Discourse: Users can bookmark other user's messages

If you could guess a personal message post ID, you could bookmark it via a specially formatted URL and see the first 200 chars of the personal message in your bookmarks...

openSUSE Security Update : MozillaFirefox (openSUSE-2016-1490)

This update to MozillaFirefox 50.1.0 fixes the following vulnerabilities : - CVE-2016-9894: Buffer overflow in SkiaGL - CVE-2016-9899: Use-after-free while manipulating DOM events and audio elements - CVE-2016-9895: CSP bypass using marquee tag - CVE-2016-9896: Use-after-free with WebVR -...

Threat Outbreak Alert RuleID26902: Email Messages Distributing Malicious Software on December 19, 2016

Medium Alert ID: 52148 First Published: 2016 December 19 18:33 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID26902 may contain the following files: Name |...

Threat Outbreak Alert RuleID26877: Email Messages Distributing Malicious Software on December 19, 2016

Medium Alert ID: 52147 First Published: 2016 December 19 18:33 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID26877 may contain the following files: Name |...

Threat Outbreak Alert RuleID26830: Email Messages Distributing Malicious Software on December 19, 2016

Medium Alert ID: 52159 First Published: 2016 December 19 16:53 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID26470 may contain the following files: Name |...

Threat Outbreak Alert RuleID26470: Email Messages Distributing Malicious Software on December 19, 2016

Medium Alert ID: 52158 First Published: 2016 December 19 16:53 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID26470 may contain the following files: Name |...

Free Instagram Followers Tip - External URLs, WebView JavaScript enabled, WebView files access vulnerabilities

HackApp vulnerability scanner discovered that application Free Instagram Followers Tip published at the 'play' market has multiple vulnerabilities...

CVE-2016-5189

Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android permitted navigation to blob URLs with non-canonical origins, which allowed a remote attacker to spoof the contents of the Omnibox URL bar via crafted HTML pages...

Design/Logic Flaw

Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android permitted navigation to blob URLs with non-canonical origins, which allowed a remote attacker to spoof the contents of the Omnibox URL bar via crafted HTML pages...

CVE-2016-5189

Removed by vendor...

U.S. Dept Of Defense: Server side information disclosure on a DoD website

A misconfigured Department of Defense webserver improperly disclosed application information. @sulemanmalik03 was able to demonstrate this vulnerability by crafting specially formatted URLs...

Threat Outbreak Alert RuleID26837: Email Messages Distributing Malicious Software on December 16, 2016

Medium Alert ID: 52135 First Published: 2016 December 16 20:59 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID26837 may contain the following files: Name |...

Security update for MozillaFirefox (important)

This update to MozillaFirefox 50.1.0 fixes the following vulnerabilities: - CVE-2016-9894: Buffer overflow in SkiaGL - CVE-2016-9899: Use-after-free while manipulating DOM events and audio elements - CVE-2016-9895: CSP bypass using marquee tag - CVE-2016-9896: Use-after-free with WebVR -...

UTrade CFD Lite - Dynamic Code Loading, External URLs, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application UTrade CFD Lite published at the 'play' market has multiple vulnerabilities...

UTRADE SG Mobile - External URLs, WebView JavaScript enabled, WebView files access vulnerabilities

HackApp vulnerability scanner discovered that application UTRADE SG Mobile published at the 'play' market has multiple vulnerabilities...

Itaú CL - Customized SSL, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Itaú CL published at the 'play' market has multiple vulnerabilities...

macOS : Apple Safari < 10.0.2 Multiple Vulnerabilities

The version of Apple Safari installed on the remote macOS or Mac OS X host is prior to 10.0.2. It is, therefore, affected by multiple vulnerabilities : - Multiple remote code execution vulnerabilities exist in WebKit due to improper validation of user-supplied input and improper handling of objec...

Threat Outbreak Alert RuleID26907: Email Messages Distributing Malicious Software on December 15, 2016

Medium Alert ID: 52120 First Published: 2016 December 15 13:44 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID26907 may contain the following files: Name |...

Threat Outbreak Alert RuleID26905: Email Messages Distributing Malicious Software on December 15, 2016

Medium Alert ID: 52118 First Published: 2016 December 15 13:43 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID26905 may contain the following files: Name |...

Bilet.sakh.com Контроль - External URLs, Native code usage, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Bilet.sakh.com Контроль published at the 'play' market has multiple vulnerabilities...