Content Security Policy for data: documents not preserved by session restore — Mozilla

Security researcher Nicolas Golubovic reported that the Content Security Policy CSP of data: documents was not saved as part of session restore. If an attacker convinced a victim to open a document from a data: URL injected onto a page, this can lead to a Cross-Site Scripting XSS attack. The targ...

CVE-2014-1504

The session-restore feature in Mozilla Firefox before 28.0 and SeaMonkey before 2.25 does not consider the Content Security Policy of a data: URL, which makes it easier for remote attackers to conduct cross-site scripting XSS attacks via a crafted document that is accessed after a browser restart...

PT-2014-1173

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 28.0 SeaMonkey versions prior to 2.25 Description The session-restore feature does not consider the Content Security Policy of a data: URL, making it easier for remote attackers to conduct cross-site scripting...

CVE-2013-5133

Backup in Apple iOS before 7.1 does not properly restrict symlinks, which allows remote attackers to overwrite files during a restore operation via crafted backup data...

Information disclosure

Backup in Apple iOS before 7.1 does not properly restrict symlinks, which allows remote attackers to overwrite files during a restore operation via crafted backup data...

CVE-2013-5133

Backup in Apple iOS before 7.1 does not properly restrict symlinks, which allows remote attackers to overwrite files during a restore operation via crafted backup data...

PT-2014-2907

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 7.1 Description The issue concerns a problem with backup restrictions in Apple iOS. Specifically, it does not properly restrict symlinks, allowing remote attackers to overwrite files during a restore operation via...

CVE-2013-5133: Undefined Security Weakness

Backup in Apple iOS before 7.1 does not properly restrict symlinks, which allows remote attackers to overwrite files during a restore operation via crafted backup data...

Kimai < 0.9.3 Security Bypass Vulnerability - Active Check

Kimai is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 12.04 LTS / 12.10 / 13.10 : firefox vulnerabilities (USN-2102-1)

Christian Holler, Terrence Cole, Jesse Ruderman, Gary Kwong, Eric Rescorla, Jonathan Kew, Dan Gohman, Ryan VanderMeulen, Carsten Book, Andrew Sutherland, Byron Campen, Nicholas Nethercote, Paul Adenot, David Baron, Julian Seward and Sotaro Ikeda discovered multiple memory safety issues in Firefox...

Code injection

Mozilla Firefox before 27.0 does not properly restrict access to about:home buttons by script on other pages, which allows user-assisted remote attackers to cause a denial of service session restore via a crafted web site...

CVE-2014-1489

Technical details for CVE-2014-1489 are not publicly available in the provided documents. Monitor for updates from vendors and vulnerability feeds.

CVE-2014-1489: Undefined Security Weakness

Mozilla Firefox before 27.0 does not properly restrict access to about:home buttons by script on other pages, which allows user-assisted remote attackers to cause a denial of service session restore via a crafted web site...

CVE-2014-1489

Mozilla Firefox before 27.0 does not properly restrict access to about:home buttons by script on other pages, which allows user-assisted remote attackers to cause a denial of service session restore via a crafted web site...

CryptorBit Ransomware that scam for Ransom money with fake Decryption Keys

We are continuously keeping our eye on new variants of the widely spread Ransomware family like Cryptolocker, Prison Locker, Copycat and Locker which encrypts your files and ask for a random amount to decrypt it. If infected by such malware, to be very honest, there is no hope for recovering your...

CVE-2013-5371

CVE-2013-5371 affects IBM Tivoli Storage Manager Client on Windows (TSM 6.3.1.x and 6.4.0) where ReFS file permissions are not preserved during backup/restore, allowing local users to bypass access restrictions via standard filesystem operations. Connected sources specify affected versions as 6.3...

CVE-2013-5371

The client in IBM Tivoli Storage Manager TSM 6.3.1 and 6.4.0 on Windows does not preserve permissions of Resilient File System ReFS files across backup and restore operations, which allows local users to bypass intended access restrictions via standard filesystem operations...

PT-2014-2919

Name of the Vulnerable Software and Affected Versions IBM Tivoli Storage Manager TSM versions 6.3.1 through 6.4.0 Description The issue concerns the client in IBM Tivoli Storage Manager TSM on Windows, where it fails to preserve permissions of Resilient File System ReFS files during backup and...

PT-2014-4181

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.12.8 Description The issue is related to the restore fpu checking function in the Linux kernel, which does not properly clear pending exceptions before executing an EMMS instruction on AMD K7 and K8 platforms...

[CVE-2013-5112] Evernote Android Insecure Storage of PIN data / Bypass of PIN protection

Evernote Android Insecure Storage of PIN data / Bypass of PIN protection Product: Evernote Android Project Homepage: evernote.com Internal Advisory ID: c22-2013-03 / c22-2013-04 Vulnerable Versions: Android version 5.5.0 and prior Tested Version: Android 5.x Android 4.2/4.3 Vendor Notification: A...