2732 matches found
Mozilla: Permission prompt input delay could expire when not in focus
The Mozilla Foundation Security Advisory describes this flaw as: The permission prompt input delay could expire while the window is not in focus. This makes it vulnerable to clickjacking by malicious websites...
Russian FSB Counterintelligence Chief Gets 9 Years in Cybercrime Bribery Scheme
The head of counterintelligence for a division of the Russian Federal Security Service FSB was sentenced last week to nine years in a penal colony for accepting a USD $1.7 million bribe to ignore the activities of a prolific Russian cybercrime group that hacked thousands of e-commerce websites. T...
Mozilla: Permission prompt input delay could expire when not in focus
The Mozilla Foundation Security Advisory describes this flaw as: The permission prompt input delay could expire while the window is not in focus. This makes it vulnerable to clickjacking by malicious websites...
Mozilla: Permission prompt input delay could expire when not in focus
The Mozilla Foundation Security Advisory describes this flaw as: The permission prompt input delay could expire while the window is not in focus. This makes it vulnerable to clickjacking by malicious websites...
Mozilla: Permission prompt input delay could expire when not in focus
The Mozilla Foundation Security Advisory describes this flaw as: The permission prompt input delay could expire while the window is not in focus. This makes it vulnerable to clickjacking by malicious websites...
Mozilla: Permission prompt input delay could expire when not in focus
The Mozilla Foundation Security Advisory describes this flaw as: The permission prompt input delay could expire while the window is not in focus. This makes it vulnerable to clickjacking by malicious websites...
Mozilla: Permission prompt input delay could expire when not in focus
The Mozilla Foundation Security Advisory describes this flaw as: The permission prompt input delay could expire while the window is not in focus. This makes it vulnerable to clickjacking by malicious websites...
Mozilla: Permission prompt input delay could expire when not in focus
The Mozilla Foundation Security Advisory describes this flaw as: The permission prompt input delay could expire while the window is not in focus. This makes it vulnerable to clickjacking by malicious websites...
Mozilla: Permission prompt input delay could expire when not in focus
The Mozilla Foundation Security Advisory describes this flaw as: The permission prompt input delay could expire while the window is not in focus. This makes it vulnerable to clickjacking by malicious websites...
Mozilla: Permission prompt input delay could expire when not in focus
The Mozilla Foundation Security Advisory describes this flaw as: The permission prompt input delay could expire while the window is not in focus. This makes it vulnerable to clickjacking by malicious websites...
Mozilla: Permission prompt input delay could expire when not in focus
The Mozilla Foundation Security Advisory describes this flaw as: The permission prompt input delay could expire while the window is not in focus. This makes it vulnerable to clickjacking by malicious websites...
Mozilla: Permission prompt input delay could expire when not in focus
The Mozilla Foundation Security Advisory describes this flaw as: The permission prompt input delay could expire while the window is not in focus. This makes it vulnerable to clickjacking by malicious websites...
CVE-2024-27592
Open Redirect vulnerability in Corezoid Process Engine v6.5.0 allows attackers to redirect to arbitrary websites via appending a crafted link to /login/ in the login page URL...
DuckDuckGo Is Taking Its Privacy Fight to Data Brokers
Privacy-focused company DuckDuckGo is launching a tool to remove data from people-search websites, a VPN, and an identity theft restoration service...
CVE-2024-27592
Open Redirect vulnerability CVE-2024-27592 affects Corezoid Process Engine v6.5.0. Multiple sources (NVD/Red Hat/CNNVD/CVE list) describe attackers being able to redirect users to arbitrary websites by appending a crafted link to the /login/ URL on the login page. The root cause is an open redire...
CVE-2024-27592
Open Redirect vulnerability in Corezoid Process Engine v6.5.0 allows attackers to redirect to arbitrary websites via appending a crafted link to /login/ in the login page URL...
CVE-2024-27592
Open Redirect vulnerability in Corezoid Process Engine v6.5.0 allows attackers to redirect to arbitrary websites via appending a crafted link to /login/ in the login page URL...
Nextcloud: Event create can create attachments that link to other websites
The vulnerability allowed the creation of attachments that could link to other websites during the event creation process...
Hackers Exploit Magento Bug to Steal Payment Data from E-commerce Websites
Threat actors have been found exploiting a critical flaw in Magento to inject a persistent backdoor into e-commerce websites. The attack leverages CVE-2024-20720 CVSS score: 9.1, which has been described by Adobe as a case of "improper neutralization of special elements" that could pave the way f...
Cookie consent choices are just being ignored by some websites
In news that is, sadly, unlikely to shock you, new research indicates that many websites ignore visitors choices to refuse cookies and collect their data anyway. Researchers at the University of Amsterdam UvA analyzed 85,000 European websites and came to the conclusion that 90% of them violated a...