3472 matches found
Code injection
qt5-qtwebkit before 5.4 records private browsing URLs to its favicon database, WebpageIcons.db...
CVE-2015-8079
qt5-qtwebkit before 5.4 records private browsing URLs to its favicon database, WebpageIcons.db...
UBUNTU-CVE-2015-8079
qt5-qtwebkit before 5.4 records private browsing URLs to its favicon database, WebpageIcons.db...
CVE-2015-8079
qt5-qtwebkit before 5.4 records private browsing URLs to its favicon database, WebpageIcons.db...
CVE-2015-8079
CVE-2015-8079 affects qt5-qtwebkit before 5.4, where private browsing URLs are recorded to the favicon database WebpageIcons.db. Connected sources corroborate that this logging vulnerability existed in QtWebKit and was addressed in a SUSE security update (SUSE-SU-2016:2397-1) which mentions an ad...
CVE-2015-8079
Removed by vendor...
Tor Project Brings Security Slider Feature to Android App Orfox
Tor Project developers recently bolstered Orfox, a Tor Browser for Android devices, to help privacy-conscious mobile browsers better customize their security. Tor Project developers partnered with the Guardian Project to release the first iteration of the app last December. It’s essentially an...
It’s Back to School Time, So How Do I Keep My Child Safe Online?
The end of the summer can be a pretty stressful time for parents as well as their kids. Apart from the prospect of a return to school, there’s a whole checklist of items to get ready. Schoolbag? Check. Sports kit? Check. Smartphone? Check. Internet safety guide? Errr… The truth is that today, the...
Mobile Menace Monday: Implications of Google Play Protect
Along with the recent release of Google’s new OS, Android 8.0 Oreo, they also released a new security suite known as Google Play Protect. As blogged about in July in Play Protect: Android’s new security system is now available, this new suite has been available since mid-May. To reiterate As note...
Cisco Ultra Services Platform Elastic Services Controller Web Interface Information Disclosure Vulnerability
Cisco Ultra Services Platform is an intelligent online service delivery platform from Cisco, Inc. Elastic Services Controller ESC is an open source modular system. An information disclosure vulnerability exists in the ESC web interface in Cisco Ultra Services Platform version 21.0.v0.65839. A...
Google Removes Chrome Extension Used in Banking Fraud
Google has removed from the Chrome Web Store a malicious browser extension used by criminals in Brazil to target corporate users with the aim of stealing banking credentials. The twist is that the attackers did their homework on their targets, learning via social networks whom inside an...
Nextcloud: Information Exposure Through Directory Listing
Hello. I found open directories on the site https://apps.nextcloud.com, which can be viewed by any unauthorized user. There is an error at https://apps.nextcloud.com/static/. F212856 All directories and files in them, starting with /static/ can be viewed or downloaded with all the content. Perhap...
Play Protect: Android’s new security system is now available
Play Protect, a security suite for Android devices, was originally introduced in mid-May of this year during the Google I/O conference. And in just a couple of months, the tech giant has made it available for all their mobile users. Play Protect is the amalgamation of Google’s Android security...
Fedora 26 : webkitgtk4 (2017-dfaf0ca892)
Highlights of the 2.16.0 release : - Hardware acceleration is now enabled on demand to drastically reduce memory consumption. - CSS Grid Layout is enabled by default. - New WebKitSetting to set the hardware acceleration policy. - UI process API to configure network proxy settings. - Improved...
Cross-Site Scripting Vulnerability in Accessible Assisted Browsing
Accessibility Aids is an accessibility aid for government websites that focuses on information technology construction, web content accessibility and internet accessibility. Accessibility Assisted Browsing has a cross-site scripting vulnerability, as the program fails to filter the event...
CVE-2017-3948
Cross Site Scripting XSS in IMG Tags in the ePO extension in McAfee Data Loss Prevention Endpoint DLP Endpoint 10.0.x allows authenticated users to inject arbitrary web script or HTML via injecting malicious JavaScript into a user's browsing session...
How to Speed Up Firefox With Multi-Process, If It's Not Working By Default
After years of waiting, Mozilla last week launched Firefox 54 for Windows, Mac, Linux, and Android, with multi-process support — a "major improvement" to improve your browsing experience — but many users are still struggling to take advantage of this feature. Mozilla's multi-process support in...
Mozilla Fixes 32 Vulnerabilities in Firefox 54
Mozilla fixed 32 vulnerabilities, including a critical bug that could have resulted in a crash, with the release Tuesday of Firefox 54, the latest version of its flagship browser. The critical bug, a use-after-free vulnerability, was dug up by longtime bug hunter Nils. The vulnerability...
MSRT June 2017: Removing sneaky Xiazai
In the June release of the Microsoft Malicious Software Removal Tool MSRT, we’re adding Xiazai, a widespread family of browser modifiers that we have blocked and removed from millions of computers since 2015. Xiazai is a software bundler that can sneak in additional changes. Xiazai does not insta...
