Yahoo to Implement Do Not Track

Yahoo has decided that it’s now time to start implementing a Do Not Track system across its various Web properties. The company is one of the last large Web content providers to officially commit to using a DNT technology, and Yahoo said that it plans to have the system implemented by early summe...

Apache Struts 2 vulnerable to an arbitrary Java method execution

Overview Apache Struts 2 contains an arbitrary Java method execution vulnerability. Apache Struts 2 is a framework to create Java web applications. Apache Struts 2 contains an arbitrary Java method execution vulnerability due to improper conversion in OGNL expression if a non-string property is...

Ubuntu utilities security vulnerabilities

AccountsService and Software Properties privlege escalation...

Ubuntu 10.04 LTS / 10.10 / 11.04 / 11.10 : software-properties vulnerability (USN-1352-1)

David Black discovered that Software Properties incorrectly validated server certificates when performing secure connections to download PPA GPG key fingerprints. If a remote attacker were able to perform a man-in-the-middle attack, this flaw could be exploited to install altered package reposito...

Ubuntu Update for software-properties USN-1352-1

Ubuntu Update for Linux kernel vulnerabilities USN-1352-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN13521.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for software-properties USN-1352-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH,...

Ubuntu: Security Advisory (USN-1352-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-1352-1: Software Properties vulnerability

David Black discovered that Software Properties incorrectly validated server certificates when performing secure connections to download PPA GPG key fingerprints. If a remote attacker were able to perform a machine-in-the-middle attack, this flaw could be exploited to install altered package...

CVE-2011-4407

ppa.py in Software Properties before 0.81.13.3 does not validate the server certificate when downloading PPA GPG key fingerprints, which allows man-in-the-middle MITM attackers to spoof GPG keys for a package repository...

Design/Logic Flaw

Tor before 0.2.2.34, when configured as a client or bridge, sends a TLS certificate chain as part of an outgoing OR connection, which allows remote relays to bypass intended anonymity properties by reading this chain and then determining the set of entry guards that the client or bridge had...

amqp-info NSE Script

Gathers information a list of all server properties from an AMQP advanced message queuing protocol server. See for details on the server-properties field. Script Arguments amqp.version See the documentation for the amqp library. Example Usage nmap --script amqp-info -p5672 Script Output 5672/tcp...

Behind the Numbers of Mozilla's Bug Bounty Program

Bug bounty programs have been around in various forms for more than 15 years now, and many of the larger software companies, including Mozilla and Google, have established rewards for people who report bugs. But, aside from the amount of money that’s paid out when bugs are fixed, there hasn’t bee...

VulnCheck KEV: CVE-2007-4816

Multiple buffer overflows in the BaoFeng2 storm ActiveX control in Mps.dll allow remote attackers to have an unknown impact via a long 1 URL, 2 backImage, or 3 titleImage property value; 4 a long first argument to the advancedOpen method; a long argument to the 5 isDVDPath or 6...

CentOS Update for dbus-glib CESA-2010:0616 centos5 i386

Check for the Version of dbus-glib OpenVAS Vulnerability Test CentOS Update for dbus-glib CESA-2010:0616 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify ...

CentOS Update for NetworkManager CESA-2010:0616 centos5 i386

Check for the Version of NetworkManager OpenVAS Vulnerability Test CentOS Update for NetworkManager CESA-2010:0616 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/...

PYSEC-2011-16

plone.app.users in Plone 4.0 and 4.1 allows remote authenticated users to modify the properties of arbitrary accounts via unspecified vectors, as exploited in the wild in June 2011...

CVE-2011-1950

CVE-2011-1950 affects Plone with the plone.app.users component in Plone 4.0/4.1. The issue allows remote authenticated users to modify the properties of arbitrary accounts via unspecified vectors, with activity reportedly observed in the wild in June 2011. The connected documents confirm the prod...

VulnCheck KEV: CVE-2011-1950

plone.app.users in Plone 4.0 and 4.1 allows remote authenticated users to modify the properties of arbitrary accounts via unspecified vectors, as exploited in the wild in June 2011...

Ubuntu: Security Advisory (USN-1140-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Update : gdm (openSUSE-SU-2010:0969-1)

dbus-glib allowed local users to write properties that were exported read-only via dbus CVE-2010-1172. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update gdm-3108. The text description of this...

openSUSE Security Update : dbus-1-glib (openSUSE-SU-2011:0300-1)

dbus-glib allowed local users to write properties that were exported read-only via dbus CVE-2010-1172. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update dbus-1-glib-4237. The text description of...