Senators Press Google, Apple Execs on Privacy and Location Tracking

In a hearing on Tuesday about the amount of data that mobile device manufacturers, app developers and others collect about users’ location and activities, senators called on Apple, Google and other companies to be more open and clear with consumers about their data-collection and tracking...

Ubuntu Update for linux-source-2.6.15 USN-1111-1

Ubuntu Update for Linux kernel vulnerabilities USN-1111-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN11111.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for linux-source-2.6.15 USN-1111-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH,...

USN-1111-1: Linux kernel vulnerabilities

Dan Rosenberg discovered multiple flaws in the X.25 facilities parsing. If a system was using X.25, a remote attacker could exploit this to crash the system, leading to a denial of service. CVE-2010-4164 Vegard Nossum discovered that memory garbage collection was not handled correctly for active...

CVE-2011-1906

Trustwave WebDefend Enterprise before 5.0 7.01.903-1.4 stores specific user-account credentials in a MySQL database, which makes it easier for remote attackers to read the event collection table via requests to the management port, a different vulnerability than CVE-2011-0756...

Design/Logic Flaw

Trustwave WebDefend Enterprise before 5.0 7.01.903-1.4 stores specific user-account credentials in a MySQL database, which makes it easier for remote attackers to read the event collection table via requests to the management port, a different vulnerability than CVE-2011-0756...

CVE-2011-1906

Trustwave WebDefend Enterprise before 5.0 7.01.903-1.4 stores specific user-account credentials in a MySQL database, which makes it easier for remote attackers to read the event collection table via requests to the management port, a different vulnerability than CVE-2011-0756...

openSUSE Security Update : mozilla-xulrunner191 (mozilla-xulrunner191-4073)

Mozilla XULRunner 1.9.1 was updated to version 1.9.1.17, fixing various security issues. Following security issues were fixed: MFSA 2010-74 / CVE-2010-3777: Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products...

New WhisperMonitor Tool Gives Users Control of Android Security and Privacy Options

As the concerns surrounding the data collected and transmitted by mobile apps continue to grow, Whisper Systems, a small start-up, has released WhisperMonitor, a free tool that enables owners of Android phones to control exactly what each of their installed apps can do and monitor what data is se...

CVE-2011-1844

Memory leak in Microsoft Silverlight 4 before 4.0.60310.0 allows remote attackers to cause a denial of service memory consumption via an application involving a popup control and a custom DependencyProperty property, related to lack of garbage collection...

Memory corruption

Memory leak in Microsoft Silverlight 4 before 4.0.60310.0 allows remote attackers to cause a denial of service memory consumption via an application involving a popup control and a custom DependencyProperty property, related to lack of garbage collection...

CVE-2011-1844

Memory leak in Microsoft Silverlight 4 before 4.0.60310.0 allows remote attackers to cause a denial of service memory consumption via an application involving a popup control and a custom DependencyProperty property, related to lack of garbage collection...

Multi Gather Pidgin Instant Messenger Credential Collection

This module will collect credentials from the Pidgin IM client if it is installed. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'rexml/document' class MetasploitModule 'Multi Gather Pidgin Instant Messenger...

Windows Application CPE Detection (SMB Login)

SMB login-based collection of information about installed applications from a Microsoft Windows system. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Fedora Update for kdesdk FEDORA-2011-5200

Check for the Version of kdesdk OpenVAS Vulnerability Test Fedora Update for kdesdk FEDORA-2011-5200 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Truth About Facebook - CIA, U.S. government - Everything Related !

Truth About Facebook - CIA, U.S. government - Everything Related ! The Truth about who owns facebook. In todays world of advanced modern technology, there are billions of people that use Internet as a means of communication. The era of Big Brother is upon us. George Orwell predicted it and, now...

Senators Propose Bill Of Rights To Protect Personal Information Online

Senators John Kerry D-Mass. and John McCain R-Ariz. don’t agree on much in the policy arena, except when it comes to protecting online privacy. The incongruous couple are political bedfellows on a piece of legislation introduced yesterday called The Commercial Privacy Bill of Rights Act of 2011...

Tyler Shields on Mobile App Privacy and Security

Dennis Fisher talks with Tyler Shields of Veracode about his research on the Pandora Android app and the data it collects and sends to advertisers, as well as the security and privacy concerns related to iPhone, Android and BlackBerry apps in general. Podcast audio courtesy of sykboy65 Subscribe ...

The Open Pentest Bookmark Collection v1.4

We are pleased to announce the release of version 1.4 yes 1.3 squeaked by without a blog post of the Open Pentest Bookmarks Collection. They have added a large amount of community submissions, with the addition of severalnew sections. They have also moved around some of the bookmarks to better...

SuSE 11.1 Security Update : Mozillla Firefox (SAT Patch Number 4104)

Mozilla Firefox has been updated to version 3.6.15, fixing the following security issues : - Several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products have been identified and fixed. Some of these bugs showed evidence of memory corruption under certain...

kernel: unix socket local dos

The waitforunixgc function in net/unix/garbage.c in the Linux kernel before 2.6.37-rc3-next-20101125 does not properly select times for garbage collection of inflight sockets, which allows local users to cause a denial of service system hang via crafted use of the socketpair and sendmsg system...