Lucene search
+L

5432 matches found

Wired Threat Level
Wired Threat Level
added 2023/01/16 12:00 p.m.13 views

All the Data Apple Collects About You—and How to Limit It

Cupertino puts privacy first in a lot of its products. But the company still gathers a bunch of your information...

3.5AI score
SaveExploits0
Rapid7 Blog
Rapid7 Blog
added 2023/01/12 2:20 p.m.76 views

Recog Release v3.0.3

Recog Release v3.0.3, which is available now, includes updated fingerprints for Zoho ManageEngine PAM360, Password Manager Pro, and Access Manager Plus; Atlassian Bitbucket Server; and Supervisord Supervisor. It also includes new fingerprints and a number of bug fixes, all of which are detailed...

0.1AI score0.99927EPSS
SaveExploits30
Debian
Debian
added 2023/01/11 10:54 p.m.67 views

[SECURITY] [DLA 3267-1] libxstream-java security update

Debian LTS Advisory DLA-3267-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany January 11, 2023 https://wiki.debian.org/LTS Package : libxstream-java Version : 1.4.11.1-1+deb10u4 CVE ID : CVE-2022-41966 Debian Bug : 1027754 XStream serializes Java objects to XML a...

8.2CVSS6.8AI score0.08689EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2023/01/11 12:00 a.m.43 views

GLSA-202301-09 : protobuf-java: Denial of Service

The remote host is affected by the vulnerability described in GLSA-202301-09 protobuf-java: Denial of Service - A parsing issue with binary data in protobuf-java core and lite versions prior to 3.21.7, 3.20.3, 3.19.6 and 3.16.3 can lead to a denial of service attack. Inputs containing multiple...

7.5CVSS6.4AI score0.01137EPSS
SaveExploits0References5
Gentoo Linux
Gentoo Linux
added 2023/01/11 12:00 a.m.55 views

protobuf-java: Denial of Service

Background protobuf-java contains the Java bindings for Google's Protocol Buffers. Description Inputs containing multiple instances of non-repeated embedded messages with repeated or unknown fields causes objects to be converted back and forth between mutable and immutable forms, resulting in...

7.5CVSS3.8AI score0.01137EPSS
SaveExploits0
Citrix
Citrix
added 2023/01/09 12:00 a.m.16 views

Citrix Customer Experience Improvement Program (CEIP) for Citrix Workspace app

Provide instructions to disable the CEIP data collection for Workspace app...

7.1AI score
SaveExploits0
Kitploit
Kitploit
added 2022/12/27 11:30 a.m.74 views

Aftermath - A Free macOS IR Framework

Aftermath is a Swift-based, open-source incident response framework. Aftermath can be leveraged by defenders in order to collect and subsequently analyze the data from the compromised host. Aftermath can be deployed from an MDM ideally, but it can also run independently from the infected user's...

7AI score
SaveExploits0References4
CNNVD
CNNVD
added 2022/12/25 12:00 a.m.5 views

Praat Script Collection 安全漏洞

Praat Script Collection is a collection of Praat scripts by Will Styler, an individual developer. A security vulnerability exists in Praat Script Collection that stems from an issue with an unknown function in the filesegmenter.praat file in the component Slash Handler, which can lead to a denial...

6.5CVSS5.3AI score0.0068EPSS
SaveExploits0References4
Openbugbounty
Openbugbounty
added 2022/12/24 3:42 a.m.12 views

cachecollection.com Cross Site Scripting vulnerability OBB-3117163

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
OSV
OSV
added 2022/12/22 8:15 p.m.3 views

DEBIAN-CVE-2022-45409

The garbage collector could have been aborted in several states and zones and GCRuntime::finishCollection may not have been called, leading to a use-after-free and potentially exploitable crash. This vulnerability affects Firefox ESR 102.5, Thunderbird 102.5, and Firefox 107...

8.8CVSS7.3AI score0.00779EPSS
SaveExploits0References1
OSV
OSV
added 2022/12/22 8:15 p.m.2 views

DEBIAN-CVE-2022-42928

Certain types of allocations were missing annotations that, if the Garbage Collector was in a specific state, could have lead to memory corruption and a potentially exploitable crash. This vulnerability affects Firefox 106, Firefox ESR 102.4, and Thunderbird 102.4...

8.8CVSS8.9AI score0.0083EPSS
SaveExploits0References1
HackRead
HackRead
added 2022/12/20 11:35 p.m.20 views

Data Collection Costs Epic Games Half a Billion USD

By Deeba Ahmed The FTC has announced to charge Epic Games with a $520 million settlement concerning the alleged violation of the Children’s Online Privacy Protection Act COPPA. This is a post from HackRead.com Read the original post: Data Collection Costs Epic Games Half a Billion USD...

1.3AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2022/12/19 9:02 p.m.21 views

museumcollection.winterthur.org Cross Site Scripting vulnerability OBB-3108950

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Kitploit
Kitploit
added 2022/12/16 11:30 a.m.68 views

AzureHound - Azure Data Exporter For BloodHound

The BloodHound data collector for Microsoft Azure Get AzureHound Release Binaries Download the appropriate binary for your platform from one of our Releases. Rolling Release The rolling release contains pre-built binaries that are automatically kept up-to-date with the main branch and can be...

7.2AI score
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2022/12/14 1:15 p.m.13 views

protobuf-java: timeout in parser leads to DoS

A parsing issue with binary data in protobuf-java core and lite versions prior to 3.21.7, 3.20.3, 3.19.6 and 3.16.3 can lead to a denial of service attack. Inputs containing multiple instances of non-repeated embedded messages with repeated or unknown fields causes objects to be converted...

7.5CVSS6.8AI score0.01137EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2022/12/13 4:08 p.m.7 views

Mozilla: Use-after-free in Garbage Collection

The Mozilla Foundation Security Advisory describes this flaw as: The garbage collector could have been aborted in several states and zones and GCRuntime::finishCollection may not have been called, leading to a use-after-free and potentially exploitable crash...

8.8CVSS7.3AI score0.00779EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2022/12/13 4:08 p.m.8 views

Mozilla: Use-after-free in Garbage Collection

The Mozilla Foundation Security Advisory describes this flaw as: The garbage collector could have been aborted in several states and zones and GCRuntime::finishCollection may not have been called, leading to a use-after-free and potentially exploitable crash...

8.8CVSS7.3AI score0.00779EPSS
SaveExploits0References6
Microsoft KB
Microsoft KB
added 2022/12/13 4:00 p.m.38 views

Update 15.17 for Microsoft Dynamics 365 Business Central 2019 Release Wave 2 (Application Build 15.17.49440, Platform Build 15.0.49431)

None None...

8.5CVSS8AI score0.0157EPSS
SaveExploits0
Snyk
Snyk
added 2022/12/13 8:08 a.m.4 views

Denial of Service (DoS)

Overview google-protobuf is a Google's data interchange format. Affected versions of this package are vulnerable to Denial of Service DoS when providing inputs containing multiple instances of non-repeated embedded messages, with repeated or unknown fields. The vulnerability exists due to a parsi...

7.5CVSS7.1AI score0.00483EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2022/12/13 12:00 a.m.6 views

PT-2022-6830 · Ce805M · Ce805M

Name of the Vulnerable Software and Affected Versions: CE805M affected versions not specified Description: The issue is related to an undocumented user account named SUPERVISOR in the CE A protocol implementation of the CE805M data collection and transmission device. Exploitation of this issue ma...

10CVSS7AI score
SaveExploits0References2
Rows per page
Query Builder