9692 matches found
Important: Red Hat Security Advisory: kernel security and bug fix update
Updated kernel packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 6.2 Extended Update Support. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, whi...
CVE-2012-4506: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in gitolite 3.x before 3.1, when wild card repositories and a pattern matching "../" are enabled, allows remote authenticated users to create arbitrary repositories and possibly perform other actions via a .. dot dot in a repository name...
Anonymous Hacker claims to have 20,000 debit card details from HSBC Cyberattack
One of Anonymous hacker groups "FawkesSecurity" who claim responsibility for a DDOS cyber attack on HSBC Bank says that they also manage to get 20,000 debit card details. When HSBC said, "This denial-of-service attack did not affect any customer data, but did prevent customers using HSBC online...
DropBox iOS / Android App File Theft
DropBox version 1.4.6 on iOS, 2.0.1 on Android, and Google Drive version 1.0.1 on iOS suffer from a file theft vulnerability due to allowing arbitrary javascript to be executed inside of the privileged file zone. 1 Introduction ================================================ Recently, I discover...
Security weakness in Android App SSL Implementations
The most common approach to protect data during communication on the Android platform is to use the Secure Sockets Layer SSL or Transport Layer Security TLS protocols. Thousands of applications in the Google Play market that are using these implementations. A group of researchers including Sascha...
HSBC Sites Knocked Offline in 'Large Scale' DoS Attack
Websites belonging to British bank and financial services company HSBC are back online today after reportedly experiencing a denial of service DoS attack. The attack, which lasted approximately 10 hours last night, was deemed a “large scale denial of service attack” by the company. “On 18 October...
Important: Red Hat Security Advisory: kernel security and bug fix update
Updated kernel packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severi...
gitolite -- path traversal vulnerability
Sitaram Chamarty reports: I'm sorry to say there is a potential path traversal vulnerability in v3. Thanks to Stephane Chazelas for finding it and alerting me. Can it affect you? This can only affect you if you are using wild card repos, and at least one of your patterns allows the string "../" t...
New Strain of Man-in-the-Browser Malware Refines Data Sent to Attacker in Real Time
Hackers fond of man-in-the-browser MiTB attacks have brought efficiency to their work. New strains of MiTB malware have been discovered that are able to parse logs for the sensitive information hackers are targeting, rather than send massive unstructured logs back to the attacker’s command and...
Client Data Leakage Detection (Credit Card Number)
Binary data 7064.pasl...
Server Data Leakage Detection (Credit Card Number)
Binary data 7065.pasl...
Line of code let the Samsung galaxy do Factory Reset-vulnerability warning-the black bar safety net
SAMSUNG including the GALAXY S3 and other models of the smart phone there is a serious security vulnerability, a line of USSD code can be formatted the phone and even damage the SIM card! The current is determined there is a problem of the phone as follows: Galaxy S3, Galaxy S2, Galaxy Ace, Galax...
PT-2012-5525
Name of the Vulnerable Software and Affected Versions Cisco IOS XE version 03.02.00.XO.15.02XO on Catalyst 4500E series switches with a Supervisor Engine 7L-E card installed Description The issue allows remote attackers to cause a denial of service, resulting in a card reload, by sending malforme...
Samsung Fixes Remote Wipe Flaw in Galaxy S III Smartphones
Smartphone developer Samsung has reportedly fixed a flaw in one of its newest phones, the Galaxy S III, that allows attackers to remotely wipe the phone’s contents. The patch addresses a flaw presented at the Ekoparty Security Conference in Argentina late last week that showed how easy it was to...
CVE-2012-3714
The Form Autofill feature in Apple Safari before 6.0.1 does not restrict the filled fields to the set of fields contained in an Autofill popover, which allows remote attackers to obtain the Me card from an Address Book via a crafted web site...
Code injection
The Form Autofill feature in Apple Safari before 6.0.1 does not restrict the filled fields to the set of fields contained in an Autofill popover, which allows remote attackers to obtain the Me card from an Address Book via a crafted web site...
CVE-2012-3714
Safari before 6.0.1 on OS X Lion/Mountain Lion is affected by CVE-2012-3714: the Form Autofill feature does not restrict filled fields to the Autofill popover, potentially disclosing information from the Address Book Me card. Root cause: Autofill may fill fields beyond the popover. Impact: disclo...
CVE-2012-3714
The Form Autofill feature in Apple Safari before 6.0.1 does not restrict the filled fields to the set of fields contained in an Autofill popover, which allows remote attackers to obtain the Me card from an Address Book via a crafted web site...
CVE-2012-3714: Exposure of Sensitive Information to an Unauthorized Actor
The Form Autofill feature in Apple Safari before 6.0.1 does not restrict the filled fields to the set of fields contained in an Autofill popover, which allows remote attackers to obtain the Me card from an Address Book via a crafted web site...
