Bugtraq

• Thread Index

• DDIVRT-2011-35 Cisco Unified Contact Center Express Directory Traversal [CVE-2011-3315]
  • From: ddivulnalert
• ZDI-11-310 : Adobe Reader Compound Glyph Index Sign Extension Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-11-309 : Novell iPrint Client nipplib.dll GetDriverSettings Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-11-308 : Cisco WebEx Player ATAS32.DLL linesProcessed Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-11-307 : Oracle Java MixerSequencer.nAddControllerEventCallback Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-11-306 : Oracle Java IIOP Deserialization Type Confusion Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-11-305 : Oracle Java Applet Rhino Script Engine Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-11-304 : Apple Quicktime Advanced Audio Codec Frame Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-11-303 : Apple QuickTime H264 Stream frame_cropping Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• SANS AppSec 2012 CFP is Open
  • From: SANS AppSec CFP
• [SECURITY] [DSA 2329-1] torque security update
  • From: Nico Golde
• ZDI-11-302 : Adobe Reader U3D TIFF Resource Buffer Overflow Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-11-301 : Adobe Reader U3D PICT 0Eh Encoding Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-11-300 : Adobe Reader U3D PICT 10h Encoding Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-11-299 : Adobe Reader PICT Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-11-298 : Adobe Reader U3D IFF RGBA Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-11-297 : Adobe Reader U3D PCX Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-11-296 : Adobe Reader BMP Image RLE Decoding Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• Cisco Security Advisory: Cisco Security Agent Remote Code Execution Vulnerabilities
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Buffer Overflow Vulnerabilities in the Cisco WebEx Player
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco Unified Contact Center Express Directory Traversal Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Denial of Service Vulnerability in Cisco Video Surveillance IP Cameras
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco Unified Communications Manager Directory Traversal Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• [security bulletin] HPSBMU02714 SSRT100244 rev.1 - HP Network Node Manager i (NNMi) for HP-UX, Linux, Solaris, and Windows, Remote Unauthorized Disclosure of Information
  • From: security-alert
• Path disclosure in SPIP
  • From: advisory
• [ GLSA 201110-23 ] Apache mod_authnz_external: SQL injection
  • From: Alex Legler
• Re: jara 1.6 sql injection vulnerability
  • From: Henri Salo
• [ GLSA 201110-19 ] X.Org X Server: Multiple vulnerabilities
  • From: Alex Legler
• [ GLSA 201110-22 ] PostgreSQL: Multiple vulnerabilities
  • From: Alex Legler
• zFtp Server <= 2011-04-13 | "STAT,CWD" Remote Denial of Service Vulnerability
  • From: YGN Ethical Hacker Group
• [SECURITY] [DSA 2328-1] freetype security update
  • From: Moritz Muehlenhoff
• [security bulletin] HPSBUX02700 SSRT100506 rev.2 - HP-UX running VEA, Remote Denial of Service (DoS), Execution of Arbitrary Code
  • From: security-alert
• [ MDVSA-2011:161 ] postgresql
  • From: security
• [ GLSA 201110-21 ] Asterisk: Multiple vulnerabilities
  • From: Tim Sammut
• [SECURITY] [DSA 2327-1] libfcgi-perl security-update
  • From: Nico Golde
• TC-SA-2011-01: Multiple vulnerabilities in OmniTouch Instant Communication Suite
  • From: Tobias Glemser
• phpLDAPadmin <= 1.2.1.1 (query_engine) Remote PHP Code Injection Exploit
  • From: n0b0d13s
• jara 1.6 sql injection vulnerability
  • From: muuratsalo experimental hack lab
• [CVE-2011-2569] Cisco Nexus OS (NX-OS) - Command "injection" / sanitization issues.
  • From: 0x9950
• [SECURITY] [DSA 2326-1] pam security update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 2325-1] kfreebsd-8 security update
  • From: Aurelien Jarno
• [ GLSA 201110-20 ] Clam AntiVirus: Multiple vulnerabilities
  • From: Tim Sammut
• [ MDVSA-2011:160 ] krb5
  • From: security
• [ MDVSA-2011:159 ] krb5
  • From: security
• [ GLSA 201110-18 ] rgmanager: Privilege escalation
  • From: Tobias Heinlein
• [ GLSA 201110-17 ] Avahi: Denial of Service
  • From: Tobias Heinlein
• [ GLSA 201110-16 ] Cyrus IMAP Server: Multiple vulnerabilities
  • From: Tim Sammut
• [ GLSA 201110-15 ] GnuPG: User-assisted execution of arbitrary code
  • From: Tim Sammut
• [ GLSA 201110-14 ] D-Bus: Multiple vulnerabilities
  • From: Stefan Behte
• TeamSHATTER Security Advisory: SQL Injection Vulnerability in Oracle DROP INDEX for spatial datatypes
  • From: Shatter
• TeamSHATTER Security Advisory: Database Vault Account Management Vulnerabilites
  • From: Shatter
• TeamSHATTER Security Advisory: Buffer Overflow in Oracle Database (CTXSYS.DRVDISP.TABLEFUNC_ASOWN function)
  • From: Shatter
• [ MDVSA-2011:158 ] phpmyadmin
  • From: security
• inCommand Technologies, Inc. Cross-site Scripting Vulnerability
  • From: md . r00t . defacer
• VUPEN Security Research - Microsoft Internet Explorer "X-UA-COMPATIBLE" Use-after-free Vulnerability
  • From: VUPEN Security Research
• [ MDVSA-2011:157 ] freetype2
  • From: security
• Metasploit 4.1.0 Web UI stored XSS vulnerability
  • From: sschurtz
• [SECURITY] [DSA 2324-1] wireshark security update
  • From: Moritz Muehlenhoff
• GotRoot Security Challenge
  • From: Ivan Buetler
• OCS Inventory NG 2.0.1 Persistent XSS (CVE-2011-4024)
  • From: Nicolas DEROUET
• Oracle DataDirect Multiple Native Wire Protocol ODBC Drivers HOST Attribute Stack Based Buffer Overflow Vulnerability
  • From: nospam
• [security bulletin] HPSBMU02716 SSRT100651 rev.1 - HP Data Protector Notebook Extension, Remote Execution of Arbitrary Code
  • From: security-alert
• Multiple vulnerabilities in Tine 2.0
  • From: advisory
• DNS Poisoning via Port Exhaustion
  • From: Roee Hay
• [security bulletin] HPSBPI02711 SSRT100647 rev.1 - HP MFP Digital Sending Software Running on Windows, Local Information Disclosure
  • From: security-alert
• Yet Another CMS 1.0 SQL Injection & XSS vulnerabilities
  • From: sschurtz
• Cisco Security Advisory: CiscoWorks Common Services Arbitrary Command Execution Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco Show and Share Security Vulnerabilities
  • From: Cisco Systems Product Security Incident Response Team
• ZDI-11-295 : Apple QuickTime FlashPix JPEG Tables Selector Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [ GLSA 201110-13 ] Tor: Multiple vulnerabilities
  • From: Tim Sammut
• MITKRB5-SA-2011-006 KDC denial of service vulnerabilities [CVE-2011-1527 CVE-2011-1528 CVE-2011-1529]
  • From: Tom Yu
• [ MDVSA-2011:156 ] tomcat5
  • From: security
• Dolphin <= 7.0.7 (member_menu_queries.php) Remote PHP Code Injection
  • From: n0b0d13s
• Site@School 2.4.10 SQL Injection & XSS vulnerabilities
  • From: sschurtz
• [PT-2011-14] SQL injection vulnerability in BoonEx Dolphin
  • From: noreply
• [ MDVSA-2011:155 ] systemtap
  • From: security
• AST-2011-012: Remote crash vulnerability in SIP channel driver
  • From: Asterisk Security Team
• ZDI-11-290 : Microsoft Internet Explorer SetExpandedClipRect Remote,Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-11-289 : Microsoft Internet Explorer swapNode Handling Remote Code,Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-11-288 : Microsoft Internet Explorer Select Element Insufficient,Type Checking Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [ MDVSA-2011:154 ] systemtap
  • From: security
• [ MDVSA-2011:153 ] libxfont
  • From: security
• [ MDVSA-2011:152 ] ncompress
  • From: security
• [Announcement] ClubHack Magazine - Call for Articles
