How to boost your VPN connection speed in 5 ways

By Tabby Farrar VPNs are a fantastic tool for maintaining your online privacy, in that they keep your connection secure and your details anonymous while you’re browsing the web. One key flaw for many VPN users is the lag they can sometimes add to your connection. Because your uploads and download...

Mozilla Firefox for Android Information Disclosure Vulnerability

Mozilla Firefox for Android is an open source web browser based on the Android platform from the US-based Mozilla Foundation. A security vulnerability exists in previous versions of Mozilla Firefox 63 for Android. The vulnerability can be exploited by a remote attacker to obtain a user's browsing...

Mozilla Firefox < 63.0

The version of Firefox installed on the remote Windows host is prior to 63.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2018-26 advisory. - When manipulating user events in nested loops while opening a document through script, it is possible to trigger a...

Security vulnerabilities fixed in Firefox 63 — Mozilla

During HTTP Live Stream playback on Firefox for Android, audio data can be accessed across origins in violation of security policies. Because the problem is in the underlying Android service, this issue is addressed by treating all HLS streams as cross-origin and opaque to access. Note: this issu...

Google Chrome Omnibox URL Spoofing Vulnerability (CNVD-2018-24374)

Google Chrome is a web browser developed by Google, Inc. and Omnibox is a real-time search engine. A security vulnerability exists in Omnibox in iOS-based versions of Google Chrome prior to 70.0.3538.67, which stems from the program's failure to properly handle browsing history. A remote attacker...

BullGuard Safe Browsing Cross-Site Scripting Vulnerability

BullGuard Safe Browsing is a secure browser from BullGuard UK. A cross-site scripting vulnerability exists in BullGuard Safe Browsing version 18.1.355. The vulnerability can be exploited by a remote attacker to execute JavaScript code from a domain name indexed in search results...

Authentication flaw

IBM Rational Engineering Lifecycle Manager 5.0 through 5.02 and 6.0 through 6.0.6 could allow remote attackers to bypass authentication via a direct request or forced browsing to a page other than URL intended. IBM X-Force ID: 142561...

PT-2018-13008

Name of the Vulnerable Software and Affected Versions IBM Rational Engineering Lifecycle Manager versions 5.0 through 5.02 IBM Rational Engineering Lifecycle Manager versions 6.0 through 6.0.6 Description The issue allows remote attackers to bypass authentication by making a direct request or usi...

CVE-2018-1539: Improper Authentication

IBM Rational Engineering Lifecycle Manager 5.0 through 5.02 and 6.0 through 6.0.6 could allow remote attackers to bypass authentication via a direct request or forced browsing to a page other than URL intended. IBM X-Force ID: 142561...

About the security content of Safari 12

About the security content of Safari 12 This document describes the security content of Safari 12. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

CVE-2018-17061

BullGuard Safe Browsing before 18.1.355.9 allows XSS on Google, Bing, and Yahoo! pages via domains indexed in search results...

Cross site scripting

BullGuard Safe Browsing before 18.1.355.9 allows XSS on Google, Bing, and Yahoo! pages via domains indexed in search results...

CVE-2018-17061

BullGuard Safe Browsing before 18.1.355.9 allows XSS on Google, Bing, and Yahoo! pages via domains indexed in search results...

CVE-2018-17061

CVE-2018-17061 affects BullGuard Safe Browsing prior to version 18.1.355.9. The vulnerability is a cross-site scripting (XSS) issue that can be triggered on Google, Bing, and Yahoo! pages through domains indexed in search results. The connected CNVD/NVD entries confirm the vulnerable component an...

CVE-2018-17061

BullGuard Safe Browsing before 18.1.355.9 allows XSS on Google, Bing, and Yahoo! pages via domains indexed in search results...

PT-2018-13872

Name of the Vulnerable Software and Affected Versions BullGuard Safe Browsing versions prior to 18.1.355.9 Description The issue allows for cross-site scripting XSS attacks on Google, Bing, and Yahoo! pages. This occurs when domains indexed in search results are used to exploit the vulnerability...

CVE-2018-17061: Improper Neutralization of Input During Web Page Generation

BullGuard Safe Browsing before 18.1.355.9 allows XSS on Google, Bing, and Yahoo! pages via domains indexed in search results...

GHSA-M4FW-77V7-924M Qutebrowser XSS Vulnerability

qutebrowser version introduced in v0.11.0 1179ee7a937fb31414d77d9970bac21095358449 contains a Cross Site Scripting XSS vulnerability in history command, qute://history page that can result in Via injected JavaScript code, a website can steal the user's browsing history. This attack appear to be...

Tor Browser for Android

Tor Browser for Android is the only official mobile browser supported by the Tor Project, developers of the world’s strongest tool for privacy and freedom online. Features BLOCK TRACKERS Tor Browser isolates each website you visit so third-party trackers and ads can’t follow you. Any cookies...

CVE-2018-7572

Pulse Secure Client 9.0R1 and 5.3RX before 5.3R5, when configured to authenticate VPN users during Windows Logon, can allow attackers to bypass Windows authentication and execute commands on the system with the privileges of Pulse Secure Client. The attacker must interrupt the client's network...