7946 matches found
Brave Software: UXss on brave browser via scan QR Code
A UXss vulnerability was found in Brave browser on Android 13, allowing an attacker to execute Xss on all open domains by scanning a QR code containing a malicious URL. The vulnerability could potentially allow attackers to steal victim's cookies and affect various websites...
K14190: TLS/DTLS 'Lucky 13' vulnerability CVE-2013-0169
Security Advisory Description A vulnerability exists in the TLS and DTLS protocols that may allow an attacker to recover plaintext from TLS/DTLS connections that use CBC-mode encryption. CVE-2013-0169 Note : Stream ciphers, such as RC4, are not vulnerable to this issue. Impact The vulnerability m...
CVE-2022-24785
creationtimestamp| type| source ---|---|--- 2023-02-16 11:40:08+00:00| seen| https://t.me/truesecator/4074 2024-07-07 14:05:55+00:00| published-proof-of-concept| https://t.me/cKure/13230 2024-07-08 16:59:47+00:00| seen| https://t.me/ctinow/219845 2024-07-09 16:34:26+00:00|...
Apple Mac OS X Security Update (HT213633)
Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Google Rolling Out Privacy Sandbox Beta on Android 13 Devices
Google announced on Tuesday that it's officially rolling out Privacy Sandbox on Android in beta to eligible mobile devices running Android 13. "The Privacy Sandbox Beta provides new APIs that are designed with privacy at the core, and don't use identifiers that can track your activity across apps...
SUSE CVE-2017-7868
International Components for Unicode ICU for C/C++ before 2017-02-13 has an out-of-bounds write caused by a heap-based buffer overflow related to the utf8TextAccess function in common/utext.cpp and the utextmoveIndex32 function...
SUSE CVE-2019-2978
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Networking. Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multip...
SUSE CVE-2022-42826
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13, iOS 16.1 and iPadOS 16, Safari 16.1. Processing maliciously crafted web content may lead to arbitrary code execution...
Design/Logic Flaw
In permissions of AndroidManifest.xml, there is a possible way to grant signature permissions due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...
CVE-2023-20927
In permissions of AndroidManifest.xml, there is a possible way to grant signature permissions due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...
CVE-2023-24188
creationtimestamp| type| source ---|---|--- 2023-02-13 22:30:03+00:00| seen| https://t.me/cibsecurity/58026 2025-03-21 18:19:48+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8389...
CVE-2023-25159
creationtimestamp| type| source ---|---|--- 2023-02-13 20:30:01+00:00| seen| https://t.me/cibsecurity/58014...
CVE-2023-23553
creationtimestamp| type| source ---|---|--- 2023-02-13 20:29:55+00:00| seen| https://t.me/cibsecurity/58011...
CVE-2023-0379
creationtimestamp| type| source ---|---|--- 2023-02-13 18:35:55+00:00| seen| https://t.me/cibsecurity/58003...
CVE-2023-0270
creationtimestamp| type| source ---|---|--- 2023-02-13 18:35:54+00:00| seen| https://t.me/cibsecurity/58002...
fazenda.aracaju.se.gov.br Cross Site Scripting vulnerability OBB-3193466
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2022-22655
creationtimestamp| type| source ---|---|--- 2023-02-13 16:16:26+00:00| published-proof-of-concept| Telegram/hcXE6cmA6olv0NYEfkfn-fUwIZsBG-xkMtO-sVCeym5OPco 2023-02-21 11:01:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/7793 2026-07-29 12:02:34+00:00| seen|...
CVE-2023-0808
creationtimestamp| type| source ---|---|--- 2023-02-13 14:29:39+00:00| seen| https://t.me/cibsecurity/57994...
marksplumbinginc.com Cross Site Scripting vulnerability OBB-3193224
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...