2707 matches found
Enterprises Riding A Tiger With Consumer Devices
Like the old adage that ‘he who rides a tiger is afraid to dismount,’ enterprises today are bounding along on the back of a particularly large and fearsome tiger. It’s called “consumer technology” and its shape is outlined by the myriad of devices and services that modern information workers are...
FTC Pushes "Do Not Track" Option For Web Browsers
The Federal Trade Commission introduced a framework today that aims to address privacy issues raised by consumers that directly affects how our activity is tracked online. The agency went on to advocate the creation of a “Do Not Track” mechanism that could help shape the future of browser securit...
Civil Liberties Grade Drops for Obama Administration in Latest Privacy Report
The Electronic Privacy Information Center EPIC has released its annual Privacy Report Card for the Obama Administration. Compared to last year's results, the administration has retained its good grade in only one privacy subject: cybersecurity. "One of the most difficult subjects for any...
Fraud Advisory for Consumers Released: Involvement in Criminal Activity Through Work from Home Scams
As part of a joint effort, the United States Secret Service, the Federal Bureau of Investigation, the Internet Crime Complaint Center IC3 and the Financial Services Information Sharing and Analysis Center FS-ISAC have released Fraud Advisory for Consumers: Involvement in Criminal Activity through...
Report: FCC May Push ISPs To Crack Down on Botnets
We’ve known for a long time that botnets are the Madwoman in the Attic at most major Internet service providers ISPs- an unseemly and occasionally embarrassing presence that is occasionally dealt with, but usually silently tolerated. But now, it seems, there’s pressure mounting on ISPs to do...
New Controls Needed to Improve Privacy
WASHINGTON, D.C.– As the speed of technological innovation has continued to increase in recent years, it has completely outpaced the ability of companies, consumers and regulators to keep up with the ways in which those changes affect online privacy, experts say, and in order to make real...
Consumer Groups Say Proposed Privacy Bill is Flawed
A long-awaited draft of a Congressional bill would extend privacy protections both on the Internet and off line, but privacy advocates said the bill did not go far enough in protecting consumers. Read the full article New York Times...
Rich People More Likely Victims of ID Theft
A study — which was created using the unlikely combination of identity fraud incidence statistics with basic consumer demographics — indicates that identity thieves are successfully targeting the wealthy and affluent, regardless of the systems and software they use. Read the full article. Dark...
Privacy Concerns Raised About Smart Grids
Technologists already are worried about the security implications of linking nearly all elements of the U.S. power grid to the public Internet. Now, privacy experts are warning that the so-called “smart grid” efforts could usher in a new class of concerns, as utilities begin collecting more...
Five ways Apple can improve Mac and iPhone security
From TidBITS Rich Mogull With the impending release of the next versions of both Mac OS X and the iPhone operating system, it seems a good time to evaluate how Apple could improve their security program. Rather than focusing on narrow issues of specific vulnerabilities or incidents, or offering...
Businesses losing fight against employee apps
From Techworld Maxwell Cooter Enterprises are struggling to control the use of consumer applications within the workplace, despite the panoply of security tools being used within corporates. According to new research paloaltonetworks.com, nearly half of all bandwidth within corporate environments...
Secunia pushes for standard to patch consumer apps
From DarkReading Kelly Jackson Higgins Danish security firm Secunia is attempting to rally other software vendors to develop an industry-standard tool that automatically updates all applications on a consumer’s PC. Secunia envisions an industry-standard app that runs when a laptop starts up, for...
lotfian-sqlxss.txt
Aria-Security Team http://Aria-Security.Net ---------------------------------------- Lotfian Brochure and cataloge Script XSS And SQL Injection Original Advisory @ http://aria-security.net/forum/showthread.php?p=1135 Username/Password Field can run SQL Queries, For Example I got these:...
British TeleCommunications Consumer Webhelper 2.0.0.7 - Multiple Buffer Overflow Vulnerabilities
British TeleCommunications Consumer Webhelper 2.0.0.7 - Multiple Buffer Overflow Vulnerabilities source: https://www.securityfocus.com/bid/24219/info The British Telecommunications Consumer Webhelper ActiveX control is prone to multiple buffer-overflow vulnerabilities because it fails to...
British Telecommunications Consumer webhelper ActiveX control buffer overflows
Overview The British Telecommunications Consumer webhelper ActiveX control contains multiple buffer overflows, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description The registration process for British Telecommunications BT internet...
British TeleCommunications Consumer Webhelper 2.0.0.7 - Multiple Buffer Overflow Vulnerabilities
source: https://www.securityfocus.com/bid/24219/info The British Telecommunications Consumer Webhelper ActiveX control is prone to multiple buffer-overflow vulnerabilities because it fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer. Successfully...
Symantec Security Advisory SYM07-002 http://www.symantec.com/avcenter/security/Content/2007.02.22.html BID 22564 22 Feb, 2007 Stack Overflow in Third-Party ActiveX Controls affects Multiple Vendor Products Including Some Symantec Consumer Products and Automated Support Assistant Revision History...
[Full-disclosure] [CAID 34870]: CA Anti-Virus vetfddnt.sys, vetmonnt.sys Local Denial of Service Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Title: CAID 34870: CA Anti-Virus vetfddnt.sys, vetmonnt.sys Local Denial of Service Vulnerabilities CA Vulnerability ID CAID: 34870 CA Advisory Date: 2006-12-13 Discovered By: Ruben Santamarta reversemode.com Impact: Local unprivileged attacker can...
CVE-2006-3667
Unspecified vulnerability in Sybase/Financial Fusion Consumer Banking Suite versions before 20060706 has unknown impact and remote attack vectors...
Multiple Symantec firewall products fail to properly process DNS response packets
Overview There is a vulnerability in multiple Symantec firewall products in which attempts to process a specially crafted Domain Name Service DNS response packet could allow an unauthenticated, remote attacker to cause a denial of service condition. Description Symantec offers a suite of corporat...