8160 matches found
Cross-Site Request Forgery (CSRF)
kevinpapst/kimai2 is vulnerable to cross-site request forgery. The vulnerability exists in createInvoiceAction of InvoiceController.php which allows a malicious attacker to trick users to modify status of invoices and disrupt the tracking of invoices...
GitLab Information Disclosure Vulnerability (CNVD-2021-99767)
GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD continuous integration and continuous delivery, etc. An information disclosure vulnerability exists in GitLab CE/EE, which stems from an informati...
GitLab Access Control Error Vulnerability (CNVD-2021-99768)
GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD continuous integration and continuous delivery, and other features.GitLab CE/EE is vulnerable to an access control error that stems from the...
Trend Micro Security 后置链接漏洞
Trend Micro Security is a suite of computer security software from Trend Micro, Inc. Trend Micro Security has a backlink vulnerability that stems from a link tracking issue in the PC Health Check feature. An attacker could exploit the vulnerability to cause a denial of service attack...
CVE-2021-44529
creationtimestamp| type| source ---|---|--- 2021-12-09 00:24:21+00:00| seen| https://t.me/cibsecurity/33664 2022-04-16 15:24:17+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/1962 2023-01-13 11:04:04+00:00| seen| https://t.me/poxek/2655 2023-01-17 19:33:02+00:00| seen|...
How to Opt Out of Verizon’s Custom Experience Tracking
Unless you manually opt out of the program, Verizon will store personal information and create user interest profiles...
CVE-2021-25516
An improper check or handling of exceptional conditions in Exynos baseband prior to SMR Dec-2021 Release 1 allows attackers to track locations...
CVE-2021-25516
An improper check or handling of exceptional conditions in Exynos baseband prior to SMR Dec-2021 Release 1 allows attackers to track locations...
CVE-2021-25516
An improper check or handling of exceptional conditions in Exynos baseband prior to SMR Dec-2021 Release 1 allows attackers to track locations...
Input validation
An improper check or handling of exceptional conditions in Exynos baseband prior to SMR Dec-2021 Release 1 allows attackers to track locations...
CVE-2021-25516
An improper check or handling of exceptional conditions in Exynos baseband prior to SMR Dec-2021 Release 1 allows attackers to track locations...
CVE-2021-25516
CVE-2021-25516 affects Samsung Exynos baseband (prior to SMR Dec-2021 Release 1). An improper handling of exceptional conditions in the baseband’s RRC MeasurementReport allows an attacker to track a device’s location. Impact is described as location-tracking with high practicality on affected Sam...
CVE-2021-25516: Improper Check or Handling of Exceptional Conditions
An improper check or handling of exceptional conditions in Exynos baseband prior to SMR Dec-2021 Release 1 allows attackers to track locations...
UBUNTU-CVE-2021-43539
Failure to correctly record the location of live pointers across wasm instance calls resulted in a GC occurring within the call not tracing those live pointers. This could have led to a use-after-free causing a potentially exploitable crash. This vulnerability affects Thunderbird 91.4.0, Firefox...
PT-2021-16706
Name of the Vulnerable Software and Affected Versions Exynos baseband versions prior to SMR Dec-2021 Release 1 Description The issue arises from an improper check or handling of exceptional conditions, allowing attackers to track locations. Recommendations For Exynos baseband versions prior to SM...
Thieves Using AirTags to “Follow” Cars
From Ontario and not surprising: Since September 2021, officers have investigated five incidents where suspects have placed small tracking devices on high-end vehicles so they can later locate and steal them. Brand name "air tags" are placed in out-of-sight areas of the target vehicles when they...
JetBrains YouTrack Injection Vulnerability
JetBrains YouTrack is a browser-based bug tracking and project management software from JetBrains Czech Republic. The software has features such as bug tracking, creating workflows, and monitoring project progress.JetBrains YouTrack is vulnerable to an injection vulnerability that stems from...
kimai2 cross-site scripting vulnerability
kimai2 is an open source, web-based multi-user time tracking application. kimai2 suffers from a cross-site scripting vulnerability, for which no details of the vulnerability are currently available...
kimai2 cross-site scripting vulnerability (CNVD-2021-94816)
kimai2 is an open source, web-based multi-user time tracking application. kimai2 suffers from a cross-site scripting vulnerability that can be exploited by attackers to perform cross-site scripting attacks...