Exclusivités

Error 403 - forbidden has discovered a vulnerability in reporting.direct.gov.uk, which could be exploited by malicious people to conduct XSS attacks. Source: reporting.direct.gov.uk XSS

Posted by ZDI Disclosures on Apr 12ZDI-11-121: Microsoft Office XP Data Validation Record Parsing Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-121 April 12, 2011 -- CVE ID: CVE-2011-0105 -- CVSS: 10, (AV:N/AC:L/Au:N/C:C/I:C/A:C) --...

The BugCON 2011 call for papers has been announced. BugCON will take place from October 5th through the 7th, 2011 in Mexico City. Source: BugCON...

Posted by Zach C. on Apr 12That's your cue, guys who reported every single program using the same DLL vulnerable to DLL hijacking! Find those...

Plogger version 1.0 RC1 suffers from cross site scripting and path disclosure vulnerabilities. Source: Plogger 1.0 RC1 Cross Site Scripting / Path Disclosure

Posted by Tim on Apr 12I would argue that something like this is the best for full disclosure. Afterall, if you release a tool,...

Botan is a C++ library of cryptographic algorithms, including AES, DES, SHA-1, RSA, DSA, Diffie-Hellman, and many others. It also supports X.509 certificates and...

Source: - Microsoft Host Integration Server <= 8.5.4224.0 DoS Vulnerabilities

Posted by Oliver Goebel on Apr 12Dear all, please find enclosed the call for participation for IMF 2011. See the program at: http://www.imf-conference.org/imf2011/program.html The conference will take place...

Ubuntu Security Notice 1108-1 - Sebastian Krahmer discovered that the dhclient utility incorrectly filtered crafted responses. An attacker could use this flaw with a...