Lucene search
+L

6724 matches found

OSV
OSV
added 2021/01/26 12:00 a.m.17 views

UBUNTU-CVE-2021-23958

The browser could have been confused into transferring a screen sharing state into another tab, which would leak unintended information. This vulnerability affects Firefox 85...

6.5CVSS6.8AI score0.00882EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2021/01/26 12:00 a.m.29 views

CVE-2021-23963

When sharing geolocation during an active WebRTC share, Firefox could have reset the webRTC sharing state in the user interface, leading to loss of control over the currently granted permission. This vulnerability affects Firefox 85...

4.3CVSS6.6AI score0.00657EPSS
SaveExploits0References3
OSV
OSV
added 2021/01/26 12:00 a.m.18 views

UBUNTU-CVE-2021-23963

When sharing geolocation during an active WebRTC share, Firefox could have reset the webRTC sharing state in the user interface, leading to loss of control over the currently granted permission. This vulnerability affects Firefox 85...

4.3CVSS6.1AI score0.00657EPSS
SaveExploits0References4
CNVD
CNVD
added 2021/01/22 12:00 a.m.5 views

Himalaya (Windows client) suffers from dll hijacking vulnerability

Himalaya is a professional audio sharing platform. A dll hijacking vulnerability exists in Himalaya Windows client, which can be exploited by attackers to execute arbitrary malicious code via the client...

7.8AI score
SaveExploits0
CNVD
CNVD
added 2021/01/22 12:00 a.m.8 views

Himalaya (Windows client) suffers from a dll hijacking vulnerability (CNVD-2021-10376)

Himalaya is a professional audio sharing platform. A dll hijacking vulnerability exists in Himalaya Windows client, which can be exploited by attackers to execute arbitrary malicious code via the client...

7.8AI score
SaveExploits0
Exploit DB
Exploit DB
added 2021/01/21 12:00 a.m.597 views

Online Documents Sharing Platform 1.0 - 'user' SQL Injection

Exploit Title: Online Documents Sharing Platform 1.0 - 'user' SQL Injection Date: 21.01.2021 Exploit Author: CANKAT ÇAKMAK Vendor Homepage: https://www.sourcecodester.com/php/14653/online-documents-sharing-platform-php-full-source-code.html Software Link:...

5.3AI score
SaveExploits0
Packet Storm
Packet Storm
added 2021/01/21 12:00 a.m.406 views

Online Documents Sharing Platform 1.0 SQL Injection

Exploit Title: Online Documents Sharing Platform 1.0 - 'user' SQL Injection Date: 21.01.2021 Exploit Author: CANKAT ÇAKMAK Vendor Homepage: https://www.sourcecodester.com/php/14653/online-documents-sharing-platform-php-full-source-code.html Software Link:...

0.6AI score
SaveExploits0
OSV
OSV
added 2021/01/20 3:15 p.m.10 views

CVE-2020-4983

IBM Spectrum LSF 10.1 and IBM Spectrum LSF Suite 10.2 could allow a user on the local network who has privileges to submit LSF jobs to execute arbitrary commands. IBM X-Force ID: 192586...

7.8CVSS6AI score0.00437EPSS
SaveExploits1References3
Malwarebytes
Malwarebytes
added 2021/01/18 12:18 p.m.52 views

What’s up with WhatsApp’s privacy policy?

WhatsApp has been in the news recently after changes to its privacy policy caused a surge of interest in rival messaging app Signal. Initial reports may have worried a lot of folks, leading to inevitable clarifications and corrections. But what, you may ask, actually happened? Is there a problem?...

7.3AI score
SaveExploits0
The Hacker News
The Hacker News
added 2021/01/16 12:28 p.m.6 views

WhatsApp Delays Controversial 'Data-Sharing' Privacy Policy Update By 3 Months

WhatsApp said on Friday that it wouldn't enforce its recently announced controversial data sharing policy update until May 15. Originally set to go into effect next month on February 8, the three-month delay comes following "a lot of misinformation" about a revision to its privacy policy that...

5.8AI score
SaveExploits0
The Hacker News
The Hacker News
added 2021/01/16 12:28 p.m.67 views

WhatsApp Delays Controversial 'Data-Sharing' Privacy Policy Update By 3 Months

WhatsApp said on Friday that it wouldn't enforce its recently announced controversial data sharing policy update until May 15. Originally set to go into effect next month on February 8, the three-month delay comes following "a lot of misinformation" about a revision to its privacy policy that...

6.8AI score
SaveExploits0
CNVD
CNVD
added 2021/01/13 12:00 a.m.17 views

Microsoft SharePoint Tampering Vulnerability

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. Microsoft SharePoint ...

8.8CVSS6.3AI score0.02592EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2021/01/13 12:00 a.m.5 views

CVE-2020-4983

IBM Spectrum LSF 10.1 and IBM Spectrum LSF Suite 10.2 could allow a user on the local network who has privileges to submit LSF jobs to execute arbitrary commands. IBM X-Force ID: 192586...

7.8CVSS7.8AI score0.00437EPSS
SaveExploits1References4Affected Software2
ThreatPost
ThreatPost
added 2021/01/12 10:30 a.m.16 views

Post-Backlash, WhatsApp Spells Out Privacy Policy Updates

WhatsApp is making explicit clarifications around its updated privacy policy, after reports ran amok about the messaging app mandating all-encompassing data-sharing with parent company Facebook. The app’s new privacy policy and terms of service, which will go into effect Feb. 8, says that WhatsAp...

6.8AI score
SaveExploits0References13
Schneier on Security
Schneier on Security
added 2021/01/11 12:17 p.m.37 views

Changes in WhatsApp’s Privacy Policy

If youre a WhatsApp user, pay attention to the changes in the privacy policy that youre being forced to agree with. In 2016, WhatsApp gave users a one-time ability to opt out of having account data turned over to Facebook. Now, an updated privacy policy is changing that. Come next month, users wi...

0.6AI score
SaveExploits0
CNVD
CNVD
added 2021/01/11 12:00 a.m.7 views

EV Screen Sharing Win suffers from dll hijacking vulnerability

EV Screen Sharing is a screen sharing program. EV Screen Sharing Win suffers from a dll hijacking vulnerability. An attacker can exploit the vulnerability to load a malicious dll and execute malicious code...

7.2AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2021/01/11 12:00 a.m.78 views

EulerOS Virtualization 3.0.2.6 : qemu (EulerOS-SA-2021-1057)

According to the versions of the qemu packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Quick Emulator Qemu built with the VirtFS, host directory sharing via Plan 9 File System9pfs support, is vulnerable to an improper...

10CVSS7.6AI score0.16658EPSS
SaveExploits8References18
Gitee
Gitee
added 2021/01/09 1:29 a.m.4 views

PayloadsAllTheThings

This repository is an offensive tool for Web Application Security. It contains various tools and techniques for exploiting web applications, including a cheat sheet for CSRF injection, a CRLF injection tool, and a proof-of-concept for exploiting CORS misconfiguration. The tools and techniques in...

7.4AI score
SaveExploits0
OSV
OSV
added 2021/01/08 7:15 p.m.2 views

DEBIAN-CVE-2020-16032

Insufficient data validation in sharing in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...

4.3CVSS6.8AI score0.00656EPSS
SaveExploits0References1
Wired Threat Level
Wired Threat Level
added 2021/01/08 6:52 p.m.30 views

WhatsApp Has Shared Your Data With Facebook for Years

A pop-up notification has alerted the messaging app's users to a practice that's been in place since 2016...

3.6AI score
SaveExploits0
Rows per page
Query Builder