User tracking across sites using Math.random() — Mozilla

Security researcher Amit Klein reported that it was possible to reverse engineer the value used to seed Math.random. Since the pseudo-random number generator was only seeded once per browsing session, this seed value could be used as a unique token to identify and track users across different web...

CVE-2007-4440

creationtimestamp| type| source ---|---|--- 2010-06-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16821 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/smtp/mercurycrammd5.rb 2025-02-06 03:13:38+00:00| seen|...

CVE-2007-2139

creationtimestamp| type| source ---|---|--- 2010-06-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16413 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/brightstor/mediasrvsunrpc.rb 2025-02-06 03:13:38+00:00|...

Atlassian JIRA < 4.1.2 Multiple Vulnerabilities

Binary data 5577.prm...

AT&T iPad Hack May Be Worse Than Initially Thought

Researchers looking into the security of GSM phone networks are suggesting that the recent breach, which saw tens of thousands of e-mail addresses and ICC-IDs inadvertantly disclosed AT&T, could have far more significant implications than a bit of extra spam: attackers can use the information to...

BDSMIS TraX with Payroll - SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail :...

BDSMIS TraX with Payroll - SQL Injection

BDSMIS TraX with Payroll - SQL Injection 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site :...

CVE-2010-1297

creationtimestamp| type| source ---|---|--- 2010-06-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/13787 2010-09-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14853 2010-09-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16614 2010-09-25...

Bugzilla: Multiple vulnerabilities

Background Bugzilla is a bug tracking system from the Mozilla project. Description Multiple vulnerabilities have been reported in Bugzilla. Please review the CVE identifiers referenced below for details. Impact A remote attacker might be able to disclose local files, bug information, passwords, a...

Privacy (Cookie Blocking)

The Privacy tab contains settings for cookies. Cookies are text files placed on your computer by various sites that you visit either directly first-party or indirectly third-party through ad banners, for example. A cookie can contain any data that a site wishes to store. It is often used to track...

CVE-2007-1674

creationtimestamp| type| source ---|---|--- 2010-05-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16457 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/landeskaolnsrvr.rb 2025-02-06 03:13:38+00:00| seen|...

CVE-2004-1211

creationtimestamp| type| source ---|---|--- 2010-05-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16484 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/imap/mercuryrename.rb 2025-02-06 03:13:38+00:00| seen|...

CVE-2007-1435

creationtimestamp| type| source ---|---|--- 2010-05-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16345 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/tftp/dlinklongfilename.rb 2025-02-06 03:13:38+00:00| see...

CVE-2001-0167

creationtimestamp| type| source ---|---|--- 2010-04-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16489 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/vnc/realvncclient.rb 2025-02-06 03:13:37+00:00| seen|...

CVE-2003-0558

creationtimestamp| type| source ---|---|--- 2010-04-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16708 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/ftp/leapftppasvreply.rb 2025-02-06 03:13:37+00:00| seen|...

CVE-2007-0169

creationtimestamp| type| source ---|---|--- 2010-04-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16418 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/brightstor/messageengine.rb 2025-02-06 03:13:38+00:00|...

CVE-2006-2447

creationtimestamp| type| source ---|---|--- 2010-04-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16920 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/misc/spamassassinexec.rb 2025-02-06 03:13:38+00:00| seen|...

Don Bailey and Nick D' on GSM Hacking and Privacy

Dennis Fisher talks with Don Bailey of iSec Partners and Nick D’, an independent security researcher, about their recent work on geolocation and tracking of GSM mobile handsets and the privacy and security implications for users. Podcast audio courtesy of sykboy65 Subscribe to the Digital...

openSUSE Security Update : libopenssl-devel (libopenssl-devel-2232)

This openssl update adds support for RFC5746 TLS renegotiations to address vulnerabilities tracked as CVE-2009-3555. It also fixes a mishandling of OOM conditions in bnwexpand CVE-2009-3245. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugi...

Signing in with username with different case creates new user

We currently utilize LDAP for our user repository and allow users to be automatically added to crucible if they can successfully authenticate. We have recently received complaints from users that their names were showing up two times in reviews. After some analysis we saw that there were 2...