mozilla -- update to HTTPS certificate blacklist

The Mozilla Project reports: MFSA 2011-11 Update to HTTPS certificate blacklist...

Twitter offers encryption to beat hackers !

Twitter is offering users better protection from hackers with a new option to always use an encrypted connection to access its microblogging service. The measure is particulary designed to defend those who access Twitter via unsecured public Wi-Fi networks, which can make it easy for hackers to...

Twitter Gives Users Option to Turn On HTTPS by Default

Twitter has changed the way that users access the company’s main site, now giving them the option to enable HTTPS by default, forcing a secure connection for most interaction with the service. However, the change does not apply to all of the popular apps users employ to access Twitter on...

[security bulletin] HPSBMA02629 SSRT100381 rev.1 - HP Power Manager (HPPM) Running on Linux and Windows, Cross Site Request Forgery (CSRF)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02711131 Version: 1 HPSBMA02629 SSRT100381 rev.1 - HP Power Manager HPPM Running on Linux and Windows, Cross Site Request Forgery CSRF NOTICE: The information in this Security Bulletin should be...

(TAD-2011-001) Vulnerability in HTC Peep: Twitter Credentials Disclosure

Vulnerability in HTC Peep: Twitter Credentials Disclosure http://blog.taddong.com/2011/02/vulnerability-in-htc-peep-twitter.html Title: Twitter credentials disclosure in HTC Peep mobile app default HTC Twitter client Vulnerability ID: TAD-2011-001 Credits: This vulnerability was discovered by...

www.seth.pt Hacked By Pak Cyber Combat Squad !

www.seth.pt Hacked By Pak Cyber Combat Squad ! Links : https://www.seth.pt/pccs.html Mirror : https://mirror-az.com/mirror/?id=11180...

Facebook Enhances Security With HTTPS, Remote Disconnect !

Maybe it was Mark Zuckerberg fan site hack that led upgrade security of Facebook, but for some reason, users now have access HTTPS. Facebook will leave the office during the next few weeks, which means that user activity is now encrypted when it hits a Web server. This is mainly useful when you...

A Day After CEO Is Hacked, Launches New Facebook Security Features !

Coincidence? Unfortunately, probably yes. One day, when your fan site of Mark Zuckerberg has allegedly violated, Facebook has introduced two new security measures. If these guys react or what? They also got "must be used for online banking transactions, such as safety tips. Immediate effect, user...

Facebook Announces Social Verification and HTTPS option

Facebook announced yesterday that they will begin offering secure HTTPS connections and a new verification method called social verification to users of the most popular social network in the world. The move comes, conveniently, just a day after Facebook CEO and founder Mark Zuckerberg’s personal...

Facebook Kills Firesheep With New Secure Browsing Feature

Facing a wave of criticism for not offering a secured browsing option, Facebook has finally added a new feature to browse the popular social network on a secure connection https. However, the https:// browsing is not turned on by default and must be manually activated from an “Account Settings”...

Facebook Used Social Authentication To Shield Tunisian Protesters

Faced with the Tunisian government’s efforts to hack the Facebook accounts of protesters, Facebook’s security team stepped up its use of social authentication to help secure protester’s accounts. A new account of the role of the Facebook in aiding widespread protests against the regime in Tunisia...

Hastymail2 < RC8 Security Bypass Vulnerability

Hastymail2 is prone to a security bypass vulnerability. Copyright C 2011 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you c...

CVE-2009-5051

Hastymail2 before RC 8 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session...

Session fixation

Hastymail2 before RC 8 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session...

CVE-2009-5051

Hastymail2 pre-RC8 is vulnerable: in HTTPS sessions the session cookie is not marked Secure, enabling potential interception of the cookie in transit. The OpenVAS entries describe a session-cookie security bypass; no concrete exploit details or patch/version fixes are provided in the supplied doc...

CVE-2009-5051

Hastymail2 before RC 8 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session...

Oracle Database and Enterprise Manager Grid Control Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle Database 11g. Authentication is not required to exploit this vulnerability. The specific flaw exists within a JSP script exposed via an HTTPS server running by default on TCP port 1158. The...

CVE-2011-0400

Cookie.php in Piwik before 1.1 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session...

Session fixation

Cookie.php in Piwik before 1.1 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session...

CVE-2011-0400

Cookie.php in Piwik before 1.1 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session...