In Face of Advertisers, Microsoft To Make Do Not Track Feature Default on IE10

Microsoft yesterday announced its intent to implement its “Do Not Track” DNT functionality by default in the next iteration of its web browser, Internet Explorer 10, a shift that has already begun to ruffle the feathers of online advertisers. In a post to its TechNet blog, the company’s Chief...

PT-2012-3973

Name of the Vulnerable Software and Affected Versions Sympa versions prior to 6.1.11 Description The issue concerns the archive management page in Sympa, where a lack of permission checks allows remote attackers to perform unauthorized actions on list archives. This can be achieved through vector...

CVE-2012-2342

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2010-5097. Reason: This candidate is a duplicate of CVE-2010-5097. Notes: All CVE users should reference CVE-2010-5097 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

Twitter Implements Do Not Track

Twitter has implemented the Do Not Track header on its site, giving users the option of telling the site that they do not want to be tracked across other sites on the Web. The implementation is being done through the DNT technology in the Firefox browser. Firefox, like other major browsers, allow...

Opera 12 Beta Released With New Security Features, Including Do Not Track Support

This seems to be the season for major new versions of browsers. A couple of days after Mozilla released Firefox 12, Opera has pushed out a beta of version 12 of its browser, which includes several security updates, such as private browsing and support for the Do Not Track header. The new version ...

Yahoo to Implement Do Not Track

Yahoo has decided that it’s now time to start implementing a Do Not Track system across its various Web properties. The company is one of the last large Web content providers to officially commit to using a DNT technology, and Yahoo said that it plans to have the system implemented by early summe...

FTC Privacy Framework Pushes for Do Not Track, Closer Inspection of Data Brokers

The Federal Trade Commission has issued a new report on consumer privacy and online tracking and among the recommendations the commission makes is that data brokers make themselves known to consumers and be open and transparent about the data they collect on consumers. The FTC also says that...

Mozilla Implements Do Not Track for Mobile Devices Via Boot to Gecko

As the privacy and tracking debate rages in the desktop arena, Mozilla has made a jump to the mobile world by announcing its new Boot to Gecko project, which will include an implementation of the Do Not Track technology on mobile devices. This is the first such implementation and it will give use...

RedHat Update for sudo RHSA-2012:0309-03

Check for the Version of sudo OpenVAS Vulnerability Test RedHat Update for sudo RHSA-2012:0309-03 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

Fedora 15 : firefox-9.0.1-1.fc15 / gnome-python2-extras-2.25.3-35.fc15.4 / nspr-4.8.9-2.fc15 / etc (2011-17399)

The latest version of Firefox and Thunderbird have the following changes : - Added Type Inference, significantly improving JavaScript performance - Added support for querying Do Not Track status via JavaScript - Added support for font-stretch - Improved support for text-overflow - Improved...

PHPDomainRegister 0.4a-RC2-dev Cross Site Scripting / SQL Injection

Title = PHPDomainRegister v0.4a-RC2-dev = SQL AuthSQL InjectXSS Author = Or4nG.M4n Download = http://garr.dl.sourceforge.net/project/phpdr/v0.4b%20-%20RC2.rar This Bug Powered By : GooGLe Thnks : +----------------------------------+ | xSs m4n i-Hmx Cyber-Crystal | | Dr.Bnned ahwak2000 sa^Dev!L |...

Fedora 16 : firefox-9.0-3.fc16 / nss-3.13.1-9.fc16 / nss-softokn-3.13.1-14.fc16 / etc (2011-17400)

The latest version of Firefox and Thunderbird have the following changes : - Added Type Inference, significantly improving JavaScript performance - Added support for querying Do Not Track status via JavaScript - Added support for font-stretch - Improved support for text-overflow - Improved...

W3C Publishes Do Not Track Proposal

The W3C has proposed a standard for implementing the Do Not Track mechanism for both users and site owners, wading into what has become a contentious and fractious debate. The proposed standard, known as the Tracking Preference Expression, is designed to give users the ability to tell sites what...

CVE-2010-4841: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in ManageEngine EventLog Analyzer 6.1 allow remote attackers to inject arbitrary web script or HTML via the 1 HOSTID, 2 OS, 3 GROUP, 4 exportFile, 5 load, 6 type, or 7 tab parameter to INDEX.do, the 8 reported parameter to INDEX2.do, the 9 gId...

Mozilla Releases Field Guide to Do Not Track

Mozilla has released a comprehensive guide to the use and implementation of the Do Not Track technology that’s included in its Firefox browser, in an effort to give developers and advertisers a better handle on how the technology works and how users are taking advantage of it. The Do Not Track...

Mozilla Pushes Firefox 5, Do Not Track Feature, New Development Cycle

With the release of Firefox 5 earlier this week, Mozilla has finally added its Do Not Track privacy feature to the company’s flagship browser. The feature, aimed at customizing how users browsing behavior is tracked is the first of its kind that can be implemented across multiple platforms,...

Firefox Version 5 release with fix of 5 remote code vulnerabilities

Firefox Version 5 release with fix of 5 remote code vulnerabilities Mozilla Delivers New Version of Firefox – First Web Browser to Support Do Not Track on Multiple Platforms Mozilla delivered two things today: Firefox 5 for personal computers and Android phones, and the promise to complete the ne...

kernel: ebtables stack infoleak

The doreplace function in net/bridge/netfilter/ebtables.c in the Linux kernel before 2.6.39 does not ensure that a certain name field ends with a '\0' character, which allows local users to obtain potentially sensitive information from kernel stack memory by leveraging the CAPNETADMIN capability ...

PT-2011-1733

Name of the Vulnerable Software and Affected Versions IBM Tivoli Directory Server TDS versions 6.0 through 6.0.0.61 Description The issue allows remote authenticated users to cause a denial of service via a malformed LDAP extended operation. This operation triggers certain comparisons involving t...

SimplisCMS 1.0.3.0 Remote File Disclosure Vulnerability

Exploit Title: SimplisCMS 1.0.3.0 Remote File Disclosure Vulnerability home : http://www.D99Y.com Date: 27/3/2011 Author: NassRawI Software Link: http://modcove.com/index.php Demo : http://modcove.com/index.php?page=demo Version: 1.0.3.0 file : simpliscms/admin/index.php exploit :...