298 matches found
[SECURITY] Fedora 34 Update: mingw-c-ares-1.17.2-1.fc34
c-ares is a C library that performs DNS requests and name resolves asynchronously. c-ares is a fork of the library named 'ares', written by Greg Hudson at MIT...
[SECURITY] Fedora 34 Update: c-ares-1.17.2-1.fc34
c-ares is a C library that performs DNS requests and name resolves asynchronously. c-ares is a fork of the library named 'ares', written by Greg Hudson at MIT...
[SECURITY] [DSA 4954-1] c-ares security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4954-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 10, 2021 https://www.debian.org/security/faq -...
DNS-over-HTTPS takes another small step towards global domination
Firefox recently announced that it will be rolling out DNS-over-HTTPS or DoH soon to one percent of its Canadian users as part of its partnership with CIRA the Canadian Internet Registration Authority, the Ontario-based organization responsible for managing the .ca top-level domain for Canada and...
CVE-2021-22917
Brave Browser Desktop between versions 1.17 and 1.20 is vulnerable to information disclosure by way of DNS requests in Tor windows not flowing through Tor if adblocking was enabled...
CVE-2021-22917
Brave Browser Desktop between versions 1.17 and 1.20 is vulnerable to information disclosure by way of DNS requests in Tor windows not flowing through Tor if adblocking was enabled...
Information disclosure
Brave Browser Desktop between versions 1.17 and 1.20 is vulnerable to information disclosure by way of DNS requests in Tor windows not flowing through Tor if adblocking was enabled...
CVE-2021-22917
Brave Browser Desktop between versions 1.17 and 1.20 is vulnerable to information disclosure by way of DNS requests in Tor windows not flowing through Tor if adblocking was enabled...
CVE-2021-22917
Brave Browser Desktop versions 1.17–1.20 are affected by an information-disclosure vulnerability where DNS requests in Tor windows do not flow through Tor when adblocking is enabled, leaking the user’s real IP (and DNS queries) to external DNS servers/IPs. The Red Hat and other sources corroborat...
PT-2021-15274 · Brave · Brave Browser
Name of the Vulnerable Software and Affected Versions: Brave Browser Desktop versions 1.17 through 1.20 Description: The issue concerns information disclosure through DNS requests in Tor windows that do not flow through Tor when adblocking is enabled. Recommendations: For versions 1.17 through...
Unspecified vulnerability in Frontier ichris (CNVD-2021-50156)
Frontier ichris is an application from Frontier Australia. A payroll software. A security vulnerability exists in Frontier ichris version 5.18, which stems from the program incorrectly handling DNS requests that request the hostname in the HTTP host header. No detailed vulnerability details are...
Weave Net clusters susceptible to MitM attacks via IPv6 rogue router advertisements
Impact An attacker able to run a process as root in a container is able to respond to DNS requests from the host and thereby insert themselves as a fake service. In a cluster with an IPv4 internal network, if IPv6 is not totally disabled on the host via ipv6.disable=1 on the kernel cmdline, it wi...
Lemon Duck Cryptojacking Botnet Changes Up Tactics
The Lemon Duck cryptocurrency-mining botnet has added the ProxyLogon group of exploits to its bag of tricks, targeting Microsoft Exchange servers. That’s according to researchers at Cisco Talos, who said that the cybercrime group behind Lemon Duck has also added the Cobalt Strike attack framework...
Fedora: Security Advisory for mingw-c-ares (FEDORA-2021-ee913722db)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 33 Update: mingw-c-ares-1.17.1-1.fc33
c-ares is a C library that performs DNS requests and name resolves asynchronously. c-ares is a fork of the library named 'ares', written by Greg Hudson at MIT...
CVE-2021-21323
Brave is an open source web browser with a focus on privacy and security. In Brave versions 1.17.73-1.20.103, the CNAME adblocking feature added in Brave 1.17.73 accidentally initiated DNS requests that bypassed the Brave Tor proxy. Users with adblocking enabled would leak DNS requests from Tor...
Design/Logic Flaw
Brave is an open source web browser with a focus on privacy and security. In Brave versions 1.17.73-1.20.103, the CNAME adblocking feature added in Brave 1.17.73 accidentally initiated DNS requests that bypassed the Brave Tor proxy. Users with adblocking enabled would leak DNS requests from Tor...
Brave browser Tor feature leaked .Onion queries to ISPs
By Waqas According to a researcher, the Chromium-based, privacy-focused Brave browser has a vulnerability that's leaking DNS requests. This is a post from HackRead.com Read the original post: Brave browser Tor feature leaked .Onion queries to ISPs...
Privacy Bug in Brave Browser Exposes Dark-Web Browsing History of Its Users
Brave has fixed a privacy issue in its browser that sent queries for .onion domains to public internet DNS resolvers rather than routing them through Tor nodes, thus exposing users' visits to dark web websites. The bug was addressed in a hotfix release V1.20.108 made available yesterday. Brave...