CVE-2011-0794

Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5.0 allows local users to affect confidentiality, integrity, and availability, related to File ID SDK. NOTE: the previous information was obtained from the April 2011 CPU. Oracle has not...

Chinese man flip-flops on hacking claims in McAfee Report !

A Chinese technician quoted by U.S. Internet security firm McAfee Inc. as informing that hackers from China had attacked a number of US oil and gas companies over the past years has denied claims attributed to him in the 19-page report released on Thursday. In a telephone interview to the Wall...

FTC Charges Scareware Operators to Pay $8 Million Settlement

The FTC doled out $8 million in fines to the operators of an online scareware scheme. The scam involves tricking consumers into thinking their computers are infected with malware and then selling them software to remedy problems that doesn’t exist in the first place. A district court order in...

The 5 claims of PCI DSS snake oil salesmen

The Payment Card Industry Data Security Standard PCI DSS is fast becoming the de facto standard for securing critical infrastructure across many industries. This is because a large number of businesses much larger than originally envisioned process credit cards and are, therefore, required to be...

CVE-2008-1817

Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3, and 11.1.0.6 have unknown impact and remote attack vectors related to 1 SDOIDX in the Spatial component, aka DB07; and 2 Core RDBMS, aka DB10. NOTE: the previous information was obtained...

CVE-2007-1103

Tor does not verify a node's uptime and bandwidth advertisements, which allows remote attackers who operate a low resource node to make false claims of greater resources, which places the node into use for many circuits and compromises the anonymity of traffic sources and destinations...

CVE-2007-1103

Tor does not verify a node's uptime and bandwidth advertisements, which allows remote attackers who operate a low resource node to make false claims of greater resources, which places the node into use for many circuits and compromises the anonymity of traffic sources and destinations...

CVE-2007-1103

Tor does not verify a node's uptime and bandwidth advertisements, which allows remote attackers who operate a low resource node to make false claims of greater resources, which places the node into use for many circuits and compromises the anonymity of traffic sources and destinations...

CVE-2006-5160

Multiple unspecified vulnerabilities in Mozilla Firefox have unspecified vectors and impact, as claimed during ToorCon 2006. NOTE: the vendor and original researchers have released a follow-up comment disputing this issue, in which one researcher states that "I have no undisclosed Firefox...

PT-2006-5898 · Mozilla · Firefox

Name of the Vulnerable Software and Affected Versions: Mozilla Firefox affected versions not specified Description: There are claims of multiple unspecified vulnerabilities in Mozilla Firefox, although the vendor and original researchers have disputed this issue. The vectors and impact of these...

CVE-2002-0582

WorkforceROI Xpede 4.1 stores temporary expense claim reports in a world-readable and indexable /reports/temp directory, which allows remote attackers to read the reports by accessing the directory...

CVE-2002-0583

WorkforceROI Xpede 4.1 uses a small random namespace 5 alphanumeric characters for temporary expense claim reports in the /reports/temp directory, which allows remote attackers to read the reports via a brute force attack...

Buffer Overflow still exists in Netscape <= 4.76

Hello. I have noticed that the buffer overflow discovered by Michal Zalewski and covered extensively by the different unix distributions is still present in netscape 4.76 even though they claim it is not. Refer to these links for background information:...