CVE-2016-1772

The Top Sites feature in Apple Safari before 9.1 mishandles cookie storage, which makes it easier for remote web servers to track users via unspecified vectors...

CVE-2016-1772

CVE-2016-1772 relates to the Apple Safari Top Sites Cookie storage issue. Affected product: Safari (Top Sites feature) prior to version 9.1. Root cause: mishandling of cookie storage in Top Sites, enabling a website to track users via unspecified vectors. Impact: tracking of user information by r...

CVE-2016-1772

The Top Sites feature in Apple Safari before 9.1 mishandles cookie storage, which makes it easier for remote web servers to track users via unspecified vectors...

Apple Safari Safari Top Sites Information Disclosure Vulnerability

Apple Safari is a web browser developed by Apple Inc. and is the default browser that comes with Mac OS X and iOS operating systems.Safari Top Sites is one of the components that automatically tracks web pages viewed and places them in the home page view based on frequency of use. A security...

Typosquatters Target Mac Users With New .OM Domain Scam

Typosquatters are targeting Apple computer users with malware in a recent campaign that snares clumsy web surfers who mistakenly type .om instead of .com when surfing the web. According to Endgame security researchers, the top level domain for Middle Eastern country Oman .om is being exploited by...

How to understand stack and heap overflow exploits-a vulnerability warning-the black bar safety net

This article is a detailed description of the heap,and will teach you how to write a heap-based overflow vulnerability. Run the following program: include include include int mainint argc, char argv char buf1 = malloc1 2 8; char buf2 = malloc2 5 6; read's filenostdin, buf1, 2 0 0; freebuf2;...

Fedora 21 : lxc-1.0.7-4.fc21 (2015-ebfe46536f)

lxc-1.0.7-4.fc21 - Add some patches: - Allow building on EPEL6. - Fix boot-order similar to rhbz1263612. - Prevent lxc-top crash rhbz1152384 . - Set lxc.kmsg = 0 in the config rhbz1204389 . - Use 'overlay' as fs name when needed rhbz1217516 . - Add dependency on rsync rhbz1177981 . Note that...

天融信Top-App应用网关 change_lan.php 命令执行

public function set$package,$config,$option,$value $cmd = UCICMD." set ".$package.".".$config.".".$option."='".$value."'"; exec$cmd; http://61.148.24.182:8080/changelan.php...

天融信Top App 网关应用bytecache_run_action.php 命令执行

bytecacherunaction.php: code 区域 15 $ipFilterArray$m=dechex$ipFilterArray$m; else $ipFilterArray$m="0".dechex$ipFilterArray$m; $ipFilterNum =$ipFilterArray0.$ipFilterArray1.$ipFilterArray2.$ipFilterArray3; UciUtil::setValue'appex', 'sys', 'BCDebugEngineId',$engine; UciUtil::setValue'appex', 'sys',...

天融信 Top-App 应用网关 enable_tool_debug.php 命令执行漏洞

No description provided by source...

openSUSE Security Update : docker (openSUSE-2015-792)

Docker was updated to version 1.9.0, bringing features and bugfixes bnc954812 : - Runtime : - docker stats now returns block IO metrics 15005 - docker stats now details network stats per interface 15786 - Add ancestor= filter to docker ps --filter flag to filter containers based on their ancestor...

Qolsys IQ Panel contains multiple vulnerabilities

Overview All firmware versions of Qolsys IQ Panel contain hard-coded cryptographic keys, do not validate signatures during software updates, and use a vulnerable version of Android OS. Description Qolsys IQ Panel is an Android OS-based touch screen controller for home automation devices and...

无需登录sql注入泛微集团分权管理（e-cology）（某世界500强企业&demo复现）

简要描述： 危害较大，还请官方及时修复并更新到各个用户。 详细说明： 1.先以其众多大客户中的世界500强企业“绿地集团”作为通用性演示： http://.../login/Login.jsp?logintype=1 注入点就在登陆框，注入参数是:loginid 下面是详情： GET...

CVE-2015-5885

The CFNetwork Cookies component in Apple iOS before 9 allows remote attackers to track users via vectors involving a cookie for a top-level domain...

CVE-2015-5885

The CFNetwork Cookies component in Apple iOS before 9 allows remote attackers to track users via vectors involving a cookie for a top-level domain...

WhatsApp, Viber and Skype Internet Calls may No Longer be FREE in India

We all are aware of Net Neutrality and the recent controversies over it in India. Net Neutrality is simply the Internet Freedom — Free, Fast and Open Internet for all. India has been battling for Net Neutrality since zero-rating services such as Facebook’s Internet.org and Airtel Zero were...

Just-Metadata - Tool that Gathers and Analyzes Metadata about IP Addresses

Just-Metadata is a tool that can be used to gather intelligence information passively about a large number of IP addresses, and attempt to extrapolate relationships that might not otherwise be seen. Just-Metadata has "gather" modules which are used to gather metadata about IPs loaded into the...

CellPipe 7130 Cross Site Request Forgery

CellPipe Router CSRF vulnerability Device model : CellPipe 7130 RG 5Ae. M2013 HOL Software Version: : 1.0.0.20h.HOL CWE: 352 - https://cwe.mitre.org/data/definitions/352.html CVE: CVE-2015-4586 Date: 16/06/2015 Discovered by: Dionisia Lerataki https://gr.linkedin.com/pub/dionisia-lerataki/88/18/8...

DreamBox DM500s Cross Site Scripting

DreamBox DM500s Reflected XSS Vendor: Dream Multimedia GmbH Product web page: http://www.dream-multimedia-tv.de Summary: The Dreambox DM500s is a Linux-powered DVB satellite, terrestrial and cable digital television receivers set-top box. Tested on: Linux Kernel 2.6.9, The Gemini Project, Enigma...

CVE-2015-2999

Multiple SQL injection vulnerabilities in SysAid Help Desk before 15.2 allow remote administrators to execute arbitrary SQL commands via the 1 groupFilter parameter in an AssetDetails report to /genericreport, customSQL parameter in a 2 TopAdministratorsByAverageTimer report or an 3 ActiveRequest...