Cross-Site Request Forgery

Cross-Site Request Forgery Security auditing tests performed on a Jira Bug Issue and Project Tracking Software locally running instance shown that the application is succeptible to Cross-Site Request Forgery attacks within this URL: /jira/plugins/servlet/streamscomments This vulnerability enables...

XSS vulnerability on Tracking page.

PMASA-2011-3 Announcement-ID: PMASA-2011-3 Date: 2011-05-22 Summary XSS vulnerability on Tracking page. Description It was possible to create a crafted table name that leads to XSS. Severity We consider this vulnerability to be serious. Mitigation factor This vulnerability works in the context of...

Senators Press Google, Apple Execs on Privacy and Location Tracking

In a hearing on Tuesday about the amount of data that mobile device manufacturers, app developers and others collect about users’ location and activities, senators called on Apple, Google and other companies to be more open and clear with consumers about their data-collection and tracking...

Apple, Google to Testify at Smart Phone Tracking Hearing

After a bruising series of revelations about location tracking features on mobile devices running their operating systems, Apple and Google will send executives to Capitol Hill to talk to the Senate Judiciary Subcommittee on Privacy, Technology and the Law about cell phone privacy. Guy L. “Bud”...

Apple Releases iOS 4.3.3

Apple released iOS 4.3.3 for the iPhone, iPod Touch, and iPad to address location tracking history capabilities. This update specifically addresses two bugs in iOS that resulted in the devices storing historical location data for too long. US-CERT encourages users and administrators to review App...

Apple Releases iOS 4.3.3, Addressing Location-Tracking Concerns

Apple has released iOS 4.3.3, a firmware update for the iPhone, iPod Touch and iPad that, among other things, fixes the controversial issues surrounding the location tracking capabilities of those devices. The firmware update is Apple’s response to the outcry that erupted last month when a pair o...

Metasploit Framework 3.7.0 Released !

Metasploit Framework 3.7.0 Released ! The Metasploit team has spent the last two months focused on one of the least-visible, but most important pieces of the Metasploit Framework; the session backend. Metasploit 3.7 represents a complete overhaul of how sessions are tracked within the framework a...

todoyu Detection

This host is running todoyu, a free - open source project management and task management, time tracking and team collaboration software. OpenVAS Vulnerability Test $Id: gbtodoyudetect.nasl 5751 2017-03-28 14:37:16Z cfi $ todoyu Detection Authors: Michael Meyer Copyright: Copyright c 2011 Greenbon...

South Park: Apple's Tracking Me, Dude!

Apple may be trying to change the spin on its controversial location tracking, err…harvesting feature. The company issued a FAQ this week and pulled CEO Steve Jobs off of medical leave to argue the company’s case and quell concerns about the little known feature that include calls for an...

Congress to Apple: You Got Some Splainin to do

In a letter to the chairman of the Federal Trade Commission, Jay Inslee D-Wash. expressed concerns regarding recent revelations that Apple products have been continuously tracking and recording user location information with questionable consent and without an easy way to opt out of such tracking...

Apple Admits to Bugs, Denies Tracking iPhone Users

Apple finally sounded off on its phone tracking imbroglio on Wednesday telling iPhone customers that “it’s the location, stupid.” The company claims its tracking feature is designed to collect data on cell towers and wifi hotspots, not users. After more than a week of silence, the notoriously...

Users File Suit Against Apple Over iPhone Tracking

A pair of Apple customers has filed a lawsuit against the company, alleging that Apple is invading their privacy by collecting location data about iPhone and iPad users without their knowledge. The suit follows the revelation last week by security researchers that Apple is collecting and storing...

Report: iPhones Track Movement Even With Location Services Disabled

The ongoing controversy over a hidden feature in Apple iPhones that tracks and stores the whereabouts of the phone became a bit murkier, after an analysis by the Wall Street Journal found that Apple may not be abiding by its own user privacy agreement by continuing to track its customers’...

Congressman Calls on Apple to Explain iPhone Tracking

Congress stepped into the brewing controversy over a recently disclosed tracking feature in most versions of Apple’s popular iPhone. Representative Ed Markey D-Mass has written a letter to Apple CEO Steve Jobs asking for more information about the feature PDF, suggesting that it may run afoul of...

Secret iPhone Feature Tracks Owners' Whereabouts

Security researchers have discovered a hidden iPhone feature that secretly tracks and saves the meanderings of the phone – and presumably its owner. The tracking feature was described in a presentation at the Where 2.0 Conference in San Francisco on Wednesday. According to the researchers, Pete...

Pandora Mobile App Transmits Gobs Of Personal Data

A popular free mobile application from online music service Pandora.com that is the subject of a Grand Jury investigation into loose data privacy practices in the mobile application market confirms that the application silently sends reams of sensitive data to advertisers. The analysis was...

CVE-2010-1961

creationtimestamp| type| source ---|---|--- 2011-03-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/17044 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/hpnnmovwebsnmpsrvovutil.rb 2025-02-06 03:13:39+00:0...

Firefox 4 With Content Security Policy Due Tuesday

Firefox 4, the newest version of Mozilla’s flagship browser slated for release today, includes a variety of security and privacy protections, but perhaps the most important of them is the addition of the Content Security Policy. The mechanism, which is enabled by default in Firefox 4, is designed...

CVE-2011-1418

The stateless address autoconfiguration aka SLAAC functionality in the IPv6 networking implementation in Apple iOS before 4.3 and Apple TV before 4.2 places the MAC address into the IPv6 address, which makes it easier for remote IPv6 servers to track users by logging source IPv6 addresses...

CVE-2011-0159

The Safari Settings feature in Safari in Apple iOS 4.x before 4.3 does not properly implement the clearing of cookies during execution of the Safari application, which might make it easier for remote web servers to track users by setting a cookie...