Bugtraq

• Thread Index

• Re: Vulnerability in CB Captcha for Joomla and Mambo
  • From: Susan Bradley
• [ MDVSA-2010:075 ] openoffice.org
  • From: security
• [USN-890-6] CMake vulnerabilities
  • From: Jamie Strandboge
• Hackproofing Oracle Financials 11i & R12
  • From: Joxean Koret
• Re: Vulnerability in CB Captcha for Joomla and Mambo
  • From: Susan Bradley
• [USN-929-1] irssi vulnerabilities
  • From: Jamie Strandboge
• [ MDVSA-2010:074 ] kdebase
  • From: security
• [SECURITY] [DSA 2033-1] New ejabberd packages fix denial of service
  • From: Sébastien Delafond
• [USN-928-1] Sudo vulnerability
  • From: Jamie Strandboge
• Re: Vulnerability in CB Captcha for Joomla and Mambo
  • From: nant
• ZDI-10-076: Apple Preview libFontParser SpecialEncoding Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• Nucleus CMS v.3.51 (DIR_LIBS) Multiple Vulnerability
  • From: eidelweiss
• ZDI-10-072: Cisco Secure Desktop CSDWebInstaller ActiveX Control Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• VUPEN Security Research - Adobe Acrobat and Reader GIF Data Buffer Overflow Vulnerability
  • From: VUPEN Web Research
• VUPEN Security Research - Adobe Acrobat and Reader JPEG Data Buffer Overflow Vulnerability
  • From: VUPEN Web Research
• [CVE-2010-0432] Apache OFBiz Multiple XSS Vulnerabilities
  • From: Jacopo Cappellato
• Vulnerability in CB Captcha for Joomla and Mambo
  • From: MustLive
• Cisco Security Advisory: Cisco Secure Desktop ActiveX Control Code Execution Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• [DSECRG-09-049] IBM BladeCenter Management Module - DoS vulnerability
  • From: Alexandr Polyakov
• [DSecRG-09-053] VMware Remoute Console - format string
  • From: Alexandr Polyakov
• VUPEN Security Research - Adobe Acrobat and Reader BMP Data Buffer Overflow Vulnerability
  • From: VUPEN Web Research
• VUPEN Security Research - Adobe Acrobat and Reader PNG Data Buffer Overflow Vulnerability
  • From: VUPEN Web Research
• VUPEN Web Security Research - WebAsyst Shop-Script Multiple Input Validation Vulnerabilities
  • From: VUPEN Web Research
• [ MDVSA-2010:073 ] cups
  • From: security
• Ziggurat CMS Multiple Vulnerabilities
  • From: info
• [ MDVSA-2010:073-1 ] cups
  • From: security
• ZDI-10-070: Microsoft Windows Media Player Codec Retrieval Dangling Pointer Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [security bulletin] HPSBUX02517 SSRT100058 rev.1 - HP-UX Running OpenSSL, Remote Unauthorized Information Disclosure, Unauthorized Data Modification, Denial of Service (DoS)
  • From: security-alert
• 60cycleCMS (DOCUMENT_ROOT) Multiple Local File Inclusion Vulnerability
  • From: eidelweiss
• Cert-Lexsi - Microsoft Windows Media Services MMS Buffer Overflow Vulnerability
  • From: Fabien PERIGAUD
• [ MDVSA-2010:070 ] firefox
  • From: security
• [ MDVSA-2010:071 ] krb5
  • From: security
• [ MDVSA-2010:072 ] cups
  • From: security
• ZDI-10-069: Microsoft Office Publisher File Conversion TextBox Processing Buffer Overflow Vulnerability
  • From: ZDI Disclosures
• RJ-iTop Network Vulnerability Scanner System Multiple SQL Injection Vulnerabilities
  • From: wsn1983
• ZDI-10-074: Sun Microsystems Directory Server Enterprise ASN.1 Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• Secunia Research: Visualization Library DAT File Parsing Vulnerabilities
  • From: Secunia Research
• ZDI-10-075: Sun Microsystems Directory Server Enterprise DSML UTF-8 Denial of Service Vulnerability
  • From: ZDI Disclosures
• ZDI-10-071: Adobe Reader TrueType Font Handling Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-073: Sun Microsystems Directory Server DSML-over-HTTP Username Search Denial of Service Vulnerability
  • From: ZDI Disclosures
