7082 matches found
CVE-2022-32562
An issue was discovered in Couchbase Server before 7.0.4. Operations may succeed on a collection using stale RBAC permission...
CVE-2022-32562
An issue was discovered in Couchbase Server before 7.0.4. Operations may succeed on a collection using stale RBAC permission...
CVE-2022-32562
An issue was discovered in Couchbase Server before 7.0.4. Operations may succeed on a collection using stale RBAC permission...
Couchbase Server security vulnerabilities
Couchbase Server is a distributed, open source NoSQL non-relational database from Couchbase, Inc. that supports data querying, full-text searching, and active global replication. A security vulnerability exists in versions of Couchbase Server prior to 7.0.4, which stems from the fact that...
New Privacy Framework for IoT Devices Gives Users Control Over Data Sharing
A newly designed privacy-sensitive architecture aims to enable developers to create smart home apps in a manner that addresses data sharing concerns and puts users in control over their personal information. Dubbed Peekaboo by researchers from Carnegie Mellon University, the system "leverages an...
Coffee app in hot water for constant tracking of user location
A mobile app violated Canadas privacy laws via some pretty significant overreach with its tracking of device owners. The violation will apparently not bring the app owners, Tim Hortons, any form of punishment. However, the fallout from this incident may hopefully serve as a warning to others with...
Period-Tracking and Fertility Apps Can Put Women Seeking Abortions at Risk
Apps collect sensitive data that could be subpoenaed by law enforcement or sold by data brokers...
Your Tim Hortons Coffee App Knew Where You Were at All Times
The Canada-based company illegally collected “vast amounts of location data,” such as every time a person entered or left their home, workplace, or another coffee shop...
ExpressVPN Removes VPN Servers in India Rejecting Data Collection Law
By Deeba Ahmed The new law requires service providers to store users web usage patterns, designated IP addresses, etc. for the… This is a post from HackRead.com Read the original post: ExpressVPN Removes VPN Servers in India Rejecting Data Collection Law...
CVE-2022-30510
School Dormitory Management System 1.0 is vulnerable to SQL Injection via reports/dailycollectionreport.php:59...
CVE-2022-30510
School Dormitory Management System 1.0 is vulnerable to SQL Injection via reports/dailycollectionreport.php:59...
CVE-2022-30510
School Dormitory Management System 1.0 is vulnerable to SQL Injection via reports/dailycollectionreport.php:59...
Sql injection
School Dormitory Management System 1.0 is vulnerable to SQL Injection via reports/dailycollectionreport.php:59...
The Race to Hide Your Voice
Voice recognition—and data collection—have boomed in recent years. Researchers are figuring out how to protect your privacy...
Information Disclosure Vulnerability in UTS Unified Threat Probe of Green Alliance Technology Group Co.
UTS Unified Threat Probe is to realize the collection and parsing work of traffic data, decoding, uploading and original traffic pcap data retention layer by layer, and support intrusion detection, virus detection and star sucking engine, etc., to provide unified threat detection capability. Gree...
School Dormitory Management System SQL Injection Vulnerability (CNVD-2022-66677)
School Dormitory Management System is a school dormitory management system. SQL injection vulnerability exists in School Dormitory Management System, which stems from a vulnerability to SQL injection in report/dailycollectionreport.php:59 attack. An attacker could use this vulnerability to execut...
School Dormitory Management System SQL Injection Vulnerability
School Dormitory Management System is a school dormitory management system. SQL injection vulnerability exists in School Dormitory Management System, which stems from a vulnerability to SQL injection in report/dailycollectionreport.php:59 attack. An attacker could use this vulnerability to execut...
PT-2022-20147
Name of the Vulnerable Software and Affected Versions School Dormitory Management System version 1.0 Description The issue concerns SQL Injection, which can be exploited via the "reports/daily collection report.php" endpoint. Specifically, the vulnerability is located at line 59 of this file...
Exploit for SQL Injection in School_Dormitory_Management_System_Project School_Dormitory_Management_System
CVE-2022-30510 School Dormitory Management System 1.0 - Unauth...
Command Injection
Overview magento/community-edition is a modern cloud eCommerce platform. Affected versions of this package are vulnerable to Command Injection via the Data collection endpoint. An attacker can execute arbitrary commands on the underlying system by uploading a specially crafted file. Remediation...