tracking-board.com XSS vulnerability

Open Bug Bounty ID: OBB-634473 Description| Value ---|--- Affected Website:| tracking-board.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

botbait Information Disclosure Vulnerability

botbait is a tool used in the npm ecosystem for tracking bot and automation tool usage. An information disclosure vulnerability exists in botbait. An attacker could exploit this vulnerability to disclose information...

Enigmail Arbitrary Email Signature Forgery Vulnerability

Enigmail is a security extension for Mozilla Thunderbird and Seamonkey developed by the Enigmail team that supports composing and receiving emails signed and encrypted via secure signing and encryption signing and encrypting using the OpenPGP standard, and provides GUI configuration and OpenPGP k...

Security Bulletin: Multiple vulnerabilities in zlib affect IBM Tivoli Composite Application Manager for Transactions (CVE-2016-9840, CVE-2016-9841, CVE-2016-9842, CVE-2016-9843)

Summary There are multiple vulnerabilities in zlib that is used by IBM Tivoli Composite Application Manager for Transactions. Vulnerability Details Relevant CVE Information: CVEID: CVE-2016-9840 DESCRIPTION: zlib is vulnerable to a denial of service, caused by an out-of-bounds pointer arithmetic ...

Security Bulletin: A vulnerability in Apache Xerces-C XML Parser library affects IBM Tivoli Composite Application Manager for Transactions (CVE-2016-0729 )

Summary Apache Xerces-C XML Parser library is vulnerable to a denial of service, caused by improper bounds checking during processing and error reporting. By sending specially crafted input documents, an attacker could exploit this vulnerability to cause the library to crash or possibly execute...

Security Bulletin: IBM Tealeaf Customer Experience internal connections not encrypted (CVE-2015-4961)

Summary Internal connections between IBM Tealeaf Customer Experience servers use unencrypted HTTP. Vulnerability Details CVEID: CVE-2015-4961 DESCRIPTION: In an IBM Tealeaf environment with multiple servers, connections to the Tealeaf Data Service, Search Service, Replay Service, and Tracking...

Satellite Tracking Application: Gpredict

Gpredict is a real-time satellite tracking and orbit prediction application. It can track a large number of satellites and display their position and other data in lists, tables, maps, and polar plots radar view. Gpredict can also predict the time of future passes for a satellite, and provide you...

poppler/pdf_fuzzer: Use-of-uninitialized-value in clip01

Project: https://anongit.freedesktop.org/git/poppler/poppler.git https://gitlab.freedesktop.org/poppler/poppler.git https://gitlab.freedesktop.org/ceyhunalp/poppler.git Detailed report: https://oss-fuzz.com/testcase?key=5669907504037888 Project: poppler Fuzzer: libFuzzerpopplerpdffuzzer Fuzz targ...

Gpredict - Satellite Tracking Application

Gpredict is a real-time satellite tracking and orbit prediction application. It can track a large number of satellites and display their position and other data in lists, tables, maps, and polar plots radar view. Gpredict can also predict the time of future passes for a satellite, and provide you...

CVE-2018-4221

An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. The issue involves the "Security" component. It allows web sites to track users by leveraging the transmission of S/MIME client certificates...

CVE-2018-4221

An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. The issue involves the "Security" component. It allows web sites to track users by leveraging the transmission of S/MIME client certificates...

Code injection

An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. The issue involves the "Security" component. It allows web sites to track users by leveraging the transmission of S/MIME client certificates...

CVE-2018-4221

CVE-2018-4221 affects Apple products: iOS before 11.4 and macOS before 10.13.5, in the Security component. The issue allows websites to track users by abusing the transmission/validation of S/MIME client certificates. Public docs in the Apple security updates reference show this vulnerability und...

PT-2018-16489

Name of the Vulnerable Software and Affected Versions iOS versions prior to 11.4 macOS versions prior to 10.13.5 Description The issue involves the Security component and allows websites to track users by leveraging the transmission of S/MIME client certificates. Recommendations For iOS versions...

CVE-2018-7689

Lack of permission checks in the InitializeDevelPackage function in openSUSE Open Build Service before 2.9.3 allowed authenticated users to modify packages where they do not have write permissions...

CVE-2017-16126

The module botbait is a tool to be used to track bot and automated tools usage with-in the npm ecosystem. botbait is known to record and track user information. The module tracks the following information. Source IP process.versions process.platform How the module was invoked test, require,...

Code injection

The module botbait is a tool to be used to track bot and automated tools usage with-in the npm ecosystem. botbait is known to record and track user information. The module tracks the following information. Source IP process.versions process.platform How the module was invoked test, require,...

CVE-2017-16126

The module botbait is a tool to be used to track bot and automated tools usage with-in the npm ecosystem. botbait is known to record and track user information. The module tracks the following information. Source IP process.versions process.platform How the module was invoked test, require,...

CVE-2017-16126

The CVE-2017-16126 issue concerns the npm module botbait, which tracks user information within the npm ecosystem. Affected component: the botbait module; described data collection includes Source IP, process.versions, process.platform, and how the module was invoked (test, require, pre-install). ...

The Habituation of Security Warnings

We all know that it happens: when we see a security warning too often -- and without effect -- we start tuning it out. A new paper uses fMRI, eye tracking, and field studies to prove it. EDITED TO ADD 6/6: This blog post summarizes the findings...