CVE-2024-33948 WordPress TweetScroll Widget plugin <= 1.3.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Pixel Industry TweetScroll Widget allows Stored XSS.This issue affects TweetScroll Widget: from n/a through 1.3.7...

CVE-2024-33948

CVE-2024-33948 — TweetScroll Widget stored XSS : The WordPress plugin TweetScroll Widget (Pixel Industry) is affected by a stored cross-site scripting vulnerability up to version 1.3.7. The vulnerability is identified as CVSS v3.1 base score 6.5 (Medium) with network attack vector, requiring user...

Exploit for Use After Free in Arm 5Th_Gen_Gpu_Architecture_Kernel_Driver

Exploit for CVE-2023-6241 The write up can be found hereh...

Exploit for Use After Free in Arm 5Th_Gen_Gpu_Architecture_Kernel_Driver

Exploit for CVE-2023-6241 The write up can be found hereh...

Moderate: Red Hat Security Advisory: mingw-pixman security update

An update for mingw-pixman is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...

Kaiser health insurance leaked patient data to advertisers

Health insurance giant Kaiser has announced it will notify millions of patients about a data breach after sharing patients’ data with advertisers. Kaiser said that an investigation led to the discovery that “certain online technologies, previously installed on its websites and mobile applications...

SUSE CVE-2024-32041

FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients that use a version of FreeRDP prior to 3.5.0 or 2.11.6 are vulnerable to out-of-bounds read. Versions 3.5.0 and 2.11.6 patch the issue. As a workaround, deactivate /gfx on by default, set /bpp or /rfx options...

The vulnerability of the Android operating system on Pixel phones allows attackers to gain increased privileges.

The vulnerability of the Android operating system on Pixel phones exists due to insufficient validation of input data. Exploiting this vulnerability can allow attackers to gain increased privileges...

The vulnerability of the Android operating system’s downloader on Pixel phones allows attackers to disclose sensitive information.

The vulnerability of the Android operating system’s downloader in Pixel phones relates to the use of an uninitialized resource. Exploiting this vulnerability can allow attackers to disclose sensitive information that is protected by security measures...

Sneaky Credit Card Skimmer Disguised as Harmless Facebook Tracker

Cybersecurity researchers have discovered a credit card skimmer that's concealed within a fake Meta Pixel tracker script in an attempt to evade detection. Sucuri said that the malware is injected into websites through tools that allow for custom code, such as WordPress plugins like Simple Custom...

The vulnerability of the UncompressedImageCodec::get_luma_bits_per_pixel_from_configuration_unci() function in the decoder and file format encoder of the libheif library allows a attacker to cause a service failure.

The vulnerability of the UncompressedImageCodec::getlumabitsperpixelfromconfigurationunci function in the file format decoders and encoders for the libheif library is related to a segmentation error. Exploiting this vulnerability could allow an attacker to cause service failures...

Google Pixel 安全漏洞

Google Android is a free and open source mobile operating system developed by Google Inc. based on the Linux kernel. Google Android suffers from an out-of-bounds read vulnerability that stems from a lack of bounds checking in the applyminlockconstraint module of the dvfs.c file. An attacker can...

Google Pixel 安全漏洞

Google Pixel is a smartphone from Google, Inc USA. A security vulnerability exists in Google Pixel, which stems from a missing bounds check in the tmusettable module of the tmu.c file, which may result in out-of-bounds writes...

Google Pixel 安全漏洞

Google Pixel is a smartphone from Google, Inc. in the United States. A security vulnerability exists in Google Pixel, which stems from a missing null check in the asn1ecpkeyparsep384 module of the asn1common.c file, which could lead to out-of-bounds reads...

Google Pixel 安全漏洞

Google Pixel is a smartphone from Google, Inc. in the United States. A security vulnerability exists in Google Pixel, which stems from a missing bounds check in the kmexpdidinner module of the kmv.c file, which may result in out-of-bounds reads...

Google Pixel 安全漏洞

Google Pixel is a smartphone from Google, an American company. A security vulnerability exists in Google Pixel that stems from a buffer overflow in the afecallback module of the q6afe.c file, which may result in out-of-bounds writes...

Google Pixel 安全漏洞

Google Pixel is a smartphone from Google Inc USA. A security vulnerability exists in Google Pixel, which stems from a missing bounds check in the tmugettrthresholds module, which may result in out-of-bounds reads...

Google Pixel 安全漏洞

Google Pixel is a smartphone from Google, Inc. in the United States. A security vulnerability exists in Google Pixel, which stems from a missing null check in the asn1ecpkeyparse module of the asn1common.c file, which may result in an OOB read...

Google Pixel 安全漏洞

Google Pixel is a smartphone from Google, an American company. A security vulnerability exists in Google Pixel, which stems from an improper input validation in the tmugetpi module of the tmu.c file, which may result in out-of-bounds reads...

Google Pixel 安全漏洞

Google Pixel is a smartphone from the American company Google Google. Google Pixel has a security vulnerability that stems from the presence of a logic error that has a possible way to bypass...