Bugtraq

• Thread Index

• HTB22933: Multiple Path disclosure in webSPELL
  • From: advisory
• ZDI-11-136: IBM Tivoli Directory Server ibmslapd.exe SASL Bind Request Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• HTB22940: XSS in SocialGrid wordpress plugin
  • From: advisory
• HTB22939: Multiple SQL Injection in Universal Post Manager wordpress plugin
  • From: advisory
• [Annoucement] CHMag Call for Articles
  • From: abhijeet
• [DCA-2011-0011] - Ocomon Multiple SQL Injection
  • From: Ewerson Guimarães (Crash) - Dclabs
• HTB22941: CSRF (Cross-Site Request Forgery) in Dalbum
  • From: advisory
• HTB22935: Multiple XSS in WP-StarsRateBox wordpress plugin
  • From: advisory
• HTB22934: SQL Injection in WP-StarsRateBox wordpress plugin
  • From: advisory
• HTB22932: Multiple XSS in webSPELL
  • From: advisory
• Re: Does anyone know how to contact OpenSSH non-public?
  • From: Rico Secada
• ESA-2011-014: RSA, The Security Division of EMC, announces the release of Adaptive Authentication (On-Premise) Flash File Security Patch
  • From: Security_Alert
• cPassMan v1.82 Arbitrary File Download - SOS-11-004
  • From: Lists
• Announcement: ClubHACK Magazine Issue 15-April 2011 released
  • From: abhijeet
• ESA-2011-013: EMC NetWorker arbitrary code execution with elevated privileges vulnerability
  • From: Security_Alert
• [USN-1113-1] Postfix vulnerabilities
  • From: Marc Deslauriers
• Re: DC4420 - London DEFCON - April meet - Wednesday 20th April 2011
  • From: Major Malfunction
• Does anyone know how to contact OpenSSH non-public?
  • From: Jann Horn
• RE: THOMSON Router XSS
  • From: Auffret Patrice
• VUPEN Security Research - Microsoft Internet Explorer Layouts Use-after-free Vulnerability (CVE-2011-0094)
  • From: VUPEN Security Research
• VUPEN Security Research - Microsoft Office Excel Real Time Data Stack Overwrite Vulnerability (CVE-2011-0105)
  • From: VUPEN Security Research
• ZDI-11-104: (Pwn2Own) Webkit CSS Text Element Count Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• VUPEN Security Research - Microsoft Windows OpenType CFF Driver Stack Overflow Vulnerability (CVE-2011-0034)
  • From: VUPEN Security Research
• VUPEN Security Research - Apple Safari Text Nodes Remote Use-after-free Vulnerability (CVE-2011-1344)
  • From: VUPEN Security Research
• VUPEN Security Research - Microsoft Internet Explorer Property Change Memory Corruption (CVE-2011-1345)
  • From: VUPEN Security Research
• ZDI-11-135: (Pwn2Own) WebKit WBR Tag Removal Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [USN-1110-1] KDE-Libs vulnerabilities
  • From: Jamie Strandboge
• Recon 2011 - Accepted Talks , Training, Call For Papers Reminder - July 8 to 10, 2011 - Montreal, Quebec
  • From: hfortier
• The BodgeIt Store - another vulnerable web app
  • From: psiinon
• [security bulletin] HPSBMA02652 SSRT100432 rev.3 - HP Network Node Manager i (NNMi) for HP-UX, Linux, Solaris, and Windows, Remote Information Disclosure
  • From: security-alert
• HTB22922: XSS vulnerabilities in phpAlbum.net
  • From: advisory
• HTB22923: XSRF (CSRF) in phpAlbum.net
  • From: advisory
• HTB22924: Arbitrary Command Execution in phpAlbum.net
  • From: advisory
• ZDI-11-134: CA Total Defense Suite UNC Management Console RegenerateReport SQL Injection Vulnerability
  • From: ZDI Disclosures
• ZDI-11-133: CA Total Defense Suite UNC Management Console DeleteReports SQL Injection Vulnerability
  • From: ZDI Disclosures
• ZDI-11-132: CA Total Defense Suite UNC Management Console DeleteReportLayout SQL Injection Vulnerability
  • From: ZDI Disclosures
• ZDI-11-131: CA Total Defense Suite NonAssignedUserList Stored Procedure SQL Injection Vulnerability
  • From: ZDI Disclosures
• CA20110413-01: Security Notice for CA Total Defense
  • From: Kotas, Kevin J
• ZDI-11-130: CA Total Defense Suite UNC Management Console DeleteFilter SQL Injection Vulnerability
  • From: ZDI Disclosures
• ZDI-11-129: CA Total Defense Suite UnassignAdminRoles Stored Procedure SQL Injection Vulnerability
  • From: ZDI Disclosures
• ZDI-11-127: CA Total Defense Suite UNCWS Web Service getDBConfigSettings Credential Disclosure Vulnerability
  • From: ZDI Disclosures
• ZDI-11-128: CA Total Defense Suite UnassignFunctionalUsers Stored Procedure SQL Injection Vulnerability
  • From: ZDI Disclosures
• ZDI-11-126: CA Total Defense Suite Heartbeat Web Service Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• Re: ZDI-11-117: McAfee Firewall Reporter GeneralUtilities.pm isValidClient Authentication Bypass Vulnerability
  • From: nospam
• Microsoft Patches Binary Planting Issues In Various Vendors' Products
  • From: ACROS Security Lists
• MITKRB5-SA-2011-004 kadmind invalid pointer free() [CVE-2011-0285]
  • From: Tom Yu
• VUPEN Security Research - Microsoft Office MSO Size Handling Integer Overflow Vulnerability
  • From: VUPEN Security Research
• [ MDVSA-2011:074 ] qt4
  • From: security
• ZDI-11-125: Microsoft Office PowerPoint PersistDirectoryEntry Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [PRE-SA-2011-03] Denial-of-service vulnerability in EFI partition handling code of the Linux kernel
  • From: Timo Warns
• [USN-1109-1] GIMP vulnerabilities
  • From: Marc Deslauriers
• iDefense Security Advisory 04.12.11: Microsoft Internet Explorer Use-After-Free Memory Corruption Vulnerability
  • From: labs-no-reply
• Re: joomlacontenteditor (com_jce) BLIND sql injection vulnerability
  • From: Stephen Brandon
• [security bulletin] HPSBMA02643 SSRT100416 rev.2 - HP Network Node Manager i (NNMi), Local Unauthorized Read Access to Files, Remote Cross Site Scripting (XSS)
  • From: security-alert
• iDefense Security Advisory 04.12.11: Microsoft Excel Memory Corruption Vulnerability
  • From: labs-no-reply
• VUPEN Security Research - Microsoft Windows GDI+ Size Handling Integer Overflow Vulnerability
  • From: VUPEN Security Research
• [security bulletin] HPSBUX02642 SSRT100415 rev.1 - HP Network Node Manager i (NNMi) for HP-UX, Linux, Solaris, and Windows running Java, Remote Denial of Service (DoS)
  • From: security-alert
• [security bulletin] HPSBUX02653 SSRT100310 rev.1 - HP-UX Running NFS/ONCplus, Remote Denial of Service (DoS)
  • From: security-alert
• [security bulletin] HPSBUX02655 SSRT100353 rev.1 - HP-UX Running BIND, Remote Denial of Service (DoS)
  • From: security-alert
• nSense-2011-001: VeryPDF pdf2tif
  • From: Henri Lindberg
• [DCA-2011-0010] TOTVS Microsiga Protheus ERP - Memory Corruption
  • From: Flavio do Carmo Junior aka waKKu
• ZDI-11-124: Microsoft PowerPoint TimeColorBehaviorContainer Floating Point Record Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-11-123: Microsoft PowerPoint TimeCommandBehaviorContainer Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-11-122: RealNetworks RealPlayer OpenURLInDefaultBrowser Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• Announcing TakeDownCon Dallas - May 14-19 - Dallas, TX
  • From: EC-Council USA
• ZDI-11-121: Microsoft Office XP Data Validation Record Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-11-120: Microsoft Office Excel RealTimeData Record Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-11-119: (Pwn2Own) Microsoft Internet Explorer onPropertyChange Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [IMF 2011] Call for Participation
  • From: Oliver Goebel
• Re: [Full-disclosure] Medium severity flaw in Konqueror
  • From: Tim Brown
• [security bulletin] HPSBPI02656 SSRT090262 rev.1 - Certain HP Photosmart Printers, Remote Unauthorized Access, Cross Site Scripting (XSS)
  • From: security-alert
• HTB22928: Multiple SQL Injections in WebsiteBaker
  • From: advisory
• HTB22929: Multiple Path disclosure in WebsiteBaker
  • From: advisory
• Stack overflow in Microsoft HTML Help 6.1 (CHM files)
  • From: Luigi Auriemma
• HTB22925: Path disclosure in Plogger
  • From: advisory
• HTB22926: XSS vulnerability in Plogger
  • From: advisory
• [SECURITY] [DSA 2218-1] vlc security update
  • From: Nico Golde
• HTB22927: CSRF (Cross-Site Request Forgery) in Webjaxe
  • From: advisory
• CFP for BugCON 2011 @ Mexico City
  • From: Carlos A. Lozano
• Re: [Full-disclosure] Medium severity flaw in Konqueror
  • From: Vincent Danen
• HTB22930: Multiple XSS in WebCalendar
  • From: advisory
• Medium severity flaw in Konqueror
  • From: Tim Brown
• [USN-1108-1] DHCP vulnerability
  • From: Marc Deslauriers
• rPSA-2011-0014-1 httpd mod_ssl
  • From: rPath Update Announcements
• Passwords^11 - Call for Papers ending April 17!
