Lucene search
+L

55 matches found

Github Security Blog
Github Security Blog
•added 2024/07/08 9:31 p.m.•23 views

Aim denial of service vulnerability

A vulnerability in aimhubio/aim version 3.19.3 allows an attacker to cause an infinite loop by configuring the remote tracking server to point at itself. This results in the server endlessly connecting to itself, rendering it unable to respond to other connections...

7.5CVSS7.4AI score0.00577EPSS
SaveExploits1References4Affected Software1
CVE
CVE
•added 2024/07/08 7:06 p.m.•94 views

CVE-2024-6227

CVE-2024-6227 affects the open-source tool aimhubio/aim version 3.19.3. The vulnerability arises when the remote tracking server is configured to point at itself, causing the server to endlessly connect to itself. This self-loop leads to a denial of service by rendering the server unresponsive to...

7.5CVSS7.2AI score0.00577EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
•added 2024/07/08 12:00 a.m.•19 views

Aim Resource Management Error Vulnerability

Aim is an easy-to-use and high-performance open source experiment tracker from Aim Open Source USA. Aim version 3.19.3 suffers from a Resource Management Error vulnerability that originates from allowing an attacker to cause a denial of service by configuring a remote tracking server to point to...

7.5CVSS6.7AI score0.00577EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/08 12:00 a.m.•3 views

CVE-2024-6227: Loop with Unreachable Exit Condition

A vulnerability in aimhubio/aim version 3.19.3 allows an attacker to cause an infinite loop by configuring the remote tracking server to point at itself. This results in the server endlessly connecting to itself, rendering it unable to respond to other connections...

7.5CVSS7.2AI score0.00577EPSS
SaveExploits1References1
SUSE CVE
SUSE CVE
•added 2023/02/15 5:05 a.m.•11 views

SUSE CVE-2016-2830

Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 preserve the network connection used for favicon resource retrieval after the associated browser window is closed, which makes it easier for remote web servers to track users by observing network traffic from multiple IP addresses...

4.3CVSS6.8AI score0.01459EPSS
SaveExploits0References11
RedHat Linux
RedHat Linux
•added 2020/03/31 9:03 p.m.•13 views

Kernel: net: weak IP ID generation leads to remote device tracking

A flaw was found in the way the Linux kernel derived the IP ID field from a partial kernel space address returned by a nethashmix function. A remote user could observe a weak IP ID generation in this field to track Linux devices...

6.5CVSS7.2AI score0.02571EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2020/03/31 8:33 p.m.•10 views

Kernel: net: weak IP ID generation leads to remote device tracking

A flaw was found in the way the Linux kernel derived the IP ID field from a partial kernel space address returned by a nethashmix function. A remote user could observe a weak IP ID generation in this field to track Linux devices...

6.5CVSS7.2AI score0.02571EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2019/11/05 8:56 p.m.•15 views

Kernel: net: weak IP ID generation leads to remote device tracking

A flaw was found in the way the Linux kernel derived the IP ID field from a partial kernel space address returned by a nethashmix function. A remote user could observe a weak IP ID generation in this field to track Linux devices...

6.5CVSS7.2AI score0.02571EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2019/11/05 8:44 p.m.•11 views

Kernel: net: weak IP ID generation leads to remote device tracking

A flaw was found in the way the Linux kernel derived the IP ID field from a partial kernel space address returned by a nethashmix function. A remote user could observe a weak IP ID generation in this field to track Linux devices...

6.5CVSS7.2AI score0.02571EPSS
SaveExploits0References5
Malwarebytes
Malwarebytes
•added 2019/06/24 3:00 p.m.•98 views

Mobile stalkerware: a long history of detection

Recently, we have received an alarming question from many Malwarebytes users, asking, “Do you detect stalkerware?” The answer is an overwhelming, “Absolutely, and for good reason!” Moreover, we have been doing so for a long time, and are expanding our efforts in the months to come. Going back mor...

0.1AI score
SaveExploits0
CNVD
CNVD
•added 2017/12/18 12:00 a.m.•13 views

Apple iCloud for Windows and iTunes for Windows APNs Server Security Bypass Vulnerability

Apple iCloud for Windows and iTunes for Windows are both products of Apple Inc. Apple iCloud for Windows is a Windows-based cloud service that supports the storage of music, photos, apps, contacts, and more. iTunes for Windows is a suite of media player applications based on the Windows platform...

5.9CVSS6.6AI score0.00684EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/10/23 12:00 a.m.•4 views

CVE-2017-7144: Undefined Security Weakness

An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. The issue involves the "WebKit" component. It allows remote attackers to track Safari Private Browsing users by leveraging cookie mishandling...

4.3CVSS6.7AI score0.01339EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2016/04/06 12:00 a.m.•13 views

The vulnerability of the Safari browser, which allows a hacker to track users

The vulnerability of the Top Sites function in the Safari browser is related to improper storage of cookie files. Exploiting this vulnerability can allow a malicious actor to remotely track users...

4.3CVSS5.8AI score0.01172EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2016/04/06 12:00 a.m.•13 views

The vulnerability of Safari browser and iOS operating system allows attackers to track users.

The vulnerability of the WebKit component in the Safari browser and the iOS operating system is related to improper data processing. Exploiting this vulnerability allows a malicious actor to remotely track users...

4.3CVSS5.8AI score0.01285EPSS
SaveExploits0References5Affected Software2
OSV
OSV
•added 2016/03/24 1:59 a.m.•6 views

CVE-2016-1781

WebKit in Apple iOS before 9.3 and Safari before 9.1 mishandles attachment URLs, which makes it easier for remote web servers to track users via unspecified vectors...

4.3CVSS7.4AI score0.01285EPSS
SaveExploits0References6
NVD
NVD
•added 2016/03/24 1:59 a.m.•18 views

CVE-2016-1781

WebKit in Apple iOS before 9.3 and Safari before 9.1 mishandles attachment URLs, which makes it easier for remote web servers to track users via unspecified vectors...

4.3CVSS3.8AI score0.01285EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/03/24 12:00 a.m.•4 views

CVE-2016-1772: Exposure of Sensitive Information to an Unauthorized Actor

The Top Sites feature in Apple Safari before 9.1 mishandles cookie storage, which makes it easier for remote web servers to track users via unspecified vectors...

4.3CVSS6.1AI score0.01172EPSS
SaveExploits0References2
seebug.org
seebug.org
•added 2015/11/16 12:00 a.m.•22 views

SAP HANA DB远程跟踪泄露漏洞

No description provided by source...

7.1AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2015/10/01 12:00 a.m.•12 views

The vulnerability of the iOS operating system, which allows a hacker to track users

The vulnerability of the CFNetwork Cookies component in the iOS operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to remotely track users...

5CVSS5.5AI score0.02256EPSS
SaveExploits0References3Affected Software1
NVD
NVD
•added 2012/12/31 11:50 a.m.•25 views

CVE-2012-6337

The Track My Mobile feature in the SamsungDive subsystem for Android on Samsung Galaxy devices shows the activation of remote tracking, which might allow physically proximate attackers to defeat a product-recovery effort by tampering with this feature or its location data...

3.3CVSS6.7AI score0.01553EPSS
SaveExploits0References1
Rows per page
Query Builder