8345 matches found
Information Disclosure
Firefox is vulnerable to information disclosure. Network connection is preserved for favicon resource retrieval after the browser is closed. This allows remote web servers to track users by observing network traffic from multiple IP addresses...
Denial Of Service (DoS)
Linux kernel-rt is vulnerable to denial of service. An integer overflow flaw was found in the way the Linux kernel's netfilter connection tracking implementation loaded extensions. An attacker on a local network could potentially send a sequence of specially crafted packets that would initiate th...
Session ID Disclosure
The org.apache.catalina.connector.Response.encodeURL method in Red Hat JBoss Web 7.1.x and earlier, when the tracking mode is set to COOKIE, sends the jsessionid in the URL of the first response of a session, which allows remote attackers to obtain the session id 1 via a man-in-the-middle attack ...
Ring Security Cam Snooping, Location Tracking, and More Security News This Week
A German hack confession, unencrypted government sites, and more security news this week...
DEBIAN-CVE-2018-4278
In Safari before 11.1.2, iTunes before 12.8 for Windows, iOS before 11.4.1, tvOS before 11.4.1, iCloud for Windows before 7.6, sound fetched through audio elements may be exfiltrated cross-origin. This issue was addressed with improved audio taint tracking...
CVE-2018-4278
In Safari before 11.1.2, iTunes before 12.8 for Windows, iOS before 11.4.1, tvOS before 11.4.1, iCloud for Windows before 7.6, sound fetched through audio elements may be exfiltrated cross-origin. This issue was addressed with improved audio taint tracking...
imagemagick/encoder_ept3_fuzzer: Use-of-uninitialized-value in WriteBlob
Detailed report: https://oss-fuzz.com/testcase?key=5085775568306176 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderept3fuzzer Fuzz target binary: encoderept3fuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...
CVE-2018-16087
Lack of proper state tracking in Permissions in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page...
Design/Logic Flaw
Lack of proper state tracking in Permissions in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page...
CVE-2018-16087
Lack of proper state tracking in Permissions in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page...
CVE-2018-16087
CVE-2018-16087 involves Google Chrome/Chromium where a lack of proper state tracking in Permissions allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. The issue affects Chromium/Chrome versions prior to 69.0.3497.81 and is triggered by manipulating permission sta...
CVE-2018-16087
Lack of proper state tracking in Permissions in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page...
CVE-2018-16087
Removed by vendor...
CVE-2019-0565
creationtimestamp| type| source ---|---|--- 2019-01-09 14:53:48+00:00| seen| MISP/5c360a14-9018-4d13-b6c9-714c0a021402...
Internet Bug Bounty: ZeroMQ libzmq remote code execution
Bug report and exploit: https://github.com/zeromq/libzmq/issues/3351 Fix by me: https://github.com/zeromq/libzmq/pull/3353 My motive for full disclosure is as follows: Is it true that it is not safe to use ZeroMQ over the internet because it will crash? Earlier versions of the ZeroMQ library befo...
Fedora 28 : mozilla-privacy-badger (2018-bb965553f9)
Fixed security issues with HTML5 local storage tracking detection as well as SoundCloud widget replacement. Thanks again to Cure53 for discovering and reporting these vulnerabilities. - Improved Facebook link unwrapping; now enabled on the Facebook Onion domain - Improved translations Italian,...
How Facebook Tracks Non-Users via Android Apps
LEIPZIG, GERMANY – If you quit Facebook or never joined because of its data collecting practices the odds are good the social network is still tracking you – despite your protest. Facebook collects data of non-users of its social network via dozens of mainstream Android apps that send tracking an...
CVE-2018-1000815
Brave Software Inc. Brave version version 0.22.810 to 0.24.0 contains a Other/Unknown vulnerability in function ContentSettingsObserver::AllowScript in contentsettingsobserver.cc that can result in Websites can run inline JavaScript even if script is blocked, making attackers easier to track user...
CVE-2018-1000815
Brave 0.22.810–0.24.0 contains a vulnerability in ContentSettingsObserver::AllowScript() that could allow inline JavaScript to run even when blocked. Impact is user tracking risk when visiting a crafted site. The issue is fixed in Brave 0.25.2. Exploitation details are not provided in the availab...
CVE-2018-1000815: Improper Input Validation
Brave Software Inc. Brave version version 0.22.810 to 0.24.0 contains a Other/Unknown vulnerability in function ContentSettingsObserver::AllowScript in contentsettingsobserver.cc that can result in Websites can run inline JavaScript even if script is blocked, making attackers easier to track user...