291 matches found
Mozilla Disables WebSockets in Firefox 4 Over Security Concerns
Officials at Mozilla have decided to disable support for Web Sockets in future versions of Firefox because of concerns over the security of the the current version of the protocol.The group said that demonstrations of serious attacks against WebSockets have spurred the move. Mozilla said that the...
Operating System Choice Does Not Equal Security
Yesterday while some of us in the USA were enjoying a day off Google made the news with this article in the Financial Times stating that they are moving away from Microsoft Windows due to security concerns. My first reaction was to question why a company with as many smart brains as Google would...
Path for daily backup is configurable through WEB UI
It is possible to set the daily backup path and partial name through the web UI. This could mean that information can be obtained by a rouge admin. This issue addresses that by introducing a flag so concerned administrators can remove this feature. This flag is set to false by default meaning it ...
RSA 2010: How Cloud Security Is the Wild West
Economic pressures are driving more businesses and governments to nervously eye cloud computing, despite myriad unanswered questions that swirl around a single central concern: security. This was backdrop for a panel discussion between CISOs at this week’s RSA Conference. Read the full article...
IEEE and Cloud Security Alliance Form Partnership
The Cloud Security Alliance CSA and IEEE are joining forces to ensure that best practices and standards are developed and available to provide security assurance for cloud computing. As a result of this collaboration, CSA and IEEE have been conducting a survey to identify and define the most...
IE Feature Issues Can Be Exploited, Attacked
Microsoft’s Internet Explorer IE could inadvertently allow a hacker to read files on a person’s computer, another problem for the company just days after a serious vulnerability received an emergency patch. Read the full article. Computerworld...
NAS Uploader 1.01.5 - Arbitrary File Upload
NAS Uploader 1.01.5 - Arbitrary File Upload | | NAS Uploader V1.0&1.5 Remote File Upload Vulnerability | | Author : ViRuSMaN | | Contact : [email protected] | | Home : Islam-Attack.CoM , HackTeach.OrG | | Download : http://www.nasuploader.com/nasuploaderv10packdemo.php |...
Can Adobe Beat Back the Hackers?
For years, Adobe Systems has occupied a quiet corner of the personal-computer industry. Photographers and designers use its software to clean up photos and set up Web sites. Workers everywhere trade electronic documents formatted with Adobe’s programs, often without knowing the company behind the...
Mozilla Firefox 3.5.3 - Local Download Manager Temp File Creation
Mozilla Firefox 3.5.3 - Local Download Manager Temp File Creation / getunique.c AKA Mozilla Firefox 3.5.3 Local Download Manager Exploit Jeremy Brown [email protected] // jbrownsec.blogspot.com // krakowlabs.com 10.28.2009 When downloading files through Firefox and choosing the "Open with"...
New iPhone features prompt security concerns
By Eric Ogren, SearchSecurity.com Apple has a knack for producing consumer friendly technology, and they have done it again with its Apple iPhone OS 3.0 software apple.com, which will be available later this summer. But in the process they’ve exposed the smartphone to new areas for hackers to...
Star Articles 6.0 Contents Change
----C4TEAM.ORG---ByALBAYX----C4TEAM.ORG---- Author : ByALBAYX Website : WWW.C4TEAM.ORG Script :Star Articles 6.0 Site :http://www.stararticles.com Download :http://cmsnx.com/psf/order.php?id=5 $ :175$ http://www.c4team.org/ PATH /stararticle/user.modify.profile.php?userid=1 Add...
[ GLSA 200804-05 ] NX: User-assisted execution of arbitrary code
Gentoo Linux Security Advisory GLSA 200804-05:02 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -...
Fedora 8 : scponly-4.6-10.fc8 (2008-1743)
Wed Feb 13 2008 Tomas Hoger - 4.6-10 - Add patch to prevent restriction bypass using OpenSSH's scp options -F and -o CVE-2007-6415, 426072 - Mon Feb 11 2008 Warren Togami - 4.6-9 - rebuild with gcc-4.3 - Tue Dec 11 2007 Toshio Kuratomi - 4.6-8 - Disable rsync support due to security concerns: RH...
Code injection
Unspecified vulnerability in the Administrative Console in IBM WebSphere Application Server 6.1 before Fix Pack 13 has unknown impact and attack vectors, related to "security concerns with monitor role users." NOTE: it was later reported that 6.0.2 before Fix Pack 25 is also affected...
MAC address and IP address binding policy of hack-vulnerability warning-the black bar safety net
1 Introduction On the“IP address theft”solutions, the vast majority are taking MAC and IP address binding policy, this practice is very dangerous, this article will this problem be explored. Here need to declare that this article is in the pairs of MAC and IP address binding policy security...
MAC address and IP address binding policy of hack-vulnerability warning-the black bar safety net
1 Introduction On the“IP address theft”solutions, the vast majority are taking MAC and IP address binding policy, this practice is very dangerous, this article will this problem be explored. Here need to declare that this article is in the pairs of MAC and IP address binding policy security...
Web Server Cross Site Scripting
The remote web server seems to be vulnerable to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2005 SecuriTeam, modified by Chris Sullo and Andrew Hintz Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
XSLT can include stylesheets from arbitrary hosts — Mozilla
xsl:include and xsl:import can include XSLT stylesheets from arbitrary domains including those behind the user's firewall. This at least allows for existence checking of these files; it's not clear how much, if any, data could be extracted from arbitrary XML files...