397 matches found
uListing < 2.0.6 - Modify User Roles via CSRF
An Add/Edit User Roles via CSRF vulnerability was discovered in the plugin. Missing WPNonce security tokens https://codex.wordpress.org/WordPressNonces . PoC | CSRF | Add/Edit User Roles: POST /wp-admin/admin-ajax.php HTTP/2 Host: example.com Cookie: cookies User-Agent: Mozilla/5.0 Content-Type:...
TikTok Quietly Updated Its Privacy Policy to Collect Users' Biometric Data
Popular short-form video-sharing service TikTok quietly revised its privacy policy in the U.S., allowing it to automatically collect biometric information such as faceprints and voiceprints from the content its users post on the platform. The policy change, first spotted by TechCrunch, went into...
CVE-2021-33506
jitsi-meet-prosody in Jitsi Meet before 2.0.5963-1 does not ensure that restrictroomcreation is set by default. This can allow an attacker to circumvent conference moderation...
CVE-2021-33506
jitsi-meet-prosody in Jitsi Meet before 2.0.5963-1 does not ensure that restrictroomcreation is set by default. This can allow an attacker to circumvent conference moderation...
Design/Logic Flaw
jitsi-meet-prosody in Jitsi Meet before 2.0.5963-1 does not ensure that restrictroomcreation is set by default. This can allow an attacker to circumvent conference moderation...
CVE-2021-33506
jitsi-meet-prosody in Jitsi Meet before 2.0.5963-1 does not ensure that restrictroomcreation is set by default. This can allow an attacker to circumvent conference moderation...
CVE-2021-33506
CVE-2021-33506 affects jitsi-meet-prosody in Jitsi Meet prior to 2.0.5963-1, where restrict_room_creation is not enabled by default. This misconfiguration can allow an attacker to circumvent conference moderation. Connected sources confirm the issue across multiple vectors (Red Hat CVE page and C...
How chat platforms are using Machine Learning for content moderation?
By Uzair Amir More and more online services are using Machine Learning ML, the method of data analysis that will automate the building of analytical mode. This is a post from HackRead.com Read the original post: How chat platforms are using Machine Learning for content moderation?...
WordPress <= 2.0.11 CSRF Vulnerability
WordPress is prone to a cross-site request forgery CSRF vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...
Researcher Builds Parler Archive Amid Amazon Suspension
A security researcher said she has scraped and is archiving 99 percent of Parler’s public posts, as the social-media network goes offline following suspensions from Amazon, Apple and Google. Archived content includes public posts from the social-media site. These posts reportedly included Parler...
Trump and the Limits of Content Moderation
The president’s televised encouragement of white supremacy and political violence was a reminder that social media didn’t create these problems...
Twitter Hacked in Bitcoin Scam
It started with one weird tweet. Then another. Quickly, some of the most prominent accounts on Twitter were all sending out the same message; I am giving back to the community. All Bitcoin sent to the address below will be sent back double! If you send $1,000, I will send back $2,000. Only doing...
Games Don't Do Enough to Combat Toxicity at Launch
Riot Games has cutting-edge moderation tools at its disposal. Few of them are present in Valorant, which launched this week...
OLX: Bypass Rejected ads so user can view it as normal live ad.
A logic error allowed creating chats from ads that were still pending moderation or were rejected...
CVE-2018-20898
cPanel before 71.9980.37 allows e-mail injection during cPAddons moderation SEC-396...
CVE-2018-20897
cPanel before 71.9980.37 allows arbitrary file-unlink operations via the cPAddons moderation system SEC-395...
CVE-2018-20897
cPanel before 71.9980.37 allows arbitrary file-unlink operations via the cPAddons moderation system SEC-395...
Design/Logic Flaw
cPanel before 71.9980.37 allows arbitrary file-unlink operations via the cPAddons moderation system SEC-395...