Lucene search
K

11 matches found

OSV
OSV
added 2025/08/14 6:52 p.m.2 views

MAL-2025-7118 Malicious code in @berush/tracking-pixel (npm)

The package @berush/tracking-pixel was found to contain malicious code...

7.2AI score
Exploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/14 6:52 p.m.2 views

Malicious code in @berush/tracking-pixel (npm)

The package @berush/tracking-pixel was found to contain malicious code...

7AI score
Exploits0
Malwarebytes
Malwarebytes
added 2024/04/29 10:44 a.m.19 views

Kaiser health insurance leaked patient data to advertisers

Health insurance giant Kaiser has announced it will notify millions of patients about a data breach after sharing patients’ data with advertisers. Kaiser said that an investigation led to the discovery that “certain online technologies, previously installed on its websites and mobile applications...

7AI score
Exploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/08/10 4:7 p.m.2 views

Malicious code in tracking-pixel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c716881c807de2fd9c60dcb6d0fe33b8a7dc68df7808c9d5e277cc8bfdc1398 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
OSV
OSV
added 2022/08/10 4:7 p.m.6 views

MAL-2022-6624 Malicious code in tracking-pixel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c716881c807de2fd9c60dcb6d0fe33b8a7dc68df7808c9d5e277cc8bfdc1398 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References1
Snyk
Snyk
added 2022/08/10 8:6 a.m.2 views

Malicious Package

Overview tracking-pixel is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package wa...

9.8CVSS7.1AI score
Exploits0References3
OSV
OSV
added 2022/05/25 10:36 p.m.21 views

GHSA-PJPC-87MP-4332 Cross-site Scripting vulnerability in Mautic's tracking pixel functionality

Impact Mautic allows you to track open rates by using tracking pixels. The tracking information is stored together with extra metadata of the tracking request. The output isn't sufficiently filtered when showing the metadata of the tracking information, which may lead to a vulnerable situation...

9.6CVSS7.4AI score0.02993EPSS
Exploits0References5
Github Security Blog
Github Security Blog
added 2022/05/25 10:36 p.m.38 views

Cross-site Scripting vulnerability in Mautic's tracking pixel functionality

Impact Mautic allows you to track open rates by using tracking pixels. The tracking information is stored together with extra metadata of the tracking request. The output isn't sufficiently filtered when showing the metadata of the tracking information, which may lead to a vulnerable situation...

9.6CVSS2.1AI score0.02993EPSS
Exploits0References5Affected Software1
Hacker One
Hacker One
added 2021/06/02 9:59 a.m.26 views

Nextcloud: Bypass of privacy filter / tracking pixel blocker

Description ------------ When the mail app receives inline images, it will block them for privacy reasons to prevent tracking pixels The images have been blocked to protect your privacy. This block works correctly for most remote resources in addition to images, remote CSS files, iframes, and som...

4CVSS1.8AI score0.00323EPSS
Exploits1
Hacker One
Hacker One
added 2018/03/26 11:18 a.m.26 views

X (Formerly Twitter): Tracking of users on third-party websites using the Twitter cookie, due to a flaw in authenticating image requests

Summary: As part of our SoftwareLab@TU Darmstadt latest research project, we discovered a privacy-related vulnerability in multiple high-profile websites, including Twitter. An attacker exploiting this vulnerability can identify a user of your website while the user visits an attacker-controlled...

6.4AI score
Exploits0
The Hacker News
The Hacker News
added 2017/04/28 7:3 a.m.16 views

Source Code for CIA’s Tool to Track Whistleblowers Leaked by Wikileaks

Wikileaks has just published a new batch of the Vault 7 leak, exposing the documentation and source code for a CIA project known as "Scribbles." Scribbles, a.k.a. the "Snowden Stopper," is a piece of software allegedly designed to embed 'web beacon' tags into confidential documents, allowing the...

6.6AI score
Exploits0
Rows per page
Query Builder