• Unauthenticated Filesystem Access in iomega Home Media Network Hard Drive
  • From: fizix610
• Micropoint Proactive Denfense Mp110013.sys <= 1.3.10123.0 Local Privilege Escalation Exploit
  • From: dlrow1991
• Imperva SecureSphere Web Application Firewall and Database Firewall Bypass Vulnerability
  • From: Clear Skies Security
• Advisory 02/2010: MyBB Password Reset Weak Random Numbers Vulnerability
  • From: Stefan Esser
• Advisory 01/2010: MyBB Password Reset Email BCC: Injection Vulnerability
  • From: Stefan Esser
• Vana CMS Remote File Download
  • From: info
• Insufficient Anti-automation and Denial of Service vulnerabilities in multiple systems
  • From: MustLive
• ACROS Security: Remote Binary Planting in VMware Tools for Windows (ASPR #2010-04-12-1)
  • From: ACROS Lists
• ACROS Security: Local Binary Planting in VMware Tools for Windows (ASPR #2010-04-12-2)
  • From: ACROS Lists
• [security bulletin] HPSBPI02398 SSRT080166 rev.5 - Certain HP LaserJet Printers, HP Color LaserJet Printers, and HP Digital Senders, Remote Unauthorized Access to Files
  • From: security-alert
• iDefense Security Advisory 04.09.10: VMware VMnc Codec Heap Overflow Vulnerability
  • From: iDefense Labs
• [USN-920-1] Firefox 3.0 and Xulrunner vulnerabilities
  • From: Jamie Strandboge
• CVE-2009-4509: TANDBERG VCS Authentication Bypass
  • From: Timothy D. Morgan
• CVE-2009-4510: TANDBERG VCS Static SSH Host Keys
  • From: VSR Advisories
• CVE-2009-4511: TANDBERG VCS Arbitrary File Retrieval
  • From: VSR Advisories
• Vulnerabilities in CMS SiteLogic
  • From: MustLive
• [SECURITY] [DSA 2031-1] New krb5 packages fix denial of service
  • From: Giuseppe Iuculano
• [USN-927-2] NSS regression
  • From: Jamie Strandboge
• [SECURITY] [DSA 2032-1] New libpng packages fix several vulnerabilities
  • From: Giuseppe Iuculano
• HITBSecConf DUBAI 2010: Learn more about web attacks and stealth hacking
  • From: Laurent OUDOT at TEHTRI-Security
• [USN-927-1] NSS vulnerability
  • From: Jamie Strandboge
• [USN-921-1] Firefox 3.5 and Xulrunner vulnerabilities
  • From: Jamie Strandboge
• Re: Vulnerabilities in phpCOIN
  • From: Susan Bradley
• [USN-927-3] Thunderbird regression
  • From: Jamie Strandboge
• AneCMS Multiple Vulnerabilities
  • From: admin
• VUPEN Security Research - VMware Products Movie Decoder Heap Overflow Vulnerability
  • From: VUPEN Security Research
• Re: Vulnerabilities in Dunia Soccer
  • From: Susan Bradley
• Secunia Research: VMWare VMnc Codec HexTile Encoding Buffer Overflow
  • From: Secunia Research
• Secunia Research: VMWare VMnc Codec HexTile Encoding Two Integer Truncation Vulnerabilities
  • From: Secunia Research
• Re: Vulnerabilities in Dunia Soccer
  • From: MustLive
• WinSoftMagic Photo Editor .PNG File Buffer Overflow
  • From: eidelweiss
• Vulnerabilities in phpCOIN
  • From: MustLive
• JAVA web start arbitrary command-line injection - "-XXaltjvm" arbitrary dll loading (0day)
  • From: Reversemode
• ZDI-10-068: Apple QuickTime H.263 Array Index Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [USN-624-2] Erlang vulnerability
  • From: Jamie Strandboge
• VMSA-2010-0007 VMware hosted products, vCenter Server and ESX patches resolve multiple security issues
  • From: VMware Security team
• Secunia Research: Pulse CMS Cross-Site Request Forgery
  • From: Secunia Research
• [USN-926-1] ClamAV vulnerabilities
  • From: Jamie Strandboge
• Secunia Research: Pulse CMS Arbitrary File Upload Vulnerability
  • From: Secunia Research
• Re: Vulnerabilities in Dunia Soccer
  • From: Susan Bradley
• [USN-925-1] MoinMoin vulnerabilities
  • From: Jamie Strandboge
• Vulnerabilities in CMS SiteLogic
  • From: MustLive
• TCPDF Library Remote Code Execution Vulnerability
  • From: Matthias -apoc- Hecker
