MAL-2022-5118 Malicious code in orbit-tracking (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b514c540f5d1347c7573a09c60655ff0d5981f14a3e86f7d0bfe30316c2e2894 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5346 Malicious code in piwik-pro-angular-tracking (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 79068cbf8199cbc4c530a577a4934b5e4c0fa657f5c84ef801c777fd77150c36 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-25772

A cross-site scripting XSS vulnerability in the web tracking component of Mautic before 4.3.0 allows remote attackers to inject executable javascript...

CVE-2022-25772

A cross-site scripting XSS vulnerability in the web tracking component of Mautic before 4.3.0 allows remote attackers to inject executable javascript...

Cross site scripting

A cross-site scripting XSS vulnerability in the web tracking component of Mautic before 4.3.0 allows remote attackers to inject executable javascript...

Analytify < 4.2.1 - Reflected Cross-Site Scripting

The plugin does not escape the current URL before outputting it back in a 404 page when the 404 tracking feature is enabled, leading to Reflected Cross-Site Scripting When 404 tracking is enabled: https://example.com/aa404bb?aalert/XSS/...

CVE-2022-25772

A cross-site scripting XSS vulnerability in the web tracking component of Mautic before 4.3.0 allows remote attackers to inject executable javascript...

Analytify < 4.2.1 - Reflected Cross-Site Scripting

The plugin does not escape the current URL before outputting it back in a 404 page when the 404 tracking feature is enabled, leading to Reflected Cross-Site Scripting PoC When 404 tracking is enabled: https://example.com/aa404bb?aalert/XSS/...

CVE-2022-25772

The CVE-2022-25772 entry corresponds to a cross-site scripting vulnerability in Mautic’s web tracking component present in versions before 4.3.0. The root cause is improper sanitization of user metadata collected from tracking pixels, enabling remote attackers to inject executable JavaScript. Pub...

[SECURITY] Fedora 36 Update: rubygem-mechanize-2.8.5-1.fc36

The Mechanize library is used for automating interaction with websites. Mechanize automatically stores and sends cookies, follows redirects, can follow links, and submit forms. Form fields can be populated and submitted. Mechanize also keeps track of the sites that you have visited as a history...

Tracking People via Bluetooth on Their Phones

Weve always known that phones--and the people carrying them--can be uniquely identified from their Bluetooth signatures, and that we need security techniques to prevent that. This new research shows that thats not enough. Computer scientists at the University of California San Diego proved in a...

Firefox stops advertisers tracking you as you browse, calls itself the most “private and secure major browser”

Cookies are in the news as Mozilla rolls out significant privacy changes for Firefox. The idea is to dramatically lessen the risk of privacy-invading tracking across websites without your knowledge. Tracking cookies have been a hot topic in recent months, as advertisers try switching to other...

Unauthorized Access Vulnerability in Atlassian System dashboard-Jira

Atlassian Jira is a defect tracking management system from Atlassian. The system is mainly used to track and manage all types of issues and defects in the workplace. An unauthorized access vulnerability exists in Atlassian System dashboard-Jira, which can be exploited by an attacker to obtain...

Bluetooth Signals Can Be Used to Track Smartphones, Say Researchers

Researchers warn Bluetooth signals can be used to track device owners via a unique fingerprinting of the radio signal. The technique was presented via a paper presented at IEEE Security and Privacy conference last month by researchers at the University of California San Diego. The paper suggests...

A week in security (June 6 – June 12)

Last week on Malwarebytes Labs: FBI warns of scammers soliciting donations for Ukraine Microsoft autopatch is here…but can you use it? Prometheus ransomwares flaws inspired researchers to try to build a near-universal decryption tool Rotten apples banned from App store Hackers can take over...

Bluetooth Signals Can Be Abused To Detect and Track Smartphones

By Deeba Ahmed Even unpaired smartphones are vulnerable to tracking. According to a study by the University of California San Diego’s engineers,… This is a post from HackRead.com Read the original post: Bluetooth Signals Can Be Abused To Detect and Track Smartphones...

Researchers Find Bluetooth Signals Can be Fingerprinted to Track Smartphones

A new research undertaken by a group of academics from the University of California San Diego has revealed for the first time that Bluetooth signals can be fingerprinted to track smartphones and therefore, individuals. The identification, at its core, hinges on imperfections in the Bluetooth...

tracking.offerteshopping.it Cross Site Scripting vulnerability OBB-2645589

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

titra 跨站脚本漏洞

titra is a modern open source time tracking project for freelancers and small teams. A cross-site scripting vulnerability exists in versions prior to titra 0.77.0, which stems from the presence of stored cross-site scripting XSS...

Coffee app in hot water for constant tracking of user location

A mobile app violated Canadas privacy laws via some pretty significant overreach with its tracking of device owners. The violation will apparently not bring the app owners, Tim Hortons, any form of punishment. However, the fallout from this incident may hopefully serve as a warning to others with...