PT-2015-3112

Name of the Vulnerable Software and Affected Versions Safari versions prior to 9.0.2 iOS versions prior to 9.2 Description The issue is related to the misparsing of content extensions in WebKit, which can allow remote attackers to obtain sensitive browsing-history information via a crafted web...

Google Updates Chrome, Extends Safe Browsing to Chrome for Android

Google yesterday released an update for the Chrome browser that patches seven vulnerabilities and also updates Adobe Flash Player. It also announced that Google Safe Browsing has been extended to Chrome for Android. The Chrome browser update is the second in less than a week; on Dec 1, Chrome 47...

December 2015 Android Over-the-Air Nexus Security Update

Google has patched another critical Android vulnerability in Mediaserver, which has been maligned since this summer’s barrage of patches for the Stagefright vulnerability, along with a critical rooting vulnerability in the mobile operating system’s kernel. In all, 19 vulnerabilities were patched ...

SpiderFoot v2.6.1 - Open Source Intelligence Automation

SpiderFoot is an open source intelligence automation tool. Its goal is to automate the process of gathering intelligence about a given target. Purpose There are three main areas where SpiderFoot can be useful: 1. If you are a pen-tester, SpiderFoot will automate the reconnaisance stage of the tes...

Apple iOS CFNetwork HTTPProtocol Component Vulnerability

Apple iOS is an operating system for mobile devices developed by Apple Inc. The CFNetwork HTTPProtocol is one of the components used to send requests to create simple instances. A security vulnerability exists in the CFNetwork HTTPProtocol component in versions of Apple iOS prior to 9, which stem...

CVE-2015-5859

The CFNetwork HTTPProtocol component in Apple iOS before 9 and OS X before 10.11 does not properly recognize the HSTS preload list during a Safari private-browsing session, which makes it easier for remote attackers to obtain sensitive information by sniffing the network...

Hardcoded credentials

The CFNetwork HTTPProtocol component in Apple iOS before 9 and OS X before 10.11 does not properly recognize the HSTS preload list during a Safari private-browsing session, which makes it easier for remote attackers to obtain sensitive information by sniffing the network...

PT-2015-7065

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9 Apple OS X versions prior to 10.11 Description The issue concerns the CFNetwork HTTPProtocol component, which fails to properly recognize the HSTS preload list during a Safari private-browsing session. This makes ...

Security update for MozillaFirefox, mozilla-nspr, mozilla-nss, xulrunner, seamonkey (important)

Mozilla Firefox was updated to version 42.0, fixing bugs and security issues. Mozilla xulrunner was updated to xulrunner 38.4.0. Seamonkey was updated to 2.39. New features in Mozilla Firefox: Private Browsing with Tracking Protection blocks certain Web elements that could be used to record your...

Mozilla 42 Brings Private Browsing with Tracking Protection Live

Mozilla has pushed a feature in Firefox live that allows users to block certain page elements while browsing privately. The feature, Private Browsing with Tracking Protection, previously available to beta users, blocks third party page elements, such as ads, social network buttons, analytics, and...

Let's Encrypt Free SSL/TLS Certificate Now Trusted by Major Web Browsers

Yes, Let's Encrypt is now one step closer to its goal of offering Free HTTPS certificates to everyone. Let's Encrypt – the free, automated, and open certificate authority CA – has announced that its Free HTTPS certificates are Now Trusted and Supported by All Major Browsers. Let's Encrypt enables...

Apple iOS < 9.0 Multiple Vulnerabilities

Binary data 8979.prm...

Microsoft SharePoint CVE-2015-2556 XML Handling Information Disclosure Vulnerability

Description Microsoft SharePoint is prone to a remote information-disclosure vulnerability. Attackers may be able to exploit this issue to gain access to potentially sensitive information that may aid in further attacks. Technologies Affected Microsoft SharePoint Server 2007 for 32-bit SP3...

APPLE-SA-2015-09-30-2 Safari 9

APPLE-SA-2015-09-30-2 Safari 9 Safari 9 is now available and addresses the following: Safari Available for: OS X Mavericks v10.9.5, OS X Yosemite v10.10.5 and OS X El Capitan v10.11 Impact: Visiting a malicious website may lead to user interface spoofing Description: Multiple user interface...

iOS Safari Private Browsing Bypass

The vulnerability of the CFNetwork HTTP Protocol component in the iOS operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to bypass the security measures of the private browsing mode of the Safari browser and track users...

Mac OS X : Apple Safari < 9.0 Multiple Vulnerabilities

The version of Apple Safari installed on the remote Mac OS X host is prior to 9.0. It is, therefore, affected by multiple vulnerabilities in the following components : - Safari - Safari Downloads - Safari Extensions - Safari Safe Browsing - WebKit - WebKit CSS - WebKit JavaScript Bindings - WebKi...

iTunes Code Execution

The vulnerability of the WebKit component in the iTunes multimedia player is caused by buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure by manipulating functions related to iTunes Store browsing...

iTunes Code Execution

The vulnerability of the WebKit component in the iTunes multimedia player is caused by buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure by manipulating functions related to iTunes Store browsing...

iTunes Code Execution

The vulnerability of the WebKit component in the iTunes multimedia player is caused by buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure by manipulating functions related to iTunes Store browsing...

Apple iOS CFNetwork HTTPProtocol Component Information Disclosure Vulnerability

Apple iOS is an operating system developed by Apple for mobile devices. An information disclosure vulnerability exists in the Apple iOS CFNetwork HTTPProtocol component. Due to the program failing to properly handle HSTS state. A remote attacker can exploit this vulnerability via a specially...