• DeepSec 2010 - Call for Papers and Experts
  • From: DeepSec Conference
• [HITB-Announce] FINAL CALL - CFP for HITBSecConf2010 Amsterdam
  • From: Hafez Kamal
• Vulnerabilities in Dunia Soccer
  • From: MustLive
• [USN-924-1] Kerberos vulnerabilities
  • From: Kees Cook
• [USN-923-1] OpenJDK vulnerabilities
  • From: Kees Cook
• [ MDVSA-2010:069 ] nss
  • From: security
• CORE-2010-0323: XSS Vulnerability in NextGEN Gallery Wordpress Plugin
  • From: CORE Security Technologies Advisories
• ZDI-10-067: Apple QuickTime Pict BkPixPat Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [SECURITY] [DSA 2030-1] New mahara packages fix sql injection
  • From: Nico Golde
• ZDI-10-066: CA XOsoft Control Service entry_point.aspx Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• MITKRB5-SA-2010-003 [CVE-2010-0629] denial of service in kadmind in older krb5 releases
  • From: Tom Yu
• ZDI-10-065: CA XOsoft xosoapapi.asmx Multiple Remote Code Execution Vulnerabilities
  • From: ZDI Disclosures
• CA20100406-01: Security Notice for CA XOsoft
  • From: Kotas, Kevin J
• Hack.lu 2010 CfP
  • From: info
• Miranda TLS MitM with XMPP/Jabber protocol
  • From: Jan Schejbal
• [SECURITY] [DSA 2029-1] New imlib2 packages fix arbitrary code execution
  • From: Nico Golde
• ZDI-10-063: Mozilla Firefox Cross Document DOM Node Moving Code Execution Vulnerability
  • From: ZDI Disclosures
• Vulnerabilities in TAK cms
  • From: MustLive
• ZDI-10-062: Novell Netware NWFTPD RMD/RNFR/DELE Argument Parsing Remote Code Execution Vulnerabilities
  • From: ZDI Disclosures
• Vulnerabilities in HoloCMS
  • From: MustLive
• ZDI-10-046: Mozilla Firefox Web Worker Array Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [SECURITY] [DSA 2028-1] New xpdf packages fix several vulnerabilities
  • From: Luciano Bello
• ZDI-10-057: Sun Java Runtime Environment JPEGImageDecoderImpl Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-059: Sun Java Runtime Environment JPEGImageEncoderImpl Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-055: Sun Java Runtime Environment Mutable InetAddress Socket Policy Violation Vulnerability
  • From: ZDI Disclosures
• ZDI-10-052: Sun Java Runtime Environment XNewPtr Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-058: Apple Mac OS X ImageIO Framework JPEG2000 Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• Re: DynPG CMS v4.1.0 Multiple Remote File Inclusion Vulnerability
  • From: eidelweiss
• ZDI-10-051: Sun Java Runtime RMIConnectionImpl Privileged Context Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-050: Mozilla Firefox nsTreeSelection EventListener Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-061: Sun Java Runtime CMM readMabCurveData Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-049: Mozilla Firefox PluginArray nsMimeType Dangling Pointer Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-048: Mozilla Firefox nsTreeContentView Dangling Pointer Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-054: Sun Java Runtime Environment JPEGImageReader stepX Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-060: Sun Java Runtime Environment MixerSequencer Invalid Array Index Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-047: Mozilla Firefox libpr0n imgContainer Bits-Per-Pixel Change Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-053: Sun Java Runtime Environment MIDI File metaEvent Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-056: Sun Java Runtime Environment Trusted Methods Chaining Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-045: Apple QuickTime MPEG-1 genl Atom Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• Apple Safari <= Tag (heap spray) Remote Buffer Overflow Exploit (osX)
