The finest blend of the latest IT security news headlines, updated every 4 hours.

IT Security News
Regular Security News
Social Media
Tools 		Exploits
Vulnerabilities
Security Videos & Podcasts
Other Stuff 		Security Blogs
Microsoft Security Advisories
Mailing Lists 		Bookmark + Share

Colour scheme


IT Security News

Packet Storm Security Headlines

The Register – Security

Security Bloggers Network

SANS Internet Storm Center, InfoCON: green

SecurityFocus News

[ISN] InfoSec News Mailing List

CNET News – Security

IT Security

 Do you <3 the security news?
Then help us get more links by bookmarking us on sites like digg, delicious, etc.

Regular Security News

hacking – Google News

computer security – Google News

Threat Level

Social Media
Reddit

network security

digg.com: Stories / Security / Popular

digg.com: Stories / Security / Upcoming

Delicious/tag/security

Delicious/tag/hacking

Delicious/tag/encryption

Slashdot: Your Rights Online

 Got any bright ideas about what to put here? I’m sure you can think of something with an rss feed

Tools

Packet Storm Security Tools

  • AdminLoginFinder.tar.gz AdminLoginFnder is a perl script that scans webservers for administrative login / control panel sections.
  • fbruteforcer.py.txt This is a simple Facebook bruteforcing script that makes use of the Python Mechanize module and a wordlist.
  • stackbf.c Stack bruteforcing utility against buffer overflow programs with ASLR. Provides polymorphic shellcode for /bin/sh.
  • fuzzdiff.py.txt FuzzDiff is a simple tool created to assist in helping make crash analysis during file format fuzzing a bit easier. When provided with a fuzzed file, a corresponding original un-fuzzed file, and the path to the targeted program, FuzzDiff will selectively un-fuzz portions of the fuzzed file while re-. […]
  • dff-0.7.0-src.tar.gz DFF (Digital Forensics Framework) is a simple but powerful tool with a flexible module system which will help you in your digital forensics works, including file recovery due to error or crash, evidence research and analysis, etc. DFF provides a robust architecture and some handy modules.
  • RewriteProxy.tar.gz RewriteProxy is a small python tool that is based on the twisted library. Its purpose is to serve local files instead of remote files to fool the same-domain policy of modified flash and java-applets.
  • watobo_0.9.2rev149.zip WATOBO, the Web Application Toolbox, is a tool that enables security professionals to perform highly efficient (semi-automated) web application security audits. It acts like a local proxy and analyzes the traffic on the fly for helpful information and vulnerabilities. It also has automated scanning. […]
  • PHPJackal.php.gz PHPJackal is a PHP script that can be used to manage files, perform safemode bypass, has crackers built-in, various network scanners and more.
  • skipfish-1.52b.tgz Skipfish is a fully automated, active web application security reconnaissance tool. It is high speed, has a low false positive rate, and is easy to use.
  • webenum-0.1.py.gz WebEnum is a tool to enumerate http responses to dynamically generated queries. It is a flexible universal tool to perform penetration testing on web servers. It’s useful for guessing resource names and columns size in SQL injection, bruteforce web accounts and passwords, discovery web directories a. […]

CNET Download.com Security Software New Releases

Exploits

Packet Storm Security Exploits

  • uplusftp-overflow.txt UPlusFTP Server version 1.7.1.01 remote buffer overflow post authentication exploit.
  • symantecams-flaw.txt Symantec Antivirus Corporate Edition AMS Intel Alert Handler service (hndlrsvc.exe) proof of concept command execution exploit.
  • jira-xss.txt Jira version 4.0.1 suffers from a cross site scripting vulnerability.
  • zemana-escalate.txt Zemana AntiLogger with AntiLog32.sys versions 1.5.2.755 and below suffer from a local privilege escalation vulnerability.
  • ceteraecommerce-sqlxss.txt Cetera eCommerce versions 14.0 and below suffer from cross site scripting and remote SQL injection vulnerabilities.
  • apachetomcat-traversal.txt UTF-8 directory traversal /etc/passwd grabbing exploit for Apache Tomcat versions prior to 6.0.18.
  • joomlaphotomapgallery-sql.txt Joomla PhotoMap Gallery version 1.6.0 suffers from multiple remote blind SQL injection vulnerabilities.
  • avarcade-insecure.txt AV Arcade version 3 suffers from insecure cookie and SQL injection vulnerabilities.
  • nubuilder-rfi.txt nuBuilder version 10.04.x suffers from a remote file inclusion vulnerability.
  • punbbpunpm-sql.txt PunBB versions 1.3.x and below with Pun_PM versions 1.2.6 and below remote blind SQL injection exploit.

