Lucene search
K

7651 matches found

The Hacker News
The Hacker News
added 2011/02/06 7:56 p.m.3 views

www.seth.pt Hacked By Pak Cyber Combat Squad !

www.seth.pt Hacked By Pak Cyber Combat Squad ! Links : https://www.seth.pt/pccs.html Mirror : https://mirror-az.com/mirror/?id=11180...

7AI score
Exploits0
The Hacker News
The Hacker News
added 2011/01/28 10:27 a.m.6 views

Facebook Enhances Security With HTTPS, Remote Disconnect !

Maybe it was Mark Zuckerberg fan site hack that led upgrade security of Facebook, but for some reason, users now have access HTTPS. Facebook will leave the office during the next few weeks, which means that user activity is now encrypted when it hits a Web server. This is mainly useful when you...

6.9AI score
Exploits0
The Hacker News
The Hacker News
added 2011/01/28 6:14 a.m.11 views

A Day After CEO Is Hacked, Launches New Facebook Security Features !

Coincidence? Unfortunately, probably yes. One day, when your fan site of Mark Zuckerberg has allegedly violated, Facebook has introduced two new security measures. If these guys react or what? They also got "must be used for online banking transactions, such as safety tips. Immediate effect, user...

7AI score
Exploits0
ThreatPost
ThreatPost
added 2011/01/27 4:1 p.m.27 views

Facebook Announces Social Verification and HTTPS option

Facebook announced yesterday that they will begin offering secure HTTPS connections and a new verification method called social verification to users of the most popular social network in the world. The move comes, conveniently, just a day after Facebook CEO and founder Mark Zuckerberg’s personal...

1.3AI score
Exploits0References3
ThreatPost
ThreatPost
added 2011/01/26 5:28 p.m.7 views

Facebook Kills Firesheep With New Secure Browsing Feature

Facing a wave of criticism for not offering a secured browsing option, Facebook has finally added a new feature to browse the popular social network on a secure connection https. However, the https:// browsing is not turned on by default and must be manually activated from an “Account Settings”...

6.8AI score
Exploits0References1
ThreatPost
ThreatPost
added 2011/01/24 5:59 p.m.10 views

Facebook Used Social Authentication To Shield Tunisian Protesters

Faced with the Tunisian government’s efforts to hack the Facebook accounts of protesters, Facebook’s security team stepped up its use of social authentication to help secure protester’s accounts. A new account of the role of the Facebook in aiding widespread protests against the regime in Tunisia...

0.4AI score
Exploits0References6
OpenVAS
OpenVAS
added 2011/01/21 12:0 a.m.19 views

Hastymail2 < RC8 Security Bypass Vulnerability

Hastymail2 is prone to a security bypass vulnerability. Copyright C 2011 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you c...

5CVSS6.7AI score0.0025EPSS
Exploits0References1
NVD
NVD
added 2011/01/18 6:3 p.m.9 views

CVE-2009-5051

Hastymail2 before RC 8 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session...

5CVSS6.5AI score0.0025EPSS
Exploits0References2
Prion
Prion
added 2011/01/18 6:3 p.m.12 views

Session fixation

Hastymail2 before RC 8 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session...

5CVSS7AI score0.0025EPSS
Exploits0References2
CVE
CVE
added 2011/01/18 5:0 p.m.32 views

CVE-2009-5051

Hastymail2 pre-RC8 is vulnerable: in HTTPS sessions the session cookie is not marked Secure, enabling potential interception of the cookie in transit. The OpenVAS entries describe a session-cookie security bypass; no concrete exploit details or patch/version fixes are provided in the supplied doc...

5CVSS6.7AI score0.0025EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2011/01/18 5:0 p.m.22 views

CVE-2009-5051

Hastymail2 before RC 8 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session...

6.5AI score0.0025EPSS
Exploits0References2
Zero Day Initiative
Zero Day Initiative
added 2011/01/18 12:0 a.m.41 views

Oracle Database and Enterprise Manager Grid Control Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle Database 11g. Authentication is not required to exploit this vulnerability. The specific flaw exists within a JSP script exposed via an HTTPS server running by default on TCP port 1158. The...

10CVSS1.3AI score0.76971EPSS
Exploits4References1
NVD
NVD
added 2011/01/10 8:0 p.m.16 views

CVE-2011-0400

Cookie.php in Piwik before 1.1 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session...

5CVSS6.5AI score0.00357EPSS
Exploits0References5
Prion
Prion
added 2011/01/10 8:0 p.m.12 views

Session fixation

Cookie.php in Piwik before 1.1 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session...

5CVSS7AI score0.00357EPSS
Exploits0References5Affected Software1
Cvelist
Cvelist
added 2011/01/10 7:18 p.m.20 views

CVE-2011-0400

Cookie.php in Piwik before 1.1 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session...

6.5AI score0.00357EPSS
Exploits0References5
Exploit DB
Exploit DB
added 2010/12/29 12:0 a.m.69 views

TYPO3 - Arbitrary File Retrieval

?php / TYPO3-SA-2010-022.php Exploit Title: TYPO3 Unauthenticated Arbitrary File Retrieval TYPO3-SA-2010-020, TYPO3-SA-2010-022 Date: 29/12/2010 Author: ikki Software Link: http://typo3.org/download/, http://sourceforge.net/projects/typo3/files/ Version: 4.2.15, 4.3.7 or 4.4.4 Tested on: php CVE ...

7.1CVSS6.4AI score0.33647EPSS
Exploits7
NVD
NVD
added 2010/12/22 3:0 a.m.15 views

CVE-2010-4584

Opera before 11.00, when Opera Turbo is used, does not properly present information about problematic X.509 certificates on https web sites, which might make it easier for remote attackers to spoof trusted content via a crafted web site...

2.6CVSS7.2AI score0.00177EPSS
Exploits0References5
Prion
Prion
added 2010/12/22 3:0 a.m.18 views

Code injection

Opera before 11.00, when Opera Turbo is used, does not properly present information about problematic X.509 certificates on https web sites, which might make it easier for remote attackers to spoof trusted content via a crafted web site...

2.6CVSS6.7AI score0.00177EPSS
Exploits0References5Affected Software1
Cvelist
Cvelist
added 2010/12/22 1:0 a.m.27 views

CVE-2010-4584

Opera before 11.00, when Opera Turbo is used, does not properly present information about problematic X.509 certificates on https web sites, which might make it easier for remote attackers to spoof trusted content via a crafted web site...

7.2AI score0.00177EPSS
Exploits0References5
CVE
CVE
added 2010/12/22 1:0 a.m.59 views

CVE-2010-4584

Opera CVE-2010-4584 describes a vulnerability in Opera prior to version 11.00 where, when Opera Turbo is enabled, the browser does not properly present information about problematic X.509 certificates on HTTPS sites, potentially enabling remote attackers to spoof trusted content via a crafted sit...

2.6CVSS7.1AI score0.00177EPSS
Exploits0References5Affected Software1
Rows per page
Query Builder