3884 matches found
Mac and Windows Malware Spreads Through Facebook Attack
A new attack on Facebook has been making the rounds this week, thanks in part to the social networking service’s ‘Like’ feature – and both Mac and Windows users are vulnerable. According to F-Secure’s News from the Lab blog, a Lithuanian server is dishing out the malware that appears to be...
Joomla! 1.6 < 1.6.2 Multiple Vulnerabilities (deprecated)
Binary data 5893.prm...
Information disclosure
Microsoft Internet Explorer 6, 7, and 8 does not enforce intended domain restrictions on content access, which allows remote attackers to obtain sensitive information or conduct clickjacking attacks via a crafted web site, aka "Frame Tag Information Disclosure Vulnerability."...
CVE-2011-1244
Microsoft Internet Explorer 6, 7, and 8 does not enforce intended domain restrictions on content access, which allows remote attackers to obtain sensitive information or conduct clickjacking attacks via a crafted web site, aka "Frame Tag Information Disclosure Vulnerability."...
CVE-2011-1244
The CVE-2011-1244 entry concerns Microsoft Internet Explorer 6, 7, and 8, where cross-domain content access restrictions are not enforced, enabling remote attackers to read sensitive information or perform clickjacking via a crafted page. The vulnerability is associated with the Frame Tag Informa...
Firefox 4 With Content Security Policy Due Tuesday
Firefox 4, the newest version of Mozilla’s flagship browser slated for release today, includes a variety of security and privacy protections, but perhaps the most important of them is the addition of the Content Security Policy. The mechanism, which is enabled by default in Firefox 4, is designed...
FreeBSD Ports: opera, opera-devel, linux-opera
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2011 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
MediaWiki < 1.16.1 'Frames Processing Clickjacking' Information Disclosure Vulnerability
MediaWiki is prone to a clickjacking information disclosure vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
FreeBSD : opera -- multiple vulnerabilities (2eda0c54-34ab-11e0-8103-00215c6a37bb)
Opera reports : Opera 11.01 is a recommended upgrade offering security and stability enhancements. The following security vulnerabilities have been fixed : - Removed support for 'javascript:' URLs in CSS -o-link values, to make it easier for sites to filter untrusted CSS. - Fixed an issue where...
CVE-2011-0683
Opera before 11.01 does not properly restrict the use of opera: URLs, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site...
Code injection
Opera before 11.01 does not properly restrict the use of opera: URLs, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site...
CVE-2011-0683
Opera before 11.01 did not properly restrict opera: URLs, enabling clickjacking via a crafted site. A remote attacker could lure a user to a malicious page to perform a clickjacking attack. Affected: Opera up to version 11.00; remediation: upgrade to Opera 11.01 or later where the issue is fixed....
CVE-2011-0683
Opera before 11.01 does not properly restrict the use of opera: URLs, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site...
Opera < 11.01 Multiple Vulnerabilities
The version of Opera installed on the remote Windows host is earlier than 11.01. Such versions are potentially affected by the following issues : - The Cascading Style Sheets CSS Extensions for XML implementation recognizes links to javascript: URLs in the -o-link property, which could be abused ...
Opera < 11.01 Multiple Vulnerabilities
Binary data 5747.prm...
Opera < 11.01 Multiple Vulnerabilities
Binary data 800855.prm...
opera -- multiple vulnerabilities
Opera reports: Opera 11.01 is a recommended upgrade offering security and stability enhancements. The following security vulnerabilities have been fixed: Removed support for "javascript:" URLs in CSS -o-link values, to make it easier for sites to filter untrusted CSS. Fixed an issue where large...
Clickjacking attacks may be carried out against internal opera: URLs – Opera Security Advisories
Clickjacking attacks may be carried out against internal opera: URLs – Opera Security Advisories OPCOM Team | January 25, 2011 Severity High Description Internal opera: URLs which may be used to modify the Opera configuration have some intentional restrictions that are designed to mitigate possib...
Clickjacking attacks may be carried out against internal opera: URLs
Internal opera: URLs which may be used to modify the Opera configuration have some intentional restrictions that are designed to mitigate possible clickjacking attacks. Certain manipulations can trick Opera into bypassing those restrictions, which would then allow clickjacking attacks to be carri...