Bugtraq

• Thread Index

• KeePass version 2.12 <= Insecure DLL Hijacking Vulnerability (dwmapi.dll)
  • From: YGN Ethical Hacker Group
• ApPHP Calendar XSS - CSRF
  • From: edgard . chammas
• ZDI-10-168: Apple QuickTime ActiveX _Marshaled_pUnk Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [ MDVSA-2010:166 ] libgdiplus
  • From: security
• Tortoise SVN DLL Hijacking Vulnerability
  • From: nikhil_uitrgpv
• [security bulletin] HPSBMA02571 SSRT100034 rev.1 - HP Insight Diagnostics Online Edition, Remote Cross Site Scripting (XSS)
  • From: security-alert
• django in combination with mod wsgi on apache on default debian and ubuntu installations does not place any bounds on the maximum size of a file upload
  • From: dave b
• [USN-981-1] libwww-perl vulnerability
  • From: Marc Deslauriers
• [USN-980-1] bogofilter vulnerability
  • From: Marc Deslauriers
• [security bulletin] HPSBMA01212 SSRT5998 rev.4 - HP System Management Homepage Running PHP, Remote Denial of Service (DoS), Cross Site Scripting (XSS), Execution of Arbitrary Code
  • From: security-alert
• [security bulletin] HPSBUX02552 SSRT100062 rev.1 - HP-UX running Software Distributor (sd), Local Privilege Increase, Unauthorized Access
  • From: security-alert
• [SECURITY] [DSA 2100-1] New openssl packages fix double free
  • From: Moritz Muehlenhoff
• Re: [Full-disclosure] QtWeb Browser version 3.3 build 043 Insecure DLL Hijacking Vulnerability (wintab32.dll)
  • From: security curmudgeon
• [ MDVSA-2010:165 ] libHX
  • From: security
• {Lostmon - Groups} Safari for windows Invalid SGV text style Webkit.dll DoS
  • From: Lostmon lords
• R7-0036: FCKEditor.NET File Upload Code Execution
  • From: HD Moore
• [0day] Apple QuickTime "_Marshaled_pUnk" backdoor param arbitrary code execution
  • From: Reversemode
• EC2ND 2010, Call for Participation
  • From: Konrad Rieck
• The Smarter Safer Better Seminar Series
  • From: Pete Herzog
• Microsoft Windows wscript.exe (XP) DLL Hijacking Exploit (wshfra.dll)
  • From: info
• [SECURITY] [DSA 2099-1] New OpenOffice.org packages fix arbitrary code execution
  • From: Martin Schulze
• Notepad++ version 5.7 Insecure DLL Hijacking Vulnerability
  • From: YGN Ethical Hacker Group
• Maxthon Browser version 2.5.15.1000 Insecure DLL Hijacking Vulnerability (dwmapi.dll)
  • From: YGN Ethical Hacker Group
• ekoparty Security Conference 2010 Announcements
  • From: Federico Kirschbaum
• Cisco Security Advisory: Cisco IOS XR Software Border Gateway Protocol Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• [ MDVSA-2010:164 ] phpmyadmin
  • From: security
• QtWeb Browser version 3.3 build 043 Insecure DLL Hijacking Vulnerability (wintab32.dll)
  • From: YGN Ethical Hacker Group
• Re: SQL injection vulnerability in TCMS
  • From: security curmudgeon
• [ MDVSA-2010:163 ] phpmyadmin
  • From: security
• [SECURITY] [DSA 2098-1] New typo3-src packages fix several vulnerabilities
  • From: Thijs Kinkhorst
• [SECURITY] [DSA 2097-1] New phpmyadmin packages fix several vulnerabilities
  • From: Thijs Kinkhorst
• Flash Player 9 DLL Hijacking Exploit (schannel.dll)
  • From: info
• [USN-974-2] Linux kernel regression
  • From: Jamie Strandboge
• wp-10-0001: Multiple Browser Wildcard Cerficate Validation Weakness
  • From: Richard Moore
• [USN-979-1] okular vulnerability
  • From: Steve Beattie
• BugTracker.net 3.4.3 SQL Injection
  • From: Mark van Tilburg
• XSS vulnerability in CompuCMS
  • From: advisory
• ZDI-10-166: RealNetworks RealPlayer Malformed IVR Object Index Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-167: RealNetworks RealPlayer FLV Parsing Multiple Integer Overflow Vulnerabilities
  • From: ZDI Disclosures
• BlastChat Chat Client Component version 3.3 <= Cross Script Scripting (XSS) Vulnerability
  • From: YGN Ethical Hacker Group
• Joomla! Component com_bc Cross Script Scripting (XSS) Vulnerability
  • From: YGN Ethical Hacker Group
• [HITB-Announce] HITB2010 SIGNINT Sessions
  • From: Hafez Kamal
• XSS vulnerability in TCMS
  • From: advisory
• SQL injection vulnerability in CompuCMS
  • From: advisory
• SQL injection vulnerability in CompuCMS
  • From: advisory
• File Content Disclosure in TCMS
  • From: advisory
• SQL injection vulnerability in TCMS
  • From: advisory
• SQL injection vulnerability in TCMS
  • From: advisory
• SQL injection vulnerability in TCMS
  • From: advisory
• XSRF (CSRF) in Webmatic
  • From: advisory
• XSS vulnerability in CompuCMS
  • From: advisory
• SQL injection vulnerability in CompuCMS
  • From: advisory
• Multiple vulnerabilities in eSitesBuilder
  • From: MustLive
• Re: DLL hijacking on Linux
  • From: Pavel Kankovsky
• Local File Inclusion in TCMS
  • From: advisory
• SQL injection vulnerability in CompuCMS
  • From: advisory
• SQL injection vulnerability in TCMS
  • From: advisory
• XSS vulnerability in TCMS
  • From: advisory
• XSS vulnerability in CompuCMS
  • From: advisory
• SQL injection vulnerability in TCMS
  • From: advisory
• XSS vulnerability in Webmatic
  • From: advisory
• XSS vulnerability in Webmatic
  • From: advisory
• XSS vulnerability in Auto CMS
  • From: advisory
• Apple CoreGraphics (Preview) Memory Corruption Vulnerability - CVE-2010-1801
  • From: Rodrigo Branco
• Re: Web Tool Announcement: ismymailsecure.com
  • From: Brian Behlendorf
• Details of cisco-sa-20081022-asa security advisory?
  • From: Fernando Gont
• Skype <= 4.2.0.169 DLL Hijacking Exploit (wab32.dll)
  • From: glafkos
• Re: Web Tool Announcement: ismymailsecure.com
  • From: Tim
• Re: Web Tool Announcement: ismymailsecure.com
  • From: Tim
• [Positive Technologies Research] Open Source WebEngine and Web Crawler v.0.2 is out!
  • From: aanisimov
• Re: WinAppDbg 1.4 is out!
  • From: Mario Vilas
• Adobe InDesign CS4 DLL Hijacking Exploit (ibfs32.dll)
  • From: glafkos
• [USN-976-1] Tomcat vulnerability
  • From: Marc Deslauriers
• Re: WinAppDbg 1.4 is out!
