FreeBSD : raptor/raptor2 -- XXE in RDF/XML File Interpretation (60f81af3-7690-11e1-9423-00235a5f2c9a)

Timothy D. Morgan reports : In December 2011, VSR identified a vulnerability in multiple open source office products including OpenOffice, LibreOffice, KOffice, and AbiWord due to unsafe interpretation of XML files with custom entity declarations. Deeper analysis revealed that the vulnerability w...

raptor/raptor2 -- XXE in RDF/XML File Interpretation

Timothy D. Morgan reports: In December 2011, VSR identified a vulnerability in multiple open source office products including OpenOffice, LibreOffice, KOffice, and AbiWord due to unsafe interpretation of XML files with custom entity declarations. Deeper analysis revealed that the vulnerability wa...

Google Launches New Privacy Policy to Worldwide Criticism

Search giant Google rolled out a sweeping new privacy policy on Thursday, despite continuing opposition from countries in Europe and Asia to the changes. The company announced a sweeping revision to dozens of overlapping privacy plans in January and set March 1st as the date on which the new,...

Removing CarrierIQ Is A Really Bad Idea For Most Mobile Phone Users

The controversy over stealthy monitoring software by CarrierIQ has raised important questions about user privacy and business ethics in the Brave New World of smart phones, tablets and the like. In the uproar over CarrierIQ’s surreptitious monitoring of mobile phone users, various tools have...

Security Research : Be friend to anyone on Facebook in 24 hours

Security Research : Be friend to anyone on Facebook in 24 hours "People have simply ignored the threat posed by adding a profile without checking if this profile is true. New Technologies have loopholes, but it is up to the users to be aware of this type of flaw. Social networks can be fantastic,...

Do not show registered users in quick search to anonymous users

panel:bgColor=e7f4fa NOTE: This suggestion is for Confluence Server. Using Confluence Cloud? See the corresponding suggestion|http://jira.atlassian.com/browse/CONFCLOUD-23985. panel Registered users appears in quick search, even when it's a search made by anonymous...

iPad 2 Smart Cover Trick Can Crack Locked Device

A hole in the locking feature of iPad 2 could allow anyone to access to data and applications on a locked device, according to a recent report from 9to5mac.com. The bypass involves an intricate sequence of steps using the iPad 2’s Smart Cover, an accessory that magnetically folds over the tablet,...

Google Enable SSL-based searches, Will impact Google Analytic !

Google Enable SSL-based searches, Will impact Google Analytic ! According to a blog post by Google, the company is taking steps towards making search more secure for its users. Users will be redirected to https:// instead of https:// when going to do a Google search. By forcing SSL on...

HTC Working on a Fix for Data Leak Problem

Officials at mobile handset maker HTC said they are working on a patch to fix a problem with many of its Android devices that enables any app with Internet permissions to access a large cache of user and device data that a proprietary tool called HTCLoggers collects. The company said on Monday th...

Class Action Lawsuit Accuses Microsoft of Illegal Geotagging

UPDATE: A class action lawsuit filed in U.S. District Court in Seattle, Washington, accuses Microsoft Corp. of collecting geolocation information from photos taken with phones running its Windows Phone 7 operating system, even without the user’s consent. The suit, filed by one Rebecca Cousineau, ...

Slideshow: Ten Tips For Securing Your Google+ Account

Google’s new social network is growing fast, with more than 10 million users in its first week of operation. That’s not too bad for an invite-only Closed Beta release! The new social network is also a hit with users, unlike previous efforts like Orkut and Buzz. As with any social network, however...

Apple, Google to Testify at Smart Phone Tracking Hearing

After a bruising series of revelations about location tracking features on mobile devices running their operating systems, Apple and Google will send executives to Capitol Hill to talk to the Senate Judiciary Subcommittee on Privacy, Technology and the Law about cell phone privacy. Guy L. “Bud”...

Multiple SSH Initial Connection Requests (CVE-2003-0190; CVE-2006-5229; CVE-2016-6210)

Brute Force Attacks are a significant threat on users privacy. Using Brute Force, remote attackers attempt to gain access to unauthorized areas of a target system, such as FTP accounts, e-mail accounts and databases. By trying to repeatedly log in to an SSH server using different passwords, it is...

Facebook Flops On The Sale Of The User's Address, Telephone Numbers !!

Facebook made a rapid retreat Monday January 17 announcing that it would "temporarily" disable the functionality of a new brand that allows applications to third harvest phone numbers of users and home addresses. The function began with a blog Facebook quiet afternoon Friday, January 14. He said...

Privacy Crackdown Rattles Facebook Developers

Following an embarrassing expose in the Wall Street Journal, Facebook has tightened its controls over the ways in which applications that use the social networking platform can share unique user identity information or UIDs. The company also banned several applications accused of improperly...

Bug Count Just One Problem for Facebook Foe Diaspora

Saying that you want to take on the world’s biggest social network is the kind of thing that puts a big target on your back. At least that’s what the ambitious young crew behind Diaspora, an open source alternative to Facebook, found out this week. The Diaspora team pushed out an early as in...

CVE-2010-1617

user/view.php in Moodle 1.8.x before 1.8.12 and 1.9.x before 1.9.8 does not properly check a role, which allows remote authenticated users to obtain the full names of other users via the course profile page...

Privacy Tool Sidesteps Google's Data Collection

BOSTON — Privacy advocate Moxie Marlinspike used the spotlight of the SOURCE conference here to call attention to Google’s data harvesting practices, warning that the search engine giant can mine information to figure out even what Web surfers are thinking about. During a presentation that...

JVN#39157969 Third-party cookie issue in Opera

Opera contains an issue in which third-party cookies are not handled properly. Please note that this issue only occurs when the user changes the setting for "Accept only cookies from the site I visit" from the default installation of Opera. Impact A remote attacker may be able to trace an user's...

Traidnt UP 2.0 Blind SQL Injection

?php printr' || || | || o,7 || . o7 || q||| o///, : / / . /QQQQQQQQQQQQQQQQQQQ\ q Traidnt UP 2.0 Blind SQL Inj. /QQQ/\QQQ\ /QQQQQ/ \QQQQQQ\ q FILES 3 /QQQQ/ QQQQ\ /QQQQ/ \QQQQ\ q Magic Quotes == OFF! |QQQQ/ By Qabandi \QQQQ| |QQQQ| |QQQQ| |QQQQ| From Kuwait, PEACE... |QQQQ| |QQQQ| |QQQQ| |QQQQ...