What is the official website of Mudah.my ?

The official website of Mudah.my is http://www.mudah.my.

What is Mudah.my's cybersecurity risk score?

Mudah.my has an AI-generated cybersecurity risk score of 754 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Mudah.my experienced?

According to Rankiteo, Mudah.my currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Mudah.my been affected by any supply chain cyber incidents ?

According to Rankiteo, Mudah.my has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Mudah.my have SOC 2 Type 1 certification ?

According to Rankiteo, Mudah.my is not certified under SOC 2 Type 1.

Does Mudah.my have SOC 2 Type 2 certification ?

According to Rankiteo, Mudah.my does not hold a SOC 2 Type 2 certification.

Does Mudah.my comply with GDPR ?

According to Rankiteo, Mudah.my is not listed as GDPR compliant.

Does Mudah.my have PCI DSS certification ?

According to Rankiteo, Mudah.my does not currently maintain PCI DSS compliance.

Does Mudah.my comply with HIPAA ?

According to Rankiteo, Mudah.my is not compliant with HIPAA regulations.

Does Mudah.my have ISO 27001 certification ?

According to Rankiteo,Mudah.my is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Mudah.my operate in ?

Mudah.my operates primarily in the Software Development industry.

How many employees does Mudah.my have ?

Mudah.my employs approximately 251 people worldwide.

Does Mudah.my own any subsidiaries ?

Mudah.my presently has no subsidiaries across any sectors.

How many LinkedIn followers does Mudah.my have ?

Mudah.my's official LinkedIn profile has approximately 23,085 followers.

What is the NAICS classification code for Mudah.my ?

Mudah.my is classified under the NAICS code 5112, which corresponds to Software Publishers.

Does Mudah.my have a Crunchbase profile ?

No, Mudah.my does not have a profile on Crunchbase.

Does Mudah.my have a LinkedIn profile ?

Yes, Mudah.my maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/mudahmy.

How many cybersecurity incidents has Mudah.my experienced ?

As of October 19, 2026, Rankiteo reports that Mudah.my has experienced 2 cybersecurity incidents.

How many peer or competitor companies does Mudah.my have ?

Mudah.my has an estimated 31,132 peer or competitor companies worldwide.

What types of cybersecurity incidents has Mudah.my faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach and Data Leak.

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Mudah.my

Boost Score +25 with badge (5 left)

754

/1000

Fair

779

/1000

Fair

Mudah.my Vendor Cyber Rating & Cyber Score

mudah.my

Add Your Compliance Badge

Mudah.my is Malaysia’s leading marketplace that offers a free and convenient platform for people to buy and sell new and preloved goods just with a simple post of an ad. Today, more than 8 million unique visitors visit Mudah to sell and buy everything from Cars to Cameras, Properties to Pets, Mobile phones to Motorcycles, Treadmills to Textbooks, Bicycles to Beds, Guitars to Golf sets, Plants to Posters, Watches to Washing machines, Tyres to Tablets, Dresses to Drums, Shoes to Shops, Collectibles to Computers, Jobs and more – Everything Also Mudah! Mudah is part of Carousell, one of the world’s largest and fastest growing marketplace platforms in Southeast Asia. Launched in August 2012, Carousell began in Singapore and now has a

Mudah.my

Mudah.my CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Mudah.my

Breach

100

10/2022

CAR1831122

Mudah.my

Data Leak

6/2022

CAR21412323

Loading…

A.I.

Mudah.my Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Mudah.my

Incidents vs Software Development Industry Avg (This Year)

No incidents recorded for Mudah.my in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Mudah.my in 2026.

Incident Types Mudah.my vs Software Development Industry Avg (This Year)

No incidents recorded for Mudah.my in 2026.

Incident History - Mudah.my (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Mudah.my Subsidiaries

Mudah.my

Software Development

Website: http://www.mudah.my

Company Size: 251

Carousell GroupSoftware Development

Chợ TốtTechnology, Information and Internet

Việc Làm TốtHuman Resources Services

Laku6.comInternet Publishing

OneShift by CarousellTechnology, Information and Media

REFASHRetail

Carousell Media GroupTechnology, Information and Internet

Loading…

Mudah.my Similar Companies

Lazada

lazada.com

About Lazada Group Founded in 2012, Lazada Group is the leading eCommerce platform in Southeast Asia. We are accelerating progress in Indonesia, Malaysia, the Philippines, Singapore, Thailand and Vietnam through commerce and technology. With the largest logistics and payments networks in the region, Lazada is a part of our consumers’ daily lives in the region and we aim to serve 300 million shoppers by 2030. Since 2016, Lazada is the Southeast Asia flagship platform of the Alibaba Group powered by its cutting-edge technology infrastructure.

