401 matches found
Design/Logic Flaw
x26-Cogs is a repository of cogs made by Twentysix for the Red Discord bot. Among these cogs is the Defender cog, a tool for Discord server moderation. A vulnerability in the Defender cog prior to version 1.10.0 allows users with admin privileges to issue commands as other users who share the sam...
CVE-2022-23604
Affected software: x26-Cogs Defender cog for the Red Discord bot. Vulnerability: pre-1.10.0 Defender allowed users with admin privileges to issue commands as other users on the same server, enabling potential privilege escalation to bot-owner restricted commands if a bot owner shares the server. ...
WhatsApp’s End-to-End Encryption Isn’t Actually Broken
End-to-end encryption isn’t designed to secure messages against the intended recipients. New revelations about WhatsApp’s moderator access to messages last week might seem like they run counter to the company’s privacy-forward brand, but a closer look shows the messaging service’s privacy...
uListing < 2.0.6 - Modify User Roles via CSRF
An Add/Edit User Roles via CSRF vulnerability was discovered in the plugin. Missing WPNonce security tokens https://codex.wordpress.org/WordPressNonces . PoC | CSRF | Add/Edit User Roles: POST /wp-admin/admin-ajax.php HTTP/2 Host: example.com Cookie: cookies User-Agent: Mozilla/5.0 Content-Type:...
TikTok Quietly Updated Its Privacy Policy to Collect Users' Biometric Data
Popular short-form video-sharing service TikTok quietly revised its privacy policy in the U.S., allowing it to automatically collect biometric information such as faceprints and voiceprints from the content its users post on the platform. The policy change, first spotted by TechCrunch, went into...
CVE-2021-33506
jitsi-meet-prosody in Jitsi Meet before 2.0.5963-1 does not ensure that restrictroomcreation is set by default. This can allow an attacker to circumvent conference moderation...
CVE-2021-33506
jitsi-meet-prosody in Jitsi Meet before 2.0.5963-1 does not ensure that restrictroomcreation is set by default. This can allow an attacker to circumvent conference moderation...
Design/Logic Flaw
jitsi-meet-prosody in Jitsi Meet before 2.0.5963-1 does not ensure that restrictroomcreation is set by default. This can allow an attacker to circumvent conference moderation...
CVE-2021-33506
jitsi-meet-prosody in Jitsi Meet before 2.0.5963-1 does not ensure that restrictroomcreation is set by default. This can allow an attacker to circumvent conference moderation...
CVE-2021-33506
jitsi-meet-prosody in Jitsi Meet before 2.0.5963-1 does not ensure that restrictroomcreation is set by default. This can allow an attacker to circumvent conference moderation...
CVE-2021-33506
CVE-2021-33506 affects jitsi-meet-prosody in Jitsi Meet prior to 2.0.5963-1, where restrict_room_creation is not enabled by default. This misconfiguration can allow an attacker to circumvent conference moderation. Connected sources confirm the issue across multiple vectors (Red Hat CVE page and C...
How chat platforms are using Machine Learning for content moderation?
By Uzair Amir More and more online services are using Machine Learning ML, the method of data analysis that will automate the building of analytical mode. This is a post from HackRead.com Read the original post: How chat platforms are using Machine Learning for content moderation?...
WordPress <= 2.0.11 CSRF Vulnerability
WordPress is prone to a cross-site request forgery CSRF vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...
Researcher Builds Parler Archive Amid Amazon Suspension
A security researcher said she has scraped and is archiving 99 percent of Parler’s public posts, as the social-media network goes offline following suspensions from Amazon, Apple and Google. Archived content includes public posts from the social-media site. These posts reportedly included Parler...
Trump and the Limits of Content Moderation
The president’s televised encouragement of white supremacy and political violence was a reminder that social media didn’t create these problems...
Twitter Hacked in Bitcoin Scam
It started with one weird tweet. Then another. Quickly, some of the most prominent accounts on Twitter were all sending out the same message; I am giving back to the community. All Bitcoin sent to the address below will be sent back double! If you send $1,000, I will send back $2,000. Only doing...
Games Don't Do Enough to Combat Toxicity at Launch
Riot Games has cutting-edge moderation tools at its disposal. Few of them are present in Valorant, which launched this week...
OLX: Bypass Rejected ads so user can view it as normal live ad.
A logic error allowed creating chats from ads that were still pending moderation or were rejected...