Help Net Security - Advisories

NEWS

Spam served as visual poetry

IT security spending on the rise

Aladdin Knowledge Systems acquires SafeWord product line

Secure Computing to acquire Securify

The RFID Security Alliance (RFIDSA) formed

ARTICLES

Discovery and Fuzzing for SQL injections with Web 2.0 Applications

Rootkit Evolution

Application Security Matters: Deploying Enterprise Software Securely

Security Risks for Mobile Computing on Public WLANs: Hotspot Registration

Reverse Engineering: Smashing the Signature

THE WIRE

CIA, FBI push 'Facebook for spies'

Minimizing Directory Service audit event noise

Whitepaper - Best practices for securing Exchange email

Bruce Schneier: How to create the perfect fake identity

Discovery and fuzzing for SQL injections with Web 2.0 applications

Reverse Engineer's Swiss Army Knife

REVIEWS

Security Power Tools

Network Warrior

Google Apps Hacks

Crimeware: Understanding New Attacks and Defenses

Big Book of Windows Hacks

MALWARE

Computers increasingly being infected by fake antivirus products

The state of malware - August 2008 edition

Weekly malware report: keylogger, autorun worm and exchanger trojan

More malware blocked in July 2008 than in the whole of 2007

Malware of the week: AIM worm, spammer trojan and fake p2p apps

ADVISORIES

Mandriva Linux Security Update Advisory - python (MDVSA-2008:186)

Gentoo Linux Security Advisory - MySQL: Privilege bypass (GLSA 200809-04)

Gentoo Linux Security Advisory - RealPlayer: Buffer overflow (GLSA 200809-03)

VULNERABILITIES

vBulletin "$newpm[title]" Parameter Cross-Site Scripting

NOAH Unspecified Cross-Site Scripting

GPicView Multiple Local Security Vulnerabilities

GFI: Detect intruders on your network through event log analysis. It’s easy with GFI EventsManager! Download your free trial.

Advisories

Browse

or

or

Released in the last 5 days

05 September 2008	Mandriva Linux Security Update Advisory - python (MDVSA-2008:186)
04 September 2008	Gentoo Linux Security Advisory - MySQL: Privilege bypass (GLSA 200809-04) Gentoo Linux Security Advisory - RealPlayer: Buffer overflow (GLSA 200809-03) Gentoo Linux Security Advisory - dnsmasq: Denial of Service and DNS spoofing (GLSA 200809-02) Gentoo Linux Security Advisory - yelp: User-assisted execution of arbitrary code (GLSA 200809-01) SUSE Security Announcement - IBMJava5-JRE,java-1_5_0-ibm (SUSE-SA:2008:043) Slackware Security Advisory - php (SSA:2008-247-0) Ubuntu Security Notice - libxml2 vulnerability (USN-640-1) Mandriva Linux Security Update Advisory - python-django (MDVSA-2008:185) FreeBSD Security Advisory - Remote kernel panics on IPv6 connections (FreeBSD-SA-08:09.icmp6 ) FreeBSD Security Advisory - nmount(2) local arbitrary code execution (FreeBSD-SA-08:08.nmount ) Mandriva Linux Security Update Advisory - libtiff (MDVSA-2008:184) FreeBSD Security Advisory - amd64 swapgs local privilege escalation (FreeBSD-SA-08:07.amd64 ) Cisco Security Advisory - Remote Access VPN and SIP Vulnerabilities in Cisco PIX and Cisco ASA (cisco-sa-20080903-asa) Cisco Security Response - Cisco Secure ACS Denial Of Service Vulnerability
03 September 2008	Mandriva Linux Security Update Advisory - opensc (MDVSA-2008:183) Ubuntu Security Notice - tiff vulnerability (USN-639-1 ) Mandriva Linux Security Update Advisory - wordnet (MDVSA-2008:182)

Qualys: This free security guide describes the scanning requirements for PCI-DSS and provides a quick-reference requirements matrix for both Merchants and Service Providers of all levels.

Vulnerability Scanning

Network Vulnerabilities

Event Log Security