375 matches found
CVE-2019-15620
Improper access control in Nextcloud Talk 6.0.3 leaks the existance and the name of private conversations when linked them to another shared item via the projects feature...
CVE-2019-15620
Improper access control in Nextcloud Talk 6.0.3 leaks the existance and the name of private conversations when linked them to another shared item via the projects feature...
Apple Updates Privacy Policies After Siri Audio Recording Backlash
Apple is taking steps to improve the privacy of audio collected by its Siri voice assistant, on the heels of backlash around a program that let contractors listen into Siri conversations. On Wednesday, the phone giant apologized for violating users’ privacy through the program, which was...
Whistleblower says Apple contractors listen to your Siri conversions
By Uzair Amir A whistleblower is claiming that the tech giant Apple is listening to Siri recording and allegedly, the Apple Watch is also playing a big role in collecting these records. This is a post from HackRead.com Read the original post: Whistleblower says Apple contractors listen to your Si...
CVE-2019-13974
LayerBB 1.1.3 allows conversations.php/cmd/new CSRF...
CVE-2019-13974
LayerBB 1.1.3 allows conversations.php/cmd/new CSRF...
CVE-2019-13974
LayerBB 1.1.3 allows conversations.php/cmd/new CSRF...
Moodle Information Disclosure Vulnerability (CNVD-2019-35819)
Moodle is a learning platform designed to provide educators, administrators, and learners with a powerful, secure, and integrated system for creating personalized learning environments. An information disclosure vulnerability exists in Moodle versions prior to 3.7 and 3.6.4, which stems from the...
Design/Logic Flaw
A flaw was found in Moodle before versions 3.7, 3.6.4. A web service fetching messages was not restricted to the current user's conversations...
Concrete CMS: Stored XSS in Conversations (both client and admin) when Active Conversation Editor is set to "Rich Text"
Hi concrete5 Team, Summary I've identified Stored XSS vulnerability in concrete5 Conversations module, when Active Conversation Editor is set to "Rich Text". An attacker is able to input malicious JavaScript, which is run in both client agains any site visitor as well as against any user logged...
Code injection
esoTalk 1.0.0g4 has XSS via the PATHINFO to the conversations/ URI...
CVE-2015-9285
CVE-2015-9285 affects esoTalk 1.0.0g4. The vulnerability is a reflected XSS via PATH_INFO to the conversations/ URI. NVD CVSS data: CVSS v2 base score 4.3 (MEDIUM) with network attack vector and no confidentiality impact but partial integrity impact; CVSS v3 base score 6.1 (MEDIUM) with network a...
CVE-2015-9285: Improper Neutralization of Input During Web Page Generation
esoTalk 1.0.0g4 has XSS via the PATHINFO to the conversations/ URI...
Vulnerability in French Government Tchap Chat App
A researcher found a vulnerability in the French government WhatsApp replacement app: Tchap. The vulnerability allows anyone to surreptitiously join any conversation. Of course the developers will fix this vulnerability. But it is amusing to point out that this is exactly the backdoor that GCHQ i...
CVE-2018-17997
LayerBB 1.1.1 contains a Cross‑Site Scripting (XSS) vulnerability in the titles of conversations (PMs). The underlying issue is improper handling of input in conversation titles, enabling an attacker to inject scripts that may execute in a victim’s browser. Reports across multiple sources (NVD/Re...
CVE-2018-17997: Improper Neutralization of Input During Web Page Generation
LayerBB 1.1.1 allows XSS via the titles of conversations PMs...
Judging Facebook's Privacy Shift
Facebook is making a new and stronger commitment to privacy. Last month, the company hired three of its most vociferous critics and installed them in senior technical positions. And on Wednesday, Mark Zuckerberg wrote that the company will pivot to focus on private conversations over the public...
Smart Ski Helmet Headphone Flaws Leak Personal, GPS Data
Researchers have found a slew of vulnerabilities in a pair of smart headphones designed to fit under ski helmets. The flaws could allow a bad actor to view victims’ personal information, track them and even listen to their private conversations via the headphones’ walkie-talkie function, which us...
iOS 12.1 passcode bypass hack discovered just few hours after its release
By Waqas Only a few hours have passed since the new iOS 12.1’s release and already its passcode bypass hack has been identified. Through the hack, the attacker can see all the private conversations on a locked iPhone. The passcode bypass hack has been discovered by a Spanish security researcher...