A security vulnerability has been discovered in versions prior to 2.2.3.5 of Akamai Download Manager. For successful exploitation, this vulnerability requires a user to be convinced to visit a malicious URL put into place by an attacker. This may then lead to an unauthorized download and automatic execution of arbitrary code run within the context of the victim user.

Read More…
Source: Packet Storm

Akamai Download Manager ActiveX Control Remote Code Execution Vulnerability

Read More…
Source: Security Focus

Code Browser is a folding and outlining editor.
It is a lightweight but powerful tool for
structuring and browsing source code using
folders and links. It is especially designed to
keep a good overview of the code of a large
project.
License: GNU General Public License (GPL)
Changes:
The editor is now Unicode. It can load UTF-8 and UTF-16 files. This release also adds the zenburn color scheme and fixes minor bugs.

Read More…
Source: Freshmeat Daily News

Attackers are doing a drive-by on your browser, but the defenses against such attacks are good and getting better….
Build IT Knowledge with Current & Trusted Content Helps Employees Develop & Hone New Technical Programming Skills. Sign Up & Get Full Access.

Read More…
Source: eWeek

Attackers are doing a drive-by on your browser, but the defenses against such attacks are good and getting better….
Build IT Knowledge with Current & Trusted Content Helps Employees Develop & Hone New Technical Programming Skills. Sign Up & Get Full Access.

Read More…
Source: eWeek

John Resig on Firefox’s new support for color profiles.
 ★ 

Read More…
Source: Daring Fireball

Apple Safari 3.1.1 allows remote attackers to spoof the address bar by placing many “invisible” characters in the userinfo subcomponent of the authority component of the URL (aka the user field), as demonstrated by 　 sequences.

Read More…
Source: National Vulnerability Database

Unspecified vulnerability in Apple Safari 3.1.1 allows remote attackers to cause a denial of service (application crash) via JavaScript code that calls document.write in an infinite loop.

Read More…
Source: National Vulnerability Database

Apple Safari 3.1.1 allows remote attackers to cause a denial of service (application crash) via a file:///â link that triggers an out-of-bounds access, possibly due to a NULL pointer dereference.

Read More…
Source: National Vulnerability Database

rPath Security Advisory: 2008-0128-2 Published: 2008-03-27 Updated: 2008-04-29 address introduced stability problem Products: rPath Linux 1 Rating: Major Exposure Level Classification: Indirect User Deterministic Unauthorized Access Updated Versions: firefox=conary.rpath.comatrpl:1/2.0.0.14-0.1-1 rPath Issue Tracking System: References: Description: …

Read More…
Source: Full Disclosure