CoolCollege has an information breach

CoolCollege is a course service platform tailored for various companies. The software enhances learning efficiency and more through 36 scenarios such as course creation, assignment tracking, data analysis, and job certification. An information disclosure vulnerability exists in CoolCollege, which...

SUSE SLES15 Security Update : kernel (Live Patch 0 for SLE 15 SP3) (SUSE-SU-2021:2198-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:2198-1 advisory. This update for the Linux Kernel 5.3.18-57 fixes several issues. The following issues were fixed: - CVE-2021-3489: Fixed an issue where the eBP...

Is it game over for VR advergaming?

We’ve been warning about advergaming—the combination of virtual reality VR and ads—for years on the Labs Blog. I’ve given a few talks on the subject too, and how ad networks will slowly work their way into enclosed spaces formerly reserved for your head. They still might, but thanks to a recent...

Google Extends Support for Tracking Party Cookies Until 2023

Google's sweeping proposal to deprecate third-party cookies in Chrome browser is going back to the drawing board after the company announced plans to delay the rollout from early 2022 to late 2023, pushing back the project by nearly two years. "While there's considerable progress with this...

Mollitiam Industries is the Newest Cyberweapons Arms Manufacturer

Wired is reporting on a company called Mollitiam Industries: Marketing materials left exposed online by a third-party claim Mollitiams interception products, dubbed "Invisible Man" and "Night Crawler," are capable of remotely accessing a targets files, location, and covertly turning on a devices...

Patch Tor Browser Bug to Prevent Tracking of Your Online Activities

Open-source Tor browser has been updated to version 10.0.18 with fixes for multiple issues, including a privacy-defeating bug that could be used to uniquely fingerprint users across different browsers based on the apps installed on a computer. In addition to updating Tor to 0.4.5.9, the browser's...

Postorius-permissions.sh Privilege Escalation

The vulnerability of the Postorius-permissions.sh web interface implementation for accessing Mailman archives is related to the tracking of symbolic links. Exploiting this vulnerability could allow an attacker to increase their privileges...

All the Ways Amazon Tracks You—and How to Stop It

The retail empire is obsessed with your data. But is the convenience worth your personal information?...

UBUNTU-CVE-2021-3600

It was discovered that the eBPF implementation in the Linux kernel did not properly track bounds information for 32 bit registers when performing div and mod operations. A local attacker could use this to possibly execute arbitrary code...

CVE-2021-33813

creationtimestamp| type| source ---|---|--- 2021-06-21 12:03:35+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/3657 2024-02-09 08:51:14+00:00| seen| https://t.me/ctinow/181872 2024-02-09 11:21:49+00:00| seen| https://t.me/ctinow/181961 2025-04-21 12:27:10+00:00| seen|...

Baby clothing giant Carter’s exposed trove of shoppers data

By Waqas Carter’s failure to implement proper authentication protocols on the store’s parcel tracking pages exposed data and shoppers to scams. This is a post from HackRead.com Read the original post: Baby clothing giant Carter’s exposed trove of shoppers data...

IBM AIX Information Disclosure and Denial of Service Vulnerability

IBM AIX is a set of UNIX operating systems developed by IBM. An information disclosure and denial of service vulnerability exists in the tracking tool in IBM AIX version 7.1. A local user can exploit this vulnerability to obtain sensitive information or cause a denial of service...

org.biouno:uno-choice (>=1.0, <=1.4), org.jenkins-ci.plugins:git (2.0.1) +4 more potentially affected by CVE-2021-21648 via org.jenkins-ci.plugins:credentials (1.9.3)

org.jenkins-ci.plugins:credentials MAVEN version 1.9.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials and may be impacted: - org.biouno:uno-choice =1.0, =1.8.3, =1.8.5 - org.jenkins-ci.plugins:scriptler 2.7 -...

IBM AIX Permission Licensing and Access Control Vulnerabilities

IBM AIX is a set of UNIX operating systems developed by IBM. An information disclosure and denial of service vulnerability exists in the tracking tool in IBM AIX version 7.1. A local user can exploit this vulnerability to obtain sensitive information or cause a denial of service...

Tracking Amazon delivery staff

TL; DR The Amazon delivery tracking API allows ultra-precise tracking of drivers. Amazon claim that customers can only track the driver for the 10 stops prior to theirs. This isn’t the case – one can track the driver on the entire route and all drops, including their speed on the road. This preci...

All the New Privacy Features Coming to iOS and macOS

Improvements designed to keep your email private, crack down on data stealing apps, and help you find lost devices are on their way...

CVE-2021-0466

In startIpClient of ClientModeImpl.java, there is a possible identifier which could be used to track a device. This could lead to remote information disclosure to a proximal attacker, with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

Mozilla Says Google's New Ad Tech—FLoC—Doesn't Protect User Privacy

Google's upcoming plans to replace third-party cookies with a less invasive ad targeted mechanism have a number of issues that could defeat its privacy objectives and allow for significant linkability of user behavior, possibly even identifying individual users. "FLoC is premised on a compelling...

How to clear cookies

Until the information age, cookies were only known as a tasty but unhealthy snack that some people enjoyed, and others avoided. HTTP cookies, also known as computer, browser, or Internet cookies, are similarly divisive. Although some people like the more personalized browsing experience created b...

SUSE: Security Advisory (SUSE-SU-2013:0226-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...