  • From: abhijeet
• WordPress Plugin BackWPUp 2.1.4 - Security Advisory - SOS-11-012
  • From: Lists
• DAEMON Tools IOCTL local denial-of-service vulnerability
  • From: tanda
• foofus.net Security Advisory - Toshiba eStudio Multifunction Printer Authentication Bypass
  • From: percx
• Re: [Full-disclosure] Breaking the links: Exploiting the linker
  • From: Tim Brown
• [ MDVSA-2011:151 ] libpng
  • From: security
• [ MDVSA-2011:150 ] squid
  • From: security
• ZDI-11-287 : Internet Explorer Select Element Cache Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [ GLSA 201110-12 ] Unbound: Denial of Service
  • From: Tobias Heinlein
• [slackware-security] httpd (SSA:2011-284-01)
  • From: Slackware Security Team
• [ MDVSA-2011:149 ] cyrus-imapd
  • From: security
• [PTResearch] SAP DIAG Decompress plugin for Wireshark
  • From: noreply
• DC4420 - London DEFCON - October meet - Tuesday October 18th 2011
  • From: Major Malfunction
• [ GLSA 201110-11 ] Adobe Flash Player: Multiple vulnerabilities
  • From: Tim Sammut
• [ GLSA 201110-10 ] Wget: User-assisted file creation or overwrite
  • From: Tim Sammut
• [ GLSA 201110-09 ] Conky: Privilege escalation
  • From: Stefan Behte
• [ GLSA 201110-08 ] feh: Multiple vulnerabilities
  • From: Stefan Behte
• iDefense Security Advisory 10.12.11: Apple Mobile OfficeImport Framework Word Document Parsing Memory Corruption Vulnerability
  • From: labs-no-reply
• iDefense Security Advisory 10.12.11: Apple MobileSafari Attachment Viewing Cross Site Scripting Vulnerability
  • From: labs-no-reply
• Multiple G-WAN vulnerabilities
  • From: Fredrik Widlund
• Security-Assessment.com Advisory: Destination Search Admin Console Access Control Bypass
  • From: Drew Calcott
• SEC Consult SA-20111012-0 :: Client-side remote file upload & command execution in Microsoft Forefront UAG Remote Access Agent (CVE-2011-1969)
  • From: SEC Consult Vulnerability Lab
• VMSA-2011-0012 VMware ESXi and ESX updates to third party libraries and ESX Service Console
  • From: VMware Security Team
• Two Remote Code Execution Vulnerabilities in Internet Explorer
  • From: Ivan Fratric
• APPLE-SA-2011-10-12-4 Safari 5.1.1
  • From: Apple Product Security
• iDefense Security Advisory 10.11.11: Microsoft Internet Explorer Object Handling Memory Corruption Vulnerability
  • From: labs-no-reply
• APPLE-SA-2011-10-12-6 Numbers for iOS v1.5
  • From: Apple Product Security
• APPLE-SA-2011-10-12-5 Pages for iOS v1.5
  • From: Apple Product Security
• APPLE-SA-2011-10-12-3 OS X Lion v10.7.2 and Security Update 2011-006
  • From: Apple Product Security
• APPLE-SA-2011-10-12-1 iOS 5 Software Update
  • From: Apple Product Security
• APPLE-SA-2011-10-12-2 Apple TV Software Update 4.4
  • From: Apple Product Security
• CORE-2011-0106: Microsoft Publisher 2007 Pubconv.dll Memory Corruption
  • From: CORE Security Technologies Advisories
• AppSec DC 2012 CFP is OPEN!
  • From: AppSec DC
• Re: SilverStripe 2.4.5 Multiple backend Cross-site scripting vulnerabilities
  • From: Henri Salo
• Multiple vulnerabilities in Pretty Link WordPress Plugin
  • From: advisory
• Multiple vulnerabilities in BugFree
  • From: advisory
• LedgerSMB 1.3.0 released, includes anti-XSRF framework
  • From: Chris Travers
• Google App Enging SDK Code Execution Vulnerability (CVE 2011-1364)
  • From: Adi Sharabani
• [ MDVSA-2011:148 ] samba
  • From: security
• APPLE-SA-2011-10-11-1 iTunes 10.5
  • From: Apple Product Security
• [ GLSA 201110-06 ] PHP: Multiple vulnerabilities
  • From: Tobias Heinlein
• ZOHO ManageEngine ADSelfService Plus Administrative Access
  • From: roberto . paleari
• Related POC for JCE Joomla Extension <=2.0.10 Multiple Vulnerabilities
  • From: admin
• [ GLSA 201110-07 ] vsftpd: Denial of Service
  • From: Tobias Heinlein
• [ GLSA 201110-05 ] GnuTLS: Multiple vulnerabilities
  • From: Tobias Heinlein
• [ GLSA 201110-04 ]
  • From: Stefan Behte
• [ GLSA 201110-03 ]
  • From: Stefan Behte
• [security bulletin] HPSBMU02710 SSRT100601 rev.1 - HP Onboard Administrator (OA), Remote Unauthorized Access
  • From: security-alert
• [SECURITY] [DSA 2322-1] bugzilla security update
  • From: Jonathan Wiltshire
• [SECURITY] [DSA 2321-1] moin security update
  • From: Moritz Muehlenhoff
• [ MDVSA-2011:147 ] cups
  • From: security
• [ MDVSA-2011:146 ] cups
  • From: security
• [Announcement] ClubHack Mag Issue 21- October 2011 Released
  • From: abhijeet
• NGS00062 Technical Advisory: Apple OSX / iPhone ImageIO TIFF getBandProcTIFF TileWidth Heap Overflow
  • From: Research@NGSSecure
• [ MDVSA-2011:145 ] libxml2
  • From: security
• [ MDVSA-2011:131-1 ] libxml
  • From: security
• [ GLSA 201110-01 ] OpenSSL: Multiple vulnerabilities
  • From: Tobias Heinlein
• KaiBB 2.0.1 XSS and SQL Injection vulnerabilities
  • From: sschurtz
• openEngine 2.0 'key' Blind SQL Injection vulnerability
  • From: sschurtz
• [SECURITY] [DSA 2320-1] dokuwiki regression fix
  • From: Thijs Kinkhorst
• [SECURITY] [DSA 2319-1] policykit-1 security update
  • From: Thijs Kinkhorst
• [ MDVSA-2011:144 ] apache
  • From: security
• SilverStripe 2.4.5 Multiple backend Cross-site scripting vulnerabilities
  • From: sschurtz
• Contao 2.10.1 Cross-site scripting vulnerability
  • From: sschurtz
• ABUS TVIP 11550/21550 Multiple vulnerabilities (and possibly other ABUS cams)
  • From: Marco van Berkum
• Low severity flaw in various applications including KSSL, Rekonq, Arora, Psi IM
  • From: Tim Brown
• Medium severity flaw with Ark
  • From: Tim Brown
• VUPEN Security Research - Google Chrome WebKit Engine Child Tag Deletion Stale Pointer Vulnerability
  • From: VUPEN Security Research
• VUPEN Security Research - Google Chrome WebKit Engine Ruby Tag Stale Pointer Vulnerability
  • From: VUPEN Security Research
• Secunia Research: Autonomy Keyview Ichitaro Object Reconstruction Logic Vulnerability
  • From: Secunia Research
• Secunia Research: Autonomy Keyview Ichitaro Text Parsing Buffer Overflow
  • From: Secunia Research
• Secunia Research: Autonomy Keyview Ichitaro QLST Integer Overflow Vulnerability
  • From: Secunia Research
• [SECURITY] [DSA 2318-1] cyrus-imapd-2.2 security update
  • From: Nico Golde
• Active CMS 1.2.0 'mod' Cross-site Scripting Vulnerability
  • From: sschurtz
• [SECURITY] [DSA 2317-1] icedove security update
  • From: Moritz Muehlenhoff
• [ MDVSA-2011:143 ] rpm
  • From: security
• [SECURITY] [DSA 2316-1] quagga security update
  • From: Florian Weimer
• Re: vTiger CRM 5.2.x <= Remote Code Execution Vulnerability
  • From: Steven Nuhn
• Cisco Security Advisory: Directory Traversal Vulnerability in Cisco Network Admission Control Manager
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco Firewall Services Module
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances and Cisco Catalyst 6500 Series ASA Services Module
  • From: Cisco Systems Product Security Incident Response Team
• [SECURITY] [DSA 2315-1] openoffice.org security update
  • From: Giuseppe Iuculano
• Secunia Research: Cyrus IMAPd NTTP Authentication Bypass Vulnerability
  • From: Secunia Research
• vTiger CRM 5.2.x <= Blind SQL Injection Vulnerability
  • From: YGN Ethical Hacker Group
• vTiger CRM 5.2.x <= Remote Code Execution Vulnerability
  • From: YGN Ethical Hacker Group
• VMSA-2011-0011 VMware hosted products address remote code execution vulnerability
  • From: VMware Security Team
• FreeBSD Security Advisory FreeBSD-SA-11:05.unix [REVISED]
  • From: FreeBSD Security Advisories
• New open source Security Framework
  • From: noreply
• Multiple vulnerabilities in SonicWall
  • From: hvazquez
• vTiger CRM 5.2.x <= Multiple Cross Site Scripting Vulnerabilities
  • From: YGN Ethical Hacker Group
• [SECURITY] [DSA 2314-1] puppet security update
