Cryptocat offers End-to End Encryption For Facebook Messenger

It’s an era of Mass Surveillance, where Encryption has become more important today for all of us than any other time in the History. But the trouble is that Crypto programs are too hard for Non-Internet-Savvy to implement and use. Time is loudly announcing the need to switch to some alternatives...

Threat Outbreak Alert: Fake Product Purchase Order Request Email Messages on May 13, 2014

Severity Alert ID: 34206 First Published: 2014 May 13 13:52 GMT Version: 1 Threat Outbreak Threat Outbreak Summary Cisco Security has detected significant activity on May 13, 2014. Revision History Initial ReleaseShow Less Legal Disclaimer THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NO...

FreeBSD : libxml2 -- lack of end-of-document check DoS (e7bb3885-da40-11e3-9ecb-2c4138874f7d)

CVE MITRE reports : parser.c in libxml2 before 2.9.0, as used in Google Chrome before 28.0.1500.71 and other products, allows remote attackers to cause a denial of service out-of-bounds read via a document that ends abruptly, related to the lack of certain checks for the XMLPARSEREOF state...

Coalition Calls For Net Reset in June

A new alliance composed of privacy and digital rights advocates are encouraging internet users to block mass surveillance and fight back against the National Security Agency on June 5. The coalition, dubbed Reset the Net is hoping to carry out its goal through the further implementation of SSL,...

Sendy 1.1.9.1 - SQL Injection Vulnerability

Sendy contains a flaw that may allow carrying out an SQL injection attack. The issue is due to the /send-to script not properly sanitizing user-supplied input to the "c" parameter. This may allow a remote attacker to inject or manipulate SQL queries in the back-end database, allowing for the...

Fedora Update for python-django-horizon FEDORA-2014-5002

Check for the Version of python-django-horizon OpenVAS Vulnerability Test Fedora Update for python-django-horizon FEDORA-2014-5002 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

Jira outputs a stack trace to the screen when an error is encountered

panel h3. Problem When users are greeted by the error 500 page, they can click on the Request assistance link to expand and see the long stack trace of the error that occurs. The information is not useful to most of the end users but it's not possible to hide it from them. h3. Suggestion To have ...

Microsoft Windows 98 Operating System

Windows 98 is an older version of Microsoft Windows. Microsoft has ended the support for Windows 98 operating system on July 11th 2006. There are cases in which certain traffic, although not intended for malicious use, is very unsafe, since it may transfer shellcode which is undetectable by IPS...

Microsoft Windows 3.11 Operating System

Windows 3.11 is an older version of Microsoft Windows. Microsoft ended the support for Windows 3.11 operating system on December 2001. There are cases in which certain traffic, although not intended for malicious use, is very unsafe, since it may transfer shellcode which is undetectable by IPS...

Microsoft Windows 2000 Operating System

Windows 2000 is an older version of Microsoft Windows. Microsoft has ended the support for Windows 2000 operating system on July 13th 2010. There are cases in which certain traffic, although not intended for malicious use, is very unsafe, since it may transfer shellcode which is undetectable by I...

Microsoft Windows NT 4.0 Operating System

Windows NT 4.0 is an older version of Microsoft Windows. Microsoft ended the support for Windows NT 4.0 operating system on 2004. There are cases in which certain traffic, although not intended for malicious use, is very unsafe, since it may transfer shellcode which is undetectable by IPS...

Microsoft Windows ME Operating System

Windows ME is an older version of Microsoft Windows. Microsoft ended the support for Windows ME operating system on July 2006...

DSA-2907-1 squeeze end-of-life

This is an advance notice that regular security support for Debian GNU/Linux 6.0 code name squeeze will be terminated on the 31st of May. However, we're happy to announce that security support for squeeze is going to be extended until February 2016, i.e. five years after the initial release. This...

Unpatched Bugs, Windows XP End of Life and Public Disclosure

Windows XP security support ends Tuesday and until now, most of the public hand-wringing over XP’s end-of-life has been about the potential for malware outbreaks against unpatched vulnerabilities that have been stockpiled by hackers anxiously awaiting April 8, 2014. But what about vulnerabilities...

Windows XP End of Life Breeding FUD, Legit Concerns

For those of you anticipating the start of a Walking Dead-style malware apocalypse next Tuesday, calm yourselves. The official end of security support for Windows XP is upon us, but it’s important to check some anxiety at the door and keep some perspective. “I’ve been a forensics investigator 14...

CVE-2014-1896

The 1 dosend and 2 dorecv functions in io.c in libvchan in Xen 4.2.x, 4.3.x, and 4.4-RC series allows local guests to cause a denial of service or possibly gain privileges via crafted xenstore ring indexes, which triggers a "read or write past the end of the ring."...

CVE-2013-2643

Multiple cross-site scripting XSS vulnerabilities in Sophos Web Appliance before 3.7.8.2 allow remote attackers to inject arbitrary web script or HTML via the 1 xss parameter in an allow action to rss.php, 2 msg parameter to end-user/errdoc.php, 3 h parameter to end-user/ftpredirect.php, or 4...

CVE-2014-1710

The CVE-2014-1710 issue affects Google Chrome and Chrome OS before 33.0.1750.152. It concerns AsyncPixelTransfersCompletedQuery::End in gpu/command_buffer/service/query_manager.cc, where a bounds check for a position within a shared-memory segment is missing. This can allow remote attackers to ca...

Twitter enables StartTLS for Secure Emails to prevent Snooping

TWITTER is taking users' privacy and security very seriously and in an effort to prevent Government snooping, the company has secured your Twitter emails with with TLS Transport Layer Security. Twitter emails were previously using a plain text communication protocol, that now has been upgraded to...

Threat Outbreak Alert: Fake Voicemail Message Notification Email Messages on March 12, 2014

Medium Alert ID: 33312 First Published: 2014 March 12 19:25 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a voicemail message notification for the recipient. The text in the email message attempts to convince the...