  • From: Aleksandr Yampolskiy
• Adobe Illustrator CS4 DLL Hijacking Exploit (aires.dll)
  • From: glafkos
• ZDI-10-157: IBM Lotus Notes Autonomy KeyView Office Shape Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• Cisco Security Advisory: Cisco Unified Communications Manager Denial of Service Vulnerabilities
  • From: Cisco Systems Product Security Incident Response Team
• Deepin TFTP Server Directory Traversal Vulnerability
  • From: 黄超毅
• Secunia Research: KDE Okular PDB Parsing RLE Decompression Buffer Overflow
  • From: Secunia Research
• Cisco Security Advisory: Cisco Unified Presence Denial of Service Vulnerabilities
  • From: Cisco Systems Product Security Incident Response Team
• Adobe On Location CS4 DLL Hijacking Exploit (ibfs32.dll)
  • From: glafkos
• Adobe Shockwave Player Memory Corruption Vulnerability - CVE-2010-2882
  • From: Rodrigo Branco
• Adobe Premier Pro CS4 DLL Hijacking Exploit (ibfs32.dll)
  • From: glafkos
• Adobe Shockwave Player Memory Corruption Vulnerability - CVE-2010-2880
  • From: Rodrigo Branco
• Adobe Shockwave Player Memory Corruption Vulnerability - CVE-2010-2869
  • From: Rodrigo Branco
• [USN-977-1] MoinMoin vulnerabilities
  • From: Marc Deslauriers
• Adobe Shockwave Player Memory Corruption Vulnerability - CVE-2010-2864
  • From: Rodrigo Branco
• Adobe Shockwave Player Memory Corruption Vulnerability - CVE-2010-2881
  • From: Rodrigo Branco
• Adobe Shockwave Player Memory Corruption Vulnerability - CVE-2010-2868
  • From: Rodrigo Branco
• ZDI-10-165: Trend Micro Internet Security Pro 2010 ActiveX extSetOwner Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• Firefox <= 3.6.8 DLL Hijacking Exploit [dwmapi.dll]
  • From: glafkos
• Adobe Device Central CS5 DLL Hijacking Exploit (qtcf.dll)
  • From: glafkos
• Re: Web Tool Announcement: ismymailsecure.com
  • From: Holger Rabbach
• GFI WebMonitor Admin UI Remote Script Code Injection
  • From: Oliver Karow
• Re: Web Tool Announcement: ismymailsecure.com
  • From: Kari Hurtta
• Re: Web Tool Announcement: ismymailsecure.com
  • From: Holger Rabbach
• Re: Web Tool Announcement: ismymailsecure.com
  • From: Kari Hurtta
• TeamViewer <= 5.0.8703 DLL Hijacking Exploit (dwmapi.dll)
  • From: glafkos
• DLL hijacking on Linux
  • From: Tim Brown
• iDefense Security Advisory 08.24.10: Adobe Shockwave Player Memory Corruption Vulnerability
  • From: iDefense Labs
• Nagios XI users.php SQL Injection
  • From: Adam Baldwin
• ZDI-10-164: Adobe Shockwave Player Director File FFFFFF88 Record Processing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-163: Adobe Shockwave Director tSAC Chunk Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-162: Adobe Shockwave Director rcsL Chunk Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-161: Adobe Shockwave Director PAMI Chunk Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-160: Adobe Shockwave Player Director File FFFFFF45 Record Processing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• TPTI-10-15: Adobe Shockwave Director mmap Trusted Chunk Size Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• TPTI-10-13: Adobe Shockwave Director tSAC Chunk Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• TPTI-10-12: Adobe Shockwave TextXtra Allocator Integer Overflow Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• TPTI-10-14: Adobe Shockwave Director rcsL Chunk Pointer Offset Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• TPTI-10-09: Adobe Shockwave CSWV Chunk Memory Corruption Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• TPTI-10-10: Adobe Shockwave tSAC Chunk Invalid Seek Memory Corruption Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• TPTI-10-11: Adobe Shockwave tSAC Chunk Pointer Offset Memory Corruption Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [ MDVSA-2010:161 ] vte
  • From: security
• [SECURITY] [DSA 2096-1] New zope-ldapuserfolder packages fix authentication bypass
  • From: Sebastien Delafond
• t2′10 Challenge to be released 2010-08-28 10:00 EEST
  • From: Tomi Tuominen
• WinAppDbg 1.4 is out!
  • From: Mario Vilas
• [ MDVSA-2010:160 ] cacti
  • From: security
• London DEFCON - DC4420 - August meet - Wednesday 25th August 2010
  • From: Major Malfunction
• ZDI-10-159: IBM Lotus Notes Autonomy KeyView WK3 Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• Re: Google Chrome: HTTP AUTH Dialog Spoofing through Realm Manipulation (Restated)
  • From: Aditya K Sood
• Re: Google Chrome: HTTP AUTH Dialog Spoofing through Realm Manipulation (Restated)
  • From: Tim
• Re: Google Chrome: HTTP AUTH Dialog Spoofing through Realm Manipulation (Restated)
  • From: Aditya K Sood
• ZDI-10-158: IBM Lotus Notes Autonomy KeyView WK3 Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-155: Cisco WebEx Player ARF String Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [security bulletin] HPSBST02536 SSRT100057 rev.3 - HP StorageWorks Storage Mirroring, Local Unauthorized Access
  • From: security-alert
• TPTI-10-08: Novell iPrint Client Browser PluginGetDriverFile Uninitialized Pointer Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-156: IBM Lotus Notes Autonomy KeyView Word Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• Re: 2Wire Broadband Router Session Hijacking Vulnerability
  • From: Mike Duncan
• [security bulletin] HPSBGN02569 SSRT100200 rev.1 - HP MagCloud iPad App, Remote Unauthorized Access to Data
  • From: security-alert
• [ MDVSA-2010:159 ] gv
  • From: security
• [ MDVSA-2010:159 ] gv
  • From: security
• Re: Google Chrome: HTTP AUTH Dialog Spoofing through Realm Manipulation (Restated)
  • From: Tim
• [ MDVSA-2010:159 ] gv
  • From: security
• [ MDVSA-2010:156 ] freetype2
  • From: security
• Secunia Research: Mono libgdiplus Image Processing Three Integer Overflows
  • From: Secunia Research
• Re: 2Wire Broadband Router Session Hijacking Vulnerability
  • From: YGN Ethical Hacker Group
• Google Chrome: HTTP AUTH Dialog Spoofing through Realm Manipulation (Restated)
  • From: Aditya K Sood
• [ MDVSA-2010:157 ] freetype2
  • From: security
• [SECURITY] [DSA 2095-1] New lvm2 packages fix denial of service
  • From: Giuseppe Iuculano
• [Bkis-04-2010] Multiple Vulnerabilities in OpenBlog
  • From: Bkis
• [ MDVSA-2010:155 ] mysql
  • From: security
• Biblioteca 1.0 Beta Joomla Component Multiple SQL Injection Vulnerabilities
  • From: Salvatore Fresta aka Drosophila
• [ MDVSA-2010:158 ] squirrelmail
  • From: security
• XSS vulnerability in MAXdev
  • From: advisory
• Re: [MajorSecurity SA-080]WordPress 3.0.1 - Cross Site Scripting Issue
  • From: MustLive
• phpMyAdmin 3.3.5 / 2.11.10 <= Cross Site Scripting (XSS) Vulnerability
  • From: YGN Ethical Hacker Group
• Directory Traversal in 3D FTP Client
  • From: advisory
• Secunia Research: Novell iPrint Client "call-back-url" Buffer Overflow Vulnerability
  • From: Secunia Research
• Directory Traversal in AutoFTP Manager
  • From: advisory
• Nagios XI Login XSS
  • From: Adam Baldwin
• Directory Traversal in FTPGetter
  • From: advisory
• Ruxcon 2010 Final Call For Papers
  • From: cfp
• [SECURITY] [DSA 2094-1] New Linux 2.6.26 packages fix several issues
  • From: dann frazier
• Re: Web Tool Announcement: ismymailsecure.com
  • From: Chuck Swiger
• Re: ACROS Security: Remote Binary Planting in Apple iTunes for Windows (ASPR #2010-08-18-1)
  • From: larry
