Oracle Linux 5 : java-1.7.0-openjdk (ELSA-2013-0958)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-0958 advisory. 1.7.0.25-2.3.10.4.0.1.el59 - Add oracle-enterprise.patch - Fix DISTRONAME to 'Enterprise Linux' 1.7.0.25-2.3.10.4.el5 - updated to newer IcedTea7-fores...

Threat Outbreak Alert: Fake Fraud Complaint Information Email Messages on July 3, 2013

Medium Alert ID: 29937 First Published: 2013 July 3 14:41 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a complaint case claim notification for the recipient. The text in the email message attempts to convince the...

Samsung Galaxy S4 SMS欺骗漏洞

BUGTRAQ ID: 60756 Samsung Galaxy S是三星的Android系统的智能手机。 Samsung Galaxy S4在Cloud Backup功能中存在SMS欺骗漏洞，攻击者通过发送特制的SMS到受影响设备，利用此漏洞可进行网络钓鱼攻击。 0 Samsung Galaxy S4 厂商补丁： Samsung ------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

RHEL 5 : java-1.7.0-openjdk (RHSA-2013:0958)

Updated java-1.7.0-openjdk packages that fix various security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

Iranian Gmail users targeted by politically motivated phishing attack

Google says tens of thousands of Gmail accounts belonging to Iranian users have been targeted in an politically motivated hacking campaign in the weeks leading up to the country's closely watched presidential elections. For the last three weeks, the search giant said it has "detected and disrupte...

Telaen 2.7.x - Open Redirection

Telaen 2.7.x - Open Redirection source: https://www.securityfocus.com/bid/60290/info Telaen is prone to an open-redirection vulnerability. An attacker can leverage this issue by constructing a crafted URI and enticing a user to follow it. When an unsuspecting victim follows the link, they may be...

Sleipnir Mobile for Android地址栏欺骗漏洞(CVE-2013-2317)

BUGTRAQ ID: 60200 CVECAN ID: CVE-2013-2317 Sleipnir Mobile for Android一款手机Android Web浏览器。 Sleipnir Mobile for Android 2.10.0之前版本、Sleipnir Mobile Black Edition for Android 2.10.0之前版本存在地址栏欺骗漏洞，攻击者可利用此漏洞进行钓鱼等其他内容欺骗攻击。 0 Sleipnir Mobile for Android Sleipnir Mobile for Android 厂商补丁： Sleipnir Mobile fo...

Financial Times hacked by Syrian Electronic Army

The Financial Times has become the latest news outlet to be hacked by supporters of the Syrian president Bashar al-Assad, following a phishing attack on the company’s email accounts. The posh broadsheet's Tech Blog - at http://blogs.FT.com/beyond-brics was compromised to run stories headlined...

'The Onion' Twitter Account Hacked via Phishing Attack

The hacktivist group Syrian Electronic Army SEA briefly took over the Twitter account of the satirical news publication The Onion, posting a series of anti-Israeli joke stories and an anti-Obama meme image. In a post on The Onion tech team's GitHub blog, the fake news site explains that the Syria...

'The Onion' Twitter Account Hacked via Phishing Attack

The hacktivist group Syrian Electronic Army SEA briefly took over the Twitter account of the satirical news publication The Onion, posting a series of anti-Israeli joke stories and an anti-Obama meme image. In a post on The Onion tech team's GitHub blog, the fake news site explains that the Syria...

How the Syrian Electronic Army Hacked the Onion

A pro-Syrian regime hacker collective known as the Syrian Electronic Army SEA recently compromised the Twitter, Google Apps and other accounts belonging to The Onion, a long-running satirical news publication in the U.S. Like The New York Times before it, The Onion published a fascinating...

Syrian Hackers Hijack AP Twitter Tweet Obama Injured by Bomb

Twitter is facing increased pressure to beef up authentication for users after the hijacking of another high-profile account yesterday caused some temporary tremors on the stock market. The social network has reportedly been testing two-factor authentication internally; Twitter lags behind Google...

CVE-2013-0794

CVE-2013-0794 affects Mozilla Firefox (pre-20.0) and SeaMonkey (pre-2.17) where origin spoofing of tab-modal dialogs enables phishing via crafted sites. Root cause: tab-modal dialogs did not enforce origin checks, allowing a remote site to spoof the dialog origin. Impact: potential credential/phi...

Cross-site scripting (XSS) using timed history navigations — Mozilla

Security researcher Mariusz Mlynski reported a method to use browser navigations through history to load an arbitrary website with that page's baseURI property pointing to another site instead of the seemingly loaded one. The user will continue to see the incorrect site in the addressbar of the...

Hacking Google users with Google's GooPass phishing attack

Google Drive is the new home for Google Docs, that users can access everywhere for Storing files safely. In a recent demonstration hacker successfully performed an attack on Google Docs to trick users to grab their Facebook, Gmail, Yahoo credentials with Credit Card Information. Security research...

thunderbird security update

CentOS Errata and Security Advisory CESA-2013:0272 An updated thunderbird package that fixes several security issues is now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring...

CVE-2013-0776

Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3, Thunderbird ESR 17.x before 17.0.3, and SeaMonkey before 2.16 allow man-in-the-middle attackers to spoof the address bar by operating a proxy server that provides a 407 HTTP status code accompanied by web...

Cross site scripting

Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3, Thunderbird ESR 17.x before 17.0.3, and SeaMonkey before 2.16 allow man-in-the-middle attackers to spoof the address bar by operating a proxy server that provides a 407 HTTP status code accompanied by web...

CVE-2013-0776

CVE-2013-0776 affects Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3, Thunderbird ESR 17.x before 17.0.3, and SeaMonkey before 2.16. The flaw allows a man-in-the-middle attacker to spoof the address bar by using a proxy server that returns a 407 HTTP status...

Mozilla: Phishing on HTTPS connection through malicious proxy (MFSA 2013-27)

Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3, Thunderbird ESR 17.x before 17.0.3, and SeaMonkey before 2.16 allow man-in-the-middle attackers to spoof the address bar by operating a proxy server that provides a 407 HTTP status code accompanied by web...