Privacy — Handling Cookies

US-CERT recommends that you select the Advanced button and select Override automatic cookie handling. Then select Prompt for both first and third-party cookies. This will prompt you each time a site tries to place a cookie on your machine. If the number of cookie prompts is too excessive, the...

Microsoft Security Bulletin MS10-030 - Critical Vulnerability in Outlook Express and Windows Mail Could Allow Remote Code Execution (978542)

Microsoft Security Bulletin MS10-030 - Critical Vulnerability in Outlook Express and Windows Mail Could Allow Remote Code Execution 978542 Published: May 11, 2010 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in Outlook Express...

CVE-2009-4777

Hitachi JP1 products (Automatic Job Management System 2 - View, JP1/Integrated Management - View, and JP1/Cm2/SNMP System Observer) are affected by a GIF file processing vulnerability. A remote attacker can trigger a denial of service via processing an invalid GIF file, causing an abnormal termin...

Fotos

En la izquierda está el default. Usted quiere apagar Todos. Y cambiar Redes de manera que ninguna de sus redes tenga permiso automático a menos que usted específicamente lo desee, como viejas fotos escolares. Después decida si desea Amigos de Amigos, etc., o para personalizar, seleccione Algunos...

Microsoft Security Bulletin MS10-025 - Critical Vulnerability in Microsoft Windows Media Services Could Allow Remote Code Execution (980858)

Microsoft Security Bulletin MS10-025 - Critical Vulnerability in Microsoft Windows Media Services Could Allow Remote Code Execution 980858 Published: April 13, 2010 | Updated: April 14, 2010 Version: 1.1 General Information Executive Summary This security update resolves a privately reported...

Adobe Releases Quarterly Patches, Enables Auto Updater

Adobe on Tuesday released its quarterly load of patches, including an update for Adobe Reader that fixes several critical vulnerabilities. The company also used the opportunity to enable the new automatic updater in both Reader and Acrobat. The vulnerabilities in Reader could give an attacker the...

Adobe Patches, Auto-Updater Coming on April 13

Adobe today announced plans to ship a critical security patch next Tuesday April 13, 2010 to fix multiple high-risk security holes in its Reader and Acrobat product lines. The patches will be released alongside a new automatic updater software that the company hopes will speed up the downloading...

Do all in cmd shell!- Vulnerability warning-the black bar safety net

Do all in cmd shell! Directory 1, Preface 2, The file transmission 3, The system configuration 4, the network configuration 5, software installation 6, Windows Script 7, The accompanying statement Foreword Cmd Shellcommand line interactionis a hack eternal topic, it is the historic and enduring i...

Mozilla Plugs Firefox Pwn2Own Security Hole

Mozilla is the first browser vendor to fix a vulnerability exploited at this year’s CanSecWest Pwn2Own contest. Just one week after a U.K.-based hacker known as “Nils” broke into a 64-bit Windows 7 machine with a Firefox vulnerability, the open-source group shipped Firefox 3.6.3 to plug the...

Microsoft Security Bulletin MS10-018 - Critical Cumulative Security Update for Internet Explorer (980182)

Microsoft Security Bulletin MS10-018 - Critical Cumulative Security Update for Internet Explorer 980182 Published: March 30, 2010 Version: 1.0 General Information Executive Summary This security update resolves nine privately reported vulnerabilities and one publicly disclosed vulnerability in...

curl: zlib-compression causes curl to pass more than CURL_MAX_WRITE_SIZE bytes to write callback

contentencoding.c in libcurl 7.10.5 through 7.19.7, when zlib is enabled, does not properly restrict the amount of callback data sent to an application that requests automatic decompression, which might allow remote attackers to cause a denial of service application crash or have unspecified othe...

[SECURITY] Fedora 12 Update: fcron-3.0.5-1.fc12

Fcron is a scheduler. It aims at replacing Vixie Cron, so it implements most of its functionalities. But contrary to Vixie Cron, fcron does not need your system to be up 7 days a week, 24 hours a day: it also works well with systems which are not running neither all the time nor regularly contrar...

[SECURITY] Fedora 11 Update: tar-1.22-5.fc11

The GNU tar program saves many files together in one archive and can restore individual files or all of the files from that archive. Tar can also be used to add supplemental files to an archive and to update or list files in the archive. Tar includes multivolume support, automatic archive...

Google Chrome Multiple File Type Security Bypass

Google Chrome is a web browser developed by Google Inc. It provides rich web browsing similar to other web browsers such as Firefox, Opera, and Internet Explorer. Chrome is unique from other browsers because it follows a multi-process architecture: by default, a separate process is allocated to...

Adobe Plugs Critical PDF Code Execution Flaw

Adobe today released an out-of-band security update to patch a pair of gaping holes that expose hundreds of millions of computer users to remote code execution attacks. The vulnerabilities are rated “critical” and affect Adobe Reader and Adobe Acrobat on all platforms — Windows, Mac and Linux. Th...

snmp-netstat NSE Script

Attempts to query SNMP for a netstat like output. The script can be used to identify and automatically add new targets to the scan by supplying the newtargets script argument. Script Arguments max-newtargets, newtargets See the documentation for the target library. creds.service, creds.global See...

Microsoft Security Bulletin MS10-006 - Critical Vulnerabilities in SMB Client Could Allow Remote Code Execution (978251)

Microsoft Security Bulletin MS10-006 - Critical Vulnerabilities in SMB Client Could Allow Remote Code Execution 978251 Published: February 09, 2010 Version: 1.0 General Information Executive Summary This security update resolves two privately reported vulnerabilities in Microsoft Windows. The...

Microsoft Security Bulletin MS10-011 - Important Vulnerability in Windows Client/Server Run-time Subsystem Could Allow Elevation of Privilege (978037)

Microsoft Security Bulletin MS10-011 - Important Vulnerability in Windows Client/Server Run-time Subsystem Could Allow Elevation of Privilege 978037 Published: February 09, 2010 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in...

Microsoft Security Bulletin MS10-014 - Important Vulnerability in Kerberos Could Allow Denial of Service (977290)

Microsoft Security Bulletin MS10-014 - Important Vulnerability in Kerberos Could Allow Denial of Service 977290 Published: February 09, 2010 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in Microsoft Windows. The vulnerability...

CURL-CVE-2010-0734 data callback excessive length

When downloading data, libcurl hands it over to the application using a callback that is registered by the client software. libcurl then calls that function repeatedly with data until the transfer is complete. The callback is documented to receive a maximum data size of 16K CURLMAXWRITESIZE. Usin...