Exploit-DB updates

Securityvulns exploits channel

  • dmfilemanagerex.php DM Filemanager (fckeditor) Remote Arbitrary File Upload Exploit
  • pcnfsd.c rpc.pcnfsd remote format string exploit, tested against AIX 6.1.0 and lower
  • gs_ps.pl GhostScript 8.70 PoC
  • gs_bsd.pl GhostScript 8.70 exploit for FreeBSD 8.0
  • sysaxex.pl Exploits Sysax Multi Server “open”, “unlink”, “mkdir”, “scp_get” Commands DoS Vulnerabilities
  • phpwcmsex2.php PHPWCMS Cross-Site Request Forgery Vulnerability exploit
  • eset_lzh.zip ESET Smart Security 4.2 and NOD32 Antivirus 4.2 (x32-x64) LZH archive parsing PoC exploit.
  • marqex.html Exploit for all browsers (Tested on: Mozilla Firefox // Internet Explorer // Google Chrome // Netscape
  • novanet-dos.c NovaSTOR NovaNET/NovaBACKUP
  • novanet-own.c NovaSTOR NovaNET
  • novanet-read.c NovaSTOR NovaNET remote DoS + arbitrary memory read
  • novanet-own-lnx.c NovaSTOR NovaNET
  • completeftpdos.pl CompleteFTP v3.3.0 – Remote Memory Consumption DoS
  • micropointex.c Micropoint Proactive Denfense Mp110013.sys
  • winsoftmagicex.c Exploits WinSoftMagic Photo Editor .PNG File Buffer Overflow
  • vbulletindos.pl vBulletin Denial Of Service Exploit

Inj3ct0r.com

Vulnerabilities

Packet Storm Security Advisories

  • MDVSA-2010-142.txt Mandriva Linux Security Advisory 2010-142 – The slap_modrdn2mods function in modrdn.c in OpenLDAP 2.4.22 does not check the return value of a call to the smr_normalize function, which allows remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a. […]
  • secunia-autonomykvrp.txt Secunia Research has discovered two vulnerabilities in Autonomy KeyView, which can be exploited by malicious people to compromise a vulnerable system. The vulnerabilities are caused by boundary errors in the SpreadSheet Lotus 123 reader (wkssr.dll) when parsing certain records. This can be exploited. […]
  • secunia-autonomykvindex.txt Secunia Research has discovered a vulnerability in Autonomy KeyView, which can be exploited by malicious people to potentially compromise a vulnerable system. The vulnerability is caused by an error in the SpreadSheet Lotus 123 reader (wkssr.dll) when allocating an array of pointers during the parsi. […]
  • secunia-wkssriu.txt Secunia Research has discovered a vulnerability in Autonomy KeyView, which can be exploited by malicious people to cause a DoS (Denial of Service) and potentially compromise a vulnerable system. The vulnerability is caused by an integer underflow error in the SpreadSheet Lotus 123 reader (wkssr.dll). […]
  • secunia-autonomywosr.txt Secunia Research has discovered a vulnerability in Autonomy KeyView, which can be exploited by malicious people to compromise a vulnerable system. The vulnerability is caused by a boundary error the WordPerfect 5.x reader (wosr.dll) when parsing data blocks and can be exploited to cause a heap-based. […]
  • secunia-autonomyrtfsigned.txt Secunia Research has discovered a vulnerability in Autonomy KeyView, which can be exploited by malicious people to compromise a vulnerable system. The vulnerability is caused by a signedness error when parsing the argument to the \\ls keyword within a list override table entry in RTF files. This can. […]
  • secunia-autonomywkssr.txt Secunia Research has discovered a vulnerability in Autonomy KeyView, which can be exploited by malicious people to compromise a vulnerable system. The vulnerability is caused by a boundary error in the Spreadsheet Lotus 123 reader (wkssr.dll) when converting floating point values in certain record t. […]
  • secunia-autonomycfp.txt Secunia Research has discovered a vulnerability in Autonomy KeyView, which can be exploited by malicious people to compromise a vulnerable system. The vulnerability is caused by a boundary error when parsing record data in compound documents. This can be exploited to cause a heap-based buffer overfl. […]
  • dsa-2076-1.txt Debian Linux Security Advisory 2076-1 – It was discovered that GnuPG 2 uses a freed pointer when verify a signature or importing a certificate with many Subject Alternate Names, potentially leading to arbitrary code execution.
  • dsa-2075-1.txt Debian Linux Security Advisory 2075-1 – Several remote vulnerabilities have been discovered in Xulrunner, a runtime environment for XUL applications.

