we can still send the photo as greeting card even the albums is locked

1 admin create a album and upload a photo 2 member-1 login and send the photo as greeting card to member-2 3 member-1 use burpsuite hijack the request, which can be like POST /admprogram/modules/ecards/ecardsend.php HTTP/1.1...

DRUPAL-CONTRIB-2023-018

This module provides social media share & follow buttons. The module doesn't sufficiently check access to a node when retrieving the label of an AddToAny block. This vulnerability is mitigated by the fact it requires the node ID to be passed via the route, requiring another module or specific...

Pydio Cells 4.1.2 - Unauthorised Role Assignments

Exploit Title: Pydio Cells 4.1.2 - Unauthorised Role Assignments Affected Versions: 4.1.2 and earlier versions Fixed Versions: 4.2.0, 4.1.3, 3.0.12 Vulnerability Type: Privilege Escalation Security Risk: high Vendor URL: https://pydio.com/ Vendor Status: notified Advisory URL:...

Pydio Cells 4.1.2 - Cross-Site Scripting via File Download Vulnerability

Exploit Title: Pydio Cells 4.1.2 - Cross-Site Scripting XSS via File Download Affected Versions: 4.1.2 and earlier versions Fixed Versions: 4.2.0, 4.1.3, 3.0.12 Vulnerability Type: Cross-Site Scripting Security Risk: high Vendor URL: https://pydio.com/ Vendor Status: notified Advisory URL:...

Keyboard and typing issue on shared screen of Microsoft Teams

When a host opens Teams on a Windows VDA and starts a meeting with an invitee from a Windows environment the invitee can use a physical Windows machine, a remote Windows by RDP, or a Windows VDA, after the host shares the screen with the invitee and gives control to the invitee, the host from the...

Pydio Cells 4.1.2 - Unauthorised Role Assignments Vulnerability

Exploit Title: Pydio Cells 4.1.2 - Unauthorised Role Assignments Affected Versions: 4.1.2 and earlier versions Fixed Versions: 4.2.0, 4.1.3, 3.0.12 Vulnerability Type: Privilege Escalation Security Risk: high Vendor URL: https://pydio.com/ Vendor Status: notified Advisory URL:...

CVE-2023-33741

Macrovideo v380pro v1.4.97 shares the device id and password when sharing the device...

CVE-2023-33741

Macrovideo v380pro v1.4.97 shares the device id and password when sharing the device...

CVE-2023-33741

Macrovideo v380pro v1.4.97 shares the device id and password when sharing the device...

Design/Logic Flaw

Macrovideo v380pro v1.4.97 shares the device id and password when sharing the device...

CVE-2023-33175 ToUI allows user-specific variables to be shared between users

ToUI is a Python package for creating user interfaces websites and desktop apps from HTML. ToUI is using Flask-Caching SimpleCache to store user variables. Websites that use Website.uservars property. It affects versions 2.0.1 to 2.4.0. This issue has been patched in version 2.4.1...

PT-2023-24466 · Unknown · Macrovideo V380Pro

Name of the Vulnerable Software and Affected Versions: Macrovideo v380pro version 1.4.97 Description: The issue concerns the sharing of device id and password when a device is shared. Recommendations: For Macrovideo v380pro version 1.4.97, consider restricting device sharing until a fix is...

CVE-2023-33741

Macrovideo v380pro v1.4.97 shares the device id and password when sharing the device...

CVE-2023-33741

CVE-2023-33741 affects Macrovideo v380pro (v1.4.97). Multiple connected sources confirm a flaw where sharing a device leaks the device id and password. CVSS v3.1 base score 7.5 (HIGH) with network attack vector and no user interaction. Public details describe credentials exposure during sharing, ...

Macrovideo v380pro 安全漏洞

Macrovideo v380pro is a video surveillance service from Macrovideo. A security vulnerability exists in Macrovideo v380pro version 1.4.97, which stems from a deviceid and password being sent out when sharing a device...

Netflix’s Password-Sharing Crackdown Has Hit the US

TikTok user data is exposed to Chinese ByteDance employees, a screen recording app goes rogue in Google Play, and privacy groups want Slack to expand encryption...

Netflix’s Password Sharing Crackdown Goes Global: 103 Countries Affected

By Habiba Rashid Netflix is sending emails addressing password sharing between households, and users are not happy about it as CancelNetflix trends on social media. This is a post from HackRead.com Read the original post: Netflixs Password Sharing Crackdown Goes Global: 103 Countries Affected...

CISA and Partners Update the #StopRansomware Guide, Developed through the Joint Ransomware Task Force (JRTF)

Today, CISA, the Federal Bureau of Investigation FBI, the National Security Agency NSA, and the Multi-State Information Sharing and Analysis Center MS-ISAC published an updated version of the StopRansomware Guide, as ransomware actors have accelerated their tactics and techniques since its initia...

Meta’s $1.3 Billion Fine Is a Strike Against Surveillance Capitalism

The record-breaking GDPR penalty for data transfers to the US could upend Meta's business and spur regulators to finalize a new data-sharing agreement...

Apache OpenMeetings Authorization Issues Vulnerability

Apache OpenMeetings is a multilingual, customizable video conferencing and collaboration system from the Apache Foundation. The product supports audio, video and allows users to view each participant's desktop and more. An authorization issue vulnerability exists in Apache OpenMeetings versions...