[SECURITY] Fedora 16 Update: bugzilla-4.0.2-1.fc16

Bugzilla is a popular bug tracking system used by multiple open source proj ects It requires a database engine installed - either MySQL, PostgreSQL or Oracl e. Without one of these database engines local or remote, Bugzilla will not work - see the Release Notes for details...

JonDoFox 2.5.3 - Browser Optimized for anonymous and secure web surfing

JonDoFox 2.5.3 - Browser Optimized for anonymous and secure web surfing The JonDoFox research team has uncovered a new attack on web browsers: Affected are the web browsers Firefox, Chrome and Safari. By a hidden call over of a URL with HTTP authentication data, third party sites could track a...

JonDoFox 2.5.3 - Browser Optimized for anonymous and secure web surfing

JonDoFox 2.5.3 - Browser Optimized for anonymous and secure web surfing The JonDoFox research team has uncovered a new attack on web browsers: Affected are the web browsers Firefox, Chrome and Safari. By a hidden call over of a URL with HTTP authentication data, third party sites could track a...

[SECURITY] Fedora 15 Update: bugzilla-3.6.6-1.fc15

Bugzilla is a popular bug tracking system used by multiple open source proj ects It requires a database engine installed - either MySQL, PostgreSQL or Oracl e. Without one of these database engines local or remote, Bugzilla will not work - see the Release Notes for details...

Microsoft Drops Use of 'Supercookies' on MSN

In response to work by Stanford University researchers who found that Microsoft and several other high-profile companies were using a controversial technique to keep persistent cookies on users’ PCs to track their movements, Microsoft says it has discontinued the practice of using so-called...

CVE-2010-0904

creationtimestamp| type| source ---|---|--- 2011-08-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/17698 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/oracle/osbexecqr3.rb 2018-05-29 15:50:33+00:00| seen|...

[SECURITY] Fedora 14 Update: glpi-0.78.5-2.svn14966.fc14

GLPI is the Information Resource-Manager with an additional Administration- Interface. You can use it to build up a database with an inventory for your company computer, software, printers.... It has enhanced functions to make the daily life for the administrators easier, like a job-tracking-syst...

[SECURITY] Fedora 14 Update: glpi-0.78.5-2.svn14966.fc14

GLPI is the Information Resource-Manager with an additional Administration- Interface. You can use it to build up a database with an inventory for your company computer, software, printers.... It has enhanced functions to make the daily life for the administrators easier, like a job-tracking-syst...

ATutor 2.0.2 (lang) HTTP Response Splitting Vulnerability

Summary ATutor is an Open Source Web-based Learning Content Management System LCMS designed with accessibility and adaptability in mind. Educators can quickly assemble, package, and redistribute Web-based instructional content, easily retrieve and import prepackaged content, and conduct their...

[SECURITY] Fedora 15 Update: glpi-0.78.5-2.svn14966.fc15

GLPI is the Information Resource-Manager with an additional Administration- Interface. You can use it to build up a database with an inventory for your company computer, software, printers.... It has enhanced functions to make the daily life for the administrators easier, like a job-tracking-syst...

OSForensics – Digital investigations faster

OSForensics – Digital investigations faster Here there is a new utility called OSForensics, currently it is freely available that I found very useful for conducting a computer forensics. OSForensics can retrieve data about recently accessed applications, documents, media and network shares by...

Study Finds Online Ad Firms Don't Abide By 'Do Not Track' Requests

UPDATE: A study by Stanford University Law School’s Center for Internet and Society has found that many online advertising networks are not adhering to their own privacy policies and continue to rely on and push out Web tracking cookies even after users have indicated that they do not wish to be...

German Federal Police servers Hacked by NN-Crew

German Federal Police servers Hacked by NN-Crew Hacking Group "NN-Crew" hacked into server used by Germany's Federal Police and stolen a large amount of data used to GPS-track suspects under surveillance. The hacked data published by NN-Crew included several usernames and passwords along with...

Collusion Firefox Add-On Paints Picture of Web Tracking

Most Internet users at this point understand that Web sites routinely and extensively track the behavior and movements of their visitors. It’s an unsettling reality. But few people have a handle on just how widespread and pervasive the practice is. Now, a developer has released an add-on for...

CVE-2011-1865

creationtimestamp| type| source ---|---|--- 2011-06-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/17458 2011-07-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/17467 2011-07-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/17468 2011-07-04...

Mozilla Pushes Firefox 5, Do Not Track Feature, New Development Cycle

With the release of Firefox 5 earlier this week, Mozilla has finally added its Do Not Track privacy feature to the company’s flagship browser. The feature, aimed at customizing how users browsing behavior is tracked is the first of its kind that can be implemented across multiple platforms,...

CVE-2011-0517

creationtimestamp| type| source ---|---|--- 2011-06-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/17430 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/scada/winlogruntime.rb 2025-02-06 03:13:40+00:00| seen|...

phpMyAdmin < 3.3.10.1 / 3.4.1 Multiple Vulnerabilities (PMASA-2011-03 - PMASA-2011-04

The remote host contains a version of phpMyAdmin - 3.3.x less than 3.3.10.1 or 3.4.x less than 3.4.1 - that is affected by multiple vulnerabilities: - The scripts 'tbllinks.php' and 'tbl-tracking' fail to filter input to the 'table' and 'db' parameters. An attacker may be able to exploit this iss...

Unfixed XSS vulnerability at couponofporn.com

Security researcher Genius, has submitted on 06/01/2011 a cross-site-scripting XSS vulnerability affecting couponofporn.com, which at the time of submission ranked 3530359 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/12/2011. It is...

Cross-Site Request Forgery

Cross-Site Request Forgery Security auditing tests performed on a Jira Bug Issue and Project Tracking Software locally running instance shown that the application is succeptible to Cross-Site Request Forgery attacks within this URL: /jira/plugins/servlet/streamscomments This vulnerability enables...