CVE-2015-1111

Safari in Apple iOS before 8.3 does not delete Recently Closed Tabs data in response to a history-clearing action, which allows attackers to obtain sensitive information by reading a history file...

Design/Logic Flaw

Safari in Apple iOS before 8.3 does not delete Recently Closed Tabs data in response to a history-clearing action, which allows attackers to obtain sensitive information by reading a history file...

Design/Logic Flaw

The private-browsing implementation in WebKit in Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5 places browsing history into an index, which might allow local users to obtain sensitive information by reading index entries...

CVE-2015-1090

CFNetwork in Apple iOS before 8.3 does not delete HTTP Strict Transport Security HSTS state information in response to a Safari history-clearing action, which allows attackers to obtain sensitive information by reading a history file...

CVE-2015-1128

The CVE-2015-1128 entry describes a vulnerability in Apple Safari’s private-browsing mode where push-notification requests can reveal a user’s browsing history. Affected products are Safari versions prior to 6.2.5, 7.x prior to 7.1.5, and 8.x prior to 8.0.5. Root cause: a flaw in how private brow...

CVE-2015-1111

Safari in Apple iOS before 8.3 does not delete Recently Closed Tabs data in response to a history-clearing action, which allows attackers to obtain sensitive information by reading a history file...

CVE-2015-1128

The private-browsing implementation in Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5 allows attackers to obtain sensitive browsing-history information via vectors involving push-notification requests...

CVE-2015-1111

CVE-2015-1111 affects Safari on iOS prior to 8.3. The issue: clearing history does not delete data from the Recently Closed Tabs/history file, allowing an attacker to read sensitive information. Root cause: history data not fully purged during history-clearing actions. Impact: potential informati...

CVE-2015-1127

The private-browsing implementation in WebKit in Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5 places browsing history into an index, which might allow local users to obtain sensitive information by reading index entries...

Apple Safari Private Mode User Browsing History Indexing Vulnerability

Apple Safari is a popular WEB browser. A stateful management vulnerability in Apple Safari allows attackers to exploit the vulnerability to build malicious web pages, trick users into parsing them, and fail to properly index the user's browsing history in private mode, leading to the disclosure o...

Apple Safari Private Mode User Browsing History Leakage Vulnerability

Apple Safari is a popular WEB browser. A security vulnerability exists in Apple Safari, which can be exploited to disclose a user's browser history when responding to a push notification request in private browser mode. A remote attacker can exploit the vulnerability to obtain sensitive informati...

UBUNTU-CVE-2015-1127

The private-browsing implementation in WebKit in Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5 places browsing history into an index, which might allow local users to obtain sensitive information by reading index entries...

Apple iOS Browsing History Cannot Be Deleted Vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. Apple iOS clear safari history fails to properly clear the saved HTTP Strict Transport Security status, which can be exploited by remote attackers to obtain sensitive information...

Apple iOS Safari History Disclosure Vulnerability (CNVD-2015-02332)

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A state management vulnerability exists in Apple iOS Safari's handling of user browser clearing, which could result in the history not being cleared correctly. A remote attacker can exploit the...

Apple iOS Safari History Disclosure Vulnerability (CNVD-2015-02331)

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. Apple iOS Safari fails to properly clear recently closed tabs when clearing history, allowing attackers to exploit the vulnerability to obtain sensitive information...

APPLE-SA-2015-04-08-1 Safari 8.0.5, Safari 7.1.5, and Safari 6.2.5

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2015-04-08-1 Safari 8.0.5, Safari 7.1.5, and Safari 6.2.5 Safari 8.0.5, Safari 7.1.5, and Safari 6.2.5 are now available and address the following: Safari Available for: OS X Mountain Lion v10.8.5, OS X Mavericks v10.9.5, and OS X Yosemite...

Threat Outbreak Alert RuleID14395: Email Messages Distributing Malicious Software on March 31, 2015

Medium Alert ID: 38140 First Published: 2015 March 31 19:00 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID14395 may contain the following files: Name | Si...

Thousands of Hacked Uber Accounts Selling on Dark Web for $1

$US1 may be a very little amount, but it is enough to buy you a stolen Uber account and free car rides around the city. Two separate vendors on AlphaBay, a relatively new Dark Web marketplace launched in late 2014, are selling active Uber accounts with usernames and passwords for $1 each,...

Threat Outbreak Alert RuleID14002: Email Messages Distributing Malicious Software on March 15, 2015

Medium Alert ID: 37867 First Published: 2015 March 16 13:10 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID14002 may contain the following files: Name | Si...

Threat Outbreak Alert RuleID13986: Email Messages Distributing Malicious Software on March 13, 2015

Medium Alert ID: 37857 First Published: 2015 March 13 14:24 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13986 may contain the following files: Name | Si...