  • From: Nico Golde
• Phorum 5.2.18 Cross-site scripting vulnerability
  • From: sschurtz
• DDIVRT-2011-34 Metropolis Technologies OfficeWatch Directory Traversal
  • From: ddivulnalert
• DDIVRT-2011-36 Cybele Software, Inc. ThinVNC Product Suite Arbitrary File Retrieval
  • From: ddivulnalert
• Vulnerabilities in GenStat 14.1.0.5943
  • From: Luigi Auriemma
• Vulnerabilities in Cytel Studio 9
  • From: Luigi Auriemma
• Netvolution referer header SQL injection vulnerability
  • From: Dimitris Glynos
• SonicWall Viewpoint v6.0 SP2 - SQL Injection Vulnerability
  • From: research@xxxxxxxxxxxxxxxxxxxxx
• [ MDVSA-2011:142 ] mozilla-thunderbird
  • From: security
• [ MDVSA-2011:141 ] firefox
  • From: security
• [ MDVSA-2011:140 ] mozilla-thunderbird
  • From: security
• [ MDVSA-2011:139 ] firefox
  • From: security
• Elastix PBX Extensions Enumeration
  • From: Bassem Ammar
• [SECURITY] [DSA 2313-1] iceweasel security update
  • From: Moritz Muehlenhoff
• DeepSec 2011 Conference - Final Schedule Published
  • From: DeepSec Conference
• [SECURITY] [DSA 2312-1] iceape security update
  • From: Moritz Muehlenhoff
• Arbitrary memory corruption in NCSS 07.1.21
  • From: Luigi Auriemma
• Bitweaver 2.8.1 Multiple Cross-site Scripting Vulnerabilities
  • From: sschurtz
• Joomla! 1.7.0 | Multiple Cross Site Scripting (XSS) Vulnerabilities
  • From: YGN Ethical Hacker Group
• [ MDVSA-2011:138 ] wireshark
  • From: security
• [security bulletin] HPSBUX02707 SSRT100626 rev.1 - HP-UX Apache Web Server, Remote Denial of Service (DoS)
  • From: security-alert
• [ MDVSA-2011:136 ] openssl
  • From: security
• Cisco Security Advisory: Cisco IOS Software IP Service Level Agreement Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco IOS Software Smart Install Remote Code Execution Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco IOS Software IPS and Zone-Based Firewall Vulnerabilities
  • From: Cisco Systems Product Security Incident Response Team
• [ MDVSA-2011:137 ] openssl
  • From: security
• Cisco Security Advisory: Jabber Extensible Communications Platform and Cisco Unified Presence XML Denial of Service Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco Unified Communications Manager Session Initiation Protocol Memory Leak Vulnerabilities
  • From: Cisco Systems Product Security Incident Response Team
• iDefense Security Advisory 09.26.11: Novell GroupWise iCal RRULE ByWeekNo Memory Corruption Vulnerability
  • From: labs-no-reply
• Cisco Security Advisory: Cisco IOS Software Session Initiation Protocol Denial of Service Vulnerabilities
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco IOS Software Network Address Translation Vulnerabilities
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco IOS Software IPv6 over MPLS Vulnerabilities
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco IOS Software IPv6 Denial of Service Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco IOS Software Data-Link Switching Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco 10000 Series Denial of Service Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• iDefense Security Advisory 09.26.11: Novell GroupWise iCal Date Invalid Array Indexing Vulnerability
  • From: labs-no-reply
• iDefense Security Advisory 09.26.11: Novell GroupWise iCal RRULE Weekday Recurrence Heap Overflow Vulnerability
  • From: labs-no-reply
• Integer overflow in Sterling Trader 7.0.2
  • From: Luigi Auriemma
• Vulnerabilities in EViews 7.2
  • From: Luigi Auriemma
• Multiple vulnerabilities in Traq
  • From: advisory
• Vulnerabilities in PcVue 10 (SCADA)
  • From: Luigi Auriemma
• VUPEN Security Research - Novell GroupWise "RRULE" Remote Buffer Overflow Vulnerability
  • From: VUPEN Security Research
• FreeBSD Security Advisory FreeBSD-SA-11:05.unix
  • From: FreeBSD Security Advisories
• FreeBSD Security Advisory FreeBSD-SA-11:04.compress
  • From: FreeBSD Security Advisories
• FreeBSD Security Advisory FreeBSD-SA-11:03.bind
  • From: FreeBSD Security Advisories
• VUPEN Security Research - Novell GroupWise "integerList" Remote Buffer Overflow Vulnerability
  • From: VUPEN Security Research
• VUPEN Security Research - Novell GroupWise "BYWEEKNO" Remote Memory Corruption Vulnerability
  • From: VUPEN Security Research
• VUPEN Security Research - Novell GroupWise "TZNAME" Remote Buffer Overflow Vulnerability
  • From: VUPEN Security Research
• Barracuda Backup v2.0 - Multiple Web Vulnerabilities
  • From: research@xxxxxxxxxxxxxxxxxxxxx
• European Security Services GPS v1.0 - Multiple Vulnerabilities
  • From: research@xxxxxxxxxxxxxxxxxxxxx
• [SECURITY] [DSA 2311-1] openjdk-6 security update
  • From: Florian Weimer
• iDefense Security Advisory 09.26.11: Novell GroupWise iCal TZNAME Heap Overflow Vulnerability
  • From: labs-no-reply
• Secunia Research: Novell GroupWise Internet Agent HTTP Interface Buffer Overflow
  • From: Secunia Research
• Secunia Research: Novell GroupWise Internet Agent "TZNAME" Parsing Vulnerability
  • From: Secunia Research
• NGS00109 Patch Notification: ImpressPages CMS Remote code execution
  • From: Research@NGSSecure
• openEngine 2.0 'id' Blind SQL Injection vulnerability
  • From: sschurtz
• [security bulletin] HPSBUX02702 SSRT100606 rev.4 - HP-UX Apache Web Server, Remote Denial of Service (DoS)
  • From: security-alert
• Re: PunBB 1.3.6 bug
  • From: Henri Salo
• Vulnerability found in Flynax Classifieds products
  • From: Nasel Pentest
• [SECURITY] CVE-2011-1184 Apache Tomcat - Multiple weaknesses in HTTP DIGEST authentication
  • From: Mark Thomas
• [CVE-2011-3645] Multiple vulnerability in Newgen's Omnidocs
  • From: sohil_garg
• AdaptCMS 2.0.1 Multiple security vulnerabilities
  • From: sschurtz
• Advanced Electron Forums (AEF) 1.0.9 <= Cross Site Request Forgery (CSRF) Vulnerability
  • From: YGN Ethical Hacker Group
• Serendipity freetag plugin 'serendipity[tagview]' Cross-Site Scripting vulnerability
  • From: sschurtz
• PunBB 1.3.6 bug
  • From: Amir
• Hackito Ergo Sum 2012 dates
  • From: Philippe Langlois
• TWSL2011-013: Multiple Vulnerabilities in IceWarp Mail Server
  • From: Trustwave Advisories
• TWSL2011-014: Vulnerability in Pantech Web Browser SSL Implementation
  • From: Trustwave Advisories
• Security issue is_a function in PHP 5.3.7+
  • From: cipri
• XSS Vulnerabilities in TWiki < 5.1.0
  • From: Netsparker Advisories
• TLS/SSL Compatibility Report 2011
  • From: Thierry Zoller
• secureURL.php design flaws
  • From: Boldizsar Bencsath
• [SECURITY] [DSA 2310-1] linux-2.6 security update
  • From: dann frazier
• Vulnerabilities in Sunway ForceControl 6.1 sp3 (SCADA)
  • From: Luigi Auriemma
• [ MDVSA-2011:135 ] iproute2
  • From: security
• [security bulletin] HPSBOV02497 SSRT090245 rev.4 - HP TCP/IP Services for OpenVMS Running NTP, Remote Execution of Arbitrary Code, Denial of Service (DoS)
  • From: security-alert
• Re: NGS00099 Patch Notification: Vulnerable SUID script in (nomachine) NX Server for Linux
  • From: Tavis Ormandy
• IPv6 security presentation at Hack.lu 2011
  • From: Fernando Gont
• Trusteer Rapport and anti-keylogging
  • From: mu-b
• Multiple vulnerabilities in Help Desk Software
  • From: advisory
• NGS00099 Patch Notification: Vulnerable SUID script in (nomachine) NX Server for Linux
  • From: Research@NGSSecure
• Advisory: Dolphin Browser HD Cross-Application Scripting
  • From: Roee Hay
• Advisory: Opera Mobile Cache Poisoning XAS
  • From: Roee Hay
• NETGEAR Wireless Cable Modem Gateway Auth Bypass and CSRF - SOS-11-011
  • From: Lists
• [security bulletin] HPSBMU02705 SSRT100622 rev.1 - HP Business Service Automation (BSA) Essentials, Remote Execution of Arbitrary Code
  • From: security-alert
• VUPEN Security Research - Microsoft Office Excel Formula Record Heap Corruption Vulnerability
