5791 matches found
XSLeaks attack analysis-HTTP caching and cross-site leakage-vulnerability warning-the black bar safety net
0x1 XSSearch past lives This attack is the earliest can be dated back to 10 years agoi.e. 2009, one named Chris Evans, security personnel describes one of the Yahoo attack: Chris use a malicious web site to search for the site visitor's e-mail Inbox, and he by constructing different keywords mann...
CVE-2018-4445
"Clear History and Website Data" did not clear the history. The issue was addressed with improved data deletion. This issue affected versions prior to iOS 12.1.1, Safari 12.0.2...
CVE-2018-4445
"Clear History and Website Data" did not clear the history. The issue was addressed with improved data deletion. This issue affected versions prior to iOS 12.1.1, Safari 12.0.2...
CVE-2018-4329
Clearing a history item may not clear visits with redirect chains. The issue was addressed with improved data deletion. This issue affected versions prior to iOS 12, Safari 12...
CVE-2018-4329
Clearing a history item may not clear visits with redirect chains. The issue was addressed with improved data deletion. This issue affected versions prior to iOS 12, Safari 12...
CVE-2018-4445
CVE-2018-4445 concerns the Apple Safari/WebKit issue where selecting "Clear History and Website Data" did not clear history. Affects iOS prior to 12.1.1 and Safari before 12.0.2; fixed by Apple in iOS 12.1.1/Safari 12.0.2 with enhanced data deletion. Mitigation is upgrading to the patched version...
CVE-2018-4445
"Clear History and Website Data" did not clear the history. The issue was addressed with improved data deletion. This issue affected versions prior to iOS 12.1.1, Safari 12.0.2...
CVE-2018-4329
CVE-2018-4329 concerns Safari history deletion on iOS/macOS: clearing a history item may fail to clear visits with redirect chains. The Red Hat and Apple documentation confirm the root cause was an incomplete data deletion, addressed in Safari/iOS 12 with an improved deletion mechanism. Affected ...
Friday Squid Blogging: Restoring the Giant Squid at the Museum of Natural History
It is traveling to Paris. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Read my blog posting guidelines here...
What Hacker History Can Tell Enterprises About Future Attack Strategy
There's an oft-quoted saying: "History repeats itself." For those that believe in the cyclical patterns that sometimes emerge over time, this aphorism definitely rings true. Today, we'll be applying this type of thinking to the cybercrime realm. Over the course of hacker history, numerous trends...
CVE-2019-9194
creationtimestamp| type| source ---|---|--- 2019-03-04 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46481 2019-03-11 20:19:00+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/elfinderphpconnectorexiftrancmdinjection.rb 2019-03-...
How to Stop Facebook App From Tracking Your Location In the Background
Every app installed on your smartphone with permission to access location service "can" continually collect your real-time location secretly, even in the background when you do not use them. Do you know? — Installing the Facebook app on your Android and iOS smartphones automatically gives the...
How to Stop Facebook App From Tracking Your Location In the Background
Every app installed on your smartphone with permission to access location service "can" continually collect your real-time location secretly, even in the background when you do not use them. Do you know? — Installing the Facebook app on your Android and iOS smartphones automatically gives the...
Default credentials
data/interfaces/default/history.html in Tautulli 2.1.26 has XSS via a crafted Plex username that is mishandled when constructing the History page...
CVE-2019-8939
data/interfaces/default/history.html in Tautulli 2.1.26 has XSS via a crafted Plex username that is mishandled when constructing the History page...
CVE-2019-8939
data/interfaces/default/history.html in Tautulli 2.1.26 has XSS via a crafted Plex username that is mishandled when constructing the History page...
PYSEC-2019-255
data/interfaces/default/history.html in Tautulli 2.1.26 has XSS via a crafted Plex username that is mishandled when constructing the History page...
PYSEC-2019-255
data/interfaces/default/history.html in Tautulli 2.1.26 has XSS via a crafted Plex username that is mishandled when constructing the History page...
CVE-2019-8939
data/interfaces/default/history.html in Tautulli 2.1.26 has XSS via a crafted Plex username that is mishandled when constructing the History page...
[SECURITY] Fedora 28 Update: subversion-1.11.1-1.fc28
Subversion is a concurrent version control system which enables one or more users to collaborate in developing and maintaining a hierarchy of files and directories while keeping a history of all changes. Subversion only stores the differences between versions, instead of every complete file...