• [security bulletin] HPSBMA02477 SSRT090177 rev.5 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code, Denial of Service (DoS)
  • From: security-alert
• MUSE v4.9.0.006 (.m3u) Local Buffer Overflow Exploit
  • From: glafkos
• NSOADV-2010-005: SonicWALL E-Class SSL-VPN ActiveX Control format string overflow
  • From: NSO Research
• [SECURITY] [DSA 2093-1] New ghostscript packages fix several vulnerabilities
  • From: Giuseppe Iuculano
• Flock Browser 3.0.0.3989 Malformed Bookmark XSS and script insertion
  • From: Lostmon lords
• MUSE v4.9.0.006 (.pls) Local Universal Buffer Overflow [SEH]
  • From: glafkos
• [security bulletin] HPSBMA02424 SSRT080125 rev.3 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code
  • From: security-alert
• [security bulletin] HPSBST02536 SSRT100057 rev.2 - HP StorageWorks Storage Mirroring, Remote Unauthorized Access
  • From: security-alert
• ACROS Security: Remote Binary Planting in Apple iTunes for Windows (ASPR #2010-08-18-1)
  • From: Mitja Kolsek
• Better Security Through Sacrificing Maidens
  • From: Pete Herzog
• Web Tool Announcement: ismymailsecure.com
  • From: Holger Rabbach
• Medium security hole in Rekonq web browser
  • From: Tim Brown
• Re: Geolocation spoofing and other UI woes
  • From: Michal Zalewski
• [SECURITY] [DSA 1919-2] New smarty packages fix regression
  • From: Thijs Kinkhorst
• [USN-972-1] FreeType vulnerabilities
  • From: Marc Deslauriers
• [USN-973-1] KOffice vulnerabilities
  • From: Jamie Strandboge
• [SECURITY] [DSA 2092-1] New lxr-cvs packages fix cross-site scripting
  • From: Sebastien Delafond
• Geolocation spoofing and other UI woes
  • From: Michal Zalewski
• Triologic Media Player 8 (.m3u) Local Universal Unicode Buffer Overflow [SEH]
  • From: glafkos
• CVE-2010-2234: Apache CouchDB Cross Site Request Forgery Attack
  • From: Jan Lehnardt
• Windows Kerberos Authentication Bypass
  • From: Tommaso Malgherini
• CVE-2010-3014: Coda Filesystem Kernel Memory Disclosure
  • From: VSR Advisories
• [USN-971-1] OpenJDK vulnerabilities
  • From: Kees Cook
• [ MDVSA-2010:154 ] cabextract
  • From: security
• [ MDVSA-2010:153 ] apache
  • From: security
• [ MDVSA-2010:152 ] apache
  • From: security
• XSS vulnerability in CMSimple
  • From: advisory
• Xilisoft Video Converter Wizard 3 ogg file processing DoS
  • From: praveen_recker
• XSS vulnerability in CMSimple
  • From: advisory
• XSS vulnerability in CMSimple
  • From: advisory
• XSRF (CSRF) in CMSimple
  • From: advisory
• XSS vulnerability in pimcore
  • From: advisory
• [ MDVSA-2010:151 ] libmikmod
  • From: security
• Re: Re: Amblog 1.0 Joomla Component Multiple SQL Injection Vulnerabilities
  • From: Salvatore Fresta aka Drosophila
• Jgrid 1.0 Joomla Component Local File Inclusion Vulnerability
  • From: Salvatore Fresta aka Drosophila
• Insecure secure cookie in Tornado
  • From: Nam Nguyen
• Re: XSS vulnerability in Eden Platform
  • From: security curmudgeon
• Re: XSS vulnerability in Theeta CMS
  • From: security curmudgeon
• Re: XSS vulnerability in WebPress
  • From: security curmudgeon
• Re: XSS vulnerability in CruxCMS
  • From: security curmudgeon
• [ MDVSA-2010:150 ] libsndfile
  • From: security
• Easy FTP Server v1.7.0.11 DELE, STOR, RNFR, RMD, XRMD Command Buffer Overflow
  • From: Glafkos Charalambous
• ACollab Multiple Vulnerabilities
  • From: admin
• iDefense Security Advisory 08.10.10: Microsoft Office RTF Parsing Engine Memory Corruption Vulnerability
  • From: iDefense Labs
• Re: Correction to: ZDI-10-151: SAP Crystal Reports 2008 GIOP Message Size Integer Overflow Remote Code Execution Vulnerability
  • From: Steve Shockley
• Secunia Research: SWFTools Two Integer Overflow Vulnerabilities
  • From: Secunia Research
• [MajorSecurity SA-080]WordPress 3.0.1 - Cross Site Scripting Issue
  • From: david . kurz
• XSS vulnerability in eazyCMS
  • From: advisory
• XSS vulnerability in CMS Source
  • From: advisory
• SQL injection vulnerability in CMS Source
  • From: advisory
• Local File Inclusion in CMS Source
  • From: advisory
• XSS vulnerability in CMS Source
  • From: advisory
• SQL injection vulnerability in CMS Source
  • From: advisory
• Local File Inclusion in CMS Source
  • From: advisory
• XSS vulnerability in eazyCMS
  • From: advisory
• XSS vulnerability in eazyCMS
  • From: advisory
• XSS vulnerability in eazyCMS
  • From: advisory
• XSS vulnerability in CMS Source
  • From: advisory
• SQL injection vulnerability in CMS Source
  • From: advisory
• SQL injection vulnerability in i-Web Suite
  • From: advisory
• XSS vulnerability in i-Web Suite
  • From: advisory
• Directory Traversal in SoftX FTP Client
  • From: advisory
• XSS vulnerability in Edit-X CMS
  • From: advisory
• SQL injection vulnerability in SyntaxCMS
  • From: advisory
• XSS vulnerability in Onyx
  • From: advisory
• XSS vulnerability in Onyx
  • From: advisory
• XSS vulnerability in Mystic
  • From: advisory
• XSS vulnerability in Mystic
  • From: advisory
• Cisco Security Advisory: Cisco IOS Software TCP Denial of Service Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• XSRF (CSRF) in Mystic
  • From: advisory
• Re: Amblog 1.0 Joomla Component Multiple SQL Injection Vulnerabilities
  • From: tibor . fogler
• SQL Injection vulnerability in CMS WebManager-Pro
  • From: MustLive
• [SECURITY] [DSA 2091-1] New squirrelmail packages fix cross-site request forgery
  • From: Luciano Bello
• [ MDVSA-2010:149 ] freetype2
  • From: security
• [ MDVSA-2010:148 ] pidgin
  • From: security
• Secunia Research: Opera "Download" Dialog File Execution Security Issue
  • From: Secunia Research
• ZDI-10-154: Apple Webkit Button First-Letter Style Rendering Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-153: Apple Webkit SVG Floating Text Element Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-152: Apple WebKit RTL LineBox Overflow Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-151: Microsoft Office Word 2007 plcffldMom Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [USN-970-1] GnuPG2 vulnerability
  • From: Marc Deslauriers
• Secunia Research: glpng PNG Processing Two Integer Overflow Vulnerabilities
  • From: Secunia Research
• Cisco Security Advisory: Multiple Vulnerabilities in the Cisco ACE Application Control Engine Module and Cisco ACE 4710 Application Control Engine
  • From: Cisco Systems Product Security Incident Response Team
• RE: Correction to: ZDI-10-151: SAP Crystal Reports 2008 GIOP Message Size Integer Overflow Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-151: SAP Crystal Reports 2008 GIOP Message Size Integer Overflow Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• Cisco Security Advisory: SQL Injection Vulnerability in Cisco Wireless Control System
  • From: Cisco Systems Product Security Incident Response Team
• ZDI-10-150: Microsoft Office Word sprmCMajority Record Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• Collisions in PDF signatures
  • From: Florian Zumbiehl
• PR10-07: Unauthenticated File Retrieval (traversal) within ColdFusion administration console
  • From: research
• Microsoft Office Word HTML Linked Objects Memory Corruption Vulnerability - CVE-2010-1903
  • From: Rodrigo Branco
• VUPEN Security Research - Microsoft Internet Explorer Table Element Use-after-free Vulnerability (CVE-2010-2560)
  • From: VUPEN Security Research
