SA-CONTRIB-2010-078 - Kaltura - Information disclosure

The Kaltura module integrates the Kaltura open source video platform with Drupal. When installing, uninstalling, or configuring the module, it would surreptitiously inject a hidden iframe into the messages displayed to the administrator with the source pointing to corp.kaltura.com/stats/drupal...

Privacy Tool Sidesteps Google's Data Collection

BOSTON — Privacy advocate Moxie Marlinspike used the spotlight of the SOURCE conference here to call attention to Google’s data harvesting practices, warning that the search engine giant can mine information to figure out even what Web surfers are thinking about. During a presentation that...

Social Net Info Is a Data Mine for Criminals

Computer scientists and policy experts say that such seemingly innocuous bits of self-revelation on social networking sites like Facebook, Twitter, Flickr, etc. can increasingly be collected and reassembled by computers to help create a picture of a person’s identity, sometimes down to the Social...

RedHat Update for systemtap RHSA-2010:0124-01

Check for the Version of systemtap OpenVAS Vulnerability Test RedHat Update for systemtap RHSA-2010:0124-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Fedora Update for systemtap FEDORA-2010-1720

Check for the Version of systemtap OpenVAS Vulnerability Test Fedora Update for systemtap FEDORA-2010-1720 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

[SECURITY] Fedora 12 Update: systemtap-1.1-2.fc12

SystemTap is an instrumentation system for systems running Linux 2.6. Developers can write instrumentation to collect data on the operation of the system...

[SECURITY] Fedora 11 Update: systemtap-1.1-2.fc11

SystemTap is an instrumentation system for systems running Linux 2.6. Developers can write instrumentation to collect data on the operation of the system...

[SECURITY] Fedora 12 Update: systemtap-1.1-1.fc12

SystemTap is an instrumentation system for systems running Linux 2.6. Developers can write instrumentation to collect data on the operation of the system...

[SECURITY] Fedora 11 Update: systemtap-1.1-1.fc11

SystemTap is an instrumentation system for systems running Linux 2.6. Developers can write instrumentation to collect data on the operation of the system...

[SECURITY] Fedora 10 Update: systemtap-1.0-2.fc10

SystemTap is an instrumentation system for systems running Linux 2.6. Developers can write instrumentation to collect data on the operation of the system...

[SECURITY] Fedora 11 Update: systemtap-1.0-2.fc11

SystemTap is an instrumentation system for systems running Linux 2.6. Developers can write instrumentation to collect data on the operation of the system...

Phishing Tool

Added: 09/23/2009 Background This tool serves an HTML form which collects information from users. It allows you to either replicate a real web page, or specify a custom header graphic, a custom footer graphic, and an introductory text message. For best results, design the HTML form to look like a...

Cormac Herley on the Underground Economy, IRC Economics and the Externalities of Cybercrime

Dennis Fisher talks with Cormac Herley of Microsoft Research about the paper he co-authored on the realities of the underground economy, why sales of stolen credit cards resemble a market for lemons and how we can get better data on cybercrime activities. Podcast audio courtesy of sykboy65 Downlo...

Australian Bank Cross Site Scripting

============================================== Security Advisory: Banks in Australia militan Chia-Jun Lin [email protected] adl.csie.ncu.edu.tw/militan militan-c7.blogspot.com Advanced Defense LabADL, NCU CSIE TAIWAN 12th May, 2009 ============================================== I. VULNERABILIT...

systemtap security update

CentOS Errata and Security Advisory CESA-2009:0373 Updated systemtap packages that fix a security issue are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. SystemTap is an instrumentation...

Update Protection against Sun Microsystems Java System Web Proxy sockd Daemon Buffer Overflow Vulnerability

A buffer overflow vulnerability has been reported in the Java System Web Proxy sockd daemon. Java System Web Proxy Server collects and distributes data from the network. It provides protocol support for SOCKS - an Internet protocol that allows client-server applications to transparently use the...

Phrack55:DIG

Distributed collection of information ------- Phrack Magazine --- Vol. 9 | Issue 55 --- 09/09/99 --- 09 of 19 ------------------------- Distributed collection of information -------- hybrid ---- Review Information gathering is the process of determining the characteristics of one or more remote...

Enthrallweb eNews 1.0 - Remote User Pass Change

Enthrallweb eNews 1.0 - Remote User Pass Change User Id: PASSWORD: FIRST: LAST:...

The Alexa toolbar is converted into a Trojan horse-vulnerability warning-the black bar safety net

Alexa is a publication of the global website ranking information website, whose URL is http://www. alexa. com. Alexa by on the client to install the Alexa toolbar to collect sampling sites worldwide access to data, to these data as the basis for a global site rank, similar to TV ratings statistic...

Etomite followup information

---------- Forwarded message ---------- From: Rick Elnor To: [email protected] Date: Sun, 29 Jan 2006 10:11:08 -0800 Subject: OSVDB Mods Change Request 22693: Etomite todo.inc.php cij Variable Arbitrary Command Execution Hello, I am Rick Elnor, the Etomite CMS security expert and owner ow...