  • From: Per Thorsheim
• rPSA-2011-0013-1 openssl openssl-scripts
  • From: rPath Update Announcements
• ZDI-11-118: Novell ZENworks Asset Management Path Traversal File Overwrite Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• Vulnerabilities in Microsoft Reader and HIS
  • From: Luigi Auriemma
• ZDI-11-117: McAfee Firewall Reporter GeneralUtilities.pm isValidClient Authentication Bypass Vulnerability
  • From: ZDI Disclosures
• [SECURITY] [DSA 2217-1] dhcp3 security update
  • From: Nico Golde
• Linksys WRT54G - read router password from file placed on FTP
  • From: rafdw
• [ MDVSA-2011:073 ] dhcp
  • From: security
• [Tool] sqlmap 0.9 released
  • From: Miroslav Stampar
• [SECURITY] [DSA 2216-1] isc-dhcp security update
  • From: Nico Golde
• [SECURITY] [DSA 2215-1] gitolite security update
  • From: Nico Golde
• WOOT '11 Call for Papers (reminder)
  • From: Michal Zalewski
• Arbitary File Upload Vulnerability in Elxis CMS component eForum v1.1
  • From: by_argos
• Re: XSRF (CSRF) in Wolf CMS
  • From: security curmudgeon
• [SECURITY] [DSA 2214-1] ikiwiki security update
  • From: Nico Golde
• [SECURITY] [DSA 2213-1] x11-xserver-utils security update
  • From: Nico Golde
• joomlacontenteditor (com_jce) BLIND sql injection vulnerability
  • From: eidelweiss
• [ MDVSA-2011:072 ] gwenhywfar
  • From: security
• [ MDVSA-2011:071 ] kdelibs4
  • From: security
• [ MDVSA-2011:070 ] gdm
  • From: security
• [ MDVSA-2011:069 ] php
  • From: security
• LFI Vulnerability in 1024cms Admin Control Panel v1.1.0 Beta (Master-cPanel Package)
  • From: by_argos
• XSS Vulnerability in 1024cms Admin Control Panel v1.1.0 Beta (Master-cPanel Package)
  • From: by_argos
• Directory Traversal Vulnerability in 1024cms Admin Control Panel v1.1.0 Beta (Complete-Modules Package)
  • From: by_argos
• LFI Vulnerability in 024cms Admin Control Panel v1.1.0 Beta (Complete-Modules Package)
  • From: by_argos
• XSS Vulnerabilities in 1024cms Admin Control Panel v1.1.0 Beta
  • From: by_argos
• [SECURITY] [DSA 2212-1] tmux security update
  • From: Nico Golde
• phplist: cross site request forgery (CSRF), CVE-2011-0748
  • From: Hanno Böck
• O2 classic router: persistent cross site scripting (XSS) and cross site request forgery (CSRF)
  • From: Hanno Böck
• HTB22916: XSRF (CSRF) in phpCollab
  • From: advisory
• HTB22917: XSS vulnerabilities in phpCollab
  • From: advisory
• HTB22918: Path disclosure in phpCollab
  • From: advisory
• HTB22920: Path disclosure in Viscacha
  • From: advisory
• HTB22915: Path disclosure in Joomla
  • From: advisory
• HTB22919: Multiple XSS in Viscacha
  • From: advisory
• HTB22921: SQL Injection in Viscacha
  • From: advisory
• SEC Consult SA-20110407-0 :: Libmodplug ReadS3M Stack Overflow
  • From: SEC Consult Vulnerability Lab
• [SECURITY] [DSA 2211-1] vlc security update
  • From: Moritz Muehlenhoff
• Sonexis ConferenceManager Multiple Cross-site Scripting (XSS) Vulnerabilities
  • From: robkraus
• [USN-1107-1] x11-xserver-utils vulnerability
  • From: Marc Deslauriers
• [SECURITY] CVE-2011-1183 Apache Tomcat security constraint bypass
  • From: Mark Thomas
• [USN-1106-1] NSS vulnerabilities
  • From: Micah Gersten
• [SECURITY] CVE-2011-1475 Apache Tomcat information disclosure
  • From: Mark Thomas
• Sonexis ConferenceManager SQL Injection
  • From: robkraus
• Re: Multiple vulnerabilities in chCounter <= 3.1.3
  • From: security curmudgeon
• ICMPv6 Router Announcement flooding denial of service affecting multiple systems
  • From: Marc Heuse
• Re: AWCM v2.2 Auth Bypass Vulnerabilities
  • From: security curmudgeon
• [ MDVSA-2011:066 ] rsync
  • From: security
• [USN-1105-1] Linux kernel vulnerabilities
  • From: Kees Cook
• Re: [eVuln.com] Cookie Auth Bypass in Hot Links SQL
  • From: security curmudgeon
• XSS Vulnerability in Redmine 1.0.1 to 1.1.1
  • From: Netsparker Advisories
• Re: XSS in CompactCMS
  • From: security curmudgeon
• [ MDVSA-2011:065 ] logrotate
  • From: security
• StartSite.ir Cross-site Scripting Vulnerability
  • From: md . r00t . defacer
• [security bulletin] HPSBMA02652 SSRT100432 rev.2 - HP Network Node Manager i (NNMi) for HP-UX, Linux, Solaris, and Windows, Remote Information Disclosure
  • From: security-alert
• HTB22911: XSS in Eleanor CMS
  • From: advisory
• HTB22912: Multiple SQL Injections in Eleanor CMS
  • From: advisory
• HTB22913: Multiple CSRF (Cross-Site Request Forgery) in UseBB
  • From: advisory
• HTB22914: Local File Inclusion in UseBB
  • From: advisory
• [USN-1104-1] FFmpeg vulnerabilities
  • From: Marc Deslauriers
• Re: Xymon monitor cross-site scripting vulnerabilities
  • From: Henri Salo
• [USN-1102-1] tiff vulnerability
  • From: Marc Deslauriers
• [USN-1103-1] tex-common vulnerability
  • From: Marc Deslauriers
• RealNetworks RealGames StubbyUtil.ProcessMgr.1 ActiveX Control (InstallerDlg.dll v2.6.0.445) Multiple Remote Commands Execution Vulnerabilities
  • From: nospam
• ZDI-11-041: (0day) Multiple Browser Node Processing Stack Overflow Vulnerability
  • From: ZDI Disclosures
• RealNetworks RealGames StubbyUtil.ShellCtl.1 ActiveX Control (InstallerDlg.dll v2.6.0.445) Multiple Remote Commands Execution and Code Execution Vulnerabilities
  • From: nospam
• ZDI-11-116: Novell File Reporter Agent XML Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [ MDVSA-2011:064 ] libtiff
  • From: security
• Re: DC4420 - London DEFCON - April meet - Wednesday 20th April 2011
  • From: Adam Laurie
• DC4420 - London DEFCON - April meet - Wednesday 22nd April 2011
  • From: Major Malfunction
• Xymon monitor cross-site scripting vulnerabilities
  • From: Henrik Størner
• THOMSON Router XSS
  • From: edgard . chammas
• ZDI-11-115: IBM solidDB solid.exe Authentication Bypass Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [SECURITY] [DSA 2209-1] tgt security update
  • From: Moritz Muehlenhoff
• [ MDVSA-2011:063 ] xmlsec1
  • From: security
• [ MDVSA-2011:062 ] ffmpeg
  • From: security
• [SECURITY] [DSA 2210-1] tiff security update
  • From: Thijs Kinkhorst
• XCon 2011 XFocus Information Security Conference Call for Paper
  • From: xcon
• Stored and Reflective XSS in Yaws-Wiki 1.88-1 (Erlang)
  • From: mike
• Re: RFI in JAF CMS
  • From: security curmudgeon
• [ MDVSA-2011:061 ] ffmpeg
  • From: security
• [ MDVSA-2011:060 ] ffmpeg
  • From: security
• Movie Player v4.82 0Day Buffer overflow/DOS Exploit
  • From: ^Xecuti0N3r
• Flag this message Windows Media player 11.0.5721.5145 Buffer overflow/DOS Exploit
  • From: ^Xecuti0N3r
• AR Web Content Manager (AWCM) Cross-Site scripting Vulnerability
  • From: SecPod Research
• [security bulletin] HPSBUX02639 SSRT100293 rev.1 - HP-UX Running XNTP, Remote Denial of Service (DoS)
  • From: security-alert
