Europe threatens to ban Facebook over data transfers to the US

If regulators have their way, data transfers from Facebook and Instagram between Europe and the United States could stop this summer. WhatsApp, another Meta service, will not be affected by the decision as it has a different data controller within Meta. This could force Meta, Facebooks parent...

How the FBI quietly added itself to criminals’ instant message conversations

Motherboard has disclosed some information about Operation Trojan Shield, in which the FBI intercepted messages from thousands of encrypted phones around the world. These messages are now used in courts across the world as corroborating evidence. Operation Trojan Shield The US Federal Bureau of...

Twitter fined $150M after using 2FA phone numbers for marketing

The Federal Trade Commission FTC and the Department of Justice DOJ have ordered Twitter to pay a $150M penalty for using users account security data deceptively. The deception violates an FTC order from 2011, that bars Twitter from "misleading consumers about the extent to which it protects the...

WordPress Shield Security plugin跨站脚本漏洞

WordPress is a set of blogging platforms developed by the WordPress Wordpress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. WordPress Shield Security plugin version 13.0.6 previously had a cross-site scripting vulnerability, whic...

CVE-2022-0211

The Shield Security WordPress plugin before 13.0.6 does not sanitise and escape admin notes, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml is disallowed...

CVE-2022-0211

The Shield Security WordPress plugin before 13.0.6 does not sanitise and escape admin notes, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml is disallowed...

CVE-2022-0211

The Shield Security WordPress plugin before 13.0.6 does not sanitise and escape admin notes, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml is disallowed...

CVE-2022-0211

The CVE-2022-0211 entry concerns the WordPress Shield Security plugin (before 13.0.6). The vulnerability is a stored XSS caused by the plugin not sanitising/escaping admin notes, which could let high-privilege users execute JavaScript even when unfiltered_html is disallowed. Public references in ...

CVE-2022-0211 Shield Security < 13.0.6 - Admin+ Stored Cross-Site Scripting

The Shield Security WordPress plugin before 13.0.6 does not sanitise and escape admin notes, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml is disallowed...

Shield Security < 13.0.6 - Admin+ Stored Cross-Site Scripting

The plugin does not sanitise and escape admin notes, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml is disallowed. PoC Put the following payload as an Admin Note Shield Security Tools Admin Notes:...

WordPress Shield Security plugin <= 13.0.5 - Stored Cross-Site Scripting (XSS) vulnerability

Stored Cross-Site Scripting XSS vulnerability discovered by Yoru Oni in WordPress Shield Security plugin versions = 13.0.5. Solution Update the WordPress Shield Security plugin to the latest available version at least 13.0.6...

Shield Security < 13.0.6 - Admin+ Stored Cross-Site Scripting

The plugin does not sanitise and escape admin notes, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml is disallowed. Put the following payload as an Admin Note Shield Security Tools Admin Notes: alert/XSS/;...

NVIDIA SHIELD Experience Resource Management Error Vulnerability

NVIDIA Shield Experience is a streaming media player from Nvidia, USA. NVIDIA SHIELD Experience suffers from a resource management error vulnerability that exists as a result of a use-after-free error in nvmap ioctl. An attacker could exploit this vulnerability to execute arbitrary code...

NVIDIA SHIELD Experience Buffer Overflow Vulnerability

NVIDIA SHIELD Experience is a streaming media player from Nvidia, USA. NVIDIA SHIELD Experience suffers from a buffer overflow vulnerability that originates from a boundary error in NVIDIA NVDEC in the NVIDIA Tegra kernel driver. An attacker could exploit the vulnerability to trigger memory...

NVIDIA SHIELD Experience Access Control Error Vulnerability

NVIDIA SHIELD Experience is a streaming media player from Nvidia, USA. NVIDIA SHIELD Experience suffers from an Access Control Error vulnerability that stems from improperly restricting access. An attacker could exploit this vulnerability to cause a denial of service...

NVIDIA SHIELD Experience Code Issue Vulnerability

NVIDIA Shield Experience is a streaming media player from Nvidia, USA. A code issue vulnerability exists in NVIDIA SHIELD Experience, which exists due to a NULL pointer dereference error in TrustZone. An attacker could exploit this vulnerability to conduct a denial of service DoS attack...

Security Bulletin: NVIDIA SHIELD TV - January 2022

NVIDIA has released a software security update for NVIDIA SHIELD® TV. This update addresses issues that may lead to information disclosure, denial of service, code execution, or escalation of privileges. To protect your system, download and install this software update through Settings About Syst...

Nvidia NVIDIA Shield TV 缓冲区错误漏洞

NVIDIA SHIELD Experience is a streaming media player from Nvidia, USA. NVIDIA SHIELD Experience suffers from a buffer overflow vulnerability that originates from a boundary error in NVIDIA NVDEC in the NVIDIA Tegra kernel driver. An attacker could exploit the vulnerability to trigger memory...

Nvidia NVIDIA Shield TV 访问控制错误漏洞

NVIDIA SHIELD Experience is a streaming media player from Nvidia, USA. NVIDIA SHIELD Experience suffers from an Access Control Error vulnerability that stems from improperly restricting access. An attacker could exploit this vulnerability to cause a denial of service...

NVIDIA SHIELD TV 代码问题漏洞

Nvidia NVIDIA Shield TV is a streaming media player from Nvidia Corporation. A code issue vulnerability exists in NVIDIA SHIELD TV that stems from a NULL pointer dereference error in NVHost. A malicious application can trigger a race condition and reboot the system, resulting in a DoS...