9050 matches found
CVE-2022-0185
creationtimestamp| type| source ---|---|--- 2022-01-22 00:20:08+00:00| published-proof-of-concept| Telegram/cZHRCQIb7mVwEwPgUhRmgGXZDJpWRWiHGP56BhZb73fOTWD 2022-01-23 17:17:15+00:00| published-proof-of-concept| https://t.me/NeKaspersky/1716 2022-01-24 07:36:35+00:00| published-proof-of-concept|...
goCabrito - Super Organized And Flexible Script For Sending Phishing Campaigns
Super organized and flexible script for sending phishing campaigns. Features Sends to a single email Sends to lists of emails text Sends to lists emails with first, last name csv Supports attachments Splits emails in groups Delays sending emails between each group Support Tags to be placed and...
A week in security (January 10 – 16)
Last week on Malwarebytes Labs: Ransomware cyberattack forces New Mexico jail to lock down Some Android users can disable 2G now and why that is a good thing Phishers on the prowl with fake parking meter QR codes Update now: Microsoft patches 97 bugs including 6 zero-days and a wormable one...
New Unpatched Apple Safari Browser Bug Allows Cross-Site User Tracking
A software bug introduced in Apple Safari 15's implementation of the IndexedDB API could be abused by a malicious website to track users' online activity in the web browser and worse, even reveal their identity. The vulnerability, dubbed IndexedDB Leaks, was disclosed by fraud protection software...
CVE-2021-1037
The broadcast that DevicePickerFragment sends when a new device is paired doesn't have any permission checks, so any app can register to listen for it. This lets apps keep track of what devices are paired without requesting BLUETOOTH permissions.Product: AndroidVersions: Android-10 Android-11...
3rd-party flaws allowed a teen hacker to track location of Tesla cars
By ghostadmin The security researcher made a startling revelation that he could access more than 25 Tesla vehicles in around… This is a post from HackRead.com Read the original post: 3rd-party flaws allowed a teen hacker to track location of Tesla cars...
Atlassian Jira Information Disclosure Vulnerability (CNVD-2022-05436)
Atlassian Jira is a defect tracking management system from Atlassian Australia. The Atlassian Jira Server is vulnerable to an information disclosure vulnerability that results from configuration and other errors in the operation of a networked system or product. An authenticated remote attacker c...
Scemu - X86 32bits Emulator, For Securely Emulating Shellcodes
x86 32bits emulator, for securely emulating shellcodes. Features rust safety, good for malware. All dependencies are in rust. zero unsafe blocks. very fast emulation much faster than unicorn 3,000,000 instructions/second 100,000 instructions/second printing every instruction -vv. powered by...
Crate Invoice Crater Code Issue Vulnerability
Crater Invoice Crater is an open source web and mobile application from Crater Invoice, Inc. for tracking expenses, payments and creating professional invoices and estimates. Crater Invoice crater suffers from a code issue vulnerability that stems from the unrestricted upload of dangerous types o...
The Facebook Pixel Hunt aims to unravel Facebook’s tracking methods. Will you join?
Browser developer Mozilla has announced a research project to provide insights into, and data about, a space that’s opaque to policymakers, researchers and users themselves. Tracking the trackers is the name of the game. Give up some of your data voluntarily to stop the involuntary collection by...
PT-2022-2159
Name of the Vulnerable Software and Affected Versions VMware Horizon Agent for Linux versions prior to 22.x Description The issue is related to a local privilege escalation vulnerability due to a symbolic link tracking flaw. This allows an attacker to potentially elevate their privileges. The...
Atlassian Jira Remote Code Execution Vulnerability
Atlassian Jira is a defect tracking management system from Atlassian Australia. Atlassian Jira is vulnerable to a remote code execution vulnerability that originates when a networked system or product does not properly validate incoming data. An attacker could use this vulnerability to execute...
France Fines Google, Facebook €210 Million Over Privacy Violating Tracking Cookies
The Commission nationale de l'informatique et des libertés CNIL, France's data protection watchdog, has slapped Facebook now Meta Platforms and Google with fines of €150 million $170 million and €60 million $68 million for violating E.U. privacy rules by failing to provide users with an easy opti...
CVE-2021-46068
creationtimestamp| type| source ---|---|--- 2022-01-06 18:41:12+00:00| seen| https://t.me/cibsecurity/35057 2022-01-14 18:06:00+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/1325 2023-04-27 09:58:59+00:00| confirmed|...
WordPress Order Tracking plugin <= 3.0.16 - Cross-Site Request Forgery (CSRF) leading to Order, Customer and Sales Representative Deletion
Cross-Site Request Forgery CSRF leading to Order, Customer and Sales Representative Deletion discovered in WordPress Order Tracking plugin versions = 3.0.16. Solution Update the WordPress Order Tracking plugin to the latest available version at least 3.0.17...
Atlassian Jira Access Control Error Vulnerability (CNVD-2022-05438)
Atlassian Jira is a defect tracking management system from Atlassian Australia. An access control error vulnerability exists in Atlassian Jira Server and Data Center due to an interruption access control vulnerability in /secure/EditSubscription.jspa, which can be exploited by a remote,...
WordPress Order Tracking plugin <= 3.0.16 - Authenticated Arbitrary Plugin Settings Update vulnerability
Authenticated Arbitrary Plugin Settings Update vulnerability discovered in WordPress Order Tracking plugin versions = 3.0.16. Solution Update the WordPress Order Tracking plugin to the latest available version at least 3.0.17...
CVE-2021-43779
GLPI is an open source IT Asset Management, issue tracking system and service desk system. The GLPI addressing plugin in versions 2.9.1 suffers from authenticated Remote Code Execution vulnerability, allowing access to the server's underlying operating system using command injection abuse of...
Remote code execution
GLPI is an open source IT Asset Management, issue tracking system and service desk system. The GLPI addressing plugin in versions 2.9.1 suffers from authenticated Remote Code Execution vulnerability, allowing access to the server's underlying operating system using command injection abuse of...
