Apple macOS Ventura Log Information Disclosure Vulnerability

Apple macOS Ventura is a desktop operating system from Apple Inc. in the United States. A security vulnerability exists in Apple macOS Ventura version 13.5, which stems from an application that may be able to read sensitive location information...

Apple macOS Ventura Security Vulnerability

Apple macOS Ventura is a desktop operating system from Apple Inc. in the United States. A security vulnerability exists in Apple macOS Ventura version 13.5, which stems from an application that may be able to determine a user's current location...

PT-2023-22916 · Weather · Weather

Name of the Vulnerable Software and Affected Versions: Weather versions prior to SMR Sep-2023 Release 1 Description: The issue allows attackers to access location information set in Weather without permission due to an improper access control vulnerability. Recommendations: For versions prior to...

location-normandie.com Cross Site Scripting vulnerability OBB-3630836

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

InterPhoto 2.3.0 Shell Upload

==================================================================================================================================== | Title : InterPhoto 2.3.0 Persians Remote Shell Upload vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox...

Invalid Error Reverts in Some Cases

Lines of code Vulnerability details Description: While reviewing the code, I noticed that there is a potential issue with the error revert conditions in the getPointGivenXandUtility and getPointGivenYandUtility functions. The error handling mechanism in these functions might not be functioning as...

Smoke Loader Botnet Drops Location Tracker Whiffy Recon Malware

By Deeba Ahmed The new Whiffy Recon Malware was identified by cybersecurity researchers at Secureworks. This is a post from HackRead.com Read the original post: Smoke Loader Botnet Drops Location Tracker Whiffy Recon Malware...

E-mailer Newsletter And Mailing System with Analytics + GEO location 1.16 Information Disclosure

================================================================================================================================== | Title : E-mailer Newsletter & Mailing System with Analytics + GEO location v1.16 information Disclosure vulnerability | | Author : indoushka | | Tested on : windows...

Cloud connector disconnected - event id 514

In a resource location with multiple cloud connectors, some of them show as "disconnected" in Citrix Cloud or the Cloud Dashboard page. Other Connectors do not display the problem. All Cloud Connectors in the same VLAN. Cloud Connector Connectivity Check Utility does not detect any problems with...

August 22, 2023—KB5029332 (OS Build 22000.2360) Preview

None None...

August 22, 2023—KB5029331 (OS Build 19045.3393) Preview

None None...

PT-2023-21079 · Openssl +1 · Openssl +1

Name of the Vulnerable Software and Affected Versions: 3CX affected versions not specified Description: This issue allows local attackers to escalate privileges on affected installations of 3CX. An attacker must first obtain the ability to execute low-privileged code on the target system in order...

A new type of "freedom," or, tracking children with AirTags, with Heather Kelly: Lock and Code S04E17

"Freedom" is a big word, and for many parents today, it's a word that includes location tracking. Across America, parents are snapping up Apple AirTags, the inexpensive location tracking devices that can help owners find lost luggage, misplaced keys, and--increasingly so--roving toddlers setting...

CVE-2023-3267

When adding a remote backup location, an authenticated user can pass arbitrary OS commands through the username field. The username is passed without sanitization into CMD running as NT/Authority System. An authenticated attacker can leverage this vulnerability to execute arbitrary code with...

CVE-2023-3267

CVE-2023-3267 affects CyberPower PowerPanel Enterprise DCIM. The vulnerability is an OS command injection where an authenticated user can place arbitrary commands in the username field, which is passed un-sanitized into CMD running with SYSTEM privileges. This yields authenticated remote code exe...

CVE-2023-30654

Improper access control vulnerability in SLocationService prior to SMR Aug-2023 Release 1 allows local attacker to update fake location...

CVE-2023-30654

Improper access control vulnerability in SLocationService prior to SMR Aug-2023 Release 1 allows local attacker to update fake location...

Improper access control

Improper access control vulnerability in SLocationService prior to SMR Aug-2023 Release 1 allows local attacker to update fake location...

CVE-2023-30654

Improper access control vulnerability in SLocationService prior to SMR Aug-2023 Release 1 allows local attacker to update fake location...

Rails Security Vulnerabilities

Rails is an open source web application framework based on the Ruby language from the Rails team in the United States. A security vulnerability exists in Rails that stems from the redirectto method in Rails that allows values to be supplied that contain characters that are not legal in the HTTP...