اخبار امنيت رايانه

[ Massive Mode ] [ تماس ]

Security Tracker Archive :
Error in connection !

Bugtraq Posts :

[SECURITY] [DSA 2474-1] ikiwiki security update

DDIVRT-2012-44 Epicor Returns Management SOAP-Based Blind SQL Injection

[security bulletin] HPSBUX02782 SSRT100844 rev.1 - HP-UX Running OpenSSL, Remote Denial of

[security bulletin] HPSBUX02777 SSRT100854 rev.1 - HP-UX Running Java JRE and JDK, Remote Denial

[ MDVSA-2012:078 ] imagemagick

[ MDVSA-2012:077 ] imagemagick

[SECURITY] [DSA 2473-1] openoffice.org security update

FlashPeak SlimBrowser TITLE Denial Of Service Vulnerability

The story of the Linux kernel 3.x...

[SECURITY] [DSA 2472-1] gridengine security update

APPLE-SA-2012-05-15-1 QuickTime 7.7.2

Liferay 6.1 json webservices are subject to cross-site request forgery attacks

[ MDVSA-2012:075 ] ffmpeg

Liferay 6.1 can be compromised without having an account on the portal

Guests can view names and emailadresses of all Liferay users in liferay 6.1

Multiple xss issues in Liferay

APPLE-SA-2012-05-14-2 Leopard Security Update 2012-003

APPLE-SA-2012-05-14-1 Flashback Removal Security Update

NETGEAR Exposure of Sensitive Information - Security Advisory - SOS-12-005

Trigerring Java code from a SVG image

InfoSec News :

Advance Announcement: 2011 ACM Cloud Computing Security Workshop (CCSW) is back !

Unfollowed: How a (Possible) Social Network Spy Came Undone

US-Russian dictionary defines cyber war, other concepts

ICANN taps DefCon founder for top security spot

Teacher Passwords Stolen, Grades Hacked At 3 Seattle High Schools

[ACM CCS'11] Reminder: Deadline Approaching (May 6, 2011)

Cyberespionage: US finds FBI agents in elite unit lack necessary skills

Experts dissect hacker attacks during cybersecurity forum at Hagerstown Community College

Are we talking "cyber war" like the Bush admin talked WMDs?

Oracle hedging its vulnerability reports?

PlayStation credit card data was encrypted

Phone-hacking laws are 'very uneven and unclear'

USENIX WOOT '11 Submission Deadline Approaching

USENIX HotSec '11 Submission Deadline Extended

Court order cripples Coreflood botnet, says FBI

China Implicated In Hacking Of SMB Online Bank Accounts

Is Iran just seeing Stars?

Police: Wireless network hacker targeted Seattle-area businesses

New Workshop: USENIX FOCI '11 Submission Deadline Approaching

The Rising Tide Of Cyber-Threats Could Engulf National Infrastructures

Full Disclosure :

SEC Consult SA-20120518 :: Memory overwrite vulnerability in libwpd (OpenOffice.org) - CVE-2012-2149

Vulnerabilities on Cryptographp

[SECURITY] [DSA 2475-1] openssl security update

Resource Hacker Heap Overflow

LinkedIn CSRF: Login Brute Force

Vulnerability in is Dopewars

[ MDVSA-2012:078 ] imagemagick

Security BSidesDetroit

New Open Source Web Application VulnerabilityScanner Available

[SECURITY] [DSA 2474-1] ikiwiki security update

DDIVRT-2012-44 Epicor Returns ManagementSOAP-Based Blind SQL Injection

[ MDVSA-2012:077 ] imagemagick

[SECURITY] [DSA 2473-1] openoffice.org securityupdate

[Security-news] SA-CONTRIB-2012-082 - Zen - CrossSite Scripting

[Security-news] SA-CONTRIB-2012-081 - Aberdeen -Cross SiteScripting

[Security-news] SA-CONTRIB-2012-080 - Hostmaster(Aegir) - AccessBypass and Cross Site Scripting (XSS)

[Security-news] SA-CONTRIB-2012-079 - PostAffiliate Pro - CrossSite Scripting (XSS) and Access Bypass- Unsupported

[Security-news] SA-CONTRIB-2012-078 - SmartBreadcrumb - Cross SiteScripting (XSS)

[Security-news] SA-CONTRIB-2012-77 -Advertisement - Cross SiteScripting & Information Disclosure

[Security-news] SA-CONTRIB-2012-076 - UbercartProduct Keys AccessBypass

Secunia Advisories :
Error in connection !