Bugtraq

  • New vulnerabilities in Cetera eCommerce Posted by MustLive on Jul 28Hello Bugtraq! I want to warn you about security vulnerabilities in Cetera eCommerce. —————————– Advisory: New vulnerabilities in Cetera eCommerce —————————– URL: http://websecurity.com.ua/4266/ —————————– Affected. […]
  • Vulnerabilities in Cetera eCommerce Posted by MustLive on Jul 28Hello Bugtraq! I want to warn you about security vulnerabilities in Cetera eCommerce. Which I disclosed already in December 2009 (SecurityVulns ID: 10489). —————————– Advisory: Vulnerabilities in Cetera eCommerce —————————– URL: http:. […]
  • PhotoMap Gallery 1.6.0 Joomla Component Multiple Blind SQL Injection Posted by Salvatore Fresta aka Drosophila on Jul 28PhotoMap Gallery 1.6.0 Joomla Component Multiple Blind SQL Injection Name PhotoMap Gallery Vendor http://photoindochina.com Versions Affected 1.6.0 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta. […]
  • [security bulletin] HPSBMA02549 SSRT090158 rev.2 – HP Insight Control Power Management for Windows, Local Unauthorized Read Access to Data Posted by security-alert on Jul 28SUPPORT COMMUNICATION – SECURITY BULLETIN Document ID: c02282361 Version: 2 HPSBMA02549 SSRT090158 rev.2 – HP Insight Control Power Management for Windows, Local Unauthorized Read Access to Data NOTICE: The information in this Security Bulletin should be acted upon. […]
  • Jira Enterprise 4.0.1 – Multiple Low Risk Vulnerabilities Posted by advisories on Jul 28 Jira – Multiple Low Risk Vulnerabilities Versions Affected: 4.0.1 (other versions were not checked.) Info: JIRA provides issue tracking and project tracking for software development teams to improve code quality and the speed of development. (and so forth.) External Li. […]
  • Secunia Research: Autonomy KeyView wkssr.dll Record Parsing Buffer Overflows Posted by Secunia Research on Jul 28====================================================================== Secunia Research 28/07/2010 – Autonomy KeyView wkssr.dll Record Parsing Buffer Overflows – ====================================================================== Table of Contents Affected Soft. […]
  • Secunia Research: Autonomy KeyView wkssr.dll String Indexing Vulnerability Posted by Secunia Research on Jul 28====================================================================== Secunia Research 28/07/2010 – Autonomy KeyView wkssr.dll String Indexing Vulnerability – ====================================================================== Table of Contents Affected Softwa. […]
  • Secunia Research: Autonomy KeyView wkssr.dll Integer Underflow Vulnerability Posted by Secunia Research on Jul 28====================================================================== Secunia Research 28/07/2010 – Autonomy KeyView wkssr.dll Integer Underflow Vulnerability – ====================================================================== Table of Contents Affected Soft. […]
  • Secunia Research: Autonomy KeyView wosr.dll Data Block Parsing Buffer Overflow Posted by Secunia Research on Jul 28====================================================================== Secunia Research 28/07/2010 – Autonomy KeyView wosr.dll Data Block Parsing Buffer Overflow – ====================================================================== Table of Contents Affected So. […]
  • Secunia Research: Autonomy KeyView rtfsr.dll RTF Parsing Signedness Error Posted by Secunia Research on Jul 28====================================================================== Secunia Research 28/07/2010 – Autonomy KeyView rtfsr.dll RTF Parsing Signedness Error – ====================================================================== Table of Contents Affected Softwar. […]
  • Secunia Research: Autonomy KeyView wkssr.dll Floating Point Conversion Buffer Overflow Posted by Secunia Research on Jul 28====================================================================== Secunia Research 28/07/2010 – Autonomy KeyView wkssr.dll – - Floating Point Conversion Buffer Overflow – ====================================================================== Table of Contents. […]
  • Secunia Research: Autonomy KeyView Compound File Parsing Buffer Overflow Posted by Secunia Research on Jul 28====================================================================== Secunia Research 28/07/2010 – Autonomy KeyView Compound File Parsing Buffer Overflow – ====================================================================== Table of Contents Affected Software. […]
  • Re: TTVideo 1.0 Joomla Component SQL Injection Vulnerability Posted by martin on Jul 28Thanks for spotting this. I overlooked this in my haste to release. I have fixed the issue now and the flawed version is not longer available for download.
  • Appointinator 1.0.1 Joomla Component Multiple Remote Vulnerabilities Posted by Salvatore Fresta aka Drosophila on Jul 28Appointinator 1.0.1 Joomla Component Multiple Remote Vulnerabilities Name Appointinator Vendor http://appointinator.chemeia.info Versions Affected 1.0.1 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatoref. […]
  • [SECURITY] [DSA 2075-1] New xulrunner packages fix several vulnerabilities Posted by Moritz Muehlenhoff on Jul 28———————————————————————— Debian Security Advisory DSA-2075-1 security () debian org http://www.debian.org/security/ Moritz Muehlenhoff July 27, 2010 http://www.debian.org/security/faq ——————————. […]

