Apple TV and iOS Enterprise Signature App Security Bypass Vulnerability

Apple iOS is the latest operating system for Apple's iPhone and iPod touch devices. Apple TV is Apple's way of allowing photos, videos and music from PCs and iPods to be transmitted wirelessly to a TV in high definition. A security vulnerability exists in the Apple TV and iOS Enterprise Signature...

UBUNTU-CVE-2014-1584

The Public Key Pinning PKP implementation in Mozilla Firefox before 33.0 skips pinning checks upon an unspecified issuer-verification error, which makes it easier for remote attackers to bypass an intended pinning configuration and spoof a web site via a crafted certificate that leads to...

Mozilla Adding Granular App Permissions to Firefox OS

Mozilla is set to add a feature to its mobile Firefox OS that will give users the ability to revoke any application’s permissions on a granular basis. Firefox OS is the open source operating system that Mozilla built for smartphones. The software runs on a variety of devices from manufacturers su...

UI selection timeout missing on download prompts — Mozilla

Security researcher Jordi Chancel reported that the dialog for saving downloaded files did not implement a security timeout before button selections were processed. This could be used in concert with spoofing to convince users to select a different option than intended, causing downloaded files t...

Security changes and features of Opera 18

News Security changes and features of Opera 18 Share December 4th, 2013 Opera 18 is now out on the stable channel, so we wanted to take a moment to go through some of the new features from a security perspective. Media Access One of the new features is media access. That is; camera and microphone...

ShoreTel ShoreWare Director Remote Security Bypass Vulnerability

ShoreWare Director is prone to a remote security bypass vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Java Code-Signing, Security Prompts Fail with Developers

Why would a software company require developers to sign code, thereby ensuring a modicum of trust—but not security—and then shatter that trust by allowing signed applets to bypass their own application sandbox? Welcome to the world of Oracle and Java, where a once healthy programming language has...

[SECURITY] Fedora 18 Update: gksu-polkit-0.0.3-8.gitf8ce834c.fc18

This is a library and application used to ask the user for passwords to run programs as root...

[Hidden CMD Detector] Discover Hidden Command prompts

Hidden CMD Detector is the free tool to discover Hidden Command prompts and detect any Hacker presence on your system. The first thing any Hacker does on getting access to remote system is to run a hidden Command shell. This tool can help you to automatically detect any such hidden cmd prompts an...

Java 7u21 Released with Code-Signing Restrictions, Warnings

The latest Java update released Tuesday includes new prompts warning users of potentially malicious applets, in addition to patches for 42 vulnerabilities, all but three of which are remotely exploitable. Java 7 update 21 is part of Oracle’s scheduled Critical Patch Updates for the program and...

Oracle Java Security Slider Feature Bypass (CVE-2013-1489)

A security feature bypass vulnerability has been reported in Oracle Java JRE. The vulnerability occurs when a serialized class is loaded via the applet tag object attribute. A remote attacker can exploit this vulnerability to bypass warning prompts by enticing user to open a Java applet embedded ...

Google Chrome < 13.0.782.107 Multiple Vulnerabilities

Binary data 800963.prm...

IE9 Adds Application Reputation Filter

The latest version of Microsoft’s Internet Explorer promises to make it harder for malicious hackers to push dodgy Web applications onto end user systems, with a new Application Reputation filter. In their latest post, the Internet Explorer Weblog, the company details the ways in which IE 9 and i...

pam_krb5: Password prompt varies for existent and non-existent users

pamkrb5 2.2.14 through 2.3.4, as used in Red Hat Enterprise Linux RHEL 5, generates different password prompts depending on whether the user account exists, which allows remote attackers to enumerate valid usernames...

Mandriva Update for pam_krb5 MDVSA-2010:054 (pam_krb5)

Check for the Version of pamkrb5 OpenVAS Vulnerability Test Mandriva Update for pamkrb5 MDVSA-2010:054 pamkrb5 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Mozilla Ships Security Goodies in Firefox 3.6 Update

Mozilla has released the latest iteration of its flagship Firefox browser with a few significant security goodies to keep malicious hacker at bay. The update, which is being shipped via the browser’s automatic update mechanism, includes new features to patch third-party Firefox plug-ins and lock...

CVE-2009-1384

pamkrb5 2.2.14 through 2.3.4, as used in Red Hat Enterprise Linux RHEL 5, generates different password prompts depending on whether the user account exists, which allows remote attackers to enumerate valid usernames...

CVE-2009-1384

CVE-2009-1384 affects pam_krb5 2.2.14–2.3.4 used in RHEL5; the PAM module prompts differ depending on whether a user exists, enabling remote username enumeration. Connected advisories confirm affected packages (pam_krb5) and reference the same CVE; remediation reported includes updating pam_krb5 ...

CVE-2008-6507

Unspecified vulnerability in phpBB before 3.0.4 allows attackers to obtain sensitive information via unknown vectors related to the lack of password prompts for a private message that quotes a post in a password-protected forum...

Default credentials

Unspecified vulnerability in phpBB before 3.0.4 allows attackers to obtain sensitive information via unknown vectors related to the lack of password prompts for a private message that quotes a post in a password-protected forum...