Gallo 0.1.0 - Remote File Include Vulnerability

No description provided by source. 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ /'\ \ /\ \ \ \ /'\ 0 0 \ \ /\ /\ \ \ \ /\ \ \ /\ /\ \ \ \ \ \ \ / 1 1 \ \ \ \\ \ \ /\ \...

RobotFTP Server 1.0/2.0 - Remote Pre-authenticated Command Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9732/info It has been reported that Opt-X may be prone to a remote file include vulnerability that may allow an attacker to include malicious files containing arbitrary code to be executed on a vulnerable system. The...

CSO Lanifex Outreach Project Tool 0.946 b Request Origin Spoofing Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6630/info It has been reported that OPT accepts the values supplied supplied by users in HTTP headers as the originating IP address of a request. It is possible for a remote host to supply a fake IP address in one of thes...

Facebook To Use Your Web Browsing History for Targeted Ads, Here's How To Opt-Out Now

Surfing the Internet?? Facebook CEO Mark Zuckerberg is watching your every move on Web, and this time even more closure. It’s not surprising that Facebook collects data of its 1.3 billion users, just like everyone else, which the company has said it only holds onto your data for security and...

Facebook Set to Let Users Edit Own Advertising Info

Facebook announced today it will soon be rolling out a new feature to give users more control when it comes to the types of advertisements they see on the site. If users are tired of getting barraged with ads for shoes, video games or discount plane tickets, they’ll not only be able to stop the...

With a Warning FTC Approves WhatsApp, Facebook Union

Facebook’s acquisition of messaging application WhatsApp was approved by the Federal Trade Commission late last week, but not without a stern notice from the agency, which warned that it would be keeping a watchful eye on the two companies going forward. In a letter addressed to officials at...

PT-2013-5315

Name of the Vulnerable Software and Affected Versions Sophos Web Appliance versions prior to 3.7.9.1 Sophos Web Appliance version 3.8 before 3.8.1.1 Description The issue allows local users to gain privileges via shell metacharacters in the second argument passed to the close connections function...

CVE-2013-1650: Undefined Security Weakness

Open-Xchange Server before 6.20.7 rev14, 6.22.0 before rev13, and 6.22.1 before rev14 uses weak permissions group "other" readable under opt/open-xchange/etc/, which allows local users to obtain sensitive information via standard filesystem operations...

PT-2013-4478

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.8.x through 1.8.6 Description The issue is related to the dissect ccp bsdcomp opt function in the PPP CCP dissector, which does not properly terminate a bit-field list. This allows remote attackers to cause a denial of...

CVE-2013-0727

Multiple untrusted search path vulnerabilities in Global Mapper 14.1.0 allow local users to gain privileges via a Trojan horse 1 dwmapi.dll or 2 ibfs32.dll file in the current working directory, as demonstrated by a directory that contains a .gmc, .gmg, .gmp, .gms, .gmw, or .opt file...

Facebook Partners with Data Brokers for Better Ads

In late February, Facebook forged a partnership with four of its most prolific data brokers in order to more accurately target users with relevant advertisements. Facebook announced on Feb. 27 that it would be expanding its custom audiences tool, an earlier initiative designed to target users wit...

Ray Sharp DVR Password Retriever

This module takes advantage of a protocol design issue with the Ray Sharp based DVR systems. It is possible to retrieve the username and password through the TCP service running on port 9000. Other brands using this platform and exposing the same issue may include Swann, Lorex, Night Owl, Zmodo,...

PT-2013-1984

Name of the Vulnerable Software and Affected Versions Wikidforum version 2.10 Description The issue concerns SQL injection vulnerabilities in the advanced search functionality. Remote attackers can execute arbitrary SQL commands by manipulating the select sort or opt search select parameters...

Privacy Protests Cause Instagram to Rethink Changes

Instagram cofounder Kevin Systrom responded to a firestorm of protests from users of the photo-sharing social network’s proposed terms of service changes that could impact the privacy of its users. Systrom blamed confusing legal jargon for the misunderstanding and said Instagram would not be...

Instagram Privacy Changes Start Clock Ticking for Users Who Want to Opt-Out

Instagram users have some soul searching to do between now and Jan. 16 when new terms of service kick in that give the photo-sharing social network the right to sell personal photos without the user’s permission or compensating them. The most startling change reads: “To help us deliver interestin...

EFF Raises Questions on Privacy Leaks in Ubuntu

The EFF is warning users of Ubuntu’s latest release that the open-source operating system sends their search queries to third parties, including Amazon, by default, and that some of their search results may be viewable by other users on the same network. The privacy leaks are present in Ubuntu...

FTC Finalizes Facebook Settlement over Privacy

The U.S. Federal Trade Commission today announced it had finalized its settlement with Facebook, which is now subject to biennial privacy audits for the next 20 years and requires its nearly 1 billion users opt in to any future privacy policy changes. The settlement announcement follows news that...

WordPress G-Lock Double Opt-in Manager 2.6.2 SQL Injection

============================================================================ WordPress G-Lock Double Opt-in Manager Plugin SQL Injection version the admin-ajax will run the ajaxbackend eventually, and then all subscribers will be deleted, even though u r only a subscriber user!!!...

WordPress Plugin G-Lock Double Opt-in Manager - SQL Injection

source: https://www.securityfocus.com/bid/54767/info G-Lock Double Opt-in Manager plugin for WordPress is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromi...

Mozilla Weighing Opt-In Requirement for Web Plugins

Mozilla is developing a feature in Firefox that would require some user interaction in order for Flash ads, Java scripts and other content that uses plugins to play. In addition to easing system slowdowns, the opt-in for Web plugins is expected to reduce threats posed by exploiting security...