7064 matches found
Google Drops Cookie Prompt in Chrome, Adds IP Protection to Incognito
Google on Tuesday revealed that it will no longer offer a standalone prompt for third-party cookies in its Chrome browser as part of its Privacy Sandbox initiative. "We've made the decision to maintain our current approach to offering users third-party cookie choice in Chrome, and will not be...
PT-2025-17706 · Gitlab · Gitlab Ce/Ee
Name of the Vulnerable Software and Affected Versions: GitLab EE/CE versions 16.6 through 17.9.7 GitLab EE/CE versions 17.10 through 17.10.5 GitLab EE/CE versions 17.11 through 17.11.1 Description: An issue has been discovered in GitLab EE/CE that could allow an attacker to track users' browsing...
CVE-2025-43949
creationtimestamp| type| source ---|---|--- 2025-04-22 21:09:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lngln2jn4f2d 2025-04-22 22:35:24+00:00| seen| https://t.me/cvedetector/23547 2025-04-23 15:48:35+00:00| seen|...
CVE-2025-46243
creationtimestamp| type| source ---|---|--- 2025-04-22 10:03:04+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12824 2025-04-22 11:05:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnfju6kgeq2c 2025-04-22 14:13:30+00:00| seen|...
Bytesrevealer - Online Reverse Enginerring Viewer
Bytes Revealer is a powerful reverse engineering and binary analysis tool designed for security researchers, forensic analysts, and developers. With features like hex view, visual representation, string extraction, entropy calculation, and file signature detection, it helps users uncover hidden...
[SECURITY] Fedora 40 Update: uv-0.6.14-3.fc40
An extremely fast Python package installer and resolver, written in Rust. Designed as a drop-in replacement for common pip and pip-tools workflows. Highlights: =E2=80=A2 =E2=9A=96=EF=B8=8F Drop-in replacement for common pip, pip-tools, and virtualenv commands. =E2=80=A2 =E2=9A=A1=EF=B8=8F 10-100x...
CVE-2025-40364
creationtimestamp| type| source ---|---|--- 2025-04-18 13:58:27+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12426 2025-04-18 14:23:03+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114359414511438148 2025-04-18 14:27:11+00:00| seen|...
CVE-2025-29453
creationtimestamp| type| source ---|---|--- 2025-04-17 21:58:23+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12365 2025-04-17 22:53:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ln274q7dzc2l 2025-04-18 03:12:18+00:00| seen| https://t.me/cvedetector/23300...
Care what you share
Welcome to this week's edition of the Threat Source newsletter. As we navigate our daily routines, certain tasks become second nature to us, especially if they are integral to our professions. However, what feels instinctive to one person might be foreign to another. This disparity is akin to a...
CVE-2025-27293
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in webparexapp Shipmozo Courier Tracking webparex allows Reflected XSS.This issue affects Shipmozo Courier Tracking: from n/a through = 1.0...
CVE-2025-27293 WordPress Shipmozo Courier Tracking plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in webparexapp Shipmozo Courier Tracking webparex allows Reflected XSS.This issue affects Shipmozo Courier Tracking: from n/a through = 1.0...
CVE-2025-27293 WordPress Shipmozo Courier Tracking plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in webparexapp Shipmozo Courier Tracking webparex allows Reflected XSS.This issue affects Shipmozo Courier Tracking: from n/a through = 1.0...
CVE-2025-27293
The CVE-2025-27293 entry concerns the WordPress plugin Shipmozo Courier Tracking (Shipmozo Courier Tracking). The vulnerability is an improper input neutralization that enables a Reflected Cross-Site Scripting (XSS) attack in the plugin, affecting versions from n/a up to 1.0. The CVSS vector is C...
SUSE CVE-2024-58092
In the Linux kernel, the following vulnerability has been resolved: nfsd: fix legacy client tracking initialization Get rid of the nfsd4legacytrackingops-init call in checkforlegacymethods. That will be handled in the caller nfsd4clienttrackinginit. Otherwise, we'll wind up calling...
PT-2025-17059 · Unknown · Shipmozo Courier Tracking
Name of the Vulnerable Software and Affected Versions: Shipmozo Courier Tracking versions n/a through 1.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting', which allows Reflected XSS. This type of issue can occu...
WordPress plugin Shipmozo Courier Tracking 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
CVE-2025-31478
creationtimestamp| type| source ---|---|--- 2025-04-16 22:44:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmxo5cirug2r 2025-04-17 00:48:19+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114350548475440645 2025-04-17 02:06:42+00:00| seen|...
CVE-2025-28072
creationtimestamp| type| source ---|---|--- 2025-04-16 22:43:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmxo3kkwyh2h 2025-04-17 00:25:53+00:00| seen| https://t.me/cvedetector/23177 2025-04-17 13:57:54+00:00| published-proof-of-concept|...
DEBIAN-CVE-2025-23132
In the Linux kernel, the following vulnerability has been resolved: f2fs: quota: fix to avoid warning in dquotwritebackdquots F2FS-fs dm-59: checkpoint=enable has some unwritten data. ------------ cut here ------------ WARNING: CPU: 6 PID: 8013 at fs/quota/dquot.c:691...