CVE-2022-0155

CVE-2022-0155 is associated with the follow-redirects library and involves Exposure of Private Personal Information to an Unauthorized Actor. The linked document details that an unauthorized actor could obtain sensitive information during redirects, constituting a data exposure risk. No exploitat...

CVE-2022-0155

follow-redirects is vulnerable to Exposure of Private Personal Information to an Unauthorized Actor...

New macOS vulnerability, “powerdir,” could lead to unauthorized user data access

Following our discovery of the “Shrootless” vulnerability, Microsoft uncovered a new macOS vulnerability, “powerdir,” that could allow an attacker to bypass the operating system’s Transparency, Consent, and Control TCC technology, thereby gaining unauthorized access to a user’s protected data. We...

Follow Redirects 安全漏洞

Follow Redirects is a Node.js module that automatically follows Https redirects. A security vulnerability exists in Follow Redirects, which stems from the fact that follow-redirects can easily expose private personal information to unauthorized participants...

PT-2022-2422

Name of the Vulnerable Software and Affected Versions follow-redirects affected versions not specified Description The issue is related to errors in handling cookies, which can allow a remote attacker to gain unauthorized access to protected information. This can lead to exposure of private...

Amios Emuse-eServices/eNvoice has an unspecified vulnerability

Amios Emuse-eServices/eNvoice is an electronic invoicing service from the Israeli company Amios. It is a digital interface that simplifies the collection process and automatically sends invoices to customers via email. Amios Emuse-eServices/eNvoice suffers from a security vulnerability that stems...

Gumtree exposed users’ personal and GPS location via source code

By Waqas Gumtree.com or Gumtree is a London, England-based online classified advertisement website with millions of registered users. This is a post from HackRead.com Read the original post: Gumtree exposed users personal and GPS location via source code...

Information exposure in elgg

elgg is vulnerable to Exposure of Private Personal Information to an Unauthorized Actor. Forms in the view namespace 'forms/admin' were not protected by an AdminGatekeeper in case of AJAX requests to 'ajax/form/admin/'...

GHSA-HX6G-Q9V2-XH7V Information exposure in elgg

elgg is vulnerable to Exposure of Private Personal Information to an Unauthorized Actor. Forms in the view namespace 'forms/admin' were not protected by an AdminGatekeeper in case of AJAX requests to 'ajax/form/admin/'...

How to Opt Out of Verizon’s Custom Experience Tracking

Unless you manually opt out of the program, Verizon will store personal information and create user interest profiles...

CVE-2021-3980

elgg is vulnerable to Exposure of Private Personal Information to an Unauthorized Actor...

CVE-2021-3980

elgg is vulnerable to Exposure of Private Personal Information to an Unauthorized Actor...

Code injection

elgg is vulnerable to Exposure of Private Personal Information to an Unauthorized Actor...

CVE-2021-3980 Exposure of Private Personal Information to an Unauthorized Actor in elgg/elgg

elgg is vulnerable to Exposure of Private Personal Information to an Unauthorized Actor...

CVE-2021-3980

CVE-2021-3980 affects elgg/elgg. The issue is information exposure due to insufficient access control in the view namespace forms/admin for AJAX requests, leading to potential private data leakage. Multiple connected sources (GHSA/HX6G-Q9V2-XH7V2, Veracode, RH Red Hat) describe lack of AdminGatek...

Panasonic’s Data Breach Leaves Open Questions

Consumer electronics giant Panasonic’s data breach raises questions, researchers say – given that more than two weeks after the incident was discovered, it’s unclear if customers’ personal information has been impacted. On Friday, Panasonic confirmed that its “network was illegally accessed by a...

Italy's Antitrust Regulator Fines Google and Apple for "Aggressive" Data Practices

Italy's antitrust regulator has fined both Apple and Google €10 million each for what it calls are "aggressive" data practices and for not providing consumers with clear information on commercial uses of their personal data during the account creation phase. The Autorità Garante della Concorrenza...

SharkBot Android banking Trojan cleans users out

Researchers have discovered and analyzed a new Android banking Trojan that allows attackers to steal sensitive banking information such as user credentials, personal information, current balance, and even to perform gestures on the infected device. According to the researchers, SharkBot...

Mozilla Firefox Security Advisory (MFSA2015-148) - Linux

This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

‘Tis the Season for the Wayward Package Phish

The holiday shopping season always means big business for phishers, who tend to find increased success this time of year with a lure about a wayward package that needs redelivery. Heres a look at a fairly elaborate SMS-based phishing scam that spoofs FedEx in a bid to extract personal and financi...