Mozilla Faces GDPR Complaint Over New Firefox Tracking Feature

NOYB, a European privacy group has filed a complaint with Austrian authorities, alleging that Mozilla breached GDPR by…...

GHSA-7CX8-44PC-XV3Q Decidim cross-site scripting (XSS) in the pagination

Impact The pagination feature used in searches and filters is subject to potential XSS attack through a malformed URL using the GET parameter perpage. Patches Not available Workarounds Not available References OWASP ASVS v4.0.3-5.1.3 Credits This issue was discovered in a security audit organized...

Google's Privacy Sandbox Accused of User Tracking by Austrian Non-Profit

Google's plans to deprecate third-party tracking cookies in its Chrome web browser with Privacy Sandbox has run into fresh trouble after Austrian privacy non-profit noyb none of your business said the feature can still be used to track users. "While the so-called 'Privacy Sandbox' is advertised a...

Projectworlds Hospital Management System SQL Injection Vulnerability

Projectworlds Hospital Management System is a hospital management system from the Austrian company Projectworlds. Projectworlds Hospital Management System version 378c157 suffers from a SQL injection vulnerability that originates from allowing bypassing authentication and is vulnerable to SQL...

CVE-2023-20159

creationtimestamp| type| source ---|---|--- 2023-05-18 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1027 2023-05-18 07:32:10+00:00| seen| https://t.me/cibsecurity/64371 2023-05-18 11:59:24+00:00| published-proof-of-concept| https://t.me/truesecator/4394 2023-05-22...

CVE-2023-22780

creationtimestamp| type| source ---|---|--- 2023-05-08 18:37:44+00:00| seen| https://t.me/cibsecurity/63433 2023-05-10 13:22:06+00:00| seen| https://www.cert.at/de/warnungen/2023/5/kritische-sicherheitslucken-in-arubaos-und-aruba-instantos-updates-verfugbar...

CVE-2023-22772

creationtimestamp| type| source ---|---|--- 2023-03-02 10:44:57+00:00| seen| https://www.cert.at/de/warnungen/2023/3/kritische-sicherheitslucken-in-arubaos-updates-teilweise-verfugbar 2025-03-08 04:35:53+00:00| seen| Telegram/so1R5ofIfq3cs33-CrZ5QJBD4FX8VOWfStnjtQ2xvyvXLu...

Austrian ‘mobile concierge’ app Gustaffo leaking 100k customers’ data

By Waqas Gustaffo Digital Service GmbH has been leaking personal and contact details of its customers since last month. This is a post from HackRead.com Read the original post: Austrian mobile concierge app Gustaffo leaking 100k customers data...

Microsoft Zero-Days Sold and then Used

Yet another article about cyber-weapons arms manufacturers and their particular supply chain. This one is about Windows and Adobe Reader zero-day exploits sold by an Austrian company named DSIRF. Theres an entire industry devoted to undermining all of our security. It needs to be stopped...

Microsoft Uncovers Austrian Company Exploiting Windows and Adobe Zero-Day Exploits

A cyber mercenary that "ostensibly sells general security and information analysis services to commercial customers" used several Windows and Adobe zero-day exploits in limited and highly-targeted attacks against European and Central American entities. The company, which Microsoft describes as a...

MAL-2022-1174 Malicious code in austrian-black-and-tan-hound-platforms (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 403c9cb6d7b5a7c623e1159ed7f895814813e8c5c543a8bd7af1e5b9066f7df7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Joomla Plugin SexyPolling 2.1.7 - SQLi

Exploit Title: Joomla Plugin SexyPolling 2.1.7 - SQLi Google Dork: intext:"Powered by Sexy Polling" Date: 2022-02-08 Exploit Author: Wolfgang Hotwagner Vendor Homepage: https://2glux.com/projects/sexypolling Software Link: https://2glux.com/downloads/files/free/sexypollingpack2.1.72glux.com.zip...

Pimcore SQL Injection Vulnerability (CNVD-2022-85099)

Pimcore is an open source Web content management platform for creating and managing Web applications from Austrian company Pimcore. The platform integrates Web content management, e-commerce framework and product information management applications. pimcore has a SQL injection vulnerability, whic...

austrian-directory.review Cross Site Scripting vulnerability OBB-2434867

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

pimcore information leakage vulnerability

Pimcore is an open source Web content management platform for creating and managing Web applications from the Austrian company Pimcore. The platform integrates Web content management, e-commerce frameworks and product information management applications. pimcore suffers from an information...

pimcore SQL Injection Vulnerability (CNVD-2022-07503)

Pimcore is an open source Web content management platform for creating and managing Web applications from the Austrian company Pimcore. The platform integrates Web content management, e-commerce framework and product information management applications. pimcore has a SQL injection vulnerability,...

Projectworlds Online Shopping System CSRF Vulnerability

Projectworlds Online Shopping System is an online shopping system from the Austrian company Projectworlds.A security vulnerability exists in Projectworlds Online Shopping System PHP, which stems from a CSRF vulnerability in ProjectWorlds Online Shopping System PHP 1.0, a CSRF vulnerability in...

Projectworlds Online Book Store Project In Php CSRF Vulnerability

Projectworlds Online Book Store Project In Php is a Php-based online bookstore system from the Austrian company Projectworlds. A security vulnerability exists in Projectworlds Online Book Store Project In Php version 1.0, which can be exploited by an attacker to delete any book from the system...

Sulu has unspecified vulnerabilities

Sulu is an extensible, PHP-based open source content management system on the Symfony framework from the Austrian company Sulu SULU.Sulu suffers from a security vulnerability that could be exploited by an attacker to elevate its privileges and access content it would otherwise not have access to...

Pimcore Cross-Site Scripting Vulnerability (CNVD-2022-07506)

Pimcore is an open source Web content management platform for creating and managing Web applications from the Austrian company Pimcore. The platform integrates Web content management, e-commerce frameworks and product information management applications.Pimcore has cross-site scripting...