webkitgtk: Website may be able to track sensitive user information

A vulnerability was found in WebKitGTK. This security issue leads to tracking sensitive user information via a website...

webkitgtk: A website may able to track visited websites in private browsing

A flaw was found in webkitgtk where a website may be able to track the websites a user visited in private browsing mode...

webkitgtk: Cross-origin issue with iframe elements leading to universal cross site scripting attack

Description: A cross-origin issue with iframe elements was addressed with improved tracking of security origins. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Safari 14.1.1, macOS Big Sur 11.4, watchOS 7.5. Processing maliciously crafted web content may lead to universal cross site...

CVE-2025-27446

creationtimestamp| type| source ---|---|--- 2025-07-06 08:36:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ltbujuthim2q 2025-07-06 09:53:06+00:00| seen| https://seclists.org/oss-sec/2025/q3/7 2025-07-06 12:15:45+00:00| seen|...

CVE-2025-28967

creationtimestamp| type| source ---|---|--- 2025-07-04 09:46:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lt4xiktfc22a 2025-08-06 13:54:19+00:00| seen| MISP/1413a78e-c0b3-4092-97e7-909fb9773448 2025-08-14 11:44:21+00:00| seen| MISP/1413a78e-c0b3-4092-97e7-909fb9773448...

SUSE CVE-2025-38141

In the Linux kernel, the following vulnerability has been resolved: dm: fix dmblkreportzones If dmgetlivetable returned NULL, dmputlivetable was never called. Also, it is possible that md-zonerevalidatemap will change while calling this function. Only read it once, so that we are always using the...

[SECURITY] [DSA 5957-1] mediawiki security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5957-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff July 03, 2025 https://www.debian.org/security/faq -...

UBUNTU-CVE-2025-38141

In the Linux kernel, the following vulnerability has been resolved: dm: fix dmblkreportzones If dmgetlivetable returned NULL, dmputlivetable was never called. Also, it is possible that md-zonerevalidatemap will change while calling this function. Only read it once, so that we are always using the...

CVE-2025-1709

creationtimestamp| type| source ---|---|--- 2025-07-03 06:21:24+00:00| seen| https://infosec.exchange/users/certvde/statuses/114787856061012885 2025-07-03 06:23:55+00:00| seen| https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3lt23lwyqz3d2...

CVE-2025-1710

creationtimestamp| type| source ---|---|--- 2025-07-03 06:21:23+00:00| seen| https://infosec.exchange/users/certvde/statuses/114787856061012885 2025-07-03 06:23:55+00:00| seen| https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3lt23lwyqz3d2...

CVE-2025-24330

creationtimestamp| type| source ---|---|--- 2025-07-02 12:47:34+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114783712216991743 2025-07-02 13:17:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsycf4wiwu2m...

TOR Virtual Network Tunneling Tool 0.4.8.17

Tor is a network of virtual tunnels that allows people and groups to improve their privacy and security on the Internet. It also enables software developers to create new communication tools with built-in privacy features. It provides the foundation for a range of applications that allow...

CVE-2025-49491

creationtimestamp| type| source ---|---|--- 2025-07-01 11:09:52+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/20017 2025-07-01 12:26:44+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114777968065544988 2025-07-01 13:04:40+00:00| seen|...

CVE-2024-8419

creationtimestamp| type| source ---|---|--- 2025-06-30 10:07:15+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19919 2025-06-30 10:29:36+00:00| seen| https://infosec.exchange/users/certvde/statuses/114771845197214791 2025-06-30 10:29:43+00:00| seen|...

CVE-2025-53387

creationtimestamp| type| source ---|---|--- 2025-06-28 04:45:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsnduqdrrn2p...

CVE-2024-12364

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Mavi Yeşil Software Guest Tracking Software allows SQL Injection. This issue affects Guest Tracking Software. NOTE: The vendor did not inform about the completion of the fixing process within the...

CVE-2024-12364 SQLi in Mavi Yeşil Software's Guest Tracking Software

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Mavi Yeşil Software Guest Tracking Software allows SQL Injection. This issue affects Guest Tracking Software. NOTE: The vendor did not inform about the completion of the fixing process within the...

CVE-2024-12364

CVE-2024-12364 covers an SQL Injection in Mavi Yeşil Software’s Guest Tracking Software. The vulnerability arises from improper neutralization of special elements in SQL commands within the Guest Tracking Software’s components, enabling remote exploitation with network access and no privileges re...

CVE-2024-12364 SQLi in Mavi Yeşil Software's Guest Tracking Software

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Mavi Yeşil Software Guest Tracking Software allows SQL Injection. This issue affects Guest Tracking Software. NOTE: The vendor did not inform about the completion of the fixing process within the...

Mavi Yeşil Software Guest Tracking Software SQL注入漏洞

Mavi Yeşil Software Guest Tracking Software is a software for tracking visitor information from Mavi Yeşil Software, Turkey. Mavi Yeşil Software Guest Tracking Software suffers from a SQL injection vulnerability that stems from improper neutralization of special elements in SQL commands, which...