7592 matches found
Apple’s new iOS setting addresses a hidden layer of location tracking
Most iPhone owners have hopefully learned to manage app permissions by now, including allowing location access. But there's another layer of location tracking that operates outside these controls. Your cellular carrier has been collecting your location data all along, and until now, there was...
Craft Commerce 跨站脚本漏洞
Craft Commerce is an e-commerce platform derived from the open-source Craft CMS. Versions of Craft Commerce from 4.0.0-RC1 to 4.10.0, as well as from 5.0.0 to 5.5.1, have a cross-site scripting vulnerability. This vulnerability stems from the address line 1 field in the inventory location not bei...
AZL-77910 CVE-2026-1703 affecting package python-virtualenv for versions less than 20.36.1-2
When pip is installing and extracting a maliciously crafted wheel archive, files may be extracted outside the installation directory. The path traversal is limited to prefixes of the installation directory, thus isn't able to inject or overwrite executable files in typical situations...
MINI-2R3F-3VXV-6P2R
Bulletin has no description...
CVE-2026-1777: Cleartext Transmission of Sensitive Information
The Amazon SageMaker Python SDK before v3.2.0 and v2.256.0 includes the ModelBuilder HMAC signing key in the cleartext response elements of the DescribeTrainingJob function. A third party with permissions to both call this API and permissions to modify objects in the Training Jobs S3 output...
MINI-XMH7-8P49-F694
Bulletin has no description...
MINI-FF4Q-GHFC-5RC6
Bulletin has no description...
MINI-FMMP-5W43-XFWG
Bulletin has no description...
MINI-WM6J-GFJC-HQJ5
Bulletin has no description...
MINI-4MWR-WV3G-HPQW
Bulletin has no description...
Security Bulletin: Location Service for ESRI Component uses urllib3-2.5.0 and werkzeug-3.1.3 library which were vulnerable to CVE-2025-66418, CVE-2025-66471 and CVE-2025-66221 respectively
Summary Location Service for ESRI Component uses urllib3-2.5.0 and werkzeug-3.1.3 library which were vulnerable to CVE-2025-66418, CVE-2025-66471 and CVE-2025-66221 respectively. Vulnerability Details CVEID:CVE-2025-66418 DESCRIPTION: urllib3 is a user-friendly HTTP client library for Python...
ECHO-E857-6D70-7368
Bulletin has no description...
CGA-H825-7C23-W8Q3
Bulletin has no description...
CGA-PP48-MXXW-7J3P
Bulletin has no description...
CGA-JVW3-VQ6Q-H2Q7
Bulletin has no description...
CGA-GGHQ-XFVV-GGVQ
Bulletin has no description...
CGA-G5CH-4CHW-56V5
Bulletin has no description...
CGA-73MP-JJFM-5663
Bulletin has no description...