FetLife: Able to see location coordinates in any event without permission to do so

The vulnerability allowed attackers to view the location coordinates of events in the response of the /events/event-id endpoint, even when the event host had hidden the exact address from non-RSVP users. This was possible because the coordinates were included in the response regardless of the...

PT-2024-4838 · Apple · Macos Sonoma +3

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 17.5 iPadOS versions prior to 17.5 macOS Sonoma versions prior to 14.5 Description: The issue allows an app to bypass Privacy preferences due to insufficient input validation in the Sync Services of iPadOS, iOS, and macO...

SAP ABAP Platform Authorization Issues Vulnerability

SAP ABAP Platform is an ABAP-based SAP solution from SAP. SAP ABAP Platform has an authorization issue vulnerability that stems from a lack of authorization checks. An attacker with a business user account in SAP ABAP Platform could exploit the vulnerability to change the privacy settings of a jo...

Authorization

Due to missing authorization check, attacker with business user account in SAP ABAP Platform - version 758, 795, can change the privacy setting of job templates from shared to private. As a result, the selected template would only be accessible to the owner...

CVE-2024-27900

CVE-2024-27900 affects SAP ABAP Platform (versions 758 and 795). The vulnerability stems from a missing authorization check that allows a user with a business- user account to change a job template’s privacy setting from shared to private, restricting access to the owner. Documented impact confir...

SAP ABAP Platform 安全漏洞

SAP ABAP Platform is an ABAP-based SAP solution from SAP. SAP ABAP Platform has an authorization issue vulnerability that stems from a lack of authorization checks. An attacker with a business user account in SAP ABAP Platform could exploit the vulnerability to change the privacy settings of a jo...

The vulnerability of Core Data components in iOS, watchOS, tvOS, iPadOS, macOS operating systems allows attackers to circumvent privacy settings.

The vulnerability of Core Data components in iOS, watchOS, tvOS, iPadOS, and macOS is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to bypass privacy settings...

Signal to shield user phone numbers by default

Chat app Signal will shield user’s phone numbers by default from now on. And, it will no longer be necessary to exchange phone numbers when people want to connect through the app. In November, we reported that Signal was testing usernames to eliminate the need to share your phone number. Signal h...

Signal Introduces Usernames, Allowing Users to Keep Their Phone Numbers Private

End-to-end encrypted E2EE messaging app Signal said it's piloting a new feature that allows users to create unique usernames not to be confused with profile names and keep the phone numbers away from prying eyes. "If you use Signal, your phone number will no longer be visible to everyone you chat...

The vulnerability of the check_privacy_settings function in the WordPress plugin’s GDPR content management system allows a hacker to execute XSS attacks.

The vulnerability of the checkprivacysettings function in the WordPress plugin and the WordPress content management system exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to carry out XSS attacks remotely...

The vulnerability of the Privacy Preferences component in macOS operating systems allows a violator to circumvent privacy settings.

The vulnerability of the Privacy Preferences component in macOS operating systems relates to the tracking of symbolic links. Exploiting this vulnerability could allow a hacker to circumvent privacy settings...

Chrome's "Enhanced Ad Privacy": What you need to know

Users of Google's Chrome web browser may wish to dig into their privacy settings as a new feature regarding advertising privacy slowly rolls out to the masses. Googles "Enhanced Ad Privacy" feature may soon appear in your browser, tied to choices regarding a new Chrome feature named Topics. This ...

CVE-2022-46715

A logic issue was addressed with improved checks. This issue is fixed in iOS 16.1 and iPadOS 16. An app may be able to bypass certain Privacy preferences...

Edge browser feature sends images you view back to Microsoft

A relatively new service provided by Microsofts browser Edge sends images you've viewed online back to Microsoft. A new feature labelled Enhance images in Microsoft Edge has raised some privacy concerns. The feature is designed to upscale low resolution images, making them sharper, and improving...

PT-2023-2893 · Apple · Macos Monterey +8

Name of the Vulnerable Software and Affected Versions: watchOS versions prior to 9.5 tvOS versions prior to 16.5 macOS Ventura versions prior to 13.4 iOS versions prior to 15.7.6 and prior to 16.5 iPadOS versions prior to 15.7.6 and prior to 16.5 macOS Big Sur versions prior to 11.7.7 macOS...

How to Make Sure You’re Not Accidentally Sharing Your Location

Keep your movements private...

Apple macOS Monterey 安全漏洞

Apple macOS Monterey is the 18th major release of Apple's macOS for the Macintosh desktop operating system. A security vulnerability exists in versions of Apple macOS Monterey prior to 12.6.3 that stems from a memory handling issue where applications may be able to bypass privacy preferences...

TikTok: IDOR for changing privacy settings on any memories

Vulnerability description not provided...

Apple macOS Big Sur 安全漏洞

Apple macOS Big Sur is the 17th major release of macOS, the operating system used by Apple Inc. for MACs in the United States. A security vulnerability exists in Apple macOS Big Sur versions prior to 11.7, which stems from the possibility that applications may be able to bypass privacy preference...

How to set up an iPhone for your kids

Thanks to Thomas Reed for his expertise and guidance. This is it. After much hemming and hawing, you've finally given in and bought your child their first smartphone, which you plan to give to them before the school year starts. But before you give it to them, it's worth sitting them down to talk...