CVE-2021-39972

MyHuawei-App has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability.Successful exploitation of this vulnerability could compromise confidentiality...

CVE-2021-39978

Telephony application has a SQL Injection vulnerability.Successful exploitation of this vulnerability may cause privacy and security issues...

Sql injection

Telephony application has a SQL Injection vulnerability.Successful exploitation of this vulnerability may cause privacy and security issues...

CVE-2021-39978

CVE-2021-39978 is a SQL injection vulnerability in the Telephony application, described in NVD as enabling privacy/security issues. At base, it is a network-exposed flaw with low attack complexity and no authentication required (CVSS v3.1: 7.5 HIGH; Confidentiality Impact: HIGH; Integrity/Availab...

CVE-2021-39978

Telephony application has a SQL Injection vulnerability.Successful exploitation of this vulnerability may cause privacy and security issues...

6 Ways to Delete Yourself From the Internet

You’ll never be able to get a clean slate—but you can significantly downsize your digital footprint...

Improper Access Control in microweber/microweber

Description Access Controls are used in an application to restrict a user to access only intended functions. If the user is able to access any feature/function which is not allowed by the application and user gets successful in this attempt, then it will be considered as broken access control...

X (Formerly Twitter): Discoverability by phone number/email restriction bypass

Summary: By using this vulnerability an attacker can find a twitter account by it's phone number/email even if the user has prohibited this in the privacy options. Description: The vulnerability allows any party without any authentication to obtain a twitter IDwhich is almost equal to getting the...

Krisp: Unsubscripe linkes leaked

@blackxxhat pointed to some users' unsubscribe links that have been indexed in webarchive as the users themselves have posted them in forums, social media, or other websites. We encourage our users not to post URLs from https://url5145.krisp.ai/ because those links may be used to manipulate their...

Happy 12th Birthday, KrebsOnSecurity.com!

KrebsOnSecurity.com celebrates its 12th anniversary today! Maybe "celebrate" is too indelicate a word for a year wracked by the global pandemics of COVID-19 and ransomware. Especially since stories about both have helped to grow the audience here tremendously in 2021. But this sites birthday also...

CVE-2021-36723

CVE-2021-36723 affects Emuse - eServices / eNvoice (Amios). The connected records describe a vulnerability caused by lack of identification mechanisms and predictable IDs, enabling an attacker to scrape all files and expose private personal information. Public sources (NVD/CNVD/etc.) reiterate ex...

2021 in Review, Part 1: 5 Cybersecurity Topics that Made News

Its been another chaotic year in cybersecurity, as protecting web applications and stopping sensitive data breaches remain top-of-mind issues and continue to generate headline news. As 2021 comes to a close, cybersecurity and all the industries it serves is dealing with an unprecedented zero-day...

[SECURITY] Fedora 34 Update: toxcore-0.2.13-1.fc34

Tox is a peer to peer serverless instant messenger aimed at making security and privacy easy to obtain for regular users. It uses NaCl for its encryption and authentication...

Huawei HarmonyOS Input Validation Error Vulnerability (CNVD-2021-103535)

Huawei HarmonyOS is an operating system from Huawei, a Chinese company that provides a microkernel-based, distributed operating system. Huawei HarmonyOS has a security vulnerability that could be exploited by attackers to compromise user privacy...

CVE-2019-8702

CVE-2019-8702 affects Apple platforms (Game Center) and was mitigated by a new entitlement. The issue allowed a local user to read a persistent account identifier. Fixes are listed in Apple security updates for iOS 12.4, tvOS 12.4, macOS Mojave 10.14.6, High Sierra 2019-004, and Sierra 2019-004. ...

Audio bugging with the Fisher Price Chatter Bluetooth Telephone

The Fisher Price Chatter Bluetooth Telephone is a reincarnation of a familiar kids toy. It acts as a Bluetooth headset, so the user can connect their smartphone to it and take calls using the kids phone handset. Cute! Unfortunately, little to no consideration has been given to privacy and securit...

DuckDuckGo developing a robust privacy-focused desktop browser

By Waqas According to DuckDuckGo, the desktop browser will work on both Mac and Windows devices. This is a post from HackRead.com Read the original post: DuckDuckGo developing a robust privacy-focused desktop browser...

Exploit for CVE-2022-26726

CVE-2022-26726 Affected Versions As a student, I have limi...

Meta Sues Hackers Behind Facebook, WhatsApp and Instagram Phishing Attacks

Facebook's parent company Meta Platforms on Monday said it has filed a federal lawsuit in the U.S. state of California against bad actors who operated more than 39,000 phishing websites that impersonated its digital properties to mislead unsuspecting users into divulging their login credentials...

CVE-2021-36887

Cross-Site Request Forgery CSRF vulnerability leading to Cross-Site Scripting XSS discovered in tarteaucitron.js – Cookies legislation & GDPR WordPress plugin versions = 1.5.4, vulnerable parameters "tarteaucitronEmail" and "tarteaucitronPass"...