Instagram Slow to Tackle Bots Targeting Iranian Women’s Groups

Despite alerting Meta months ago, feminist groups say tens of thousands of fake accounts continue to bombard them on the platform...

[SECURITY] Fedora 36 Update: kernel-5.18.11-200.fc36

The kernel meta package...

Europe threatens to ban Facebook over data transfers to the US

If regulators have their way, data transfers from Facebook and Instagram between Europe and the United States could stop this summer. WhatsApp, another Meta service, will not be affected by the decision as it has a different data controller within Meta. This could force Meta, Facebooks parent...

[SECURITY] Fedora 35 Update: kernel-5.18.10-100.fc35

The kernel meta package...

[SECURITY] Fedora 36 Update: kernel-5.18.10-200.fc36

The kernel meta package...

Atlassian Jira < 8.13.25 / 8.14.0 < 8.20.12 / 8.22.0 (JRASERVER-73593)

The version of Atlassian Jira Server running on the remote host is affected by a vulnerability as referenced in the JRASERVER-73593 advisory. - Affected versions of Atlassian Jira Server and Data Center allow authenticated remote attackers without permission to view a private project to view the...

restaurant-meta.de Cross Site Scripting vulnerability OBB-2720906

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-2227

Improper access control in the runner jobs API in GitLab CE/EE affecting all versions prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1 allows a previous maintainer of a project with a specific runner to access job and project meta data under certain conditions...

CVE-2022-32551: Improper Limitation of a Pathname to a Restricted Directory

Zoho ManageEngine ServiceDesk Plus MSP before 10604 allows path traversal to WEBINF/web.xml from sample/WEB-INF/web.xml or sample/META-INF/web.xml...

CVE-2022-30337

Cross-Site Request Forgery CSRF vulnerability in JoomUnited WP Meta SEO plugin = 4.4.8 at WordPress allows an attacker to update the social settings...

WordPress WP Meta SEO plugin <= 4.4.8 - Social Settings Update via Cross-Site Request Forgery (CSRF) vulnerability

Social Settings Update via Cross-Site Request Forgery CSRF vulnerability discovered by Rafie Muhammad aka Yeraisci Patchstack Alliance in WordPress WP Meta SEO plugin versions = 4.4.8. Solution Update the WordPress WP Meta SEO plugin to the latest available version at least 4.4.9...

WP Meta SEO < 4.4.9 - Social Settings Update via CSRF

The plugin does not have CSRF check in place when updating its social settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

Instagram introduces new ways for users to verify their age

If Instagram suspects you are fibbing about your age, youll currently see the following message: “You must be at least 13 years old to have an Instagram account. We disabled your account because you are not old enough yet. If you believe we made a mistake, please verify your age by submitting a...

[SECURITY] [DSA 5169-1] openssl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5169-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff June 26, 2022 https://www.debian.org/security/faq -...

The Post-Roe Privacy Nightmare Has Arrived

Plus: Microsoft details Russia’s Ukraine hacking campaign, Meta’s election integrity efforts dwindle, and more...

How to Move Your WhatsApp Chats Across Devices and Apps

It's never been easier to switch between iPhone and Android—and to get your messages out of the Meta ecosystem entirely...

Malicious code in is-meta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 42bb282e357a026903b53ced3f543d1065d661f255ece06b34dabeba0f08c812 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3958 Malicious code in is-meta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 42bb282e357a026903b53ced3f543d1065d661f255ece06b34dabeba0f08c812 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in meta-left-pad (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a19253348a23c665bd890b1db3dc8d7961574a3009a13f687b22846bd355bad8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in load-image-meta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 253cffc7e3e71e02985ac62369fff4ddf3ed3f5036a29626ce30a64bef3afcc7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...