  • From: eidelweiss
• [SECURITY] [DSA 2027-1] New xulrunner packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• [security bulletin] HPSBMA02490 SSRT090222 rev.2 - HP SOA Registry Foundation, Remote Unauthorized Access to Data, Cross Site Scripting (XSS), Privilege Escalation
  • From: security-alert
• ZDI-10-044: Apple QuickTime FLI LinePacket Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-043: Apple QuickTime FlashPix NumberOfTiles Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-042: Apple QuickTime MediaVideo Compressor Name Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-041: Apple QuickTime QDM2/QDCA Atom Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-040: Apple QuickTime RLE Bit Depth Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-039: Apple OS X Internet Enabled Disk Image Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-038: Apple QuickTime QDMC/QDM2 Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-037: Apple QuickTime MJPEG Sample Dimensions Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-036: Apple QuickTime H.263 PictureHeader Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-035: Apple QuickTime genl Atom Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-034: Microsoft Internet Explorer Tabular Data Control ActiveX Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-033: Microsoft Internet Explorer TIME2 Behavior Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [SECURITY] [DSA 2026-1] New netpbm-free packages fix denial of service
  • From: Giuseppe Iuculano
• Vulnerability Centreon IT & Network Monitoring v2.1.5
  • From: Mehdi Mahdjoub - Sysdream IT Security Services
• VMSA-2010-0006 ESX Service Console updates for samba and acpid
  • From: VMware Security Team
• Juniper SRX Critical Denial of Service Vulnerability
  • From: J. Oquendo
• VUPEN Security Research - Apple Quicktime PICT Handling Heap Overflow Vulnerability
  • From: VUPEN Security Research
• DynPG CMS v4.1.0 Multiple Remote File Inclusion Vulnerability
  • From: eidelweiss
• VUPEN Security Research - Sun Java JDK/JRE AWT Library Invalid Index Vulnerability
  • From: VUPEN Security Research
• CSRF Vulnerability in OSSIM 2.2.1
  • From: nicolas . grandjean
• Zabbix <= 1.8.1 SQL Injection
  • From: Dawid Golunski
• VUPEN Security Research - Sun Java JDK/JRE AWT Library Invalid Pointer Vulnerability
  • From: VUPEN Security Research
• VUPEN Security Research - Apple Quicktime FLC Encoded Movie Heap Overflow Vulnerability
  • From: VUPEN Security Research
• VUPEN Security Research - Sun Java JDK/JRE Unpack200 Buffer Overflow Vulnerability
  • From: VUPEN Security Research
• VUPEN Security Research - Apple Quicktime PICT Processing Integer Overflow Vulnerability
  • From: VUPEN Security Research
• VUPEN Security Research - Apple iTunes ColorSync Profile Integer Overflow Vulnerability
  • From: VUPEN Security Research
• [USN-922-1] libnss-db vulnerability
  • From: Kees Cook
• [SECURITY] CVE-2008-2370: Apache CouchDB Timing Attack Vulnerability
  • From: Jan Lehnardt
• iDefense Security Advisory 03.30.10: Oracle Java Runtime Environment Image FIle Buffer Overflow Vulnerability
  • From: iDefense Labs
• BitComet <= 1.19 Remote DOS Exploit
  • From: Pierre Noguès
• [SECURITY] [DSA 2024-1] New moin packages fix cross-site scripting
  • From: Giuseppe Iuculano
• [Suspected Spam]Vulnerabilities in NoCMS
  • From: MustLive
• Secunia Research: Sun Java JDK/JRE Soundbank Resource Name Buffer Overflow
  • From: Secunia Research
• OpenDcHub 0.8.1 Remote Code Execution Exploit
  • From: Pierre Noguès
• [SECURITY] [DSA 2025-1] New icedove packages fix several vulnerabilities
  • From: Steffen Joeris
• Trustwave's SpiderLabs Security Advisory TWSL2010-002
