CVE-2021-36942

creationtimestamp| type| source ---|---|--- 2021-08-11 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=628 2021-08-11 18:46:50+00:00| seen| https://t.me/truesecator/1993 2021-08-23 11:49:49+00:00| seen| MISP/b4779706-9ec4-44cb-afe8-97771711623b 2021-10-25 22:32:43+00:00|...

JetBrains YouTrack Security Feature Issue Vulnerability

JetBrains YouTrack is a browser-based bug tracking and project management software from JetBrains Czech Republic. JetBrains YouTrack is vulnerable to a security feature that could be exploited by remote attackers to access sensitive information...

JetBrains YouTrack has an unspecified vulnerability (CNVD-2022-09228)

JetBrains YouTrack is a browser-based bug tracking and project management software from JetBrains Czech Republic. JetBrains YouTrack contains a security vulnerability that could be exploited by remote attackers to bypass implemented security restrictions...

DEBIAN-CVE-2021-38209

net/netfilter/nfconntrackstandalone.c in the Linux kernel before 5.12.2 allows observation of changes in any net namespace because these changes are leaked into all other net namespaces. This is related to the NFSYSCTLCTMAX, NFSYSCTLCTEXPECTMAX, and NFSYSCTLCTBUCKETS sysctls...

UBUNTU-CVE-2021-38209

net/netfilter/nfconntrackstandalone.c in the Linux kernel before 5.12.2 allows observation of changes in any net namespace because these changes are leaked into all other net namespaces. This is related to the NFSYSCTLCTMAX, NFSYSCTLCTEXPECTMAX, and NFSYSCTLCTBUCKETS sysctls...

All the Ways Spotify Tracks You—and How to Stop It

Whether you're listening to workout music or a "cooking dinner" playlist, the app can show you ads based on your mood and what you're doing right now...

JetBrains YouTrack Elevation of Privilege Vulnerability

JetBrains YouTrack is a browser-based bug tracking and project management software from JetBrains Czech Republic. JetBrains YouTrack has an elevation of privilege vulnerability that could be exploited by an attacker to bypass implemented security restrictions and elevate privileges on the system...

CVE-2021-22937

creationtimestamp| type| source ---|---|--- 2021-08-06 13:54:25+00:00| published-proof-of-concept| Telegram/OlmIWfCf04jqftw8Cq-ou5J6g6om6u87bzbeyzb222HA 2021-08-06 14:51:28+00:00| published-proof-of-concept| https://t.me/CyberSecurityIL/4542 2021-08-06 17:57:30+00:00| published-proof-of-concept|...

CVE-2021-29974

CVE-2021-29974 affects Mozilla Firefox before 90. When network partitioning is enabled (e.g., via Enhanced Tracking Protection), a TLS error page could allow overriding an error on an HSTS domain, violating intended error handling. The issue does not affect network connections, which still upgrad...

Citizen's New Service Helps Paying Users Summon the Cops

The crime-tracking app is charging $20 per month to give subscribers access to their own virtual security service...

SUSE-SU-2021:2600-1 Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues: Update to version 2.32.3: - CVE-2021-21775: Fixed a use-after-free vulnerability in the way certain events are processed for ImageLoader objects. A specially crafted web page can lead to a potential information leak and further memory...

CVE-2021-37160

creationtimestamp| type| source ---|---|--- 2021-08-02 16:27:24+00:00| seen| https://t.me/cibsecurity/26673 2021-08-03 12:35:49+00:00| seen| https://t.me/truesecator/1966 2024-11-14 06:09:31+00:00| seen| MISP/46f73e2c-5f95-4a7a-a992-f10051bb2c5c...

CVE-2021-3490

creationtimestamp| type| source ---|---|--- 2021-07-30 07:13:19+00:00| published-proof-of-concept| https://t.me/linkersec/98 2021-07-30 19:51:20+00:00| seen| https://t.me/ctinow/37820 2021-08-31 23:56:20+00:00| seen|...

CISA Alert: Top Routinely Exploited Vulnerabilities

On July 28, 2021, the U.S. Cybersecurity and Infrastructure Security Agency CISA released a cybersecurity advisory detailing the top 30 publicly known vulnerabilities that have been routinely exploited by cyber threat actors in 2020 and 2021. Organizations are advised to prioritize and apply...

CVE-2021-30744

Description: A cross-origin issue with iframe elements was addressed with improved tracking of security origins. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Safari 14.1.1, macOS Big Sur 11.4, watchOS 7.5. Processing maliciously crafted web content may lead to universal cross site...

UBUNTU-CVE-2021-30744

Description: A cross-origin issue with iframe elements was addressed with improved tracking of security origins. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Safari 14.1.1, macOS Big Sur 11.4, watchOS 7.5. Processing maliciously crafted web content may lead to universal cross site...

SourceCodester Travel Management System File Upload Vulnerability

SourceCodester Travel Management System is a software application. An automated system designed to help customers easily check their parcel details while helping travel companies track packages online. A file upload vulnerability exists in SourceCodester Travel Management System v1.0, which can b...

CVE-2021-21443

Agents are able to list customer user emails without required permissions in the bulk action screen. This issue affects: OTRS AG OTRS Community Edition: 6.0.x version 6.0.1 and later versions. OTRS AG OTRS: 7.0.x versions prior to 7.0.27...

[SECURITY] Fedora 34 Update: fossil-2.14.2-1.fc34

Fossil is a simple, high-reliability, distributed software configuration management with distributed bug tracking, distributed wiki and built-in web interface...

WordPress Advanced Shipment Tracking for WooCommerce plugin <= 3.2.6 - Authenticated WordPress Options Change vulnerability

Authenticated WordPress Options Change vulnerability discovered by Jerome Bruandet in WordPress Advanced Shipment Tracking for WooCommerce plugin versions = 3.2.6. Solution Update the WordPress Advanced Shipment Tracking for WooCommerce plugin to the latest available version at least 3.2.7...