  • From: VUPEN Security Research
• Cisco TelePresence Multiple Vulnerabilities - SOS-11-010
  • From: Lists
• [SECURITY] [DSA 2305-1] vsftpd security update
  • From: Nico Golde
• [ MDVSA-2011:130-1 ] apache
  • From: security
• [ MDVSA-2011:134-1 ] rsyslog
  • From: security
• [ MDVSA-2011:132-1 ] pidgin
  • From: security
• [ MDVSA-2011:133-1 ] mozilla
  • From: security
• Re: [Full-disclosure] Microsoft's Binary Planting Clean-Up Mission
  • From: Jeffrey Walton
• [DSECRG-11-032] SAP NetWeaver ipcpricing - information disclose (by ERPScan)
  • From: Alexandr Polyakov
• [DSECRG-11-033] SAP Crystal Report Server pubDBLogon - Linked ХSS vulnerability (by ERPScan)
  • From: Alexandr Polyakov
• CFP for first independent international Security Conference in Russia - ZeroNights (by Defcon-Russia)
  • From: Alexandr Polyakov
• RE: [Full-disclosure] Microsoft's Binary Planting Clean-Up Mission
  • From: ACROS Security Lists
• RE: [Full-disclosure] Microsoft's Binary Planting Clean-Up Mission
  • From: ACROS Security Lists
• RE: [Full-disclosure] Microsoft's Binary Planting Clean-Up Mission
  • From: Thor (Hammer of God)
• RE: [Full-disclosure] Microsoft's Binary Planting Clean-Up Mission
  • From: ACROS Security Lists
• RE: [Full-disclosure] Microsoft's Binary Planting Clean-Up Mission
  • From: ACROS Security Lists
• RE: [Full-disclosure] Microsoft's Binary Planting Clean-Up Mission
  • From: Thor (Hammer of God)
• [Onapsis Security Advisory 2011-016] SAP WebAS Malicious SAP Shortcut Generation
  • From: Onapsis Research Labs
• [Onapsis Security Advisory 2011-015] SAP WebAS webrfc Cross-Site Scripting
  • From: Onapsis Research Labs
• [Onapsis Security Advisory 2011-014] SAP WebAS Remote Denial of Service
  • From: Onapsis Research Labs
• Microsoft's Binary Planting Clean-Up Mission
  • From: ACROS Security Lists
• XEE vulnerabilities in SharePoint (MS11-074) and DotNetNuke
  • From: Nicolas Grégoire
• Nortel Contact Recording Centralized Archive 6.5.1 EyrAPIConfiguration getSubKeys() Remote SQL Injection Exploit
  • From: nospam
• CORE-2011-0506 - Multiples Vulnerabilities in ManageEngine ServiceDesk Plus
  • From: CORE Security Technologies Advisories
• Re: Vulnerabilities in trading and SCADA softwares
  • From: Jeffrey Walton
• Cisco Security Advisory: Cisco Unified Service Monitor and Cisco Unified Operations Manager Remote Code Execution Vulnerabilities
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: CiscoWorks LAN Management Solution Remote Code Execution Vulnerabilities
  • From: Cisco Systems Product Security Incident Response Team
• ESA-2011-029: Buffer overflow vulnerability in multiple EMC Ionix products
  • From: Security_Alert
• Invitation to Register and Participate in the Entretiens Jacques Cartier (EJC) Colloquium on IT Security, Cyber Forensics and Combating Cybercrime
  • From: Serguei A. Mokhov (on behalf of EJC2011SecForensics-11)
• VUPEN Security Research - Adobe Acrobat and Reader Picture Processing Stack Overflow Vulnerability
  • From: VUPEN Security Research
• VUPEN Security Research - Adobe Acrobat and Reader BMP Dimensions Heap Overflow Vulnerability
  • From: VUPEN Security Research
• VUPEN Security Research - Adobe Acrobat and Reader PCX Processing Heap Overflow Vulnerability
  • From: VUPEN Security Research
• VUPEN Security Research - Adobe Acrobat and Reader IFF Processing Heap Overflow Vulnerability
  • From: VUPEN Security Research
• VUPEN Security Research - Adobe Acrobat and Reader Picture Dimensions Heap Overflow Vulnerability
  • From: VUPEN Security Research
• VUPEN Security Research - Adobe Acrobat and Reader TIFF BitsPerSample Heap Overflow Vulnerability
  • From: VUPEN Security Research
• Re: Vulnerabilities in trading and SCADA softwares
  • From: fergal . cassidy
• Multiple vulnerabilities in SiT! Support Incident Tracker
  • From: advisory
• Seeker Advisory Sep11: Insecure Redirect in Microsoft SharePoint Portal
  • From: Irene Abezgauz
• Colasoft Capsa7.2.1 Malformed SNMP Packet Denial of Service
  • From: vuln
• [SECURITY] [DSA 2309-1] openssl security update
  • From: Raphael Geissert
• iDefense Security Advisory 09.13.11: Adobe Reader and Acrobat JPEG Processing Use After Free Vulnerability
  • From: labs-no-reply
• iDefense Security Advisory 09.13.11: Microsoft Excel Record Memory Corruption Vulnerability
  • From: labs-no-reply
• iDefense Security Advisory 09.13.11: Microsoft Excel Record Integer Signedness Vulnerability
  • From: labs-no-reply
• iDefense Security Advisory 09.13.11: Microsoft Excel Record Memory Corruption Vulnerability
  • From: labs-no-reply
• Seeker Advisory Sep11: Reflected Cross Site Scripting in Microsoft SharePoint Portal
  • From: Irene Abezgauz
• [security bulletin] HPSBMU02703 SSRT100242 rev.1 - HP Network Node Manager i (NNMi) for HP-UX, Linux, Solaris, and Windows, Remote Denial of Service (DoS), Unauthorized Disclosure of Information, Unauthorized Modification
  • From: security-alert
• Vulnerabilities in trading and SCADA softwares
  • From: Luigi Auriemma
• XSS vulnerability in FortiMail Messaging Security Appliance
  • From: sschurtz
• Advisory for MS11-035 / ZDI-11-167
  • From: Luigi Auriemma
• [SECURITY] [DSA 2308-1] mantis security update
  • From: Moritz Muehlenhoff
• ESA-2011-018: Domain administration privilege enforcement bypass in EMC Avamar
  • From: Security_Alert
• Multiple XSS vulnerabilities in CMS Papoo Light Version
  • From: sschurtz
• [NTMS 2012] Call for Papers, Istanbul- Turkey, 7 - 10 May 2012
  • From: mbadra
• [Announcement] ClubHack Magazine - Call for Articles
  • From: abhijeet
• [SECURITY] [DSA 2304-1] squid3 security update
  • From: Nico Golde
• [SECURITY] [DSA 2307-1] chromium-browser security update
  • From: Giuseppe Iuculano
• [SECURITY] [DSA 2306-1] ffmpeg security update
  • From: Giuseppe Iuculano
• [SECURITY] [DSA 2303-2] New linux-2.6 packages fix regression
  • From: dann frazier
• APPLE-SA-2011-09-09-1 Security Update 2011-005
  • From: Apple Product Security
• [slackware-security] httpd (SSA:2011-252-01)
  • From: Slackware Security Team
• [ MDVSA-2011:134 ] rsyslog
  • From: security
• CVE-2011-2731: Spring Security privilege escalation when using RunAsManager
  • From: s2-security
• CVE-2011-2894: Spring Framework and Spring Security serialization-based remoting vulnerabilities
  • From: s2-security
• CVE-2011-2732: Spring Security header injection vulnerability
  • From: s2-security
• CVE-2011-2730: Spring Framework Information Disclosure
  • From: s2-security
• Disassembling .NET Client Challenge
  • From: Ivan Buetler
• 28C3: CFP for 28th Chaos Communication Congress
  • From: fukami
• [security bulletin] HPSBUX02702 SSRT100606 rev.2 - HP-UX Apache Web Server, Remote Denial of Service (DoS)
  • From: security-alert
• [SECURITY] [DSA 2303-1] linux-2.6 security update
  • From: dann frazier
• [security bulletin] HPSBUX02702 SSRT100606 rev.1 - HP-UX Apache Web Server, Remote Denial of Service (DoS)
  • From: security-alert
• Multiple XSS vulnerabilities in LightNEasy 3.2.4
  • From: sschurtz
• [SECURITY] [DSA 2302-1] bcfg2 security update
  • From: Nico Golde
• [ MDVSA-2011:133 ] mozilla
  • From: security
• OWASP AppSec USA 2011 - Two Weeks Away
  • From: Adam Baso
• Cisco Security Advisory: Cisco Nexus 5000 and 3000 Series Switches Access Control List Bypass Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• XSS in Zikula
  • From: advisory
• Embarcadero ER/Studio XE2 Server Portal Tom Sawyer's Default GET Extension Factory ActiveX Control Remote Code Execution
  • From: nospam
• Arbitrary File Upload in '1 Flash Gallery' Wordpress Plugin
  • From: supernothing
• [slackware-security] mozilla-thunderbird (SSA:2011-249-02)
  • From: Slackware Security Team
