CVE-2018-6849

In the WebRTC component in DuckDuckGo 4.2.0, after visiting a web site that attempts to gather complete client information such as https://ip.voidsec.com, the browser can disclose a private IP address in a STUN request...

Information disclosure

In the WebRTC component in DuckDuckGo 4.2.0, after visiting a web site that attempts to gather complete client information such as https://ip.voidsec.com, the browser can disclose a private IP address in a STUN request...

CVE-2018-6849

In the WebRTC component in DuckDuckGo 4.2.0, after visiting a web site that attempts to gather complete client information such as https://ip.voidsec.com, the browser can disclose a private IP address in a STUN request...

CVE-2018-6849

In the WebRTC component in DuckDuckGo 4.2.0, after visiting a web site that attempts to gather complete client information such as https://ip.voidsec.com, the browser can disclose a private IP address in a STUN request...

CVE-2018-6849

CVE-2018-6849 affects the WebRTC component in DuckDuckGo 4.2.0, enabling leakage of a client’s private IP address in a STUN request after visiting a site that tries to enumerate network information (e.g., ip.voidsec.com). The vulnerability description and multiple connected sources confirm the is...

Vivaldi browser puts DuckDuckGo as default search engine for private windows

By Waqas DuckDuckGo search engine and Vivaldi browser are joining hands together to collaborate This is a post from HackRead.com Read the original post: Vivaldi browser puts DuckDuckGo as default search engine for private windows...

duckduckgo.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-516040 Description| Value ---|--- Affected Website:| duckduckgo.com Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Disclosure Standard:| Coordinated Disclosure based on ISO...

duckduckgo.com XSS vulnerability

Vulnerable URL: https://duckduckgo.com/iu/?u=http://localdomain.pw/ddg/=1 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 347 VIP website status:| Yes Coordinated Disclosure Timeline: Description| Value ---|---...

duckduckgo.com XSS vulnerability

Vulnerable URL: https://duckduckgo.com//html?q=?%2522%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 501 VIP website status:| Yes Coordinated Disclosure Timeline:...

DuckDuckGo Search & Stories - Customized SSL, Runtime privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application DuckDuckGo Search & Stories published at the 'play' market has multiple vulnerabilities...

SpiderFoot v2.6.1 - Open Source Intelligence Automation

SpiderFoot is an open source intelligence automation tool. Its goal is to automate the process of gathering intelligence about a given target. Purpose There are three main areas where SpiderFoot can be useful: 1. If you are a pen-tester, SpiderFoot will automate the reconnaisance stage of the tes...

For Better Privacy & Security, Change these iOS 9 Settings Immediately

iOS 9 is out, and it's time to update your iPhone or iPad to the latest version of Apple's mobile operating system. The new iOS is better, faster, and more efficient than its predecessors, with a number of new features and improvements including enhanced multitasking for iPad, Proactive Assistant...

duckduckgo.com XSS vulnerability

Vulnerable URL: https://duckduckgo.com/?q=xss+site:heroesofmightand.com=-1'"=1 Details: Description| Value ---|--- Patched:| Yes, at 04.08.2015 Latest check for patch:| 04.08.2015 04:49 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 502 Google Pagerank| 7 VIP...

Google Engineers Critical Aviator Browser Privacy, Security

Within hours on Thursday of WhiteHat Security releasing its Aviator browser to open source, a remote code execution vulnerability was disclosed, along with a handful of other coding issues that Google security engineers said jeopardized the security and privacy of Aviator’s users. Google’s public...

openSUSE Security Update : MozillaFirefox (openSUSE-SU-2014:1581-1)

This MozillaFirefox update fixes several security and non security issues. Changes in MozillaFirefox : - update to Firefox 34.0.5 bnc908009 - Default search engine changed to Yahoo! for North America - Default search engine changed to Yandex for Belarusian, Kazakh, and Russian locales - Improved...

openSUSE Security Update : MozillaFirefox (openSUSE-SU-2013:0946-1)

MozillaFirefox was updated to Firefox 21.0 bnc819204 - MFSA 2013-41/CVE-2013-0801/CVE-2013-1669 Miscellaneous memory safety hazards - MFSA 2013-42/CVE-2013-1670 bmo853709 Privileged access for content level constructor - MFSA 2013-43/CVE-2013-1671 bmo842255 File input control has access to full...

Apple iOS 8 Randomizes MAC Address while Scanning for WiFi Networks

A quiet change in the privacy setting of its forthcoming iOS 8 smartphone Operating System, Apple could effectively block the path for advertisers, marketers, and other snoopers looking to collect data about you and your location from your Smartphone devices. When your mobile device scan for a fr...

WhiteHat Releases Aviator Browser for Windows

The privacy and anonymity of users’ online communications has been at the forefront of many discussions in the tech community and the general public in the last year as more and more information has leaked out about the NSA’s methods and how the agency collects vast amounts of user data. Keeping...

DuckDuckGo Goodies that every SysAdmin Should Know

DuckDuckGo, a private search engine that doesn't track your data over the internet and respects your online privacy, offers hundreds of Goodies that let you quickly do certain things like Programming, Math, Geek, Music related things. In our previous article, we have posted Cryptography hacks usi...

Cryptography Hacks - Hash Encryption using DuckDuckGo Search Engine

Over the past several months, it has become clear that the Internet and our Privacy have been fundamentally compromised. A Private search engine DuckDuckGo claims that when you click on one of their search results, they do not send personally identifiable information along with your request to th...