CVE-2014-1504

CVE-2014-1504 affects Mozilla Firefox (pre-28.0) and SeaMonkey (pre-2.25). The session-restore feature does not honor the CSP of data: URLs, enabling remote XSS via a crafted document opened after a browser restart. The impact stated is cross-site scripting with partial integrity/complete confide...

CVE-2014-1504

The session-restore feature in Mozilla Firefox before 28.0 and SeaMonkey before 2.25 does not consider the Content Security Policy of a data: URL, which makes it easier for remote attackers to conduct cross-site scripting XSS attacks via a crafted document that is accessed after a browser restart...

Content Security Policy for data: documents not preserved by session restore — Mozilla

Security researcher Nicolas Golubovic reported that the Content Security Policy CSP of data: documents was not saved as part of session restore. If an attacker convinced a victim to open a document from a data: URL injected onto a page, this can lead to a Cross-Site Scripting XSS attack. The targ...

CVE-2013-5133

Backup in Apple iOS before 7.1 does not properly restrict symlinks, which allows remote attackers to overwrite files during a restore operation via crafted backup data...

Information disclosure

Backup in Apple iOS before 7.1 does not properly restrict symlinks, which allows remote attackers to overwrite files during a restore operation via crafted backup data...

CVE-2013-5133

Backup in Apple iOS before 7.1 does not properly restrict symlinks, which allows remote attackers to overwrite files during a restore operation via crafted backup data...

Kimai < 0.9.3 Security Bypass Vulnerability - Active Check

Kimai is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 12.04 LTS / 12.10 / 13.10 : firefox vulnerabilities (USN-2102-1)

Christian Holler, Terrence Cole, Jesse Ruderman, Gary Kwong, Eric Rescorla, Jonathan Kew, Dan Gohman, Ryan VanderMeulen, Carsten Book, Andrew Sutherland, Byron Campen, Nicholas Nethercote, Paul Adenot, David Baron, Julian Seward and Sotaro Ikeda discovered multiple memory safety issues in Firefox...

Code injection

Mozilla Firefox before 27.0 does not properly restrict access to about:home buttons by script on other pages, which allows user-assisted remote attackers to cause a denial of service session restore via a crafted web site...

CVE-2014-1489

Technical details for CVE-2014-1489 are not publicly available in the provided documents. Monitor for updates from vendors and vulnerability feeds.

CVE-2014-1489

Mozilla Firefox before 27.0 does not properly restrict access to about:home buttons by script on other pages, which allows user-assisted remote attackers to cause a denial of service session restore via a crafted web site...

CryptorBit Ransomware that scam for Ransom money with fake Decryption Keys

We are continuously keeping our eye on new variants of the widely spread Ransomware family like Cryptolocker, Prison Locker, Copycat and Locker which encrypts your files and ask for a random amount to decrypt it. If infected by such malware, to be very honest, there is no hope for recovering your...

CVE-2013-5371

The client in IBM Tivoli Storage Manager TSM 6.3.1 and 6.4.0 on Windows does not preserve permissions of Resilient File System ReFS files across backup and restore operations, which allows local users to bypass intended access restrictions via standard filesystem operations...

CVE-2013-5371

CVE-2013-5371 affects IBM Tivoli Storage Manager Client on Windows (TSM 6.3.1.x and 6.4.0) where ReFS file permissions are not preserved during backup/restore, allowing local users to bypass access restrictions via standard filesystem operations. Connected sources specify affected versions as 6.3...

[CVE-2013-5112] Evernote Android Insecure Storage of PIN data / Bypass of PIN protection

Evernote Android Insecure Storage of PIN data / Bypass of PIN protection Product: Evernote Android Project Homepage: evernote.com Internal Advisory ID: c22-2013-03 / c22-2013-04 Vulnerable Versions: Android version 5.5.0 and prior Tested Version: Android 5.x Android 4.2/4.3 Vendor Notification: A...

TPLINK WR740N/WR740ND - Multiple CSRF Vulnerabilities

Exploit for hardware platform in category web applications Exploit Title: TPLINK WR740N Multiple CSRF Vulnerabilities Date: 11/24/2013 Author: SaMaN @samanL33T Vendor Homepage: http://tplink.com Category: Hardware/Wireless Router Firmware Version: 3.16.6 Build 130529 Rel.47286n and below Tested o...

Backup Copy "Source backup file has different block size."

Challenge The issue described in this KB Article only occurs when a Backup Copy job is using the Periodic copy pruning mode. During consecutive Backup Copy intervals, the same machine or group of machines fails to be processed. The message "Initial copy did not complete, and will resume on the ne...

How to protect your computer from CryptoLocker ransomware malware ?

CryptoLocker is an especially insidious form of Ransomeware malware that was first detected in the wild in September 2013, restricts access to infected computers and requires victims to pay a ransom in order to regain full access. What makes CryptoLocker so bad is the way it encrypts the user dat...

ISPConfig - (Authenticated) Arbitrary PHP Code Execution (Metasploit)

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit4 'ISPConfig Authenticated Arbitrary PHP Code Execution', 'Description' = %q ISPConfig allows an authenticated administrator to export...

Fedora 20 : libvirt-1.1.3-2.fc20 (2013-18455)

Allow QoS change with update-device bz 1014200 - Fix nwfilter crash during firewalld install bz 1014762 - Fix crash with nographics bz 1014088 Update to 1.1.3 release - Sync with v1.1.2-maint - Rebuild for libswan soname bump bz 1009701 - CVE-2013-4311: Insecure polkit usage bz 1009539, bz...