Privacy watchdog files complaint over Firefox quietly enabling its Privacy Preserving Attribution

A European privacy watchdog has filed a complaint against Mozilla for quietly enabling Privacy Preserving Attribution PPA in its Firefox browser. Noyb none of your business argues that despite its reassuring name, the feature allows the browser to track your online behavior. By design, Privacy...

Mozilla Faces Privacy Complaint for Enabling Tracking in Firefox Without User Consent

Vienna-based privacy non-profit noyb short for None Of Your Business has filed a complaint with the Austrian data protection authority DPA against Firefox maker Mozilla for enabling a new feature called Privacy-Preserving Attribution PPA without explicitly seeking users' consent. "Contrary to its...

CVE-2024-7197

A vulnerability was found in SourceCodester Complaints Report Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/managecomplaint.php. The manipulation of the argument id leads to sql injection. The attack may be launched...

CVE-2021-47582

In the Linux kernel, the following vulnerability has been resolved: USB: core: Make doproccontrol and doprocbulk killable The USBDEVFSCONTROL and USBDEVFSBULK ioctls invoke usbstartwaiturb, which contains an uninterruptible wait with a user-specified timeout value. If timeout value is very large...

Fake Lawsuit Threat Exposes Privnote Phishing Sites

A cybercrook who has been setting up websites that mimic the self-destructing message service privnote.com accidentally exposed the breadth of their operations recently when they threatened to sue a software company. The disclosure revealed a profitable network of phishing sites that behave and...

CVE-2024-1875

A vulnerability was found in SourceCodester Complaint Management System 1.0 and classified as critical. This issue affects some unknown processing of the file users/register-complaint.php of the component Lodge Complaint Section. The manipulation leads to unrestricted upload. The attack may be...

CVE-2024-1875

A vulnerability was found in SourceCodester Complaint Management System 1.0 and classified as critical. This issue affects some unknown processing of the file users/register-complaint.php of the component Lodge Complaint Section. The manipulation leads to unrestricted upload. The attack may be...

Out-of-bounds

A vulnerability was found in SourceCodester Complaint Management System 1.0 and classified as critical. This issue affects some unknown processing of the file users/register-complaint.php of the component Lodge Complaint Section. The manipulation leads to unrestricted upload. The attack may be...

Complaint Management System Code Issue Vulnerability

Complaint Management System is a complaint management system by the individual developer Arvin Arandilla. A code issue vulnerability exists in version 1.0 of Complaint Management System, which stems from unrestricted file uploads...

CVE-2024-1875 SourceCodester Complaint Management System Lodge Complaint Section register-complaint.php unrestricted upload

A vulnerability was found in SourceCodester Complaint Management System 1.0 and classified as critical. This issue affects some unknown processing of the file users/register-complaint.php of the component Lodge Complaint Section. The manipulation leads to unrestricted upload. The attack may be...

CVE-2024-1875

CVE-2024-1875 affects SourceCodester Complaint Management System 1.0, specifically the Lodge Complaint Section file users/register-complaint.php, where unrestricted file upload is possible. The issue is exploitable remotely and exploitation/public disclosure status is noted. Connected sources con...

CVE-2024-1875 SourceCodester Complaint Management System Lodge Complaint Section register-complaint.php unrestricted upload

A vulnerability was found in SourceCodester Complaint Management System 1.0 and classified as critical. This issue affects some unknown processing of the file users/register-complaint.php of the component Lodge Complaint Section. The manipulation leads to unrestricted upload. The attack may be...

PT-2024-18383 · Sourcecodester · Sourcecodester Complaint Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Complaint Management System version 1.0 Description: A critical issue affects the Lodge Complaint Section component, specifically the file users/register-complaint.php, leading to unrestricted upload. The attack can be initiate...

Raccoon Infostealer operator extradited to the United States

A Ukrainian national, Mark Sokolovsky, has been indicted for crimes related to fraud, money laundering and aggravated identity theft and extradited to the United States from the Netherlands, the US Attorney’s Office of the Western District of Texas has announced. In March 2022, around the same ti...

Complaint Management System 2.0 SQL Injection Vulnerability

Exploit Title: Complaint-Management-System Multiple SQL Injection Vulnerabilities Exploit Author: Diyar Saadi Vendor Homepage: https://phpgurukul.com/complaint-management-sytem/ Software Link: https://phpgurukul.com/?sdmprocessdownload=1&downloadid=7259 Version: V 2.0 Tested on: Windows 11 + XAMP...

PT-2024-15620 · Unknown · Code-Projects Online Fir System

Name of the Vulnerable Software and Affected Versions: code-projects Online FIR System version 1.0 Description: A vulnerability was found in the code-projects Online FIR System, affecting an unknown part of the file registercomplaint.php. The manipulation of the argument Name/Address leads to...

Online FIR System Cross-Site Scripting Vulnerability

Online FIR System is an online complaint platform. A cross-site scripting vulnerability exists in code-projects Online FIR System version 1.0, which stems from a cross-site scripting vulnerability in the Name/Address parameter of the registercomplaint.php file...

Meta sued over forcing users to pay to stop tracking

Meta is required to get users’ consent in Europe in order to show them targeted ads. For this reason, Meta has to provide European users with a way to opt out of behavioral advertising or face fines totalling $100,000 a day. Behavioral advertising are ads tailored to someone’s browsing habits and...

A week in security (November 13 – November 19)

Last week on Malwarebytes Labs: Signal is testing usernames so you don’t have to share your phone number State of Maine data breach impacts 1.3 million people Credit card skimming on the rise for the holiday shopping season Update now! Microsoft patches 3 actively exploited zero-days Ransomware...

Ransomware Gang Files SEC Complaint

A ransomware gang, annoyed at not being paid, filed an SEC complaint against its victim for not disclosing its security breach within the required four days. This is over the top, but is just another example of the extreme pressure ransomware gangs put on companies after seizing their data. Gangs...