739 matches found
ardeacore 2.2 - Remote File Inclusion Vulnerability
No description provided by source. 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ /'\ \ /\ \ \ \ /'\ 0 0 \ \ /\ /\ \ \ \ /\ \ \ /\ /\ \ \ \ \ \ \ / 1 1 \ \ \ \\ \ \ /\ \...
RobotFTP Server 1.0/2.0 - Remote Pre-authenticated Command Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9732/info It has been reported that Opt-X may be prone to a remote file include vulnerability that may allow an attacker to include malicious files containing arbitrary code to be executed on a vulnerable system. The...
Facebook To Use Your Web Browsing History for Targeted Ads, Here's How To Opt-Out Now
Surfing the Internet?? Facebook CEO Mark Zuckerberg is watching your every move on Web, and this time even more closure. It’s not surprising that Facebook collects data of its 1.3 billion users, just like everyone else, which the company has said it only holds onto your data for security and...
Facebook Set to Let Users Edit Own Advertising Info
Facebook announced today it will soon be rolling out a new feature to give users more control when it comes to the types of advertisements they see on the site. If users are tired of getting barraged with ads for shoes, video games or discount plane tickets, they’ll not only be able to stop the...
With a Warning FTC Approves WhatsApp, Facebook Union
Facebook’s acquisition of messaging application WhatsApp was approved by the Federal Trade Commission late last week, but not without a stern notice from the agency, which warned that it would be keeping a watchful eye on the two companies going forward. In a letter addressed to officials at...
CVE-2013-0727
Multiple untrusted search path vulnerabilities in Global Mapper 14.1.0 allow local users to gain privileges via a Trojan horse 1 dwmapi.dll or 2 ibfs32.dll file in the current working directory, as demonstrated by a directory that contains a .gmc, .gmg, .gmp, .gms, .gmw, or .opt file...
Facebook Partners with Data Brokers for Better Ads
In late February, Facebook forged a partnership with four of its most prolific data brokers in order to more accurately target users with relevant advertisements. Facebook announced on Feb. 27 that it would be expanding its custom audiences tool, an earlier initiative designed to target users wit...
Ray Sharp DVR Password Retriever
This module takes advantage of a protocol design issue with the Ray Sharp based DVR systems. It is possible to retrieve the username and password through the TCP service running on port 9000. Other brands using this platform and exposing the same issue may include Swann, Lorex, Night Owl, Zmodo,...
Privacy Protests Cause Instagram to Rethink Changes
Instagram cofounder Kevin Systrom responded to a firestorm of protests from users of the photo-sharing social network’s proposed terms of service changes that could impact the privacy of its users. Systrom blamed confusing legal jargon for the misunderstanding and said Instagram would not be...
Instagram Privacy Changes Start Clock Ticking for Users Who Want to Opt-Out
Instagram users have some soul searching to do between now and Jan. 16 when new terms of service kick in that give the photo-sharing social network the right to sell personal photos without the user’s permission or compensating them. The most startling change reads: “To help us deliver interestin...
EFF Raises Questions on Privacy Leaks in Ubuntu
The EFF is warning users of Ubuntu’s latest release that the open-source operating system sends their search queries to third parties, including Amazon, by default, and that some of their search results may be viewable by other users on the same network. The privacy leaks are present in Ubuntu...
FTC Finalizes Facebook Settlement over Privacy
The U.S. Federal Trade Commission today announced it had finalized its settlement with Facebook, which is now subject to biennial privacy audits for the next 20 years and requires its nearly 1 billion users opt in to any future privacy policy changes. The settlement announcement follows news that...
WordPress G-Lock Double Opt-in Manager 2.6.2 SQL Injection
============================================================================ WordPress G-Lock Double Opt-in Manager Plugin SQL Injection version the admin-ajax will run the ajaxbackend eventually, and then all subscribers will be deleted, even though u r only a subscriber user!!!...
WordPress Plugin G-Lock Double Opt-in Manager - SQL Injection
source: https://www.securityfocus.com/bid/54767/info G-Lock Double Opt-in Manager plugin for WordPress is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromi...
Mozilla Weighing Opt-In Requirement for Web Plugins
Mozilla is developing a feature in Firefox that would require some user interaction in order for Flash ads, Java scripts and other content that uses plugins to play. In addition to easing system slowdowns, the opt-in for Web plugins is expected to reduce threats posed by exploiting security...
Path Reverses Course After Revelation That App Uploads User Contacts
After a researcher discovered that any person who decides to download the Path app onto their mobile device is unknowingly sending their address book to a server belonging to the social network and photo-sharing service without prior notification, the company has released a new version of the app...
Google to Allow Users to Opt Out of WiFi Location Mapping System
Google, which has faced a pile of criticism over its privacy policies and practices, especially as they relate to wireless and mobile devices, says it is changing the way that it maps people’s wireless access points in its efforts to provide accurate location information. The company said it is n...
Report: FTC Nears Deal with Facebook For Opt-In Privacy Changes
The deal will settle an FTC case alleging privacy violations on the social network by forcing users to opt in to any changes to default privacy settings, according to a report in the Wall Street Journal. The FTC inquiry dates back more than two years, and followed changes to the default privacy...
Click&Email - Multiple SQL Injection Vulnerabilities
Document Title: =============== Click&Email - Multiple SQL Injection Vulnerabilities Release Date: ============= 2011-07-04 Vulnerability Laboratory ID VL-ID: ==================================== 219 Product & Service Introduction: =============================== ClickAndEmail is a full featured...
Mobile Devices Key To Facebook's New Log-In Approval Feature
Facebook is implementing a new opt-in, two-factor verification security feature they are calling log-in approval. The new feature will require users to enter a unique, one time code, which Facebook will send via SMS whenever a user tries to access his or her account from a new and/or unrecognized...