SecurityFocus Vulnerabilities

Unofficial Secunia Security Advisories

  • [4/5] SUSE update for MozillaFirefox and mozilla-xulrunner191 SUSE has issued an update for MozillaFirefox and mozilla-xulrunner191. This fixes multiple vulnerabilities, which can be exploited by malicious people to disclose potentially sensitive information, bypass certain security restrictions, and compromise a user’s system. http://secunia.com/advisories/. […]
  • [3/5] Red Hat update for libtiff Red Hat has issued an update for libtiff. This fixes some vulnerabilities, which can be exploited by malicious people to cause a DoS (Denial of Service) and potentially compromise an application using the library. http://secunia.com/advisories/40536/
  • [2/5] Fedora update for kernel Fedora has issued an update for the kernel. This fixes a vulnerability and a security issue, which can be exploited by malicious, local users to bypass certain security restrictions, cause a DoS (Denial of Service), and potentially gain escalated privileges. http://secunia.com/advisories/40533/
  • [2/5] LISTSERV "T" Cross-Site Scripting Vulnerability Ram Sripracha has discovered a vulnerability in LISTSERV, which can be exploited by malicious people to conduct cross-site scripting attacks. http://secunia.com/advisories/40529/
  • [2/5] osCSS "page" Cross-Site Scripting Vulnerability A vulnerability has been discovered in osCSS, which can be exploited by malicious people to conduct cross-site scripting attacks. http://secunia.com/advisories/40502/
  • [3/5] Fedora update for w3m Fedora has issued an update for w3m. This fixes a vulnerability, which can be exploited by malicious people to conduct spoofing attacks. http://secunia.com/advisories/40531/
  • [3/5] Red Hat update for libtiff Red Hat has issued an update for libtiff. This fixes some vulnerabilities, which can be exploited by malicious people to cause a DoS (Denial of Service) and potentially compromise a vulnerable system. http://secunia.com/advisories/40527/
  • [2/5] b2evolution Cross-Site Request Forgery Vulnerability A vulnerability has been discovered in b2evolutioin, which can be exploited by malicious people to conduct cross-site request forgery attacks. http://secunia.com/advisories/40490/
  • [3/5] Ubuntu update for libpng Ubuntu has issued an update for libpng. This fixes two vulnerabilities, which can be exploited by malicious people to cause a DoS (Denial of Service) and potentially compromise an application using the library. http://secunia.com/advisories/40472/
  • [3/5] Podcast Generator "filename" Directory Traversal Vulnerability BlackHawk has discovered a vulnerability in Podcast Generator, which can be exploited by malicious people to disclose potentially sensitive information. http://secunia.com/advisories/40467/
  • [4/5] SUSE update for acroread SUSE has issued an update for acroread. This fixes multiple vulnerabilities, which can be exploited by malicious people to compromise a user’s system. http://secunia.com/advisories/40487/
  • [3/5] Sijio Multiple Script Insertion Vulnerabilities Multiple vulnerabilities have been reported in Sijio, which can be exploited by malicious users to conduct script insertion attacks. http://secunia.com/advisories/40492/
  • [3/5] Pligg "username" SQL Injection Vulnerability A vulnerability has been discovered in Pligg, which can be exploited by malicious people to conduct SQL injection attacks. http://secunia.com/advisories/40516/
  • [3/5] Cisco Industrial Ethernet 3000 Hardcoded SNMP Community Names A security issue has been reported in Cisco Industrial Ethernet 3000, which can be exploited by malicious people to potentially compromise a vulnerable device. http://secunia.com/advisories/40407/
  • [2/5] IBM BladeCenter Advanced Management Module Multiple Vulnerabilities Some vulnerabilities have been reported in IBM BladeCenter Advanced Management Module, which can be exploited by malicious users to disclose sensitive information and by malicious people to conduct cross-site scripting attacks or disclose potentially sensitive information. http://secunia.com/advisor. […]
  • [3/5] Ghost Recon Advanced Warfighter Two Vulnerabilities Luigi Auriemma has reported two vulnerabilities in Ghost Recon Advanced Warfighter, which can be exploited by malicious people to cause a DoS (Denial of Service). http://secunia.com/advisories/40465/