• [slackware-security] seamonkey (SSA:2011-249-03)
  • From: Slackware Security Team
• [slackware-security] mozilla-firefox (SSA:2011-249-01)
  • From: Slackware Security Team
• Windows server 2008 R1 local DoS
  • From: Aliz 'Randomdude'
• openvas 2.x race condition
  • From: Bugs NotHugs
• [ MDVSA-2011:132 ] pidgin
  • From: security
• [SECURITY] [DSA 2301-1] rails security update
  • From: Luciano Bello
• [SECURITY] [DSA 2300-2] nss security update
  • From: Thijs Kinkhorst
• [SECURITY] [DSA 2298-2] apache2 regression fix
  • From: Stefan Fritsch
• [Announcement] ClubHack Mag Issue 20- September 2011 Released
  • From: abhijeet
• Multiple vulnerabilities in MantisBT
  • From: advisory
• [ MDVSA-2011:131 ] libxml
  • From: security
• [ MDVSA-2011:130 ] apache
  • From: security
• Extended submission deadline for: The 6th International Conference for Internet Technology and Secured Transactions (ICITST-2011)!
  • From: Call for papers
• Pranian Group e107 Cross Site Scripting Vulnerabilities
  • From: ehsan_hp200
• TTW (ricetta.php?id) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• Abarkam (detail.php?input) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• MaiNick (ricetta.php?id) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• WSTAFF Remote SQL injection Vulnerability
  • From: ehsan_hp200
• BvCom (dettaglio.php?idnews) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• Editel (news-dettaglio.php?id) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• [ MDVSA-2011:129 ] mozilla
  • From: security
• ZDI-11-279: (0day) Witness Systems eQuality Unify Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-11-278: Novell Cloud Manager Insufficient Framework User Validation Vulnerability
  • From: ZDI Disclosures
• XSS Ebuddy (responsible disclosure)
  • From: Rener Silva
• Manifattura Web (prodotto.php?id) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• Loop (ricetta.php?id) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• Virtualismi (prodotto.php?id) Cross Site Scripting Vulnerabilities
  • From: ehsan_hp200
• Vulnerabilities in BroadWin WebAccess Client 1.0.0.10
  • From: Luigi Auriemma
• [PT-2011-19] SQL injection vulnerability in Help Request System
  • From: noreply
• ph5gruppo (prodotto.php?id) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• ITTWeb Remote SQL injection Vulnerability
  • From: ehsan_hp200
• KnFTPd v1.0.0 Multiple Command Remote Buffer Overflow
  • From: liuqx
• PMCMA: Post Memory Corruption Memory Analysis
  • From: Jonathan Brossard
• Studio Linea (prodotto.php?id) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• Olonet (prodotto.php?idproduct) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• Fulci (prodotto.php?id) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• Re: [Full-disclosure] HP A-series switches are affected, too. [WAS: More on IPv6 RA-Guard evasion (IPv6 security)]
  • From: Fernando Gont
• Re: [Full-disclosure] HP A-series switches are affected, too. [WAS: More on IPv6 RA-Guard evasion (IPv6 security)]
  • From: Marc Heuse
• Re: [Full-disclosure] HP A-series switches are affected, too. [WAS: More on IPv6 RA-Guard evasion (IPv6 security)]
  • From: Dan Luedtke
• Re: [Full-disclosure] HP A-series switches are affected, too. [WAS: More on IPv6 RA-Guard evasion (IPv6 security)]
  • From: Fernando Gont
• Re: [Full-disclosure] HP A-series switches are affected, too. [WAS: More on IPv6 RA-Guard evasion (IPv6 security)]
  • From: Dan Luedtke
• More on IPv6 RA-Guard evasion (IPv6 security)
  • From: Fernando Gont
• Sana Net (viewpages.php?id) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• Secunia Research: InduSoft ISSymbol ActiveX Control Buffer Overflow Vulnerabilities
  • From: Secunia Research
• [security bulletin] HPSBUX02700 SSRT100506 rev.1 - HP-UX running VEA, Remote Denial of Service (DoS), Execution of Arbitrary Code
  • From: security-alert
• ZDI-11-277: Apple QuickTime 3g2 'mp4v' atom size Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• XSS in Redirection wordpress plugin
  • From: advisory
• Sana Net (viewnews.php?id) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• Dexanet Remote SQL injection Vulnerability
  • From: ehsan_hp200
• CWM (dettaglio-prodotto.asp?id) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• Mediagrafic (prodotto.asp?id) (records.asp?id_p) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• [SECURITY] [DSA 2200-1] nss security update
  • From: Moritz Muehlenhoff
• Full disclosure for SA45649, SQL Injection in LedgerSMB and SQL-Ledger
  • From: Chris Travers
• [SECURITY] [DSA 2299-1] ca-certificates security update
  • From: Thijs Kinkhorst
• Cisco Security Advisory: Denial of Service Vulnerability in Cisco TelePresence Codecs
  • From: Cisco Systems Product Security Incident Response Team
• Pc Web Agency (prodotto.php?id) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• webyuss (prodotto.php?id) (quadri.php?id) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• Cisco Security Advisory: Apache HTTPd Range Header Denial of Service Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• bizConsulting (prodotto.php?id) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• XSS in IBM Open Admin Tool
  • From: sk
• [SECURITY] [DSA 2298-1] apache2 security update
  • From: Stefan Fritsch
• [SECURITY] CVE-2011-3190 Apache Tomcat Authentication bypass and information disclosure
  • From: Mark Thomas
• DDIVRT-2011-32 Axway SecureTransport '/icons/' Directory Traversal
  • From: ddivulnalert
• LifeSize Room Vulnerabilities
  • From: smcintyre
• Multimedia Creative (prodotto.php?id) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• Datriks Solutions (prodotto.php?id) (dettaglio_socio.php?id) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• Marketing & Development (prodotto.php?cat) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• Fabio Rispoli (prodotto.php?id) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• JCE Joomla Extension <=2.0.10 Multiple Vulnerabilities
  • From: admin
• [Foreground Security 2011-001]: Casper Suite (JSS 8.1) Cross-Site Scripting
  • From: Jose Carlos de Arriba
• phpWebSite (publisher) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• Jcow CMS 4.x:4.2 <= , 5.x:5.2 <= | Arbitrary Code Execution
  • From: YGN Ethical Hacker Group
• Jcow CMS 4.2 <= | Cross Site Scripting
  • From: YGN Ethical Hacker Group
• Listendifferent (prodotto.php?IDprodotto) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• OMNITEC (prodotto.php?id_prodotto) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• Web Art Studio (prodotto.php?lang) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• TconZERO (prodotto.php?idprodotto) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• Marinet Remote SQL injection Vulnerability
  • From: ehsan_hp200
• Marinet Remote SQL injection Vulnerability
  • From: ehsan_hp200
• Spherica Remote SQL injection Vulnerability
  • From: ehsan_hp200
• Web Progetto (prodotti.php?idcategoria) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• Foresta Creativa (prodotti.php?idCategoria) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• BUZLAB (prodotti.php?idCategoria) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• B-Keen communication (dettaglio_news.php&id) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• NGS00054 Technical Advisory: : Lumension Device Control (formerly Sanctuary) remote memory corruption
  • From: Research@NGSSecure
• Cisco Security Advisory: Denial of Service Vulnerabilities in Cisco Intercompany Media Engine
  • From: Cisco Systems Product Security Incident Response Team