• [security bulletin] HPSBUX02646 SSRT100396 rev.1 - HP-UX, Local Denial of Service (DoS)
  • From: security-alert
• [security bulletin] HPSBUX02645 SSRT100387 rev.1 - HP-UX Apache Web Server, Remote Information Disclosure, Cross-Site Scripting (XSS), Denial of Service (DoS)
  • From: security-alert
• [ MDVSA-2011:059 ] ffmpeg
  • From: security
• 6-year FreeBSD-SA-05:02.sendfile exploit
  • From: Solar Designer
• RE: [Full-disclosure] Microsoft VISTA TCP/IP heap buffer underflow
  • From: Thor (Hammer of God)
• Microsoft VISTA TCP/IP heap buffer underflow
  • From: J. Oquendo
• [ MDVSA-2011:057 ] apache
  • From: security
• iDefense Security Advisory 03.31.10: RealNetworks Helix DNA Server RTSP Stack Buffer Overflow
  • From: labs-no-reply
• [ MDVSA-2011:058 ] quagga
  • From: security
• [security bulletin] HPSBMA02650 SSRT100429 rev.1 - HP Operations for UNIX, Remote Cross Site Scripting (XSS), Unauthorized Access
  • From: security-alert
• BSD derived RFC3173 IPComp encapsulation will expand arbitrarily nested payload
  • From: Tavis Ormandy
• Re: Solaris 10 Port Stealing Vulnerability
  • From: Casper . Dik
• [USN-1100-1] OpenLDAP vulnerabilities
  • From: Jamie Strandboge
• HTB22931: XSS vulnerability in InTerra Blog Machine
  • From: advisory
• Re: Re: HTB22905: Path disclosure in Wordpress
  • From: mike
• HTB22908: XSRF (CSRF) in Collabtive
  • From: advisory
• HTB22909: Path disclosure in Tine 2.0
  • From: advisory
• HTB22910: XSRF (CSRF) in Feng Office
  • From: advisory
• HTB22906: XSS vulnerabilities in Collabtive
  • From: advisory
• HTB22907: Directory Traversal in Collabtive
  • From: advisory
• [SECURITY] [DSA 2208-2] bind9 security update
  • From: Florian Weimer
• [USN-1099-1] GDM vulnerability
  • From: Steve Beattie
• RE: Solaris 10 Port Stealing Vulnerability
  • From: Chris O'Regan
• 'Andy's PHP Knowledgebase' SQL Injection Vulnerability (CVE-2011-1546)
  • From: Mark Stanislav
• [SECURITY] [DSA 2208-1] bind9 security update
  • From: Florian Weimer
• Re: HTB22905: Path disclosure in Wordpress
  • From: Patrick Kelley
• Re: HTB22905: Path disclosure in Wordpress
  • From: Patrick Kelley
• [ MDVSA-2011:056 ] openldap
  • From: security
• Cisco Security Advisory: Cisco Secure Access Control System Unauthorized Password Change Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco Network Access Control Guest Server System Software Authentication Bypass Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• ESA-2011-012: Security update for EMC NetWorker Module for Microsoft Applications
  • From: Security_Alert
• Re: HTB22905: Path disclosure in Wordpress
  • From: Christian Sciberras
• [USN-1095-1] Quagga vulnerabilities
  • From: Marc Deslauriers
• [USN-1094-1] Libvirt vulnerability
  • From: Jamie Strandboge
• [USN-1096-1] Subversion vulnerability
  • From: Marc Deslauriers
• Re: "Simple PHP Newsletter" Remote Admin Password Change With install path
  • From: Patrick Kelley
• [SECURITY] [DSA 2207-1] tomcat5.5 security update
  • From: Moritz Muehlenhoff
• [USN-1098-1] vsftpd vulnerability
  • From: Marc Deslauriers
• [ MDVSA-2011:055 ] openldap
  • From: security
• [USN-1097-1] Tomcat vulnerabilities
  • From: Marc Deslauriers
• DataDynamics Report Library CoreHandler XSS
  • From: david . daly
• VMSA-2011-0006 VMware vmrun utility local privilege escalation
  • From: VMware Security Team
• [SECURITY] [DSA 2206-1] New mahara packages fix several vulnerabilities
  • From: Martin Schulze
• HTB22903: XSS in Spitfire CMS
  • From: advisory
• Solaris 10 Port Stealing Vulnerability
  • From: Chris O'Regan
• "WESPA PHP Newsletter v3.0" Remote Admin Password Change With install path
  • From: cseye_ut
• XSS Vulnerability in Tracks 1.7.2
  • From: Netsparker Advisories
• HTB22905: Path disclosure in Wordpress
  • From: advisory
• HTB22904: Path disclosure in bbPress
  • From: advisory
• "Simple PHP Newsletter" Remote Admin Password Change With install path
  • From: cseye_ut
• "WESPA PHP Newsletter v3.0" Remote Admin Password Change With install path
  • From: cseye_ut
• [SECURITY] [DSA 2205-1] gdm3 security update
  • From: Florian Weimer
• "Simple PHP Newsletter" Remote Admin Password Change With install path
  • From: cseye_ut
• ZDI-11-113: Zend Server Java Bridge Design Flaw Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• Unidesk ReportingService Forceful Browsing Vulnerability
  • From: np
• [ MDVSA-2011:054 ] java-1.6.0-openjdk
  • From: security
• [AntiSnatchOr] OpenCMS <= 7.5.3 multiple vulnerabilities
  • From: Michele Orru
• Wordpress plugin BackWPup Remote and Local Code Execution Vulnerability - SOS-11-003
  • From: Lists
• [USN-1093-1] Linux Kernel vulnerabilities (Marvell Dove)
  • From: Jamie Strandboge
• [USN-1092-1] Linux Kernel vulnerabilities
  • From: Jamie Strandboge
• TSSA-2011-01 xpdf : multiple vulnerabilities allow remote code execution
  • From: Advisories Toucan-System
• SimplisCMS 1.0.3.0 SQL injection / Cross Site Scripting
  • From: root
• [SECURITY] [DSA 2204-1] imp4 security update
  • From: Steffen Joeris
• SimplisCMS 1.0.3.0 Remote File Disclosure Vulnerability
  • From: root
• [security bulletin] HPSBMA02649 SSRT100430 rev.1 - HP Diagnostics, Remote Cross Site Scripting (XSS)
  • From: security-alert
• [SECURITY] [DSA 2203-1] nss security update
  • From: Moritz Muehlenhoff
• Re: Vulnerabilities in some SCADA server softwares
  • From: Willy Tarreau
• [USN-1091-1] Firefox and Xulrunner vulnerabilities
  • From: Micah Gersten
• Parallels Plesk 7.0 - 8.2 | Open URL Redirection Vulnerability
  • From: YGN Ethical Hacker Group
• NGS00051 Patch Notification: Cisco VPN Client Privilege Escalation
  • From: Research@NGSSecure
• ESA-2011-010: EMC Data Protection Advisor Collector arbitrary code execution with elevated privileges vulnerability
  • From: Security_Alert
• Re: Vulnerabilities in some SCADA server softwares
  • From: Michal Zalewski
• Re: Vulnerabilities in some SCADA server softwares
  • From: CJC
• Re: Vulnerabilities in some SCADA server softwares
  • From: Kent Borg
• HTB22901: SQL injection in SyndeoCMS
  • From: advisory
• HTB22896: SQL injection vulnerability in Ripe website manager
  • From: advisory
• HTB22899: Path disclosure in SyndeoCMS
  • From: advisory
• Re: Vulnerabilities in some SCADA server softwares
  • From: bugtraq
• HTB22902: XSS in SyndeoCMS
  • From: advisory
• Re: Vulnerabilities in some SCADA server softwares
  • From: Simple Nomad
• HTB22898: XSRF (CSRF) in Ripe website manager
  • From: advisory
• HTB22897: SQL injection vulnerability in Ripe website manager
  • From: advisory
• Re: Vulnerabilities in some SCADA server softwares
  • From: Jamie Riden
• HTB22895: XSS vulnerability in Ripe website manager
  • From: advisory
