UBUNTU-CVE-2011-3881

WebKit, as used in Google Chrome before 15.0.874.102 and Android before 4.4, allows remote attackers to bypass the Same Origin Policy and conduct Universal XSS UXSS attacks via vectors related to 1 the DOMWindow::clear function and use of a selection object, 2 the...

Fedora 15 : libreoffice-3.3.3.1-7.fc15 (2011-14036)

Update for LibreOffice to handle parsing invalid .doc property lists Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

SEC Says Public Companies May Need to Disclose Attacks

The Securities and Exchange Commission has issued new guidance to help public companies determine when they may need to disclose an attack–or even a potential attack–in order to make potential investors aware of possible risks to the company’s business. The guidance, which does not constitute a...

blueHOMES hacked - 500k users data and Password in Plain text leaked

blueHOMES hacked - 500k users data and Password in Plain text leaked Some Anonymous Hacker hack the French property and property Germany Dealers website blueHOMES.com . About 500,000 Users data claim to be hacked by Hacker and also database include all customer passwords in plaintext, including...

Sql injection

SQL injection vulnerability in detail.asp in Micronetsoft Rental Property Management Website 1.0 allows remote attackers to execute arbitrary SQL commands via the adID parameter...

CVE-2010-4920

SQL injection vulnerability in detail.asp in Micronetsoft Rental Property Management Website 1.0 allows remote attackers to execute arbitrary SQL commands via the adID parameter...

CVE-2010-4920

CVE-2010-4920: SQL injection in Micronetsoft Rental Property Management Website 1.0 (detail.asp) via the ad_ID parameter allows remote attackers to execute arbitrary SQL commands. Root cause: unsanitized ad_ID input enabling injection. Impact (per CVSS2): partial confidentiality, integrity, and a...

Integer overflow

Integer signedness error in GroupWise Internet Agent GWIA in Novell GroupWise 8.0 before HP3 allows remote attackers to execute arbitrary code via a negative BYWEEKNO property in a weekly RRULE variable in a VCALENDAR attachment in an e-mail message...

CVE-2010-4920: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in detail.asp in Micronetsoft Rental Property Management Website 1.0 allows remote attackers to execute arbitrary SQL commands via the adID parameter...

PT-2011-1855

Name of the Vulnerable Software and Affected Versions Micronetsoft Rental Property Management Website version 1.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the ad ID parameter in the "detail.asp" endpoint. Recommendations For Micronetsof...

DigiNotar Voluntarily Files Bankruptcy

DigiNotar, the embattled Dutch certificate authority at the center of a global scandal after issuing hundreds of forged digital certificates has filed for voluntary bankruptcy today, according to a press release from parent company VASCO. DigiNotar will cease business operations and will be manag...

Apple Seeking Professional To Fill New 'Keep Employees From Losing Priceless Mobile Prototypes In Local Pubs' Position

In the latest edition of “open positions that should have been filled three years ago,” Apple Computer is looking to hire a Product Security Manager, the New York Times is reporting. The company advertised the new “Manager, Product Security” position on its Web site, saying that the candidate wil...

CentOS Update for firefox CESA-2011:0885 centos5 i386

Check for the Version of firefox OpenVAS Vulnerability Test CentOS Update for firefox CESA-2011:0885 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Study: Operation Shady Rat Revealed

Global 2000 companies can be split into two categories, according to the author of a new white paper from McAfee PDF; those that know they’ve been compromised and those that don’t yet know. “The only organizations that are exempt from this threat,” writes the paper’s author, Dmitri Alperovitch,...

Microsoft to Pay $200,000 for Innovative Defense Technology in Blue Hat Prize Program

LAS VEGAS–In the face of mounting external pressure to begin paying bug bounties, Microsoft is instead launching a new program that will pay a $200,000 top prize to a security researcher who develops the most innovative defensive security technology. The program is designed to “inspire researcher...

Lessons from Chicago: Bad Policy, Not Geopolitics, Enables IP Theft

One thing that CME Group, the company that runs the Chicago Mercantile Exchange, wants to make perfectly clear is that it places a “high value on protecting its intellectual property and trade secrets.” That was the clear message from CME following the arrest of an employee for stealing company...

firefox, xulrunner security update

CentOS Errata and Security Advisory CESA-2011:0885 Updated firefox packages that fix several security issues and one bug are now available for Red Hat Enterprise Linux 4, 5, and 6. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability...

OpenJDK Java2D font-related system property leak (6985453)

Unspecified vulnerability in the Java Runtime Environment JRE in Oracle Java SE and Java for Business 6 Update 23 and earlier, and 5.0 Update 27 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality via unknown vectors related to 2D...

CVE-2011-2386

VisiWaveReport.exe in AZO Technologies, Inc. VisiWave Site Survey before 2.1.9 allows user-assisted remote attackers to execute arbitrary code via a 1 vws and 2 vwr file with an invalid Type property, which triggers an untrusted pointer dereference...

Null pointer dereference

VisiWaveReport.exe in AZO Technologies, Inc. VisiWave Site Survey before 2.1.9 allows user-assisted remote attackers to execute arbitrary code via a 1 vws and 2 vwr file with an invalid Type property, which triggers an untrusted pointer dereference...