Apple Safari finally gets a malware blocker

After years of lagging behind on important security features, Apple has finally added a malware-blocker, a phishing filter and support for EV extended validation certificates into the latest refresh of its Safari Web browser. The malware roadblock headlines a list of Safari 4 security features th...

Pwn2Own 2009: Browsers and smart phones are targets

TippingPoint’s Zero Day Initiative has released the rules for this year’s CanSecWest PWN2OWN contest, which will target unpatched flaws in Web browsers and mobile devices. Among the target list this year: Microsoft’s Internet Explorer 8, Apple’s Safari, Google’s Chrome, Windows Mobile, Google...

Fedora Update for liferea FEDORA-2008-3249

Check for the Version of liferea OpenVAS Vulnerability Test Fedora Update for liferea FEDORA-2008-3249 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

[SECURITY] Fedora 9 Update: galeon-2.0.7-5.fc9

Galeon is a web browser built around Gecko Mozilla's rendering engine and Necko Mozilla's networking engine. It's a GNOME web browser, designed to take advantage of as many GNOME technologies as makes sense. Galeon was written to do just one thing - browse the web...

[SECURITY] Fedora 10 Update: pcmanx-gtk2-0.3.8-5.fc10

An easy-to-use telnet client mainly targets BBS users. PCMan X is a newly developed GPL'd version of PCMan, a full-featured famous BBS client formerly designed for MS Windows only. It aimed to be an easy-to-use yet full-featured telnet client facilitating BBS browsing with the ability to process...

[SECURITY] Fedora 10 Update: pcmanx-gtk2-0.3.8-4.fc10

An easy-to-use telnet client mainly targets BBS users. PCMan X is a newly developed GPL'd version of PCMan, a full-featured famous BBS client formerly designed for MS Windows only. It aimed to be an easy-to-use yet full-featured telnet client facilitating BBS browsing with the ability to process...

History Search can reveal browsing history

Certain constructs are not escaped correctly by Opera's History Search results. These can be used to inject scripts into the page, which can then be used to look through the user's browsing history, including the contents of the pages they have visited. These may contain sensitive information...

History Search can reveal browsing history – Opera Security Advisories

History Search can reveal browsing history – Opera Security Advisories OPCOM Team | December 16, 2008 Severity Extremely Severe Platforms All desktop versions Problem Description Certain constructs are not escaped correctly by Opera’s History Search results. These can be used to inject scripts in...

Opera 9.62 - file: Local Heap Overflow

Opera 9.62 - file: Local Heap Overflow uh? // ksOSe 11/15/2008 // tested on Windows XP SP3, opera 9.62 international version // vulnerability found by send9 // there are many ways to achieve code execution, tons of function pointers to overwrite. // maybe there's one more reliable... var i=0; //...

firefox security update

devhelp: 0.12-20 - Rebuild against xulrunner firefox: 3.0.4-1.0.1.el5 - Added firefox-oracle-default-prefs.js/firefox-oracle-default-bookmarks.html Removed the corresponding files of Red Hat. - Added patch oracle-firefox-branding.patch - Update firstrun URL in spec file 3.0.4-5 - Update to Firefo...

Collabtive 0.4.8 Multiple Vulnerabilities

Collabtive 0.4.8 Multiple Vulnerabilities Name Multiple Vulnerabilities in Collabtive Systems Affected Collabtive 0.4.8 and possibly earlier versions Severity High Impact CVSSv2 High 8/10, vector: AV:N/AC:L/Au:S/C:P/I:C/A:P Vendor http://collabtive.o-dyn.de/ Advisory...

googlechrome-check.txt

Google Chrome 0.2.149.30, file type check vulnerability when browsing through ftp. For example, when browsing: ftp://ftp.example.net/picture.jpg or it could be .txt, .pdf, etc... Google Chrome does not check the file type. When browsing only ftp://ftp.example.net/ you will see the picture.jpg fil...

firefox-check.txt

Mozilla Firefox 3.0.1, file type check vulnerability when browsing through ftp. For example, when browsing: ftp://ftp.example.net/picture.jpg or it could be .txt, .pdf, etc... Mozilla Firefox does not check the file type. When browsing only ftp://ftp.example.net/ you will see the picture.jpg file...

opera -- multiple vulnerabilities

Opera reports: Certain constructs are not escaped correctly by Opera's History Search results. These can be used to inject scripts into the page, which can then be used to look through the user's browsing history, including the contents of the pages they have visited. These may contain sensitive...

[SECURITY] Fedora 8 Update: galeon-2.0.4-5.fc8.3

Galeon is a web browser built around Gecko Mozilla's rendering engine and Necko Mozilla's networking engine. It's a GNOME web browser, designed to take advantage of as many GNOME technologies as makes sense. Galeon was written to do just one thing - browse the web...

[SECURITY] Fedora 8 Update: yelp-2.20.0-10.fc8

Yelp is the Gnome 2 help/documentation browser. It is designed to help you browse all the documentation on your system in one central tool...

Hacking the network of fifty-ways-vulnerability warning-the black bar safety net

Now online the attacks more and more, hackers are by what method to attack US? Below we give you a summary of the hacking network of fifty ways, and let everyone do better safe than sorry. 1. Network a wide network Co., Ltd. production site basic have injection vulnerabilities search network wide...

Wayport Public Access PC Authentication Bypass Weakness

Application: Wayport Public Access PC Vendor: http://www.wayport.net Bug: Authorisation Bypass Risk: High Date: 8 April 2008 Author: Pascal Cretain e-mail: Pascal.Cretain at Gmail dot com List: BugTraq SecurityFocus ======= Product ======= Wayport's Public Access PC === Bug === There is an...

It's possible to browse project names when using Issue Security Scheme.

A customer user is set up and only allowed to see "External" issues. - The user is added as project role "Customers" in project "X". - The project got Issue Security Scheme "Customers". Internal / External When logging in as the customer user, you can only see the External issues within this...

openSUSE 10 Security Update : epiphany (epiphany-5102)

The Mozilla XULRunner 1.8.1 engine was updated to security update version 1.8.1.12. This includes fixes for the following security issues : - MFSA 2008-10/CVE-2008-0593 URL token stealing via stylesheet redirect - MFSA 2008-09/CVE-2008-0592 Mishandling of locally-saved plain text files - MFSA...