• HTB22900: Multiple XSS vulnerabilities in SyndeoCMS
  • From: advisory
• Re: Vulnerabilities in some SCADA server softwares
  • From: Pavel Kankovsky
• Re: Vulnerabilities in some SCADA server softwares
  • From: J. Oquendo
• [SECURITY] [DSA 2202-1] apache2 security update
  • From: Stefan Fritsch
• [SECURITY] [DSA 2201-1] wireshark security update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 2200-1] iceweasel security update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 2199-1] iceape security update
  • From: Moritz Muehlenhoff
• CORE-2011-0208: VLC Vulnerabilities handling .AMV and .NSV files
  • From: CORE Security Technologies Advisories
• Re: Vulnerabilities in some SCADA server softwares
  • From: Kent Borg
• Re: Vulnerabilities in some SCADA server softwares
  • From: Theo de Raadt
• Re: Vulnerabilities in some SCADA server softwares
  • From: Simple Nomad
• ZDI-11-111: (0Day) Hewlett-Packard Virtual SAN Appliance hydra.exe Login Request Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• Re: Vulnerabilities in some SCADA server softwares
  • From: Mike Hoskins
• Re: Vulnerabilities in some SCADA server softwares
  • From: J. Oquendo
• Re: Vulnerabilities in some SCADA server softwares
  • From: Luigi Auriemma
• Re: Vulnerabilities in some SCADA server softwares
  • From: Theo de Raadt
• PHP-Nuke 8.x <= "chng_uid" Blind SQL Injection Vulnerability
  • From: YGN Ethical Hacker Group
• [ MDVSA-2011:053 ] php
  • From: security
• [ MDVSA-2011:052 ] php
  • From: security
• Re: Buffer overflow in libtiff in Imagemagick
  • From: Vladimir '3APA3A' Dubrovin
• PHP-Nuke 8.x <= Cross Site Scripting Vulnerability
  • From: YGN Ethical Hacker Group
• Re: Vulnerabilities in some SCADA server softwares
  • From: J. Oquendo
• RE: Vulnerabilities in some SCADA server softwares
  • From: Jim Harrison
• RE: Vulnerabilities in some SCADA server softwares
  • From: Jim Harrison
• Re: Vulnerabilities in some SCADA server softwares
  • From: Michal Zalewski
• PHP-Nuke 8.x <= Cross Site Request Forgery (CSRF) / Anti-CSRF Bypass Vulnerability
  • From: YGN Ethical Hacker Group
• ZDI-11-112: (0 day) Hewlett-Packard Data Protector Media Operations DBServer.exe Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• Re: Vulnerabilities in some SCADA server softwares
  • From: R Michael Williams
• Joomla! 1.6.0 | Information Disclosure/Full Path Disclosure Vulnerability
  • From: YGN Ethical Hacker Group
• XSS in Oracle default fcgi-bin/echo
  • From: paul . szabo
• ZDI-11-110: (0day) IBM Lotus Domino Server Controller Authentication Bypass Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [SECURITY] [DSA 2198-1] tex-common security update
  • From: Nico Golde
• SCADA Trojans: Attacking the Grid + Advantech vulnerabilities
  • From: Reversemode
• Re: Vulnerabilities in some SCADA server softwares
  • From: Michal Zalewski
• NGS00052 Patch Notification: Apple Mac OS X Image RAW Multiple Buffer Overflows
  • From: Research@NGSSecure
• [security bulletin] HPSBMA02647 SSRT100383 rev.1 - HP Discovery & Dependency Mapping Inventory (DDMI) Running on Windows, Insecure SNMP Configuration
  • From: security-alert
• Apple HFS+ Information Disclosure Vulnerability
  • From: VSR Advisories
• ZDI-11-109: (Pwn2Own) Apple Safari OfficeArtBlip Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-11-108: Mac OS X Compact Font Format Decoder Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• NSOADV-2011-001: Symantec LiveUpdate Administrator CSRF vulnerability
  • From: NSO Research
• NGS00016 Technical Advisory: Immunity Debugger Buffer Overflow
  • From: Research@NGSSecure
• CMS Balitbang 3.3 Arbitary File Upload Vulnerability
  • From: eidelweiss
• NGS00014 Technical Advisory: Cisco IPSec VPN Implementation Group Name Enumeration
  • From: Research@NGSSecure
• iDefense Security Advisory 03.21.11: Apple OfficeImport Framework Excel Memory Corruption Vulnerability
  • From: labs-no-reply
• ZDI-11-107: Libtiff ThunderCode Decoder THUNDER_2BITDELTAS Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• NGS00057 Patch Notification: Apple Mac OS X ImageIO Integer Overflow
  • From: Research@NGSSecure
• [SECURITY] [DSA 2197-1] quagga security update
  • From: Florian Weimer
• Re: Vulnerabilities in some SCADA server softwares
  • From: Luigi Auriemma
• Re: Vulnerabilities in some SCADA server softwares
  • From: J. Oquendo
• [ MDVSA-2011:050 ] pidgin
  • From: security
• [ MDVSA-2011:049 ] vsftpd
  • From: security
• Douran Portal File Download/Source Code Disclosure Vulnerability
  • From: support
• [SECURITY] [DSA 2196-1] maradns security update
  • From: Raphael Geissert
• [USN-1089-1] Linux kernel vulnerabilities
  • From: Kees Cook
• [ MDVSA-2011:051 ] kernel
  • From: security
• ZDI-11-106: Novell Netware NWFTPD.NLM DELE Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• Heap overflow in RealPlayer 14.0.1.633
  • From: Luigi Auriemma
• [SECURITY] [DSA 2195-1] php5 security update
  • From: Raphael Geissert
• ZDI-11-105: Hewlett-Packard Client Automation radexecd.exe Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• Vulnerabilities in some SCADA server softwares
  • From: Luigi Auriemma
• Privacy, Security, Trust (PST 2011) - Call for Papers (EXTENDED Deadline: April 3, 2011)
  • From: Serguei A. Mokhov on behalf of PST-11
• [USN-1090-1] Linux kernel vulnerabilities
  • From: Kees Cook
• Re: HTB22884: XSS vulnerability in LotusCMS
  • From: admin
• XSS vulnerability in Web Poll Pro
  • From: Hector . x90
• Buffer overflow in libtiff in Imagemagick
  • From: zgmzgm
• Tugux CMS (nid) BLIND sql injection vulnerability
  • From: eidelweiss
• [SECURITY] [DSA 2186-2] vimperator regression fix
  • From: Moritz Muehlenhoff
• libzip 0.9.3 _zip_name_locate NULL Pointer Dereference (incl PHP 5.3.5)
  • From: cxib
• [ MDVSA-2011:048 ] krb5
  • From: security
• XOOPS 2.5.0 <= Cross Site Scripting Vulnerability
  • From: YGN Ethical Hacker Group
• OWASP AppSec USA 2011 Call for Papers
  • From: Adam Baso
• [ MDVSA-2011:047 ] proftpd
  • From: security
• [SECURITY] [DSA 2194-1] libvirt security update
  • From: Thijs Kinkhorst
• [USN-1079-3] OpenJDK 6 vulnerabilities
  • From: Steve Beattie
• [ MDVSA-2011:046 ] pure-ftpd
  • From: security
• [TEHTRI-Security] Quick BlackBerry Security Check
  • From: Laurent OUDOT at TEHTRI-Security
• Deferral Announcement for the March 2011 Cisco IOS Software Security Advisories
  • From: Cisco Systems Product Security Incident Response Team
• AST-2011-003:
  • From: Asterisk Security Team
• AST-2011-004:
  • From: Asterisk Security Team
• [PRE-SA-2011-02] Information disclosure vulnerability in the OSF partition handling code of the Linux kernel
  • From: Timo Warns
