Google Toolbar Tracks Users Who Disabled Tracking

Harvard professor and noted Google critic Ben Edelmen provided video evidence of the Google toolbar transmitting data back to the Mountain View Chocolate Factory after he chose to disable the application in the browser window he was currently using. Google has updated the toolbar. Read the full...

Trac文本格式报表信息泄露漏洞

CVECAN ID: CVE-2009-4405 Trac是用Python编写的基于Web的事件跟踪系统。 Trac在生成逗号分隔或制表符分隔的文本格式报表时没有正确地强制某些策略，用户无需必要的权限就可以从故障单中访问敏感信息。 Edgewall Software Trac 0.11.6 厂商补丁： Edgewall Software ----------------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://trac.edgewall.org/browser/tags/trac-0.11.6/RELEASE...

WebSphere 7.0.0.5 的升级组件跟踪信息泄露

No description provided by source...

APC Switched Rack PDU Cross Site Scripting

APC Switched Rack PDU XSS Vulnerability By Jamal Pecou jpecou at gmail dot c0m. Product Info Product InfoTested Versions Model = AP7932 Harware Revision = B2 Application Module Name = rpdu Version = v3.3.3Tested First Version = 3.7.0Current APC OS AOS Name = aos Version = v3.3.4 Vulnerability XSS...

CVE-2009-4502

creationtimestamp| type| source ---|---|--- 2009-12-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10431 2010-07-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16918 2018-05-29 15:50:33+00:00| seen|...

U.S. Defense Information Systems Agency (DISA) Unix Security Readiness Review (SRR) root compromise / VU#433821

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Executive Summary - ----------------- Unprivileged local users can obtain root access on Unix systems where the DISA SRR scripts are run. If a remote user can introduce a file into the filesystem e.g. anonymous ftp, http upload, cdrom, samba share,...

WordPress Yoast GA 3.2.4 Plugin XSS

Exploit for unknown platform in category web applications ================================ Yoast GA 3.2.4 Plugin for WP XSS ================================ Info: The Google Analytics for WordPress plugin automatically tracks and segments all outbound links from within posts, comment author links...

[SECURITY] Fedora 12 Update: bugzilla-3.4.4-1.fc12

Bugzilla is a popular bug tracking system used by multiple open source proj ects It requires a database engine installed - either MySQL, PostgreSQL or Oracl e. Without one of these database engines local or remote, Bugzilla will not work - see the Release Notes for details...

Mozilla Bugzilla bug别名信息泄漏漏洞

Bugraq ID: 37062 CVE ID：CVE-2009-3386 Mozilla Bugzilla是一款基于Web的BUG跟踪系统。 Mozilla Bugzilla显示"Depends On"或"Blocks"列表中的受限制bugs的别名时存在错误，可导致泄漏敏感信息。 当某个bug属于某个组时，本来它所有信息对此组之外的用户是不可见的。但是存在漏洞可显示非常短的字符串作为快捷方式用于查询bug"Depends On"或"Blocks"列表中的受限制bugs的别名给此组以外的其他用户，导致敏感信息。 Mozilla Bugzilla 3.5.1 Mozilla Bugzill...

Product or Malware? Android Spying App Released

A well known commercial provider of spyware applications for numerous mobile platforms, has recently ported its Mobile Spy app to the Android mobile OS. Just like previous releases of the application, the Android version keeps a detailed log of GPS locations, calls, visited URLs, and...

CVE-2009-3878

Buffer overflow in Sun Java System Web Server 7.0 Update 6 has unspecified impact and remote attack vectors, as demonstrated by the vdsjws module in VulnDisco Pack Professional 8.12. NOTE: as of 20091105, this disclosure has no actionable information. However, because the VulnDisco Pack author is...

e-Courier CMS Tracking xss

Exploit for unknown platform in category web applications ========================== e-Courier CMS Tracking xss ========================== Vendor: e-Courier http://www.ecouriersoftware.com/ Product: CMS Tracking Site Issue: Cross-Site Scripting. Description: Nearly all pages include the URI...

[SECURITY] Fedora 11 Update: blam-1.8.5-15.fc11

Blam is a tool that helps you keep track of the growing number of news feeds distributed as RSS. Blam lets you subscribe to any number of feeds and provides an easy to use and clean interface to stay up to date...

CVE-2009-3733

creationtimestamp| type| source ---|---|--- 2009-10-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33310 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/vmware/vmwareserverdirtrav.rb 2024-02-16 14:23:20+00:00...

Cisco Security Advisory: Cisco Unified Presence Denial of Service Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Unified Presence Denial of Service Vulnerabilities Advisory ID: cisco-sa-20091014-cup Revision 1.0 For Public Release 2009 October 14 1600 UTC GMT +---------------------------------------------------------------------...

Workflow permission to limit ability to link issues

We need to be able to limit the ability to link issues by the issue status. If we have two issues, and they are both closed, I do not want to be able to link them. If one or both are opened or in progress, I'd like to be able to create the link from the open issue. We are trying to use Jira for...

Workflow permission to limit ability to link issues

We need to be able to limit the ability to link issues by the issue status. If we have two issues, and they are both closed, I do not want to be able to link them. If one or both are opened or in progress, I'd like to be able to create the link from the open issue. We are trying to use Jira for...

CVE-2009-3569

Stack-based buffer overflow in OpenOffice.org OOo allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.8, aka "Client-side stack overflow exploit." NOTE: as of 20091005, this disclosure has no actionable...

CVE-2009-3570

Unspecified vulnerability in OpenOffice.org OOo has unspecified impact and remote attack vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.9. NOTE: as of 20091005, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable...

CVE-2009-3571

Unspecified vulnerability in OpenOffice.org OOo has unknown impact and client-side attack vector, as demonstrated by a certain module in VulnDisco Pack Professional 8.8, aka "Client-side exploit." NOTE: as of 20091005, this disclosure has no actionable information. However, because the VulnDisco...