اخبار امنيت رايانه

[ Massive Mode ] [ تماس ]

Security Tracker Archive :

Novell iPrint Client Browser Plugin Bugs Let Remote Users Delete Files and Execute Arbitrary Code

Wireshark Buffer Oveflow in SigComp Universal Decompressor Virtual Machine Lets Remote Users Execute Arbitrary Code

FreeType 2 Font File Processing Errors Let Remote Users Execute Arbitrary Code

EMC Disk Library Communications Module Flaw Lets Remote Users Deny Service

Symantec Data Loss Prevention KeyView Filter Memory Corruption Errors Let Remote Users Deny Service

Symantec Mail Security KeyView Filter Memory Corruption Errors Let Remote Users Execute Arbitrary Code

IBM Lotus Notes Memory Corruption Errors in Various File Readers Let Remote Users Execute Arbitrary Code

LVM2 Missing Authentication in Cluster Local Volume Manager Lets Local Users Manage Volumes in the Cluster

Apple Safari Memory Corruption Errors Let Remote Users Execute Arbitrary Code

Google Chrome Multiple Flaws Let Remote Users Execute Arbitrary Code

JBoss Seam Input Validation Flaw in Processing JBoss Expression Language Expressions Lets Remote Users Execute Arbitrary Code

w3m NULL Character Flaw in Common Name Field Lets Remote Users Spoof Certificates

Symantec Antivirus Corporate Edition Alert Management Service Lets Remote Users Execute Arbitrary Code

Mac OS X WebDAV Memory Allocation Error Lets Local Users Deny Service

Citi Mobile Local File Storage May Disclose Potentially Sensitive Information to Local Users

Nessus Web Server Input Validation Flaw Permits Cross-Site Scripting Attacks

GnuPG GPGSM Tool Certificate Import Memory Error May Let Remote Users Execute Arbitrary Code

Mozilla Firefox Regression Error in Plugin Parameter Array Fix Lets Remote Users Execute Arbitrary Code

Apple Safari AutoFill Discloses Potentially Sensitive Information to Remote Users

Linux Kernel CIFS Filesystem DNS Lookup Caching Bug Lets Local Users Poison the Cache

Qt Memory Corruption Error in QTextEngine::LayoutData::reallocate() May Let Remote Users Execute Arbitrary Code

RSA Federated Identity Manager URL Redirection Flaw Lets Remote Users Bypass Security Controls

HP OpenView Network Node Manager Buffer Overflow in 'nnmrptconfig.exe' Lets Remote Users Execute Arbitrary Code

Cisco Content Delivery System Internet Streamer Directory Traversal Flaw Discloses Files to Remote Users

Mozilla Thunderbird Bugs Let Remote Users Execute Arbitrary Code, Bypass Same-Domain Controls, and Spoof URLs

Bugtraq Posts :

XSS vulnerability in Campsite

ESA-2010-012: EMC Disk Library (EDL) Denial Of Service Vulnerability

Day of bugs in WordPress 2

Akamai Download Manager arbitrary file download & execution

[SECURITY] [DSA 2077-1] New openldap packages fix potential code execution

[HITB-Ann] Reminder: HITB2010 Malaysia Call for Papers Closing August 9th

CFP NcN 2010

[ MDVSA-2010:142 ] openldap

PBBooking 1.0.4_3 Joomla Component Multiple Blind SQL Injection

[security bulletin] HPSBUX02556 SSRT100014 rev.2 - HP-UX Running rpc.ttdbserver, Remote Execution of Arbitrary Code

New vulnerabilities in Cetera eCommerce

Vulnerabilities in Cetera eCommerce

PhotoMap Gallery 1.6.0 Joomla Component Multiple Blind SQL Injection

[security bulletin] HPSBMA02549 SSRT090158 rev.2 - HP Insight Control Power Management for Windows, Local Unauthorized Read Access to Data

Jira Enterprise 4.0.1 - Multiple Low Risk Vulnerabilities

Secunia Research: Autonomy KeyView wkssr.dll Record Parsing Buffer Overflows

Secunia Research: Autonomy KeyView wkssr.dll String Indexing Vulnerability

Secunia Research: Autonomy KeyView wkssr.dll Integer Underflow Vulnerability

Secunia Research: Autonomy KeyView wosr.dll Data Block Parsing Buffer Overflow

InfoSec News :

Researcher Exposes Massive Automated Check Counterfeiting Operation Out of Russia

Security researcher demonstrates ATM hacking

DHS official fields hard questions at Black Hat

Android wallpaper app that steals your data was downloaded by millions

BlackBerry agrees to address India's security concerns: MHA

One Breach = $1 Million To $53 Million In Damages Per Year, Report Says

Black Hat too commercial for you?

Black Hat: Mobile Flaws Get Attention

[Dataloss Weekly Summary] Week of Sunday, July 18, 2010

39 IOS unveils advanced cyber schoolhouse addition

Call for Chapter Proposals

MoD loses a staggering 340 laptop computers in TWO YEARS...and most of them were not encrypted

CfP: WORKSHOP ON CLOUD PRIVACY, SECURITY, RISK & TRUST (CPSRT 2010) - Deadline Extended!

