7222 matches found
WordPress YITH WooCommerce Order Tracking plugin <=1.2.10 - Authenticated Settings Change (YITH Plugin Framework <=3.3.8) vulnerability
Authenticated Settings Change YITH Plugin Framework =3.3.8 vulnerability found by Jerome Bruandet in WordPress YITH WooCommerce Order Tracking plugin versions =1.2.10. Solution Update the WordPress YITH WooCommerce Order Tracking plugin to the latest available version at least 1.2.11...
[SECURITY] Fedora 31 Update: koji-1.18.1-1.fc31
Koji is a system for building and tracking RPMS. The base package contains shared libraries and the command-line interface...
Imgur: De-anonymization Attack: Cross Site Information Leakage
Dear Imgur Security Team, We are researchers at the IMDEA Software Institute in Madrid, Spain. We have been working on analyzing Cross-Site Browser Leaks xsleaks and building a tool for finding instances of it on target web sites. Recently we tested imgur.com and discovered a flaw that can affect...
[SECURITY] Fedora 30 Update: koji-1.18.1-1.fc30
Koji is a system for building and tracking RPMS. The base package contains shared libraries and the command-line interface...
Data collectors
Who owns data owns the world. And with the Internet taking over much of our daily lives, it has become far easier and faster to receive, collect, and analyze data. The average user cannot even imagine how much data gets collected on them. Besides technical information for example, about a...
FTC Cracks Down on Stalkerware With Retina-X App Bans
UPDATE The Federal Trade Commission FTC has barred the sale of three “stalking apps” until their developer can prove they are used legally. The case is the first crackdown by the FTC on “stalkerware,” which is software that can be installed on devices to track their owners’ location, activity and...
CVE-2019-1315
creationtimestamp| type| source ---|---|--- 2019-10-10 11:42:57+00:00| published-proof-of-concept| https://t.me/canyoupwnme/6027 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-05 00:27:35+00:00| seen| https://t.me/arpsyndicate/1344 2024-03-15 08:58:02+00:00|...
Wi-Fi Hotspot Tracking
Free Wi-Fi hotspots can track your location, even if you don't connect to them. This is because your phone or computer broadcasts a unique MAC address. What distinguishes location-based marketing hotspot providers like Zenreach and Euclid is that the personal information you enter in the captive...
Virus Bulletin 2019: VoIP Espionage Campaign Hits U.S. Utilities Supplier
LONDON — A recent attack aimed at a U.S.-based oil, gas and chemical supplier leverages the company’s use of the enterprise-class Asterisk open-source PBX software, used for VoIP services. According to research from Check Point, presented here at Virus Bulletin 2019 on Friday, the attack was firs...
Tracking by Smart TVs
Long Twitter thread about the tracking embedded in modern digital televisions. The thread references three academic papers...
[SECURITY] Fedora 31 Update: glpi-9.4.4-1.fc31
GLPI is the Information Resource-Manager with an additional Administration- Interface. You can use it to build up a database with an inventory for your company computer, software, printers.... It has enhanced functions to make the daily life for the administrators easier, like a job-tracking-syst...
How Incognito Google Maps Protects You—and How It Doesn't
Turning on the new Incognito Mode in Google Maps won't make you as invisible as it might sound...
For Cybersecurity and Domestic Violence Awareness months, we pledge to fight stalkerware
Starting today, two hallmark holidays are upon us. No, it’s not Halloween and Thanksgiving. It’s both Cybersecurity Awareness Month and Domestic Violence Awareness Month. It’s no coincidence these two awareness campaigns overlap. What were once seen as separate realities—the physical and the...
Ineffective Package Tracking Facilitates Fraud
This article discusses an e-commerce fraud technique in the UK. Because the Royal Mail only tracks packages to the postcode -- and not to the address - it's possible to commit a variety of different frauds. Tracking systems that rely on signature are not similarly vulnerable...
A Simple Way to Make It Harder for Mobile Ads to Track You
Beating back the scourge of online ad tracking entirely is almost impossible. But you can futz with your smartphone's "ad ID" to slow it down...
Smart TVs, Subscription Services Leak Data to Facebook, Google
Smart TVs and so-called “over the top” OTT platforms are the latest IoT devices found “spying” on users and leaking sensitive data to companies such as Facebook, Amazon, Google and Netflix, according to two separate studies conducted by university researchers as well as independent research done ...
On Roku and Amazon Fire TV, Channels Are Watching You
New research shows that over 2,000 streaming apps track information about your devices—even when you tell them not to...
In-depth exploration found in the wild iOS exploit chain VII-vulnerability warning-the black bar safety net
In a previous article, we studied how could an attacker on the iPhone as root for a sandbox escape code execution. In each chain at the end you can see the attacker calls posixspawn, the path passed to the/ tmp directory, the malicious binary file. Implanted code in the background to run as root,...
