Unspecified Vulnerability in Apple iOS Security

Apple iOS is an operating system developed by Apple Inc. for mobile devices, of which Security is an information security and privacy component. An unspecified vulnerability exists in the Security component of Apple iOS prior to version 11. The vulnerability can be exploited by an attacker to tra...

Apple iOS and Safari WebKit Information Disclosure Vulnerability (CNVD-2017-32433)

Apple iOS and Safari are both products of Apple Inc. Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser that comes with Mac OS X and iOS operating systems; WebKit is an open-source web browser engine developed by KDE, Apple, Google,...

Google Maps by Reumer, 3.5, Malicious update

Google Maps by Reumer, from mapsplugin.com, version 3.5, malicious update Version 3.3 of this plugin is listed in the JED and appears to be clean. However once installed, the Joomla update manager prompts you to update this extension to a version 3.5 which is not officially published. This versio...

CVE-2017-3883

A vulnerability in the authentication, authorization, and accounting AAA implementation of Cisco Firepower Extensible Operating System FXOS and NX-OS System Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability occurs because AAA process...

Hackers can hack your kid’s smartwatch and track their location

By Carolina With smartwatches designed especially for kids being available now, parents This is a post from HackRead.com Read the original post: Hackers can hack your kids smartwatch and track their location...

Webtrekk Pixel Tracking Cross Site Scripting Vulnerability

Webtrekk Pixel Track versions 3.24 to 3.40, 4.00 to 4.40, and 5.00 to 5.04 suffer from a cross site scripting vulnerability. ======================================================================= title: Cross site scripting product: Webtrekk Pixel tracking vulnerable version: v3.24 to v3.40, v4....

Microsoft Kept Secret That Its Bug-Tracking Database Was Hacked In 2013

It was not just Yahoo among "Fortune 500" companies who tried to keep a major data breach incident secret. Reportedly, Microsoft had also suffered a data breach four and a half years ago in 2013, when a "highly sophisticated hacking group" breached its bug-reporting and patch-tracking database, b...

Issuetracker phpBugTracker cross-site scripting vulnerability (CNVD-2017-30877)

Issuetracker phpBugTracker is a web-based defect tracking system. The system provides features such as project management and defect tracking services. A cross-site scripting vulnerability exists in Issuetracker phpBugTracker versions prior to 1.7.2. A remote attacker can exploit this vulnerabili...

Webtrekk Pixel Tracking Cross Site Scripting

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Cross site scripting product: Webtrekk Pixel tracking vulnerable version: v3.24 to v3.40, v4.00 to v4.40, v5.00 to v5.04 fixed version: v3.41, v4.41, v5.05 impact: Medium...

PureVPN Aided FBI to Track CyberStalker by Providing His Logs

By Waqas On Friday a New Town, Massachusetts based man called Ryan This is a post from HackRead.com Read the original post: PureVPN Aided FBI to Track CyberStalker by Providing His Logs...

OnePlus Secretly Collects Way More Data Than It Should — Here’s How to Disable It

There is terrible news for all OnePlus lovers. Your OnePlus handset, running OxygenOS—the company's custom version of the Android operating system, is collecting way more data on its users than it requires. A recent blog post published today by security researcher Christopher Moore on his website...

A week in security (October 02 – October 08)

Last week, we gave you some tips for National Cybersecurity Awareness Month, walked through an exploration of a small adware file, and explored the complicated world of the Homograph attack. Here's what else happened in security. VB2017 Many of our team members attended VB2017 in Madrid, one of t...

CVE-2015-4000

creationtimestamp| type| source ---|---|--- 2017-10-09 18:29:26+00:00| seen| https://t.me/informationsecuritychannel/9760 2018-05-24 15:44:33+00:00| seen| MISP/5b06d57d-f2b8-4357-9038-45d39f590eb0 2022-11-07 22:22:31+00:00| seen|...

CVE-2016-3309

creationtimestamp| type| source ---|---|--- 2017-10-06 16:06:20+00:00| exploited| https://t.me/canyoupwnme/2393 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-12-24 20:28:24+00:00| seen| https://feedsin.space/feed/CISAKevBot/items/2971375 2025-02-23 02:10:11+00:00...

Facebook will use facial recognition to unlock your account

By Carolina Facebook is known for tracking users even when they log This is a post from HackRead.com Read the original post: Facebook will use facial recognition to unlock your account...

E-Mail Tracking

Interesting survey paper: on the privacy implications of e-mail tracking: Abstract: We show that the simple act of viewing emails contains privacy pitfalls for the unwary. We assembled a corpus of commercial mailing-list emails, and find a network of hundreds of third parties that track email...

CVE-2017-6090

creationtimestamp| type| source ---|---|--- 2017-10-02 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42934 2018-01-11 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43519 2018-05-29 15:50:33+00:00| seen|...

CVE-2017-14494

creationtimestamp| type| source ---|---|--- 2017-10-02 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42944 2024-11-14 06:09:54+00:00| seen| MISP/391f93ae-ac9e-4e23-a188-e10f41556b4d...

Bitwarden: Mailgun misconfiguration on email.bitwarden.com

Hi, While checking the subdomains i found that the subdomain email.bitwarden.com upon navigating downloads a file saying "Mailgun Magnificent API" And has the following DNS info DNS Records for email.bitwarden.com Hostname Type TTL Priority Content email.bitwarden.com SOA 899 ns-586.awsdns-09.net...

Over Half a Million Vehicle Records from SVR Tracking Leaked Online

By Waqas Over Half a Million Vehicle Records from SVR Tracking Leaked This is a post from HackRead.com Read the original post: Over Half a Million Vehicle Records from SVR Tracking Leaked Online...