CVE-2013-0991: Undefined Security Weakness

WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in...

PT-2013-2787

Name of the Vulnerable Software and Affected Versions WebKit, as used in Apple iTunes versions prior to 11.0.3 Description The issue allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via vectors related...

CVE-2013-1006: Undefined Security Weakness

WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in...

PT-2013-2785

Name of the Vulnerable Software and Affected Versions WebKit, as used in Apple iTunes versions prior to 11.0.3 Description The issue allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via vectors related...

CVE-2013-1004: Undefined Security Weakness

WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in...

PT-2013-2791

Name of the Vulnerable Software and Affected Versions Apple iTunes versions prior to 11.0.3 Description The issue allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash. This is related to vectors involving...

PT-2013-2794

Name of the Vulnerable Software and Affected Versions WebKit, as used in Apple iTunes versions prior to 11.0.3 Description The issue allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via vectors related...

PT-2013-2803

Name of the Vulnerable Software and Affected Versions WebKit, as used in Apple iTunes versions prior to 11.0.3 Description The issue allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via vectors related...

PT-2013-2796

Name of the Vulnerable Software and Affected Versions WebKit, as used in Apple iTunes versions prior to 11.0.3 Description The issue allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via vectors related...

PT-2013-2786

Name of the Vulnerable Software and Affected Versions WebKit, as used in Apple iTunes versions prior to 11.0.3 Description The issue allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via vectors related...

PT-2013-2797

Name of the Vulnerable Software and Affected Versions WebKit, as used in Apple iTunes versions prior to 11.0.3 Description The issue allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via vectors related...

PT-2013-2788

Name of the Vulnerable Software and Affected Versions WebKit, as used in Apple iTunes versions prior to 11.0.3 Description The issue allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via vectors related...

PT-2013-1323 · Schneider Electric · Modicon M340 +2

Name of the Vulnerable Software and Affected Versions: Modicon M340 versions affected versions not specified Modicon Quantum versions affected versions not specified Modicon Premium versions affected versions not specified Description: The issue is related to errors in security mechanisms, which...

DDIVRT-2013-53 Actuate 'ActuateJavaComponent' Multiple Vulnerabilities

Title ----- DDIVRT-2013-53 Actuate 'ActuateJavaComponent' Multiple Vulnerabilities Severity -------- High Date Discovered --------------- March 19, 2013 Discovered By ------------- Digital Defense, Inc. Vulnerability Research Team Credit: Dennis Lavrinenko, Bobby Lockett, and r@b13$ 1. Actuate...

'Magic' Espionage Malware Targets UK Computers

Thousands of U.K. business computers have been infected by espionage malware using a custom protocol to communicate with its command and control servers. Researchers at Israeli security company Seculert added that the malware is still percolating with a number of capabilities yet to be deployed...

Firefox 20 Fixes 11 Critical Flaws, Adds Per-Tab Private Browsing

Mozilla has added a new privacy feature to Firefox that enables users to begin a new private browsing session in a separate tab while still running a normal session in other tabs. Firefox 20 also includes patches for 11 critical security vulnerabilities. The new version of Firefox expands the...

Siemens WinCC 7.2 Multiple Vulnerabilities

OVERVIEW This advisory provides mitigation details for vulnerabilities that impact the Siemens WinCC Web Navigator 7.2. Researchers Alexander Tlyapov, Sergey Gordeychik, and Timur Yunusov of Positive Technologies have identified multiple vulnerabilities in the Siemens WinCC Web Navigator 7.2...

How To: Chrome Browser Privacy Settings

youtube http://www.youtube.com/watch?v=YY9hbsfEbaw The Web browser is the primary portal through which the vast majority of connected users access and interact with the Internet. Each browser has its own security and privacy settings and those settings have an enormous impact on the nature of the...

Nitro Pro 8.0.3.1 - Crash (PoC)

Nitro Pro 8.0.3.1 - Crash PoC !C:\Python27\python.exe Exploit Title: Nitro Pro 8.0.3.1 - DoS Date: 2012-10-07 Exploit Author: John Cobb Author Homepage: www.NoBytes.com Vendor Homepage: www.nitropdf.com Version: 8.0.3.1 Tested on: Win7 64bit CVE : None When the Object Index exceeds 10 characters...

W3 Total Cache Plugin for WordPress Cache File Direct Request Information Disclosure

The W3 Total Cache Plugin for WordPress installed on the remote host is affected by an information disclosure vulnerability because it stores cache files in a publicly accessible directory. If directory browsing is enabled on a web server, an attacker can browse to /wp-content/w3tc/dbcache and...