CVE-2012-6534

Novell Sentinel Log Manager before 1.2.0.3 allows remote attackers to create data retention policies via a crafted text/x-gwt-rpc request to novelllogmanager/datastorageservice.rpc, and allows remote authenticated Report Administrators to create data retention policies via a search-results "Save...

Design/Logic Flaw

Novell Sentinel Log Manager before 1.2.0.3 allows remote attackers to create data retention policies via a crafted text/x-gwt-rpc request to novelllogmanager/datastorageservice.rpc, and allows remote authenticated Report Administrators to create data retention policies via a search-results "Save...

EUVD-2012-6382

Novell Sentinel Log Manager before 1.2.0.3 allows remote attackers to create data retention policies via a crafted text/x-gwt-rpc request to novelllogmanager/datastorageservice.rpc, and allows remote authenticated Report Administrators to create data retention policies via a search-results "Save...

CVE-2012-6534

Novell Sentinel Log Manager before 1.2.0.3 allows remote attackers to create data retention policies via a crafted text/x-gwt-rpc request to novelllogmanager/datastorageservice.rpc, and allows remote authenticated Report Administrators to create data retention policies via a search-results "Save...

CVE-2012-6534

CVE-2012-6534 affects Novell Sentinel Log Manager prior to 1.2.0.3. The vulnerability allows remote attackers to create data retention policies via a crafted text/x-gwt-rpc request to novelllogmanager/datastorageservice.rpc, and enables remote authenticated Report Administrators to create data re...

Netherlands, Canada Say WhatsApp Still Violates Privacy Laws

Dutch and Canadian officials say the popular mobile text messaging app WhatsApp violates their countries’ privacy laws because it rifles through users’ contacts to find other devices hooked up to the service. The announcement Monday follows a joint investigation launched a year ago into whether...

Facebook Open to Comments on Proposed Privacy Policy Changes

Facebook today announced proposed changes to its privacy policy that may better explain how it uses cookies and how long it retains your data, which is: “as long as necessary.” In addition, it wants the option to use your data for advertising on third-party Web sites. In a message called “Enhanci...

Online Dating Sites Getting Around With Customers Data

Just in time for Valentine’s Day, the privacy watchdogs over at the Electronic Frontier Foundation have put together a guide for those tempted to dance the algorithm electric. Their findings: online dating services may be getting around with your personal data. Leading online dating sites hold on...

Hawaii Bill Would Require Internet Data Retention For Two Years

A Hawaiian legislator has introduced a broadly worded data-retention bill that require ISPs and other service providers to retain their customers’ Internet activity records for at least two years. The bill, introduced by state Rep. John Mizuno, does not have any provisions for exclusions or priva...

Barracuda Backup v2.0 - Multiple Web Vulnerabilities

Document Title: =============== Barracuda Backup v2.0 - Multiple Web Vulnerabilities References Source: ==================== http://www.cnnvd.org.cn/vulnerability/show/cvcnnvdid/CNNVD-201109-650 Release Date: ============= 2011-10-03 Vulnerability Laboratory ID VL-ID:...

House Committee Passes Bill to Force ISPs to Retain User Data For 12 Months

A controversial bill that would force ISPs to retain records for up to 12 months that would allow them to identify users by IP address has cleared a key hurdle and passed the House Judiciary Committee by a wide margin, setting it up for passage by the full House. The bill was introduced with the...

Secret iPhone Feature Tracks Owners' Whereabouts

Security researchers have discovered a hidden iPhone feature that secretly tracks and saves the meanderings of the phone – and presumably its owner. The tracking feature was described in a presentation at the Where 2.0 Conference in San Francisco on Wednesday. According to the researchers, Pete...

Taiwan Struggles To Combat Attacks From China

Cyber crime, online fraud and copyright infringement are growing rapidly in Taiwan as law enforcement officials, law makers and the courts struggle to stay abreast of the problem, according to a local prosecutor says. In a Webcast presented to students and faculty at Harvard’s Berkman Center for...

Sightseeing Firm Overlooks Security, 110k Credit Card Numbers Stolen

CitySights owner Twin America says the credit card details of 110,000 customers were stolen in a Web based attack and suggests it wasn’t following Payment Card Industry guidelines for storing card data. The parent company of the CitySights sightseeing tours company, Twin America LLC, said in a...

Dutch Teens Arrested for Cyberattacks on Mastercard and Visa

A Dutch hacker collective called Revspace aims to "re-educate" Dutch teens suspected of cyberattacks against Mastercard, Visa, and the Dutch National Prosecutors Office, transforming them into "ethical hackers." Last week, Dutch police arrested a 16-year-old boy for participating in web attacks...

Hacking Tool Used By Anonymous Could Reveal Users Identity

A new study finds that a tool used to carry out distributed denial of service DDoS attacks on behalf of whistle blower Web site Wikileaks may, itself, leak the identity of those running the software. Researchers from the University of Twente, Netherlands, looked at the Low Orbit Ion Cannon LOIC, ...

Google Overhauls Privacy Policy

Google is planning to overhaul its main privacy policy in an effort to make the document more readable and usable for normal people. In addition, Google also is eliminating privacy policies for some of its individual products and services, which it deemed redundant. The shift by Google is a prett...

В Швеции появится первый в мире пиратский провайдер

Пиратская партия Швеции станет первым в мире "пиратским" интернет-провайдером, пишет TorentFreak. Партнером Пиратской партии по организации доступа пользователей в Сеть станет провайдер ViaEuropa. Предполагается, что новая компания PirateISP, во главе которой находится член Пиратской партии Густа...

Unfixed XSS vulnerability at www.dataretentionisnosolution.com

Security researcher Camilo-TcK, has submitted on 05/09/2008 a cross-site-scripting XSS vulnerability affecting www.dataretentionisnosolution.com, which at the time of submission ranked 2926249 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

CA BrightStor ARCserver Tape Engine memory corruption vulnerability

Overview The Computer Associates BrightStor ARCserve Backup Tape Engine contains a memory corruption vulnerability. If successfully exploited, this vulnerability may allow an attacker to execute arbitrary code or create a denial-of-service condition. Description BrightStor ARCserve Backup is a...