577 matches found
Code injection
A user privacy issue was addressed by removing the broadcast MAC address. This issue is fixed in iOS 12.3, tvOS 12.3, watchOS 5.2.1. A device may be passively tracked by its WiFi MAC address...
CVE-2019-8620
A user privacy issue was addressed by removing the broadcast MAC address. This issue is fixed in iOS 12.3, tvOS 12.3, watchOS 5.2.1. A device may be passively tracked by its WiFi MAC address...
CVE-2019-8567
CVE-2019-8567 relates to a user privacy issue in macOS/iOS where a device could be passively tracked by its Wi‑Fi MAC address. The root cause is the broadcast MAC being present; mitigation is removing the broadcast MAC address. Apple fixes are in iOS 12.2 (and corresponding macOS/iOS advisories) ...
CVE-2019-8567
A user privacy issue was addressed by removing the broadcast MAC address. This issue is fixed in iOS 12.2. A device may be passively tracked by its WiFi MAC address...
PT-2019-19097
Name of the Vulnerable Software and Affected Versions iOS versions prior to 12.2 Description A user privacy issue allowed devices to be passively tracked by their WiFi MAC address. This issue has been addressed by removing the broadcast MAC address. Recommendations For iOS versions prior to 12.2,...
Go passwordless to strengthen security and reduce costs
We all know passwords are inherently unsecure. They’re also expensive to manage. Users struggle to remember them. It’s why we’re so passionate about eliminating passwords entirely. Passwordless solutions, such as Windows Hello, FIDO2 security keys, and the Microsoft Authenticator app, provide mor...
result.fipv.net GDPR PII Exposure vulnerability
Open Bug Bounty ID: OBB-1033373 Security Researcher whitehatewizard Helped patch 0 vulnerabilities Received 0 Coordinated Disclosure badges , found a security vulnerability affecting result.fipv.net website and its users. Following coordinated and responsible vulnerability disclosure guidelines o...
bangaloreallergycentre.com GDPR PII Exposure vulnerability
Open Bug Bounty ID: OBB-1031698 Security Researcher MrBug Helped patch 0 vulnerabilities Received 0 Coordinated Disclosure badges , found a security vulnerability affecting bangaloreallergycentre.com website and its users. Following coordinated and responsible vulnerability disclosure guidelines ...
files.viviennerogers.info GDPR PII Exposure vulnerability
Open Bug Bounty ID: OBB-1031204 Security Researcher MrBug Helped patch 0 vulnerabilities Received 0 Coordinated Disclosure badges , found a security vulnerability affecting files.viviennerogers.info website and its users. Following coordinated and responsible vulnerability disclosure guidelines o...
vulcan-steel.com GDPR PII Exposure vulnerability
Open Bug Bounty ID: OBB-1031121 Security Researcher MrBug Helped patch 0 vulnerabilities Received 0 Coordinated Disclosure badges , found a security vulnerability affecting vulcan-steel.com website and its users. Following coordinated and responsible vulnerability disclosure guidelines of the ISO...
bumigrp.com GDPR PII Exposure vulnerability
Security Researcher MrBug Helped patch 0 vulnerabilities Received 0 Coordinated Disclosure badges , found a security vulnerability affecting bumigrp.com website and its users. Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:...
Razer: THX Tuneup Survey feedback disclosure via Google cached content for apps.thx.com
Summary: If you use this google dork: site:apps.thx.com, you will notice many of the links no longer work. However, in the cached versions, they contain lots of sensitive user information from users who seemingly filled out a survey, including first and last name, zip code, gender, email, country...
CVE-2019-16752
An issue was discovered in Decentralized Anonymous Payment System DAPS through 2019-08-26. It is possible to force wallets to send HTTP requests to arbitrary locations, both on the local network and on the internet. This is a serious threat to user privacy, since it can possibly leak their IP...
CVE-2019-16752
An issue was discovered in Decentralized Anonymous Payment System DAPS through 2019-08-26. It is possible to force wallets to send HTTP requests to arbitrary locations, both on the local network and on the internet. This is a serious threat to user privacy, since it can possibly leak their IP...
Design/Logic Flaw
An issue was discovered in Decentralized Anonymous Payment System DAPS through 2019-08-26. It is possible to force wallets to send HTTP requests to arbitrary locations, both on the local network and on the internet. This is a serious threat to user privacy, since it can possibly leak their IP...
comxepto.com GDPR PII Exposure vulnerability
Open Bug Bounty ID: OBB-1025398 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
FortiOS 6.0.6 / FortiClientWindows 6.0.6 / FortiClientMac 6.2.1 XOR Encryption Vulnerability
Fortinet products, including FortiGate and Forticlient, regularly send information to Fortinet servers using XOR "encryption" with a static key. FortiClientWindows versions 6.0.6 and below, and FortiClientMac versions 6.2.1 and below. After this advisory was released, Fortinet has confirmed that...
projetos.prime.cv GDPR PII Exposure vulnerability
Security Researcher karthi Helped patch 5 vulnerabilities Received 0 Coordinated Disclosure badges , found a security vulnerability affecting projetos.prime.cv website and its users. Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Boun...
okawabus.com Open Redirect vulnerability
Security Researcher Disst Helped patch 864 vulnerabilities Received 3 Coordinated Disclosure badges Received 3 recommendations , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting okawabus.com website and its users. Following coordinated and...
photoenvision.com GDPR PII Exposure vulnerability
Open Bug Bounty ID: OBB-1021834 Security Researcher offensi74555475 Helped patch 0 vulnerabilities Received 0 Coordinated Disclosure badges , found a security vulnerability affecting photoenvision.com website and its users. Following coordinated and responsible vulnerability disclosure guidelines...