Police called over pizza hack

Wikileaks releases massive set of Afghan war files

Microsoft: No plans to pay for security vulnerabilities

Iran was prime target of SCADA worm

Hackers With Enigmatic Motives Vex Companies

Linux Advisory Watch: July 23rd, 2010

Why no one wants DHS to play cyber mall cop

Full Disclosure :

[SECURITY] [DSA 2078-1] New kvirc packages fixarbitrary IRC command execution

[ MDVSA-2010:143 ] gnupg2

NULL + H4CK3R Meet in Delhi on 31st July 2010

WAF fail

Akamai Download Manager arbitrary file download &execution

Black Hat Video Stream Hack - Ironic

Day of bugs in WordPress 2

[SECURITY] [DSA 2077-1] New openldap packages fixpotential code execution

the real stuxnet authors plz stand up

[HITB-Ann] Reminder: HITB2010 Malaysia Call forPapers Closing August 9th

[ MDVSA-2010:142 ] openldap

New vulnerabilities in Cetera eCommerce

Vulnerabilities in Cetera eCommerce

Qualys Adds Exploitability Data

Secunia Research: Autonomy KeyView wkssr.dllRecord Parsing Buffer Overflows

Secunia Research: Autonomy KeyView wkssr.dllString Indexing Vulnerability

Secunia Research: Autonomy KeyView wkssr.dllInteger Underflow Vulnerability

Secunia Research: Autonomy KeyView wosr.dll DataBlock Parsing Buffer Overflow

Secunia Research: Autonomy KeyView rtfsr.dll RTFParsing Signedness Error

Secunia Research: Autonomy KeyView wkssr.dllFloating Point Conversion Buffer Overflow

Secunia Advisories :
Error in connection !

CVE Compatible :

CVE-2010-2913 (citi_mobile)

CVE-2010-2755 (firefox)

CVE-2010-2754 (firefox, thunderbird, seamonkey)

CVE-2010-2528 (pidgin)

CVE-2010-1777 (itunes)

CVE-2010-2912 (esupport)

CVE-2010-2911 (esupport)

CVE-2010-2910 (com_oziogallery)

CVE-2010-2909 (com_ttvideo)

CVE-2010-2908 (com_joomdle)

CVE-2010-2907 (com_huruhelpdesk)

CVE-2010-2906 (scripts_directory)

CVE-2010-2905 (scripts_directory)

CVE-2010-2904 (netweaver, system_landscape_directory)

CVE-2010-2903 (chrome)

CVE-2010-2902 (chrome)

CVE-2010-2901 (chrome)

CVE-2010-2900 (chrome)

CVE-2010-2899 (chrome)

CVE-2010-2898 (chrome)

Packetstorm Archive :

MDVSA-2010-142.txt

uplusftp-overflow.txt

symantecams-flaw.txt

jira-xss.txt

secunia-autonomykvrp.txt

secunia-autonomykvindex.txt

zemana-escalate.txt

ceteraecommerce-sqlxss.txt

secunia-wkssriu.txt

secunia-autonomywosr.txt

secunia-autonomyrtfsigned.txt

secunia-autonomywkssr.txt

secunia-autonomycfp.txt

apachetomcat-traversal.txt

joomlaphotomapgallery-sql.txt

avarcade-insecure.txt

joomlattvideo-sql.txt

msvisualstudio-overflow

AdminLoginFinder.tar.gz

stackbf.c

joomlaappointinator-sql.txt

syndeocms-xss.txt

MDVSA-2010-139.txt

major_rls79.txt

Distro Watch News :

BSD Release: GhostBSD 1.5

Development Release: Nexenta Core Platform 3.0 RC3

Development Release: Parsix GNU/Linux 3.6 RC

Distribution Release: Linux Mint 9 "KDE"

Development Release: Skolelinux 6.0 Alpha 0

Distribution Release: Clonezilla Live 1.2.5-35

Development Release: Frugalware Linux 1.3 RC1

DistroWatch Weekly, Issue 364

Distribution Release: eBox Platform 1.5

BSD Release: FreeBSD 8.1

Latest Packages From DW :

07/31 gcc 4.5.1

07/31 kdevelop 4.0.1

07/31 gnumeric 1.10.8

07/31 yum 3.2.28

07/30 NVIDIA 256.44

07/30 wordpress 3.0.1

07/30 vlc 1.1.2

07/30 wireshark 1.2.10

07/29 synaptic 0.63.2

07/29 git 1.7.2.1

07/29 lvm 2.02.72

07/28 ImageMagick 6.6.3-1

InfoSec Writers :

Experimental Review of IPSec Features to Enhance IP Security

Cloud Computing � Storm Clouds or is it Smooth Flying?

The Evolving World of Computer Security and Laws

Web Access Management and Single Sign-On

Reverse Honey Trap

The Phishing Guide

Shedding Light on Quantum Cryptography

Securing a Virtual Environment

Investigating the SANS/CWE Top 25 Most Dangerous Programming Errors List

Hacking Tools & Techniques and How to Protect Your Network from Them