doctrack

Doctrack 用于操作和武器化 Office Open XML 文档的工具。 功能 创建 Office Open XML 文档（Word、Excel） 插入跟踪像素和 UNC 路径 远程模板注入 插入自定义 XML 部件 检查外部目标 URL、元数据和自定义 XML 部件 安装 你需要下载 .Net 6.0。然后，在 Windows 上构建单个二进制文件： root@kitploit: $ git clone https://github.com/wavvs/doctrack.git $ cd doctrack/ $ dotnet publish -r win-x64 -c...

Malicious code in @berush/tracking-pixel (npm)

The package @berush/tracking-pixel was found to contain malicious code...

MAL-2025-7118 Malicious code in @berush/tracking-pixel (npm)

The package @berush/tracking-pixel was found to contain malicious code...

Kaiser health insurance leaked patient data to advertisers

Health insurance giant Kaiser has announced it will notify millions of patients about a data breach after sharing patients’ data with advertisers. Kaiser said that an investigation led to the discovery that “certain online technologies, previously installed on its websites and mobile applications...

Malicious code in tracking-pixel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c716881c807de2fd9c60dcb6d0fe33b8a7dc68df7808c9d5e277cc8bfdc1398 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6624 Malicious code in tracking-pixel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c716881c807de2fd9c60dcb6d0fe33b8a7dc68df7808c9d5e277cc8bfdc1398 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview tracking-pixel is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package wa...

GHSA-PJPC-87MP-4332 Cross-site Scripting vulnerability in Mautic's tracking pixel functionality

Impact Mautic allows you to track open rates by using tracking pixels. The tracking information is stored together with extra metadata of the tracking request. The output isn't sufficiently filtered when showing the metadata of the tracking information, which may lead to a vulnerable situation...

Cross-site Scripting vulnerability in Mautic's tracking pixel functionality

Impact Mautic allows you to track open rates by using tracking pixels. The tracking information is stored together with extra metadata of the tracking request. The output isn't sufficiently filtered when showing the metadata of the tracking information, which may lead to a vulnerable situation...

Nextcloud: Bypass of privacy filter / tracking pixel blocker

Description ------------ When the mail app receives inline images, it will block them for privacy reasons to prevent tracking pixels The images have been blocked to protect your privacy. This block works correctly for most remote resources in addition to images, remote CSS files, iframes, and som...

X (Formerly Twitter): Tracking of users on third-party websites using the Twitter cookie, due to a flaw in authenticating image requests

Summary: As part of our SoftwareLab@TU Darmstadt latest research project, we discovered a privacy-related vulnerability in multiple high-profile websites, including Twitter. An attacker exploiting this vulnerability can identify a user of your website while the user visits an attacker-controlled...

Source Code for CIA’s Tool to Track Whistleblowers Leaked by Wikileaks

Wikileaks has just published a new batch of the Vault 7 leak, exposing the documentation and source code for a CIA project known as "Scribbles." Scribbles, a.k.a. the "Snowden Stopper," is a piece of software allegedly designed to embed 'web beacon' tags into confidential documents, allowing the...