CVE-2026-28906

This issue was addressed through improved state management. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, visionOS 26.5. An attacker may be able to track users through their IP address...

Important: Red Hat Security Advisory: webkit2gtk3 security update

An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common...

EUVD-2019-8071

Malware in sbrugna...

EUVD-2024-2742

Malicious code in bioql PyPI...

CVE-2025-5816 Plugin Pengiriman WooCommerce Kurir Reguler, Instan, Kargo – Biteship <= 3.2.0 - Insecure Direct Object Reference to Authenticated (Subscriber+) View Order Tracking Details

The Plugin Pengiriman WooCommerce Kurir Reguler, Instan, Kargo – Biteship plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.2.0 via the getorderdetail due to missing validation on a user controlled key. This makes it possible for...

CVE-2025-27051

creationtimestamp| type| source ---|---|--- 2025-07-08 13:19:01+00:00| seen| https://vulnerability.circl.lu/bundle/13f0850e-798e-4625-b315-667b9d13bc30 2025-08-06 01:04:20+00:00| seen| MISP/853ff921-86fb-463b-bc2a-2860bf336b81 2025-08-21 10:03:54+00:00| seen|...

CVE-2024-47050

Prior to this patch being applied, Mautic's tracking was vulnerable to Cross-Site Scripting through the Page URL variable...

CVE-2024-58092

In CVE-2024-58092, the Linux kernel NFS server (nfsd) fix removes a duplicate init path: check_for_legacy_methods() no longer calls nfsd4_legacy_tracking_ops-&gt;init(), delegating init to nfsd4_client_tracking_init() to avoid triggering BUG_ON() in nfsd4_init_recdir(). The description confirms t...

CVE-2024-54446

creationtimestamp| type| source ---|---|--- 2025-03-14 20:46:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkei5xmcjy2m 2025-03-14 20:53:44+00:00| seen| https://t.me/cvedetector/20334...

CVE-2024-8753

creationtimestamp| type| source ---|---|--- 2025-02-11 02:20:07+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhulve7pav2q 2025-02-11 06:14:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lhuyypqrd42a...

CVE-2024-47106

creationtimestamp| type| source ---|---|--- 2025-01-18 16:13:04+00:00| seen| https://infosec.exchange/users/cve/statuses/113850239137768638 2025-01-18 16:15:55+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfzpfrev2e2t 2025-01-18 16:57:47+00:00| seen|...

CVE-2024-13195

creationtimestamp| type| source ---|---|--- 2025-01-08 23:38:02+00:00| seen| https://infosec.exchange/users/cve/statuses/113795365742691993 2025-01-09 00:13:22+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/862 2025-01-09 00:16:14+00:00| seen|...

webkitgtk: track sensitive user information

A flaw was found in WebKitGTK, which exists due to a logic issue in WebKit related to a user's privacy. A remote attacker may be able to track sensitive user information...

SUSE CVE-2010-3804

The JavaScript implementation in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, uses a weak algorithm for generating values of random numbers, which makes it easier for remote attackers to track a user by predicting a value, a...

Apple macOS Safari 安全漏洞

Apple Safari and others are products of Apple Inc.Apple Safari is a web browser that is the default browser that comes with the Mac OS X and iOS operating systems.Apple macOS Big Sur is the 17th major version of Apple's macOS for the MAC operating system.Apple macOS Monterey is the 18th major...

Microsoft Windows 信息泄露漏洞

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, an operating system for personal devices, and Microsoft Windows Server, a server operating system. An information disclosure vulnerability exists in "Event Tracking" in Microsoft Windows and Windows Server...

CVE-2020-27194

An issue was discovered in the Linux kernel before 5.8.15. scalar32minmaxor in kernel/bpf/verifier.c mishandles bounds tracking during use of 64-bit values, aka CID-5b9fbeb75b6a...

CVE-2019-18282

The flowdissector feature in the Linux kernel 4.3 through 5.x before 5.3.10 has a device tracking vulnerability, aka CID-55667441c84f. This occurs because the auto flowlabel of a UDP IPv6 packet relies on a 32-bit hashrnd value as a secret, and because jhash instead of siphash is used. The hashrn...

CVE-2017-7144

An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. The issue involves the "WebKit" component. It allows remote attackers to track Safari Private Browsing users by leveraging cookie mishandling...

CVE-2016-1858

WebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1, improperly tracks taint attributes, which allows remote attackers to obtain sensitive information via a crafted web site...