Session fixation

Cookie.php in Piwik before 1.1 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session...

CVE-2011-0400

Cookie.php in Piwik before 1.1 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session...

TYPO3 - Arbitrary File Retrieval

?php / TYPO3-SA-2010-022.php Exploit Title: TYPO3 Unauthenticated Arbitrary File Retrieval TYPO3-SA-2010-020, TYPO3-SA-2010-022 Date: 29/12/2010 Author: ikki Software Link: http://typo3.org/download/, http://sourceforge.net/projects/typo3/files/ Version: 4.2.15, 4.3.7 or 4.4.4 Tested on: php CVE ...

CVE-2010-4584

Opera before 11.00, when Opera Turbo is used, does not properly present information about problematic X.509 certificates on https web sites, which might make it easier for remote attackers to spoof trusted content via a crafted web site...

Code injection

Opera before 11.00, when Opera Turbo is used, does not properly present information about problematic X.509 certificates on https web sites, which might make it easier for remote attackers to spoof trusted content via a crafted web site...

CVE-2010-4584

Opera before 11.00, when Opera Turbo is used, does not properly present information about problematic X.509 certificates on https web sites, which might make it easier for remote attackers to spoof trusted content via a crafted web site...

CVE-2010-4584

Opera CVE-2010-4584 describes a vulnerability in Opera prior to version 11.00 where, when Opera Turbo is enabled, the browser does not properly present information about problematic X.509 certificates on HTTPS sites, potentially enabling remote attackers to spoof trusted content via a crafted sit...

CVE-2010-4584: Undefined Security Weakness

Opera before 11.00, when Opera Turbo is used, does not properly present information about problematic X.509 certificates on https web sites, which might make it easier for remote attackers to spoof trusted content via a crafted web site...

Opera < 11 Multiple Vulnerabilities

The version of Opera installed on the remote host is earlier than 11.00. Such versions are potentially affected by the following issues : - An error exists such that web page content can be displayed over dialog boxes leading to security warning misrepresentation. 977, CVE-2010-4579 - An error...

MDVA-2010:238 : php

This is a maintenance update that upgrades php to 5.2.15 for CS4/MES5/2009.0. Key enhancements in PHP 5.2.15 include: Fixed bug 47643 arraydiff takes over 3000 times longer than php 5.2.4. Fixed bug 44248 RFC2616 transgression while HTTPS request through proxy with SoapClient object. Additional...

Fedora Update for openconnect FEDORA-2010-18055

Check for the Version of openconnect OpenVAS Vulnerability Test Fedora Update for openconnect FEDORA-2010-18055 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

Web Server Uses Basic Authentication over HTTPS

The remote web server contains web pages that are protected by 'Basic' authentication over HTTPS. While this is not in itself a security flaw, in some organizations, the use of 'Basic' authentication is discouraged as, depending on the underlying implementation, it may be vulnerable to account...

RomPager 4.07 Denial Of Service

Software: "RomPager/4.07 UPnP/1.0" Issue: A reboot can be caused when a special crafted http request is sent. Other Details: This version of RomPager is seen on a number of residential routers that are shipped by a number of different ISP's. The router I personal know it effects is the d-link...

Fedora Update for openconnect FEDORA-2010-13034

Check for the Version of openconnect OpenVAS Vulnerability Test Fedora Update for openconnect FEDORA-2010-13034 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

HTTPS Everywhere : Another Tool to Protect from Firesheep !

HTTPS Everywhere is a Firefox extension produced as a collaboration between The Tor Project and the Electronic Frontier Foundation. It encrypts your communications with a number of major websites. The EFF launched a new version of HTTPS Everywhere, a security tool that offers enhanced protection...

4) "S" stands for Safe(r)

Browsing a Web site for offers is one thing. Actually buying merchandise is another matter entirely. Online transactions should be carried out securely, using encryption to scramble the sensitive financial data you’re sending to the merchant’s Web site and that they’re sending to you. Before...

[SECURITY] Fedora 14 Update: openconnect-2.26-4.fc14

This package provides a client for Cisco's "AnyConnect" VPN, which uses HTTPS and DTLS protocols...

[SECURITY] Fedora 13 Update: openconnect-2.26-2.fc13

This package provides a client for Cisco's "AnyConnect" VPN, which uses HTTPS and DTLS protocols...

[SECURITY] Fedora 12 Update: openconnect-2.26-1.fc12

This package provides a client for Cisco's "AnyConnect" VPN, which uses HTTPS and DTLS protocols...

Fiddler v2.3.1.0 ( Web Debugging Proxy tool ) - Latest Version Download

"Fiddler is a Web Debugging Proxy which logs all HTTPS traffic between your computer and the Internet. Fiddler allows you to inspect all HTTPS traffic, set breakpoints, and "fiddle" with incoming or outgoing data. Fiddler includes a powerful event-based scripting subsystem, and can be extended...