SUSE CVE-2024-44187

A cross-origin issue existed with "iframe" elements. This was addressed with improved tracking of security origins. This issue is fixed in Safari 18, iOS 18 and iPadOS 18, macOS Sequoia 15, tvOS 18, visionOS 2, watchOS 11. A malicious website may exfiltrate data cross-origin...

CVE-2024-6769

creationtimestamp| type| source ---|---|--- 2024-09-26 23:51:55+00:00| seen| https://t.me/cvedetector/6462 2024-09-27 16:18:40+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/8618 2024-09-28 13:40:30+00:00| published-proof-of-concept| https://t.me/CNArsenal/3237 2024-09-29...

Watering Hole Attack on Kurdish Sites Distributing Malicious APKs and Spyware

As many as 25 websites linked to the Kurdish minority have been compromised as part of a watering hole attack designed to harvest sensitive information for over a year and a half. French cybersecurity firm Sekoia, which disclosed details of the campaign dubbed SilentSelfie, described the intrusio...

Mozilla Faces Privacy Complaint for Enabling Tracking in Firefox Without User Consent

Vienna-based privacy non-profit noyb short for None Of Your Business has filed a complaint with the Austrian data protection authority DPA against Firefox maker Mozilla for enabling a new feature called Privacy-Preserving Attribution PPA without explicitly seeking users' consent. "Contrary to its...

Top LMS Training Tips for Effective Learning

LMS training is vital for modern education and corporate learning, enabling efficient course delivery and progress tracking. To…...

CGA-6VQ4-FCF5-2F47

Bulletin has no description...

CGA-3H64-5FPJ-R93X

Bulletin has no description...

Web tracking report: who monitored users’ online activities in 2023–2024 the most

Web tracking has become a pervasive aspect of our online experience. Whether we're browsing social media, playing video games, shopping for products, or simply reading news articles, trackers are silently monitoring our online behavior, fueling the ceaseless hum of countless data centers worldwid...

Tracking cloud-fluent threat actors - Part one: Atomic cloud IOCs

Strategies for tracking and defending against malicious activity and threats in the cloud using atomic indicators of compromise IOCs...

CVE-2020-14644

creationtimestamp| type| source ---|---|--- 2024-09-20 18:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2025-02-23 02:10:58+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2025-08-18 13:31:24+00:00| seen| MISP/4937e86f-f5bd-4d09-8bda-88a7440077f3 2025-08-19 02:47:46+00:00|...

“Simply staggering” surveillance conducted by social media and streaming services, FTC finds

The US Federal Trade Commission FTC released a report that examines the data collection and use practices of major social media and video streaming services, finding that—and this will not come as a surprise to our regular readers—the companies engaged in vast surveillance of consumers in order t...

File-Unpumper - Tool That Can Be Used To Trim Useless Things From A PE File Such As The Things A File Pumper Would Add

file-unpumper is a powerful command-line utility designed to clean and analyze Portable Executable PE files. It provides a range of features to help developers and security professionals work with PE files more effectively. Features PE Header Fixing : file-unpumper can fix and align the PE header...

CVE-2021-27917

Prior to this patch, a stored XSS vulnerability existed in the contact tracking and page hits report...

CVE-2021-27917

Prior to this patch, a stored XSS vulnerability existed in the contact tracking and page hits report...

Everything you need to know about VPN tracking

A VPN Virtual Private Network adds privacy and security to your browsing. But does this make your internet…...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS through the contact tracking and page hits report feature. An attacker can manipulate web content or hijack user sessions by injecting malicious scripts. Details Cross-site scripting or XSS is a code vulnerabili...

Mautic has an XSS in contact tracking and page hits report

Summary Prior to this patch, a stored XSS vulnerability existed in the contact tracking and page hits report. Patches Please update to 4.4.13 or 5.1.1 or later. Workarounds None References https://owasp.org/www-project-top-ten/2017/A72017-Cross-SiteScriptingXSS...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS through the contact tracking and page hits report feature. An attacker can manipulate web content or hijack user sessions by injecting malicious scripts. Details Cross-site scripting or XSS is a code vulnerabili...

GHSA-XPC5-RR39-V8V2 Mautic has an XSS in contact tracking and page hits report

Summary Prior to this patch, a stored XSS vulnerability existed in the contact tracking and page hits report. Patches Please update to 4.4.13 or 5.1.1 or later. Workarounds None References https://owasp.org/www-project-top-ten/2017/A72017-Cross-SiteScriptingXSS...

GHSA-73GR-32WG-QHH7 Mautic vulnerable to XSS in contact/company tracking (no authentication)

Summary Prior to this patch being applied, Mautic's tracking was vulnerable to Cross-Site Scripting through the Page URL variable. Patches Please update to 4.4.13 or 5.1.1 or later. Workarounds None References https://owasp.org/www-project-top-ten/2017/A72017-Cross-SiteScriptingXSS...