Lucene search
+L

9055 matches found

CNVD
CNVD
•added 2020/11/27 12:00 a.m.•10 views

Binary Vulnerability in Kermel Computer Activity Monitor

Kermel Computer Activity Monitor is a software that tracks all Internet activity, including browsing history, pages visited, access times and usernames. Features include monitoring an unlimited number of computers at the same time, performing stealth monitoring in a completely hidden manner, taki...

7AI score
SaveExploits0
ThreatPost
ThreatPost
•added 2020/11/24 5:36 p.m.•25 views

Baidu Mobile Apps in Google Play Leak Sensitive Data

Multiple Android mobile apps found in Google Play, including Baidu Search Box and Baidu Maps, were found by researchers to be leaking data that could be used to track users – even if they switch devices. The apps have each been downloaded millions of times, according to Palo Alto Unit 42...

6.9AI score
SaveExploits0References3
CNVD
CNVD
•added 2020/11/24 12:00 a.m.•20 views

Unspecified Vulnerability in Various Apple Products (CNVD-2020-67607)

Apple iOS and others are products of Apple Inc. Apple iOS is an operating system developed for mobile devices. apple tvOS is a smart TV operating system. tvOS is a smart TV operating system. tvOS is a smart TV operating system. tvOS is a smart TV operating system. tvOS is a smart TV operating...

7.5CVSS6.6AI score0.01168EPSS
SaveExploits0References1
Malwarebytes
Malwarebytes
•added 2020/11/23 3:00 p.m.•62 views

Lock and Code S1Ep20: Tracking the charities that track you online with Chris Boyd

This week on Lock and Code, we discuss the top security headlines generated right here on Labs and around the Internet. In addition, we talk to Chris Boyd, lead malware intelligence analyst for Malwarebytes, about charity organizations and online ad tracking. Though many might assume that these t...

0.3AI score
SaveExploits0
Circl
Circl
•added 2020/11/20 1:57 p.m.•28 views

CVE-2020-12028

creationtimestamp| type| source ---|---|--- 2020-11-20 13:57:20+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/scada/rockwellfactorytalkrce.rb 2025-02-06 03:13:44+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:10:23+00:00|...

8.1CVSS7.4AI score0.53033EPSS
SaveExploits3References1
The Hacker News
The Hacker News
•added 2020/11/18 9:47 a.m.•185 views

Use This Ultimate Template to Plan and Monitor Your Cybersecurity Budgets

Sound security budget planning and execution are essential for CIO's/CISO's success. Now, for the first time, the Ultimate Security Budget Plan and Track Excel template download here provide security executives a clear and intuitive tool to keep track of planned vs. actual spend, ensuring that...

0.4AI score
SaveExploits0
The Hacker News
The Hacker News
•added 2020/11/18 9:47 a.m.•12 views

Use This Ultimate Template to Plan and Monitor Your Cybersecurity Budgets

Sound security budget planning and execution are essential for CIO's/CISO's success. Now, for the first time, the Ultimate Security Budget Plan and Track Excel template download here provide security executives a clear and intuitive tool to keep track of planned vs. actual spend, ensuring that...

5.9AI score
SaveExploits0
osv_cve
osv_cve
•added 2020/11/10 1:15 p.m.•21 views

CVE-2020-0448

In getPhoneAccountsForPackage of TelecomServiceImpl.java, there is a possible way to access a tracking identifier due to a missing permission check. This could lead to local information disclosure of the identifier, which could be used to track an account across devices, with no additional...

5.5CVSS6.2AI score0.00155EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2020/11/10 1:15 p.m.•9 views

CVE-2020-0448

In getPhoneAccountsForPackage of TelecomServiceImpl.java, there is a possible way to access a tracking identifier due to a missing permission check. This could lead to local information disclosure of the identifier, which could be used to track an account across devices, with no additional...

5.5CVSS5.6AI score0.00155EPSS
SaveExploits0References2
Prion
Prion
•added 2020/11/10 1:15 p.m.•24 views

Information disclosure

In getPhoneAccountsForPackage of TelecomServiceImpl.java, there is a possible way to access a tracking identifier due to a missing permission check. This could lead to local information disclosure of the identifier, which could be used to track an account across devices, with no additional...

