58 matches found
CVE-2025-25176
The CVE-2025-25176 entry pertains to Imagination Graphics DDK GPU driver vulnerabilities; described issue is exfiltration of intermediate register values from secure workloads into non-secure world when scheduled by applications in the non-secure environment. Affected component: GPU driver/SDK (I...
EUVD-2017-9548
Malware in sbrugna...
EUVD-2017-17393
Malware in sbrugna...
EUVD-2006-2871
Malware in sbrugna...
EUVD-2017-0124
Malware in sbrugna...
EUVD-2019-14044
Malware in sbrugna...
EUVD-2003-0149
Malware in sbrugna...
EUVD-2018-18226
Malware in sbrugna...
EUVD-2006-6809
Malware in sbrugna...
Important: postgresql17
Issue Overview: PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user cannot access. Separately, statistics allow a user to read sampled data that a row security policy intended to hide. PostgreSQL maintains statistics for tables by sampling data available ...
A week in security (August 11 – August 17)
Last week on Malwarebytes Labs: Italian hotels breached for tens of thousands of scanned IDs National Public Data returns after massive Social Security Number leak Romance scammers in Ghana charged with more than $100 million in theft Netflix scammers target jobseekers to trick them into handing...
XWiki leaks password hashes and other accessible password properties
Impact Any user with edit right on a page of the wiki can create an XClass with a database list property that references a password property, for example the password hash that is stored for users. When adding an object of that XClass, the content of that password property is displayed. In...
CVE-2023-33741
Macrovideo v380pro v1.4.97 shares the device id and password when sharing the device...
CVE-2022-4346
The All-In-One Security AIOS WordPress plugin before 5.1.3 leaked settings of the plugin publicly, including the used email address...
Rsync: rsync server leaks arbitrary client files
...
fetch: Authorization headers not dropped when redirecting cross-origin
Summary When you send a request with the Authorization header to one domain, and the response asks to redirect to a different domain, Deno'sfetch redirect handling creates a follow-up redirect request that keeps the original Authorization header, leaking its content to that second domain. Details...
CVE-2024-44125
The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7. A malicious application may be able to leak sensitive user information...
CVE-2023-33741
Macrovideo v380pro v1.4.97 shares the device id and password when sharing the device...
CVE-2023-1809
The Download Manager WordPress plugin before 6.3.0 leaks master key information without the need for a password, allowing attackers to download arbitrary password-protected package files...
CVE-2022-48433
In JetBrains IntelliJ IDEA before 2023.1 the NTLM hash could leak through an API method used in the IntelliJ IDEA built-in web server...