IGT

IGT.com

IGT is a leading global provider of gaming, digital and financial technology solutions, formed through the combination of International Game Technology PLC’s Gaming & Digital Business and Everi Holdings Inc. IGT’s offering spans gaming machines, game content and systems, iGaming, sports betting, cash access, loyalty and player engagement solutions, enabling it to deliver integrated, customer-centric experiences across land-based and digital environments. Organized into Gaming, Digital and FinTech business units, IGT drives innovation, efficiency and value for casino, digital and hospitality operators worldwide. The company is headquartered in Las Vegas.

Just Eat Takeaway.com

justeattakeaway.com

Just Eat Takeaway.com is a leading global online delivery marketplace, connecting consumers and restaurants through our platform in 16 countries. Like a dinner table, working at JET brings our office employees and couriers together. From coding to customer service to couriers, JET is a fun, fast-paced and supportive place where you can be yourself. No day is the same. Our days are filled with new experiences. We see every challenge that comes our way as a chance to grow, both the business, and ourselves. We’re connected to millions of food-lovers, hundreds of thousands of connected partners and some of the best-known brands of the planet. When you take your seat here, you’ll find that a simple scribble on a napkin can turn into something seen by millions. Together we transform, create, reinvent and empower every food moment. As a leading online food tech company, JET brings together the stability of a global business, with the agility of a start-up. We got here by always staying one step ahead of the competition. So load up your plate with ideas that get you excited, because at JET everything is on the table. https://careers.justeattakeaway.com

Autodesk

autodesk.com

Autodesk is changing how the world is designed and made. Our technology spans architecture, engineering, construction, product design, manufacturing, and media and entertainment. We empower innovators everywhere to solve challenges, big and small. From greener buildings to smarter products and more mesmerizing blockbusters, Autodesk software helps our customers design and make a better world for all. Over 100 million people use Autodesk software, like AutoCAD, Revit, Maya, 3ds Max, Fusion 360, SketchBook, and more, to unlock their creativity and solve important design, business, and environmental challenges. Our software runs on both personal computers and mobile devices. It taps the infinite computing power of the cloud to help teams around the world collaborate, design, simulate, and fabricate their ideas in 3D. We provide exceptional compensation and benefit packages, and we’d love for you to join us. We’re proud to be an equal opportunity employer, and we consider all qualiﬁed applicants without regard to race, gender, disability, veteran status, or other protected category. To see our culture in action, check out #AutodeskLife. We are headquartered in the San Francisco Bay Area and have over 10,000 employees worldwide.

Bosch

cb bosch.com

The Bosch Group is a leading global supplier of technology and services. It employs roughly 417,900 associates worldwide (as of December 31, 2024). According to preliminary figures, the company generated sales of 90.5 billion euros in 2024. Its operations are divided into four business sectors: Mobility, Industrial Technology, Consumer Goods, and Energy and Building Technology. With its business activities, the company aims to use technology to help shape universal trends such as automation, electrification, digitalization, connectivity, and an orientation to sustainability. In this context, Bosch’s broad diversification across regions and industries strengthens its innovativeness and robustness. Bosch uses its proven expertise in sensor technology, software, and services to offer customers cross-domain solutions from a single source. It also applies its expertise in connectivity and artificial intelligence in order to develop and manufacture user-friendly, sustainable products. With technology that is “Invented for life,” Bosch wants to help improve quality of life and conserve natural resources. The Bosch Group comprises Robert Bosch GmbH and its roughly 470 subsidiary and regional companies in over 60 countries. Including sales and service partners, Bosch’s global manufacturing, engineering, and sales network covers nearly every country in the world. Bosch’s innovative strength is key to the company’s further development. At 136 locations across the globe, Bosch employs some 86,900 associates in research and development, of which nearly 48,000 are software engineers. Instagram: https://www.instagram.com/boschglobal/ Facebook: https://www.facebook.com/BoschGlobal Glassdoor: https://bit.ly/3raTZnH Imprint: www.bosch.com/corporate-information Privacy statement: https://www.bosch.com/data-protection-notice-bosch-linkedin/

