI: Insights from #Apple @ Work

https://undercodenews.com/revolutionizing-k-12-education-with-ai-insights-from-apple-work/

@Undercode_News

🛡️ Germany’s Looming Cybersecurity Crisis: The #Windows 10 Time Bomb

https://undercodenews.com/germanys-looming-cybersecurity-crisis-the-windows-10-time-bomb/

@Undercode_News

#Samsung Display at CES 2025: A Glimpse into the Future of Display #Technology

https://undercodenews.com/samsung-display-at-ces-2025-a-glimpse-into-the-future-of-display-technology/

@Undercode_News

🛡️ The Alarming Surge in Phishing Attacks and the Rise of GenAI in the Workplace: A 2024 Cybersecurity Report

https://undercodenews.com/the-alarming-surge-in-phishing-attacks-and-the-rise-of-genai-in-the-workplace-a-2024-cybersecurity-report/

@Undercode_News

🦑Broken Access Control: From Password Reset to Mass Account Takeover

A critical vulnerability in the password reset functionality of an API endpoint (/api/u/resetPwd). Here’s how it unfolded:

1️⃣ The endpoint accepts a username parameter and sends a password reset link to the user's email.
2️⃣ The use of "u" in the endpoint (u=user) hinted that other roles like admin (a=admin) or superuser (su) might exist.
3️⃣ Attempts to reset admin passwords via /api/admin/resetPwd and /api/administrator/resetPwd failed.
4️⃣ However, /api/su/resetPwd worked, allowing me to reset the superuser password!
5️⃣ The reset mechanism generated predictable passwords like username + ab12*. For example, resetting for admin resulted in adminab12*.

🎯 Impact: This flaw allowed unauthorized access to critical accounts, leading to mass account takeover.

Ref: Amit Kumar
@UndercodeCommunity
▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

⚡️ The 5G Revolution in Nigeria: A New Connectivity and #Digital Transformation

https://undercodenews.com/the-5g-revolution-in-nigeria-a-new-connectivity-and-digital-transformation/

@Undercode_News

🤖 #NVIDIA Aims to Dominate Robotics #AI with Human-Like Motion Generation

https://undercodenews.com/nvidia-aims-to-dominate-robotics-ai-with-human-like-motion-generation/

@Undercode_News

The Future of #AI in 2025: Predictions from Tech Leaders Shaping Tomorrow

https://undercodenews.com/the-future-of-ai-in-2025-predictions-from-tech-leaders-shaping-tomorrow/

@Undercode_News

Elon Musk’s Political Firestorm: Grooming Gangs, Soros, and European Politics

https://undercodenews.com/elon-musks-political-firestorm-grooming-gangs-soros-and-european-politics/

@Undercode_News

🚨 Kimsuky: The Evolving Threat of North Korea's Cyber #Espionage

https://undercodenews.com/kimsuky-the-evolving-threat-of-north-koreas-cyber-espionage/

@Undercode_News

⚡️ #Dell’s New Naming Strategy: Simplicity or a Copycat Move?

https://undercodenews.com/dells-new-naming-strategy-simplicity-or-a-copycat-move/

@Undercode_News

#Tesla China Kicks Off 2025 with Strong Vehicle Registrations and Market Growth

https://undercodenews.com/tesla-china-kicks-off-2025-with-strong-vehicle-registrations-and-market-growth/

@Undercode_News

🔍 #Tesla’s Actually Smart Summon Under Scrutiny: NHTSA Investigates Crash Allegations

https://undercodenews.com/teslas-actually-smart-summon-under-scrutiny-nhtsa-investigates-crash-allegations/

@Undercode_News

Lucid Motors Surpasses Q4 2024 Delivery Estimates: A Strong Finish to the Year

https://undercodenews.com/lucid-motors-surpasses-q4-2024-delivery-estimates-a-strong-finish-to-the-year/

@Undercode_News

🚨 PhishWP: The Malicious WordPress Plugin Exploiting Payment Interfaces for Financial Fraud

https://undercodenews.com/phishwp-the-malicious-wordpress-plugin-exploiting-payment-interfaces-for-financial-fraud/

@Undercode_News