Security Videos & Podcasts

SecurityTube.Net

PaulDotCom

Risky Business

Other Stuff

Hack a Day

Internal error – WikiLeaks

Packet Storm Security Miscellaneous Files

  • NocON2010-CFP.txt Call For Papers for the No cON Name 2010 Congress. This conference will be held in Barcelona, Spain, from October 18th through the 19th.
  • transparent-medical-devices.pdf Whitepaper called Killed by Code: Software Transparency in Implantable Medical Devices.
  • my-sql.pdf This whitepaper is a MySQL SQL injection tutorial.
  • H2HC-CFP-2010.txt The Hackers 2 Hackers Conference (H2HC) 7th edition call for papers has been announced. It is being held in Sao Paulo, Brazil from November 27th through the 28th, 2010.
  • CVP-HackersPerspective.pdf Whitepaper called Cisco VoIP Phone – A Hackers Perspective.
  • buffer_overflow_edisi_ketiga.txt Whitepaper called Linux Buffer Overflow Tutorial III. Written in Indonesian.
  • simple-sqlinj.txt Whitepaper called Simple Technique for SQL Injection Form Login Bypass. Written in Indonesian.
  • clickonce-mitm.txt Interesting write up that goes indepth discussing the man-in-the-middle vulnerabilities associated with Microsoft ClickOnce.
  • kiwicon2010-cfp.txt Kiwicon ’10 Call For Papers – This year Kiwicon will be held from November 27th through 28th, 2010 in Wellington, New Zealand.
  • clubhack2010-cfp.txt The Call For Papers for ClubHack 2010 has been announced. For a full list of topics and more information on the convention, hit the home page.

Packet Storm Security Last Files

  • MDVSA-2010-142.txt Mandriva Linux Security Advisory 2010-142 – The slap_modrdn2mods function in modrdn.c in OpenLDAP 2.4.22 does not check the return value of a call to the smr_normalize function, which allows remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a. […]
  • uplusftp-overflow.txt UPlusFTP Server version 1.7.1.01 remote buffer overflow post authentication exploit.
  • symantecams-flaw.txt Symantec Antivirus Corporate Edition AMS Intel Alert Handler service (hndlrsvc.exe) proof of concept command execution exploit.
  • jira-xss.txt Jira version 4.0.1 suffers from a cross site scripting vulnerability.
  • secunia-autonomykvrp.txt Secunia Research has discovered two vulnerabilities in Autonomy KeyView, which can be exploited by malicious people to compromise a vulnerable system. The vulnerabilities are caused by boundary errors in the SpreadSheet Lotus 123 reader (wkssr.dll) when parsing certain records. This can be exploited. […]
  • secunia-autonomykvindex.txt Secunia Research has discovered a vulnerability in Autonomy KeyView, which can be exploited by malicious people to potentially compromise a vulnerable system. The vulnerability is caused by an error in the SpreadSheet Lotus 123 reader (wkssr.dll) when allocating an array of pointers during the parsi. […]
  • zemana-escalate.txt Zemana AntiLogger with AntiLog32.sys versions 1.5.2.755 and below suffer from a local privilege escalation vulnerability.
  • ceteraecommerce-sqlxss.txt Cetera eCommerce versions 14.0 and below suffer from cross site scripting and remote SQL injection vulnerabilities.
  • secunia-wkssriu.txt Secunia Research has discovered a vulnerability in Autonomy KeyView, which can be exploited by malicious people to cause a DoS (Denial of Service) and potentially compromise a vulnerable system. The vulnerability is caused by an integer underflow error in the SpreadSheet Lotus 123 reader (wkssr.dll). […]
  • secunia-autonomywosr.txt Secunia Research has discovered a vulnerability in Autonomy KeyView, which can be exploited by malicious people to compromise a vulnerable system. The vulnerability is caused by a boundary error the WordPerfect 5.x reader (wosr.dll) when parsing data blocks and can be exploited to cause a heap-based. […]