Instacart

cb instacart.com

Instacart, the leading grocery technology company in North America, works with grocers and retailers to transform how people shop. The company partners with more than 1,500 national, regional, and local retail banners to facilitate online shopping, delivery and pickup services from more than 85,000 stores across North America on the Instacart Marketplace. Instacart makes it possible for millions of people to get the groceries they need from the retailers they love, and for approximately 600,000 Instacart shoppers to earn by picking, packing and delivering orders on their own flexible schedule. The Instacart Platform offers retailers a suite of enterprise-grade technology products and services to power their e-commerce experiences, fulfill orders, digitize brick-and-mortar stores, provide advertising services, and glean insights. With Instacart Ads, thousands of CPG brands – from category leaders to emerging brands – partner with the company to connect directly with consumers online, right at the point of purchase. With Instacart Health, the company is providing tools to increase nutrition security, make healthy choices easier for consumers, and expand the role that food can play in improving health outcomes. For more information, visit www.instacart.com/company.

Shopee

shopee.com

Shopee is a leading e-commerce platform in Southeast Asia, Taiwan, and Brazil. Launched in 2015, our platform connects shoppers, brands and sellers within one ecosystem. Shopee offers an easy, secure and engaging online shopping experience enjoyed by millions of people daily, with a wide selection of products, a vibrant community for discovery, and seamless payment and fulfilment support. Shopee is also a key contributor to the digital economy, with a firm commitment to promoting a sustainable and inclusive digital ecosystem by enabling businesses to digitalise and grow their online presence, helping more people access and benefit from digital services, and uplifting local communities. Shopee is part of Sea Limited (NYSE: SE), a global technology company. Sea’s mission is to better the lives of consumers and small businesses with technology through its three core businesses: Shopee, Garena, and Monee. #TeamShopee welcomes talents who have the passion and drive to create #ImpactThatLasts. Join us: http://careers.shopee.com

ByteDance

bytedance.com

ByteDance is a global incubator of platforms at the cutting edge of commerce, content, entertainment and enterprise services - over 2.5bn people interact with ByteDance products including TikTok. Creation is the core of ByteDance's purpose. Our products are built to help imaginations thrive. This is doubly true of the teams that make our innovations possible. Together, we inspire creativity and enrich life - a mission we aim towards achieving every day. At ByteDance, we create together and grow together. That's how we drive impact - for ourselves, our company, and the users we serve. We are committed to building a safe, healthy and positive online environment for all our users. We have over 110,000 employees based in more than 30 countries globally. Join us.

Facebook

meta.com

The Facebook company is now Meta. Meta builds technologies that help people connect, find communities, and grow businesses. When Facebook launched in 2004, it changed the way people connect. Apps like Messenger, Instagram and WhatsApp further empowered billions around the world. Now, Meta is moving beyond 2D screens toward immersive experiences like augmented and virtual reality to help build the next evolution in social technology. We want to give people the power to build community and bring the world closer together. To do that, we ask that you help create a safe and respectful online space. These community values encourage constructive conversations on this page: • Start with an open mind. Whether you agree or disagree, engage with empathy. • Comments violating our Community Standards will be removed or hidden. So please treat everybody with respect. • Keep it constructive. Use your interactions here to learn about and grow your understanding of others. • Our moderators are here to uphold these guidelines for the benefit of everyone, every day. • If you are seeking support for issues related to your Facebook account, please reference our Help Center (https://www.facebook.com/help) or Help Community (https://www.facebook.com/help/community). For a full listing of our jobs, visit http://www.facebookcareers.com

Loading…

NEWS

Mudah.my CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

October 22, 2015 07:00 AM

Mudah.my to fend off rivals with ‘one simple approach’

As Malaysia's largest online marketplace, with products and services in over 50 categories, Mudah.my is facing competition on all fronts.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-112112

SUMMARY

An IPv6 FlowSpec validation bypass in the CZ.NIC BIRD Internet Routing Daemon allows an established BGP peer to inject FlowSpec rules matching destinations outside the address space authorized by the unicast-route validation procedure. With validation enabled on the receiving flow6 channel, BIRD fails to reject a destination prefix component with a nonzero offset, contrary to RFC 8956 section 5. It validates a reconstructed prefix with zero-filled skipped bits, although the original FlowSpec component can match a broader set of IPv6 addresses. Given a suitable unicast route from the peer, the rule can pass validation and, where export policy permits, be propagated to downstream peers. Downstream enforcement may cause unauthorized traffic filtering or redirection.

