7258 matches found
CVE-2021-27917 XSS in contact tracking and page hits report
Prior to this patch, a stored XSS vulnerability existed in the contact tracking and page hits report...
CVE-2021-27917 XSS in contact tracking and page hits report
Prior to this patch, a stored XSS vulnerability existed in the contact tracking and page hits report...
CVE-2021-27917
CVE-2021-27917 documents a stored XSS vulnerability in Mautic’s contact tracking and page hits report. Affected component: mautic/core (and related mautic/core-lib in one entry) with unsafe handling of user input that can be stored and later executed in a user’s browser. Root cause centers on ins...
CVE-2024-47050
Affected software: Mautic (core/lib). The vulnerability is Cross-Site Scripting (XSS) in the Page URL variable used by Mautic’s tracking. Root cause: inadequate sanitization/escaping of the Page URL parameter allows attacker-controlled scripts. Impact: potential execution of malicious scripts in ...
CVE-2024-47050 XSS in contact/company tracking (no authentication)
Prior to this patch being applied, Mautic's tracking was vulnerable to Cross-Site Scripting through the Page URL variable...
CVE-2024-47050 XSS in contact/company tracking (no authentication)
Prior to this patch being applied, Mautic's tracking was vulnerable to Cross-Site Scripting through the Page URL variable...
CVE-2024-46745
In the Linux kernel, the following vulnerability has been resolved: Input: uinput - reject requests with unreasonable number of slots When exercising uinput interface syzkaller may try setting up device with a really large number of slots, which causes memory allocation failure in inputmtinitslot...
CVE-2024-46745
In the Linux kernel, the following vulnerability has been resolved: Input: uinput - reject requests with unreasonable number of slots When exercising uinput interface syzkaller may try setting up device with a really large number of slots, which causes memory allocation failure in inputmtinitslot...
Mautic 安全漏洞
Mautic is an open source marketing automation software from Mautic Open Source. The software monitors and manages websites, sends emails and manages customer resources. A security vulnerability exists in Mautic version 1.0.0-beta4 and earlier versions, which stems from the contact tracking and pa...
PT-2024-32375 · Mautic · Mautic
Name of the Vulnerable Software and Affected Versions: Mautic versions prior to 4.4.13 Mautic versions prior to 5.1.1 Description: The issue concerns Cross-Site Scripting through the Page URL variable in Mautic's tracking. This allows for potential exploitation. Recommendations: For versions prio...
PT-2024-10913 · Mautic · Mautic
Name of the Vulnerable Software and Affected Versions: Mautic versions prior to 4.4.13 Mautic versions prior to 5.1.1 Description: A stored XSS issue existed in the contact tracking and page hits report, allowing for potential malicious script execution. Recommendations: For versions prior to...
CVE-2024-45605
Sentry vulnerability CVE-2024-45605: Improper authorization allows an authenticated user to delete user issue alert notifications for arbitrary users when they know an alert ID. The issue is mitigated by a patch that scopes authorization checks on delete requests; affected deployments need to upg...
CVE-2024-45605 Improper authorization on deletion of user issue alert notifications in sentry
Sentry is a developer-first error tracking and performance monitoring platform. An authenticated user delete the user issue alert notifications for arbitrary users given a know alert ID. A patch was issued to ensure authorization checks are properly scoped on requests to delete user alert...
UBUNTU-CVE-2024-44187
A cross-origin issue existed with "iframe" elements. This was addressed with improved tracking of security origins. This issue is fixed in Safari 18, iOS 18 and iPadOS 18, macOS Sequoia 15, tvOS 18, visionOS 2, watchOS 11. A malicious website may exfiltrate data cross-origin...
CVE-2024-44187
A cross-origin issue existed with "iframe" elements. This was addressed with improved tracking of security origins. This issue is fixed in Safari 18, iOS 18 and iPadOS 18, macOS Sequoia 15, tvOS 18, visionOS 2, watchOS 11. A malicious website may exfiltrate data cross-origin...
The vulnerability of the Runc command-line tool for isolated containers, related to the race condition, allows attackers to manipulate the integrity of data. This condition enables tracking of references, enabling attackers to affect the data’s integrity.
The vulnerability of the Runc container launch tool is related to the state of the race, which allows for the tracking of links. Exploiting this vulnerability could enable a hacker to compromise the integrity of data...
Apple Vision Pro’s Eye Tracking Exposed What People Type
The Vision Pro uses 3D avatars on calls and for streaming. These researchers used eye tracking to work out the passwords and PINs people typed with their avatars...
CVE-2024-8190
creationtimestamp| type| source ---|---|--- 2024-09-11 00:17:20+00:00| seen| https://t.me/cvedetector/5309 2024-09-14 06:30:34+00:00| exploited| https://t.me/thehackernews/5582 2024-09-14 07:08:56+00:00| exploited| https://t.me/KomunitiSiber/2571 2024-09-14 07:21:54+00:00| exploited|...
Advanced forensic techniques for recovering hidden data in wearable devices
TL;DR A walk-through of forensic data recovery Detailed example of how to retrieve potentially sensitive deleted data Includes location, sleep and activity tracking Understand the security and privacy implications of wearable device data Introduction This blog post covers how forensic skills and...