• ZDI-11-276: Adobe Flash Player MP4 sequenceParameterSetNALUnit Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• LAB GRAPHIC DESIGN (index.php?categoria_id) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• Data Center Foz (product_cat.php?CATEGORIA_ID) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• Nativedreams (Fabarth_gallery.php?categoria_id) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• Nafis Group (review.php?ID) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• [PT-2011-23] Database information disclosure in GLPI
  • From: noreply
• JagoanStore CMS Arbitary file upload vulnerability
  • From: eidelweiss
• ZDI-11-273: EMC Autostart Domain Name Logging Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• SQL-Ledger patch update for SQL injection
  • From: Chris Travers
• Cross-Site Scripting (XSS) in Microsoft ReportViewer Controls
  • From: info
• NetSaro Enterprise Messenger Server Administration Console Source Code Disclosure
  • From: robkraus
• Dataminas (noticias.php?categoria_id) (galeria.php?galeria_id) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• Simply Media Web (archivio.asp?categoria_id) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• Warah Agencia (productos.php?categoria_id) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• Alfazeta (list-prodotti.php?idcategoria) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• CreatiWeb Remote SQL injection Vulnerability
  • From: ehsan_hp200
• ValtNet (photogallery.html?id_categoria) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• [slackware-security] php (SSA:2011-237-01)
  • From: Slackware Security Team
• PHP 5.3.6 ZipArchive invalid use glob(3)
  • From: cxib
• [PRE-SA-2011-06] Linux kernel: ZERO_SIZE_PTR dereference for long symlinks in Be FS
  • From: Timo Warns
• ZDI-11-275: EMC Autostart ftAgent Opcode 0x11 Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [CVE-2011-2712] Apache Wicket XSS vulnerability
  • From: Martin Grigorov
• PHP 5.3.6 multiple null pointer dereference
  • From: cxib
• Cisco Security Advisory: Cisco Unified Communications Manager Denial of Service Vulnerabilities
  • From: Cisco Systems Product Security Incident Response Team
• ZDI-11-274: EMC Autostart ftAgent Opcode 0x140 Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• Security advisory: SQL Injection in LedgerSMB 1.2.24 and lower
  • From: Chris Travers
• Insomnia : ISVA-110822.1 - Pidgin IM Insecure URL Handling Remote Code Execution
  • From: Brett Moore
• [SECURITY] [DSA 2297-1] icedove security update
  • From: Moritz Muehlenhoff
• ESA-2011-030: RSA, The Security Division of EMC, announces security fixes for RSA enVision
  • From: Security_Alert
• Concrete CMS 5.4.1.1 <= Cross Site Scripting
  • From: YGN Ethical Hacker Group
• Cisco Security Advisory: Open Query Interface in Cisco Unified Communications Manager and Cisco Unified Presence Server
  • From: Cisco Systems Product Security Incident Response Team
• Grupo Argentina Web Remote SQL injection Vulnerability
  • From: ehsan_hp200
• ALTOGRADO (catalogo.php?id_categoria) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• ESA-2011-025: Multiple buffer overflow vulnerabilities in EMC AutoStart
  • From: Security_Alert
• ASPR #2011-08-18-1: Remote Binary Planting in Mozilla Firefox
  • From: ACROS Security Lists
• ASPR #2011-08-18-2: Remote Binary Planting in Mozilla Thunderbird
  • From: ACROS Security Lists
• Elgg 1.7.10 <= | Multiple Vulnerabilities
  • From: YGN Ethical Hacker Group
• ToorCon 13 Call For Papers
  • From: h1kari
• [ MDVSA-2011:128 ] dhcp
  • From: security
• [SECURITY] [DSA 2296-1] iceweasel security update
  • From: Moritz Muehlenhoff
• ZDI-11-272: (0day) FlexNet License Server Manager Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [SECURITY] [DSA 2295-1] iceape security update
  • From: Moritz Muehlenhoff
• Xplace Company (dettaglio.asp?id) (alloggi-dett.asp?id) (eventi.asp?id) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• [ MDVSA-2011:127 ] mozilla
  • From: security
• ZDI-11-271: Mozilla Firefox appendChild DOM Tree Inconsistency Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• WebRising (dettaglio.asp?id) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• ZDI-11-270: Mozilla Firefox SVGTextElement.getCharNumAtPosition Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• StudioLine Photo Basic 3 ActiveX control Insecure Method
  • From: advisory
• Multiple XSS in WP-Stats-Dashboard
  • From: advisory
• XSS in Fast Secure Contact Form wordpress plugin
  • From: advisory
• ESA-2011-027: RSA, The Security Division of EMC, releases Security Patch for Adaptive Authentication (On-Premise)
  • From: Security_Alert
• lab382 (dettaglio.php?id) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• ZDI-11-269: RealNetworks RealPlayer Cross-Zone Scripting Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-11-268: RealNetworks RealPlayer SWF DefineFont Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-11-267: RealNetworks Realplayer MP3 ID3 tags Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-11-266: RealNetworks RealPlayer Advanced Audio Coding Element Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-11-265: RealNetworks Realplayer QCP Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-11-264: Symantec Veritas Storage Foundation vxsvc.exe Value Unpacking Integer Overflow Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-11-263: Symantec Veritas Storage Foundation vxsvc.exe ASCII String Unpacking Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-11-262: Symantec Veritas Storage Foundation vxsvc.exe Unicode String Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-11-261: HP Easy Printer Care XMLSimpleAccessor Class ActiveX Control Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-11-260: Nortel Media Application Server cstore.exe cs_anams Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-11-259: Apple QuickTime STSZ atom Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-11-258: Apple QuickTime STSC atom Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-11-257: Apple QuickTime Player H.264 Slice Header Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-11-256: Apple QuickTime Media Link src Parameter Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-11-255: Apple QuickTime Player H.264 Reference Picture List Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-11-254: Apple QuickTime 'trun' atom sampleCount Integer Overflow Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• InYourLife (dettaglio.php?id) (dettaglio_immobile.php?id) (notizia.php?id) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• netplanet (dettaglio.asp?id) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• Muzedon (dettaglio.php?id) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• ECHO Creative Company (dettaglio.php?id) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• dpconsulenze (dettaglio.php?id) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• dedacom (dettaglio.php?id) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• phpWebSite (userpage) Cross Site Scripting Vulnerabilities
  • From: ehsan_hp200
• Malformed DHCPv6 packets cause RPC to become unresponsive
  • From: tunterleitner
• CVE-2011-2664 Symlink Following and Second-Order Symlink Vulnerabilities in Multiple Check Point Security Management Products
  • From: Matthew Flanagan
• phpList Improper Access Control and Information Leakage vulnerabilities
  • From: Davide Canali
• {Lostmon´s Group} Elgg 1.8 beta2 and prior to 1.7.11 'container_guid' and 'owner_guid' SQL Injection
  • From: Lostmon lords
• [Annoucement] ClubHack Magazine - Call for Articles
  • From: abhijeet
• [ MDVSA-2011:126 ] java-1.6.0-openjdk
  • From: security
• Call for Papers: The 6th International Conference for Internet Technology and Secured Transactions (ICITST-2011)!
