CVE-2024-46745

In the Linux kernel, the following vulnerability has been resolved: Input: uinput - reject requests with unreasonable number of slots When exercising uinput interface syzkaller may try setting up device with a really large number of slots, which causes memory allocation failure in inputmtinitslot...

Mautic 安全漏洞

Mautic is an open source marketing automation software from Mautic Open Source. The software monitors and manages websites, sends emails and manages customer resources. A security vulnerability exists in Mautic version 1.0.0-beta4 and earlier versions, which stems from the contact tracking and pa...

PT-2024-32375 · Mautic · Mautic

Name of the Vulnerable Software and Affected Versions: Mautic versions prior to 4.4.13 Mautic versions prior to 5.1.1 Description: The issue concerns Cross-Site Scripting through the Page URL variable in Mautic's tracking. This allows for potential exploitation. Recommendations: For versions prio...

PT-2024-10913 · Mautic · Mautic

Name of the Vulnerable Software and Affected Versions: Mautic versions prior to 4.4.13 Mautic versions prior to 5.1.1 Description: A stored XSS issue existed in the contact tracking and page hits report, allowing for potential malicious script execution. Recommendations: For versions prior to...

CVE-2024-45605

Sentry vulnerability CVE-2024-45605: Improper authorization allows an authenticated user to delete user issue alert notifications for arbitrary users when they know an alert ID. The issue is mitigated by a patch that scopes authorization checks on delete requests; affected deployments need to upg...

CVE-2024-45605 Improper authorization on deletion of user issue alert notifications in sentry

Sentry is a developer-first error tracking and performance monitoring platform. An authenticated user delete the user issue alert notifications for arbitrary users given a know alert ID. A patch was issued to ensure authorization checks are properly scoped on requests to delete user alert...

UBUNTU-CVE-2024-44187

A cross-origin issue existed with "iframe" elements. This was addressed with improved tracking of security origins. This issue is fixed in Safari 18, iOS 18 and iPadOS 18, macOS Sequoia 15, tvOS 18, visionOS 2, watchOS 11. A malicious website may exfiltrate data cross-origin...

CVE-2024-44187

A cross-origin issue existed with "iframe" elements. This was addressed with improved tracking of security origins. This issue is fixed in Safari 18, iOS 18 and iPadOS 18, macOS Sequoia 15, tvOS 18, visionOS 2, watchOS 11. A malicious website may exfiltrate data cross-origin...

The vulnerability of the Runc command-line tool for isolated containers, related to the race condition, allows attackers to manipulate the integrity of data. This condition enables tracking of references, enabling attackers to affect the data’s integrity.

The vulnerability of the Runc container launch tool is related to the state of the race, which allows for the tracking of links. Exploiting this vulnerability could enable a hacker to compromise the integrity of data...

Apple Vision Pro’s Eye Tracking Exposed What People Type

The Vision Pro uses 3D avatars on calls and for streaming. These researchers used eye tracking to work out the passwords and PINs people typed with their avatars...

CVE-2024-8190

creationtimestamp| type| source ---|---|--- 2024-09-11 00:17:20+00:00| seen| https://t.me/cvedetector/5309 2024-09-14 06:30:34+00:00| exploited| https://t.me/thehackernews/5582 2024-09-14 07:08:56+00:00| exploited| https://t.me/KomunitiSiber/2571 2024-09-14 07:21:54+00:00| exploited|...

Advanced forensic techniques for recovering hidden data in wearable devices

TL;DR A walk-through of forensic data recovery Detailed example of how to retrieve potentially sensitive deleted data Includes location, sleep and activity tracking Understand the security and privacy implications of wearable device data Introduction This blog post covers how forensic skills and...

Exploit for CVE-2024-24809

CVE-2024-24809 Detail Description Traccar is an open sourc...

CVE-2024-23359

CVE-2024-23359: Information disclosure in Qualcomm chipsets occurs when decoding Tracking Area Update Accept or Attach Accept messages. Connected sources identify this as a information-disclosure issue in Qualcomm closed-source components (Multi Mode Call Processor). Exploitation details are not ...

CVE-2024-23359 Buffer Over-read in Multi Mode Call Processor

Information disclosure while decoding Tracking Area Update Accept or Attach Accept message received from network...

CVE-2024-23359 Buffer Over-read in Multi Mode Call Processor

Information disclosure while decoding Tracking Area Update Accept or Attach Accept message received from network...

PT-2024-19838 · Qualcomm · Qualcomm

Name of the Vulnerable Software and Affected Versions: Qualcomm products affected versions not specified Description: The issue is related to information disclosure while decoding Tracking Area Update Accept or Attach Accept messages received from the network. This can lead to information...

MantisBT Password Reset

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'MantisBT password reset', 'Description' = %q MantisBT before 1.3.10, 2.2.4, and 2.3.1 are vulnerable to unauthenticated password reset. , 'Licens...

The Present and Future of TV Surveillance

Ars Technica has a good article on whats happening in the world of television surveillance. More than even I realized...

Linux Kernel Netfilter Conntrack Type Confusion Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of Linux Kernel. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...