Location, name, and photos of random kids shown to parents in child tracker mix up

Not one but several worried parents that tracked their children by using T-Mobile tracking devices suddenly found that they were looking at the location of random other children. And could not locate their own. T-Mobile sells a small GPS tracker called SyncUP, which can be used to track, among...

CVE-2025-2945

creationtimestamp| type| source ---|---|--- 2025-04-03 12:35:05+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10196 2025-04-03 13:27:29+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114274261341230556 2025-04-03 13:27:29+00:00| seen|...

CVE-2024-40864

The issue was addressed with improved handling of protocols. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.2, watchOS 11.2. An attacker in a privileged network position may be able to track a user's activity...

CVE-2025-30425

This issue was addressed through improved state management. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, tvOS 18.4, watchOS 11.4. A malicious website may be able to track users in Safari private browsing mode...

CVE-2025-21988

In the Linux kernel, the following vulnerability has been resolved: fs/netfs/readcollect: add to next-prevdonated If multiple subrequests donate data to the same "next" request depending on the subrequest completion order, each of them would overwrite the prevdonated field, causing data corruptio...

CVE-2025-3014

Insecure Direct Object References IDOR in access control in Tracking 2.1.4 on NightWolf Penetration Testing allows an attacker to access via manipulating request parameters or object references...

CVE-2025-3066

creationtimestamp| type| source ---|---|--- 2025-04-02 03:01:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llsfiyxem627 2025-04-02 04:07:09+00:00| seen| https://t.me/cvedetector/21839 2025-04-02 05:51:40+00:00| seen|...

CVE-2025-31553

creationtimestamp| type| source ---|---|--- 2025-04-01 21:40:34+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3llrtlj6mrq2s 2025-04-01 22:57:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llrxudohnc24 2025-04-01 23:48:41+00:00| seen|...

CVE-2025-21958

In the Linux kernel, the following vulnerability has been resolved: Revert "openvswitch: switch to per-action label counting in conntrack" Currently, ovsctsetlabels is only called for confirmed conntrack entries ct within ovsctcommit. However, if the conntrack entry does not have the labelsext...

CVE-2025-22231

creationtimestamp| type| source ---|---|--- 2025-04-01 14:00:26+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114263066271453967 2025-04-01 14:00:26+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114263066271453967 2025-04-01 16:32:33+00:00| seen|...

CVE-2025-2007

creationtimestamp| type| source ---|---|--- 2025-04-01 07:48:25+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114261603469236457 2025-04-01 07:48:25+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114261603469236457...

CVE-2025-30911

creationtimestamp| type| source ---|---|--- 2025-04-01 06:32:09+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9855 2025-04-01 06:40:26+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3llqbbxlaxu2g 2025-04-01 07:48:34+00:00| seen|...

Apple Fined €150 Million by French Regulator Over Discriminatory ATT Consent Practices

Apple has been hit with a fine of €150 million $162 million by France's competition watchdog over the implementation of its App Tracking Transparency ATT privacy framework. The Autorité de la concurrence said it's imposing a financial penalty against Apple for abusing its dominant position as a...

CVE-2025-29868

creationtimestamp| type| source ---|---|--- 2025-04-01 04:56:30+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3llq3i46cmg2m 2025-04-01 08:32:32+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9866 2025-04-01 11:57:26+00:00| seen| https://t.me/cvedetector/21739 2025-04-02...

Denial Of Service (DoS)

Aimhubio/aim is vulnerable to a Denial Of Service DoS. The vulnerability is due to the tracking server overriding the maximum size for websocket messages, allowing very large images to be tracked, which causes the server to become unresponsive to other requests...

CVE-2025-30425

This issue was addressed through improved state management. This issue is fixed in tvOS 18.4, Safari 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. A malicious website may be able to track users in Safari private browsing mode...

CVE-2024-40864

The issue was addressed with improved handling of protocols. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.2, watchOS 11.2. An attacker in a privileged network position may be able to track a user's activity...

CVE-2024-40864

The issue was addressed with improved handling of protocols. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.2, watchOS 11.2. An attacker in a privileged network position may be able to track a user's activity...

CVE-2024-40864

CVE-2024-40864 affects macOS Ventura 13.7.5 and macOS Sonoma 14.7.5. The issue stems from improved handling of protocols, enabling an attacker in a privileged network position to track a user’s activity. Apple’s security content lists this under AppleAccount with the described impact; fixed updat...

CVE-2025-30425

This issue was addressed through improved state management. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, tvOS 18.4, watchOS 11.4. A malicious website may be able to track users in Safari private browsing mode...