Hírolvasó

R7-0036: FCKEditor.NET File Upload Code Execution

[0day] Apple QuickTime "_Marshaled_pUnk" backdoor param arbitrary code execution

[ MDVSA-2010:164 ] phpmyadmin

[ MDVSA-2010:163 ] phpmyadmin

[SECURITY] [DSA 2099-1] New OpenOffice.org packages fix arbitrary code execution

ekoparty Security Conference 2010 Announcements

EC2ND 2010, Call for Participation

[SECURITY] [DSA 2098-1] New typo3-src packages fix several vulnerabilities

[SECURITY] [DSA 2097-1] New phpmyadmin packages fix several vulnerabilities

wp-10-0001: Multiple Browser Wildcard Cerficate Validation Weakness

Flash Player 9 DLL Hijacking Exploit (schannel.dll)

[USN-979-1] okular vulnerability

[USN-974-2] Linux kernel regression

Cisco IOS XR 3.4.0 through 3.9.1, when BGP is enabled, does not properly handle unrecognized transitive attributes, which allows remote attackers to cause a denial of service (peering reset) via a crafted prefix announcement, as demonstrated in the wild in August 2010 with attribute type code 99, aka Bug ID CSCti62211.

Unspecified vulnerability in Software Distributor (sd) in HP HP-UX B.11.11, B.11.23, and B.11.31 allows local users to gain privileges via unknown vectors.

Heap-based buffer overflow in the RLE decompression functionality in the TranscribePalmImageToJPEG function in generators/plucker/inplug/image.cpp in Okular in KDE SC 4.3.0 through 4.5.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted image in a PDB file.

Buffer overflow in ftpd in IBM AIX 5.3 and earlier allows remote attackers to execute arbitrary code via a long NLST command.

IBM WebSphere Application Server (WAS) 7.x before 7.0.0.13, and WebSphere Application Server Feature Pack for Web Services 6.1.0.9 through 6.1.0.32, when a JAX-WS application is used, does not properly handle an IncludeTimestamp setting in the WS-Security policy, which has unspecified impact and remote attack vectors.

Unspecified vulnerability in RealNetworks RealPlayer 11.0 through 11.1 allows attackers to bypass intended access restrictions on files via unknown vectors.

Unspecified vulnerability in an ActiveX control in the Internet Explorer (IE) plugin in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.4 on Windows has unknown impact and attack vectors related to "multiple browser windows."