CVE Compatible :

CVE-2012-2319 (linux_kernel)

CVE-2012-2123 (linux_kernel)

CVE-2012-2121 (linux_kernel)

CVE-2012-1601 (linux_kernel)

CVE-2012-1179 (linux_kernel)

CVE-2012-1146 (linux_kernel)

CVE-2012-1097 (linux_kernel)

CVE-2012-1090 (linux_kernel)

CVE-2012-0879 (linux_kernel)

CVE-2012-0207 (linux_kernel)

CVE-2012-0058 (linux_kernel)

CVE-2012-0044 (linux_kernel)

CVE-2012-0038 (linux_kernel)

CVE-2011-4621 (linux_kernel)

CVE-2011-4611 (linux_kernel)

CVE-2011-4594 (linux_kernel)

CVE-2011-4326 (linux_kernel)

CVE-2011-4131 (linux_kernel)

CVE-2011-4112 (linux_kernel)

CVE-2011-4097 (linux_kernel)

Packetstorm Archive :

Vanilla 2.0.18.4 Cross Site Scripting

Vanilla Latest Comment 1.1 Cross Site Scripting

Vanilla About Me 1.1.1 Cross Site Scripting

libssh2 C Library 1.4.2

Oracle Weblogic Apache Connector POST Request Buffer Overflow

Squiggle 1.7 SVG Browser Java Code Execution

libwpd WPXContentListener::_closeTableRow() Memory Overwrite

Hackers 2 Hackers 9 Call For Papers

HP Security Bulletin HPSBOV02780 SSRT100766

HP Security Bulletin HPSBUX02782 SSRT100844

Mandriva Linux Security Advisory 2012-078

HULK - Http Unbearable Load King

Admin Page Finder Script

Epicor Returns Management SOAP-Based Blind SQL Injection

Cross Site Scripting Walkthrough

PHP 5.4 Win32 Code Execution

HP VSA Command Execution

SkinCrafter 3.0 Buffer Overflow

Debian Security Advisory 2475-1

Ubuntu Security Notice USN-1445-1

Ubuntu Security Notice USN-1444-1

360-FAAR Firewall Analysis Audit And Repair 0.2.4

Cryptographp Local File Inclusion / HTTP Response Splitting

Web Application Vulnerability Scanner 0.11

Distro Watch News :

Distribution Release: Dream Studio 12.04

Distribution Release: ExTiX 10

Development Release: Zorin OS 6 RC

Development Release: Linux Mint 13 RC

Distribution Release: Hybryde Linux 1

Distribution Release: Parted Magic 2012_05_14

Development Release: siduction 12.1 RC

Distribution Release: Ophcrack LiveCD 3.4.0

Distribution Release: Chakra GNU/Linux 2012.05

DistroWatch Weekly, Issue 456

Latest Packages From DW :

05/19 epiphany 3.4.2

05/19 transmission 2.52

05/19 doxygen 1.8.1

05/19 MesaLib 8.0.3

05/19 ImageMagick 6.7.7-0

05/17 subversion 1.7.5

05/16 NVIDIA 295.53

05/15 snort 2.9.2.3

05/15 cups 1.5.3

05/15 e2fsprogs 1.42.3

05/15 midori 0.4.6

05/14 nautilus 3.4.2

InfoSec Writers :

Internet Acceptable Use Policies: Drawing the line

Securing Amazon Web Services (AWS) and Simple Storage Service (Amazon S3) Security

Getting maximum value from Penetration Testing

Old School Newbie Guide circa 2000

Analysis of Malicious Software Infections

Malware in Information Security

DoS! Denial of Service

An Analysis of the IDS Penetration Tool: Metasploit

Experimental Review of IPSec Features to Enhance IP Security

Cloud Computing � Storm Clouds or is it Smooth Flying?