CVE-2020-13319

Removed by vendor...

Two major flight tracking services hit by crippling cyberattacks

By Waqas It is still unclear who is behind these cyberattacks however both Flightradar24 and PlaneFinder suffered major service disruption after the attacks. This is a post from HackRead.com Read the original post: Two major flight tracking services hit by crippling cyberattacks...

CVE-2020-13319: Missing Authorization

An issue has been discovered in GitLab affecting versions prior to 13.1.2, 13.0.8 and 12.10.13. Missing permission check for adding time spent on an issue...

PT-2020-13460 · Gitlab · Gitlab

Name of the Vulnerable Software and Affected Versions: GitLab versions prior to 13.1.2 GitLab versions prior to 13.0.8 GitLab versions prior to 12.10.13 Description: An issue has been discovered in GitLab where a missing permission check allows adding time spent on an issue. Recommendations: For...

CVE-2020-3569

creationtimestamp| type| source ---|---|--- 2020-09-27 13:56:54+00:00| seen| https://t.me/cKure/2395 2020-09-30 18:57:37+00:00| exploited| https://t.me/thehackernews/861 2020-09-30 19:13:34+00:00| exploited| https://t.me/YemenShield/514 2021-11-08 08:58:17+00:00| seen|...

The Best Chrome Extensions to Prevent Creepy Web Tracking

Ad trackers follow you everywhere online—but it doesn’t have to be that way...

Input validation

A vulnerability in the email message filtering feature of Cisco AsyncOS Software for Cisco Email Security Appliance ESA and Cisco Content Security Management Appliance SMA could allow an unauthenticated, remote attacker to cause repeated crashes in some internal processes that are running on the...

CVE-2019-1983 Cisco Email Security Appliance and Cisco Content Security Management Appliance Denial of Service Vulnerability

A vulnerability in the email message filtering feature of Cisco AsyncOS Software for Cisco Email Security Appliance ESA and Cisco Content Security Management Appliance SMA could allow an unauthenticated, remote attacker to cause repeated crashes in some internal processes that are running on the...

CVE-2020-17506

creationtimestamp| type| source ---|---|--- 2020-09-21 20:38:44+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/articaproxyauthbypassservicecmdspeformcommandinjection.rb 2024-11-14 06:07:09+00:00| seen| MISP/c5be76fc-667f-4614-a326-c9b2726c0902...

Companies Can Track Your Phone’s Movements to Target Ads

Brands are seeking new ways to customize messages. A startup that gathers data on when you pick up your phone, or when you go out on a run, can help...

Charities and the advertising industry: data ecosystems and privacy risks

Data makes the world go round, more often than not via advertising and its tracking mechanisms. Whether you think making money from large volumes of PII to keep the web ticking over is a good thing, or a sleazy data-grab often encouraging terrible ad practices, it’s not going to go away anytime...

Google Play Bans Stalkerware and 'Misrepresentation'

Google is taking the step of prohibiting “stalkerware” in Google Play, along with apps that could be used in political-influence campaigns. Effective October 1, apps that would allow someone to surreptitiously track the location or online activity of another person will be removed from the intern...

GHSA-MVCH-RH6H-2M47 Malicious Package in equest

All versions of equest typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the process wa...

Malicious Package in equest

All versions of equest typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the process wa...

GHSA-R863-P739-275C Malicious Package in reuest

All versions of reuest typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the process wa...

Malicious Package in reuest

All versions of reuest typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the process wa...

GHSA-8QX4-R7FX-XC4V Malicious Package in requst

All versions of requst typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the process wa...

Govt.-Backed Contact-Tracing Apps Raise Privacy Hackles

The Electronic Frontier Foundation is echoing lawmaker concerns that California is not taking privacy seriously enough, as state legislators mull launching a COVID-19 exposure-notification app based on Apple and Google’s smartphone technology. The U.S. nonprofit, which is aimed at protecting...

CVE-2020-9839

creationtimestamp| type| source ---|---|--- 2020-09-04 21:04:03+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/osx/local/cfprefsdracecondition.rb 2020-09-08 11:12:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/1712 2025-02-06...

CVE-2019-3881

Bundler prior to 2.1.0 uses a predictable path in /tmp/, created with insecure permissions as a storage location for gems, if locations under the user's home directory are not available. If Bundler is used in a scenario where the user does not have a writable home directory, an attacker could pla...