[SECURITY] Fedora 20 Update: mantis-1.2.17-3.fc20

Mantis is a free popular web-based issue tracking system. It is written in the PHP scripting language and works with MySQL, MS SQL, and PostgreSQL databases and a web server. Almost any web browser should be able to function as a client. Documentation can be found in: /usr/share/doc/mantis When t...

CVE-2014-7154

Race condition in HVMOPtrackdirtyvram in Xen 4.0.0 through 4.4.x does not ensure possession of the guarding lock for dirty video RAM tracking, which allows certain local guest domains to cause a denial of service via unspecified vectors...

CVE-2014-7154

Race condition in HVMOPtrackdirtyvram in Xen 4.0.0 through 4.4.x does not ensure possession of the guarding lock for dirty video RAM tracking, which allows certain local guest domains to cause a denial of service via unspecified vectors...

Xsser Trojan Spies on Jailbroken iOS Devices in Hong Kong

An iOS version of an Android espionage Trojan targeting activists and protestors in Hong Kong has been discovered on the command and control server hosting the Android malware. The iOS version, a mobile remote access Trojan dubbed Xsser by Lacoon Mobile Security, affects only jailbroken iOS...

Hyper-V Changed Block Tracking Troubleshooting

Challenge Backup and/or Replication jobs report that changed block tracking is not working properly. Article Applicability This article is only relevant when Veeam Backup & Replication is used with the following Hyper-V versions. In these older versions of Hyper-V there was no native CBT function...

[SECURITY] Fedora 20 Update: kaccessible-4.14.1-1.fc20

Provides accessibility services like focus tracking and a screen reader...

CVE-2013-0928

creationtimestamp| type| source ---|---|--- 2014-09-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34756 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/emc/alphastordevicemanagerexec.rb 2025-02-06...

Debian DSA-3030-1 : mantis - security update

Multiple SQL injection vulnerabilities have been discovered in the Mantis bug tracking system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-3030. The text itself is copyright C Software...

DSA-3030-1 mantis - security update

Bulletin has no description...

Debian Security Advisory DSA 3030-1 (mantis - security update)

Multiple SQL injection vulnerabilities have been discovered in the Mantis bug tracking system. OpenVAS Vulnerability Test $Id: deb3030.nasl 6715 2017-07-13 09:57:40Z teissa $ Auto-generated from advisory DSA 3030-1 using nvtgen 1.0 Script version: 1.0 Author: Greenbone Networks Copyright: Copyrig...

Design/Logic Flaw

WebKit in Apple iOS before 8 makes it easier for remote attackers to track users during private browsing via a crafted web site that reads HTML5 application-cache data that had been stored during normal browsing...

CVE-2014-4409

Affected software: WebKit (Safari on iOS) prior to iOS 8. Vulnerability: A malicious website can track users during private browsing by reading HTML5 application-cache data stored during normal browsing. Root cause: WebKit could read application-cache data when in private browsing mode. Impact: P...

CVE-2014-4409

WebKit in Apple iOS before 8 makes it easier for remote attackers to track users during private browsing via a crafted web site that reads HTML5 application-cache data that had been stored during normal browsing...

How a Cell Phone User Can be Secretly Tracked Across the Globe

Since we are living in an era of Mass surveillance conducted by Government as well as private sector industries, and with the boom in surveillance technology, we should be much worried about our privacy. According to the companies that create surveillance solutions for law enforcement and...

CVE-2014-6270

Off-by-one error in the snmpHandleUdp function in snmpcore.cc in Squid 2.x and 3.x, when an SNMP port is configured, allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted UDP SNMP request, which triggers a heap-based buffer overflow...

tinfoleak - Get detailed information about a Twitter user activity

tinfoleak is a simple Python script that allow to obtain: basic information about a Twitter user name, picture, location, followers, etc. devices and operating systems used by the Twitter user applications and social networks used by the Twitter user place and geolocation coordinates to generate ...

Java.com, TMZ Serving Malvertising Redirects to Angler Kit

Online ad network AppNexus has again been identified at the core of another malvertising campaign using the Angler Exploit Kit to redirect visitors to sites hosting the Asprox malware. Busy, popular websites including TMZ, Photobucket and Java.com in recent days have been serving malicious...

Online Time Tracking Cross Site Scripting

Affected software: Online Time Tacking - URL: https://paydirtapp.com/ Discovered by: Provensec Website: http://www.provensec.com Type of vulnerability: XSS Stored Description: Paydirt is time tracking and invoicing software made for browser-based freelancers and small businesses. It keeps track o...

Study: Uyghur Remain in Crosshairs of Targeted Attacks

It’s no secret that activists groups supporting the Uyghur and other ethnic minorities living either in exile or in oppressed nations have been in the crosshairs of targeted attacks for years. Regimes use phishing emails, other social engineering tactics, and drive-by downloads to infect computer...

[SECURITY] Fedora 19 Update: bugzilla-4.2.10-1.fc19

Bugzilla is a popular bug tracking system used by multiple open source proj ects It requires a database engine installed - either MySQL, PostgreSQL or Oracl e. Without one of these database engines local or remote, Bugzilla will not work - see the Release Notes for details...