• VUPEN Security Research - Microsoft Internet Explorer "CIframeElement" Object Use-after-free Vulnerability (CVE-2010-2558)
  • From: VUPEN Security Research
• VUPEN Security Research - Microsoft Internet Explorer "OnPropertyChange_Src()" Use-after-free Vulnerability (CVE-2010-2556)
  • From: VUPEN Security Research
• VUPEN Security Research - Microsoft Internet Explorer "boundElements" Property Use-after-free Vulnerability (CVE-2010-2557)
  • From: VUPEN Security Research
• iDefense Security Advisory 08.10.10: Microsoft Word RTF File Parsing Heap Buffer Overflow Vulnerability
  • From: iDefense Labs
• ZDI-10-149: Adobe Flash Player LocalConnection Memory Corruption Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [CORE-2010-0623] Microsoft Windows CreateWindow function callback vulnerability
  • From: CORE Security Technologies Advisories
• CORE-2010-0407: Microsoft Office Excel PivotTable Cache Data Record Buffer Overflow
  • From: CORE Security Technologies Advisories
• Re: ESA-2010-013: RSA, The Security Division of EMC, informs about potential security vulnerability in RSA enVision® versions prior to 3.7 SP1
  • From: Security_Alert
• ToorCon 12 Call for Papers
  • From: h1kari
• ZDI-10-148: Microsoft Cinepak Codec CVDecompress Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• Cross-Site Scripting vulnerability in Mozilla Firefox, Opera and other browsers
  • From: MustLive
• 2Wire Broadband Router Session Hijacking Vulnerability
  • From: YGN Ethical Hacker Group
• ZDI-10-147: Microsoft Windows MPEG Layer-3 Audio Decoder Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• Secunia Research: Windows Movie Maker String Parsing Buffer Overflow
  • From: Secunia Research
• [USN-965-1] OpenLDAP vulnerabilities
  • From: Steve Beattie
• [USN-967-1] w3m vulnerability
  • From: Steve Beattie
• Amblog 1.0 Joomla Component Multiple SQL Injection Vulnerabilities
  • From: Salvatore Fresta aka Drosophila
• Teams 1_1028_100809_1711 Joomla Component Multiple Blind SQL Injection Vulnerabilities
  • From: Salvatore Fresta aka Drosophila
• ZDI-10-146: Apple Webkit Anchor Tag Mouse Click Event Dispatch Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-145: Novell ZENWorks Remote Management Agent Weak Authentication Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-144: Apple Webkit Rendering Counter Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• Nagios XI 2009R1.2B Multiple CSRF
  • From: Adam Baldwin
• ZDI-10-143: Novell Sentinel Log Manager Multiple Servlet Remote Code Execution Vulnerabilities
  • From: ZDI Disclosures
• XSS vulnerability in allinta CMS
  • From: advisory
• XSS vulnerability in Eden Platform
  • From: advisory
• SQL injection vulnerability in allinta CMS
  • From: advisory
• XSS vulnerability in allinta CMS
  • From: advisory
• SQL injection vulnerability in allinta CMS
  • From: advisory
• XSS vulnerability in Eden Platform
  • From: advisory
• XSS vulnerability in allinta CMS
  • From: advisory
• QQ Computer Manager TSKsp.sys Driver Local Denial of Service Vulnerability
  • From: lilf
• Re: Pragyan CMS 2.6.4 Multiple SQL Injection Vulnerabilities
  • From: i . abhi27
• [SECURITY] [DSA 2090-1] New socat packages fix arbitrary code execution
  • From: Luciano Bello
• cgTestimonial 2.2 Joomla Component Multiple Remote Vulnerabilities
  • From: Salvatore Fresta aka Drosophila
• [ MDVSA-2010:146 ] libtiff
  • From: security
• Re: [CORE-2010-0405] Adobe Director Invalid Read
  • From: Core Security Technologies Advisories
• [ MDVSA-2010:145 ] libtiff
  • From: security
• ESA-2010-013: RSA, The Security Division of EMC, informs about potential security vulnerability in RSA enVision® versions prior to 3.7 SP1
  • From: security_alert
• ZDI-10-139: Novell iPrint Client Browser Plugin Parameter Name Remote Code Execution
  • From: ZDI Disclosures
• TPTI-10-05: Novell iPrint Client Browser Plugin Remote File Deletion Vulnerability
  • From: ZDI Disclosures
• [USN-969-1] PCSC-Lite vulnerability
  • From: Kees Cook
• TPTI-10-06: Novell iPrint Client Browser Plugin ExecuteRequest debug Parameter Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [SECURITY] [DSA-2089-1] New php5 packages fix several vulnerabilities
  • From: Raphael Geissert
• ZDI-10-138: Novell iPrint Server Queue Name Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-140: Novell iPrint Client Browser Plugin operation Parameter Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-142: Apple Webkit SVG First-Letter Style Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-141: Apple Webkit SVG ForeignObject Rendering Layout Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• Vulnerabilities in Dataface Web Application Framework
  • From: MustLive
• [USN-968-1] Dell Latitude 2110 vulnerability
  • From: Kees Cook
• [security bulletin] HPSBGN02560 SSRT100193 rev.1 - HP ProCurve 2626 and 2650 Switches, Remote Unauthorized Access
  • From: security-alert
• [security bulletin] HPSBGN02561 SSRT100194 rev.1 - HP ProCurve 2610 Switches running DHCP, Remote Denial of Service (DoS)
  • From: security-alert
• [security bulletin] HPSBGN02559 SSRT100192 rev.1 - HP ProCurve 2610 Switch In-band Agent, Remote Denial of Service (DoS)
  • From: security-alert
• [security bulletin] HPSBGN02562 SSRT090249 rev.1 - HP ProCurve Threat Management Services (TMS) zl Module J9155A and J9156A running TLS/SSL, Remote Unauthorized Data Injection, Denial of Service (DoS)
  • From: security-alert
• [security bulletin] HPSBGN02501 SSRT071407 rev.1 - HP ProCurve 1800 Switches running SNMP, Remote Disclosure of Information
  • From: security-alert
• Application Logic Error in DT Centrepiece
  • From: advisory
• Application Logic Error in DT Centrepiece
  • From: advisory
• XSS vulnerability in DT Centrepiece
  • From: advisory
• XSS vulnerability in DT Centrepiece
  • From: advisory
• XSRF (CSRF) in Amethyst
  • From: advisory
• XSS vulnerability in Amethyst
  • From: advisory
• XSS vulnerability in Amethyst
  • From: advisory
• XSRF (CSRF) in BXR
  • From: advisory
• XSS vulnerability in BXR
  • From: advisory
• Directory Traversal in Frigate 3 built-in FTP client
  • From: advisory
• XSRF (CSRF) in Open blog
  • From: advisory
• XSS vulnerability in Open blog
  • From: advisory
• XSS vulnerability in BXR
  • From: advisory
• XSS vulnerability in Amethyst
  • From: advisory
• XSS vulnerability in SiteLoom CMS
  • From: advisory
• XSS vulnerability in DiamondList
  • From: advisory
• Directory Traversal in SmartFTP
  • From: advisory
• XSS vulnerability in Open Blog
  • From: advisory
• XSS vulnerability in BXR search
  • From: advisory
• XSRF (CSRF) in DiamondList
  • From: advisory
• XSS vulnerability in DiamondList
  • From: advisory
• Directory Traversal in FTP Rush
  • From: advisory
• Directory Traversal in FTP Explorer
  • From: advisory
• XSS vulnerability in DT Centrepiece
  • From: advisory
• XSS vulnerability in Prado Portal
  • From: advisory
• SQL injection vulnerability in BXR
  • From: advisory
• Secunia Research: MantisBT "Add Category" Script Insertion Vulnerability
  • From: Secunia Research
• ZeusCart Ecommerce Shopping Cart Software Cross-Site scripting Vulnerability
  • From: SecPod Research
• [SECURITY] [DSA 2088-1] New wget packages fix potential code execution
  • From: Florian Weimer
• iDefense Security Advisory 08.03.10: Citrix ICA Client ActiveX Memory Corruption Vulnerabillity
