Vulnerable Minds Pulse RSS


Pulse is the need to know information about the Internet threat landscape. Aggregating and analyzing the top vulnerability and malicious code advisories from commercial, government, education, and open source sources Pulse provides a complete picture of today's vulnerabilities that may become tomorrows exploits. Questions, concerns, suggestions: pulse [at] vulnerableminds [dot] com

Pulse was created and maintained by Vulnerable Minds.

home | blog

 

 



Archive

Nov
19th
Wed
permalink
Fredrick Diggle Security is looking for a few good men (or mediocre women) Posted by Fredrick Diggle on Nov 19

Fredrick Diggle Security has taken the the world wide web by storm in
recent years with disclosures in some of the most popular software
ever written…
permalink
MauryCMS <= 0.53.2 Remote Shell Upload Exploit
permalink
MyTopix <= 1.3.0 (notes send) Remote SQL Injection Exploit
permalink
Alex News-Engine 1.5.1 Remote Arbitrary File Upload Vulnerability
permalink
Alex Article-Engine 1.3.0 (fckeditor) Arbitrary File Upload Vulnerability
permalink
PunBB (Private Messaging System 1.2.x) Multiple LFI Exploit
permalink
Secunia Research: Streamripper Multiple Buffer Overflows Posted by Secunia Research on Nov 19

======================================================================

                     Secunia Research 19/11/2008

…
permalink
BNP (british national party) membership list has been leaked Posted by Gadi Evron on Nov 18

BNP (British National Party) membership (supposedly) has been leaked.

I don’t want to link to the URL here. You can find it in my blog post:

…
permalink
Outdated and vulnerable OpenSource libraries used in quotDeutsche Telekomquot home banking software Posted by Stefan Kanthak on Nov 18

The “Deutsche Telekom” resp. their “T-Online” branch offer their
own home banking software for Windows under
…
permalink
Metasploit Framework 3.2 Released Posted by H D Moore on Nov 19

                     888 888 d8b888
…
permalink
Fredrick Diggle has invited you to open a Google mail account Posted by Fredrick Diggle on Nov 18

I’ve been using Gmail and thought you might like to try it out. Here’s
an invitation to create an account.

…
Nov
18th
Tue
permalink
E-topbiz Link Back Checker 1 Insecure Cookie Handling Vulnerability
permalink
Firefox cross-domain image theft (CESA-2008-009) Posted by Chris Evans on Nov 18

Hi,

Firefox 2.0.0.18 fixes a cross-domain theft of image data. Firefox 3
unaffected. It’s another interesting case where a redirector confuses the
browser…
permalink
Free Directory Script 1.1.1 (API_HOME_DIR) RFI Vulnerability
permalink
New hackers defacing the internets Posted by Fredrick Diggle on Nov 18

Fredrick Diggle has recently noted an upswelling of defacement on the
internet and believes it is worth noting. Most notably Matasano
Security has…