CVE-2011-4289

Moodle 2.0.x before 2.0.3 does not recognize the configuration setting that makes e-mail addresses visible only to course members, which allows remote authenticated users to obtain sensitive address information by reading a full profile page...

389-ds-base security update

1.2.10.2-18 - Resolves: Bug 830001 - unhasheduserpassword visible after changing password -- patch 0020 disallows users' direct modify on unhasheduserpassword 1.2.10.2-17 - Resolves: Bug 830001 - unhasheduserpassword visible after changing password -- patch 0019 fixes deref issue. 1.2.10.2-16 -...

Hidden keyboard navigation can allow cross site scripting or code execution

When a user is interacting with a window, that window should be visible to the user, to ensure that the user realizes it is there. If a page is displayed in a small enough window, the user may not realize it is being displayed, and if the right keyboard sequence is carefully followed, they can en...

Cyberoam UTM 10.01.2 build 059 File Include Vulnerabilities

Exploit for multiple platform in category web applications Title: ====== Cyberoam UTM v10.01.2 build 059 - File Include Vulnerabilities Introduction: ============= Cyberoam Unified Threat Management appliances offer comprehensive security to organizations, ranging from large enterprises to small...

Comment field on GH cards do not respect the comment visibility.

If you add the Comment field on any Issue Views on GH the field shows the latest comment but it doesn't inherit the comment visibility from Jira. This misbehaviour happens on Planning board and Task board with any GH views Summaries, Cards and Lists. Steps to Reproduce: Add the comment field to a...

Comment field on GH cards do not respect the comment visibility.

If you add the Comment field on any Issue Views on GH the field shows the latest comment but it doesn't inherit the comment visibility from Jira. This misbehaviour happens on Planning board and Task board with any GH views Summaries, Cards and Lists. Steps to Reproduce: Add the comment field to a...

Comment field on GH cards do not respect the comment visibility.

If you add the Comment field on any Issue Views on GH the field shows the latest comment but it doesn't inherit the comment visibility from Jira. This misbehaviour happens on Planning board and Task board with any GH views Summaries, Cards and Lists. Steps to Reproduce: Add the comment field to a...

The Hacker News arrived on Google+ Pages

The Hacker News arrived on Google+ Pages Google has finally added Google+ Pages feature in their social network which allow brands, products, companies, businesses, places, groups, and everyone else to establish a presence on the service. We've gone ahead and set up our very own 'The Hacker News'...

Blue Coat Reporter Unauthenticated Directory Traversal

Exploit for hardware platform in category remote exploits Exploit Title: Blue Coat Reporter Unauthenticated Directory Traversal Author: nitr0us / http://twitter.com/nitr0usmx Software Link: http://www.bluecoat.com/products/reporter Version: 9.2.x - 9.1.x Tested on: Windows Server 2003 Standard Bl...

Links and Privacy

If you are affiliated with other websites — if you have a blog, are on Facebook, tweet on Twitter, or have a Tumblr account — then the Google+ “Links” feature is a great way to consolidate your life online that can also impact or impair your online privacy. When adding sites to your “Links,” you...

Hell is other people: network visibility on G+

Your Circles are never revealed to other Google+ users, but your friends are – by default. Depending on who you buddy up with or follow, that could be a bad thing. Fortunately, there’s a way to limit who can view your Google+ friends and followers. In the Privacy tab, under Sharing, click Edit...

One Circle To Rule Them All!

If you’re going to use Google+, you’ve got to master the fine art of Circle Management. Circles are the main privacy control center of Google+. They allow you to create groups of friends and associates using a powerful and cool user interface that makes it easy group friends, family and coworkers...

Ready for your close up: Profile Management

The profile editing section is the brains of the Google+’s privacy, providing a versatile interface that allows you to customize how you share each and every nugget of your information. Those who want to really be open can share personal details and their demographics with billions of Internet...

[SECURITY] Fedora 13 Update: proftpd-1.3.3c-1.fc13

ProFTPD is an enhanced FTP server with a focus toward simplicity, security, and ease of configuration. It features a very Apache-like configuration syntax, and a highly customizable server infrastructure, including support for multiple 'virtual' FTP servers, anonymous FTP, and permission-based...

Can't set visibility on comment created via Activity Stream Gadget

I can't restrict the visibility of an comment created via the activity stream gadget. In our environment it is important for us to have this feature available everywhere where users are able to create comments on issues...

Can't set visibility on comment created via Activity Stream Gadget

I can't restrict the visibility of an comment created via the activity stream gadget. In our environment it is important for us to have this feature available everywhere where users are able to create comments on issues...

Property for enabling/disabling viewage of Jira administrators

panel:bgColor=e7f4fa NOTE: This suggestion is for JIRA Server. Using JIRA Cloud? See the corresponding suggestion|http://jira.atlassian.com/browse/JRACLOUD-22096. panel As of JRA-21004, it also happened that the Administrator page does not show the administrators anymore. This patch is enables...

vBulletin 3.8.6 - 'faq.php' Information Disclosure

010101010101010101010101010101010101010101010101010101010 0 0 1 Iranian Datacoders Security Team 2010 0 0 010101010101010101010101010101010101010101010101010101010 Original Advisory: http://forum.intern0t.net/exploits-vulnerabilities-pocs/2857-vbulletin-3-8-6-critical-information-disclosure.html...

CVE-2009-4907

Multiple cross-site request forgery CSRF vulnerabilities in oBlog allow remote attackers to hijack the authentication of administrators for requests that 1 change the admin password, 2 force an admin logout, 3 change the visibility of posts, 4 remove links, and 5 change the name fields of a blog...

CVE-2009-4907

Multiple cross-site request forgery CSRF vulnerabilities in oBlog allow remote attackers to hijack the authentication of administrators for requests that 1 change the admin password, 2 force an admin logout, 3 change the visibility of posts, 4 remove links, and 5 change the name fields of a blog...