Published

Date2026-10-18

Updated

Date2026-10-18

RISK INFORMATION (Score: )

cvss4

Base Score: 2.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-112111

SUMMARY

The Bootstrap Shortcodes plugin for WordPress before 3.4.6 is vulnerable to stored XSS via the id attribute of the [bs_tcontent] shortcode. The bs_tcontent() shortcode handler in inc/bs_tabs.php emits the id attribute value into an unquoted HTML attribute. esc_attr() is applied, but it does not encode space characters, so a space in the supplied value terminates the attribute and any following text is parsed as additional HTML attributes, including JavaScript event handlers. This allows authenticated attackers with Contributor-level access and above to inject arbitrary web script that executes in the browser of any user who views the page and interacts with the injected element.

Published

Date2026-10-18

Updated

Date2026-10-18

RISK INFORMATION (Score: )

cvss4

Base Score: 5.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-112029

SUMMARY

A vulnerability has been found in diem-project diem up to 5.1.3. This affects an unknown part of the file lib/model/doctrine/PluginDmUser.class.php of the component SHA1 Handler. Such manipulation of the argument salt/password leads to password hash with insufficient computational effort. The attack needs to be performed locally. The attack requires a high level of complexity. It is indicated that the exploitability is difficult. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-10-18

Updated

Date2026-10-18

RISK INFORMATION (Score: 2.5)

cvss2

Base Score: 1.0

Complexity: HIGH

AV:L/AC:H/Au:S/C:P/I:N/A:N

cvss3

Base Score: 2.5

Complexity: HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

cvss4

Base Score: 1.1

Complexity: HIGH

CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

1.4

Exploitability

REFERENCES

CVE-2026-112028

SUMMARY

A flaw has been found in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. Affected by this issue is some unknown functionality of the file App/Home/Controller/VoteController.class.php of the component Vote Handler. This manipulation of the argument X-Requested-With causes business logic errors. Remote exploitation of the attack is possible. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-10-18

Updated

Date2026-10-18

RISK INFORMATION (Score: 6.5)

cvss2

Base Score: 6.4

Complexity: LOW

AV:N/AC:L/Au:N/C:N/I:P/A:P

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

cvss4

Base Score: 5.5

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

2.5

Exploitability

3.9

REFERENCES

CVE-2026-112027

SUMMARY

A vulnerability was detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. Affected by this vulnerability is the function file_exists of the file Public/Home/js/uploadify/check-exists.php of the component Uploadify. The manipulation of the argument filename results in file and directory information exposure. The attack may be launched remotely. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-10-18

Updated

Date2026-10-18

RISK INFORMATION (Score: 5.3)

cvss2

Base Score: 5.0

Complexity: LOW

AV:N/AC:L/Au:N/C:P/I:N/A:N

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

cvss4

Base Score: 5.5

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

1.4

Exploitability

3.9

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…

Badge your company to reduce your risk score and your cyber insurance costs!

Trusted by insurers. Chosen by leaders.

Mudah.my Vendor Cyber Rating & Cyber Score

Mudah.my A.I CyberSecurity Scoring

Mudah.my CyberSecurity News & History

Mudah.my Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for Mudah.my

Incidents vs Software Development Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types Mudah.my vs Software Development Industry Avg (This Year)

Incident History - Mudah.my (X = Date, Y = Severity)

Mudah.my Subsidiaries

Mudah.my

Mudah.my Similar Companies

Lazada

IGT

Just Eat Takeaway.com

Autodesk

Bosch

Instacart

Shopee

ByteDance

Facebook

Mudah.my CyberSecurity News

Mudah.my to fend off rivals with ‘one simple approach’

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo

Mudah.my CyberSecurity News & History

Mudah.my Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for Mudah.my

Incidents vs Software Development Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types Mudah.my vs Software Development Industry Avg (This Year)

Incident History - Mudah.my (X = Date, Y = Severity)

Mudah.my Subsidiaries

Mudah.my

Mudah.my Similar Companies

Lazada

IGT

Just Eat Takeaway.com

Autodesk

Bosch

Instacart

Shopee

ByteDance

Facebook

Mudah.my CyberSecurity News

Mudah.my to fend off rivals with ‘one simple approach’

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo