Stable Channel Update for Chrome OS

The Stable channel has been updated to 31.0.1650.61 Platform version: 4731.73.0 for all Chrome OS devices except Acer C7, the HP Chromebook 11 and the HP Pavilion Chromebook. This build contains a number of bug fixes, security updates and feature enhancements. Edited 5:06pm 11/21/2013 : The HP...

Hacker 'Pinkie Pie' successfully compromised Chrome on Nexus 4 and Samsung Galaxy S4

A Mysterious Hacker who goes by the "Pinkie Pie" handle is rewarded with $50,000 USD for hacking into the Google Chrome browser for Nexus 4 and Samsung Galaxy S4. At Information Security Conference PacSec 2013 in Tokyo, during the HP's Pwn2Own contest, a zero-day exploit showcased by "Pinkie Pie"...

chromium -- multiple memory corruption issues

Google Chrome Releases reports: 319117 319125 Critical CVE-2013-6632: Multiple memory corruption issues. Credit to Pinkie Pie...

Stable Channel Update

Chrome has been updated to 31.0.1650.57 for Windows, Mac, Linux and Chrome Frame. Security fixes and rewards: Congratulations to Pinkie Pie, for reclaiming his title with another impressive exploit! Ka-po-po-po-pow!!! $50,000 319117 319125 Critical CVE-2013-6632: Multiple memory corruption issues...

Hacker 'Pinkie Pie' successfully compromised Chrome on Nexus 4 and Samsung Galaxy S4

None...

Fedora 20 : tinyproxy-1.8.3-1.fc20 (2013-16165)

Update to upstream 1.83 - switch to using systemd macros in rpm - update to a PIE hardened build - update to use systemd Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and...

CVE-2013-4954

Multiple cross-site scripting XSS vulnerabilities in wp-login.php in the Genetech Solutions Pie-Register plugin before 1.31 for WordPress, when "Allow New Registrations to set their own Password" is enabled, allow remote attackers to inject arbitrary web script or HTML via the 1 pass1 or 2 pass2...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in wp-login.php in the Genetech Solutions Pie-Register plugin before 1.31 for WordPress, when "Allow New Registrations to set their own Password" is enabled, allow remote attackers to inject arbitrary web script or HTML via the 1 pass1 or 2 pass2...

CVE-2013-4954

CVE-2013-4954 concerns the WordPress plugin Pie Register (Genetech Solutions) where the wp-login.php page is vulnerable to multiple parameter XSS (pass1 and pass2) when “Allow New Registrations to set their own Password” is enabled. The issue affects Pie-Register before 1.31; the root cause is im...

CVE-2013-4954

Multiple cross-site scripting XSS vulnerabilities in wp-login.php in the Genetech Solutions Pie-Register plugin before 1.31 for WordPress, when "Allow New Registrations to set their own Password" is enabled, allow remote attackers to inject arbitrary web script or HTML via the 1 pass1 or 2 pass2...

CVE-2013-4954: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in wp-login.php in the Genetech Solutions Pie-Register plugin before 1.31 for WordPress, when "Allow New Registrations to set their own Password" is enabled, allow remote attackers to inject arbitrary web script or HTML via the 1 pass1 or 2 pass2...

WordPress Pie Register Plugin - Multiple Cross Site Scripting Vulnerabilities

Pie Register plugin's "wp-login.php" is prone to multiple cross-site scripting vulnerabilities. These vulnerabilities allow an attacker to use arbitrary script code in the browser of an user in the context of the affected site. In that way an attacker can steal cookie-based authentication...

Fedora 19 : nagios-3.5.0-5.fc19 (2013-10996)

"Build package with PIE flags 965529 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Fedora Security Advisory 2013-10996. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid67296;...

WordPress Plugin Pie Register - 'wp-login.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/61140/info Pie Register plugin for WordPress is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This...

Fedora 18 : nagios-3.5.0-5.fc18 (2013-10950)

"Build package with PIE flags 965529 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Fedora Security Advisory 2013-10950. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid67293;...

WordPress Plugin Pie Register - wp-login.php Multiple Cross-Site Scripting Vulnerabilities

WordPress Plugin Pie Register - wp-login.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/61140/info Pie Register plugin for WordPress is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage these issues to execute arbitrary...

Oracle Linux 5 : wireshark (ELSA-2009-0313)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2009-0313 advisory. 1.0.6-2.0.1.el53 - Add oracle-ocfs2-network.patch 1.0.6-2 - bring back pie - Resolves: 486551 1.0.6-1 - various security flaws fixed - upgrade to 1.0.6...

Fedora 19 : dropbear-0.58-4.fc19 (2013-9209)

Add PIE support. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable Network...

Fedora 19 : nagios-plugins-1.4.16-7.fc19 (2013-8998)

Build package with PIE flags Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

Fedora 18 : gogoc-1.2-24.fc18 (2013-6656)

Fix PIE compilation Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...