393 matches found
Feds Bust Black Market ID Theft Ring
Thirty-eight defendants from across the United States have been charged with participating in a multimillion-dollar black market travel agent ring that used the stolen identities of thousands of victims to purchase airline tickets for customers. Read the full article. Dark Reading...
Government Details Vision of Trusted Identities
The White House has published a draft of a strategy designed to make the concept of trusted identities and authentication more of a reality in the digital world. Read the full article. eWEEK...
DEBIAN-CVE-2010-0385
Tor before 0.2.1.22, and 0.2.2.x before 0.2.2.7-alpha, when functioning as a bridge directory authority, allows remote attackers to obtain sensitive information about bridge identities and bridge descriptors via a dbg-stability.txt directory query...
CVE-2010-0385
Tor before 0.2.1.22, and 0.2.2.x before 0.2.2.7-alpha, when functioning as a bridge directory authority, allows remote attackers to obtain sensitive information about bridge identities and bridge descriptors via a dbg-stability.txt directory query...
Directory traversal
Tor before 0.2.1.22, and 0.2.2.x before 0.2.2.7-alpha, when functioning as a bridge directory authority, allows remote attackers to obtain sensitive information about bridge identities and bridge descriptors via a dbg-stability.txt directory query...
CVE-2008-6836
Cross-site request forgery CSRF vulnerability in OpenID 5.x before 5x.-1.2, a module for Drupal, allows remote attackers to hijack the authentication of unspecified victims to delete OpenID identities via unknown vectors...
RedHat Update for pam_krb5 RHSA-2008:0907-01
Check for the Version of pamkrb5 OpenVAS Vulnerability Test RedHat Update for pamkrb5 RHSA-2008:0907-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
Multiple Vulnerabilities in uCosminexus Portal Framework
Overview uCosminexus Portal Framework contains multiple vulnerabilities. Impact A remote attacker could perform malicious acts, such as information leaking, identity spoofing and updating data with wrong values. Solution Please refer to the 'Vendor Information' section for the official...
Moderate: Red Hat Security Advisory: pam_krb5 security update
An updated pamkrb5 package that fixes a security issue is now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The pamkrb5 module allows Pluggable Authentication Modules PAM aware applications to use...
CVE-2008-3221
Cross-site request forgery CSRF vulnerability in Drupal 6.x before 6.3 allows remote attackers to perform administrative actions via vectors involving deletion of OpenID identities...
CVE-2008-3221
CVE-2008-3221 is a Drupal CSRF vulnerability affecting Drupal 6.x prior to 6.3, allowing remote attackers to perform administrative actions via deletion of OpenID identities. The issue stems from cross-site request forgery in forms that enables unauthorized admin operations. Connected advisories ...
SocialURL Login Page Cross-Site Scripting
Overview: SocialURL is a social community platform enabling you to organize your online identities. Connnect to all your social network sites with one URL. SocialURL fails to sufficiently sanitize user-supplied input data via login box. Class: Input Validation Error Example:...