Addon

ClearURLs ClearURLs is an add-on based on the new WebExtensions technology and is optimized for Firefox and some Chrome based browsers. This extension will automatically remove tracking elements from URLs to help protect your privacy when browsing the Internet, which is regularly updated by us an...

EUVD-2018-4546

Malware in sbrugna...

403 Forbidden Message When Accessing Veeam Data Cloud App

Challenge Attempting to load the Veeam Data Cloud app webpage fails with the error: 403 Forbidden Microsoft-Azure-Application-Gateway/v2 Cause The HTTP status code "403 forbidden--you don't have permission to access this resource" is displayed when a web server recognizes a user's request but is...

Profile Stealers Spread via LLM-themed Facebook Ads

In this entry, we discuss how a threat actor abuses paid Facebook promotions featuring LLMs to spread malicious code, with the goal of installing a malicious browser add-on and stealing victims’ credentials...

[SECURITY] Fedora 28 Update: mozilla-privacy-badger-2018.8.1-1.fc28

Privacy Badger is a browser add-on that stops advertisers and other third-p arty trackers from secretly tracking where you go and what pages you look at on the web. If an advertiser seems to be tracking you across multiple websites wit hout your permission, Privacy Badger automatically blocks tha...

[SECURITY] Fedora 27 Update: mozilla-privacy-badger-2018.8.1-1.fc27

Privacy Badger is a browser add-on that stops advertisers and other third-p arty trackers from secretly tracking where you go and what pages you look at on the web. If an advertiser seems to be tracking you across multiple websites wit hout your permission, Privacy Badger automatically blocks tha...

CVE-2018-12587: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability was found in valeuraddons German Spelling Dictionary v1.3 an Opera Browser add-on. Instead of providing text for a spelling check, remote attackers may inject arbitrary web script or HTML via the ajax query parameter in the URL Address Bar...

Yahoo Drops Support for Do Not Track

Yahoo, one of the first large Web companies to recognize the Do Not Track header from browsers on its properties, has now backtracked and said it will no longer support DNT. Officials said the lack of an industry standard for DNT that’s effective led to the decision. DNT is an option in the major...

Yahoo Mail XSS Vulnerability Could Affect Millions of Accounts

Security researcher Shahin Ramezany developed an XSS proof-of-concept exploit that he claims puts some 400 million Yahoo Mail users at risk of having their accounts taken over. In a video posted on YouTube last night, Ramezanydemonstrated an exploit for what he claims is a document object...

NoScript Anywhere Released, Supports Firefox Mobile on Android Devices

The new version of NoScript, the popular browser add-on that blocks JavaScript and other embedded objects from running on Web pages, is out in alpha form and it can now run on Android-based smartphones, giving users protection against script-based attacks on their mobile devices. The release of...