WordPress Finpose – Accounting and Financial Tracking plugin <= 1.0.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Finpose – Accounting and Financial Tracking plugin versions = 1.0.0. Solution No patched version available...

WordPress Pixel & tracking codes for Google Web stories (formerly AMP Stories) plugin <= 1.0.2 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Pixel & tracking codes for Google Web stories formerly AMP Stories plugin versions = 1.0.2. Solution Update the WordPress Pixel & tracking codes for Google Web stories formerly AMP Stories plugin to th...

WordPress Pixel & tracking codes for Google Web stories (formerly AMP Stories) plugin <= 1.0.2 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Pixel & tracking codes for Google Web stories formerly AMP Stories plugin versions = 1.0.2. Solution Update the WordPress Pixel & tracking codes for Google Web stories formerly AMP Stories plugin to the latest available versio...

WordPress SV Tracking Manager plugin < 1.8.02 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress SV Tracking Manager plugin versions 1.8.02. Solution Update the WordPress SV Tracking Manager plugin to the latest available version at least 1.8.02...

WordPress SV Tracking Manager plugin < 1.8.02 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress SV Tracking Manager plugin versions 1.8.02. Solution Update the WordPress SV Tracking Manager plugin to the latest available version at least 1.8.02...

The Quiet Way Advertisers Are Tracking Your Browsing

Cookies are on the way out—but not enough is being done about browser fingerprinting. So what is it?...

data-tracking (1.7.3) potentially affected by CVE-2021-45229 via apache-airflow (1.9.0)

apache-airflow PYPI version 1.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - data-tracking 1.7.3 Source cves: CVE-2021-45229 Source advisory: OSV:GHSA-65XW-PCQW-HJRH...

data-tracking (1.7.3) potentially affected by CVE-2022-24288 via apache-airflow (1.9.0)

apache-airflow PYPI version 1.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - data-tracking 1.7.3 Source cves: CVE-2022-24288 Source advisory: OSV:GHSA-3V7G-4PG3-7R6J...

airflow-imaging-plugins (>=2.4.2, <=2.4.3), data-tracking (1.7.2) +1 more potentially affected by CVE-2022-24288 via apache-airflow (1.8.2)

apache-airflow PYPI version 1.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - airflow-imaging-plugins =2.4.2, =0.0.5, =0.0.6 Source cves: CVE-2022-24288 Source advisory: OSV:PYSEC-2022-30...

data-tracking (1.7.3) potentially affected by CVE-2021-45229 via apache-airflow (1.9.0)

apache-airflow PYPI version 1.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - data-tracking 1.7.3 Source cves: CVE-2021-45229 Source advisory: OSV:PYSEC-2022-29...

airflow-imaging-plugins (>=2.4.2, <=2.4.3), data-tracking (1.7.2) +1 more potentially affected by CVE-2021-45229 via apache-airflow (1.8.2)

apache-airflow PYPI version 1.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - airflow-imaging-plugins =2.4.2, =0.0.5, =0.0.6 Source cves: CVE-2021-45229 Source advisory: OSV:PYSEC-2022-29...

CVE-2021-44532

creationtimestamp| type| source ---|---|--- 2022-02-24 22:14:56+00:00| seen| https://t.me/cibsecurity/38046 2025-07-19 23:42:31+00:00| seen| https://gist.github.com/ryon341/0f355eed7cfb4d60bfbc0955055e5cf0 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

Zenly Social-Media App Bugs Allow Account Takeover

Zenly, a social app from Snap that allows users to see the locations of friends and family on a live map, contains a pair of vulnerabilities that could endanger those being tracked. According to the Checkmarx Security Research Team, the bugs are a user-data exposure vulnerability and an...

CVE-2022-24708

The CVE-2022-24708 entry describes a Stored XSS vulnerability in Anuko Time Tracker. The issue occurs in ttUser.class.php where the primary group name was not escaped for display, allowing a logged-in user to inject JavaScript that could execute in their browser on pages displaying the group name...

Wyse Device Agent Licensing Issue Vulnerability

DELL Wyse Management Suite is a scalable solution for managing and optimizing Wyse endpoints from Dell USA. The product includes centralized Wyse endpoint management, asset tracking, and automated device discovery.An authorization issue vulnerability exists in Wyse due to an error in processing...

Facebook Agrees to Pay $90 Million to Settle Decade-Old Privacy Violation Case

Meta Platforms has agreed to pay $90 million to settle a lawsuit over the company's use of cookies to allegedly track Facebook users' internet activity even after they had logged off from the platform. In addition, the social media company will be required to delete all of the data it illegally...

Vulnerabilities that aren’t. ETag headers

This time were looking at the ETag Entity Tag header. I take some of the blame for this one as I first added a dissector of the header to Nikto’s headers plugin back in 2008, then other scanners added it. What Is It? The header is a simplistic method of helping the user-agent identify whether it...

A worrying Etsy listing reveals the stalking potential of Apple’s AirTags

In April of 2021, Apple introduced AirTags to the world, making the small tracking devices—similar to a Tile— available for purchase at the end of that month. The circular, coin-like product is designed to be attached to or placed in objects that are commonly lost, such as keychains, wallets,...

BRATA Android malware factory resets phones after stealing funds

By Waqas The new variant of BRATA malware is also capable of GPS tracking and keylogging. A malware that was… This is a post from HackRead.com Read the original post: BRATA Android malware factory resets phones after stealing funds...

Android malware BRATA can wipe devices

Cleafy, a cybersecurity firm specializing in online fraud, has published new details about banking Trojan BRATA Brazilian Remote Access Tool, Android, a known malware strain that first became widespread in 2019. BRATA is now being used to perform factory resets on victims machines. Its rare for...