doctrack

Doctrack Herramienta para manipular y armamentizar documentos Office Open XML. Características Crear documentos Office Open XML Word, Excel Insertar píxeles de seguimiento y rutas UNC Inyección de plantilla remota Insertar partes CustomXML Inspeccionar URLs de destino externas, metadatos y partes...

CVE-2026-56735 Zammad: Improper neutralization of `srcset` attribute in IMG tags in Zammad

Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2 and 7.1.0, zammad's HTML sanitizer HtmlSanitizer::Strict blocks external URLs in to prevent remote content loading, but the srcset attribute, also allowlisted for , is not subject to the same check. This oversight...

Malicious code in @berush/tracking-pixel (npm)

The package @berush/tracking-pixel was found to contain malicious code...

MAL-2025-7118 Malicious code in @berush/tracking-pixel (npm)

The package @berush/tracking-pixel was found to contain malicious code...

Kaiser health insurance leaked patient data to advertisers

Health insurance giant Kaiser has announced it will notify millions of patients about a data breach after sharing patients’ data with advertisers. Kaiser said that an investigation led to the discovery that “certain online technologies, previously installed on its websites and mobile applications...

MAL-2022-6624 Malicious code in tracking-pixel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c716881c807de2fd9c60dcb6d0fe33b8a7dc68df7808c9d5e277cc8bfdc1398 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tracking-pixel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c716881c807de2fd9c60dcb6d0fe33b8a7dc68df7808c9d5e277cc8bfdc1398 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview tracking-pixel is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package wa...

Cross-site Scripting vulnerability in Mautic's tracking pixel functionality

Impact Mautic allows you to track open rates by using tracking pixels. The tracking information is stored together with extra metadata of the tracking request. The output isn't sufficiently filtered when showing the metadata of the tracking information, which may lead to a vulnerable situation...

GHSA-PJPC-87MP-4332 Cross-site Scripting vulnerability in Mautic's tracking pixel functionality

Impact Mautic allows you to track open rates by using tracking pixels. The tracking information is stored together with extra metadata of the tracking request. The output isn't sufficiently filtered when showing the metadata of the tracking information, which may lead to a vulnerable situation...

Nextcloud: Bypass of privacy filter / tracking pixel blocker

Description ------------ When the mail app receives inline images, it will block them for privacy reasons to prevent tracking pixels The images have been blocked to protect your privacy. This block works correctly for most remote resources in addition to images, remote CSS files, iframes, and som...

X (Formerly Twitter): Tracking of users on third-party websites using the Twitter cookie, due to a flaw in authenticating image requests

Summary: As part of our SoftwareLab@TU Darmstadt latest research project, we discovered a privacy-related vulnerability in multiple high-profile websites, including Twitter. An attacker exploiting this vulnerability can identify a user of your website while the user visits an attacker-controlled...

Source Code for CIA’s Tool to Track Whistleblowers Leaked by Wikileaks

Wikileaks has just published a new batch of the Vault 7 leak, exposing the documentation and source code for a CIA project known as "Scribbles." Scribbles, a.k.a. the "Snowden Stopper," is a piece of software allegedly designed to embed 'web beacon' tags into confidential documents, allowing the...