» Cross-site request forgery via ftp daemons

SecurityReason realised new advisory about vulnerabilities in ftp daemons "multiple vendor ftpd - Cross-site request forgery". The main problem exists in dividing long command for a few other.

» libc/net inet_net_pton() bug

» PHP 5.2.6 Exploit (safe_mode bypass)

» PHP 5.2.6 safe_mode bypass

» Hackers target outsourced app development

Many firms fail to think about security when they outsource application development.

Three in five (60 per cent) organisations overlook procedures to mandate security in software development outsourcing, according to a study by analysts Quocirca. One in five (20 per cent) fail to consider security even when building applications in-house.

» Security researchers show how to hook phishers

» Symantec and Trend grapple with buffer overflow bugs

» Veteran defence hacking suspect cuffed in Greece

» Growing virus production taxes security firms

The volume - if not the variety - of malware samples has undergone almost exponential growth over the last three years.

Malware samples reached 5,490,960 in 2007, five times more than the 972,606 recorded in 2006; which was itself almost three times more than the 333,425 recorded in 2005. The figures, compiled by AV-Test.org, represent a growth in the number of variants of the same piece of malware rather than the creation of numerous new malware strains.

» Dutch regulator slaps spyware purveyors with 1m fine

» New Vulnerability in QuickTime

» Passwords on the loose

PG Roomate Finder Solution (Auth Bypass) SQL Injection Vulnerability

NetArtMedia Cars Portal 2.0 (image.php id) SQL Injection Vulnerability

LoveCMS 1.6.2 Final (Simple Forum 3.1d) Change Admin Password Exploit

NetArtMedia Real Estate Portal 1.2 (ad_id) SQL Injection Vuln

PG Real Estate (Auth Bypass) SQL Injection Vulnerability

Clean CMS 1.5 Blind Sql & XSS Multiple Remote Vuln.

No-IP DUC <= 2.1.7 Remote Code Execution Exploit

/bin/login gives root to group utmp

SyndeoCMS 2.6.0 (LFI/XSS) Multiple Remote Vulnerabilities

WordPress XSS vulnerability in RSS Feed Generator

ClamAV < 0.94.2 (JPG File) Stack Overflow PoC

Cain & Abel 4.9.23 (rdp file) Buffer overflow Exploit

Check New 4.52 (findoffice.php search) Remote SQL Injection Exploit

Gallery MX 2.0.0 (pics_pre.asp ID) Blind SQL Injection Vulnerability

RadAsm <= 2.2.1.4 (.RAP File) WindowCallProcA Pointer Hijack Exploit