[BMSA 2008-09] Two buffer overflow vulnerabilities in Rumpus v6.0

read more from this topic.....

[USN-681-1] ImageMagick vulnerability

read more from this topic.....

Active Business Directory version 2 suffers from a remote blind SQL injection vulnerability.

read more from this topic.....

KTP Computer Customer Database CMS local file inclusion exploit.

read more from this topic.....

KTP Computer Customer Database CMS suffers from a blind SQL injection vulnerability.

read more from this topic.....

Minimal Ablog version 0.4 suffers from file upload, administrative bypass, and remote SQL injection vulnerabilities.

read more from this topic.....

cpCommerce version 1.2.6 suffers from input variable overwrite and authentication bypass vulnerabilities.

read more from this topic.....

Broadcast Machine version 0.1 suffers from multiple remote file inclusion vulnerabilities.

read more from this topic.....

z1exchange versions 1.0 suffers from a remote SQL injection vulnerability in edit.php.

read more from this topic.....

Andy’s PHP Knowledgebase version 0.92.9 suffers from an arbitrary file upload vulnerability.

read more from this topic.....

Packet Storm new exploits for November, 2008.

read more from this topic.....

C1c4Tr1Z has discovered a vulnerability in search.free.fr, which could be exploited by malicious people to conduct XSS attacks.

read more from this topic.....

Uber0n has discovered a vulnerability in ssl.seat.de, which could be exploited by malicious people to conduct Script Insertion attacks.

read more from this topic.....

Uber0n has discovered a vulnerability in ssl.seat.de, which could be exploited by malicious people to conduct Script Insertion attacks.

read more from this topic.....

Uber0n has discovered a vulnerability in ssl.seat.de, which could be exploited by malicious people to conduct Script Insertion attacks.

read more from this topic.....

Uber0n has discovered a vulnerability in ssl.seat.de, which could be exploited by malicious people to conduct Script Insertion attacks.

read more from this topic.....

PaPPy has discovered a vulnerability in www.kungfudirect.com, which could be exploited by malicious people to conduct XSS attacks.

read more from this topic.....

S_e_YM_e_N has discovered a vulnerability in finance.aol.com, which could be exploited by malicious people to conduct XSS attacks.

read more from this topic.....

Debian Security Advisory 1675-1 - Masako Oono discovered that phpMyAdmin, a web-based administration interface for MySQL, insufficiently sanitises input allowing a remote attacker to gather sensitive data through cross site scripting, provided that the user uses the Internet Explorer web browser.

read more from this topic.....

Looks like the Times Online’s report about Microsoft offering $20 billion to buy Yahoo was bogus, with key figures in both the Microsoft and Yahoo camps saying there’s no truth to the story. The thing is, the denials could be yet more misinformation…

read more from this topic.....

[TKADV2008-013] VLC media player RealMedia Processing Integer Overflow Vulnerability

read more from this topic.....

/bin/login gives root to group utmp

read more from this topic.....

Re: Re: Wrong report: BID 32287, Pi3Web ISAPI DoS vulnerability

read more from this topic.....

The number of Firefox extensions continues to grow. For example, when I last wrote about tab extensions just over a year ago, about 110 existed. Now, despite the need to rewrite many extensions to make them compatible with Firefox 3.0, the number is over 190, and the choice is greater than ever. Basic functionality, coloring options, positioning of the tab bar, automatic opening of tabs at startup — whatever your need, you can probably find it on the Firefox add-ons site.

read more from this topic.....

The appointment of Robert Gates — a vocal critic of Obama’s Iraq withdrawal plan who will undoubtedly shape policy– is alarming.

read more from this topic.....

Vulnerability Summary for the Week of November 24, 2008

read more from this topic.....

Charalambous Glafkos has reported some vulnerabilities in RakhiSoftware Shopping Cart, which can be exploited by malicious people to disclose system information, or to conduct SQL injection and cross-site scripting attacks.

http://secunia.com/Advisories/32950/

NOTE: This RSS feed does not include information about updated Secunia advisories. You should note that Secunia on average issues more than 20 updated advisories per day, containing information about exploit and patch availability, new and in depth research, and all other details that are relevant. Learn more about receiving complete and customised Secunia advisory information:
http://secunia.com/advisories/business_solutions/

read more from this topic.....

[SECURITY] [DSA 1673-1] New wireshark packages fix several vulnerabilities

read more from this topic.....

[SECURITY] [DSA 1674-1] New jailer packages fix denial of service

read more from this topic.....

[SECURITY] [DSA 1675-1] New phpmyadmin packages fix cross site scripting

read more from this topic.....