• [Announcement] ClubHACK Magazine Issue 14-March 2011 released
  • From: abhijeet
• HTB22889: XSS in Rating-Widget wordpress plugin
  • From: advisory
• HTB22890: XSS in Rating-Widget wordpress plugin
  • From: advisory
• HTB22891: XSS in Rating-Widget wordpress plugin
  • From: advisory
• HTB22892: Path disclosure in Smen Social Button wordpress plugin
  • From: advisory
• HTB22893: XSS in Sodahead Polls wordpress plugin
  • From: advisory
• HTB22894: XSS in Sodahead Polls wordpress plugin
  • From: advisory
• [SECURITY] [DSA 2193-1] libcgroup security update
  • From: Thijs Kinkhorst
• [ MDVSA-2011:045 ] postfix
  • From: security
• [DSECRG-11-011] SAP Crystal Reports 2008 - Multiple XSS
  • From: Alexandr Polyakov
• [DSECRG-11-014] SAP GUI (sapgui) - DLL hijacking
  • From: Alexandr Polyakov
• [DSECRG-11-012] SAP NetWeaver Integration Directory - multiple XSS
  • From: Alexandr Polyakov
• [DSECRG-11-013] SAP NetWeaver Runtime - multiple XSS
  • From: Alexandr Polyakov
• MITKRB5-SA-2011-003 [CVE-2011-0284] KDC double-free when PKINIT enabled
  • From: Tom Yu
• [USN-1088-1] Kerberos vulnerability
  • From: Steve Beattie
• [RT-SA-2011-001] nostromo nhttpd directory traversal leading to arbitrary command execution
  • From: RedTeam Pentesting GmbH
• [SECURITY] [DSA 2192-1] chromium-browser security update
  • From: Giuseppe Iuculano
• [RT-SA-2011-002] SugarCRM list privilege restriction bypass
  • From: RedTeam Pentesting GmbH
• ESA-2011-006: EMC Avamar privilege escalation vulnerability
  • From: Security_Alert
• HTB22877: Path disclosure in xt:Commerce
  • From: advisory
• ESA-2011-009: RSA, The Security Division of EMC, announces a fix for potential security vulnerability in RSA Access Manager Server
  • From: Security_Alert
• ESA-2011-007: EMC Avamar sensitive information disclosure vulnerability
  • From: Security_Alert
• HTB22887: XSS vulnerability in LotusCMS
  • From: advisory
• HTB22886: XSRF (CSRF) in LotusCMS
  • From: advisory
• HTB22885: XSS vulnerability in LotusCMS
  • From: advisory
• HTB22884: XSS vulnerability in LotusCMS
  • From: advisory
• HTB22882: Path disclosure in OXID eShop
  • From: advisory
• HTB22883: XSS vulnerability in LotusCMS
  • From: advisory
• VMSA-2011-0005 VMware vCenter Orchestrator remote code execution vulnerability
  • From: VMware Security Team
• HTB22888: File Content Disclosure in LotusCMS
  • From: advisory
• [SECURITY] CVE-2011-1088 Apache Tomcat security constraint bypass
  • From: Mark Thomas
• [USN-1079-2] OpenJDK 6 vulnerabilities
  • From: Steve Beattie
• [USN-1085-2] tiff regression
  • From: Kees Cook
• [DSECRG-11-010] SAP NetWeaver logon.html - XSS
  • From: Alexandr Polyakov
• [DCA-2011-0004] - Trend WebReputation API Bypass
  • From: Ewerson Guimarães (Crash) - Dclabs
• [security bulletin] HPSBMA02644 SSRT100284 rev.1 - HP Client Automation Enterprise (HPCA) Running on Windows, Remote Execution of Arbitrary Code
  • From: security-alert
• [SECURITY] [DSA 2191-1] proftpd security update
  • From: Moritz Muehlenhoff
• Joomla! 1.6.0 | Cross Site Scripting (XSS) Vulnerability
  • From: YGN Ethical Hacker Group
• [USN-1087-1] libvpx vulnerability
  • From: Micah Gersten
• [DSECRG-11-009] SAP NetWaver XI SOAP Adapter - XSS
  • From: Alexandr Polyakov
• ClubHACK Magazine: Call for Articles
  • From: abhijeet
• BoutikOne Multiples SQL Injection Vulnerability
  • From: cdx . security
• Joomla! 1.6.0 | SQL Injection Vulnerability
  • From: YGN Ethical Hacker Group
• bbPress 1.0.2 <= Cross Site Scripting Vulnerability
  • From: YGN Ethical Hacker Group
• Checkpoint VPN - Priviledge Escalation
  • From: Thierry Zoller
• Privacy, Security, Trust (PST 2011) - 2nd Call for Papers (Deadline: March 20)
  • From: Serguei A. Mokhov on behalf of PST-11
• VUPEN Security Research - Apple Safari WebKit Block Dimensions Handling Integer Overflow
  • From: VUPEN Security Research
• VUPEN Security Research - Apple Safari WebKit Scroll Event Handling Remote Use-after-free
  • From: VUPEN Security Research
• VUPEN Security Research - Apple Safari WebKit Iframe Event Handling Remote Use-after-free
  • From: VUPEN Security Research
• DC4420 - London DEFCON - March meet - Tuesday 22nd March 2011
  • From: Major Malfunction
• [SECURITY] [DSA 2190-1] wordpress security update
  • From: Giuseppe Iuculano
• Swiss Cyber Storm 3 2011 Announcement
  • From: Ivan Buetler
• Re: HTB22874: Path disclosure in Lazyest Gallery wordpress plugin
  • From: lazyest
• Medium severity flaw in QNX Neutrino RTOS
  • From: Tim Brown
• Re: Cross-Site Scripting vulnerability in Nagios
  • From: sschurtz
• Re: HTB22875: XSS in Lazyest Gallery wordpress plugin
  • From: lazyest
• [security bulletin] HPSBMA02629 SSRT100381 rev.3 - HP Power Manager (HPPM) Running on Linux and Windows, Cross Site Request Forgery (CSRF), Cross Site Scripting (XSS)
  • From: security-alert
• HTB22881: SQL injection vulnerability in CosmoShop
  • From: advisory
• HTB22879: Multiple XSS vulnerabilities in CosmoShop
  • From: advisory
• Cross-Site Scripting vulnerability in Nagios
  • From: sschurtz
• Call for Papers: Passwords^11
  • From: Per Thorsheim
• [SECURITY] [DSA 2188-1] webkit security update
  • From: Giuseppe Iuculano
• [SECURITY] [DSA 2187-1] icedove security update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 2186-1] iceweasel security update
  • From: Moritz Muehlenhoff
• HTB22874: Path disclosure in Lazyest Gallery wordpress plugin
  • From: advisory
• HTB22880: XSS vulnerability in CosmoShop
  • From: advisory
• [DCA-2011-0007] Air Contacts Lite (iPhone / iPod App Denial Of Service)
  • From: Rodrigo Escobar
• HTB22875: XSS in Lazyest Gallery wordpress plugin
  • From: advisory
• HTB22878: XSS vulnerability in CosmoShop
  • From: advisory
• RecordPress Multiple Vulnerabilities
  • From: irancrash
• [SECURITY] [DSA 2185-1] proftpd-dfsg security update
  • From: Moritz Mühlenhoff
• [USN-1086-1] Linux kernel (EC2) vulnerabilities
  • From: Kees Cook
• [ MDVSA-2011:044 ] wireshark
  • From: security
• NSOADV-2011-003: Majordomo2 'help' Command Directory Traversal (Patch Bypass)
  • From: NSO Research
• AthCon 2011 Announcement
  • From: kyprianos
• [security bulletin] HPSBUX02641 SSRT100412 rev.1 - HP OpenView Network Node Manager (OV NNM) for HP-UX, Linux, Solaris, and Windows running Java, Remote Denial of Service (DoS)
  • From: security-alert
• Cross-Site Scripting vulnerabilities in Icinga
  • From: sschurtz
• [HITB-Announce] HITB Magazine Call for Articles
  • From: Hafez Kamal
• [ MDVSA-2011:043 ] libtiff
  • From: security
• HTB22867: XSS in PhotoSmash wordpress plugin
  • From: advisory
• VMSA-2011-0004 VMware ESX/ESXi SLPD denial of service vulnerability and ESX third party updates for Service Console packages bind, pam, and rpm.
