5185 matches found
SeaMonkey < 2.11.0 Multiple Vulnerabilities
The installed version of SeaMonkey is earlier than 2.11.0. Such versions are potentially affected by the following security issues : - Several memory safety issues exist, some of which could potentially allow arbitrary code execution. CVE-2012-1948, CVE-2012-1949 - Several memory safety issues...
CVE-2012-1963
The Content Security Policy CSP functionality in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 does not properly restrict the strings placed into the blocked-uri parameter of a violatio...
Design/Logic Flaw
The Content Security Policy CSP functionality in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 does not properly restrict the strings placed into the blocked-uri parameter of a violatio...
CVE-2012-1963
CVE-2012-1963 is a real vulnerability described in multiple sources. It affects Mozilla Firefox 4.x–13.0, Firefox ESR 10.x prior to 10.0.6, Thunderbird 5.0–13.0, Thunderbird ESR 10.x prior to 10.0.6, and SeaMonkey before 2.11. The issue is that the Content Security Policy (CSP) blocked-uri string...
Mozilla: Content Security Policy 1.0 implementation errors cause data leakage (MFSA 2012-53)
The Content Security Policy CSP functionality in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 does not properly restrict the strings placed into the blocked-uri parameter of a violatio...
CVE-2012-1963
The Content Security Policy CSP functionality in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 does not properly restrict the strings placed into the blocked-uri parameter of a violatio...
Content Security Policy 1.0 implementation errors cause data leakage — Mozilla
Security researcher Karthikeyan Bhargavan of Prosecco at INRIA reported Content Security Policy CSP 1.0 implementation errors. CSP violation reports generated by Firefox and sent to the "report-uri" location include sensitive data within the "blocked-uri" parameter. These include fragment...
10000 Twitter User oauth token hacked and Exposed by Anonymous
Anonymous Hackers, with Twitter account "LulzsecReborn" Hack into TweetGif https://tweetgif.com and Hack complete Database, Later they publish that on the Internet also. TweetGif is a website which allows you to use animated GIF image as your twitter picture. LulzSec Reborn, a 3.0 version of the...
Google Open Redirects
Hi List, Here's another open redirect that works. https://accounts.google.com/o/oauth2/auth?redirecturi=http://www.bing.com This works as well. https://www.google.com/search?btnI&q=http://www.bing.com -- Regards, Riyaz Walikar...
(TAD-2011-001) Vulnerability in HTC Peep: Twitter Credentials Disclosure
Vulnerability in HTC Peep: Twitter Credentials Disclosure http://blog.taddong.com/2011/02/vulnerability-in-htc-peep-twitter.html Title: Twitter credentials disclosure in HTC Peep mobile app default HTC Twitter client Vulnerability ID: TAD-2011-001 Credits: This vulnerability was discovered by...
Drupal 6.15 Twitter module v 6.x-2.6 clear text Vulnerability
Exploit for unknown platform in category web applications ====================================================================================== Drupal 6.15 Twitter module version 6.x-2.6 clear text credential storage vulnerability...
Drupal Twitter Module Credential Disclosure
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The full text of this advisory can also be found at http://www.madirish.net/?article=447 Description of Vulnerability: - ----------------------------- Drupal http://drupal.org is a robust content management system CMS written in PHP and MySQL that...
Password Protocol OAuth Gets New Variant
The developers behind the OAuth protocol have developed a new variant called OAuth WRAP that is simpler and easier to implement. It’s a stop-gap solution that will enable broader OAuth adoption while OAuth 2.0, the next generation of the specification, is devised by a working group that is...
Fedora Core 11 FEDORA-2009-10539 (perl-Net-OAuth)
The remote host is missing an update to perl-Net-OAuth announced via advisory FEDORA-2009-10539. OpenVAS Vulnerability Test $Id: fcore200910539.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-10539 perl-Net-OAuth Authors: Thomas Reinke Copyright:...
Fedora Core 11 FEDORA-2009-10539 (perl-Net-OAuth)
The remote host is missing an update to perl-Net-OAuth announced via advisory FEDORA-2009-10539. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright...
Fedora Core 10 FEDORA-2009-10520 (perl-Net-OAuth)
The remote host is missing an update to perl-Net-OAuth announced via advisory FEDORA-2009-10520. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright...
Fedora Core 10 FEDORA-2009-10520 (perl-Net-OAuth)
The remote host is missing an update to perl-Net-OAuth announced via advisory FEDORA-2009-10520. OpenVAS Vulnerability Test $Id: fcore200910520.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-10520 perl-Net-OAuth Authors: Thomas Reinke Copyright:...
Fedora 11 : perl-Net-OAuth-0.19-1.fc11 (2009-10539)
A session fixation vulnerability was discovered in OAuth protocol 1.0. Perl OAuth bindings were updated to support the new version of the OAauth protocol that was issued to address the vulnerability. All OAuth users are strongly advised to update to this updated package and protocol version 1.0a...
Fedora 10 : perl-Net-OAuth-0.19-1.fc10 (2009-10520)
A session fixation vulnerability was discovered in OAuth protocol 1.0. Perl OAuth bindings were updated to support the new version of the OAauth protocol that was issued to address the vulnerability. All OAuth users are strongly advised to update to this updated package and protocol version 1.0a...
[SECURITY] Fedora 11 Update: perl-Net-OAuth-0.19-1.fc11
Perl implementation of OAuth, an open protocol to allow secure API authentication in a simple and standard method from desktop and web applications. In practical terms, a mechanism for a Consumer to request protected resources from a Service Provider on behalf of a user...