Apple macOS Safari security vulnerabilities

Apple Safari and others are products of Apple Inc.Apple Safari is a web browser that is the default browser that comes with the Mac OS X and iOS operating systems.Apple macOS Big Sur is the 17th major version of Apple's macOS for the MAC operating system.Apple macOS Monterey is the 18th major...

Police Across US Bypass Warrants With Mass Location-Tracking Tool

Plus: An unsecured database exposed face recognition data in China, ‘Cuba’ ransomware knocks out Montenegro, and more...

airflow-imaging-plugins (>=2.4.2, <=2.4.3), data-tracking (1.7.2) +1 more potentially affected by CVE-2022-38170 via apache-airflow (1.8.2)

apache-airflow PYPI version 1.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - airflow-imaging-plugins =2.4.2, =0.0.5, =0.0.6 Source cves: CVE-2022-38170 Source advisory: OSV:GHSA-Q8H9-PQCX-59HW...

data-tracking (1.7.3) potentially affected by CVE-2022-38170 via apache-airflow (1.9.0)

apache-airflow PYPI version 1.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - data-tracking 1.7.3 Source cves: CVE-2022-38170 Source advisory: OSV:GHSA-Q8H9-PQCX-59HW...

data-tracking (1.7.3) potentially affected by CVE-2022-38170 via apache-airflow (1.9.0)

apache-airflow PYPI version 1.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - data-tracking 1.7.3 Source cves: CVE-2022-38170 Source advisory: OSV:PYSEC-2022-261...

CVE-2022-39176

BlueZ before 5.59 allows physically proximate attackers to obtain sensitive information because profiles/audio/avrcp.c does not validate paramslen...

CVE-2022-36796 WordPress CallRail Phone Call Tracking plugin <= 0.4.9 - Cross-Site Request Forgery (CSRF) vulnerability leading to Stored Cross-Site Scripting (XSS)

Cross-Site Request Forgery CSRF vulnerability leading to Stored Cross-Site Scripting XSS in CallRail, Inc. CallRail Phone Call Tracking plugin = 0.4.9 at WordPress...

PT-2022-23631 · Callrail · Callrail Phone Call Tracking Plugin

Name of the Vulnerable Software and Affected Versions: CallRail Phone Call Tracking plugin versions = 0.4.9 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that leads to Stored Cross-Site Scripting XSS. This means an attacker can trick a user into performing unintended...

WordPress plugin CallRail Phone Call Tracking has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

CallRail Phone Call Tracking < 0.4.10 - Stored XSS via CSRF

The plugin does not have CSRF check in place and it also lacking sanitisation as well as escaping in some parameters, which could allow attackers to make a logged in admin put Stored Cross-Site Scripting payloads in them...

WordPress CallRail Phone Call Tracking plugin <= 0.4.9 - Cross-Site Request Forgery (CSRF) vulnerability leading to Stored Cross-Site Scripting (XSS)

Cross-Site Request Forgery CSRF vulnerability leading to Stored Cross-Site Scripting XSS discovered by Rasi Afeef Patchstack Alliance in WordPress CallRail Phone Call Tracking plugin versions = 0.4.9. Solution Update the WordPress CallRail Phone Call Tracking plugin to the latest available versio...

CVE-2022-36796: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability leading to Stored Cross-Site Scripting XSS in CallRail, Inc. CallRail Phone Call Tracking plugin = 0.4.9 at WordPress...

Linux Kernel Security Vulnerabilities

The Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. A security vulnerability exists in the Linux kernel, which can be exploited by an attacker to bypass the Linux kernel's filtering rules via nfconntrackirc to send malicious data...

CVE-2022-32857

This issue was addressed by using HTTPS when sending information over the network. This issue is fixed in macOS Monterey 12.5, macOS Big Sur 11.6.8, Security Update 2022-005 Catalina, iOS 15.6 and iPadOS 15.6, tvOS 15.6, watchOS 8.7. A user in a privileged network position can track a user’s...

CVE-2022-32857

This issue was addressed by using HTTPS when sending information over the network. This issue is fixed in macOS Monterey 12.5, macOS Big Sur 11.6.8, Security Update 2022-005 Catalina, iOS 15.6 and iPadOS 15.6, tvOS 15.6, watchOS 8.7. A user in a privileged network position can track a user’s...

CVE-2022-32857

This issue was addressed by using HTTPS when sending information over the network. This issue is fixed in macOS Monterey 12.5, macOS Big Sur 11.6.8, Security Update 2022-005 Catalina, iOS 15.6 and iPadOS 15.6, tvOS 15.6, watchOS 8.7. A user in a privileged network position can track a user’s...

org.biouno:uno-choice (>=1.0, <=1.4), org.jenkins-ci.plugins:git-server (1.3) +3 more potentially affected by CVE-2022-38663 via org.jenkins-ci.plugins:git (2.0.1)

org.jenkins-ci.plugins:git MAVEN version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.biouno:uno-choice =1.0, =1.4 - org.jenkins-ci.plugins:git-server 1.3 - org.jenkins-ci.plugins:scriptler...

Cisco Adaptive Security Appliance (ASA) Software FTP Inspection Bypass Vulnerability (cisco-sa-asaftd-ftpbypass-HY3UTxYu)

According to its self-reported version number, there is a vulnerability in the FTP inspection engine of Cisco Adaptive Security Appliance ASA Software that could allow an unauthenticated, remote attacker to bypass FTP inspection. The vulnerability is due to ineffective flow tracking of FTP traffi...

Cisco Firepower Threat Defense (FTD) Software FTP Inspection Bypass Vulnerability (cisco-sa-asaftd-ftpbypass-HY3UTxYu)

According to its self-reported version number, there is a vulnerability in the FTP inspection engine of Cisco Firepower Threat Defense FTD Software that could allow an unauthenticated, remote attacker to bypass FTP inspection. The vulnerability is due to ineffective flow tracking of FTP traffic. ...

Can You Secure Your Smartphone with a Proxy?

By Owais Sultan A proxy can help you bypass restrictions and access blocked websites. It can also help you stay anonymous online, which is useful if you want to avoid being tracked by governments or advertisers. This is a post from HackRead.com Read the original post: Can You Secure Your Smartpho...