Apple iOS WebKit History implements denial of service vulnerability

Apple iOS is the operating system used by Apple for a number of smart devices. WebKit is a set of open-source web browser engines developed by KDE, Apple, Google and other companies, and is currently used by browsers such as Apple Safari and Google Chrome. Versions of iOS prior to 9.3, Safari pri...

Threat Outbreak Alert RuleID21848: Email Messages Distributing Malicious Software on March 29, 2016

Medium Alert ID: 44268 First Published: 2016 March 23 17:05 GMT Last Updated: 2016 March 30 12:56 GMT Version: 5 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID21848 and...

Threat Outbreak Alert RuleID21851: Email Messages Distributing Malicious Software on March 22, 2016

Medium Alert ID: 44256 First Published: 2016 March 23 16:28 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID21851 may contain the following files: Name | Si...

Microsoft Edge browser vulnerability, which allows a hacker to access the browser’s history or retrieve other information

The vulnerability of Microsoft Edge is related to errors in the Referer policy processing. Exploiting this vulnerability can allow a malicious actor to gain access to the browser history or request other information through a specially crafted HTTPS website...

Threat Outbreak Alert RuleID21715: Email Messages Distributing Malicious Software on March 15, 2016

Medium Alert ID: 44126 First Published: 2016 March 15 17:58 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID21715 may contain the following files: Name | Si...

openSUSE Security Update : MozillaFirefox / mozilla-nspr / mozilla-nss (openSUSE-2016-332)

This update for MozillaFirefox, mozilla-nspr, mozilla-nss fixes the following issues : MozillaFirefox was updated to Firefox 45.0 boo969894 - requires NSPR 4.12 / NSS 3.21.1 - Instant browser tab sharing through Hello - Synced Tabs button in button bar - Tabs synced via Firefox Accounts from othe...

DEBIAN-CVE-2016-1967

Mozilla Firefox before 45.0 does not properly restrict the availability of IFRAME Resource Timing API times, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via crafted JavaScript code that leverages history.back and performance.getEntries calls aft...

DEBIAN-CVE-2016-1965

Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 mishandle a navigation sequence that returns to the original page, which allows remote attackers to spoof the address bar via vectors involving the history.back method and the location.protocol property...

Mozilla Firefox and Firefox ESR Address Bar Forgery Vulnerability

Firefox is an open source Web browser ; Firefox ESR is an extended support version of Firefox.Graphite is a set of Python language , written using the Django framework for enterprise-class open source system monitoring tools . A security vulnerability exists in Mozilla Firefox and Firefox ESR,...

Microsoft Edge Information Leakage Vulnerability

Microsoft Edge is a web browser developed by Microsoft USA and is the default browser that comes with the Windows 10 operating system. An information disclosure vulnerability exists in Microsoft Edge that stems from the program's failure to properly handle referencing policies. A remote attacker...

CVE-2016-0125

CVE-2016-0125 pertains to Microsoft Edge by mishandling the Referer policy, causing an information disclosure vulnerability that could expose a user’s request context or browsing history. Affected products include Microsoft Edge (and related IE components) with the root cause described as imprope...

Mozilla: Addressbar spoofing though history navigation and Location protocol property (MFSA 2016-28)

Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 mishandle a navigation sequence that returns to the original page, which allows remote attackers to spoof the address bar via vectors involving the history.back method and the location.protocol property...

FreeBSD : mozilla -- multiple vulnerabilities (2225c5b4-1e5a-44fc-9920-b3201c384a15)

Mozilla Foundation reports : MFSA 2016-16 Miscellaneous memory safety hazards rv:45.0 / rv:38.7 MFSA 2016-17 Local file overwriting and potential privilege escalation through CSP reports MFSA 2016-18 CSP reports fail to strip location information for embedded iframe pages MFSA 2016-19 Linux video...

Threat Outbreak Alert RuleID21485: Email Messages Distributing Malicious Software on March 8, 2016

Medium Alert ID: 43915 First Published: 2016 March 8 15:29 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID21485 and RuleID21485KVR may contain the followin...

Microsoft Internet Explorer CTravelEntry Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The vulnerability relates to how...

mozilla -- multiple vulnerabilities

Mozilla Foundation reports: MFSA 2016-16 Miscellaneous memory safety hazards rv:45.0 / rv:38.7 MFSA 2016-17 Local file overwriting and potential privilege escalation through CSP reports MFSA 2016-18 CSP reports fail to strip location information for embedded iframe pages MFSA 2016-19 Linux video...

Addressbar spoofing though history navigation and Location protocol property — Mozilla

Security researcher Tsubasa Iinuma reported a mechanism where the displayed addressbar can be spoofed to users. This issue involves using history navigation in concert with the Location protocol property. After navigating from a malicious page to another, if the user navigates back to the initial...

The vulnerability of Safari browser and iOS operating system allows a hacker to gain access to the browser history.

The vulnerability of the Safari browser and iOS operating system’s CSS component implementation lies in the lack of protection for application data. Exploiting this vulnerability can allow a malicious actor to gain access to the browser history through a specially crafted web page...

[SECURITY] Fedora 22 Update: monotone-1.1-13.fc22

monotone is a free, distributed version control system. It provides fully disconnected operation, manages complete tree versions, keeps its state in a local transactional database, supports overlapping branches and extensible metadata, exchanges work over plain network protocols, performs...

Threat Outbreak Alert RuleID21359: Email Messages Distributing Malicious Software on February 25, 2016

Medium Alert ID: 43764 First Published: 2016 February 25 16:58 GMT Last Updated: 2016 February 26 13:26 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID2135...