CVE-2016-1772: Exposure of Sensitive Information to an Unauthorized Actor

The Top Sites feature in Apple Safari before 9.1 mishandles cookie storage, which makes it easier for remote web servers to track users via unspecified vectors...

PT-2016-1527

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9.3 Safari versions prior to 9.1 Description The issue is related to the incorrect handling of data by the WebKit component in Safari and iOS. This can allow a remote attacker to track users. Recommendations For App...

SAP HANA DB远程跟踪泄露漏洞

No description provided by source...

iOS Tracking

The vulnerability of the CFNetwork Cookies component in the iOS operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to remotely track users...

PT-2015-1944

Name of the Vulnerable Software and Affected Versions Apple Safari versions prior to 6.2.8 Apple Safari versions 7.x prior to 7.1.8 Apple Safari versions 8.x prior to 8.0.8 Description The issue is related to the private-browsing implementation in WebKit, which does not prevent caching of HTTP...

CVE-2012-6337

The Track My Mobile feature in the SamsungDive subsystem for Android on Samsung Galaxy devices shows the activation of remote tracking, which might allow physically proximate attackers to defeat a product-recovery effort by tampering with this feature or its location data...

Design/Logic Flaw

The Track My Mobile feature in the SamsungDive subsystem for Android on Samsung Galaxy devices shows the activation of remote tracking, which might allow physically proximate attackers to defeat a product-recovery effort by tampering with this feature or its location data...

CVE-2012-6337

The Track My Mobile feature in the SamsungDive subsystem for Android on Samsung Galaxy devices shows the activation of remote tracking, which might allow physically proximate attackers to defeat a product-recovery effort by tampering with this feature or its location data...

CVE-2012-6337

The CVE-2012-6337 entry concerns the SamsungDive subsystem’s Track My Mobile feature on Samsung Galaxy devices (Android). The vulnerability relates to the activation of remote tracking, which could allow physically proximate attackers to defeat product-recovery efforts by tampering with the featu...

GPS based tracking service provided by Samsung vulnerable to thieves

Samsung which is currently believed to the highest Smartphones Seller in the World is now providing a Remote tracking solution in all its smartphones to Track the lost phone with the name "Samsung Dive". The Service is based on the Architecture which primarily acquires precise location of the sma...

CVE-2012-0640: Exposure of Sensitive Information to an Unauthorized Actor

WebKit in Apple Safari before 5.1.4 does not properly implement "From third parties and advertisers" cookie blocking, which makes it easier for remote web servers to track users via a cookie...

CVE-2011-0231

CFNetwork in Apple Mac OS X before 10.7.2 does not properly follow an intended cookie-storage policy, which makes it easier for remote web servers to track users via a cookie, related to a "synchronization issue."...

CVE-2011-0159

The Safari Settings feature in Safari in Apple iOS 4.x before 4.3 does not properly implement the clearing of cookies during execution of the Safari application, which might make it easier for remote web servers to track users by setting a cookie...

PT-2011-3114

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 4.3 Apple TV versions prior to 4.2 Description The issue concerns the stateless address autoconfiguration functionality in the IPv6 networking implementation. It allows remote IPv6 servers to track users by logging...

CVE-2010-3804

The JavaScript implementation in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, uses a weak algorithm for generating values of random numbers, which makes it easier for remote attackers to track a user by predicting a value, a...

PT-2010-5090

Name of the Vulnerable Software and Affected Versions: Apple Safari affected versions not specified Description: The JavaScript implementation in WebKit, used by Apple Safari, utilizes a weak random number generation algorithm. This weakness simplifies the task for remote attackers to track users...

CVE-2010-3804: Undefined Security Weakness

The JavaScript implementation in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, uses a weak algorithm for generating values of random numbers, which makes it easier for remote attackers to track a user by predicting a value, a...

CVE-2010-1834

CFNetwork in Apple Mac OS X 10.6.x before 10.6.5 does not properly validate the domains of cookies, which makes it easier for remote web servers to track users by setting a cookie that is associated with a partial IP address...

PT-2010-3462

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions 10.6.x through 10.6.4 Description The issue concerns the improper validation of cookie domains by CFNetwork, making it easier for remote web servers to track users by setting a cookie associated with a partial IP addres...

CVE-2010-1755: Undefined Security Weakness

Safari in Apple iOS before 4 on the iPhone and iPod touch does not properly implement the Accept Cookies preference, which makes it easier for remote web servers to track users via a cookie...