  • From: VMware Security Team
• HTB22868: XSS in 1 Flash Gallery wordpress plugin
  • From: advisory
• HTB22869: SQL Injection in 1 Flash Gallery wordpress plugin
  • From: advisory
• HTB22870: SQL Injection in GRAND Flash Album Gallery wordpress plugin
  • From: advisory
• HTB22871: File Content Disclosure in GRAND Flash Album Gallery wordpress plugin
  • From: advisory
• HTB22873: XSS in Inline Gallery wordpress plugin
  • From: advisory
• HTB22872: Path disclosure in Cool Video Gallery wordpress plugin
  • From: advisory
• Plaintext injection in STARTTLS (multiple implementations)
  • From: Wietse Venema
• [ MDVSA-2011:042 ] mozilla-thunderbird
  • From: security
• [TEHTRI-Security] Security and iPhone iOS 4.3 Personal Hotspot feature
  • From: Laurent OUDOT at TEHTRI-Security
• [USN-1084-1] avahi vulnerability
  • From: Marc Deslauriers
• [USN-1085-1] tiff vulnerabilities
  • From: Marc Deslauriers
• InSite Troubleshooting Cross-Site Scripting
  • From: vulns
• Kodak InSite Login Page Cross-Site Scripting
  • From: vulns
• RECON 2011 CFP
  • From: hfortier
• [DCA-2011-0009] Weborf 0.12.4 Denial-of-Service
  • From: Rodrigo Escobar
• XSS in CubeCart <= 2.0.7
  • From: Michele Spagnuolo
• 'Quick Polls' Local File Inclusion & Deletion Vulnerabilities (CVE-2011-1099)
  • From: Mark Stanislav
• [SECURITY] [DSA 2184-1] isc-dhcp security update
  • From: Florian Weimer
• [SECURITY] [DSA 2183-1] nbd security update
  • From: Raphael Geissert
• [ MDVSA-2011:041 ] firefox
  • From: security
• [DCA-2011-0006] Hiawatha 7.4 - Denial-of-Service
  • From: Rodrigo Escobar
• [SECURITY] [DSA 2182-1] logwatch security update
  • From: Florian Weimer
• Mutare Software EVM - CSRF and XSS Vulnerabilities
  • From: Travis Lee
• [DCA-2011-0003]: LMS Web Ensino - Multiple XSS, Session Fixation, CSRF and SQL Injection
  • From: Flavio do Carmo Junior aka waKKu
• [DCA-2011-0002]: TOTVS ERP Microsiga Protheus - Users Enumeration
  • From: Flavio do Carmo Junior aka waKKu
• [DCA-2011-0001] TP-LINK TL-WR740N Multiple Vulnerabilities - Stored XSS - Web Console and Upnp server DoS
  • From: Ewerson Guimarães (Crash) - Dclabs
• [SECURITY] [DSA 2181-1] subversion security update
  • From: Florian Weimer
• [SECURITY] [DSA 2180-1] iceape security update
  • From: Moritz Muehlenhoff
• [security bulletin] HPSBPI02640 SSRT100410 rev.1 - HP MFP Digital Sending Software Running on Windows, Authentication Bypass
  • From: security-alert
• [ MDVSA-2011:040 ] pango
  • From: security
• HTB22837: Path disclosure in PrestaShop
  • From: advisory
• HTB22865: XSS vulnerability in xtcModified
  • From: advisory
• HTB22853: XSS vulnerability in Pragyan CMS
  • From: advisory
• HTB22856: XSS vulnerability in Pragyan CMS
  • From: advisory
• HTB22855: XSRF (CSRF) in Pragyan CMS
  • From: advisory
• HTB22866: XSS vulnerability in xtcModified
  • From: advisory
• HTB22857: Path disclosure in Tribiq CMS
  • From: advisory
• HTB22863: XSS vulnerability in xtcModified
  • From: advisory
• Re: Prestashop Cartium 1.3.3 Multiple Cross Site Scripting (XSS)
  • From: mike
• [USN-1050-1] Thunderbird vulnerabilities
  • From: Jamie Strandboge
• iDefense Security Advisory 03.02.11: Apple CoreGraphics Library Heap Memory Corruption Vulnerability
  • From: labs-no-reply
• ZDI-11-101: Apple iPhone Webkit Library Javascript Array sort Method Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-11-100: Apple Webkit Root HTMLBRElement Style Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [USN-1080-2] Linux kernel vulnerabilities
  • From: Kees Cook
• ZDI-11-099: Apple Webkit Font Glyph Layout Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-11-098: Apple Safari Webkit Runin Box Promotion Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-11-097: Apple Webkit setOuterText Memory Corruption Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-11-096: Apple Safari WebKit Range Object Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-11-103: Mozilla Firefox JSON.stringify Dangling Pointer Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [security bulletin] HPSBUX02638 SSRT100339 rev.1 - HP-UX Running OpenSSL, Remote Execution of Arbitrary Code, Denial of Service (DoS), Authentication Bypass
  • From: security-alert
• ZDI-11-095: Apple Webkit Error Message Mutation Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-11-102: PostgreSQL Plus Advanced Server DBA Management Server Remote Authentication Bypass Vulnerability
  • From: ZDI Disclosures
• iDefense Security Advisory 03.01.11: Alcatel-Lucent OmniPCX Enterprise CS CGI Cookie Buffer Overflow Vulnerability
  • From: labs-no-reply
• [SECURITY] [DSA 2179-1] dtc security update
  • From: Florian Weimer
• [USN-1083-1] Linux kernel vulnerabilities
  • From: Kees Cook
• [SECURITY] [DSA 2178-1] pango1.0 security update
  • From: Florian Weimer
• [SECURITY] [DSA 2177-1] pywebdav security update
  • From: Florian Weimer
• Prestashop Cartium 1.3.3 Multiple Cross Site Scripting (XSS)
  • From: Antonio S.M
• CubeCart 2.0.6 SQL injection / Cross Site Scripting
  • From: Root
• PhotoPost PHP 4.8c (showgallery.php) Cross Site Scripting
  • From: Root
• VidiScript (index.php) Cross Site Scripting
  • From: Root
• [USN-1082-1] Pango vulnerabilities
  • From: Marc Deslauriers
• [ MDVSA-2011:039 ] webkit
  • From: security
• [SECURITY] [DSA 2176-1] cups security update
  • From: Moritz Muehlenhoff
• [USN-1080-1] Linux kernel vulnerabilities
  • From: Kees Cook
• [USN-1081-1] Linux kernel vulnerabilities
  • From: Kees Cook
• [SECURITY] [DSA 2163-2] dajaxice regression fix
  • From: Thijs Kinkhorst
• DDIVRT-2010-30 Alcatel-Lucent OmniVista 4760 NMS 'lang' Directory Traversal Vulnerability [ CVE-2011-0345 ]
  • From: ddivulnalert
• HTB22848: XSS in Mingle Forum wordpress plugin
  • From: advisory
• HTB22849: Path disclosure in Mingle Forum wordpress plugin
  • From: advisory
• HTB22858: SQL Injection in WP Forum wordpress plugin
  • From: advisory
• HTB22859: SQL Injection in WP Forum wordpress plugin
  • From: advisory
• HTB22860: SQL Injection in WP Forum wordpress plugin
  • From: advisory
• HTB22861: XSS in Question and Answer Forum wordpress plugin
  • From: advisory
• HTB22862: Path disclosure in NextGEN Gallery wordpress plugin
  • From: advisory
• Re: Re: prestashop vuln: sql injection submitted to bugtraq () securityfocus com
  • From: Antonio S.M
• vsftpd 2.3.2 remote denial-of-service
  • From: cxib
• [USN-1079-1] OpenJDK 6 vulnerabilities
  • From: Steve Beattie
• Re: prestashop vuln: sql injection submitted to bugtraq@xxxxxxxxxxxxxxxxx
  • From: antonio_s_martino
• SnapProof (cart.php) Cross Site Scripting
  • From: difficult-511
• [USN-1078-1] Logwatch vulnerability
  • From: Steve Beattie
• [security bulletin] HPSBUX02633 SSRT100387 rev.1 - HP-UX running Java, Remote Denial of Service (DoS)
  • From: security-alert
• ZDI-11-094: (0 day) Hewlett-Packard StorageWorks File Migration Agent Remote Archive Tampering Vulnerability
  • From: ZDI Disclosures
• [SECURITY] [DSA 2175-1] samba security update
  • From: Moritz Muehlenhoff