Security Blogs

Security Bloggers Network

Schneier on Security

LinuxSecurity.com – Latest News

TaoSecurity

SecuriTeam Blogs

Offensive Computing – Community Malicious code research and analysis

Darknet – The Darkside

The Dark Visitor

Jeremiah Grossman

cr0 blog

Hack In The Box

GNUCITIZEN

The Ethical Hacker Network RSS News Feed

cURL error 7: couldn’t connect to host

carnal0wnage.attackresearch.com

Daily Dave

ha.ckers.org web application security lab

Security4all – Dedicated to digital security, enterprise 2.0 and presentation skills

Metasploit

DVLabs: Blogs

The RISKS Digest

Security Fix

Microsoft Security Advisories

The Microsoft Security Response Center (MSRC)

  • Community-Based Defense: Looking Outward, Moving Forward Two years ago, in front of a standing-room only crowd here at Black Hat, we introduced three new information sharing programs as well as the concept of Community-Based Defense. The underlying concept shared by all three programs was simple-collaboration will be key to preventing and defending agains. […]
  • Black Hat 2010 BH Landscape Next week, many of us here will be heading down to Las Vegas for Black Hat.  The MSRC, and other teams in Microsoft, have been attending Black Hat for years.  In fact, we’ve been sponsoring the show for the last eight years-the last five as a platinum sponsor. Some might ask why? It’s. […]
  • Announcing Coordinated Vulnerability Disclosure Today, Microsoft is announcing a shift in philosophy on how we approach the topic of vulnerability disclosure, reframing the practice of “Responsible Disclosure” to “Coordinated Vulnerability Disclosure.”  In recognition of the endless debate between responsible disclosure and full disclosure propo. […]
  • July 2010 Security Bulletin Webcast Hi, During the July 2010 webcast, we fielded questions varying from the re-release of MS10-024 to answers for the error messages received during the application of MS10-041 and more.   Click  here to review the full Q&A page so you can see all of the answers that were provided for these and. […]
  • Security Advisory 2286198 Updated We’ve just updated Microsoft Security Advisory 2286198 to let customers know that we now have an automated “Fix It” available to implement the workaround we first outlined in our original posting on Friday, July 16, 2010. More information is available in the KB article 2286198, but in summary runnin. […]
  • Security Advisory 2286198 Released Hi everyone, We have released Security Advisory 2286198, which addresses a publicly reported vulnerability in Windows Shell. Microsoft has found that this vulnerability is most likely to be exploited through removable drives. Currently, we have seen only limited, targeted attacks on this vulnerabili. […]
  • July 2010 Security Bulletin Release Hi everyone. As part of our usual monthly update cycle, today Microsoft is releasing four security bulletins to address five vulnerabilities in Windows and Microsoft Office. MS10-042 resolves a publicly disclosed and actively exploited vulnerability discussed in Security Advisory 2219475. The update. […]
  • July 2010 Bulletin Release Advance Notification Hi everyone. Today we’re releasing our advance notification for the July security bulletin release, which is scheduled for Tuesday, July 13. This month’s release includes four bulletins addressing five vulnerabilities. Two bulletins, both with a severity rating of Critical, affect Windows. Two of th. […]
  • Monthly Security Bulletin Webcast Q&A – June 2010 Hosts:                                   Adrian Stone, Senior Security Program Manager Lead                                              Jerry Bryant, Group Manager, Response Communications Website:            . […]
  • Security Advisory 2219475 Released Hello – We have released Security Advisory 2219475, addressing the vulnerability in the Windows Help and Support Center function in Windows XP and Windows Server 2003. We are not aware of any active attacks at this time. Customers running Windows Vista, Windows 7, Windows Server 2008 and Windows Ser. […]
  • Windows Help Vulnerability Disclosure Hello, We are aware of a publicly disclosed vulnerability affecting Windows XP and Windows Server 2003. We are not aware of any current exploitation of this issue and customers running Windows Vista, Windows 7, Windows Server 2008, and Windows Server 2008 R2, are not vulnerable to this issue, or at. […]
  • June 2010 Security Bulletin Release Hi everyone, Today, as part of our regular monthly security bulletin release cycle, we released 10 bulletins to address 34 total vulnerabilities in Windows, Microsoft Office (including SharePoint), Internet Explorer (IE), Internet Information Services (IIS), and the .NET Framework. Only three of the. […]
  • June 2010 Security Bulletin Advance Notification Hi everyone, Today we published our advance notification for the June security bulletin release, scheduled for release next Tuesday, June 8. This month’s release includes ten bulletins addressing 34 vulnerabilities. Six of the bulletins affect Windows; of those, two carry a Critical severity ratin. […]
  • May 2010 Security Bulletin Webcast   Hi everyone, Today we posted the questions and answers from this month’s security bulletin webcast. There were a few questions but overall, the webcast was pretty quick with only two bulletins. For the June bulletin release, our webcast will be on Wednesday June 9, 2010 at 11:00 a.m. PDT (UTC -7. […]
  • May 2010 Security Bulletin Release Hello Everybody- Today are releasing two security bulletins, MS10-030 and MS10-031 to address two vulnerabilities in Windows and Microsoft Office, both rated Critical. As always, we recommend that customers test and deploy both security updates as soon as possible. MS10-030 is a Windows-based update. […]
  • Advance Notification for the May 2010 Security Bulletin Release Hi everyone, Today we published our advance notification for the May security bulletin release letting customers know that next Tuesday, May 11, we will release two Critical bulletins addressing two vulnerabilities – one in Windows and one in Office. Windows 7 and Windows Server 2008 R2 customers wi. […]

