1148 matches found
ALPINE-CVE-2016-6328
A vulnerability was found in libexif. An integer overflow when parsing the MNOTE entry data of the input file. This can cause Denial-of-Service DoS and Information Disclosure disclosing some critical heap chunk metadata, even other applications' private data...
Teacher linked to Celebgate hacking scandal facing 7 years in prison
By Uzair Amir Former Lee Davis High School, Virginia teacher Christopher Brannan set to plead guilty to the federal charges of hacking into the computers of Celebrities including Emma Watson and non-celebrities leading to their private data in the Celebgate hacking scandal. 31 years old Christoph...
GHSA-CGJX-MWPX-47JV Private Data Disclosure in express-restify-mongoose
Affected versions of express-restify-mongoose are susceptible to an information leakage vulnerability which may allow an attacker to access fields on a model even if those fields are marked as private. Proof of Concept If you have a user model that you want to protect, such as the following User...
CVE-2018-12366
An invalid grid size during QCMS color profile transformations can result in the out-of-bounds read interpreted as a float value. This could leak private data into the output. This vulnerability affects Thunderbird 60, Thunderbird 52.9, Firefox ESR 60.1, Firefox ESR 52.9, and Firefox 61...
Out-of-bounds
An invalid grid size during QCMS color profile transformations can result in the out-of-bounds read interpreted as a float value. This could leak private data into the output. This vulnerability affects Thunderbird 60, Thunderbird 52.9, Firefox ESR 60.1, Firefox ESR 52.9, and Firefox 61...
CVE-2018-12366
An invalid grid size during QCMS color profile transformations can result in the out-of-bounds read interpreted as a float value. This could leak private data into the output. This vulnerability affects Thunderbird 60, Thunderbird 52.9, Firefox ESR 60.1, Firefox ESR 52.9, and Firefox 61...
Threatpost News Wrap Podcast For Aug. 31
The Threatpost team breaks down the biggest news for the week ending on August 31. Topics covered are a Microsoft Windows zero-day, Yahoo’s recent acknowledgement that it scans emails to target ads to a report that mobile app SDKs capture private data when an Android or iOS app crashes. Download...
Crashing Mobile Apps Capture Screens, Leak Private Data
Several mobile software developer kits SDKs can capture sensitive user data when a mobile app crashes, exposing private data to an outside third party. Researchers at Appthority singled out SDKs offered by AppSee and TestFairy in a report published Monday. They warned that mobile users whose apps...
Brazilian Crypto exchange hacked; private data of over 264,000 users exposed
By Waqas A Brazilian firm Crypto exchange Atlas has become a victim of a security breach and over 264,000 users’ email addresses, phone numbers, and cryptocurrency amount related information might have been leaked. The news of data hack was reported firstly by a YouTube channel in Brazil called...
Google Chrome Bug Opens Access to Private Facebook Information
A browser bug in Google Chrome has been discovered that lets bad actors uncover private data stored on Facebook, Google sites and other platforms, by using video and audio HTML tags, and the filtering functions in websites. The bug in question exists in the Blink engine, which is used to power...
A Bug in Chrome Gives Bad Actors License to Play ‘20 Questions’ with Your Private Data
In a 2013 interview with The Telegraph, Eric Schmidt, then CEO of Google was quoted as saying: “You have to fight for your privacy or lose it.” Five years later, with the ‘Cambridge Analytica’ data breach scandal fresh in our memory, Eric Schmidt’s statement rings as a self-evident truth. Similar...
Mozilla: Invalid data handling during QCMS transformations
An invalid grid size during QCMS color profile transformations can result in the out-of-bounds read interpreted as a float value. This could leak private data into the output. This vulnerability affects Thunderbird 60, Thunderbird 52.9, Firefox ESR 60.1, Firefox ESR 52.9, and Firefox 61...
Mozilla: Invalid data handling during QCMS transformations
An invalid grid size during QCMS color profile transformations can result in the out-of-bounds read interpreted as a float value. This could leak private data into the output. This vulnerability affects Thunderbird 60, Thunderbird 52.9, Firefox ESR 60.1, Firefox ESR 52.9, and Firefox 61...
Millions of Telefonica customers’ data exposed after security breach
By Waqas Telefonica, a telecom operator based in Spain, has become a victim of a security breach after hackers managed to exploit a vulnerability that led to the exposure of private data of millions of Telefonica customers while leaking billing data of other customers. The billing data is easily...
CVE-2018-0706
Exposure of Private Information in QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow authenticated users to access sensitive information...
UBUNTU-CVE-2018-10857
git-annex is vulnerable to a private data exposure and exfiltration attack. It could expose the content of files located outside the git-annex repository, or content from a private web server on localhost or the LAN...
CVE-2018-10857
git-annex is vulnerable to a private data exposure and exfiltration attack. It could expose the content of files located outside the git-annex repository, or content from a private web server on localhost or the LAN...
CVE-2018-10857
git-annex is vulnerable to a private data exposure and exfiltration attack. It could expose the content of files located outside the git-annex repository, or content from a private web server on localhost or the LAN...
CVE-2018-10857
CVE-2018-10857 affects the Git-annex project. The vulnerability allows private data exposure by exposing content of files outside the git-annex repository or content from a private web server on localhost or the LAN. Public sources in connected documents indicate that a fix was released in git-an...
