Goolytics – Simple Google Analytics Security Vulnerabilities

CGA-4q6g-7c97-xpcc

Bulletin has no...

CGA-xvjv-2jwr-6897

Bulletin has no...

CGA-v6vj-gm26-7r8p

Bulletin has no...

CGA-w34q-7mx6-527r

Bulletin has no...

CGA-rgv3-wg25-j59v

Bulletin has no...

CGA-xvp5-g73c-c5j4

Bulletin has no...

CGA-p5hj-4w5m-gvwp

Bulletin has no...

CGA-mc8m-44p5-273h

Bulletin has no...

CGA-pgfm-3gq9-vjmg

Bulletin has no...

CGA-h77w-v467-3cxg

Bulletin has no...

CGA-9x78-w7v8-whxf

Bulletin has no...

CGA-9mpm-96vr-8v53

Bulletin has no...

CGA-63vw-p545-47gm

Bulletin has no...

CGA-7c7g-h9fv-q8j3

Bulletin has no...

CGA-525c-q846-rphh

Bulletin has no...

CGA-f42v-9vqh-cg28

Bulletin has no...

libmatio vulnerability

It was discovered that matio incorrectly handled certain malformed files. An attacker could possibly use this issue to cause a denial of...

CVE-2024-5211

A path traversal vulnerability in mintplex-labs/anything-llm allowed a manager to bypass the normalizePath() function, intended to defend against path traversal attacks. This vulnerability enables the manager to read, delete, or overwrite the 'anythingllm.db' database file and other files stored...

CGA-7f28-xcwf-h2wm

Bulletin has no...

libndp vulnerability

It was discovered that libndp incorrectly handled certain malformed IPv6 router advertisement packets. A local attacker could use this issue to cause NetworkManager to crash, resulting in a denial of service, or possibly execute arbitrary...

Lessons from the Snowflake Breaches

Last week, the notorious hacker gang, ShinyHunters, sent shockwaves across the globe by allegedly plundering 1.3 terabytes of data from 560 million users. This colossal breach, with a price tag of $500,000, could expose the personal information of a massive swath of a live event company's...

Black Basta Ransomware May Have Exploited MS Windows Zero-Day Flaw

Threat actors linked to the Black Basta ransomware may have exploited a recently disclosed privilege escalation flaw in the Microsoft Windows Error Reporting Service as a zero-day, according to new findings from Symantec. The security flaw in question is CVE-2024-26169 (CVSS score: 7.8), an...

Using AI for Political Polling

Public polling is a critical function of modern political campaigns and movements, but it isn't what it once was. Recent US election cycles have produced copious postmortems explaining both the successes and the flaws of public polling. There are two main reasons polling fails. First, nonresponse.....

Malicious code in ing-feat-lu-luxtrust-smartcard-authentication (npm)

-= Per source details. Do not edit below this line.=- Source: ossf-package-analysis (e101f8c803c8ca5e2fddab02abc82d9de8ce89fd23fb6f52bc2fd31a73c0fa01) The OpenSSF Package Analysis project identified 'ing-feat-lu-luxtrust-smartcard-authentication' @ 200.0.1 (npm) as malicious. It is considered...

Malicious code in ing-feat-lu-luxtrust-token-authentication (npm)

-= Per source details. Do not edit below this line.=- Source: ossf-package-analysis (5d7c8b06f4e363cde4609c5bb2971268a310ec0ec691464f7c1159191f308b8c) The OpenSSF Package Analysis project identified 'ing-feat-lu-luxtrust-token-authentication' @ 200.0.1 (npm) as malicious. It is considered...

Malicious code in ing-feat-lu-luxtrust-stick-authentication (npm)

-= Per source details. Do not edit below this line.=- Source: ossf-package-analysis (1e84b6fcb318d2b4cf4fc650d67ffb94a0622eb47d6b88e8662bdb6b2dc62930) The OpenSSF Package Analysis project identified 'ing-feat-lu-luxtrust-stick-authentication' @ 200.0.1 (npm) as malicious. It is considered...

