Feeds update periodically throughout the day.

• Blackboard Transact Suite Discloses Passwords to Local Users
• Linux Kernel GFS2 Rename Null Pointer Dereference May Let Local Users Gain Elevated Privileges
• HP Operations Agent Flaws Let Remote Users Execute Arbitrary Code and Local Users Gain Elevated Privileges
• Linux Kernel Null Pointer Dereference in keyctl_session_to_parent() May Let Local Users Gain Elevated Privileges
• cPanel Error in 'autoinstallhome.php' Lets Local Users Bypass PHP Restrictions

• Vuln: Wireshark 0.8.20 through 1.2.8 Multiple Vulnerabilities
• Vuln: Wireshark 0.10.8 to 1.0.14 and 1.2.0 to 1.2.9 Multiple Vulnerabilities
• Vuln: Fedora SSSD Kerberos Authentication Security Bypass Vulnerability
• Vuln: Fedora SSSD LDAP Unauthenticated Bind Security Bypass Vulnerability
• Bugtraq: {PRL} Novell Netware OpenSSH Remote Stack Overflow
• Bugtraq: Vulnerabilities in CMS WebManager-Pro
• Bugtraq: [ MDVSA-2010:169 ] mozilla-thunderbird
• Bugtraq: [USN-982-1] Wget vulnerability
• More rss feeds from SecurityFocus

• Mozilla Firefox nsTreeSelection Dangling Pointer Code Execution Vulnerability
• TANDBERG Video Communication Server Arbitrary File Retrieval Vulnerability
• Mozilla Firefox Plugin Parameter EnsureCachedAttrParamArrays Code Execution Vulnerability
• VMWare VMnc Codec HexTile Encoding Buffer Overflow Vulnerability
• VMware Products Movie Decoder Heap Overflow Vulnerability
• Netifera - Modular Open Source Platform for Security Tools
• WarVOX - Tools for Exploring, Classifying, and Auditing Telephone Systems
• Webshag - Web Server Audit Tool
• Browser Fuzzer
• FSpy - Linux Filesystem Activity Monitoring

• SB10-242: Vulnerability Summary for the Week of August 23, 2010
• TA10-238A: Microsoft Windows Insecurely Loads Dynamic Libraries
• SB10-235: Vulnerability Summary for the Week of August 16, 2010
• TA10-231A: Adobe Reader and Acrobat Vulnerabilities
• SB10-228: Vulnerability Summary for the Week of August 9, 2010
• TA10-223A: Adobe Flash and AIR Vulnerabilities
• TA10-222A: Microsoft Updates for Multiple Vulnerabilities
• SB10-221: Vulnerability Summary for the Week of August 2, 2010
• SB10-214: Vulnerability Summary for the Week of July 26, 2010
• SB10-207: Vulnerability Summary for the Week of July 19, 2010

• Infocon: green
• Microsoft EMETv2 released, (Thu, Sep 2nd)
• SDF, please!, (Thu, Sep 2nd)
• Month of Undisclosed 0-day Bugs, (Wed, Sep 1st)
• Microsoft issues updates to sysinternals ProcDump and Process Monitor: http://blogs.technet.com/b/sysinternals/archive/2010/08/30/updates-procdump-process-monitor-and-a-new-mark-s-blog-post.aspx, (Wed, Sep 1st)
• VMWARE releases 2 security advisories for ESX Service Console: http://lists.vmware.com/pipermail/security-announce/2010/000103.html and http://lists.vmware.com/pipermail/security-announce/2010/000104.html, (Wed, Sep 1st)
• Interesting PHP injection, (Tue, Aug 31st)
• Abandoned free email accounts, (Sun, Aug 29th)
• Apple QuickTime potential vulnerability/backdoor, (Mon, Aug 30th)
• New poll on mobile device security http://isc.sans.edu/poll.html, (Mon, Aug 30th)

• Netpet CMS "confirm.php" Local File Include
• PHP City Portal "login.php" Multiple SQL Injection Issues
• ACCESSGUARDIAN Unspecified Cross-Site Scripting Issue
• Novell iPrint Client Multiple Security Vulnerabilities
• PHP "ibase_gen_id()" Function off-by-one Buffer Overflow
• Red Hat VDSM Module SSL Connection Denial of Service Issue
• SonicWALL E-Class SSL-VPN Format String Issue
• DotNetNuke Syndication Handler Remote Denial of Service Issue
• phpMyAdmin Multiple Cross-Site Scripting Vulnerabilities
• LXR Cross Referencer TITLE Element Cross-Site Scripting Issue

• Not Another Penetration testing course
• Data Related to Kneber Botnet breach recovered by Netwitness
• Building security into business processes
• Spy Eye tool kit goes after Zeus botnet
• Black Hat: Researcher claims hack of chip used to secure computers, smartcards
• China steals Google's data
• PortSwigger.net - web application security
• eLearnSecurity : Breaking into system is no more enough
• NIST releases Security Content Automation Protocol for FISMA
• A zero-day flaw in the TLS and SSL protocols, which are commonly used to encrypt web pages, has been made public.

• Not Another Penetration testing course
• Data Related to Kneber Botnet breach recovered by Netwitness
• Building security into business processes
• Spy Eye tool kit goes after Zeus botnet
• Black Hat: Researcher claims hack of chip used to secure computers, smartcards
• China steals Google's data
• PortSwigger.net - web application security
• eLearnSecurity : Breaking into system is no more enough
• NIST releases Security Content Automation Protocol for FISMA
• A zero-day flaw in the TLS and SSL protocols, which are commonly used to encrypt web pages, has been made public.