[FD] ECommerce-Shopping Cart Zeuscart v. 4: Multiple reflecting XSS-, SQLi and InformationDisclosure-vulnerabilities

2015-02-22 Thread Steffen Rösemann
Advisory: Multiple reflecting XSS-, SQLi and InformationDisclosure-vulnerabilities in Zeuscart v.4 Advisory ID: SROEADV-2015-12 Author: Steffen Rösemann Affected Software: Zeuscart v.4 Vendor URL: http://zeuscart.com/ Vendor Status: pending CVE-ID: will asked to be assigned after release on FullDis

[FD] Fwd: Apple OS X: Don't trust, and don't prompt to trust certificates

2015-02-22 Thread Douglas Held
Summary: It is essential to provide a configuration option in the operating system to: 1. never trust invalid certificates, and 2. to not prompt to trust them. Steps to reproduce: 1. Install OS X on an Apple laptop. 2. Configure Mail.app (for example) to connect over SSL to your mail server. Pr