CVE-2019-11747

CVE-2019-11747 affects Mozilla Firefox and Firefox ESR. The vulnerability stems from a bug in the History pane’s “Forget about this site” feature which, while intended to delete site-visit data, also removes HSTS settings for sites on the pre-load list. As a result, on the next visit, if a user u...

Eraser - Secure Erase Files from Hard Drives on Windows

Eraser is an advanced security tool for Windows which allows you to completely remove sensitive data from your hard drive by overwriting it several times with carefully selected patterns. Eraser is currently supported under Windows XP with Service Pack 3, Windows Server 2003 with Service Pack 2,...

20-Year-Old Man Arrested For Carrying Out Germany's Biggest Data Leak

German federal police have arrested a 20-year-old local student for stealing and publishing a massive trove of personal data of hundreds of politicians, journalists and other public figures last month. The young man, whose identity has not been revealed by the police, was arrested after police...

CVE-2018-8028

An authenticated user can execute ALTER TABLE EXCHANGE PARTITIONS without being authorized by Apache Sentry before 2.0.1. This can allow an attacker unauthorized access to the partitioned data of a Sentry protected table and can allow an attacker to remove data from a Sentry protected table...

Code injection

An authenticated user can execute ALTER TABLE EXCHANGE PARTITIONS without being authorized by Apache Sentry before 2.0.1. This can allow an attacker unauthorized access to the partitioned data of a Sentry protected table and can allow an attacker to remove data from a Sentry protected table...

CVE-2018-8028

Summary (CVE-2018-8028) : An authenticated user can execute ALTER TABLE EXCHANGE PARTITIONS without authorization in Apache Sentry prior to version 2.0.1, potentially exposing and removing data from a Sentry-protected partitioned table. The issue is tied to insufficient access control around part...

Red Hat oVirt Information Disclosure Vulnerability

Red Hat oVirt is the United States Red Hat Red Hat company's set of open source virtualization management platform , is the RHEV enterprise virtualization platform of the open source version of the oVirt-node client and overt-engine management end consists of . A security vulnerability exists in...

Pursuing The Right to be Left Alone

The three pillars of privacy, defined in “The Right to Privacy” 4 Harvard L.R. 193 Dec 15, 1890, are 1 the right to know what information is gathered about you, 2 the right to know how it will be used, and 3 the right to be left alone. The European Union has incorporated these principles into the...

The vulnerability of Google Chrome browser allows a hacker to replace website URLs.

The vulnerability of the browser/browsingdata/browsingdataremover.cc component in Google Chrome relates to the removal of HPKP elements during cache cleaning. Exploiting this vulnerability could allow a malicious actor to replace websites with valid certificates from any authorized certification...

Requests for Yahoo User Data Spiked After Paris Terror Attacks

Yahoo’s latest transparency report, published today, reflects a spike in government and law enforcement requests for user data following the Paris terrorist attacks of Nov. 13. The attacks resulted in the deaths of 130 people and injuries to more than 350 others; the situation remains fluid with...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability on eWON devices with firmware through 10.1s0 allows remote attackers to hijack the authentication of administrators for requests that trigger firmware upload, removal of configuration data, or a reboot...

PT-2004-3547 · Mozilla · Firefox

Name of the Vulnerable Software and Affected Versions: Mozilla Firefox versions 1.5.0.1 and possibly other versions Description: The issue allows local users who share a Windows profile to view records of user activity after a new installation of Firefox, even if the previous installation was...