Microsoft Sec Notification

  • Microsoft Security Bulletin Minor Revision Posted by Microsoft on Jul 21******************************************************************** Title: Microsoft Security Bulletin Minor Revision Issued: July 21, 2010 ******************************************************************** Summary ======= The following bulletin has undergone a minor. […]
  • Microsoft Security Advisory Notification Posted by Microsoft on Jul 20******************************************************************** Title: Microsoft Security Advisory Notification Issued: July 20, 2010 ******************************************************************** Security Advisory Updated Today ===============================. […]
  • Microsoft Security Advisory Notification Posted by Microsoft on Jul 19******************************************************************** Title: Microsoft Security Advisory Notification Issued: July 19, 2010 ******************************************************************** Security Advisory Updated Today ===============================. […]
  • Microsoft Security Advisory Notification Posted by Microsoft on Jul 16******************************************************************** Title: Microsoft Security Advisory Notification Issued: July 16, 2010 ******************************************************************** Security Advisory Released Today ==============================. […]
  • Microsoft Security Bulletin Minor Revisions Posted by Microsoft on Jul 14******************************************************************** Title: Microsoft Security Bulletin Minor Revisions Issued: July 14, 2010 ******************************************************************** Summary ======= The following bulletins have undergone a min. […]
  • Microsoft Security Bulletin Minor Revisions Posted by Microsoft on Jul 13******************************************************************** Title: Microsoft Security Bulletin Minor Revisions Issued: July 13, 2010 ******************************************************************** Summary ======= The following bulletins have undergone a min. […]
  • Microsoft Security Bulletin Re-Release Posted by Microsoft on Jul 13******************************************************************** Title: Microsoft Security Bulletin Re-Release Issued: July 13, 2010 ******************************************************************** Summary ======= The following bulletin has undergone a major revi. […]
  • Microsoft Security Bulletin Summary for July 2010 Posted by Microsoft on Jul 13******************************************************************** Microsoft Security Bulletin Summary for July 2010 Issued: July 13, 2010 ******************************************************************** This bulletin summary lists security bulletins released for J. […]
  • Microsoft Security Bulletin Summary for June 2010 Posted by Microsoft on Jun 08******************************************************************** Microsoft Security Bulletin Summary for June 2010 Issued: June 8, 2010 ******************************************************************** This bulletin summary lists security bulletins released for Ju. […]
  • Microsoft Security Bulletim Summary for May 2010 Posted by Microsoft on May 11******************************************************************** Microsoft Security Bulletin Summary for May 2010 Issued: May 11, 2010 ******************************************************************** This bulletin summary lists security bulletins released for May. […]
  • Microsoft Security Bulletin Major Revision MS10-016 Posted by Microsoft on May 03******************************************************************** Title: Microsoft Security Bulletin Major Revision Issued: May 3, 2010 ******************************************************************** Summary ======= The following bulletin has undergone a major re. […]
  • Microsoft Security Bulletin Re-Release Posted by Microsoft on Apr 27******************************************************************** Title: Microsoft Security Bulletin Re-Release Issued: April 27, 2010 ******************************************************************** Summary ======= The following bulletin has undergone a major rev. […]
  • Microsoft Security Bulletin Major Revision Posted by Microsoft on Apr 21******************************************************************** Title: Microsoft Security Bulletin Major Revision Issued: April 21, 2010 ******************************************************************** Summary ======= The following bulletins have undergone a maj. […]
  • Microsoft Security Bulletin Summary for April 2010 Posted by Microsoft on Apr 13******************************************************************** Microsoft Security Bulletin Summary for April 2010 Issued: April 13, 2010 ******************************************************************** This bulletin summary lists security bulletins released for. […]

