Oracle warns of exploits for latest DB flaws
543454
Oracle Corp. is warning customers to apply software patches it released in August, citing the availability of malicious code that can exploit unpatched vulnerabilities in its software.
486380
InfoWorld - Oracle plans to fix dozens of flaws in its software products next Tuesday, including critical bugs in the company's database, e-business suite, and application server.
205240
Oracle&#39;s new quarterly security-patch schedule departs from its monthly schedule, which Microsoft also uses. By George V. Hulme.
517260
Poisoned spreadsheet peril Microsoft has warned that an unpatched vulnerability in older versions of Excel is being actively exploited by hackers.â¦
567330
Microsoft's clutch of security updates this month will probably include a fix for a vulnerability in Excel that has been exploited by attackers for several weeks.
220487
An exploit attacking the most recent Windows bug is circulating on Usenet, security experts said Tuesday, that crashes machines, yet another indicator that attackers will chase the vulnerability until they&#39;ve launched mass mailing-style worm-based attacks
309600
Noted database security researcher David Litchfield is expected to detail a new attack method against Oracle databases at the Black Hat DC 2007 conference.
248240
46 fixes coming at ya Oracle plans to release 46 security patches next week as part of its quarterly update cycle.â¦
322890
BOSTON - The U.S. government's Computer Emergency Response Team (US-CERT) and software security companies have issued warnings about a number of security vulnerabilities in versions of Oracle Corp.'s software.
618884
An alert posted on the company&#39;s Web site outlined the patches that should be posted to fix numerous security holes in a number of applications.
35770
Attackers continue to use well-worn techniques, such as SQL injection, to exploit holes in popular Web applications but have also moved on to other targets, including government sites, and newer exploit methods, such as cross-site request forgery, according to the latest report filed by the Web Applications Security Consortium.
367211
Days after sample attack code for a yet-to-be-patched flaw surfaced, malicious sites are popping up that exploit the hole.
86222
In brief Exploit circulating for unpatched vuln
177244
Symantec issued an alert after exploit code was posted to the Securityfocus Web site. The alert raised the urgency and severity of an earlier warning about the security holes in ARCServe Backup versions 9.01 through 11.5 SP1, as well as CA's Business Protection Suite software.
607068
As per suggestions contained in the FAQ: Herein lies a report of two identified and as-of-yet uncorrected security flaws in Scoop. &nbsp;Enough detail will be provided to assist admins in investigating and correcting the flaws, but it is the author's hope that the details of the flaws will be sufficiently obscured to prevent abuse by the undesirables. Executive summary: Through the exploitation of various unchecked privileged operations, attackers may be able to perform admin-level actions leading to data loss. &nbsp;Additionally, well-intentioned security measures combined with XSS vulnerabilities can be exercised to simulate admin-level action, resulting in data loss.
425933
Users of the open-source MySQL database could be at risk from remote attacks from a bug in phpMyAdmin, the web-based MySQL administration tool.
661646
Open-source developers have warned of serious security holes in two Linux components that could allow attackers to take over a system by tricking a user into viewing a specially crafted image file or opening an archive. Patches exist for the bugs, which affect LHA and imlib.