Find the Web&#39;s Worst Security Flaws
80281
IT security and research organization The SANS Institute is releasing its annual Top 20 list of Internet security vulnerabilities this week, with the intention of offering organizations at least a starting point for addressing critical issues.
22096
The Developer Tutorials blog has posted their "winner" of a list of things to do to keep you and your website secure:   When it comes to PHP security, you often think of input filtering, SQL injection prevention, XSS in user submitted content and so on. Well, forget about that. They're all pretty trivial compared to what I feel is by far the most important security issue of any web application. Read on to find out why.   Their number one thing to do to keep safe and secure? "Keep your systems updated." They point out that security a web site is one thing but securing the system that it runs on/has been developed on is another (and improperly patched, it could cause some huge problems).    Now, the best way to keep on top of potential vulnerabilities in your underlying systems is with updates. Sometimes, however, you need to go a little further. [...] Watching the web is also a good idea; major security vulnerabilities generally make it to the front page of Digg.
27182
(Source: HP)  Are your Web applications vulnerable? What techniques are hackers using to exploit Web-based applications and how can you protect your site? Unfortunately, most security products available today cannot adequately examine the applications that reside on your Web server! Yet these applications often provide backend access to confidential data! This paper explains web application security including a report on the top web application vulnerabilities and how your site might be open to threats such as SQL Injection, Parameter Manipulation, Common File Query, Cross-Site Scripting, and Cookie Tampering.
298750
A critical flaw in Microsoft&#39;s Internet Explorer Web browser could allow a hacker to take control of a computer, the world&#39;s largest software maker said Wednesday.
640391
Mozilla is working to fix a browser flaw that could give attackers unauthorized access to data on a victim&#39;s machine.The problem is similar to other&#160;data leakage&#160;flaws found in the open-source browser, according to researcher Gerry Eisenhaur, who first reported the problem on Saturday.Eisenhaur has posted sample code that reads the contents of a Mozilla Thunderbird preferences file, but he believes that attackers could get access to more information with variations on his attack. &quot;It&#39;s possible to load any JavaScript file on a victim&#39;s machine,&quot; he wrote in his blog posting. &quot;This looks very interesting and may have bigger potential, but for now, it&#39;s just another information disclosure [flaw].&quot;&quot;It could become something more if there was an application that stored sensitive data inside JavaScript files,&quot; he said via instant message. &quot;Some plugins have been known to store usernames and passwords.&quot;&quot;Its also just a powerful way to do recon,&quot; he added.Hackers have discovered a number of flaws in recent months that take advantage of the way that browsers pass information between different components within the Windows operating system. Some of these URI (Uniform Resource Identifier) protocol handler flaws have led to serious security problems for both Firefox and Internet Explorer.This latest flaw affects only certain Firefox add-ons, such as the Download Statusbar or Greasemonkey, which store scripts in a fashion that lets them be discovered on the hard drive, said Window Snyder, Mozilla&#39;s security chief in a Wednesday blog posting.Firefox is investigating the issue and has rated it as a low-severity problem, she said.
543022
Code that exploits a serious, yet-to-be-patched hole in Microsoft's Web browser has been posted on the Net.
376092
Security researchers have found flaws in older versions of the Mozilla and Firefox browsers, and the Thunderbird e-mail client, that could allow an attacker to spy on or take over a user's system.
311140
Like millions of computer users, Bob Davis found out the hard way that Microsoft&#39;s Internet Explorer has security flaws. &quot;My computer was taken over with viruses and spyware and so, unfortunately, I had to reformat my entire hard drive,&quot; Davis said.
691931
Several major websites are brought down by the largest denial-of-service attacks ever staged. Compiled by Tony Long.
694818
According to the security company, the flaws mean that &quot;attackers can silently and remotely take over an SP2 machine when the user simply browses a web page&quot;.
451719
typically e-mailed as enticements to bogus sites that endanger users&#39; systems and expose their personal information -- is limited in scope
716780
This column gets results. A few months ago I suggested that Internet users would do well to give up on Microsoft Corp.&#39;s buggy and insecure Internet Explorer browser and check out some well-crafted alternatives.
445704
Every run into an HTML page with bad code? If you were running IE, you&#39;d still be able to see it. Are other browsers simply inferior, or is IE just that much better at handling faulty HTML?
111115
Blog: The most serious vulnerabilities allow attackers to run code on compromised machines.
49498
THE PROBLEM with phpBB software, which we reported on this time yesterday is over. And it&#39;s thanks to Google, it appears. F-Secure said that the Santy worm, which defaced web sites and used a Google search
539621
Researchers have found a trio of flaws in Internet Explorer--making almost 20 in total.
175699
A newly reported security problem in Microsoft&#39;s Internet Explorer (IE) web browser allows attackers to create a fake website that looks exactly like a genuine site.