  • From: iDefense Labs
• [Suspected Spam]CSRF, Information Leakage and Full path disclosure vulnerabilities in WordPress
  • From: MustLive
• [ MDVSA-2010:144 ] wireshark
  • From: security
• Cisco Wireless Control System XSS
  • From: Tom Neaves
• Fwd: {Lostmon´s Group} K-Meleon for windows about:neterror Stack Overflow DoS
  • From: Lostmon lords
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco Firewall Services Module
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances
  • From: Cisco Systems Product Security Incident Response Team
• Fwd: {Lostmon´s Group} Safari for windows Long link DoS
  • From: Lostmon lords
• Quick Easy FTP Server USER command Vulnerability
  • From: 黄超毅
• Heap Offset Overflow in Citrix ICA Clients
  • From: Context IS - Disclosure
• [SECURITY] [DSA 2086-1] New avahi packages fix denial of service
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 2087-1] New cabextract packages fix arbitrary code execution
  • From: Moritz Muehlenhoff
• [USN-964-2] Likewise Open regression
  • From: Kees Cook
• [SECURITY] [DSA 2085-1] New lftp packages fix file overwrite vulnerability
  • From: Sebastien Delafond
• Re: [R7-0035] VxWorks Authentication Library Weak Password Hashing
  • From: Solar Designer
• [DCA-0009] - NetWordDLS Finger Server Denial of Service
  • From: Ewerson Guimarães (Crash) - Dclabs
• [DCA-0003] Simple Web Server DoS
  • From: Rodrigo Escobar
• [R7-0035] VxWorks Authentication Library Weak Password Hashing
  • From: HD Moore
• [DCA-00014] Dlink WBR-2310 Wireless Router DoS
  • From: Rodrigo Escobar
• 68KB v1.0.0rc4 Remote File Include Vulnerability
  • From: g1xsystem
• TWSL2010-003: Unauthorized access to root NFS export on EMC Celerra NAS appliance
  • From: Trustwave Advisories
• [SECURITY] [DSA 2084-1] New tiff packages fix arbitrary code execution
  • From: Moritz Muehlenhoff
• [R7-0034] VxWorks WDB Agent Debug Service Exposure
  • From: HD Moore
• [security bulletin] HPSBMA02563 SSRT100165 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code
  • From: security-alert
• [SECURITY] [DSA 2083-1] New moin packages fix cross-site scripting
  • From: Nico Golde
• [DCA-0004] Baby FTP Server DoS
  • From: Rodrigo Escobar
• Information Leakage and Full path disclosure vulnerabilities in WordPress
  • From: MustLive
• [DCA-0006] Baby ASP Web Server DoS
  • From: Rodrigo Escobar
• [DCA-0005] Baby POP Server DoS
  • From: Rodrigo Escobar
• [DCA-0007] Quick 'n Easy FTP Server v3.2
  • From: Rodrigo Escobar
• [DCA-0008] Quick 'n Easy WEB Server DoS
  • From: Rodrigo Escobar
• [SECURITY] [DSA 2081-1] New libmikmod packages fix arbitrary code execution
  • From: Moritz Muehlenhoff
• Directory Traversal Vulnerability in FTP Commander Deluxe
  • From: advisory
• Directory Traversal Vulnerability in 32bit FTP Client
  • From: advisory
• Directory Traversal Vulnerability in FTP Commander
  • From: advisory
• [ MDVSA-2010:143 ] gnupg2
  • From: security
• [SECURITY] [DSA 2082-1] New gmime2.2 packages fix arbitrary code execution
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 2080-1] New ghostscript packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• Directory Traversal Vulnerability in TurboFTP 6 Client
  • From: advisory
• Directory Traversal Vulnerability in TurboFTP Server
  • From: advisory
• 2nd. OWASP Ibero-American Web-Applications Security conference (IBWAS’10) - Call for Training
  • From: Carlos Serrão
• [SECURITY] [DSA 2078-1] New kvirc packages fix arbitrary IRC command execution
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 2078-1] New mapserver packages fix arbitrary code execution
  • From: Nico Golde
• Spielothek 1.6.9 Joomla Component Multiple Blind SQL Injection
  • From: Salvatore Fresta aka Drosophila
• Directory Traversal Vulnerability in FTP Commander Pro
  • From: advisory
• XSS vulnerability in Campsite
  • From: advisory
• XSS vulnerability in Campsite
  • From: advisory
• ESA-2010-012: EMC Disk Library (EDL) Denial Of Service Vulnerability
  • From: Security_Alert
• Day of bugs in WordPress 2
  • From: MustLive
• Akamai Download Manager arbitrary file download & execution
  • From: Akita Software Security
• Insomnia : ISVA-100730.1 - CMS Multiple SQL injection Vulnerabilities
  • From: Insomnia Security
• [SECURITY] [DSA 2077-1] New openldap packages fix potential code execution
  • From: Florian Weimer
• [HITB-Ann] Reminder: HITB2010 Malaysia Call for Papers Closing August 9th
  • From: Hafez Kamal
• CFP NcN 2010
  • From: Jose Nicolas Castellano
• [ MDVSA-2010:142 ] openldap
  • From: security
• PBBooking 1.0.4_3 Joomla Component Multiple Blind SQL Injection
  • From: Salvatore Fresta aka Drosophila
• [security bulletin] HPSBUX02556 SSRT100014 rev.2 - HP-UX Running rpc.ttdbserver, Remote Execution of Arbitrary Code
  • From: security-alert
• New vulnerabilities in Cetera eCommerce
  • From: MustLive
• Vulnerabilities in Cetera eCommerce
  • From: MustLive
• PhotoMap Gallery 1.6.0 Joomla Component Multiple Blind SQL Injection
  • From: Salvatore Fresta aka Drosophila
• [security bulletin] HPSBMA02549 SSRT090158 rev.2 - HP Insight Control Power Management for Windows, Local Unauthorized Read Access to Data
  • From: security-alert
• Jira Enterprise 4.0.1 - Multiple Low Risk Vulnerabilities
  • From: advisories
• Secunia Research: Autonomy KeyView wkssr.dll Record Parsing Buffer Overflows
  • From: Secunia Research
• Secunia Research: Autonomy KeyView wkssr.dll String Indexing Vulnerability
  • From: Secunia Research
• Secunia Research: Autonomy KeyView wkssr.dll Integer Underflow Vulnerability
  • From: Secunia Research
• Secunia Research: Autonomy KeyView wosr.dll Data Block Parsing Buffer Overflow
  • From: Secunia Research
• Secunia Research: Autonomy KeyView rtfsr.dll RTF Parsing Signedness Error
  • From: Secunia Research
• Secunia Research: Autonomy KeyView wkssr.dll Floating Point Conversion Buffer Overflow
  • From: Secunia Research
• Secunia Research: Autonomy KeyView Compound File Parsing Buffer Overflow
  • From: Secunia Research
• Re: TTVideo 1.0 Joomla Component SQL Injection Vulnerability
  • From: martin
• Appointinator 1.0.1 Joomla Component Multiple Remote Vulnerabilities
  • From: Salvatore Fresta aka Drosophila
• [SECURITY] [DSA 2075-1] New xulrunner packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 2076-1] New gnupg2 packages fix potential code execution
  • From: Florian Weimer
• [ MDVSA-2010:141 ] samba
  • From: security
• [ MDVSA-2010:140 ] php
  • From: security
• TTVideo 1.0 Joomla Component SQL Injection Vulnerability
  • From: Salvatore Fresta aka Drosophila
• London DEFCON July meet - DC4420 - Wed 28th July 2010
  • From: Dominic
• [MajorSecurity SA-079]PHPKIT WCMS - Multiple stored Cross Site Scripting Issues
  • From: david . kurz
• [USN-964-1] Likewise Open vulnerability
  • From: Kees Cook
• FuzzDiff tool
  • From: Dan Rosenberg
• XSS vulnerability in Theeta CMS
  • From: advisory
• XSS vulnerability in Theeta CMS
  • From: advisory
• XSS vulnerability in SyndeoCMS
  • From: advisory
• XSS vulnerability in Theeta CMS
  • From: advisory
• XSS vulnerability in SyndeoCMS
  • From: advisory
• SQL injection vulnerability in Theeta CMS
  • From: advisory
• XSS vulnerability in SyndeoCMS
  • From: advisory
• Heap Overflow/DoS Vulnerability in Media Player Classic
  • From: praveen_recker
• [USN-930-6] Firefox and Xulrunner vulnerability
