اخبار امنيت رايانه

[ Massive Mode ] [ تماس ]

Security Tracker Archive :
Error in connection !

Bugtraq Posts :

AdaCore Security Advisory SA-2012-L119-003 Hash collisions in AWS

[HITB-Announce] Reminder: HITB2012AMS Call For Papers Closing Soon

[SECURITY] [DSA 2394-1] libxml2 security update

ESA-2012-007: RSA, The Security Division of EMC, announces security fixes for RSA enVision

ESA-2012-005: EMC NetWorker buffer overflow vulnerability

Cisco Security Advisory: Cisco IronPort Appliances Telnet Remote Code Execution Vulnerability

NX Web Companion Spoofing Arbitrary Code Execution Vulnerability

[SECURITY] [DSA-2393-1] bip security update

D-Link DIR-601 TFTP Directory Traversal Vulnerability

CSRF (Cross-Site Request Forgery) in DClassifieds

Multiple vulnerabilities in OSclass

NGS00117 Patch Notification: Symantec PCAnywhere Local Privilege Escalation

NGS00118 Patch Notification: Symantec PCAnywhere Remote Code Execution as SYSTEM

[security bulletin] HPSBUX02729 SSRT100687 rev.3 - HP-UX Running BIND, Remote Denial of Service (DoS)

[security bulletin] HPSBUX02719 SSRT100658 rev.4 - HP-UX Running BIND, Remote Denial of Service (DoS)

[security bulletin] HPSBUX02734 SSRT100729 rev.1 - HP-UX Running OpenSSL, Remote Denial of Service (DoS), Unauthorized Access

[security bulletin] HPSBUX02730 SSRT100710 rev.1 - HP-UX Running Java, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities

TWSL2012-002: Multiple Vulnerabilities in WordPress

Only 7 Days Left: SANS AppSec 2012 CFP

NGS00193 Patch Notification: Trend Micro DataArmor and DriveArmor - Restricted Environment breakout, Privilege Escalation and Full Disk Decryption

InfoSec News :

Advance Announcement: 2011 ACM Cloud Computing Security Workshop (CCSW) is back !

Unfollowed: How a (Possible) Social Network Spy Came Undone

US-Russian dictionary defines cyber war, other concepts

ICANN taps DefCon founder for top security spot

Teacher Passwords Stolen, Grades Hacked At 3 Seattle High Schools

[ACM CCS'11] Reminder: Deadline Approaching (May 6, 2011)

Cyberespionage: US finds FBI agents in elite unit lack necessary skills

Experts dissect hacker attacks during cybersecurity forum at Hagerstown Community College

Are we talking "cyber war" like the Bush admin talked WMDs?

Oracle hedging its vulnerability reports?

PlayStation credit card data was encrypted

Phone-hacking laws are 'very uneven and unclear'

USENIX WOOT '11 Submission Deadline Approaching

USENIX HotSec '11 Submission Deadline Extended

Court order cripples Coreflood botnet, says FBI

China Implicated In Hacking Of SMB Online Bank Accounts

Is Iran just seeing Stars?

Police: Wireless network hacker targeted Seattle-area businesses

New Workshop: USENIX FOCI '11 Submission Deadline Approaching

The Rising Tide Of Cyber-Threats Could Engulf National Infrastructures

Full Disclosure :

[ GLSA 201201-17 ] Chromium: Multiplevulnerabilities

[ GLSA 201201-16 ] X.Org X Server/X KeyboardConfiguration Database: Screen lock bypass

[SECURITY] [DSA 2396-1] qemu-kvm security update

[SECURITY] [DSA 2395-1] wireshark security update

Advisory: Remote Command Execution in Gitorious

Fortigate UTM WAF Appliance - Multiple WebVulnerabilities

[ GLSA 201201-15 ] ktsuss: Privilege escalation

[SECURITY] [DSA 2394-1] libxml2 security update

Fw: when did piracy/theft become expression offreedom

when did piracy/theft become expression of freedom

[HITB-Announce] Reminder: HITB2012AMS Call ForPapers Closing Soon

Multiple new vulnerabilities in Register Plus forWordPress

Cisco Security Advisory: Cisco IronPortAppliances Telnet Remote Code Execution Vulnerability

DNS bind attacks

Megaupload Anonymous hacker retaliation,nobody wins

Anonymous deletes CBS.com,solicits opinions on who to hack next

Faux Anonymous hackers to Facebook: 'We're notplaying'

CFP: MobiPST 2012

[SECURITY] [DSA-2393-1] bip security update

Secunia Advisories :
Error in connection !

