3498 matches found
EFF, AdBlock and Others Launch New Do Not Track Standard
After years of discussions, disagreements, and digressions, the Do Not Track header is supported by all of the major browsers. But because there’s no real requirement for sites or advertisers to respect it, DNT is not as effective as it could be. Now, the EFF, Disconnect, and several other...
Google to Expand Use of Safe Browsing to Stop Unwanted Software
Google is expanding the use of its Safe Browsing mechanism to warn users about a broader variety of unwanted software, in addition to the warnings they see regarding phishing pages, malware, and other threats. Safe Browsing is the service that Google uses to help protect Chrome users from malicio...
Microsoft Internet Explorer Information Disclosure Vulnerability (CNVD-2015-04587)
Microsoft Internet Explorer IE is a Web browser developed by the American company Microsoft and is the default browser that comes with the Windows operating system. A security vulnerability exists in Microsoft IE versions 8 through 11. A remote attacker can exploit the vulnerability to obtain...
Information disclosure
Microsoft Internet Explorer 8 through 11 allows remote attackers to obtain sensitive browsing-history information via vectors related to image caching, aka "Internet Explorer Information Disclosure Vulnerability."...
CVE-2015-2414
Microsoft Internet Explorer 8 through 11 allows remote attackers to obtain sensitive browsing-history information via vectors related to image caching, aka "Internet Explorer Information Disclosure Vulnerability."...
CVE-2015-2414
CVE-2015-2414 affects Microsoft Internet Explorer 8–11. The vulnerability allows a remote attacker to obtain sensitive browsing-history information via image caching vectors, i.e., an information-disclosure vulnerability. Connected sources corroborate IE as the affected product family and describ...
I2P Browsing Detection via key exchange
Binary data 8799.prm...
I2P Browsing Detection
Binary data 8797.prm...
CUPS XSS / String Handling / Improper Teardown
Source: http://googleprojectzero.blogspot.se/2015/06/owning-internet-printing-case-study-in.html Abstract Modern exploit mitigations draw attackers into a game of diminishing marginal returns. With each additional mitigation added, a subset of software bugs become unexploitable, and others become...
I keep 200+ Browser Tabs Open, and My Computer Runs Absolutely Fine. Here’s My Secret.
I don't know about your part, but I make heavy use of tabs. I currently have 200+ tabs open in my Google Chrome Web browser. And sometimes the number is even more. For me it's a daily thing, as I regularly open new tabs because of my habit of reading lots of stuff online, including cyber security...
Yahoo.com Browsing Detection (deprecated)
Binary data 6969.prm...
I2P Browsing Detection via DNS
Binary data 8800.prm...
I2P Browsing Detection via SSDP
Binary data 8798.prm...
Tesla Motors Starts Bug Bounty--But Not For Its Cars
Tesla Motors has started a bug bounty program that will pay researchers up to $1,000 for disclosing vulnerabilities. However, the rewards don’t apply to bugs found in the company’s vehicles. The program’s scope is quite narrow, with only the main teslamotors.com domain and other domains owned by...
MGASA-2015-0194 Updated qtwebkit packages fix security vulnerabilities
Updated qtwebkit and qtwebkit5 packages fix security vulnerability: QtWebKit logs visited URLs to WebpageIcons.db in private browsing mode...
Apple Safari Multiple Vulnerabilities -01 (Apr 2015) - Mac OS X
Apple Safari is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:safari"; ifdescription...
Fedora 20 : qt5-qtwebkit-5.4.1-4.fc20 (2015-4587)
QtWebKit logs visited URLs to Web pageIcons.db in private browsing mode. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...
Google Chrome FileSystem API Security Bypass Vulnerability
Google Chrome is a web browsing tool developed by Google. A security vulnerability exists in the FileSystem API of Google Chrome versions prior to 40.0.2214.91. A remote attack exploiting this vulnerability could bypass the SafeBrowsing for Executable Files protection mechanism by creating an .ex...
UBUNTU-CVE-2015-1248
The FileSystem API in Google Chrome before 40.0.2214.91 allows remote attackers to bypass the SafeBrowsing for Executable Files protection mechanism by creating a .exe file in a temporary filesystem and then referencing this file with a filesystem:http: URL...