  • From: Jamie Strandboge
• Paper on the law and Implantable Devices security
  • From: Gadi Evron
• iKAT - Interactive Kiosk Attack Tool v3 : Defcon 18 Edition
  • From: Paul Craig
• Nessus Vulnerabilities
  • From: madhck
• [USN-957-2] Firefox and Xulrunner vulnerability
  • From: Jamie Strandboge
• [USN-958-1] Thunderbird vulnerabilities
  • From: Marc Deslauriers
• Re: Internet Explorer 8.0 Address Bar Spoofing Vulnerability
  • From: Shreyas Zare
• [LWSA-2010-001] Likewise Open 5.4 & 6.0
  • From: Gerald Carter
• Mac OS X WebDAV kernel extension local denial-of-service
  • From: Dan Rosenberg
• QQplayer smi File Processing Buffer Overflow Vulnerability
  • From: lilf
• WhiteBoard 0.1.30 Multiple Blind SQL Injection Vulnerabilities
  • From: Salvatore Fresta aka Drosophila
• Multiple vulnerabilities in MC Content Manager
  • From: MustLive
• Call For Papers - Hackers 2 Hackers Conference 7th Edition - Brazil
  • From: Rodrigo Rubira Branco (BSDaemon)
• DM Filemanager (fckeditor) Remote Arbitrary File Upload Exploit
  • From: g1xsystem
• Internet Explorer 8.0 Address Bar Spoofing Vulnerability
  • From: info
• Foofus.net Security Advisory: Symantec AMS Intel Alert Handler service Design Flaw
  • From: spider
• [USN-927-6] NSS vulnerability
  • From: Jamie Strandboge
• [ MDVSA-2010:138 ] iputils
  • From: security
• [USN-957-1] Firefox and Xulrunner vulnerabilities
  • From: Jamie Strandboge
• [USN-930-5] ant, apturl, Epiphany, gluezilla, gnome-python-extras, liferea, mozvoikko, OpenJDK, packagekit, ubufox, webfav, yelp update
  • From: Jamie Strandboge
• [USN-930-4] Firefox and Xulrunner vulnerabilities
  • From: Jamie Strandboge
• [DSECRG-09-068] SAP NetWaver SLD - multiple XSS
  • From: Alexandr Polyakov
• [DSECRG-09-040] SAP Netweaver wsnavigator XSS Security Vulnerability
  • From: Alexandr Polyakov
• RE: vBulletin - Critical Information Disclosure
  • From: Jon
• [USN-927-7] nspr update
  • From: Jamie Strandboge
• [USN-927-8] Thunderbird update
  • From: Jamie Strandboge
• vBulletin - Critical Information Disclosure
  • From: advisories
• XSS vulnerability in Spitfire
  • From: advisory
• XSS vulnerability in Spitfire
  • From: advisory
• XSS vulnerability in Spitfire
  • From: advisory
• XSS vulnerability in Spitfire
  • From: advisory
• XSS vulnerability in Spitfire search
  • From: advisory
• ZDI-10-136: Novell Teaming ajaxUploadImageFile Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-137: Hewlett-Packard OpenView NNM webappmon.exe execvp_nc Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [security bulletin] HPSBMA02558 SSRT100158 rev.2 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code
  • From: security-alert
• [security bulletin] HPSBMA02551 SSRT100065 rev.2 - HP Virtual Connect Enterprise Manager for Windows, Remote Cross Site Scripting (XSS)
  • From: security-alert
• VUPEN Security Research - HP OpenView Network Node Manager "ov.dll" Buffer Overflow Vulnerability (CVE-2010-2704)
  • From: VUPEN Security Research
• VUPEN Security Research - HP OpenView Network Node Manager "nnmrptconfig.exe" Buffer Overflow (CVE-2010-2703)
  • From: VUPEN Security Research
• [Suspected Spam]SQL Injection vulnerability in coWiki
  • From: MustLive
• Mozilla Firefox 3.5.x Address Bar Spoofing Vulnerability
  • From: info
• Cisco Security Advisory: CDS Internet Streamer: Web Server Directory Traversal Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• [security bulletin] HPSBMA02557 SSRT100025 rev.1- HP OpenView Network Node Manager (OV NNM) Running on Windows, Remote Execution of Arbitrary Code
  • From: security-alert
• [SECURITY] [DSA 2073-1] New mlmmj packages fix directory traversal
  • From: Thijs Kinkhorst
• [oCERT-2010-002] Joomla input sanitization errors (XSS)
  • From: Andrea Barisani
• ESA-2010-011: RSA, The Security Division of EMC, announces a fix for potential security vulnerability in RSAR Federated Identity Manager
  • From: Security_Alert
• [USN-940-2] Kerberos vulnerability
  • From: Kees Cook
• [SECURITY] [DSA 2074-1] New ncompress packages fix execution of arbitrary code
  • From: Giuseppe Iuculano
• ZDI-10-135: Novell Groupwise WebAccess Multiple Cross-Site Scripting Vulnerabilities
  • From: ZDI Disclosures
• ZDI-10-134: Mozilla Firefox DOM Attribute Cloning Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-133: Mozilla Firefox CSS font-face Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-132: Mozilla Firefox Plugin Parameter EnsureCachedAttrParamArrays Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-131: Mozilla Firefox nsTreeSelection Dangling Pointer Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-130: Mozilla Firefox NodeIterator Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [Onapsis Security Advisory 2010-006] SAP J2EE Web Services Navigator Cross-Site Scripting
  • From: Onapsis Research Labs
• [security bulletin] HPSBMA02558 SSRT010158 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code
  • From: security-alert
• [security bulletin] HPSBMA02425 SSRT080091 rev.3 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code
  • From: security-alert
• [USN-963-1] FreeType vulnerabilities
  • From: Marc Deslauriers
• CVE-2010-2384: Solaris wbem unsafe use of temporary files
  • From: Frank Stuart
• CVE-2010-2382: Solaris nfslogd unsafe use of temporary files
  • From: Frank Stuart
• CVE-2010-2382: Solaris flar unsafe use of temporary files
  • From: Frank Stuart
• PoC for CVE-2010-1869 (ghostscript) and CVE-2010-1039 (rpc.pcnfsd)
  • From: Rodrigo Branco
• VMSA-2010-0012 VMware vCenter Update Manager fix for Jetty Web server addresses important security vulnerabilities
  • From: VMware Security Team
• SeaMonkey 2.0.5 Address Bar Spoofing Vulnerability
  • From: info
• Microsoft ClickOnce MITM Vulnerabilities
  • From: Tom Ritter
• [SECURITY] [DSA 2072-1] New libpng packages fix several vulnerabilities
  • From: Giuseppe Iuculano
• YACK CMS 10.5.27 Remote File Inclusion Vulnerability
  • From: g1xsystem
• [ MDVSA-2010:137 ] freetype2
  • From: security
• RedShop 1.0.23.1 Joomla Component Blind SQL Injection Vulnerability
  • From: Salvatore Fresta aka Drosophila
• {PRL} Novell Groupwise Internet Agent Stack Overflow
  • From: Francis Provencher
• [ MDVSA-2010:135 ] ghostscript
  • From: security
• A new zombie port scanning attack
  • From: ithilgore
• ZDI-10-128: Ipswitch Imail Server Queuemgr Format String Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [MajorSecurity SA-076]Conpresso CMS - Cross site Scripting vulnerabilities
  • From: david . kurz
• ZDI-10-129: Novell Netware Groupwise Internet Gateway Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• Re: ZDI-10-121: Command Injection Remote Code Execution Vulnerability
  • From: Juha-Matti Laurio
• [ MDVSA-2010:136 ] ghostscript
  • From: security
• ZDI-10-126: Ipswitch Imail Server List Mailer Reply-To Address Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-127: Ipswitch Imail Server Mailing List Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [ MDVSA-2010:134 ] ghostscript
  • From: security
• Kiwicon IV: Our Worst CFP Yet
  • From: Kiwicon
• [ MDVSA-2010:133 ] libpng
  • From: security
• IS-2010-006 - D-Link DAP-1160 formFilter buffer overflow
  • From: Cristofaro Mune
• OWASP Appsec Germany Call for Papers
  • From: Tobias Glemser
• ClubHack2010 CFP
  • From: ClubHack
