Aim denial of service vulnerability

A vulnerability in aimhubio/aim version 3.19.3 allows an attacker to cause an infinite loop by configuring the remote tracking server to point at itself. This results in the server endlessly connecting to itself, rendering it unable to respond to other connections...

GHSA-36H2-G4C8-9XCM Aim denial of service vulnerability

A vulnerability in aimhubio/aim version 3.19.3 allows an attacker to cause an infinite loop by configuring the remote tracking server to point at itself. This results in the server endlessly connecting to itself, rendering it unable to respond to other connections...

CVE-2024-6227

CVE-2024-6227 affects the open-source tool aimhubio/aim version 3.19.3. The vulnerability arises when the remote tracking server is configured to point at itself, causing the server to endlessly connect to itself. This self-loop leads to a denial of service by rendering the server unresponsive to...

CVE-2024-6227: Loop with Unreachable Exit Condition

A vulnerability in aimhubio/aim version 3.19.3 allows an attacker to cause an infinite loop by configuring the remote tracking server to point at itself. This results in the server endlessly connecting to itself, rendering it unable to respond to other connections...

Aim Resource Management Error Vulnerability

Aim is an easy-to-use and high-performance open source experiment tracker from Aim Open Source USA. Aim version 3.19.3 suffers from a Resource Management Error vulnerability that originates from allowing an attacker to cause a denial of service by configuring a remote tracking server to point to...

SUSE CVE-2016-2830

Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 preserve the network connection used for favicon resource retrieval after the associated browser window is closed, which makes it easier for remote web servers to track users by observing network traffic from multiple IP addresses...

PT-2020-21109

Name of the Vulnerable Software and Affected Versions donotinstallthis affected versions not specified Description The package donotinstallthis contains malicious code that runs a script as part of its installation process. This script contacts a remote service to track the number of installation...

Kernel: net: weak IP ID generation leads to remote device tracking

A flaw was found in the way the Linux kernel derived the IP ID field from a partial kernel space address returned by a nethashmix function. A remote user could observe a weak IP ID generation in this field to track Linux devices...

Kernel: net: weak IP ID generation leads to remote device tracking

A flaw was found in the way the Linux kernel derived the IP ID field from a partial kernel space address returned by a nethashmix function. A remote user could observe a weak IP ID generation in this field to track Linux devices...

Kernel: net: weak IP ID generation leads to remote device tracking

A flaw was found in the way the Linux kernel derived the IP ID field from a partial kernel space address returned by a nethashmix function. A remote user could observe a weak IP ID generation in this field to track Linux devices...

Kernel: net: weak IP ID generation leads to remote device tracking

A flaw was found in the way the Linux kernel derived the IP ID field from a partial kernel space address returned by a nethashmix function. A remote user could observe a weak IP ID generation in this field to track Linux devices...

Mobile stalkerware: a long history of detection

Recently, we have received an alarming question from many Malwarebytes users, asking, “Do you detect stalkerware?” The answer is an overwhelming, “Absolutely, and for good reason!” Moreover, we have been doing so for a long time, and are expanding our efforts in the months to come. Going back mor...

Apple iCloud for Windows and iTunes for Windows APNs Server Security Bypass Vulnerability

Apple iCloud for Windows and iTunes for Windows are both products of Apple Inc. Apple iCloud for Windows is a Windows-based cloud service that supports the storage of music, photos, apps, contacts, and more. iTunes for Windows is a suite of media player applications based on the Windows platform...

PT-2017-17539

Name of the Vulnerable Software and Affected Versions iOS versions prior to 11 Safari versions prior to 11 Description The issue involves the WebKit component and allows remote attackers to track Safari Private Browsing users by leveraging cookie mishandling. Recommendations For iOS versions prio...

CVE-2017-7144: Undefined Security Weakness

An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. The issue involves the "WebKit" component. It allows remote attackers to track Safari Private Browsing users by leveraging cookie mishandling...

Safari Tracking

The vulnerability of the Top Sites function in the Safari browser is related to improper storage of cookie files. Exploiting this vulnerability can allow a malicious actor to remotely track users...

Safari iOS Tracking

The vulnerability of the WebKit component in the Safari browser and the iOS operating system is related to improper data processing. Exploiting this vulnerability allows a malicious actor to remotely track users...

CVE-2016-1781

WebKit in Apple iOS before 9.3 and Safari before 9.1 mishandles attachment URLs, which makes it easier for remote web servers to track users via unspecified vectors...

CVE-2016-1781

WebKit in Apple iOS before 9.3 and Safari before 9.1 mishandles attachment URLs, which makes it easier for remote web servers to track users via unspecified vectors...

PT-2016-1536

Name of the Vulnerable Software and Affected Versions Apple Safari versions prior to 9.1 Description The issue is related to the Top Sites feature in Apple Safari, which mishandles cookie storage. This makes it easier for remote web servers to track users. The vulnerability can be exploited by a...