CVE-2021-33838

Luca through 1.7.4 on Android allows remote attackers to obtain sensitive information about COVID-19 tracking because requests related to Check-In State occur shortly after requests for Phone Number Registration...

Traccar has a weak password vulnerability

Traccar is an open source GPS tracking system. Traccar suffers from a weak password vulnerability that can be exploited by attackers to obtain sensitive information...

CVE-2021-33838

The CVE-2021-33838 issue affects Luca app on Android (versions 1.7.4 and earlier). The root cause is a sequence where requests related to Check-In State occur shortly after Phone Number Registration, enabling remote attackers to obtain sensitive COVID-19 tracking information. Impact is described ...

CVE-2021-33838

Luca through 1.7.4 on Android allows remote attackers to obtain sensitive information about COVID-19 tracking because requests related to Check-In State occur shortly after requests for Phone Number Registration...

CVE-2021-33839

Luca through 1.7.4 on Android allows remote attackers to obtain sensitive information about COVID-19 tracking because the QR code of a Public Location can be intentionally confused with the QR code of a Private Meeting...

CVE-2021-33839

CVE-2021-33839 affects Luca for Android up to version 1.7.4. The root cause is the QR code handling that can confuse a Public Location QR with a Private Meeting QR, enabling remote attackers to obtain sensitive COVID-19 tracking information. Impact: confidentiality at HIGH (C in CVSS3.1), exploit...

Microsoft’s Vote Tracking Software Clears a Major Hurdle

Hart InterCivic will be the first private vendor to partner with the company on using its open-source ElectionGuard system...

PT-2021-20339 · Luca · Luca

Name of the Vulnerable Software and Affected Versions: Luca versions 1.7.4 and earlier Description: The issue allows remote attackers to obtain sensitive information about COVID-19 tracking. This is because requests related to Check-In State occur shortly after requests for Phone Number...

Luca 信息泄露漏洞

Gtlab luca is a Gtlab open source application. A secure and encrypted exchange of contact information. A security vulnerability exists in Luca, which originated from a vulnerability that can be exploited by a remote attacker to obtain sensitive information about COVID-19 tracking...

Luca 信息泄露漏洞

Gtlab luca is a Gtlab open source application. A secure and encrypted exchange of contact information. A security vulnerability exists in Luca version 1.7.4 and earlier versions, which can be exploited by remote attackers to obtain sensitive information about COVID-19 tracking...

PT-2021-20340

Name of the Vulnerable Software and Affected Versions: Luca versions 1.7.4 and earlier Description: The issue allows remote attackers to obtain sensitive information about COVID-19 tracking. This is possible because the QR code of a Public Location can be intentionally confused with the QR code o...

Nextcloud: Bypass of privacy filter / tracking pixel blocker

Description ------------ When the mail app receives inline images, it will block them for privacy reasons to prevent tracking pixels The images have been blocked to protect your privacy. This block works correctly for most remote resources in addition to images, remote CSS files, iframes, and som...

What Is a Honeypot❓ Definition, Types and More

A honeypot is a computer system made to appear like a potential target of a cyber-attack. It may be used to track or redirect hacks away from a legitimate target. It could like wise be utilized to comprehend the strategies that cybercriminals employ. Honeypots have been around for quite awhile, y...

How Enigmo Moved Logic from Client to Origin to Edge

By: Hideki Ito Enigmo owns BUYMA, a Japanese fashion C2C marketplace that helps people buy and sell high-quality goods from overseas on www.buyma.com. BUYMA has 8.21 million members and deals with 5.62 million items across 140,000 fashion brands. Its website uses EdgeWorkers to manipulate cookies...

UVI-2021-1000386 soundwire: stream: fix memory leak in stream config error path

soundwire: stream: fix memory leak in stream config error path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.37 by commit...

Your Amazon Devices to Automatically Share Your Wi-Fi With Neighbors

Starting June 8, Amazon will automatically enable a feature on its family of hardware devices, including Echo speakers, Ring Video Doorbells, Ring Floodlight Cams, and Ring Spotlight Cams, that will share a small part of your Internet bandwidth with nearby neighbors — unless you choose to opt-out...

How to Avoid Those Infuriating Cookie Pop-Ups

Cookie consent notices are everywhere, and opting out of tracking is a pain. It doesn’t have to be this way...

SUSE-SU-2021:1652-1 Security update for redis

This update for redis fixes the following issues: redis was updated to 6.0.13: CVE-2021-29477: Integer overflow in STRALGO LCS command bsc1185729 CVE-2021-29478: Integer overflow in COPY command for large intsets bsc1185730 Cluster: Skip unnecessary check which may prevent failure detection Fix...

Stalkerware Apps Riddled with Security Bugs

Android stalkerware apps – used to surreptitiously track people’s movements and digital activities – turn out to themselves be rife with security holes that put victims in even danger. Stalkerware can track the GPS location of a victim’s device, record conversations, capture images and snoop on...

Cross-browser tracking vulnerability compromises user anonymity

By Habiba Rashid The vulnerability affects top browsers including Chrome, Firefox, Safari, and even Tor browser. This is a post from HackRead.com Read the original post: Cross-browser tracking vulnerability compromises user anonymity...