4157 matches found
PT-2015-1944
Name of the Vulnerable Software and Affected Versions Apple Safari versions prior to 6.2.8 Apple Safari versions 7.x prior to 7.1.8 Apple Safari versions 8.x prior to 8.0.8 Description The issue is related to the private-browsing implementation in WebKit, which does not prevent caching of HTTP...
UBUNTU-CVE-2015-3752
The Content Security Policy implementation in WebKit in Apple Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, as used in iOS before 8.4.1 and other products, does not properly restrict cookie transmission for report requests, which allows remote attackers to obtain sensitive...
CVE-2015-3754: Exposure of Sensitive Information to an Unauthorized Actor
The private-browsing implementation in WebKit in Apple Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8 does not prevent caching of HTTP authentication credentials, which makes it easier for remote attackers to track users via a crafted web site...
openSUSE: Security Advisory for MozillaFirefox (openSUSE-SU-2015:1390-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Netsweeper 4.0.8 - Multiple Vulnerabilities
Exploit for php platform in category web applications +---------------------------------------------------+ + Netsweeper 4.0.8 - Cross Site Scripting Injection + +---------------------------------------------------+ Affected Product: Netsweeper Vendor Homepage : www.netsweeper.com/ Version : 4.0....
Firefox 40 Begins Warning Users About Unsigned Add-Ons
With Tuesday’s release of Firefox 40, Mozilla has begun the process of requiring all add-ons for the browser to be signed. The company announced the forthcoming change in February, and Firefox 40 is the first version to warn users about unsigned add-ons. The goal for the change in policy is to...
EFF, AdBlock and Others Launch New Do Not Track Standard
After years of discussions, disagreements, and digressions, the Do Not Track header is supported by all of the major browsers. But because there’s no real requirement for sites or advertisers to respect it, DNT is not as effective as it could be. Now, the EFF, Disconnect, and several other...
Google to Expand Use of Safe Browsing to Stop Unwanted Software
Google is expanding the use of its Safe Browsing mechanism to warn users about a broader variety of unwanted software, in addition to the warnings they see regarding phishing pages, malware, and other threats. Safe Browsing is the service that Google uses to help protect Chrome users from malicio...
Microsoft Internet Explorer Information Disclosure Vulnerability (CNVD-2015-04587)
Microsoft Internet Explorer IE is a Web browser developed by the American company Microsoft and is the default browser that comes with the Windows operating system. A security vulnerability exists in Microsoft IE versions 8 through 11. A remote attacker can exploit the vulnerability to obtain...
Information disclosure
Microsoft Internet Explorer 8 through 11 allows remote attackers to obtain sensitive browsing-history information via vectors related to image caching, aka "Internet Explorer Information Disclosure Vulnerability."...
CVE-2015-2414
Microsoft Internet Explorer 8 through 11 allows remote attackers to obtain sensitive browsing-history information via vectors related to image caching, aka "Internet Explorer Information Disclosure Vulnerability."...
CVE-2015-2414
CVE-2015-2414 affects Microsoft Internet Explorer 8–11. The vulnerability allows a remote attacker to obtain sensitive browsing-history information via image caching vectors, i.e., an information-disclosure vulnerability. Connected sources corroborate IE as the affected product family and describ...
CVE-2015-2414: Exposure of Sensitive Information to an Unauthorized Actor
Microsoft Internet Explorer 8 through 11 allows remote attackers to obtain sensitive browsing-history information via vectors related to image caching, aka "Internet Explorer Information Disclosure Vulnerability."...
I2P Browsing Detection
Binary data 8797.prm...
I2P Browsing Detection via key exchange
Binary data 8799.prm...
CUPS XSS / String Handling / Improper Teardown
Source: http://googleprojectzero.blogspot.se/2015/06/owning-internet-printing-case-study-in.html Abstract Modern exploit mitigations draw attackers into a game of diminishing marginal returns. With each additional mitigation added, a subset of software bugs become unexploitable, and others become...
I keep 200+ Browser Tabs Open, and My Computer Runs Absolutely Fine. Here’s My Secret.
I don't know about your part, but I make heavy use of tabs. I currently have 200+ tabs open in my Google Chrome Web browser. And sometimes the number is even more. For me it's a daily thing, as I regularly open new tabs because of my habit of reading lots of stuff online, including cyber security...
Yahoo.com Browsing Detection (deprecated)
Binary data 6969.prm...