• {PRL} Novell Groupwise Webaccess Stack Overflow
  • From: Francis Provencher
• [USN-962-1] VTE vulnerability
  • From: Kees Cook
• XSS vulnerability in WebPress
  • From: advisory
• XSRF (CSRF) in phpwcms
  • From: advisory
• XSS vulnerability in WebPress
  • From: advisory
• XSRF (CSRF) in Pixie
  • From: advisory
• XSS vulnerability in FestOS
  • From: advisory
• XSRF (CSRF) in Pixie
  • From: advisory
• [security bulletin] HPSBMA02550 SSRT100170 rev.2 - HP Insight Software Installer for Windows, Local Unauthorized Access to Data, Remote Cross Site Request Forgery (CSRF)
  • From: security-alert
• XSS vulnerability in FestOS
  • From: advisory
• Re: pam_captcha username harvest vulnerability
  • From: Jordan Sissel
• XSS vulnerability in Pixie
  • From: advisory
• [security bulletin] HPSBUX02556 SSRT100014 rev.1 - HP-UX Running rpc.ttdbserver, Remote Execution of Arbitrary Code
  • From: security-alert
• Stored XSS vulnerability in Pixie
  • From: advisory
• XSS vulnerability in phpwcms
  • From: advisory
• [SECURITY] [DSA 2071-1] New libmikmod packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• XSS vulnerability in WebPress
  • From: advisory
• Secunia Research: GIGABYTE Dldrv2 ActiveX Control Unsafe Methods
  • From: Secunia Research
• XSS vulnerability in WebPress
  • From: advisory
• Opera Browser Address Bar Spoofing Vulnerability
  • From: info
• [SECURITY] [DSA 2070-1] New freetype packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• XSS vulnerability in Taggon CMS
  • From: advisory
• XSS vulnerability in Pligg search module
  • From: advisory
• ZDI-10-120: Oracle Secure Backup Administration objectname Command Injection Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• Outlook PR_ATTACH_METHOD file execution vulnerability
  • From: Akita Software Security
• XSS vulnerability in Gekko Web Builder
  • From: advisory
• [security bulletin] HPSBMA02554 SSRT100018 rev.2 - HP Insight Control for Linux, Remote Execution of Arbitrary Code, Remote Denial of Service (DoS), Remote Unauthorized Access
  • From: security-alert
• XSS vulnerability in DSite CMS
  • From: advisory
• Re: pam_captcha username harvest vulnerability
  • From: Ian Maguire
• [ MDVSA-2010:132 ] python
  • From: security
• ZDI-10-125: IBM SolidDB solid.exe Handshake Request Username Field Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• cPanel XSS Vulnerability
  • From: thomas
• CVE-2010-2375: WebLogic Plugin HTTP Injection via Encoded URLs
  • From: VSR Advisories
• Secunia Research: GIGABYTE Dldrv2 ActiveX Control Array Indexing Vulnerability
  • From: Secunia Research
• ZDI-10-124: Oracle Secure Backup Web Interface Various Post-Auth Command Injection Remote Code Execution Vulnerabilities
  • From: ZDI Disclosures
• SAPGui BI wadmxhtml.dll Tags Property Heap Corruption
  • From: Elazar Broad
• ZDI-10-123: Oracle Secure Backup Administration Authentication Bypass Vulnerability
  • From: ZDI Disclosures
• Pwnie Awards 2010
  • From: Alexander Sotirov
• ZDI-10-122: Oracle Secure Backup Administration Command Injection Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [Suspected Spam]Cross-Site Scripting vulnerabilities in SimpGB
  • From: MustLive
• ZDI-10-121: Command Injection Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [security bulletin] HPSBMA02439 SSRT080082 rev.3 - HP OpenView SNMP Emanate Master Agent Running on HP-UX, Linux, Solaris, and Windows, Remote Unauthorized Access
  • From: security-alert
• PR09-16: Juniper Secure Access series (Juniper IVE) Cross-Site Scripting Vulnerability
  • From: research
• ZDI-10-119: Oracle Secure Backup Administration $other Variable Command Injection Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-118: Oracle Secure Backup Administration uname Authentication Bypass Vulnerability
  • From: ZDI Disclosures
• TPTI-10-04: Oracle Secure Backup Scheduler Service Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [security bulletin] HPSBTU02453 SSRT091037 rev.1 - HP Tru64 UNIX BIND Server, Denial of Service (DoS)
  • From: security-alert
• XSS vulnerability in Diem
  • From: advisory
• SQL injection vulnerability in CMSQLite
  • From: advisory
• XSS vulnerability in Diem
  • From: advisory
• SQL injection vulnerability in CMSQLite
  • From: advisory
• SQL injection vulnerability in CMSQLite
  • From: advisory
• XSS vulnerability in Diem
  • From: advisory
• XSS vulnerability in CMSQLite
  • From: advisory
• Re: hashdays 2010 - Call for Papers (#days CFP)
  • From: Hashdays CFP
• [USN-961-1] Ghostscript vulnerabilities
  • From: Marc Deslauriers
• ZDI-10-117: Microsoft Office Access AccWizObjects ActiveX Control Uninitialized Imports Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [security bulletin] HPSBOV02539 SSRT090267 rev.1 - HP OpenVMS Auditing, Local Information Disclosure, Elevation of Privilege, Denial of Service (DoS)
  • From: security-alert
• [security bulletin] HPSBMA02555 SSRT100064 rev.1 - HP Client Automation Enterprise Infrastructure (Radia) Remote Disclosure of Information
  • From: security-alert
• VUPEN Security Research - Winamp Player FLV Data Processing Multiple Overflow Vulnerabilities
  • From: VUPEN Security Research
• [security bulletin] HPSBMA02553 SSRT100184 rev.1 - HP Insight Control Server Migration for Windows, Local and Remote Unauthorized Access to Data, Remote Cross Site Request Forgery (CSRF), Cross Site Scripting (XSS)
  • From: security-alert
• [security bulletin] HPSBMA02551 SSRT100165 rev.1 - HP Virtual Connect Enterprise Manager for Windows, Remote Cross Site Scripting (XSS)
  • From: security-alert
• [security bulletin] HPSBMA02550 SSRT100170 rev.1 - HP Insight Software Installer for Windows, Local Unauthorized Access to Data, Remote Cross Site Request Forgery (CSRF)
  • From: security-alert
• [security bulletin] HPSBUX02451 SSRT090137 rev.1 - HP-UX Running BIND, Remote Denial of Service (DoS)
  • From: security-alert
• [security bulletin] HPSBUX02450 SSRT090141 rev1 - HP-UX ttrace(2), Local Denial of Service (DoS)
  • From: security-alert
• [security bulletin] HPSBMA02549 SSRT090158 rev.1 - HP Insight Control Power Management for Windows, Local Unauthorized Access to Data, Denial of Service (DoS)
  • From: security-alert
• [security bulletin] HPSBMA02548 SSRT100126 rev.1 - HP Insight Orchestration for Windows, Remote Unauthorized Access
  • From: security-alert
• [security bulletin] HPSBMA02547 SSRT100179 rev.1 - HP Systems Insight Manager (SIM) for HP-UX, Linux, and Windows, Remote Execution of Arbitrary Code and Other Vulnerabilities
  • From: security-alert
• VMSA-2010-0011 VMware Studio 2.1 addresses security vulnerabilities in virtual appliances created with Studio 2.0.
  • From: VMware Security Team
• FreeBSD Security Advisory FreeBSD-SA-10:07.mbuf
  • From: FreeBSD Security Advisories
• Re: Re: IIS5.1 Directory Authentication Bypass by using ?:$I30:$Index_Allocation?
  • From: paul . sec117
• [ MDVSA-2010:131 ] iscsitarget
  • From: security
• Metasploit Framework 3.4.1 Released
  • From: egypt
• XSS holes dotDefender
  • From: sh4v
• IE6 css set Denial of Service Vulnerability
  • From: info
• Opera Crash by <canvas> Element
  • From: info
• [SECURITY] [DSA-2068-1] New python-cjson packages fix denial of service
  • From: Giuseppe Iuculano
• Re: IIS5.1 Directory Authentication Bypass by using ?:$I30:$Index_Allocation?
