14 matches found
webkitgtk: A website may be able to track users through Safari web extensions
A flaw was found in WebKitGTK. A malicious website can track users through web extensions due to improper state management...
webkitgtk: A website may be able to track users through Safari web extensions
A flaw was found in WebKitGTK. A malicious website can track users through web extensions due to improper state management...
GHSA-WC7Q-QPM4-8PQV Malicious Package in rrequest
All versions of rrequest typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the process...
CVE-2019-8541
A privacy issue existed in motion sensor calibration. This issue was addressed with improved motion sensor processing. This issue is fixed in iOS 12.2, watchOS 5.2. A malicious app may be able to track users between installs...
Malicious Package
Overview All versions of reqquest typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the...
Malicious Package
Overview All versions of wepack-cli typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether t...
CVE-2018-1000815
Brave Software Inc. Brave version version 0.22.810 to 0.24.0 contains a Other/Unknown vulnerability in function ContentSettingsObserver::AllowScript in contentsettingsobserver.cc that can result in Websites can run inline JavaScript even if script is blocked, making attackers easier to track user...
PT-2018-5601
Name of the Vulnerable Software and Affected Versions: iOS versions prior to 11 Description: The issue involves the APNs component and allows man-in-the-middle attackers to track users by leveraging the transmission of client certificates. Recommendations: For iOS versions prior to 11, update to ...
CVE-2017-13864: Exposure of Sensitive Information to an Unauthorized Actor
An issue was discovered in certain Apple products. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. The issue involves the "APNs Server" component. It allows man-in-the-middle attackers to track users by leveraging mishandling of client certificates...
CVE-2017-7146: Incorrect Permission Assignment for Critical Resource
An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Security" component. It allows attackers to track users across installs via a crafted app that leverages Keychain data mishandling...
Microsoft Exchange Server Information Disclosure Vulnerability (3160339)
This host is missing an important security update according to Microsoft Bulletin MS16-079. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...
PT-2016-4084
Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server 2013 SP1, Cumulative Update 11, and Cumulative Update 12 Microsoft Exchange Server 2016 Gold and Cumulative Update 1 Description The issue allows remote attackers to track users via a crafted HTML e-mail message due t...
