CVE-2025-24866

CVE-2025-24866 affects Mattermost server (Mattermost 9.11.x, including 9.11.8 and earlier) where the access control on the /api/v4/audits endpoint is improper. The vulnerability allows users with delegated granular administration roles who do not have access to Compliance Monitoring to retrieve U...

PT-2025-15996 · Mattermost · Mattermost

Name of the Vulnerable Software and Affected Versions: Mattermost versions 9.11.x through 9.11.8 Description: The issue is related to improper access controls on the "/api/v4/audits" endpoint, allowing users with delegated granular administration roles who lack access to Compliance Monitoring to...

CVE-2025-24866: Incorrect Authorization

Mattermost versions 9.11.x = 9.11.8 fail to enforce proper access controls on the /api/v4/audits endpoint, allowing users with delegated granular administration roles who lack access to Compliance Monitoring to retrieve User Activity Logs...

Mattermost 安全漏洞

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from an Improper Access Control vulnerability that stems from improper access control and can be exploited by an attacker to retrieve user activity logs...

CVE-2024-40864

The issue was addressed with improved handling of protocols. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.2, watchOS 11.2. An attacker in a privileged network position may be able to track a user's activity...

CVE-2024-40864

A vulnerability exists in the Apple Account component of macOS where improved handling of protocols is required. An attacker in a privileged network position may be able to track a user's activity . This issue is fixed in iOS 18.2 , iPadOS 18.2 , macOS Sequoia 15.2 , macOS Sonoma 14.7.5 , macOS V...

About the security content of macOS Sonoma 14.7.5

About the security content of macOS Sonoma 14.7.5 This document describes the security content of macOS Sonoma 14.7.5. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or release...

Apple macOS 安全漏洞

Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS Sonoma, which stems from protocol mishandling and could lead to a privileged network location attacker tracking user activity...

CVE-2024-32137

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Solwin User Activity Log Pro.This issue affects User Activity Log Pro: from n/a through 2.3.4...

CVE-2025-23114

creationtimestamp| type| source ---|---|--- 2025-02-05 02:01:25+00:00| seen| https://infosec.exchange/users/cve/statuses/113948811901159163 2025-02-05 02:03:21+00:00| seen| https://infosec.exchange/users/cR0w/statuses/113948819496896713 2025-02-05 02:15:51+00:00| seen|...

CVE-2024-31356

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Solwin Infotech User Activity Log.This issue affects User Activity Log: from n/a through 1.8...

CERTFR-2020-ALE-010

creationtimestamp| type| source ---|---|--- 2025-01-29 16:33:19+00:00| seen| https://bsky.app/profile/tuxpanik.bsky.social/post/3lgvfiz45lu24...

CERTFR-2017-ALE-015

creationtimestamp| type| source ---|---|--- 2025-01-29 16:22:31+00:00| seen| https://bsky.app/profile/tuxpanik.bsky.social/post/3lgvevpbhv52d...

CVE-2024-37929 WordPress User Activity Log Pro plugin <= 2.3.4 - Subscriber+ Multiple Broken Access Control vulnerability

Missing Authorization vulnerability in solwin User Activity Log Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Activity Log Pro: from n/a through 2.3.4...

CVE-2024-37929

The solwin User Activity Log Pro WordPress plugin (versions through 2.3.4 ) is affected by a Missing Authorization vulnerability. This flaw allows for the exploitation of incorrectly configured access control security levels , specifically identified as a Subscriber+ Multiple Broken Access Contro...

CVE-2024-37929 WordPress User Activity Log Pro plugin <= 2.3.4 - Subscriber+ Multiple Broken Access Control vulnerability

Missing Authorization vulnerability in solwin User Activity Log Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Activity Log Pro: from n/a through 2.3.4...

PT-2024-27834 · Unknown · Solwin User Activity Log Pro

Name of the Vulnerable Software and Affected Versions: solwin User Activity Log Pro versions through 2.3.4 Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions throu...

CVE-2024-37929: Missing Authorization

Missing Authorization vulnerability in solwin User Activity Log Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Activity Log Pro: from n/a through 2.3.4...

WordPress plugin User Activity Log Pro 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in...

Using Volatility for advanced memory forensics

TL;DR Memory forensics enhances investigations by analysing volatile data in RAM unavailable in disk forensics. Key insights from memory include running processes , network connections , encryption keys , and user activity , vital for real-time investigations. Smaller memory images 4-32 GB offer...