• weechat does not properly use gnutls and allow an attacker to bypass certificate verification
  • From: john . doe
• [USN-1074-2] Linux kernel vulnerabilities
  • From: Kees Cook
• [USN-1077-1] FUSE vulnerabilities
  • From: Marc Deslauriers
• [USN-1076-1] ClamAV vulnerability
  • From: Marc Deslauriers
• [USN-1075-1] Samba vulnerability
  • From: Marc Deslauriers
• [ MDVSA-2011:038 ] samba
  • From: security
• FreeBSD crontab information leakage
  • From: Dan Rosenberg
• Re: prestashop vuln: sql injection submitted to bugtraq@xxxxxxxxxxxxxxxxx
  • From: nebojsa
• [security bulletin] HPSBPI02635 SSRT100391 rev.1 - HP Web Jetadmin Running on Windows, Local Unauthorized Access to Managed Resources
  • From: security-alert
• CONFidence 2011- CfP only 6 days left, we are still waiting for your submission
  • From: Andrzej Targosz
• Imageview v6.0 Remote [and] Local Directory Traversal Vulnerability
  • From: difficult-511
• [SECURITY] [DSA 2174-1] avahi security update
  • From: Thijs Kinkhorst
• [SECURITY] [DSA 2173-1] pam-pgsql security update
  • From: Thijs Kinkhorst
• [USN-1074-1] Linux kernel vulnerabilities
  • From: Kees Cook
• [USN-1073-1] Linux kernel vulnerabilities
  • From: Kees Cook
• [USN-1072-1] Linux vulnerabilities
  • From: Kees Cook
• [USN-1071-1] Linux kernel vulnerabilities
  • From: Marc Deslauriers
• Re: Linksys Cisco Wag120N CSRF Vulnerability
  • From: tadeu1
• DoS Condition with Altigen VoIP Phone Systems
  • From: Patrick Kelley
• [BMSA-2011-01] Insecure secure cookie in web.go
  • From: Nam Nguyen
• CA20110223-01: Security Notice for CA Host-Based Intrusion Prevention System
  • From: Williams, James K
• prestashop vuln: sql injection submitted to bugtraq@xxxxxxxxxxxxxxxxx
  • From: Antonio S.M
• Linksys Cisco Wag120N CSRF Vulnerability
  • From: irancrash
• ZDI-11-091: (0day) Cisco Secure Desktop CSDWebInstaller Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [ MDVSA-2011:037 ] avahi
  • From: security
• HTB22851: SQL Injection in WP Forum Server wordpress plugin
  • From: advisory
• ZDI-11-092: (0day) Cisco Secure Desktop CSDWebInstaller ActiveX Control Cleaner.cab Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• HTB22850: SQL Injection in WP Forum Server wordpress plugin
  • From: advisory
• HTB22847: XSS in IWantOneButton wordpress plugin
  • From: advisory
• HTB22846: SQL Injection in IWantOneButton wordpress plugin
  • From: advisory
• ZDI-11-093: CA Internet Security Suite HIPS XML Security Database Parser Class Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• WordPress Uploadify Plugin 1.0 Remote File Upload
  • From: Leonardo Rota Botelho
• ZDI-11-090: Novell Netware RPC XNFS xdrDecodeString Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [USN-1070-1] Bind vulnerability
  • From: Marc Deslauriers
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco TelePresence Manager
  • From: Cisco Systems Product Security Incident Response Team
• [ MDVSA-2011:036 ] mailman
  • From: security
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco TelePresence Multipoint Switch
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco Firewall Services Module Skinny Client Control Protocol Inspection Denial of Service Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco TelePresence Recording Server
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco TelePresence Endpoint Devices
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances
  • From: Cisco Systems Product Security Incident Response Team
• [PRE-SA-2011-01] Multiple Linux kernel vulnerabilities in partition handling code of LDM and MAC partition tables
  • From: Timo Warns
• [SECURITY] [DSA 2172-1] moodle security update
  • From: Moritz Muehlenhoff
• [USN-1069-1] Mailman vulnerabilities
  • From: Marc Deslauriers
• Vanilla Forums 2.0.17.1 ~ 2.0.17.5 <= Cross Site Scripting Vulnerability
  • From: YGN Ethical Hacker Group
• HTB22839: SQL Injection in Z-Vote wordpress plugin
  • From: advisory
• HTB22838: Path disclosure in Vote It Up wordpress plugin
  • From: advisory
• [USN-1068-1] Aptdaemon vulnerability
  • From: Marc Deslauriers
• HTB22840: Path disclosure in Starbox Voting wordpress plugin
  • From: advisory
• HTB22841: SQL Injection in Comment Rating wordpress plugin
  • From: advisory
• [ MDVSA-2011:035 ] tomboy
  • From: security
• HTB22843: Path disclosure in GD Star Rating wordpress plugin
  • From: advisory
• HTB22842: Path disclosure in Comment Rating wordpress plugin
  • From: advisory
• HTB22844: XSS in GD Star Rating wordpress plugin
  • From: advisory
• Re: Domino Sametime Multiple Reflected Cross-Site Scripting
  • From: barkley
• HTB22845: SQL Injection in cdnvote wordpress plugin
  • From: advisory
• AST-2011-002: Multiple array overflow and crash vulnerabilities in UDPTL code
  • From: Asterisk Security Team
• [ MDVSA-2011:034 ] banshee
  • From: security
• [SECURITY] [DSA 2171-1] asterisk security update
  • From: Moritz Muehlenhoff
• [ MDVSA-2011:030 ] tomcat5
  • From: security
• [security bulletin] HPSBUX02628 SSRT090183 rev.1 - HP-UX Running CDE Calendar Manager, Remote Execution of Arbitrary Code
  • From: security-alert
• [ MDVSA-2011:033 ] awstats
  • From: security
• Domino Sametime Multiple Reflected Cross-Site Scripting
  • From: david . daly
• www.eVuln.com : "time" SQL Injection vulnerability in WSN Guest
  • From: bt
• [ MDVSA-2011:032 ] eclipse
  • From: security
• [SECURITY] [DSA 2170-1] mailman security update
  • From: Thijs Kinkhorst
• [ MDVSA-2011:031 ] python-django
  • From: security
• Privacy, Security, Trust (PST 2011) - Call for Papers
  • From: Serguei A. Mokhov on behalf of PST-11
• ZDI-11-089: Novell ZenWorks TFTPD Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• Re: DC4420 - London DEFCON - February meet - Tuesday 22nd February 2011
  • From: Major Malfunction
• www.eVuln.com : "wsnuser" Cookie SQL Injection vulnerability in WSN Guest
  • From: bt
• [ MDVSA-2011:029 ] kernel
  • From: security
• [USN-1067-1] Telepathy Gabble vulnerability
  • From: Jamie Strandboge
• Re: PHP 5.3.5 grapheme_extract() NULL Pointer Dereference
  • From: Marcin Orlowski
• [USN-1066-1] Django vulnerabilities
  • From: Jamie Strandboge
• HTB22835: DoS (Denial of Service) Risk in FlatnuX
  • From: advisory
• HTB22834: Path disclosure in FlatnuX
  • From: advisory
• HTB22836: Path disclosure in Coppermine
  • From: advisory
• ZDI-11-088: Cisco Security Agent Management st_upload Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-11-087: Novell iPrint LPD Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• PHP 5.3.5 grapheme_extract() NULL Pointer Dereference
  • From: cxib
• [SECURITY] [DSA 2169-1] telepathy-gabble security update
  • From: Nico Golde
• [SECURITY] [DSA 2168-1] openafs security update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 2167-1] phpmyadmin security update
  • From: Thijs Kinkhorst
• Cisco Security Advisory: Management Center for Cisco Security Agent Remote Code Execution Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• ZDI-11-086: Oracle Java Webstart Trusted JNLP Extension Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [SECURITY] [DSA 2164-1] shadow security update