CVE Compatible :

CVE-2012-0807 (suhosin)

CVE-2012-0806 (bip)

CVE-2012-0395 (networker)

CVE-2011-4354 (openssl)

CVE-2011-4143 (envision)

CVE-2012-0312 (online_merchant, oscommerce)

CVE-2012-0311 (oscommerce)

CVE-2011-1941 (phpmyadmin)

CVE-2011-1940 (phpmyadmin)

CVE-2011-4276 (android)

CVE-2012-0885 (open_source)

CVE-2011-3479 (pcanywhere)

CVE-2011-3478 (pcanywhere)

CVE-2011-4867 (qqpphoto)

CVE-2011-4866 (kaixin001)

CVE-2011-4865 (microblogpad, wblog)

CVE-2011-4864 (mobileqq)

CVE-2011-4863 (qqpimsecure)

CVE-2011-4773 (anguanjia)

CVE-2011-4772 (kouxin)

Packetstorm Archive :

Gitorious Remote Command Execution

HP Diagnostics Server magentservice.exe Overflow

MS12-004 midiOutPlayNextPolyEvent Heap Overflow

AWS Hash Collisions

Studio Manolibera Listarivisteuk SQL Injection

Dark D0rk3r 0.5

IBBY SQL Injection

Kraken Payload Generator Beta 1.0

Fortigate UTM WAF Appliance Cross Site Scripting

Adobe Cross Site Scripting

Gentoo Linux Security Advisory 201201-16

Debian Security Advisory 2396-1

Debian Security Advisory 2395-1

Interactive Web Design SQL Injection

Global Media Service SQL Injection

Gentoo Linux Security Advisory 201201-15

Debian Security Advisory 2394-1

vBSEO 3.6.0 proc_deutf() Remote PHP Code Injection

Peel SHOPPING 2.8 / 2.9 Cross Site Scripting / SQL Injection

RSA enVision Variable Disclosure

EMC NetWorker Buffer Overflow

xClick Cart 1.0.1 / 1.0.2 Cross Site Scripting

Sysax Multi Server 5.50 Create Folder Buffer Overflow

Cisco Security Advisory 20120126-ironport

Distro Watch News :

DistroWatch Weekly, Issue 440

Distribution Release: Toorox 01.2012

DistroWatch Weekly, Issue 439

Development Release: Frugalware Linux 1.6 RC1

Distribution Release: ArtistX 1.2

Development Release: DEFT Linux 7 RC1

BSD Release: PC-BSD 9.0

Development Release: Mageia 2 Alpha 3

BSD Release: FreeBSD 9.0

Distribution Release: Webconverger 11.0

Latest Packages From DW :

01/27 gnucash 2.4.10

01/27 ffmpeg 0.10

01/26 lvm 2.02.89

01/26 ati-driver 8.930

01/26 linux 3.2.2

01/25 ImageMagick 6.7.4-10

01/25 samba 3.6.2

01/25 curl 7.24.0

01/25 kdelibs 4.8.0

01/25 kdewebdev 4.8.0

01/25 alsa-lib 1.0.25

01/22 ntfs-3g 2012.1.15

01/22 webmin 1.580

01/20 miro 4.0.5

01/20 gnome-shell 3.2.2.1

01/19 snort 2.9.2.1

InfoSec Writers :

Old School Newbie Guide circa 2000

Analysis of Malicious Software Infections

Malware in Information Security

DoS! Denial of Service

An Analysis of the IDS Penetration Tool: Metasploit

Experimental Review of IPSec Features to Enhance IP Security

Cloud Computing � Storm Clouds or is it Smooth Flying?

The Evolving World of Computer Security and Laws

Web Access Management and Single Sign-On

Reverse Honey Trap