CVE-2024-47050: Improper Neutralization of Input During Web Page Generation

Prior to this patch being applied, Mautic's tracking was vulnerable to Cross-Site Scripting through the Page URL variable...

CVE-2021-27917: Improper Neutralization of Input During Web Page Generation

Prior to this patch, a stored XSS vulnerability existed in the contact tracking and page hits report...

CVE-2024-45605

Sentry vulnerability CVE-2024-45605: Improper authorization allows an authenticated user to delete user issue alert notifications for arbitrary users when they know an alert ID. The issue is mitigated by a patch that scopes authorization checks on delete requests; affected deployments need to upg...

CVE-2024-45605 Improper authorization on deletion of user issue alert notifications in sentry

Sentry is a developer-first error tracking and performance monitoring platform. An authenticated user delete the user issue alert notifications for arbitrary users given a know alert ID. A patch was issued to ensure authorization checks are properly scoped on requests to delete user alert...

UBUNTU-CVE-2024-44187

A cross-origin issue existed with "iframe" elements. This was addressed with improved tracking of security origins. This issue is fixed in Safari 18, iOS 18 and iPadOS 18, macOS Sequoia 15, tvOS 18, visionOS 2, watchOS 11. A malicious website may exfiltrate data cross-origin...

CVE-2024-44187

A cross-origin issue existed with "iframe" elements. This was addressed with improved tracking of security origins. This issue is fixed in Safari 18, iOS 18 and iPadOS 18, macOS Sequoia 15, tvOS 18, visionOS 2, watchOS 11. A malicious website may exfiltrate data cross-origin...

The vulnerability of the Runc command-line tool for isolated containers, related to the race condition, allows attackers to manipulate the integrity of data. This condition enables tracking of references, enabling attackers to affect the data’s integrity.

The vulnerability of the Runc container launch tool is related to the state of the race, which allows for the tracking of links. Exploiting this vulnerability could enable a hacker to compromise the integrity of data...

Apple Vision Pro’s Eye Tracking Exposed What People Type

The Vision Pro uses 3D avatars on calls and for streaming. These researchers used eye tracking to work out the passwords and PINs people typed with their avatars...

CVE-2024-8190

creationtimestamp| type| source ---|---|--- 2024-09-11 00:17:20+00:00| seen| https://t.me/cvedetector/5309 2024-09-14 06:30:34+00:00| exploited| https://t.me/thehackernews/5582 2024-09-14 07:08:56+00:00| exploited| https://t.me/KomunitiSiber/2571 2024-09-14 07:21:54+00:00| exploited|...

Advanced forensic techniques for recovering hidden data in wearable devices

TL;DR A walk-through of forensic data recovery Detailed example of how to retrieve potentially sensitive deleted data Includes location, sleep and activity tracking Understand the security and privacy implications of wearable device data Introduction This blog post covers how forensic skills and...

Exploit for CVE-2024-24809

CVE-2024-24809 Detail Description Traccar is an open sourc...

CVE-2024-23359 Buffer Over-read in Multi Mode Call Processor

Information disclosure while decoding Tracking Area Update Accept or Attach Accept message received from network...

CVE-2024-23359

CVE-2024-23359: Information disclosure in Qualcomm chipsets occurs when decoding Tracking Area Update Accept or Attach Accept messages. Connected sources identify this as a information-disclosure issue in Qualcomm closed-source components (Multi Mode Call Processor). Exploitation details are not ...

CVE-2024-23359 Buffer Over-read in Multi Mode Call Processor

Information disclosure while decoding Tracking Area Update Accept or Attach Accept message received from network...

PT-2024-19838

Name of the Vulnerable Software and Affected Versions Qualcomm products affected versions not specified Description The issue is related to information disclosure while decoding Tracking Area Update Accept or Attach Accept messages received from the network. This can lead to information disclosur...

MantisBT Password Reset

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'MantisBT password reset', 'Description' = %q MantisBT before 1.3.10, 2.2.4, and 2.3.1 are vulnerable to unauthenticated password reset. , 'Licens...

The Present and Future of TV Surveillance

Ars Technica has a good article on whats happening in the world of television surveillance. More than even I realized...

Linux Kernel Netfilter Conntrack Type Confusion Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of Linux Kernel. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

SUSE CVE-2022-48910

In the Linux kernel, the following vulnerability has been resolved: net: ipv6: ensure we call ipv6mcdown at most once There are two reasons for addrconfnotify to be called with NETDEVDOWN: either the network device is actually going down, or IPv6 was disabled on the interface. If either of them...

CVE-2024-28000

creationtimestamp| type| source ---|---|--- 2024-08-21 16:34:21+00:00| seen| https://t.me/cvedetector/3769 2024-08-22 07:14:40+00:00| seen| https://t.me/thehackernews/5456 2024-08-22 12:21:39+00:00| seen| https://t.me/HackingInsights/10905 2024-08-22 16:00:07+00:00| exploited|...