  • From: Trustwave Advisories
• Elevation of Privilege Vulnerability in iTunes for Windows
  • From: jason
• Multiple XSS vulnerabilities in OSSIM 2.2.1
  • From: nicolas . grandjean
• Secunia Research: Sun Java JDK/JRE Soundbank Resource Parsing Buffer Overflow
  • From: Secunia Research
• [SECURITY] CVE-2008-2370: Apache CouchDB Timing Attack Vulnerability
  • From: Jan Lehnardt
• [security bulletin] HPSBOV02506 SSRT090244 rev.1 - HP Secure Web Server for OpenVMS (based on Apache) CSWS, Remote Denial of Service (DoS), Unauthorized Disclosure of Information, Unauthorized Modification of Information
  • From: security-alert
• iDefense Security Advisory 03.30.10: Microsoft Internet Explorer 'onreadystatechange' Use After Free Vulnerability
  • From: iDefense Labs
• CVE-2010-0684: Apache ActiveMQ Persistent Cross-Site Scripting (XSS) Vulnerability
  • From: rajat swarup
• VMSA-2010-0005 VMware products address vulnerabilities in WebAccess
  • From: VMware Security Team
• OXID eShop Enterprise: Session Fixation and XSS Vulnerabilities
  • From: michael . mueller
• Secunia Research: ViewVC Regular Expression Search Cross-Site Scripting
  • From: Secunia Research
• [security bulletin] HPSBMA02513 SSRT090110 rev.1 - Insight Control for Linux (IC-Linux) Remote Execution of Arbitrary Code, Local Unauthorized Elevation of Privilege
  • From: security-alert
• [security bulletin] HPSBMA02490 SSRT090222 rev.1 - HP SOA Registry Foundation, Remote Unauthorized Access to Data, Cross Site Scripting (XSS), Privilege Escalation
  • From: security-alert
• [security bulletin] HPSBUX02514 SSRT100010 rev.1 - HP-UX running AudFilter rules enabled, Local Denial of Service (DoS)
  • From: security-alert
• Re: [Full-disclosure] Medium security hole in Varnish reverse proxy
  • From: Tim Brown
• [USN-919-1] Emacs vulnerability
  • From: Kees Cook
• Joomla Component com_weblinks Sql Injection Vulnerability
  • From: info
• Re: [Full-disclosure] Medium security hole in Varnish reverse proxy
  • From: John Adams
• Joomla Component com_xmap Sql Injection Vulnerability
  • From: info
• XSS vulnerability in easy page cms
  • From: info
• Vulnerabilities in MiniManager for Project MANGOS
  • From: MustLive
• [ MDVSA-2010:068 ] php
  • From: security
• Remote buffer overflow in aircrack-ng causes DOS and possible code execution
  • From: Lukas Lueg
• SQL Injection Vulnerabilitie in PhotoPost vBGallery 2.5
  • From: Andreas Kirbach
• [ MDVSA-2010:068 ] php
  • From: security
• [security bulletin] HPSBOV02497 SSRT090245 rev.2 - HP TCP/IP Services for OpenVMS Running NTP, Remote Execution of Arbitrary Code, Denial of Service (DoS)
  • From: security-alert
• Exploiting nano
  • From: Dan Rosenberg
• Medium security hole in Varnish reverse proxy
  • From: Tim Brown
• London DEFCON March meet - DC4420 - Wednesday March 31st 2010
  • From: Major Malfunction
• [ MDVSA-2010:068 ] php
  • From: security
• [SECURITY] [DSA 2023-1] New curl packages fix arbitrary code execution
  • From: Steffen Joeris
• {PRL} Novell Netware FTP Remote Stack Overflow
  • From: Francis Provencher
• Vulnerabilities in ArcManager
  • From: MustLive
• [security bulletin] HPSBUX02509 SSRT100032 rev.1 - HP-UX Running NFS/ONCplus, NFS Inadvertently Enabled
  • From: security-alert
• Vulnerabilities in TooFAST
  • From: MustLive
• [ MDVSA-2010:067 ] kernel
  • From: security
• Hackito Ergo Sum Conference (Paris 8-10 April 2010) : Schedule
  • From: Jonathan Brossard
• Re: Vulnerabilities in WeBAM
  • From: Salvatore Fresta aka Drosophila
• Multiple Vulnerabilities in EASY Enterprise DMS
  • From: michael . mueller
• There is a Permanent-type Cross-Site Vulnerability in “Personal Signature” in all version of Discuz!. It can be written by the worm!