Malicious code in ing-feat-lu-luxtrust-scan-authentication (npm)

-= Per source details. Do not edit below this line.=- Source: ossf-package-analysis (7a039831f4f0151208c7b3baf088dc5e4ca8dd88bbcbc4b5317c3b5e278557e7) The OpenSSF Package Analysis project identified 'ing-feat-lu-luxtrust-scan-authentication' @ 200.0.1 (npm) as malicious. It is considered malicious....

CVE-2023-40603

Missing Authorization vulnerability in Gangesh Matta Simple Org Chart.This issue affects Simple Org Chart: from n/a through...

CVE-2023-40603

Missing Authorization vulnerability in Gangesh Matta Simple Org Chart.This issue affects Simple Org Chart: from n/a through...

Malicious code in leocare-new (npm)

-= Per source details. Do not edit below this line.=- Source: ossf-package-analysis (311899bcdd83d3cd308268641290fc8fd0f503d308fc1bbf7488b5f0fab734cb) The OpenSSF Package Analysis project identified 'leocare-new' @ 1.0.0 (npm) as malicious. It is considered malicious because: The package...

CVE-2023-40603 WordPress Simple Org Chart plugin <= 2.3.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in Gangesh Matta Simple Org Chart.This issue affects Simple Org Chart: from n/a through...

Malicious code in addthis-wordpress-plugin (npm)

-= Per source details. Do not edit below this line.=- Source: ossf-package-analysis (6d8ae72ce3501b8463193222bf9bebe2913ee52bf39fb10c8c9aa2f2049ebaa5) The OpenSSF Package Analysis project identified 'addthis-wordpress-plugin' @ 2.0.0 (npm) as malicious. It is considered malicious because: The...

Malicious code in ing-feat-grants-granting (npm)

-= Per source details. Do not edit below this line.=- Source: ossf-package-analysis (dd31269fee3651913ad04ebb491f4b2800b884e18bf1fe58bfdcaa172bedb657) The OpenSSF Package Analysis project identified 'ing-feat-grants-granting' @ 200.0.0 (npm) as malicious. It is considered malicious because: The...

CVE-2023-52177

Missing Authorization vulnerability in SoftLab Integrate Google Drive.This issue affects Integrate Google Drive: from n/a through...

CVE-2023-52177

Missing Authorization vulnerability in SoftLab Integrate Google Drive.This issue affects Integrate Google Drive: from n/a through...

CVE-2023-51526

Missing Authorization vulnerability in Brett Shumaker Simple Staff List.This issue affects Simple Staff List: from n/a through...

CVE-2023-51526

Missing Authorization vulnerability in Brett Shumaker Simple Staff List.This issue affects Simple Staff List: from n/a through...

CGA-8pcv-r7p9-7rjm

Bulletin has no...

CVE-2023-51526 WordPress Simple Staff List plugin <= 2.2.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in Brett Shumaker Simple Staff List.This issue affects Simple Staff List: from n/a through...

CVE-2023-52177 WordPress Integrate Google Drive plugin <= 1.3.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in SoftLab Integrate Google Drive.This issue affects Integrate Google Drive: from n/a through...

CGA-mw83-3mm4-xqwq

Bulletin has no...

CGA-jj45-rqfh-mhq4

Bulletin has no...

CGA-vxwm-jjvq-32cx

Bulletin has no...

CGA-p742-c49q-3j94

Bulletin has no...

CGA-hq78-8245-675v

Bulletin has no...

CGA-f849-gq83-8362

Bulletin has no...

CGA-9q75-mmfg-qh8f

Bulletin has no...

CGA-7xpg-x857-4qf9

Bulletin has no...

CGA-cf8c-xqvc-jhcx

Bulletin has no...

CGA-84j3-w824-wv4x

Bulletin has no...