Apple Music 安全漏洞

Apple Music is a music program by the American company Apple Apple. A security vulnerability exists in Apple Music versions prior to 3.5.0. An attacker exploiting the vulnerability could track user activity...

CVE-2021-46841

This issue was addressed by using HTTPS when sending information over the network. This issue is fixed in Apple Music 3.5.0 for Android. An attacker in a privileged network position can track a user's activity...

WordPress plugin User Activity 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

CVE-2021-46841

This issue was addressed by using HTTPS when sending information over the network. This issue is fixed in Apple Music 3.5.0 for Android. An attacker in a privileged network position can track a user's activity...

Malicious code in libproofpong (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 569c0346cc131d9597c6f7d9514f9fc19f2769014c3c11a2539ce238efcf5f44 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

DNA testing company fined after customer data theft

DNA Diagnostics Center DDC, an Ohio-based private DNA testing company, last week reached a settlement deal with the Ohio and Pennsylvania state attorneys general in relation to a 2021 breach that saw the theft of 45,000 residents' personal details. Overall the attack compromised over 2.1 million...

Finding forensics breadcrumbs in Android image storage

Introduction Our digital forensics work is wide and varied. Often there’s very little that we can talk about in the public domain, so when I find something that we can share I get a bit excited. In this post I’ll be talking about image scanning apps, and how to reverse engineer them to pinpoint...

Moodle 4.0.x < 4.0.4 Multiple Vulnerabilities

The version of Moodle installed on the remote host is 3.9.x prior to 3.9.17, 3.11.x prior to 3.11.10 or 4.0.x prior to 4.0.4. It is, therefore, affected by multiple vulnerabilities: - A stored Cross-Site Scripting XSS and page Denial of Service DoS vulnerabilities due to recursive rendering in...

Moodle 3.9.x < 3.9.12 Multiple Vulnerabilities

The version of Moodle installed on the remote host is 3.9.x prior to 3.9.12, 3.10.x prior to 3.10.9 or 3.11.x prior to 3.11.5. It is, therefore, affected by multiple vulnerabilities: - An SQL injection vulnerability in the h5p activity web service responsible for fetching user attempt data...

CVE-2023-20075

creationtimestamp| type| source ---|---|--- 2023-02-17 16:30:07+00:00| seen| https://t.me/truesecator/4084 2023-03-01 12:39:42+00:00| seen| https://t.me/cibsecurity/59216 2026-07-16 19:00:17+00:00| seen| Telegram/HeX7ZwgfClnVMcMjrebWQOf2GFN8BPONV6LFlglDXbYYrI 2026-07-17 00:00:33+00:00| seen|...

CVE-2022-27170

creationtimestamp| type| source ---|---|--- 2023-02-17 00:12:45+00:00| seen| https://t.me/cibsecurity/58397...

CVE-2023-23752

creationtimestamp| type| source ---|---|--- 2023-02-16 20:12:30+00:00| seen| https://t.me/cibsecurity/58339 2023-02-17 05:52:00+00:00| published-proof-of-concept| https://t.me/proxybar/1389 2023-02-17 06:10:11+00:00| published-proof-of-concept| https://t.me/crackcodes/2613 2023-02-17...

CVE-2022-27890

creationtimestamp| type| source ---|---|--- 2023-02-16 18:12:26+00:00| seen| https://t.me/cibsecurity/58321...

CVE-2021-33925

creationtimestamp| type| source ---|---|--- 2023-02-16 00:37:09+00:00| seen| https://t.me/cibsecurity/58300...

SUSE CVE-2013-1735

Use-after-free vulnerability in the mozilla::layout::ScrollbarActivity function in Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 allows remote attackers to execute arbitrary code via vectors...

SUSE CVE-2013-1846

The moddavsvn Apache HTTPD server module in Subversion 1.6.x before 1.6.21 and 1.7.0 through 1.7.8 allows remote authenticated users to cause a denial of service NULL pointer dereference and crash via a LOCK on an activity URL...

SUSE CVE-2013-1849

The moddavsvn Apache HTTPD server module in Subversion 1.6.x through 1.6.20 and 1.7.0 through 1.7.8 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a PROPFIND request for an activity URL...

SUSE CVE-2017-15576

Redmine before 3.2.6 and 3.3.x before 3.3.3 mishandles Time Entry rendering in activity views, which allows remote attackers to obtain sensitive information...

SUSE CVE-2018-5118

The screenshot images displayed in the Activity Stream page displayed when a new tab is opened is created from the meta tags of websites. An issue was discovered where the page could attempt to create these images through "file:" URLs from the local file system. This loading is blocked by the...

SUSE CVE-2018-5179

A service worker can send the activate event on itself periodically which allows it to run perpetually, allowing it to monitor activity by users. Affects all versions prior to Firefox 60...