8346 matches found
Free Facial Recognition Tool Can Track People Across Social Media Sites
Security researchers at Trustwave have released a new open-source tool that uses facial recognition technology to locate targets across numerous social media networks on a large scale. Dubbed Social Mapper, the facial recognition tool automatically searches for targets across eight social media...
Important: tomcat8
Issue Overview: The defaults settings for the CORS filter provided in Apache Tomcat are insecure and enable 'supportsCredentials' for all origins. It is expected that users of the CORS filter will have configured it appropriately for their environment rather than using it in the default...
Microsoft Windows: Turn off the advertising ID
This policy setting turns off the advertising ID, preventing apps from using the ID for experiences across apps. If you enable this policy setting, the advertising ID is turned off. Apps can SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced...
Microsoft Windows: Enable/Disable PerfTrack
This policy setting specifies whether to enable or disable tracking of responsiveness events. If you enable this policy setting, responsiveness events are processed and aggregated. The aggregated data will be transmitted to Microsoft through SQM. Ff you disable this policy setting, responsiveness...
airflow-imaging-plugins (>=2.4.2, <=2.4.3), data-tracking (1.7.2) +1 more potentially affected by CVE-2017-12614 via apache-airflow (1.8.2)
apache-airflow PYPI version 1.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - airflow-imaging-plugins =2.4.2, =0.0.5, =0.0.6 Source cves: CVE-2017-12614 Source advisory: OSV:PYSEC-2018-45...
UBUNTU-CVE-2018-4278
In Safari before 11.1.2, iTunes before 12.8 for Windows, iOS before 11.4.1, tvOS before 11.4.1, iCloud for Windows before 7.6, sound fetched through audio elements may be exfiltrated cross-origin. This issue was addressed with improved audio taint tracking...
PT-2018-16519
Name of the Vulnerable Software and Affected Versions Safari versions prior to 11.1.2 iTunes versions prior to 12.8 for Windows iOS versions prior to 11.4.1 tvOS versions prior to 11.4.1 iCloud for Windows versions prior to 7.6 Description The issue allows sound fetched through audio elements to ...
glib/fuzz_bookmark: Heap-buffer-overflow in fuzz_bookmark.c
Project: https://gitlab.gnome.org/GNOME/glib.git Detailed report: https://oss-fuzz.com/testcase?key=5131520774766592 Project: glib Fuzzer: libFuzzerglibfuzzbookmark Fuzz target binary: fuzzbookmark Job Type: libfuzzerasanglib Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Addres...
CVE-2018-1999037
A data modification vulnerability exists in Jenkins Resource Disposer Plugin 0.11 and earlier in AsyncResourceDisposer.java that allows attackers to stop tracking a resource...
Grammarly: Handling of `tracking` command allows making arbitrary blind requests with user's cookies from Grammarly Extension's origin
Summary: Attacker could trigger Grammarly extension's gnar.fetch command using a crafted page to perform XHR with cookies and any configurational params to any cross-origin resource. Description: Page could Init Grammarly popup editor no user gesture, helper Events have isTrusted property, which...
CVE-2018-1999037: Improper Input Validation
A data modification vulnerability exists in Jenkins Resource Disposer Plugin 0.11 and earlier in AsyncResourceDisposer.java that allows attackers to stop tracking a resource...
PT-2018-15216
Name of the Vulnerable Software and Affected Versions Jenkins Resource Disposer Plugin versions 0.11 and earlier Description A data modification issue exists that allows attackers to stop tracking a specified resource. This is related to the AsyncResourceDisposer.java file. Additionally, a CSRF...
www-secure.org XSS vulnerability
Open Bug Bounty ID: OBB-656772 Description| Value ---|--- Affected Website:| www-secure.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
CVE-2017-6884
creationtimestamp| type| source ---|---|--- 2018-07-30 08:48:18+00:00| seen| MISP/5b5ece74-a5c8-40cd-87d6-d789950d210f 2020-01-08 13:22:45+00:00| seen| MISP/5e15d698-a3b4-40fd-86e7-15cc02de0b81 2020-10-09 14:13:46+00:00| seen| MISP/b6fb39e0-8665-41f9-bc21-88d7f1945ec4 2020-10-09 16:07:57+00:00|...
iPhone Hacking Campaign Using MDM Software Is Broader Than Previously Known
India-linked highly targeted mobile malware campaign, first unveiled two weeks ago, has been found to be part of a broader campaign targeting multiple platforms, including windows devices and possibly Android as well. As reported in our previous article, earlier this month researchers at Talos...
How to block ads like a pro
In part one of this series, we had a look at a few reasons why you should be blocking online advertisements on your network and devices. From malvertising attacks and privacy-invading tracking systems to just being an outright annoyance, online ads and trackers are a nuisance that provides an...
Semrush: Stored XSS in '' Section and WAF Bypass
Summary Stored Cross-site Scripting XSS is the most dangerous type of Cross Site Scripting. Web applications that allow users to store data are potentially exposed to this type of attack. stored XSS occurs when a web application gathers input from a user which might be malicious, and then stores...
poppler/pdf_fuzzer: Use-of-uninitialized-value in clip01
Project: https://anongit.freedesktop.org/git/poppler/poppler.git https://gitlab.freedesktop.org/poppler/poppler.git https://gitlab.freedesktop.org/ceyhunalp/poppler.git Detailed report: https://oss-fuzz.com/testcase?key=5664576019365888 Project: poppler Fuzzer: libFuzzerpopplerpdffuzzer Fuzz targ...
