NSA: Steve Jobs is the real Big Brother and iPhone buyers are zombies

As we reported yesterday that, your Smartphone is a goldmine for the US National Security Agency NSA, they have the full access to your Data available on your Smartphones including Android, iPhone and Blackberry. But among other Smartphones, iPhone apparently is the most popular with the National...

Infoideias Cross Site Scripting / SQL Injection

Exploit Title : Infoideias Multiple Vulnerabilites Exploit Author : Ashiyane Digital Security Team Software Link : http://www.infoideias.com.br Tested on: Windows 7 , Linux Google Dork : intext:"Powered by Infoideias" Date: 2013/09/10...

Interalp Touristik SQL Injection

Exploit Title : Interalp Touristik Sql injection Vulnerabilites Exploit Author : Ashiyane Digital Security Team Software Link : http://interalp-touristik.com Tested on: Windows 7 , Linux Google Dork : intext:"powered by Interalp Touristik" Date: 2013/09/10...

CyberBizia Cross Site Scripting / SQL Injection

Exploit Title : CyberBizia Multiple Vulnerabilites Software link : http://www.cyberbizia.com Exploit Author : Ashiyane Digital Security Team Tested on: Windows 7 , Linux Google Dork : intext:"Powered by CyberBizia" Date: 2013/08/30...

HTC Sync Manager - Multiple DLL Loading Arbitrary Code Execution Vulnerabilities

HTC Sync Manager - Multiple DLL Loading Arbitrary Code Execution Vulnerabilities source: https://www.securityfocus.com/bid/61745/info HTC Sync Manager is prone to multiple arbitrary code-execution vulnerabilities. An attacker can exploit these issues by enticing a legitimate user to use the...

Mozilla: Document URI misrepresentation and masquerading (MFSA 2013-68)

Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 do not properly handle the interaction between FRAME elements and history, which allows remote attackers to conduct cross-site scripting XSS attack...

Chinese Hackers Caught by US water control system Honeypots

A notorious Chinese hacker collective known as APT1 or Comment Crew, possibly linked to the Chinese Army, have been caught red handed breaking into a fake United States water control system i.e. known as a Honeypot. Kyle Wilhoit, a researcher with security company Trend Micro has just revealed th...

INSTEON Hub 2242-222 - Lack of Web and API Authentication

Exploit for hardware platform in category web applications The INSTEON Hub allows users to control their home automation devices from their home, and across the Internet. To allow control of the devices from the Internet requires that a user create a port forward from the Internet to the Hub on...

Fedora 18 : file-roller-3.6.4-1.fc18 (2013-12653)

This update fixes CVE-2013-4668 : The File Roller archive manager for the GNOME desktop suffers from a path traversal vulnerability caused by insufficient path sanitization. A specially crafted archive file can be used to trigger creation of arbitrary files in any location, writable by the user...

Updated python-suds package fixes security vulnerability

An insecure temporary directory use flaw was found in the way python-suds performed initialization of its internal file-based URL cache predictable location was used for directory to store the cached files. A local attacker could use this flaw to conduct symbolic link attacks, possibly leading to...

SuSE 11.3 Security Update : icedtea-web (SAT Patch Number 7981)

This update to IcedTea-Web 1.4 provides the following fixes and enhancements : - Security updates - RH916774: Class-loader incorrectly shared for applets with same relative-path. CVE-2013-1926 - RH884705: fixed gifar vulnerabilit. CVE-2013-1927 - RH840592: Potential read from an uninitialized...

Mozilla Thunderbird ESR Security Bypass Vulnerabilities - Oct 12 (Windows)

The host is installed with Mozilla Thunderbird ESR and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillathunderbirdesrsecbypassvulnoct12win.nasl 6074 2017-05-05 09:03:14Z teissa $ Mozilla Thunderbird ESR Security Bypass Vulnerabilities - Oct 12 Windows Authors: Arun...

Mozilla Firefox ESR Security Bypass Vulnerabilities - Oct 12 (Mac OS X)

The host is installed with Mozilla Firefox ESR and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillafirefoxesrsecbypassvulnoct12macosx.nasl 6086 2017-05-09 09:03:30Z teissa $ Mozilla Firefox ESR Security Bypass Vulnerabilities - Oct 12 Mac OS X Authors: Arun Kallavi...

Mozilla Thunderbird ESR Security Bypass Vulnerabilities - Oct 12 (Mac OS X)

The host is installed with Mozilla Thunderbird ESR and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillathunderbirdesrsecbypassvulnoct12macosx.nasl 6115 2017-05-12 09:03:25Z teissa $ Mozilla Thunderbird ESR Security Bypass Vulnerabilities - Oct 12 Mac OS X Authors:...

Mozilla Thunderbird Security Bypass Vulnerabilities - Oct 12 (Mac OS X)

The host is installed with Mozilla Thunderbird and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillathunderbirdsecbypassvulnoct12macosx.nasl 6086 2017-05-09 09:03:30Z teissa $ Mozilla Thunderbird Security Bypass Vulnerabilities - Oct 12 Mac OS X Authors: Arun Kallavi...

Mozilla Seamonkey Security Bypass Vulnerabilities (Oct 2012) - Mac OS X

Mozilla Seamonkey is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mozilla Firefox ESR Security Bypass Vulnerabilities (Oct 2012) - Windows

Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mozilla Thunderbird Security Bypass Vulnerabilities (Oct 2012) - Mac OS X

Mozilla Thunderbird is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mozilla Thunderbird Security Bypass Vulnerabilities (Oct 2012) - Windows

Mozilla Thunderbird is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 3 / 4 : seamonkey (ELSA-2010-0546)

From Red Hat Security Advisory 2010:0546 : Updated SeaMonkey packages that fix several security issues are now available for Red Hat Enterprise Linux 3 and 4. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base...