XSRF token broken when you edit an Issue Type Scheme

If you click the Edit link beside the currently selected Issue Type Scheme on a Project Summary page and then click Save on the next screen you get an XSRF token missing error...

Fedora Update for TeXmacs FEDORA-2011-2146

Check for the Version of TeXmacs OpenVAS Vulnerability Test Fedora Update for TeXmacs FEDORA-2011-2146 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

[SECURITY] Fedora 14 Update: TeXmacs-1.0.7.9-2.fc14

GNU TeXmacs is a free scientific text editor, which was both inspired by TeX and GNU Emacs. The editor allows you to write structured documents via a WYSIWYG what-you-see-is-what-you-get and user friendly interface. New styles may be created by the user. The program implements high-quality...

[SECURITY] Fedora 15 Update: TeXmacs-1.0.7.9-2.fc15

GNU TeXmacs is a free scientific text editor, which was both inspired by TeX and GNU Emacs. The editor allows you to write structured documents via a WYSIWYG what-you-see-is-what-you-get and user friendly interface. New styles may be created by the user. The program implements high-quality...

RealPlayer for Windows < Build 12.0.1.633 Multiple Remote Code Execution Vulnerabilities

According to its build number, the installed version of RealPlayer on the remote Windows host is affected by multiple code execution vulnerabilities : - A heap corruption vulnerability when processing AVI headers. CVE-2010-4393 - A flaw exists in the temporary file naming scheme used for storage...

Hackers Steal 2 Million Tonnes Of Carbon Credits In The EU !

Hackers have stolen two million tons of pollution rights in a raid five days this week in the carbon system of the EU, an EU source said Thursday. The amount of the stolen carbon credits in the online action, as a spokesman for the European Commission said was "maybe unified" represent only a...

SquirrelMail vulnerable to cross-site scripting

Overview SquirrelMail contains a cross-site scripting vulnerability. SquirrelMail from SquirrelMail Project is an open source webmail web-based email. SquirrelMail contains an issue in handling specific character encoding and processing "data:" URL, which may result in cross-site scripting. Yosuk...

adding "Project Member" to User/Group/Projectrole options list for security level

I'm looking for a fast and easy way to handle security viewability of issues over all projects. Scenario is: We have setup the Jira company environment and several different projects. We have some external developers that are assinged to their specific projects. I did not yet use the security...

adding "Project Member" to User/Group/Projectrole options list for security level

I'm looking for a fast and easy way to handle security viewability of issues over all projects. Scenario is: We have setup the Jira company environment and several different projects. We have some external developers that are assinged to their specific projects. I did not yet use the security...

Man Pleads Guilty in $4.8m ATM Fraud

A Connecticut man pleaded guilty to automatic teller machine ATM fraud on Tuesday following a scheme that conned $4.8 million from a Rhode Island bank over the last few years. John DeMilo of Branford, Conn. faces jail time for helping defraud Cranston-based Domestic Bank. Between 2000 and 2010,...

Web Common Credentials

Nessus was able to read protected web pages by using common login and password combinations. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid50504; scriptversion"1.14";...

Fedora 14 : rekonq-0.6.1-1.fc14 (2010-15874)

Mem leak fixed in the bars - Bookmarklets support - No more focus stealing on external url calls - Chinese sites right encoding - OpenSearch suggestions localized - Fixed urlbar crash in disconnected mode - AdBlock performance improvements - UrlBar Improvements - Suggestions - History Review -...

New Crack Evades Android App Licensing Scheme

Researchers have found a very simple method for evading the Android licensing scheme that Google uses to ensure that paid applications in its Android Market are correctly licensed. The crack takes advantage of the fact that most Android apps are written in Java and the portion of the code that...

6 Arrested in UK Online Bank Fraud Scheme

Six people have been arrested on suspicion of stealing credit cards, personal information and banking details as part of a suspected online banking fraud. Read the full article. Help Net Security...

Facebook: The Money Mule Farm

Scammers and phishers are continuing to adapt their recruitment tactics, now going so far as to create special Facebook groups for their work-at-home scams. Phishers have been using social networks such as Facebook, MySpace and Twitter for years now as fertile hunting grounds not only for new...

XSS vulnerability in Colour Scheme settings

An XSS vulnerability has been discovered in the Colour Scheme settings. The severity of this issue is rated as HIGH. Please refer to the security advisory http://confluence.atlassian.com/display/DOC/Confluence+Security+Advisory+2010-04-x for details...

XSS vulnerability in Colour Scheme settings

An XSS vulnerability has been discovered in the Colour Scheme settings. The severity of this issue is rated as HIGH. Please refer to the security advisory http://confluence.atlassian.com/display/DOC/Confluence+Security+Advisory+2010-04-x for details...

XSS vulnerability in Colour Scheme settings

An XSS vulnerability has been discovered in the Colour Scheme settings. The severity of this issue is rated as HIGH. Please refer to the security advisory http://confluence.atlassian.com/display/DOC/Confluence+Security+Advisory+2010-04-x for details...

Allow non-Administrators to be able to modify workflows

As an IT Manager, by having to add users to the Administrators group in order to edit and manage workflows is prohibitive to the administration and security of our Jira environment. While I want users to create, manage and edit workflows, I do NOT want them creating or modifying accounts which...

Allow non-Administrators to be able to modify workflows

As an IT Manager, by having to add users to the Administrators group in order to edit and manage workflows is prohibitive to the administration and security of our Jira environment. While I want users to create, manage and edit workflows, I do NOT want them creating or modifying accounts which...