2.1CVSS5.5AI score0.00155EPSS
SaveExploits0References1Affected Software1
Mend
Mend
•added 2020/11/10 12:48 p.m.•7 views

CVE-2020-0448

In getPhoneAccountsForPackage of TelecomServiceImpl.java, there is a possible way to access a tracking identifier due to a missing permission check. This could lead to local information disclosure of the identifier, which could be used to track an account across devices, with no additional...

6.8CVSS0.00155EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2020/11/10 12:48 p.m.•49 views

CVE-2020-0448

In getPhoneAccountsForPackage of TelecomServiceImpl.java, there is a possible way to access a tracking identifier due to a missing permission check. This could lead to local information disclosure of the identifier, which could be used to track an account across devices, with no additional...

5.5AI score0.00155EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/11/10 12:00 a.m.•7 views

CVE-2020-0448: Missing Authorization

In getPhoneAccountsForPackage of TelecomServiceImpl.java, there is a possible way to access a tracking identifier due to a missing permission check. This could lead to local information disclosure of the identifier, which could be used to track an account across devices, with no additional...

5.5CVSS5.9AI score0.00155EPSS
SaveExploits0References2
Citrix
Citrix
•added 2020/11/09 12:00 a.m.•21 views

WindowHistory Tool

Created Date: 03/22/2006 Updated Date: 09/29/2017 Where to download ? Certain legacy Citrix tools are now available on request only. Please submit the request here - https://forms.gle/obA39PEz5qpDiSPq8 Once we verify your request, we will provide access to the download location. Navigate to your...

7AI score
SaveExploits0
Citrix
Citrix
•added 2020/11/09 12:00 a.m.•57 views

Citrix Hypervisor Security Update

Description of Problem Two issues have been identified in Citrix Hypervisor that may, if exploited, allow privileged code in an HVM guest VM to compromise or crash the host. These issues only apply in specific configurations; furthermore, Citrix believes that there would be significant difficulty...

8.8CVSS6.9AI score0.00413EPSS
SaveExploits0Affected Software2
Microsoft CVE
Microsoft CVE
•added 2020/11/02 8:00 a.m.•22 views

An issue was discovered in the Linux kernel before 5.8.15. scalar32_min_max_or in kernel/bpf/verifier.c mishandles bounds tracking during use of 64-bit values aka CID-5b9fbeb75b6a.

...

5.5CVSS6.7AI score0.02018EPSS
SaveExploits5
osv_asb
osv_asb
•added 2020/11/01 12:00 a.m.•47 views

ASB-A-153995334

In getPhoneAccountsForPackage of TelecomServiceImpl.java, there is a possible way to access a tracking identifier due to a missing permission check. This could lead to local information disclosure of the identifier, which could be used to track an account across devices, with no additional...

5.5CVSS6AI score0.00155EPSS
SaveExploits0References2
osv_opensuse
osv_opensuse
•added 2020/10/31 3:24 p.m.•29 views

OPENSUSE-SU-2020:1792-1 Security update for apache2

This update for apache2 fixes the following issues: - Enables the patch for CVE-2020-11993 and CVE-2020-9490. The patch was included but not applied in the previous update. bsc1178074 This update was imported from the SUSE:SLE-15:Update update project...

7.5CVSS7.7AI score0.88844EPSS
SaveExploits2References6
Openbugbounty
Openbugbounty
•added 2020/10/29 10:02 p.m.•13 views

urltracking.org Cross Site Scripting vulnerability OBB-1464271

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

6.2AI score
SaveExploits0
Hacker One
Hacker One
•added 2020/10/29 3:03 p.m.•84 views

Basecamp: Bypass of image rewriting / tracking blocker via srcset

CVSS ---- Medium 4.7 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N Description ----------- One of the security features of Hey is blocking of tracking pixels to preserve users privacy. As such, img tags and similar are rewritten by the app to point to gopher.hey.com. However, an attacker can bypas...

2.1AI score
SaveExploits0
Rows per page
Query Builder