  • From: Nico Golde
• [SECURITY] [DSA 2166-1] chromium-browser security update
  • From: Giuseppe Iuculano
• ZDI-11-083: Oracle Java Applet Clipboard Injection Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [USN-1065-1] shadow vulnerability
  • From: Kees Cook
• [USN-1064-1] OpenSSL vulnerability
  • From: Steve Beattie
• ZDI-11-085: Oracle Java XGetSamplePtrFromSnd Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [SECURITY] [DSA 2165-1] ffmpeg-debian security update
  • From: Luciano Bello
• ZDI-11-084: Oracle Java Unsigned Applet Applet2ClassLoader Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-11-082: Oracle Java Runtime NTLM Authentication Information Leakage Vulnerability
  • From: ZDI Disclosures
• Gain Windows Domain Admin Privileges - Online Challenge
  • From: Ivan Buetler
• [SECURITY] CVE-2011-0533: Apache Archiva cross-site scripting vulnerability
  • From: Brett Porter
• Tembria Server Monitor Multiple Cross-site Scripting (XSS) Vulnerabilities
  • From: robkraus
• Tembria Server Monitor Weak Cryptographic Password Storage Vulnerability
  • From: robkraus
• HTB22825: SQL Injection in Seo Panel
  • From: advisory
• HTB22827: File Content Disclosure in Wikipad
  • From: advisory
• HTB22833: Information Disclosure in Arctic Fox CMS
  • From: advisory
• HTB22829: Path disclosure in Xaraya
  • From: advisory
• [ MDVSA-2011:028 ] openssl
  • From: security
• HTB22823: SQL Injection in Seo Panel
  • From: advisory
• HTB22824: SQL Injection in Seo Panel
  • From: advisory
• HTB22828: Multiple XSS vulnerabilities in Photopad
  • From: advisory
• HTB22826: Multiple XSS vulnerabilities in Wikipad
  • From: advisory
• HTB22830: Multiple XSS vulnerabilities in Gollos
  • From: advisory
• HTB22832: Path disclosure in ArtGK CMS
  • From: advisory
• HTB22831: XSS vulnerability in Gollos
  • From: advisory
• Re: Linksys WAP610N Unauthenticated Root Console
  • From: Matteo Ignaccolo
• [USN-1062-1] Kerberos vulnerabilities
  • From: Steve Beattie
• [USN-1063-1] QEMU vulnerability
  • From: Kees Cook
• [ MDVSA-2011:027 ] openoffice.org
  • From: security
• [SECURITY] [DSA 2161-2] OpenJDK security update
  • From: Florian Weimer
• [SECURITY] [DSA 2162-1] openssl security update
  • From: Nico Golde
• [SECURITY] [DSA 2163-1] python-django security update
  • From: Nico Golde
• [SECURITY] [DSA 2161-1] OpenJDK security update
  • From: Florian Weimer
• [USN-1061-1] iTALC vulnerability
  • From: Kees Cook
• VUPEN Security Research - Microsoft Windows Shell Graphics biCompression Buffer Overflow Vulnerability
  • From: VUPEN Security Research
• ASPR #2011-02-11-1: Remote Binary Planting in Adobe Reader
  • From: ACROS Security Lists
• ASPR #2011-02-11-2: Remote Binary Planting in Adobe Flash Player
  • From: ACROS Security Lists
• VUPEN Security Research - Microsoft Windows Shell Graphics BMP "height" Integer Overflow Vulnerability
  • From: VUPEN Security Research
• VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX
  • From: VMware Security team
• VUPEN Security Research - Microsoft Windows Shell Graphics BMP "width" Integer Overflow Vulnerability
  • From: VUPEN Security Research
• Kunena SQL Injection Vulnerability & Information Leakage
  • From: Red Matter
• HTB22822: XSS vulnerability in RunCMS
  • From: advisory
• [SECURITY] [DSA 2160-1] tomcat6 security update
  • From: Moritz Muehlenhoff
• [ MDVSA-2011:026 ] phpmyadmin
  • From: security
• HTB22821: Path disclosure in RunCMS
  • From: advisory
• HTB22820: SQL Injection in RunCMS
  • From: advisory
• VUPEN Security Research - Microsoft Internet Explorer "mshtml.dll" Dangling Pointer Vulnerability (CVE-2011-0036)
  • From: VUPEN Security Research
• CORE-2011-0103 - ZOHO ManageEngine ADSelfService multiple vulnerabilities
  • From: CORE Security Technologies Advisories
• HTB22851: SQL Injection in WP Forum Server wordpress plugin
  • From: advisory
• [SECURITY] [DSA 2159-1] vlc security update
  • From: Moritz Muehlenhoff
• HTB22852: SQL Injection in WP Forum Server wordpress plugin
  • From: advisory
• VUPEN Security Research - Adobe Shockwave DIRAPI LCTX Chunck Memory Corruption Vulnerability (APSB11-01)
  • From: VUPEN Security Research
• [USN-1060-1] Exim vulnerabilities
  • From: Marc Deslauriers
• RE: Microsoft Terminal Services vulnerable to MITM-attacks.
  • From: Ziots, Edward
• [SECURITY] [DSA-2158-1] cgiirc security update
  • From: Steve Kemp
• [SECURITY] CVE-2011-0533: Apache Continuum cross-site scripting vulnerability
  • From: Brett Porter
• Linksys WAP610N Unauthenticated Root Consle
  • From: Matteo Ignaccolo
• [SECURITY] CVE-2010-3449: Apache Continuum CSRF vulnerability
  • From: Brett Porter
• TPTI-11-01: Adobe Shockwave dirapi.dll IFWV Trusted Offset Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• SourceBans Version 1.4.7 XSS
  • From: null
• TPTI-11-05: Adobe Shockwave PFR1 Font Chunk Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• TPTI-11-02: Adobe Shockwave TextXtra Invalid Seek Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• TPTI-11-03: Adobe Shockwave Font Xtra String Decoding Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• TPTI-11-04: Adobe Shockwave GIF Logical Screen Descriptor Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [HITB-Announce] HITB Magazine Issue 005 Released
  • From: Hafez Kamal
• RE: Microsoft Terminal Services vulnerable to MITM-attacks.
  • From: Jim Harrison
• Re: Microsoft Terminal Services vulnerable to MITM-attacks.
  • From: Ansgar Wiechers
• CGI:IRC XSS issue (CVE-2011-0050)
  • From: David Leadbeater
• iDefense Security Advisory 02.08.11: Adobe Flash Player ActionScript Memory Corruption Vulnerability
  • From: labs-no-reply
• iDefense Security Advisory 02.08.11: Adobe Flash Player ActionScript Integer Overflow Vulnerability
  • From: labs-no-reply
• ZDI-11-081: Adobe Flash Player Point Object Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-11-080: Adobe Shockwave CSWV Chunk Substructure Offset Value Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-11-079: Adobe Shockwave Player 0xFFFFFF45 Record Count Element Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-11-078: Adobe Shockwave Player FFFFFF88 Record Count Element Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• iDefense Security Advisory 02.08.11: Adobe Shockwave Player Memory Corruption Vulnerability
  • From: labs-no-reply
• ZDI-11-077: Adobe Acrobat Reader U3D Texture Parser ILBM Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• iDefense Security Advisory 02.08.11: Adobe Reader and Acrobat JP2K Invalid Indexing Vulnerability
  • From: labs-no-reply
• ZDI-11-076: RealNetworks Real Player Predictable Temporary File Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-11-075: Adobe Acrobat Reader rt3d.dll Multimedia Playing Arbitrary Memory Overwite Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-11-074: Adobe Reader u3d Parent Node Count Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-11-073: Adobe Reader ICC Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures