Lucene search
K

17 matches found

Patchstack
Patchstack
added 2026/05/14 9:38 a.m.6 views

WordPress Burst Statistics – Privacy-Friendly WordPress Analytics (Google Analytics Alternative) plugin 3.4.0-3.4.1.1 - 3.4.1.1 - Authentication Bypass to Admin Account Takeover vulnerability

Privacy-Friendly WordPress Analytics Google Analytics Alternative plugin 3.4.0-3.4.1.1 - 3.4.1.1 - Authentication Bypass to Admin Account Takeover vulnerability discovered by ? in WordPress Plugin Burst Statistics versions 3.4.0-3.4.1.1...

9.8CVSS5.8AI score0.04729EPSS
Exploits8References1Affected Software1
RedhatCVE
RedhatCVE
added 2025/09/28 4:54 a.m.5 views

CVE-2025-9816

The WP Statistics – The Most Popular Privacy-Friendly Analytics Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the User-Agent Header in all versions up to, and including, 14.5.4 due to insufficient input sanitization and output escaping. This makes it possible for...

7.2CVSS5.2AI score0.00413EPSS
Exploits0References1
Wired Threat Level
Wired Threat Level
added 2025/05/27 10:30 a.m.21 views

The Privacy-Friendly Tech to Replace Your US-Based Email, Browser, and Search

Thanks to drastic policy changes in the US and Big Tech’s embrace of the second Trump administration, many people are moving their digital lives abroad. Here are a few options to get you started...

7.2AI score
Exploits0
OpenVAS
OpenVAS
added 2023/12/14 12:0 a.m.12 views

WordPress Burst Statistics - Privacy-Friendly Analytics for WordPress Plugin 1.4.x < 1.5.0 SQLi Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:burst-statistics:burststatistics"; if description...

9.8CVSS7.7AI score0.00506EPSS
Exploits1References1
CVE
CVE
added 2023/12/07 2:0 a.m.57 views

CVE-2023-5761

CVE-2023-5761 : Burst Statistics – Privacy-Friendly Analytics for WordPress is vulnerable to unauthenticated SQL Injection via the url parameter in versions 1.4.0 to 1.4.6.1 (free) and 1.4.0 to 1.5.0 (pro) due to insufficient escaping and insufficient preparation of the SQL query. Technical detai...

9.8CVSS7.7AI score0.00506EPSS
Exploits1References2Affected Software1
Malwarebytes
Malwarebytes
added 2022/06/27 7:23 p.m.15 views

Brave Search wants to replace Google’s biased search results with yours

Brave Search, Brave Softwares privacy search engine, just turned one. To celebrate, the company says it is moving the search engine out of its beta phase to become the default search engine for all Brave browser users. Goodbye, Google? Not entirely. In May 2015, Mozilla alumni Brendan Eich and...

0.1AI score
Exploits0
Schneier on Security
Schneier on Security
added 2022/03/08 12:1 p.m.10 views

Using Radar to Read Body Language

Yet another method of surveillance: Radar can detect you moving closer to a computer and entering its personal space. This might mean the computer can then choose to perform certain actions, like booting up the screen without requiring you to press a button. This kind of interaction already exist...

6.9AI score
Exploits0
ThreatPost
ThreatPost
added 2020/12/02 3:44 p.m.34 views

Microsoft Revamps ‘Invasive’ M365 Feature After Privacy Backlash

Microsoft has announced what it calls a more privacy-friendly version of its Productivity Score enterprise feature, following backlash from security experts who condemned it as a “full-fledged workplace surveillance tool.” The Productivity Score feature, which was launched as part of the Microsof...

Exploits0References11
Wired Threat Level
Wired Threat Level
added 2020/11/18 2:0 p.m.20 views

Ghostery’s Making a Privacy Browser—and Ad-Free Search Engine

The tracker-blocking company will soon launch a privacy-friendly desktop browser as well...

2.3AI score
Exploits0
Wired Threat Level
Wired Threat Level
added 2020/09/11 1:0 p.m.20 views

The Best Privacy-Friendly Alternatives to Google Maps

Google Maps is arguably the easiest mapping service to use, but that doesn't mean it's the most secure...

2.1AI score
Exploits0
Wired Threat Level
Wired Threat Level
added 2020/06/23 12:36 a.m.36 views

Apple Pushes Back Against Ad Tracking in Safari and iOS 14

At WWDC, the company detailed a litany of privacy-friendly improvements to its software...

2.7AI score
Exploits0
Kitploit
Kitploit
added 2019/06/16 10:16 p.m.173 views

Quarantyne - Modern Web Firewall: Stop Account Takeovers, Weak Passwords, Cloud IPs, DoS Attacks, Disposable Emails

Automated web security made simple Quarantyne is a reverse-proxy that protects web applications and APIs from fraudulent behavior, misuse, bots and cyber-attacks in real-time. Requirements Java 8 Presentation Quarantyne is a reverse-proxy written in java. It fronts a web application or API and...

7.7AI score
Exploits0References5
ThreatPost
ThreatPost
added 2014/09/11 1:3 p.m.15 views

Users in Dark about Permissions Granted to Mobile Apps

It’s no secret that mobile applications are a greedy bunch, often grasping for many more permissions than necessary. The UK’s Information Commissioner’s Office ICO this week released the results of a study conducted by the Global Privacy Enforcement Network GPEN that quantified just how bad the...

0.1AI score
Exploits0References4
Debian
Debian
added 2014/02/11 8:52 p.m.20 views

[SECURITY] [DSA 2860-1] parcimonie security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2860-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso February 11, 2014 http://www.debian.org/security/faq -...

7.5CVSS0.6AI score0.00417EPSS
Exploits0
Debian
Debian
added 2014/02/11 8:52 p.m.10 views

[SECURITY] [DSA 2860-1] parcimonie security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2860-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso February 11, 2014 http://www.debian.org/security/faq -...

7.5CVSS5.8AI score0.00417EPSS
Exploits0
OSV
OSV
added 2014/02/11 12:0 a.m.12 views

DSA-2860-1 parcimonie - information disclosure

Bulletin has no description...

7.5CVSS6.3AI score0.00417EPSS
Exploits0
OpenVAS
OpenVAS
added 2014/02/11 12:0 a.m.17 views

Debian Security Advisory DSA 2860-1 (parcimonie - information disclosure)

Holger Levsen discovered that parcimonie, a privacy-friendly helper to refresh a GnuPG keyring, is affected by a design problem that undermines the usefulness of this piece of software in the intended threat model. When using parcimonie with a large keyring 1000 public keys or more, it would alwa...

7.5CVSS6.2AI score0.00417EPSS
Exploits0References1
Rows per page
Query Builder