  • From: Richard . haf
• [SECURITY] [DSA-2069-1] New znc packages fix denial of service
  • From: Raphael Geissert
• [SECURITY] CVE-2010-2227: Apache Tomcat Remote Denial Of Service and Information Disclosure Vulnerability
  • From: Mark Thomas
• Vulnerabilities in SimpNews
  • From: MustLive
• Re: MODx Installation File XSS Vulnerability
  • From: jason
• Pligg Installation File XSS Vulnerability
  • From: Andrei Rimsa
• [USN-959-1] PAM vulnerability
  • From: Kees Cook
• [scip_Advisory 4143] Shemes Grabbit Malicious NZB Date Denial of Service
  • From: Marc Ruef
• Re: MODx Installation File XSS Vulnerability
  • From: rimsa
• Re: RunCMS XSS Vulnerability via User Agent
  • From: rimsa
• XSS vulnerability in CruxCMS
  • From: advisory
• XSS vulnerability in CruxCMS
  • From: advisory
• XSS vulnerability in CruxPA
  • From: advisory
• XSS vulnerability in CruxPA
  • From: advisory
• XSS vulnerability in CruxPA
  • From: advisory
• XSS vulnerability in CruxPA
  • From: advisory
• [USN-960-1] libpng vulnerabilities
  • From: Marc Deslauriers
• Exponent Slideshow XSS Vulnerability
  • From: Andrei Rimsa
• Pligg Installation File XSS Vulnerability
  • From: Andrei Rimsa
• [ MDVSA-2010:128 ] lftp
  • From: security
• [ MDVSA-2010:129 ] heimdal
  • From: security
• Sandbox 2.0.3 Multiple Remote Vulnerabilities
  • From: Salvatore Fresta aka Drosophila
• RunCMS XSS Vulnerability via User Agent
  • From: Andrei Rimsa
• PBS Pro race condition vulnerability
  • From: Bartłomiej Balcerek
• ArtForms 2.1b7.2 RC2 Joomla Component Multiple Remote Vulnerabilities
  • From: Salvatore Fresta aka Drosophila
• MODx Installation File XSS Vulnerability
  • From: Andrei Rimsa
• [ MDVSA-2010:130 ] heimdal
  • From: security
• Cisco Security Advisory: Hard-Coded SNMP Community Names in Cisco Industrial Ethernet 3000 Series Switches Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• DeepSec 2010 - Call for Papers - REMINDER
  • From: DeepSec Conference
• DCP-Portal Multiple XSS Vulnerabilities
  • From: Andrei Rimsa
• Re: Re: Two independent vulnerabilities (client and server side) in Quake3 engine and many derived games
  • From: houkouonchi
• pam_captcha username harvest vulnerability
  • From: Ian Maguire
• [USN-943-1] Thunderbird vulnerabilities
  • From: Marc Deslauriers
• Xlight FTPd Multiple Directory Traversal in SFTP
  • From: bill
• Re: Two independent vulnerabilities (client and server side) in Quake3 engine and many derived games
  • From: P0ndera
• Re: XSS vulnerability in PortalApp
  • From: security curmudgeon
• Re: SQL injection vulnerability in TomatoCMS
  • From: security curmudgeon
• VLC Player M3U file ftp:// URI Handler Remote Stack Buffer Overflow
  • From: praveen_recker
• NTSOFT BBS E-Market Professional = XSS / Remote Execution Code
  • From: ivan . sanchez
• Re: SQL injection vulnerability in WebDB
  • From: security curmudgeon
• [HITB-Announce] HITB Magazine Issue 003 + HITBSecConf2010 - Amsterdam
  • From: Hafez Kamal
• Editran editcp V4.1 R7 - Remote buffer overflow
  • From: Pedro Andujar
• Hiding Backdoors in plain sight
  • From: Mailing lists at Core Security Technologies
• Secunia Research: Joomla BookLibrary From Same Author Module "id" SQL Injection
  • From: Secunia Research
• [Suspected Spam]File Download and DoS vulnerabilities in Firefox, Internet Explorer, Chrome and Opera
  • From: MustLive
• TELUS Security Labs VR - iSCSI target Multiple Implementations iSNS Stack Buffer Overflow
  • From: noreply
• Security Advisories from TEHTRI-Security at HITB Europe
  • From: Laurent OUDOT at TEHTRI-Security
• [ MDVSA-2010:127 ] imlib2
  • From: security
• IrcDelphi DCA-00010 Vulnerability Report
  • From: Ewerson Guimarães (Crash) - Dclabs
• iScripts MultiCart 2.2 Multiple SQL Injection Vulnerability
  • From: Salvatore Fresta aka Drosophila
• [SECURITY] [DSA-2067-1] New mahara packages fix several vulnerabilities
  • From: Raphael Geissert
• Canteen Joomla Component 1.0 Multiple Remote Vulnerabilities
  • From: Salvatore Fresta aka Drosophila
• iScripts SocialWare 2.2.x Multiple Remote Vulnerability
  • From: Salvatore Fresta aka Drosophila
• Zoph Multiple Parameter Cross Site Scripting Vulnerabilities
  • From: VUPEN Web Security
• IIS5.1 Directory Authentication Bypass by using :$I30:$Index_Allocation
  • From: bugreport
• VSR Advisory: Multiple Cisco CSS / ACE Client Certificate and HTTP Header Manipulation Vulnerabilities
  • From: VSR Advisories
• Re: Cherokee Web Server 0.5.3 Multiple Vulnerabilities
  • From: security curmudgeon
• iScripts CyberMatch 1.0 Blind SQL Injection Vulnerability
  • From: Salvatore Fresta aka Drosophila
• iScripts ReserveLogic 1.0 SQL Injection Vulnerability
  • From: Salvatore Fresta aka Drosophila
• REVISION: iScripts EasySnaps 2.0 Multiple SQL Injection Vulnerabilities
  • From: Salvatore Fresta aka Drosophila
• Re: [Full-disclosure] Remote Command Execution in dotDefender Site Management
  • From: Henri Salo
• Vulnerabilities in WP-UserOnline for WordPress
  • From: MustLive
• Re: SAP's web module OLK SQL Injection vulnerability
  • From: yuval . lerner
• [Bkis-03-2010] Vulnerability in Flash Slideshow Maker Vulnerability
  • From: Bkis
• [SECURITY] [DSA 2066-1] New wireshark packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• [USN-956-1] sudo vulnerability
  • From: Jamie Strandboge
• DDIVRT-2010-29 ALPHA Ethernet Adapter II Web-Manager 3.40.2 Authentication Bypass
  • From: ddivulnalert
• [USN-930-3] Firefox regression
  • From: Jamie Strandboge
• ZDI-10-116: Adobe Reader CLOD Progressive Mesh Continuation Resolution Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• VUPEN Security Research - Adobe Acrobat and Reader "newclass" Memory Corruption Vulnerability (CVE-2010-1285)
  • From: VUPEN Security Research
• VUPEN Security Research - Adobe Acrobat and Reader "pushstring" Memory Corruption Vulnerability (CVE-2010-2201)
  • From: VUPEN Security Research
• VUPEN Security Research - Adobe Acrobat and Reader "newfunction" Memory Corruption Vulnerability (CVE-2010-2168)
  • From: VUPEN Security Research
• VUPEN Security Research - Adobe Acrobat and Reader #1023 Tag Buffer Overflow Vulnerability (CVE-2010-2212)
  • From: VUPEN Security Research
• Secunia Research: Joomla BookLibrary Component Four SQL Injection Vulnerabilities
  • From: Secunia Research
• Secunia Research: Adobe Reader GIF Image Parsing Array-Indexing Vulnerability
  • From: Secunia Research
• Secunia Research: Adobe Reader JPEG Uninitialised Memory Vulnerability
  • From: Secunia Research
• [0day] Microsoft mshtml.dll CTimeoutEventList::InsertIntoTimeoutList memory leak
  • From: Reversemode
• [USN-930-2] apturl, Epiphany, gecko-sharp, gnome-python-extras, liferea, rhythmbox, totem, ubufox, yelp update
  • From: Jamie Strandboge
• [USN-930-1] Firefox and Xulrunner vulnerabilities
  • From: Jamie Strandboge
• [USN-927-5] nspr update
  • From: Jamie Strandboge
• SAP's web module OLK SQL Injection vulnerability
  • From: salchoman
• [USN-927-4] nss vulnerability
  • From: Jamie Strandboge
• IS-2010-005 - D-Link DAP-1160 Authentication Bypass
  • From: Cristofaro Mune
• iDefense Security Advisory 06.21.10: Multiple Vendor LibTIFF 3.9.2 Stack Buffer Overflow Vulnerability
  • From: iDefense Labs
• Secunia Research: TaskFreak "tznMessage" Cross-Site Scripting Vulnerability
  • From: Secunia Research
• Secunia Research: TaskFreak "password" SQL Injection Vulnerability
  • From: Secunia Research
• Extended deadline, Call for Papers EC2ND 2010
  • From: Konrad Rieck