CVE-2016-1772

CVE-2016-1772 relates to the Apple Safari Top Sites Cookie storage issue. Affected product: Safari (Top Sites feature) prior to version 9.1. Root cause: mishandling of cookie storage in Top Sites, enabling a website to track users via unspecified vectors. Impact: tracking of user information by r...

CVE-2016-1772

The Top Sites feature in Apple Safari before 9.1 mishandles cookie storage, which makes it easier for remote web servers to track users via unspecified vectors...

Apple Safari Safari Top Sites Information Disclosure Vulnerability

Apple Safari is a web browser developed by Apple Inc. and is the default browser that comes with Mac OS X and iOS operating systems.Safari Top Sites is one of the components that automatically tracks web pages viewed and places them in the home page view based on frequency of use. A security...

Uber: Lack of CNAME/A Record Trimming Pointing Uber Domains to Insecure Non-Uber AWS Instances/Sites

Limited disclosure at @jutsuce's request...

Machinae - Security Intelligence Collector

Machinae is a tool for collecting intelligence from public sites/feeds about various security-related pieces of data: IP addresses, domain names, URLs, email addresses, file hashes and SSL fingerprints. It was inspired by Automater , another excellent tool for collecting information. The Machinae...

USN-2917-1 firefox vulnerabilities

Francis Gabriel discovered a buffer overflow during ASN.1 decoding in NSS. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to cause a denial of service via application crash, or execute arbitrary code with the privileges of the user...

Security Intelligence Collector: Machinae

Machinae is a tool for collecting intelligence from public sites/feeds about various security-related pieces of data: IP addresses, domain names, URLs, email addresses, file hashes and SSL fingerprints. It was inspired by Automater , another excellent tool for collecting information. The Machinae...

Proofpoint Warns Of New MSIL/Crimson Tied To Cyber Espionage

Diplomats and military personnel in India have been victimized in targeted espionage attacks that use a number of means of infection including phishing and watering hole sites. Researchers at Proofpoint this week published a report on Operation Transparent Tribe, which was ongoing as of Feb. 11...

CVE-2 0 1 6-0 7 0 3 OpenSSL DROWN vulnerability security notification-vulnerability warning-the black bar safety net

In OpenSSL official yesterday released the security Bulletin, discloses a new high-risk vulnerabilities“DROWN”the drowned vulnerability,。 Through this vulnerability, an attacker can initiate a“man in the middle hijacking attack”to steal is HTTPS encrypted session content, including Yahoo!, Alibab...

UBUNTU-CVE-2016-2512

The utils.http.issafeurl function in Django before 1.8.10 and 1.9.x before 1.9.3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks or possibly conduct cross-site scripting XSS attacks via a URL containing basic authentication, as demonstrated by...

Open redirect

Open redirect vulnerability in the cleanparam function in lib/moodlelib.php in Moodle through 2.6.11, 2.7.x before 2.7.9, 2.8.x before 2.8.7, and 2.9.x before 2.9.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via vectors involving an HTTP Referer...

Google Sites Cross Site Scripting

============================================= INTERNET SECURITY AUDITORS ALERT 2016-002 - Original release date: February 16, 2016 - Last revised: February 16, 2016 - Discovered by: Fabián Cuchietti - Severity: 6.1/10 CVSSv3 Base Metrics ============================================= I...

Google Safe Browsing Deceptive Embedded Content

Google’s Safe Browsing API is almost a living organism, constantly evolving and adapting to online threats. On Wednesday, Google announced the latest enhancements to the service, with new features that protect users on the web from deceptive embedded content. “You may have encountered social...

FreeBSD : privoxy -- malicious server spoofing as proxy vulnerability (ad82b0e9-c3d6-11e5-b5fe-002590263bf5)

Privoxy Developers reports : Proxy authentication headers are removed unless the new directive enable-proxy-authentication-forwarding is used. Forwarding the headers potentially allows malicious sites to trick the user into providing them with login information. Reported by Chris John Riley...

Oracle WebCenter Sites Apache Xalan-Java Library Security Bypass (January 2016 CPU)

The version Oracle WebCenter Sites installed on the remote host is missing a security patch from the January 2016 Critical Patch Update CPU. It is, therefore, affected by a security bypass vulnerability in the Apache Xalan-Java library due to a failure to properly restrict access to certain...

NVIDIA GPU was traced to vulnerabilities, you can view the porn browsing history-bug warning-the black bar safety net

! Chrome's incognito mode in some specific cases not necessarily be able to protect individual privacy, recently a gamer the exposure of the Nvidia GPU of the previous vulnerability, the use of the vulnerability can view Chrome incognito mode to browse porn sites picture. Evan Andersen once loade...

USN-2860-1 oxide-qt vulnerabilities

A race condition was discovered in the MutationObserver implementation in Blink. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to cause a denial of service via renderer crash, or execute arbitrary code with the privileges of the...

CVE-2015-8597

Open redirect vulnerability in Blue Coat ProxySG 6.5 before 6.5.8.8 and 6.6 and Advanced Secure Gateway ASG 6.6 might allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a base64-encoded URL in conjunction with a "clear text" one in a coaching page, as...

Open Redirect Vulnerability in Joomla!

Joomla! is an open source content management system. An open redirection vulnerability exists in Joomla! that allows attackers to construct malicious URIs, trick users into parsing them, and redirect users to arbitrary web sites for phishing attacks...

Mozilla Firefox Multiple Vulnerabilities (Dec 2015) - Windows

Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...