Congress to Apple: You Got Some Splainin to do

In a letter to the chairman of the Federal Trade Commission, Jay Inslee D-Wash. expressed concerns regarding recent revelations that Apple products have been continuously tracking and recording user location information with questionable consent and without an easy way to opt out of such tracking...

Apple Admits to Bugs, Denies Tracking iPhone Users

Apple finally sounded off on its phone tracking imbroglio on Wednesday telling iPhone customers that “it’s the location, stupid.” The company claims its tracking feature is designed to collect data on cell towers and wifi hotspots, not users. After more than a week of silence, the notoriously...

Users File Suit Against Apple Over iPhone Tracking

A pair of Apple customers has filed a lawsuit against the company, alleging that Apple is invading their privacy by collecting location data about iPhone and iPad users without their knowledge. The suit follows the revelation last week by security researchers that Apple is collecting and storing...

Report: iPhones Track Movement Even With Location Services Disabled

The ongoing controversy over a hidden feature in Apple iPhones that tracks and stores the whereabouts of the phone became a bit murkier, after an analysis by the Wall Street Journal found that Apple may not be abiding by its own user privacy agreement by continuing to track its customers’...

Synergy Detection (Windows SMB Login)

Detects the installed version of Synergy. The script logs in via smb, searches for Synergy in the registry and gets the version from registry. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

Congressman Calls on Apple to Explain iPhone Tracking

Congress stepped into the brewing controversy over a recently disclosed tracking feature in most versions of Apple’s popular iPhone. Representative Ed Markey D-Mass has written a letter to Apple CEO Steve Jobs asking for more information about the feature PDF, suggesting that it may run afoul of...

USN-1118-1: OpenSLP vulnerability

It was discovered that OpenSLP incorrectly handled certain corrupted messages. A remote attacker could send a specially crafted packet to the OpenSLP server and cause it to hang, leading to a denial of service...

Vulnerabilities in Microsoft Reader and HIS

Microsoft Reader is a PC/tablet software for reading the ebooks in LIT format and the Audible audio books. The following are a couple of integer overflows, an heap and an array indexing overflow and the writing of a NULL byte in an arbitrary memory location: http://aluigi.org/adv/msreader1-adv.tx...

Pandora Mobile App Transmits Gobs Of Personal Data

A popular free mobile application from online music service Pandora.com that is the subject of a Grand Jury investigation into loose data privacy practices in the mobile application market confirms that the application silently sends reams of sensitive data to advertisers. The analysis was...

UBUNTU-CVE-2011-1185

Google Chrome before 10.0.648.127 does not prevent 1 navigation and 2 close operations on the top location of a sandboxed frame, which has unspecified impact and remote attack vectors...

CentOS Update for firefox CESA-2010:0966 centos4 i386

Check for the Version of firefox OpenVAS Vulnerability Test CentOS Update for firefox CESA-2010:0966 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Microsoft Internet Explorer - MHTML Protocol Handler Cross-Site Scripting

Microsoft Internet Explorer - MHTML Protocol Handler Cross-Site Scripting Hacking with mhtml protocol handler Author: www.80vul.com Email:5up3rh3igmail.com Release Date: 2011/1/15 References: http://www.80vul.com/mhtml/Hacking%20with%20mhtml%20protocol%20handler.txt Ph4nt0m Webzine 0x05...

RealNetworks RealPlayer Code Execution

Written by Sean de Regge seanderegge hotmail.com Exploit for the parameter injection bug in Realplayers RecordClip activeX function and firefox plugin http://www.zerodayinitiative.com/advisories/ZDI-10-211/ C:\Program Files\Real\RealPlayer\RecordingManager.exe has 2 interesting switches: /t will...

27C3: GSM cell phones even easier to tap !

At the 27th Chaos Communication Congress 27C3 hacker conference, security researchers demonstrated how open source software on a number of revamped, entry-level cell phones can decrypt and record mobile phone calls in the GSM network. Using a normal laptop and a homemade monitoring device, team...

CVE-2010-4158

The skrunfilter function in net/core/filter.c in the Linux kernel before 2.6.36.2 does not check whether a certain memory location has been initialized before executing a 1 BPFSLDMEM or 2 BPFSLDXMEM instruction, which allows local users to obtain potentially sensitive information from kernel stac...

Design/Logic Flaw

The skrunfilter function in net/core/filter.c in the Linux kernel before 2.6.36.2 does not check whether a certain memory location has been initialized before executing a 1 BPFSLDMEM or 2 BPFSLDXMEM instruction, which allows local users to obtain potentially sensitive information from kernel stac...

CVE-2010-4158

The CVE-2010-4158 issue affects the Linux kernel (pre-2.6.36.2) where sk_run_filter in net/core/filter.c may execute BPF_S_LD_MEM or BPF_S_LDX_MEM before a memory location is initialized. This can allow local users to read potentially sensitive kernel stack memory via a crafted socket filter. The...

CVE-2010-4158

The skrunfilter function in net/core/filter.c in the Linux kernel before 2.6.36.2 does not check whether a certain memory location has been initialized before executing a 1 BPFSLDMEM or 2 BPFSLDXMEM instruction, which allows local users to obtain potentially sensitive information from kernel stac...

Novell iPrint Client Netscape/ActiveX Location Header Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell iPrint Client. Authentication is not required to exploit this vulnerability. The flaw exists within the nipplib.dll component which is used by both the Mozilla and IE browser plugins for...

CVE-2010-3774

The NSSecurityCompareURIs function in netwerk/base/public/nsNetUtil.h in Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, does not properly handle 1 about:neterror and 2 about:certerror pages, which allows remote attackers to spoof the location bar via a crafted...