Tag
Authorization Bypass in Klarna for WooCommerce Plugin
1 rule 2 TTPs 1 CVEAn authorization bypass vulnerability in the Klarna for WooCommerce plugin allows unauthenticated attackers to enumerate store orders and exfiltrate customer PII via the order-pay endpoint.
Denial of Service via SVG ViewBox Exploitation in stoatchat
2 TTPs 1 CVEstoatchat versions prior to 0.15.0 contain an uncontrolled resource consumption vulnerability in its proxy endpoint that allows unauthenticated attackers to cause memory exhaustion through malicious SVG files.
macOS Mojave Sandbox Distributed Notification Bypass
2 rules 1 TTPA vulnerability in macOS Mojave allows sandboxed applications to bypass sandbox restrictions and surreptitiously monitor user activities by registering for distributed notifications by name, circumventing intended privacy protections.
macOS QuickLook Thumbnail Cache Leak
2 rules 1 TTPmacOS QuickLook caches thumbnails and file paths of files, even those stored within encrypted containers or on removable USB devices, potentially revealing sensitive data to attackers with access to the running system.
Signal 'Disappearing' Messages Persist in macOS Notification Center
2 rulesmacOS stores Signal message notifications in an unencrypted SQLite database, potentially exposing 'disappearing' messages even after they are deleted from the Signal application.