PT-2011-4091

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 13.0.782.107 Description A buffer overflow issue exists in the inspector serialization functionality. This could allow user-assisted remote attackers to have an unspecified impact via unknown vectors...

Holes in FBI cyber security !!

About a third of the FBI agents working on cyber investigations lack the networking and counterintelligence expertise to investigate national security intrusions, the Justice Department's inspector general concluded in a new report. The report said the FBI's practice of rotating agents among...

Apple Safari Webkit Multiple Vulnerabilities (Mar 2011)

Apple Safari web browser is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:safari";...

UBUNTU-CVE-2011-0169

WebKit in Apple Safari before 5.0.4, when the Web Inspector is used, does not properly handle the window.console.inspectorCommandLineAPI property, which allows user-assisted remote attackers to bypass the Same Origin Policy and conduct cross-site scripting XSS attacks via a crafted web site...

CVE-2011-0169

WebKit in Apple Safari before 5.0.4, when the Web Inspector is used, does not properly handle the window.console.inspectorCommandLineAPI property, which allows user-assisted remote attackers to bypass the Same Origin Policy and conduct cross-site scripting XSS attacks via a crafted web site...

CVE-2011-0169: Improper Neutralization of Input During Web Page Generation

WebKit in Apple Safari before 5.0.4, when the Web Inspector is used, does not properly handle the window.console.inspectorCommandLineAPI property, which allows user-assisted remote attackers to bypass the Same Origin Policy and conduct cross-site scripting XSS attacks via a crafted web site...

PT-2011-2151

Name of the Vulnerable Software and Affected Versions Apple Safari versions prior to 5.0.4 Description The issue allows user-assisted remote attackers to bypass the Same Origin Policy and conduct cross-site scripting XSS attacks via a crafted web site, when the Web Inspector is used. This is due ...

UK's Cyber Cops Take Down 1800 Bogus Websites !

Detectives from London's Metropolitan Police Service's cyber crime unit have in the past year shut down 1,800 bogus websites, which were either fraudulent or advertising counterfeit goods, ranging from tickets to Premier League soccer games to Ugg boots and jewelry from Tiffany & Co. The...

CVE-2010-3851

libguestfs before 1.5.23, as used in virt-v2v, virt-inspector 1.5.3 and earlier, and possibly other products, when a raw-format disk image is used, allows local guest OS administrators to read files from the host via a crafted 1 qcow2, 2 VMDK, or 3 VDI header, related to lack of support for a dis...

PT-2010-5120

Name of the Vulnerable Software and Affected Versions libguestfs versions prior to 1.5.23 virt-v2v versions prior to 1.5.23 virt-inspector versions prior to 1.5.3 Description The issue allows local guest OS administrators to read files from the host via a crafted qcow2, VMDK, or VDI header when a...

CVE-2010-3851: Exposure of Sensitive Information to an Unauthorized Actor

libguestfs before 1.5.23, as used in virt-v2v, virt-inspector 1.5.3 and earlier, and possibly other products, when a raw-format disk image is used, allows local guest OS administrators to read files from the host via a crafted 1 qcow2, 2 VMDK, or 3 VDI header, related to lack of support for a dis...

Inspector General Finds Vulns at US-CERT

A scan of IT systems at US-CERT, the Homeland Security Department’s primary operational cybersecurity agency, found hundreds of vulnerabilities that could allow someone to compromise data, according to a recent inspector general’s report. Read the full article. Government Computer News...

CentOS Update for seamonkey CESA-2010:0557 centos3 i386

Check for the Version of seamonkey OpenVAS Vulnerability Test CentOS Update for seamonkey CESA-2010:0557 centos3 i386 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify ...

Inspector General Talks Limitations of US-CERT

DHS Inspector General Richard Skinner spoke before the House Committee on Homeland Security yesterday and detailed his office’s latest report on the progress US-CERT has made in securing cyberspace and included noting limitations with enforcement, staffing and strategic planning. Read the full...

Safari 4.0.4 Crash

No description provided by source. The following piece of javascript will crash Safari nicely when triggered using one \ of the methods described below. With my limited knowledge I am unable to tell if \ it's exploitable or not. I therefore turn it over to "the internet". tested on \ Safari 4.0.4...

SLES9: Security update for epiphany

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: mozilla mozilla-devel mozilla-dom-inspector mozilla-irc mozilla-mail mozilla-venkman For more information, please visit the referenced security advisories...

SLES9: Security update for epiphany

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: mozilla mozilla-devel mozilla-dom-inspector mozilla-irc mozilla-mail mozilla-venkman For more information, please visit the referenced security advisories...

SLES9: Security update for Mozilla

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: mozilla-venkman mozilla-cs mozilla mozilla-devel mozilla-hu mozilla-ja mozilla-mail mozilla-ko mozilla-dom-inspector mozilla-deat mozilla-irc For more...

SLES9: Security update for Mozilla suite

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: mozilla-hu mozilla-deat mozilla-mail mozilla-irc mozilla-dom-inspector mozilla-venkman mozilla-devel mozilla-calendar mozilla-cs mozilla For more information...

SLES9: Security update for Mozilla suite

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: mozilla-irc mozilla-calendar mozilla-dom-inspector mozilla mozilla-venkman mozilla-mail More details may also be found by searching for keyword 5013299 withi...