9051 matches found
Microsoft’s Vote Tracking Software Clears a Major Hurdle
Hart InterCivic will be the first private vendor to partner with the company on using its open-source ElectionGuard system...
PT-2021-20339 · Luca · Luca
Name of the Vulnerable Software and Affected Versions: Luca versions 1.7.4 and earlier Description: The issue allows remote attackers to obtain sensitive information about COVID-19 tracking. This is because requests related to Check-In State occur shortly after requests for Phone Number...
Luca information leakage vulnerability
Gtlab luca is a Gtlab open source application. A secure and encrypted exchange of contact information. A security vulnerability exists in Luca, which originated from a vulnerability that can be exploited by a remote attacker to obtain sensitive information about COVID-19 tracking...
PT-2021-20340
Name of the Vulnerable Software and Affected Versions: Luca versions 1.7.4 and earlier Description: The issue allows remote attackers to obtain sensitive information about COVID-19 tracking. This is possible because the QR code of a Public Location can be intentionally confused with the QR code o...
Luca information leakage vulnerability
Gtlab luca is a Gtlab open source application. A secure and encrypted exchange of contact information. A security vulnerability exists in Luca version 1.7.4 and earlier versions, which can be exploited by remote attackers to obtain sensitive information about COVID-19 tracking...
Nextcloud: Bypass of privacy filter / tracking pixel blocker
Description ------------ When the mail app receives inline images, it will block them for privacy reasons to prevent tracking pixels The images have been blocked to protect your privacy. This block works correctly for most remote resources in addition to images, remote CSS files, iframes, and som...
What Is a Honeypot❓ Definition, Types and More
A honeypot is a computer system made to appear like a potential target of a cyber-attack. It may be used to track or redirect hacks away from a legitimate target. It could like wise be utilized to comprehend the strategies that cybercriminals employ. Honeypots have been around for quite awhile, y...
How Enigmo Moved Logic from Client to Origin to Edge
By: Hideki Ito Enigmo owns BUYMA, a Japanese fashion C2C marketplace that helps people buy and sell high-quality goods from overseas on www.buyma.com. BUYMA has 8.21 million members and deals with 5.62 million items across 140,000 fashion brands. Its website uses EdgeWorkers to manipulate cookies...
UVI-2021-1000386 soundwire: stream: fix memory leak in stream config error path
soundwire: stream: fix memory leak in stream config error path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.37 by commit...
Your Amazon Devices to Automatically Share Your Wi-Fi With Neighbors
Starting June 8, Amazon will automatically enable a feature on its family of hardware devices, including Echo speakers, Ring Video Doorbells, Ring Floodlight Cams, and Ring Spotlight Cams, that will share a small part of your Internet bandwidth with nearby neighbors — unless you choose to opt-out...
How to Avoid Those Infuriating Cookie Pop-Ups
Cookie consent notices are everywhere, and opting out of tracking is a pain. It doesn’t have to be this way...
SUSE-SU-2021:1652-1 Security update for redis
This update for redis fixes the following issues: redis was updated to 6.0.13: CVE-2021-29477: Integer overflow in STRALGO LCS command bsc1185729 CVE-2021-29478: Integer overflow in COPY command for large intsets bsc1185730 Cluster: Skip unnecessary check which may prevent failure detection Fix...
Stalkerware Apps Riddled with Security Bugs
Android stalkerware apps – used to surreptitiously track people’s movements and digital activities – turn out to themselves be rife with security holes that put victims in even danger. Stalkerware can track the GPS location of a victim’s device, record conversations, capture images and snoop on...
Cross-browser tracking vulnerability compromises user anonymity
By Habiba Rashid The vulnerability affects top browsers including Chrome, Firefox, Safari, and even Tor browser. This is a post from HackRead.com Read the original post: Cross-browser tracking vulnerability compromises user anonymity...
Apple's Find My Network Can be Abused to Exfiltrate Data From Nearby Devices
Latest research has demonstrated a new exploit that enables arbitrary data to be uploaded from devices that are not connected to the Internet by simply sending "Find My" Bluetooth broadcasts to nearby Apple devices. "It's possible to upload arbitrary data from non-internet-connected devices by...
Scheme Flooding Allows User Tracking Across Browsers
A security researcher has discovered a vulnerability that allows websites to track users across a number of different desktop browsers — including Apple Safari, Google Chrome, Microsoft Edge, Mozilla Firefox and Tor — posing a threat to cross-browser anonymity. Called “scheme flooding,” the flaw...
CVE-2021-31207
creationtimestamp| type| source ---|---|--- 2021-05-12 14:21:07+00:00| seen| https://t.me/truesecator/1705 2021-08-19 15:41:58+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/exchangeproxyshellrce.rb 2021-08-23 12:25:04+00:00| seen|...
CVE-2021-3490
A flaw was found in the Linux kernels eBPF verification code. It was discovered that eBPF ALU32 bounds tracking for bitwise ops AND, OR and XOR did not update the 32-bit bounds. By default accessing the eBPF verifier is only accessible to privileged users with CAPSYSADMIN. A local user with the...
UBUNTU-CVE-2021-3490
The eBPF ALU32 bounds tracking for bitwise ops AND, OR and XOR in the Linux kernel did not properly update 32-bit bounds, which could be turned into out of bounds reads and writes in the Linux kernel and therefore, arbitrary code execution. This issue was fixed via commit 049c4e13714e "bpf: Fix...
Linux Kernel Buffer Overflow Vulnerability
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel. The vulnerability stems from the discovery that the eBPF ALU32 bounds trace for bitwise operations AND, OR and XOR does not...