CVE-2015-1128: Exposure of Sensitive Information to an Unauthorized Actor

The private-browsing implementation in Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5 allows attackers to obtain sensitive browsing-history information via vectors involving push-notification requests...

PT-2015-5112

Name of the Vulnerable Software and Affected Versions Apple Safari versions prior to 6.2.5 Apple Safari versions 7.x prior to 7.1.5 Apple Safari versions 8.x prior to 8.0.5 Description The issue affects the private-browsing implementation, allowing attackers to obtain sensitive browsing-history...

APPLE-SA-2015-04-08-1 Safari 8.0.5, Safari 7.1.5, and Safari 6.2.5

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2015-04-08-1 Safari 8.0.5, Safari 7.1.5, and Safari 6.2.5 Safari 8.0.5, Safari 7.1.5, and Safari 6.2.5 are now available and address the following: Safari Available for: OS X Mountain Lion v10.8.5, OS X Mavericks v10.9.5, and OS X Yosemite...

Authentication fails on Push to Stash

When I attempt to Push commit of a few dozen files to the Stash-hosted Git repository, I receive the attached error indicating an authentication failure...

Authentication fails on Push to Stash

When I attempt to Push commit of a few dozen files to the Stash-hosted Git repository, I receive the attached error indicating an authentication failure...

CVE-2014-4417

Safari in Apple OS X before 10.10 allows remote attackers to cause a denial of service universal Push Notification outage via a web site that triggers an uncaught SafariNotificationAgent exception by providing a crafted Push Notification...

Design/Logic Flaw

Safari in Apple OS X before 10.10 allows remote attackers to cause a denial of service universal Push Notification outage via a web site that triggers an uncaught SafariNotificationAgent exception by providing a crafted Push Notification...

CVE-2014-4417

CVE-2014-4417 affects Safari on OS X prior to 10.10. A crafted Push Notification from a malicious site triggers an uncaught SafariNotificationAgent exception, causing a denial of service (universal Push Notification outage). The vulnerability is addressed by improved handling of Safari Push Notif...

CVE-2014-4417: Improper Input Validation

Safari in Apple OS X before 10.10 allows remote attackers to cause a denial of service universal Push Notification outage via a web site that triggers an uncaught SafariNotificationAgent exception by providing a crafted Push Notification...

PT-2014-5881

Name of the Vulnerable Software and Affected Versions Safari in Apple OS X versions prior to 10.10 Description The issue allows remote attackers to cause a denial of service, resulting in a universal Push Notification outage. This is achieved through a web site that triggers an uncaught...

Using ServiceWorker in Chrome today

The implementation for ServiceWorker has been landing in Chrome Canary over the past few months, and there's now enough of it to do some cool shit! Unnecessary representation of "cool shit" What is ServiceWorker? ServiceWorker is a background worker, it gives us a JavaScript context to add featur...

CVE-2014-5854

The Windows Live Hotmail PUSH mail aka com.clearhub.wl application 1.00.97 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5854

The Windows Live Hotmail PUSH mail aka com.clearhub.wl application 1.00.97 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5854

The CVE-2014-5854 entry concerns the Windows Live Hotmail PUSH mail app (com.clearhub.wl) for Android, version 1.00.97, which does not verify X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. T...

PT-2014-6839

Name of the Vulnerable Software and Affected Versions Windows Live Hotmail PUSH mail application version 1.00.97 Description The issue concerns the failure to verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via a...

CVE-2014-5854: Undefined Security Weakness

The Windows Live Hotmail PUSH mail aka com.clearhub.wl application 1.00.97 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Apple Plans to Extend 2FA to iCloud

In the wake of the iCloud photo theft scandal, Apple’s CEO said the company plans to extend its two-factor authentication system to logins to the iCloud service from mobile device. The change will come when iOS 8.0 comes out later this month. The change will give users the option of enabling a...

Linux/x86 - Reverse TCP (127.1.1.1:1337/TCP) Shell Shellcode (74 bytes)

Linux/x86 - Reverse TCP 127.1.1.1:1337/TCP Shell Shellcode 74 bytes. Shellcode exploit for Linuxx86 platform / Title: Shell Reverse TCP Shellcode - 74 bytes Platform: Linux/x86 Date: 2014-07-25 Author: Julien Ahrens @MrTuxracer Website: http://www.rcesecurity.com Disassembly of section .text:...

AmbiCom Blue Neighbors 2.50 build 2500 Bluetooth Stack Object Push Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/16258/info AmbiCom Blue Neighbors Bluetooth stack is prone to a buffer overflow vulnerability. The issue exists in the Object Push Service. This issue allows remote attackers to execute arbitrary code in the context of th...

Silentum Uploader 1.4.0 - Remote File Deletion Exploit

No description provided by source. Vendor: http://hypersilence.net Versions: Silentum Uploader 1.4.0 May also affect earlier versions Credit: Danny Moules Critical: Yes See PUSH 55 Advisory at http://www.push55.co.uk/advisories.php?id=2 ---- Due to insufficient validation of client-side data, we...