CVE-2024-10026 Improved Seeding and Hashing In gVisor

A weak hashing algorithm and small sizes of seeds/secrets in Google's gVisor allowed for a remote attacker to calculate a local IP address and a per-boot identifier that could aid in tracking of a device in certain circumstances...

CVE-2024-10026 Improved Seeding and Hashing In gVisor

A weak hashing algorithm and small sizes of seeds/secrets in Google's gVisor allowed for a remote attacker to calculate a local IP address and a per-boot identifier that could aid in tracking of a device in certain circumstances...

CVE-2024-10026 Improved Seeding and Hashing In gVisor

A weak hashing algorithm and small sizes of seeds/secrets in Google's gVisor allowed for a remote attacker to calculate a local IP address and a per-boot identifier that could aid in tracking of a device in certain circumstances...

CVE-2024-10026

The CVE-2024-10026 issue concerns Google's gVisor: a weak hashing algorithm and small seed/secret sizes. The connected documents confirm this affects gVisor in multiple advisories (e.g., TencentOS Server 4, OSV/Ubuntu entries) and describe that a remote attacker could calculate a local IP address...

WordPress Tracking Code Manager plugin < 2.4.0 - Contributor+ Stored XSS vulnerability

Contributor+ Stored XSS vulnerability discovered by Krugov Artyom in WordPress Plugin Tracking Code Manager versions 2.4.0...

No need to RSVP: a closer look at the Tria stealer campaign

Introduction Since mid-2024, we've observed a malicious Android campaign leveraging wedding invitations as a lure to social-engineer victims into installing a malicious Android app APK, which we have named "Tria Stealer" after unique strings found in campaign samples. The primary targets of the...

CVE-2024-10309

The Tracking Code Manager WordPress plugin before 2.4.0 does not sanitise and escape some of its metabox settings when outputing them in the page, which could allow users with a role as low as Contributor to perform Cross-Site Scripting attacks...

CVE-2024-10309

The Tracking Code Manager WordPress plugin before 2.4.0 does not sanitise and escape some of its metabox settings when outputing them in the page, which could allow users with a role as low as Contributor to perform Cross-Site Scripting attacks...

CVE-2024-10309

creationtimestamp| type| source ---|---|--- 2025-01-30 06:09:16+00:00| seen| https://infosec.exchange/users/cve/statuses/113915812623981683 2025-01-30 06:15:37+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgwthfi5732n 2025-01-30 07:11:30+00:00| seen|...

CVE-2024-10309 Tracking Code Manager < 2.4.0 - Contributor+ Stored XSS

The Tracking Code Manager WordPress plugin before 2.4.0 does not sanitise and escape some of its metabox settings when outputing them in the page, which could allow users with a role as low as Contributor to perform Cross-Site Scripting attacks...

CVE-2024-10309

The Tracking Code Manager WordPress plugin, in versions prior to 2.4.0 , is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the failure to sanitise and escape certain metabox settings when they are outputted on a page. This flaw allows users with privileges as low as Contribut...

Google gVisor 安全漏洞

Google gVisor is a user-space kernel from Google written in the Go language for use in Linux systems. A security vulnerability exists in Google gVisor, which stems from the presence of an information-countable vulnerability that could lead to an attacker being able to count information for use in...

CVE-2024-10026: Use of Weak Hash

A weak hashing algorithm and small sizes of seeds/secrets in Google's gVisor allowed for a remote attacker to calculate a local IP address and a per-boot identifier that could aid in tracking of a device in certain circumstances...

CVE-2024-10309: Improper Neutralization of Input During Web Page Generation

The Tracking Code Manager WordPress plugin before 2.4.0 does not sanitise and escape some of its metabox settings when outputing them in the page, which could allow users with a role as low as Contributor to perform Cross-Site Scripting attacks...

PT-2025-1585 · WordPress · Tracking Code Manager

Name of the Vulnerable Software and Affected Versions: Tracking Code Manager WordPress plugin version 2.4.0 and earlier Description: The issue allows users with a role as low as Contributor to perform Cross-Site Scripting attacks due to the plugin not sanitizing and escaping some of its metabox...

PT-2025-1575 · Google · Gvisor

Name of the Vulnerable Software and Affected Versions: gVisor affected versions not specified Description: A weak hashing algorithm and small sizes of seeds/secrets in Google's gVisor allowed for a remote attacker to calculate a local IP address and a per-boot identifier that could aid in trackin...

WordPress plugin Tracking Code Manager 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...

GHSA-98V2-F47X-89XW

creationtimestamp| type| source ---|---|--- 2025-01-29 11:57:21+00:00| seen| https://infosec.exchange/users/cve/statuses/113911519035869184...

CVE-2025-0803

creationtimestamp| type| source ---|---|--- 2025-01-29 02:03:21+00:00| seen| https://infosec.exchange/users/cve/statuses/113909183316922988 2025-01-29 02:16:01+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgtvm2bvrf2p 2025-01-29 03:15:07+00:00| seen|...

CVE-2023-33838

creationtimestamp| type| source ---|---|--- 2025-01-29 01:31:12+00:00| seen| https://infosec.exchange/users/cve/statuses/113909056946227372 2025-01-29 02:15:44+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgtvlk7kqu2n 2025-01-29 03:15:03+00:00| seen|...