CVE-2024-41659

memos is a privacy-first, lightweight note-taking service. A CORS misconfiguration exists in memos 0.20.1 and earlier where an arbitrary origin is reflected with Access-Control-Allow-Credentials set to true. This may allow an attacking website to make a cross-origin request, allowing the attacker...

ZOOM Zoom Client 信息泄露漏洞

ZOOM Zoom Client is a video conferencing client application from Zoom USA ZOOM that supports multiple platforms. A security vulnerability exists in Zoom through 5.5.4, which stems from a vulnerability that allows an attacker to read private information on a participant's screen...