  • From: Call for papers
• NetSaro Enterprise Messenger Server Plaintext Password Storage Vulnerability
  • From: robkraus
• NetSaro Enterprise Messenger Server Administration Console Weak Cryptographic Password Storage Vulnerability
  • From: robkraus
• The LAD Melbourne Cms Sql Injection Vulnerability
  • From: cyber netron
• [security bulletin] HPSBMU02695 SSRT100480 rev.2 - HP OpenView Performance Insight, Remote HTML Injection, Unauthorized Access, Cross Site Scripting (XSS)
  • From: security-alert
• Ruxcon 2011 Final Call For Papers
  • From: cfp
• awiki 20100125 multiple local file inclusion vulnerabilities
  • From: muuratsalo experimental hack lab
• SAY Comunicacion (producto.php?id) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• BACKEND (categoria.php?id) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• DoodleIT (gallery.php?id) (about.php?id) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• CdeVision(students.php?id) (gallery.php?cat) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• WebsiteBaker 2.8.1 <= Arbitrary File Upload Vulnerability
  • From: YGN Ethical Hacker Group
• WebsiteBaker 2.8.1 <= Cross Site Request Forgery (CSRF) Vulnerability
  • From: YGN Ethical Hacker Group
• [slackware-security] bind (SSA:2011-224-01)
  • From: Slackware Security Team
• ZDI-11-253: Adobe Flash Player BitmapData.scroll Integer Overflow Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-11-252: Apple QuickTime PICT Image PnSize Opcode Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• INSECT Pro - Exploit EChat Server <= v2.5 20110812 - Remote Buffer Overflow Exploit
  • From: runlvl
• PCVmedia (free_gallery.php?cat_id) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• CdeVision Cross Site Scripting Vulnerabilities
  • From: ehsan_hp200
• cdeVision (index.php?page) Remote File Inclusion Vulnerability
  • From: ehsan_hp200
• QOLQA (categoria.php?id) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• [SECURITY] [DSA 2293-1] libxfont security update
  • From: Thijs Kinkhorst
• Neox (categoria.php?id) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• [SECURITY] CVE-2011-2481: Apache Tomcat information disclosure vulnerability
  • From: Mark Thomas
• [SECURITY] CVE-2011-2729: Commons Daemon fails to drop capabilities (Apache Tomcat)
  • From: Mark Thomas
• Calisto light, light plus and full, Sql Injection And user or Admin bypass
  • From: Lostmon lords
• [SECURITY] [DSA 2294-1] freetype security update
  • From: Moritz Muehlenhoff
• [ MDVSA-2011:125 ] foomatic-filters
  • From: security
• [ MDVSA-2011:124 ] phpmyadmin
  • From: security
• [ MDVSA-2011:123 ] squirrelmail
  • From: security
• [ MDVSA-2011:122 ] clamav
  • From: security
• VUPEN Security Research - Adobe Flash Player ActionScript FileReference Buffer Overflow (APSB11-21)
  • From: VUPEN Security Research
• VUPEN Security Research - Adobe Shockwave rcsL Record Array Indexing Vulnerability (APSB11-19)
  • From: VUPEN Security Research
• CVE-2011-0527: VMware vFabric tc Server password obfuscation bypass
  • From: s2-security
• [SECURITY] [DSA 2292-1] ISC DHCP security update
  • From: Florian Weimer
• SEC Consult SA-20110810-0 :: Client-side remote file upload & command execution in Check Point SSL VPN On-Demand applications - CVE-2011-1827
  • From: SEC Consult Vulnerability Lab
• iDefense Security Advisory 08.09.11: Adobe Flash Player Integer Overflow
  • From: labs-no-reply
• iDefense Security Advisory 08.09.11: Adobe Flash Player ActionScript Display Memory Corruption Vulnerability
  • From: labs-no-reply
• CA20110809-01: Security Notice for CA ARCserve D2D
  • From: ken
• [oCERT-2011-002] libavcodec insufficient boundary check
  • From: Daniele Bianco
• [security bulletin] HPSBGN02696 SSRT100590 rev.1 - HP webOS Calendar Application, Remote Execution of Arbitrary Code
  • From: security-alert
• SQL injection in Social Slider
  • From: advisory
• [security bulletin] HPSBGN02694 SSRT100586 rev.1 - HP webOS Contacts Application, Remote Execution of Arbitrary Code
  • From: security-alert
• Multiple XSS in eShop for Wordpress
  • From: advisory
• [security bulletin] HPSBHF02699 SSRT100592 rev.1 - HP ProLiant SL Advanced Power Manager (SL-APM), Remote User Validation Failure
  • From: security-alert
• CfP for 4th OWASP Day Germany 2011 now open
  • From: Tobias Glemser
• ZDI-11-251: Apple QuickTime STSS atom Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-11-250: Apple QuickTime STTS atom Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-11-249: (Pwn2Own) Microsoft Internet Explorer Protected Mode Bypass Vulnerability
  • From: ZDI Disclosures
• ZDI-11-248: Microsoft Internet Explorer 9 STYLE Object Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-11-247: Microsoft Internet Explorer XSLT SetViewSlave Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• Fwd: {Lostmon´s Group} Internet Explorer 6, 7 and 8 Window.open race condition Vulnerability
  • From: Lostmon lords
• ezmlm warning
  • From: bugtraq-help
• TPTI-11-12: McAfee SaaS MyAsUtil5.2.0.603.dll SecureObjectFactory Instantiation Design Flaw Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [security bulletin] HPSBMU02695 SSRT100480 rev.1 - HP OpenView Performance Insight, Remote HTML Injection, Unauthorized Access
  • From: security-alert
• XWeavers (page.asp?id) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• Synchrony Infotech (product_details.php?id) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• Kimia Remote SQL injection Vulnerability
  • From: ehsan_hp200
• XWeavers (sysMsg.php?errMsg) Cross Site Scripting Vulnerabilities
  • From: ehsan_hp200
• Chezola Systems (display-section.php?id) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• EasyContent CMS (participant.php?id) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• IPv6 Hackers mailing-list
  • From: Fernando Gont
• SEO New York (prod.php?id) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• TWSL2011-008: Focus Stealing Vulnerability in Android
  • From: Trustwave Advisories
• THE STUDIO (prod.php?id) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• Webdesigns-studio (sysMsg.php?errMsg) Cross Site Scripting Vulnerabilities
  • From: ehsan_hp200
• 6House Design (product_details.php?id) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• Amigot Corp (story.php?id) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• Re: CA ARCserve D2D r15 GWT RPC Request Auth Bypass / Credentials
  • From: Williams, James K
• Liberating IT (picture.php?gid) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• Avant-Garde Technologies (display-section.php?id) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• Web Design Sydney (news-item.php?id) (news-item.php?newsid) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• Arte Dude (collections.php?id) (property.php?id) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• TPTI-11-13: McAfee SaaS myCIOScn.dll Scan Method Script Injection Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [security bulletin] HPSBPI02698 SSRT100404 rev.1 - HP Easy Printer Care Software Running on Windows, Remote Execution of Arbitrary Code
  • From: security-alert
• [SECURITY] [DSA 2291-1] squirrelmail security update
  • From: Thijs Kinkhorst
• [SECURITY] [DSA 2290-1] samba security update
  • From: Florian Weimer
• [SECURITY] [DSA 2289-1] typo3-src security update
  • From: Florian Weimer
• Sophos Antivirus Review
  • From: Tavis Ormandy
• Useless OpenSSH resources exhausion bug via GSSAPI
  • From: pi3
