» libc/net inet_net_pton() bug

New WLB-note about bug in libc/net "inet_net_pton() integer overflow". A Integer Overflow bug has been identified in inet_net_pton() function, but isn't not directly exploitable...

» PHP 5.2.6 Exploit (safe_mode bypass)

» PHP 5.2.6 safe_mode bypass

» *BSD libc (strfmon) Multiple vulnerabilities

» Hackers target outsourced app development

Many firms fail to think about security when they outsource application development.

Three in five (60 per cent) organisations overlook procedures to mandate security in software development outsourcing, according to a study by analysts Quocirca. One in five (20 per cent) fail to consider security even when building applications in-house.

» Security researchers show how to hook phishers

» Symantec and Trend grapple with buffer overflow bugs

» Veteran defence hacking suspect cuffed in Greece

» Growing virus production taxes security firms

The volume - if not the variety - of malware samples has undergone almost exponential growth over the last three years.

Malware samples reached 5,490,960 in 2007, five times more than the 972,606 recorded in 2006; which was itself almost three times more than the 333,425 recorded in 2005. The figures, compiled by AV-Test.org, represent a growth in the number of variants of the same piece of malware rather than the creation of numerous new malware strains.

» Dutch regulator slaps spyware purveyors with 1m fine

» New Vulnerability in QuickTime

» Passwords on the loose

Marvell Driver Null SSID Association Request Vulnerability

Hewlett-Packard BIOS Plain Text Password Disclosure

DriveCrypt Security Model bypass exploiting wrong BIOS API usage

DiskCryptor Security Model bypass exploiting wrong BIOS API usage

LILO Security Model bypass exploiting wrong BIOS API usage

Risky Chrome (The perfect cleartext password offering )

Google Chrome 0.2.149.27 'SaveAs' Function Buffer Overflow Vulnerability

Marvell Driver EAPoL-Key Length Overflow

Atheros Vendor Specific Information Element Overflow

Marvell Driver Null SSID Association Request Vulnerability

EsFaq 2.0 (idcat) Remote SQL Injection Vulnerability

Vastal I-Tech Visa Zone (news_id) SQL Injection Vulnerability

aspWebAlbum 3.2 (Upload/SQL/XSS) Multiple Remote Vulnerabilities

TransLucid 1.75 (fckeditor) Remote Arbitrary File Upload Vulnerability

Moodle <= 1.8.4 Remote Code Execution Exploit