  • From: lis cker
• Ruxcon 2010 Call For Papers
  • From: cfp
• [security bulletin] HPSBUX02508 SSRT100007 rev.1 - HP-UX Running sendmail with STARTTLS Enabled, Remote Unauthorized Access
  • From: security-alert
• [security bulletin] HPSBMA02436 SSRT080064 rev.1 - HP Project and Portfolio Management Center (PPMC), Remote Cross Site Scripting (XSS)
  • From: security-alert
• [ MDVSA-2010:066 ] kernel
  • From: security
• Vulnerabilities in WeBAM
  • From: MustLive
• Cisco Security Advisory: Cisco IOS Software Session Initiation Protocol Denial of Service Vulnerabilities
  • From: Cisco Systems Product Security Incident Response Team
• Symlink attack with Solaris Update manager and Sun Patch Cluster
  • From: bugs
• Multiple vulnerabilities in Deliver
  • From: Dan Rosenberg
• [USN-917-1] Puppet vulnerabilities
  • From: Marc Deslauriers
• Secunia Research: Pulse CMS Arbitrary File Deletion Vulnerability
  • From: Secunia Research
• Cisco Security Advisory: Cisco IOS Software IPsec Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco IOS Software NAT Skinny Call Control Protocol Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Secunia Research: Pulse CMS login.php Arbitrary File Writing Vulnerability
  • From: Secunia Research
• Symlink attack with Solaris Update manager
  • From: bugs
• [SECURITY] [DSA 2022-1] New mediawiki packages fix several vulnerabilities
  • From: Nico Golde
• Secunia Research: Pulse CMS Arbitrary File Writing Vulnerability
  • From: Secunia Research
• [USN-918-1] Samba vulnerability
  • From: Marc Deslauriers
• "$referer" export lead to the cross-site flaws in all versions of Discuz!
  • From: lis cker
• [USN-916-1] Kerberos vulnerabilities
  • From: Kees Cook
• CVE-2009-2907: SpringSource Hyperic HQ multiple XSS vulnerabilities
  • From: s2-security
• [HITB-Announce] HITBSecConf2009 - Malaysia Videos Released! *Correction*
  • From: Hafez Kamal
• CVE-2009-4505 OpenCMS OAMP Comments Module XSS
  • From: Cyrill Brunschwiler
• Vulnerabilities in WordPress
  • From: MustLive
• Insecure SMS authorization scheme at LiqPAY micro-payments of PrivatBank (Ukraine)
  • From: Andriy Tereshchenko
• {PRL} Lexmark Multiple Laser printer FTP Remote Denial of Services
  • From: Francis Provencher
• Internet Explorer 7.0 0day Vulnerability
  • From: k4mr4n_St
• Re: Firefox 3.6 for Windows includes a forged CA cert
  • From: Marcus Meissner
• [CORELAN-10-015] - Remote Help 0.0.7 Httpd DoS (Format String)
  • From: Security
• Aris AGX agXchange ESM Cross Site Scripting Vulnerability
  • From: lament
• Safari browser port blocking bypassed by integer overflow
  • From: Gary Niger
• MITKRB5-SA-2010-002 denial of service in SPNEGO [CVE-2010-0628 VU#839413]
  • From: Tom Yu
• [ MDVSA-2010:065 ] cpio
  • From: security
• Vulnerabilities in CaptchaSecurityImages
  • From: MustLive
• [HITB-Announce] HITBSecConf2009 - Malaysia Videos Released!