• Community Server - Stored Cross-Site Scripting in User's Signature
  • From: Advisories PontoSec
• Community Server - Reflected Cross-Site Scripting -
  • From: Advisories PontoSec
• Re: [Full-disclosure] phpMyAdmin 3.x Conditional Session Manipulation
  • From: Henri Salo
• APPLE-SA-2011-08-03-1 QuickTime 7.7
  • From: Apple Product Security
• ThreeDify Designer ActiveX control multiple buffer overflow vulnerabilities
  • From: advisory
• ThreeDify Designer ActiveX control Insecure Method
  • From: advisory
• Multiple XSS in HESK
  • From: advisory
• XSS in WP e-Commerce
  • From: advisory
• Cross Site Scription Vulnerability in vBulletin 4.1.3, 4.1.4 and 4.1.5
  • From: haroon
• Android Browser Cross-Application Scripting (CVE-2011-2357)
  • From: Roee Hay
• NGS00068 Technical Advisory - LibAVCodec AMV Out of Array Write
  • From: Research@NGSSecure
• CFP open for ClubHack2011
  • From: Abhijeet Patil
• Elgg 1.7.9 <= | Multiple Cross Site Scripting Vulnerabilities
  • From: YGN Ethical Hacker Group
• cgcraft llc (collections.php?id) Cross Site Scripting Vulnerabilities
  • From: ehsan_hp200
• [slackware-security] libpng (SSA:2011-210-01)
  • From: Slackware Security Team
• [slackware-security] samba (SSA:2011-210-03)
  • From: Slackware Security Team
• [slackware-security] dhcpcd (SSA:2011-210-02)
  • From: Slackware Security Team
• ZDI-11-244: (0day) FlexNet License Server Manager lmadmin Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• n.runs-SA-2011.002 - Citrix XenApp / XenDesktop XML Service Heap Corruption
  • From: security
• n.runs-SA-2011.001 - Citrix XenApp / XenDesktop Stack-Based Buffer Overflow
  • From: security
• Gopal Systems (products.php?cat_id) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• [security bulletin] HPSBMU02691 SSRT100483 rev.2 - HP Performance Agent and HP Operations Agent, Remote Arbitrary File Deletion
  • From: security-alert
• [security bulletin] HPSBUX02689 SSRT100494 rev.2 - HP-UX Running OpenSSL, Remote Denial of Service (DoS)
  • From: security-alert
• [security bulletin] HPSBMU02669 SSRT100346 rev.3 - HP Data Protector Media Management Daemon (mmd), Remote Denial of Service (DoS)
  • From: security-alert
• [security bulletin] HPSBMU02693 SSRT100583 rev.1 - HP Network Automation Running on Linux, Solaris, and Windows, Remote SQL Injection, Cross Site Scripting (XSS)
  • From: security-alert
• [SECURITY] [DSA 2287-1] libpng security update
  • From: Luciano Bello
• [security bulletin] HPSBMU02692 SSRT100581 rev.2 - HP SiteScope, Remote Cross Site Scripting (XSS) and Session Fixation Attack
  • From: security-alert
• Two security issues fixed in ioQuake3 engine
  • From: Thilo Schulz
• Re: [Full-disclosure] [BMSA-2009-07] Backdoor in PyForum
  • From: Henri Salo
• Wireshark 1.6.1 Malformed IKE Packet Denial of Service
  • From: vuln
• CobraScripts (selloffers.php?cid) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• indiacon (selloffers.php?cid) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• A1 Solutions (cat_sell.php?cid) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• Infocus Web Solutions (news_desc.php?id) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• Web Fusion Nepal (find.php?id) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• Avon Groups (search_result.php?cid) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• Web Fusion Nepal (tour.php?category) XSS Vulnerability
  • From: ehsan_hp200
• Zones Web Solution (status.asp?print) (search_result.php?loc_id) Remote SQL injection Vulnerabilities
  • From: ehsan_hp200
• Zones Web Solution (StoneDetails.php?stone) XSS Vulnerability
  • From: ehsan_hp200
• Canoy Softwares (search_result.php?loc_id) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• WOC Consulting (search_result.php?cid) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• Coherendz (products.php?cat_id) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• TeamSHATTER Security Advisory: Oracle Enterprise Manager vulnerable to XSS (metricDetail$type page)
  • From: Shatter
• TeamSHATTER Security Advisory: Oracle Enterprise Manager vulnerable to XSS (sitemap page)
  • From: Shatter
• TeamSHATTER Security Advisory: Oracle Enterprise Manager vulnerable to XSS (notifRuleInfo$mode page)
  • From: Shatter
• FootBall Cms (view_table_lig.php?group) XSS Vulnerability
  • From: ehsan_hp200
• Dow Group (dynamic.php?id) (sub.php?solutioncat_id) (news_desc.php?id) (product.php?id) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• ZDI-11-243: WebKit ContentEditable Inline Style Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-11-242: Apple Safari Rendering Object Body Detachment Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-11-241: Webkit setAttributes attributeChanged Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-11-240: Apple Safari Webkit SVG Marker Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-11-239: Apple Safari Webkit FrameOwner Element Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [ MDVSA-2011:121 ] samba
  • From: security
• Redirection vulnerability in MBoard
  • From: advisory
• Multiple XSS in GBook PHP guestbook
  • From: advisory
• Chrome Web Solutions (details.php?cat_id) (listing_more.php?id) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• Solutiontech (product.php?cat_id) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• iCube Lab (product_details.php?cat_id) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• G2webCMS (products.php?cat_id) (member-profile.php?profile) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• [ MDVSA-2011:120 ] freetype2
  • From: security
• SA500 vulnerabilities - details
  • From: michal . sajdak
• Agent Image (news_details.php?news_ID) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• ESA-2011-021: EMC Data Protection Advisor sensitive information disclosure vulnerability
  • From: Security_Alert
• ESA-2011-024: EMC Captiva eInput multiple vulnerabilities
  • From: Security_Alert
• [SECURITY] [DSA 2286-1] phpmyadmin security update
  • From: Thijs Kinkhorst
• [Tool] DoS for OpenSLP (and others)
  • From: Nicolas Grégoire
• Re: CA ARCserve D2D r15 GWT RPC Request Auth Bypass / Credentials
  • From: Williams, James K
• Hacking IPv6 Networks (slides)
  • From: Fernando Gont
• [PT-2011-05] Cross-Site Scripting in Koha Library Software
  • From: noreply
• [PT-2011-25] SQL injection vulnerabilities in Support Incident Tracker
  • From: noreply
• [PT-2011-08] Multiple vulnerabilities in Dlink DPH 150SE/E/F1
  • From: noreply
• Lava (news_item.php?id) (album.php?id) (basket.php?baction) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• Precision (products.php?cat_id) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• DotComEgypt (products.php?cat_id) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• Indonesia Web Design (link-directory.php?cid) (link-directory.php?pid) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• Funnel Web (pages.php?page) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• Funnel Web (selected_product.php?t) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• Funnel Web (directory.php?cid) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• Funnel Web (items.php?&cat_id) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• Zones Web Solution (index.php?manufacturers_id) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• CA ARCserve D2D r15 GWT RPC Request Auth Bypass / Credentials Disclosure and Commands Execution
  • From: nospam
• PHP-Barcode 0.3pl1 Remote Code Execution
  • From: beford