Web 2.0 vulnerabilties to watch for
690719
Web 2.0 applications such as wikis, blogs and online document editing offer nice functionality for users, but the bad guys are paying close attention as well -- and some of their tricks may be all but undetectable.
210359
Blog: Presence of exploit code puts pressure on Yahoo to fix the security flaws.
641109
Forward to the (distributed) revolution Comment As the Web 2.0 bandwagon continues its rapidly accelerating path downhill towards the inevitable crash we find ourselves at another turning point in the development of the networked world.â¦
618610
Could this be an end to broken links? New software replaces and updates links on Web pages.
376092
Security researchers have found flaws in older versions of the Mozilla and Firefox browsers, and the Thunderbird e-mail client, that could allow an attacker to spy on or take over a user's system.
87414
A few of my previous columns discussed my vision of creating a more secure Internet. It involved replacing the Internet's default anonymity with pervasive authentication, from the hardware initialization, through the OS and all applications, the user, and ending with a verifiable network stream. It is my strong belief that without a complete overhaul of default authentication, malicious hacking is going to continue indefinitely.
624578
(InfoWorld) - Mozilla has released the first update for the Firefox 2.0 browserÂ to fix eight security vulnerabilities. According to the company, release 2.0.0.1 of Firefox fixes flaws in memory corruption as well as the way the browser executes RSS (really simple syndication), Javascript and CSS (cascading style sheets) code, among other vulnerabilities. Mozilla also patched similar flaws in its Firefox 1.5 browser. Five of the eight flaws were rated as critical, according to Firefox. A critical rating means a Firefox user would be vulnerable to attack and remote software installation on their machines just from browsing the Web in the usual fashion. Two of the flaws were rated as high, while one received a low security-risk rating, Firefox said. Mozilla's advisory and information on the update can be found on the company's Web site. Danish security firm Secunia ApS also posted information about the patches on its Web site. Mozilla released Firefox 2.0, the second major update to its open-source browser, in October.
466917
This third and final article in the Metasploit series covers the msfcli scripting interface as well as the intuitive web interface to the Framework. The article also discusses what's new with version 2.2, and then introduces the exploit development process through an example.
300950
Update addresses potential denial-of-service vulnerabilities as well as a flaw in QuickTime.
172224
Firefox remains vulnerable to attacks exploiting protocol-handling bugs, even with two recent patches, security researchers say.
128986
Users of the Mozilla and Firefox browsers and the Thunderbird e-mail client may be vulnerable to flaws that could allow an attacker to spy on or take over a system, according to security researchers.
178790
Considered important vulnerabilities that leave users open to attack in Microsoft&#39;s (Nasdaq: MSFT) Windows for desktop and server installations, the Redmond
620094
roundup Free-roaming source code breeds new Netsky pest. Also: From IE to Opera, browsers are a likely prey.
661352
Ziff Davis - Vulnerabilities in LibTIFF and Xpdf could allow remote system compromise.
472677
Zero-day flaw, which is could let attacker gain remote access to a system, affects Word 2000, 2002 and 2003 and Word Viewer 2003.
324041
Blog: New security patches address three of nine public vulnerabilities.
376456
Vulnerability, rated as highly critical, could enable an attacker to compromise a user's machine.