CVE-2014-4888

The CVE-2014-4888 entry concerns the Android app BattleFriends at Sea GOLD (package com.tequilamobile.warshipslivegold) version 1.1.0. The vulnerability is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive ...

Syrian Electronic Army's own website got hacked by Turkish hacker

Oops.. Hackers got Hacked! The Syrian Electronic Army, who has hacked hundreds of High Profile targets in 2013-14, today they got hacked by a Turkish hacker. Turkguvenligi, a Turkish hacker told The Hacker News that he hacked and defaced the official website of the hacking group SEA sea.sy and...

Mozilla: Use-after-free when updating offline cache (MFSA 2013-98)

Use-after-free vulnerability in the nsDocLoader::doStopDocumentLoad function in Mozilla Firefox before 25.0, Firefox ESR 17.x before 17.0.10 and 24.x before 24.1, Thunderbird before 24.1, Thunderbird ESR 17.x before 17.0.10, and SeaMonkey before 2.22 allows remote attackers to execute arbitrary...

Inside the Response to the New York Times Attack

Late Tuesday morning, one of the engineers in CloudFlare’s San Francisco office saw a message on Twitter saying that the New York Times Web site was down. Minutes later, more messages appeared, as security researchers and others began looking into the situation and realized that someone may have...

[SECURITY] Fedora 18 Update: knavalbattle-4.10.5-1.fc18

Naval Battle is a ship sinking game for KDE. Ships are placed on a board which represents the sea. Players try to hit each others ships in turns without knowing where they are placed. The first player to destroy all ships wins the game...

NSA Hacks into 3 major Chinese operators to steal millions of SMS Data

Once again NSA whistleblower Edward Snowden revealed the truth, that the NSA hacks into China’s mobile operators to steal millions of text messages. Every month Washington come up with new reports and accuse other nations, particularly China, for cyber hacking, but the biggest culprit of such cri...

[SECURITY] Fedora 18 Update: knavalbattle-4.10.4-1.fc18

Naval Battle is a ship sinking game for KDE. Ships are placed on a board which represents the sea. Players try to hit each others ships in turns without knowing where they are placed. The first player to destroy all ships wins the game...

[SECURITY] Fedora 19 Update: knavalbattle-4.10.4-1.fc19

Naval Battle is a ship sinking game for KDE. Ships are placed on a board which represents the sea. Players try to hit each others ships in turns without knowing where they are placed. The first player to destroy all ships wins the game...

Financial Times hacked by Syrian Electronic Army

The Financial Times has become the latest news outlet to be hacked by supporters of the Syrian president Bashar al-Assad, following a phishing attack on the company’s email accounts. The posh broadsheet's Tech Blog - at http://blogs.FT.com/beyond-brics was compromised to run stories headlined...

Comment Crew's Operation Beebus Stealing Drone Tech

FireEye experts have been tracking the Operation Beebus campaign for a few months now, and their latest research suggests that whomever is responsible for the attacks is ultimately interested in stealing drone technology-related secrets. Operation Beebus is an APT-style attack campaign targeting...

Mozilla: Use-after-free and buffer overflow issues found using Address Sanitizer (MFSA 2013-02)

The nsSVGPathElement::GetPathLengthScale function in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.1, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.1, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary...

Lenovo Hui shields 5. x password leak-vulnerability warning-the black bar safety net

Lenovo Hui shields Lenovo's hard drive protection system 5. x is the Beijing Sea of light the company cooperation to launch the product in the school room can often be seen. Due to product design flaws, allowing any user in the hard disk protection system to enable state read administrator...

Mozilla: Use-after-free and buffer overflow issues found using Address Sanitizer (MFSA 2012-105)

Heap-based buffer overflow in the nsWindow::OnExposeEvent function in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2011-0067

Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and SeaMonkey before 2.0.14, does not properly implement autocompletion for forms, which allows remote attackers to read form history entries via a Java applet that spoofs interaction with the autocomplete controls...

Mozilla CSRF risk with plugins and 307 redirects (MFSA 2011-10)

Cross-site request forgery CSRF vulnerability in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, and SeaMonkey before 2.0.12, allows remote attackers to hijack the authentication of arbitrary users for requests that were initiated by a plugin and received a 307 redirect to a page on a...

Mozilla Cross-origin data leakage from script filename in error messages

dom/base/nsJSEnvironment.cpp in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 does not properly suppress a script's URL in certain circumstances involving a redirect and an error message, which allows...

Heart of the sea school mental management system Xday-vulnerability warning-the black bar safety net

Heart of the sea school mental management system Vulnerability type: upload vulnerability, the IIS parsing vulnerability Keywords: 1. inurl:zytest/main. asp? id= 2. Psychological inurl:article/print. asp? id= Vulnerability description: due to the IIS6. 0 there is parsing vulnerability, so the...

Killer Whale Trainer Death Exploited by Malware

Supposed footage of Wednesday’s fatal Sea World killer whale attack in Florida actually points at sites distributing scareware. Read the full article. The Register...

Mozilla NTLM reflection vulnerability

Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote attackers to send authenticated requests to arbitrary applications by replaying the NTLM credentials of a browser user...

Mozilla XBM decoder information disclosure

The XBM decoder in Mozilla Firefox before 2.0.0.17 and SeaMonkey before 1.1.12 allows remote attackers to read uninitialized memory, and possibly obtain sensitive information in opportunistic circumstances, via a crafted XBM image file...