Exclusivités

Ubuntu Security Notice 1223-2 - USN-1223-1 fixed vulnerabilities in Puppet. A regression was found on Ubuntu 10.04 LTS that caused permission denied errors when...

Zero Day Initiative Advisory 11-155 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Sybase MBusiness Anywhere. Authentication is...

Ubuntu Security Notice 1125-1 - Rafael Dominguez Vega discovered that PCSC-Lite incorrectly handled smart cards with malformed ATR messages. An attacker having physical access...

Stuxnet 3.0 to be possibility released at MalCon? Malware coders and security researchers are increasingly looking at MalCon malware convention to show-off their latest creations...

Posted by MustLive on Apr 11Hello list! I want to warn you about Cross-Site Scripting, Full path disclosure, Abuse of Functionality and Denial of Service vulnerabilities...

PHP Directory Listing version 3.1 suffers from a cross site scripting vulnerability. Source: PHP Directory Listing Script 3.1 Cross Site Scripting

Posted by ZDI Disclosures on Apr 12ZDI-11-124: Microsoft PowerPoint TimeColorBehaviorContainer Floating Point Record Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-124 April 12, 2011 -- CVE ID: CVE-2011-0655 -- CVSS: 9, (AV:N/AC:L/Au:N/C:P/I:P/A:C) -- Affected...

Source: - Allwin WinExec add new local administrator + ExitProcess Shellcode

PHPDug version 2.0.0 suffers from cross site request forgery, cross site scripting, and remote SQL injection vulnerabilities. Source: PHPDug 2.0.0 XSS / XSRF / SQL...

Windows Custom Safety is a fake Antivirus. This rogue displays fake alerts to scare users. It replaces Windows Privacy Module, Windows Maintenance Suite, Windows...