GHSA-MV93-WVCP-7M7R vulnerabilities

Vulnerabilities for packages: hey...

GHSA-4R78-HX75-JJJ2 vulnerabilities

Vulnerabilities for packages: hey...

GHSA-4R78-HX75-JJJ2 vulnerabilities

Vulnerabilities for packages: hey...

CVE-2021-31525 vulnerabilities

Vulnerabilities for packages: terraform-provider-sendgrid, k3d, grpcurl, hey, terraform-provider-sendgrid-fips...

CVE-2021-31525 vulnerabilities

Vulnerabilities for packages: terraform-provider-sendgrid, k3d, hey, grpcurl...

CVE-2021-33194 vulnerabilities

Vulnerabilities for packages: terraform-provider-sendgrid, k3d, grpcurl, hey, terraform-provider-sendgrid-fips...

CVE-2021-33194 vulnerabilities

Vulnerabilities for packages: terraform-provider-sendgrid, k3d, hey, grpcurl...

Basecamp: Bypass of image rewriting / tracking blocker via srcset

CVSS ---- Medium 4.7 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N Description ----------- One of the security features of Hey is blocking of tracking pixels to preserve users privacy. As such, img tags and similar are rewritten by the app to point to gopher.hey.com. However, an attacker can bypas...

@amazingcat/amazing-iohook (>=8.2.3 <=8.3.3), @donmahallem/trapeze-client-desktop (=5.1.1) +15 more potentially affected by CVE-2020-15215 via electron (>=8.0.0-beta.1 <=8.5.1)

electron NPM version =8.0.0-beta.1, =8.2.3, =8.0.0, =0.1.0, =4.0.0-beta.1, =1.0.1, =1.7.0, =1.0.3, =1.0.5, =0.0.1, =1.1.35, =1.1.51 and more Source cves: CVE-2020-15215 Source advisory: OSV:GHSA-56PC-6JQP-XQJ8...

@amazingcat/amazing-iohook (>=8.2.3 <=8.3.3), @donmahallem/trapeze-client-desktop (=5.1.1) +15 more potentially affected by CVE-2020-15174 via electron (>=8.0.0-beta.1 <=8.5.0)

electron NPM version =8.0.0-beta.1, =8.2.3, =8.0.0, =0.1.0, =4.0.0-beta.1, =1.0.1, =1.7.0, =1.0.3, =1.0.5, =0.0.1, =1.1.35, =1.1.51 and more Source cves: CVE-2020-15174 Source advisory: OSV:GHSA-2Q4G-W47C-4674...

CVE-2019-9512 vulnerabilities

Vulnerabilities for packages: hey, k3d...

CVE-2019-9514 vulnerabilities

Vulnerabilities for packages: hey, k3d...

CVE-2019-9512 vulnerabilities

Vulnerabilities for packages: k3d, hey...

CVE-2019-9514 vulnerabilities

Vulnerabilities for packages: k3d, hey...

Apple's New MacBook Disconnects Microphone "Physically" When Lid is Closed

Apple introduces a new privacy feature for all new MacBooks that "at some extent" will prevent hackers and malicious applications from eavesdropping on your conversations. Apple's custom T2 security chip in the latest MacBooks includes a new hardware feature that physically disconnects the...

CVE-2018-17848 vulnerabilities

Vulnerabilities for packages: hey...

CVE-2018-17847 vulnerabilities

Vulnerabilities for packages: hey...

CVE-2018-17847 vulnerabilities

Vulnerabilities for packages: hey...

CVE-2018-17848 vulnerabilities

Vulnerabilities for packages: hey...

HEY Integer Overflow Vulnerability

HEY is a tradable Ether ERC20 token. An integer overflow vulnerability exists in the mintToken function of HEY's smart contract implementation. The vulnerability can be exploited by the contract owner to set the balance of any user to any value...