4025 matches found
Video Marketing Software Animker Leaking Trove of User Data
By Waqas At the time of publishing this article, the database has continued to grow with new data. This is a post from HackRead.com Read the original post: Video Marketing Software Animker Leaking Trove of User Data...
GHSA-VR2X-7687-H6QV api-platform/core's secured properties may be accessible within collections
Impact Resource properties secured with the security option of the ApiPlatform\Metadata\ApiProperty attribute can be disclosed to unauthorized users. The problem affects most serialization formats, including raw JSON, which is enabled by default when installing API Platform. Custom serialization...
api-platform/core's secured properties may be accessible within collections
Impact Resource properties secured with the security option of the ApiPlatform\Metadata\ApiProperty attribute can be disclosed to unauthorized users. The problem affects most serialization formats, including raw JSON, which is enabled by default when installing API Platform. Custom serialization...
Design/Logic Flaw
API Platform Core is the server component of API Platform: hypermedia and GraphQL APIs. Resource properties secured with the security option of the ApiPlatform\Metadata\ApiProperty attribute can be disclosed to unauthorized users. The problem affects most serialization formats, including raw JSON...
kernel: Netfilter integer overflow vulnerability in nft_payload_copy_vlan
A buffer overflow vulnerability was found in the Netfilter subsystem in the Linux Kernel. This issue could allow the leakage of both stack and heap addresses, and potentially allow Local Privilege Escalation to the root user via arbitrary code execution...
CVE-2022-22668
A logic issue was addressed with improved restrictions. This issue is fixed in iOS 15.4 and iPadOS 15.4, macOS Monterey 12.3. A malicious application may be able to leak sensitive user information...
CVE-2022-32784
The issue was addressed with improved UI handling. This issue is fixed in Safari 15.6, iOS 15.6 and iPadOS 15.6. Visiting a maliciously crafted website may leak sensitive data...
Design/Logic Flaw
The issue was addressed with improved UI handling. This issue is fixed in Safari 15.6, iOS 15.6 and iPadOS 15.6. Visiting a maliciously crafted website may leak sensitive data...
CVE-2022-32784
CVE-2022-32784 affects Apple Safari/WebKit; the issue was addressed with improved UI handling and is fixed in Safari 15.6, iOS 15.6, and iPadOS 15.6. The description indicates that visiting a maliciously crafted website could leak sensitive data. The connected documents corroborate Safari/iOS/iPa...
CVE-2022-32784
The issue was addressed with improved UI handling. This issue is fixed in Safari 15.6, iOS 15.6 and iPadOS 15.6. Visiting a maliciously crafted website may leak sensitive data...
Ubuntu 16.04 ESM : Linux kernel (AWS) vulnerabilities (USN-5884-1)
The remote Ubuntu 16.04 ESM host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5884-1 advisory. Kirill Tkhai discovered that the XFS file system implementation in the Linux kernel did not calculate size correctly when pre-allocating space in some...
Amazon Linux AMI : kernel (ALAS-2023-1688)
The version of kernel installed on the remote host is prior to 4.14.262-135.486. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2023-1688 advisory. 2024-04-30: CVE-2023-0047 was removed from this advisory rejected. 2024-02-01: CVE-2023-0047 was added to this...
Android voice chat app with 5m installs leaked user chats
By Habiba Rashid The voice chat app under discussion is OyeTalk, which is available for Android and iOS devices and is operated from Pakistan. This is a post from HackRead.com Read the original post: Android voice chat app with 5m installs leaked user chats...
Important: kernel
Issue Overview: A flaw in the processing of received ICMP errors ICMP fragment needed and ICMP redirect in the Linux kernel functionality was found to allow the ability to quickly scan open UDP ports. This flaw allows an off-path remote user to effectively bypass the source port UDP randomization...
K71080411: Linux kernel vulnerability CVE-2021-4155
Security Advisory Description A data leak flaw was found in the way XFSIOCALLOCSP IOCTL in the XFS filesystem allowed for size increase of files with unaligned size. A local attacker could use this flaw to leak data on the XFS filesystem otherwise not accessible to them. CVE-2021-4155 Impact Ther...
postgresql-jdbc: Information leak of prepared statement data due to insecure temporary file permissions
A flaw was found in org.postgresql. This issue allows the creation of a temporary file when using PreparedStatement.setTextint, InputStream and PreparedStatemet.setByteaint, InputStream. This could allow a user to create an unexpected file available to all users, which could end in unexpected...
Mozilla: Email user account in indexacao waybackurl
The indexation of a large number of user emails on the Internet Archive in the Mozilla accounts service, accounts.firefox.com, was discovered. The presence of the leaked data was reported to Mozilla, but it did not meet the criteria for a security risk due to the lack of a current flaw in a Mozil...
A week in security (February 13 - 19)
Last week on Malwarebytes Labs: What is AI good at and what the heck is it, actually, with Josh Saxe: Lock and Code S04E04 Malwarebytes recognized as endpoint security leader by G2 CISA issues alert with South Korean government about DPRK's ransomware antics Jailbreaking ChatGPT and other large...
QR code generator My QR Code leaks users’ login data and addresses
By Waqas My QR Code was informed about the leak almost two weeks ago, yet it failed to respond or secure its server. This is a post from HackRead.com Read the original post: QR code generator My QR Code leaks users login data and addresses...