7238 matches found
CVE-2023-25826
creationtimestamp| type| source ---|---|--- 2023-05-03 22:31:09+00:00| seen| https://t.me/cibsecurity/63240 2023-09-07 14:30:28+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/5101 2023-09-08 16:06:04+00:00| seen|...
Imperva Red Team Discovers Vulnerability in TikTok That Can Reveal User Activity and Information
TL;DR The Imperva Red Team discovered a vulnerability in TikTok, a popular social media platform with more than one billion users worldwide, that could allow attackers to monitor users activity on both mobile and desktop devices. This vulnerability, which has now been fixed, was caused by a windo...
Apple and Google Join Forces to Stop Unauthorized Location-Tracking Devices
Apple and Google have teamed up to work on a draft industry-wide specification that's designed to tackle safety risks and alert users when they are being tracked without their knowledge or permission using devices like AirTags. "The first-of-its-kind specification will allow Bluetooth...
Apple and Google Join Forces to Stop Unauthorized Location-Tracking Devices
Apple and Google have teamed up to work on a draft industry-wide specification that's designed to tackle safety risks and alert users when they are being tracked without their knowledge or permission using devices like AirTags. "The first-of-its-kind specification will allow Bluetooth...
[SECURITY] [DSA 5396-1] webkit2gtk security update
------------------------------------------------------------------------- Debian Security Advisory DSA-5396-1 [email protected] https://www.debian.org/security/ Alberto Garcia May 03, 2023 https://www.debian.org/security/faq -...
SUSE: Security Advisory (SUSE-SU-2023:2077-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 37 : webkitgtk (2023-a4bbf02a57)
The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-a4bbf02a57 advisory. The Bubblewrap sandbox no longer requires setting an application identifier via GApplication to operate correctly. Using GApplication is still...
SUSE-SU-2023:2078-1 Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: Update to version 2.38.6 bsc1210731: - CVE-2022-0108: Fixed information leak. - CVE-2022-32885: Fixed arbitrary code execution. - CVE-2023-25358: Fixed use-after-free vulnerability in WebCore::RenderLayer. - CVE-2023-27932: Fixed Same Origin...
SUSE-SU-2023:2077-1 Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: Update to version 2.38.6 bsc1210731: - CVE-2022-0108: Fixed information leak. - CVE-2022-32885: Fixed arbitrary code execution. - CVE-2023-25358: Fixed use-after-free vulnerability in WebCore::RenderLayer. - CVE-2023-27932: Fixed Same Origin...
SUSE-SU-2023:2065-1 Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: Update to version 2.38.6 bsc1210731: - CVE-2022-0108: Fixed information leak. - CVE-2022-32885: Fixed arbitrary code execution. - CVE-2023-25358: Fixed use-after-free vulnerability in WebCore::RenderLayer. - CVE-2023-27932: Fixed Same Origin...
SUSE-SU-2023:2056-1 Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: Update to version 2.38.6 bsc1210731: - CVE-2022-0108: Fixed information leak. - CVE-2022-32885: Fixed arbitrary code execution. - CVE-2023-25358: Fixed use-after-free vulnerability in WebCore::RenderLayer. - CVE-2023-27932: Fixed Same Origin...
SUSE CVE-2023-27954
The issue was addressed by removing origin information. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, tvOS 16.4, watchOS 9.4. A website may be able to track sensitive user information...
CVE-2023-30112
Medicine Tracker System in PHP 1.0.0 is vulnerable to SQL Injection...
UBUNTU-CVE-2023-27954
The issue was addressed by removing origin information. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, tvOS 16.4, watchOS 9.4. A website may be able to track sensitive user information...
Tablesome < 1.0.9 - Reflected XSS
The plugin does not escape various generated URLs, before outputting them in attributes when some notices are displayed, leading to Reflected Cross-Site Scripting Make a logged in admin open one of the URL below when the feature/tracking notice has not been dismissed yet...
TouchDown Timesheet Tracking for Jira 跨站脚本漏洞
TouchDown Timesheet Tracking for Jira is an easy-to-use timesheet reporting component from TouchDown, Switzerland. A security vulnerability exists in TouchDown Timesheet Tracking for Jira version 4.1.4, which stems from a stored cross-site scripting XSS vulnerability in the calendar view...
CVE-2022-44726
CVE-2022-44726 affects TouchDown Timesheet tracking component for Jira (version 4.1.4). The calendar view is vulnerable to stored XSS, enabling script execution in the context of affected pages. Public details in connected sources corroborate a calendar-view XSS risk; no concrete exploit details ...
CVE-2022-43697
OX App Suite before 7.10.6-rev30 allows XSS via an activity tracking adapter defined by jslob...
