Secunia - Stay Secure
Home Corporate Website Jobs  Mailing Lists RSS Blog  Online Shop Advertise
Software Inspectors
  Scan Online
  Personal (PSI)
  Network (NSI 2.0)

Solutions For
  Security Professionals
  Security Vendors

Free Solutions For
  Open Communities
  Journalists & Media

Secunia Advisories
  Search
  Historic Advisories
  Listed By Product
  Listed By Vendor
  Statistics / Graphs
  Secunia Research
  Report Vulnerability
  About Advisories

Virus Information
  Chronological List
  Last 10 Virus Alerts
  About Virus Information

Secunia Customers
  Customer Area


Secunia Highlights [About]



In Focus
Secunia NSI 2.0
Scan your network for vulnerabilities and missing security patches in third party applications.

Download your copy of the Secunia NSI 2.0:
NSISetup.exe / Learn more about Secunia NSI 2.0

Secunia PSI
The Secunia PSI reaches user number 500,000! Read our blog entry.


Latest Secunia Advisories [About]

4 September, 2008 - 19 advisories released, displaying 10
FreeBSD ICMPv6 "Packet Too Big" MTU Denial of Service Vulnerability
FreeBSD AMD64 General Protection Fault Privilege Escalation
Astaro Security Gateway DNS Cache Poisoning
IBM AIX "swcons" Command Privilege Escalation Vulnerability
Slackware update for php
SUSE update for IBMJava5-JRE and java-1_5_0-ibm
Celerondude Uploader "username" Cross-Site Scripting Vulnerability
Cisco Secure ACS EAP Packet Denial of Service
Cisco ASA and PIX Security Appliances Multiple Vulnerabilities
Django Authentication Cross-Site Request Forgery

See all advisories...

 
Most Popular [About]

1. Cisco ASA and PIX Security Appliances Multiple Vulnerabilities
2. FreeBSD ICMPv6 "Packet Too Big" MTU Denial of Service Vulnerability
3. Wireshark Denial of Service Vulnerabilities
4. phpBB "cur_password" Cross-Site Scripting Vulnerability
5. Cisco Secure ACS EAP Packet Denial of Service
6. IBM AIX "swcons" Command Privilege Escalation Vulnerability
7. Django Authentication Cross-Site Request Forgery
8. SUSE update for IBMJava5-JRE and java-1_5_0-ibm
9. Najdi.si Toolbar Buffer Overflow Vulnerability
10. Celerondude Uploader "username" Cross-Site Scripting Vulnerability


Latest Virus Information [About]

Today - 5 Virus Descriptions released, displaying all.
Trojan-Downloader:JS/Agent.CTL - Reported by F-Secure
Trojan-Downloader:HTML/IFrame.SU - Reported by F-Secure
Trojan-Downloader:JS/Agent.CKK - Reported by F-Secure
Trojan-Downloader:JS/Agent.CKL - Reported by F-Secure
Trojan-Dropper:W32/Agent.FBB - Reported by F-Secure

4 September, 2008 - 34 Virus Descriptions released, displaying 10.
Vundo.gen.h - Reported by McAfee
Trojan-PSW:W32/Nilage.AFZ - Reported by F-Secure
Trojan-Downloader:JS/Agent.CTK - Reported by F-Secure
Mal/ObfJS-BC - Reported by Sophos
Agent-HOJ - Reported by Sophos
Dloadr-BSC - Reported by Sophos
Dloadr-BSF - Reported by Sophos
VMSpli-Gen - Reported by Sophos
Zlob-Gen - Reported by Sophos
IRCBot-ACQ - Reported by Sophos

More Virus Information...
 
Secunia News / Press Releases [About]

Secunia PSI - user number 500,000 reached
30 May, 2008 - The Secunia PSI reaches user number 500,000! Read our blog entry.

Secunia PSI - Release Candidate 2
22 May, 2008 - Secunia just release a new version of the Secunia PSI, Release Candidate 2, read more in the changelog.

Secunia NSI 2.0 Public Beta Test
11 April, 2008 - Public Beta of the 2nd generation Secunia NSI is now available for free testing. Instant Access.

Secunia PSI available in German
20 February, 2008 - A German version of the Secunia PSI has been released, therefore: Willkommen Deutschland!

A rough 24 hours for Windows users - 81.01% affected
7 February, 2008 - The last 24 hours have been rough for Windows users. Sun, Adobe, Apple, and Skype have issued security updates - all four vendors correcting security holes that could lead to system compromise.



Vulnerability Tests [About]

Try some of the Vulnerability Tests, to quickly see if your systems are affected and what steps you can perform to mitigate or eliminate the impact of these vulnerabilities.

Internet Explorer 7 Popup Address Bar Spoofing Test
A vulnerability in Internet Explorer, which can be exploited to spoof the address bar of a popup-window. The vulnerability has been confirmed on a fully patched system with Internet Explorer 7.0 running on Microsoft Windows XP SP2. Other versions may also be affected. Unpatched for 681 days.

Internet Explorer 7 navcancl.htm Cross-Site Scripting Vulnerability
Aviv Raff has discovered a vulnerability in Internet Explorer 7, which can be exploited by malicious people to conduct phishing attacks. The vulnerability is confirmed in Internet Explorer 7 on a fully patched Windows XP SP2 system. Other versions may also be affected. A vendor solution is available.

Apache "Expect" Header Cross-Site Scripting Vulnerability Test
A vulnerability has been discovered in Apache HTTP Server, which can be exploited by malicious people to conduct cross-site scripting attacks. A vendor solution is available.





Vulnerability Management - Terms & Conditions - Copyright 2002-2008 Secunia - Compliance - Contact Secunia