Mailing Lists

Full Disclosure

  • Re: Patent Absurdity – How software patents brokethe system Posted by M.B.Jr. on Jul 28I’m sorry, Rohit. Chances are you’re gonna face some problems in the US. Marcio Barbado, Jr.
  • [ MDVSA-2010:142 ] openldap Posted by security on Jul 28 _______________________________________________________________________ Mandriva Linux Security Advisory MDVSA-2010:142 http://www.mandriva.com/security/ _______________________________________________________________________ Package : openldap Date : July 28, 2010 Affec. […]
  • Re: Patent Absurdity – How software patents brokethe system Posted by M.B.Jr. on Jul 28Hi Rohit, sorry for such a delay in this reply. Your point alludes to one very generical concept but it is interesting for it gives the chance to extirpate some confusion people make in this subject. See, maybe you don’t clearly understand the difference between a license. […]
  • New vulnerabilities in Cetera eCommerce Posted by MustLive on Jul 28Hello Full-Disclosure! I want to warn you about security vulnerabilities in Cetera eCommerce. —————————– Advisory: New vulnerabilities in Cetera eCommerce —————————– URL: http://websecurity.com.ua/4266/ —————————– A. […]
  • Vulnerabilities in Cetera eCommerce Posted by MustLive on Jul 28Hello Full-Disclosure! I want to warn you about security vulnerabilities in Cetera eCommerce. Which I disclosed already in December 2009 (SecurityVulns ID: 10489). —————————– Advisory: Vulnerabilities in Cetera eCommerce —————————– UR. […]
  • Qualys Adds Exploitability Data Posted by sergio on Jul 28
  • Re: Speakers Required for null+h4ck3r meet in Delhi on 31st July 2010 Posted by Tõnu Samuel on Jul 28Don’t tell the country :P Tõnu
  • Secunia Research: Autonomy KeyView wkssr.dllRecord Parsing Buffer Overflows Posted by Secunia Research on Jul 28====================================================================== Secunia Research 28/07/2010 – Autonomy KeyView wkssr.dll Record Parsing Buffer Overflows – ====================================================================== Table of Contents Affected Soft. […]
  • Secunia Research: Autonomy KeyView wkssr.dllString Indexing Vulnerability Posted by Secunia Research on Jul 28====================================================================== Secunia Research 28/07/2010 – Autonomy KeyView wkssr.dll String Indexing Vulnerability – ====================================================================== Table of Contents Affected Softwa. […]
  • Secunia Research: Autonomy KeyView wkssr.dllInteger Underflow Vulnerability Posted by Secunia Research on Jul 28====================================================================== Secunia Research 28/07/2010 – Autonomy KeyView wkssr.dll Integer Underflow Vulnerability – ====================================================================== Table of Contents Affected Soft. […]
  • Secunia Research: Autonomy KeyView wosr.dll DataBlock Parsing Buffer Overflow Posted by Secunia Research on Jul 28====================================================================== Secunia Research 28/07/2010 – Autonomy KeyView wosr.dll Data Block Parsing Buffer Overflow – ====================================================================== Table of Contents Affected So. […]
  • Secunia Research: Autonomy KeyView rtfsr.dll RTFParsing Signedness Error Posted by Secunia Research on Jul 28====================================================================== Secunia Research 28/07/2010 – Autonomy KeyView rtfsr.dll RTF Parsing Signedness Error – ====================================================================== Table of Contents Affected Softwar. […]
  • Secunia Research: Autonomy KeyView wkssr.dllFloating Point Conversion Buffer Overflow Posted by Secunia Research on Jul 28====================================================================== Secunia Research 28/07/2010 – Autonomy KeyView wkssr.dll – - Floating Point Conversion Buffer Overflow – ====================================================================== Table of Contents. […]
  • Secunia Research: Autonomy KeyView Compound FileParsing Buffer Overflow Posted by Secunia Research on Jul 28====================================================================== Secunia Research 28/07/2010 – Autonomy KeyView Compound File Parsing Buffer Overflow – ====================================================================== Table of Contents Affected Software. […]
  • Re: Speakers Required for null+h4ck3r meet inDelhi on 31st July 2010 Posted by Rockey Killer on Jul 28New Delhi , India Don’t use google map to find out :P

Top WordPress blogs Top WordPress Blogs online!