564 matches found
Google Overhauls Privacy Policy
Google is planning to overhaul its main privacy policy in an effort to make the document more readable and usable for normal people. In addition, Google also is eliminating privacy policies for some of its individual products and services, which it deemed redundant. The shift by Google is a prett...
Arbitrary file deletion
Mozilla Firefox before 3.6.7 and Thunderbird before 3.1.1 do not properly implement read restrictions for CANVAS elements, which allows remote attackers to obtain sensitive cross-origin information via vectors involving reference retention and node deletion...
CVE-2010-1207
Mozilla Firefox before 3.6.7 and Thunderbird before 3.1.1 do not properly implement read restrictions for CANVAS elements, which allows remote attackers to obtain sensitive cross-origin information via vectors involving reference retention and node deletion...
В Швеции появится первый в мире пиратский провайдер
Пиратская партия Швеции станет первым в мире "пиратским" интернет-провайдером, пишет TorentFreak. Партнером Пиратской партии по организации доступа пользователей в Сеть станет провайдер ViaEuropa. Предполагается, что новая компания PirateISP, во главе которой находится член Пиратской партии Густа...
Google Cloud Print: Thinking Through the Security, Privacy Implications
Google’s plans to introduce a Cloud Print service that’s already being hailed as “printer voodoo” because it lets users print to any printer anywhere in the world, even from mobile phones. However, there are some privacy and security implications that need to be fleshed out before end users rush ...
Oracle Siebel Loyalty 8.1 Cross Site Scripting Vulnerability
Exploit for unknown platform in category web applications ============================================================ Oracle Siebel Loyalty 8.1 Cross Site Scripting Vulnerability ============================================================...
Oracle Siebel Loyalty 8.1 Cross Site Scripting
-------------------------------------------------------------------- Exploit Title: Oracle Siebel Loyalty 8.1 XSS Vulnerability Date: 24 Feb 2010 Author: thebluegenius Software Link: http://bit.ly/bZ7JdV Version: 8.1 CVE : NA --------------------------------------------------- "Oracle Siebel...
CVE-2009-0518
CVE-2009-0518 describes a vulnerability where the VirtualCenter Server password may be retained in the memory of VI Client on VMware products. Affected: VI Client, VirtualCenter Server in VMware VirtualCenter prior to 2.5 Update 4, ESXi 3.5 prior to Update 4, and ESX 3.5 prior to Update 4. Impact...
Unfixed XSS vulnerability at www.dataretentionisnosolution.com
Security researcher Camilo-TcK, has submitted on 05/09/2008 a cross-site-scripting XSS vulnerability affecting www.dataretentionisnosolution.com, which at the time of submission ranked 2926249 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...
CA BrightStor ARCserver Tape Engine memory corruption vulnerability
Overview The Computer Associates BrightStor ARCserve Backup Tape Engine contains a memory corruption vulnerability. If successfully exploited, this vulnerability may allow an attacker to execute arbitrary code or create a denial-of-service condition. Description BrightStor ARCserve Backup is a...
CVE-2004-2657
Mozilla Firefox 1.5.0.1, and possibly other versions, preserves some records of user activity even after uninstalling, which allows local users who share a Windows profile to view the records after a new installation of Firefox, as reported for the list of Passwords Never Saved web sites. NOTE: T...
The use of the FTP server's vulnerability to find broiler-vulnerability warning-the black bar safety net
Scanning and determine the target As the saying goes,haste makes waste,in the shortest time period crack shot to get a large number of broilers. You must first determine the presence of the FTP service host,this is achieved by the Scan to complete FTPSCAN is a command line FTP weak passwords...
CVE-2002-2202
Affected software: Outlook Express 6.0. Issue: The product does not delete messages from DBX mailbox files when a user empties the Deleted Items folder, allowing local users to read other users’ email. Evidence: Descriptions in Red Hat and NVD/JST documents corroborate this behavior. Impact: Loca...
GLSA-200502-30 : cmd5checkpw: Local password leak vulnerability
The remote host is affected by the vulnerability described in GLSA-200502-30 cmd5checkpw: Local password leak vulnerability Florian Westphal discovered that cmd5checkpw is installed setuid cmd5checkpw but does not drop privileges before calling execvp, so the invoked program retains the cmd5check...
CVE-2004-0417
Integer overflow in the "Max-dotdot" CVS protocol command servemaxdotdot for CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, may allow remote attackers to cause a server crash, which could cause temporary data to remain undeleted and consume disk space...
CVE-2004-0417
Integer overflow in the "Max-dotdot" CVS protocol command servemaxdotdot for CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, may allow remote attackers to cause a server crash, which could cause temporary data to remain undeleted and consume disk space...
CVE-2004-0417
Integer overflow in the "Max-dotdot" CVS protocol command servemaxdotdot for CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, may allow remote attackers to cause a server crash, which could cause temporary data to remain undeleted and consume disk space...
CVE-2004-0417
Integer overflow in the "Max-dotdot" CVS protocol command servemaxdotdot for CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, may allow remote attackers to cause a server crash, which could cause temporary data to remain undeleted and consume disk space...
CVE-2004-0417
Integer overflow in the "Max-dotdot" CVS protocol command servemaxdotdot for CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, may allow remote attackers to cause a server crash, which could cause temporary data to remain undeleted and consume disk space...