  • From: Hafez Kamal
• Re: Vulnerability Astaro Security Linux v5
  • From: Akos Szalkai
• Re: Vulnerability Astaro Security Linux v5
  • From: jdaniel
• Re: IE 6.0 - Local Crash Exploit
  • From: Veg
• MX Simulator Server 2010-02-06 Remote Buffer Overflow PoC
  • From: Salvatore Fresta aka Drosophila
• [DSECRG-09-064] SAP GUI - Insecure method, code execution
  • From: Alexandr Polyakov
• Vulnerability Astaro Security Linux v5
  • From: Mehdi Mahdjoub - Sysdream IT Security Services
• IE 6.0 - Local Crash Exploit
  • From: info
• [SECURITY] [DSA 2021-1] New spamass-milter packages fix remote command execution
  • From: Giuseppe Iuculano
• Re: Firefox 3.6 for Windows includes a forged CA cert
  • From: Mike Duncan
• REMINDER: Month of PHP Security 2010 - CALL FOR PAPERS - Only 3 weeks left
  • From: Stefan Esser
• Re: Firefox 3.6 for Windows includes a forged CA cert
  • From: dveditz
• Re: Firefox 3.6 for Windows includes a forged CA cert
  • From: adam
• [ MDVSA-2010:064 ] libpng
  • From: security
• [ MDVSA-2010:063 ] libpng
  • From: security
• {PRL} Lexmark Multiple Laser Printer Remote Stack Overflow
  • From: Francis Provencher
• CFP - GameSec 2010 - Conference on Decision and Game Theory for Security
  • From: Albert Levi
• [SECURITY] [DSA 2020-1] New ikiwiki packages fix cross-site scripting
  • From: Nico Golde
• [ MDVSA-2010:062 ] curl
  • From: security
• [SECURITY] [DSA-2019-1] New pango1.0 packages fix denial of service
  • From: Giuseppe Iuculano
• IBM Lotus 6.x names.nsf Cross Site Scripting Vulnerability
  • From: lament
• Firefox 3.6 for Windows includes a forged CA cert
  • From: Francis Litterio
• Aris AGX agXchange ESM Open Redirection Vulnerability
  • From: lament
• Vulnerability Httpdx v1.5.3b
  • From: Mehdi Mahdjoub - Sysdream IT Security Services
• [USN-915-1] Thunderbird vulnerabilities
  • From: Marc Deslauriers
• announcing skipfish, an automated web app security scanner
  • From: Michal Zalewski
• IBM Lotus 6.x HTTP Response Splitting Vulnerability
  • From: lament
• [SECURITY] [DSA-2018-1] New php5 packages fix null pointer dereference
  • From: Raphael Geissert
• There are lost of xss vul in PHPWind v6.0 !
  • From: lis cker
• CA20100318-01: Security Notice for CA ARCserve Backup
  • From: Kotas, Kevin J
• Sahana 0.6.2.2 Authentication Bypass
  • From: Christopher
• Secunia Research: Quicksilver Forums "mysqldump" Password Disclosure
  • From: Secunia Research
• Secunia Research: Quicksilver Forums Cross-Site Request Forgery Vulnerability
  • From: Secunia Research
• Secunia Research: Quicksilver Forums Backup Information Disclosure
  • From: Secunia Research
• Miranda IM silent TLS failure
  • From: Jan Schejbal
• Vulnerabilities in VXDate for Joomla
  • From: MustLive
• [CORELAN-10-13] - Windisc Local Stack BOF
  • From: Security
• [security bulletin] HPSBGN02511 SSRT100022 rev.2 - HP Small Form Factor or Microtower PC with Broadcom Integrated NIC Firmware, Remote Execution of Arbitrary Code
  • From: security-alert
• CORE-2010-0311 - eFront-learning PHP file inclusion vulnerability
  • From: CORE Security Technologies Advisories
• CORE-2009-0803: Virtual PC Hypervisor Memory Protection Vulnerability
  • From: CORE Security Technologies Advisories
• [USN-913-1] libpng vulnerabilities
  • From: Marc Deslauriers
• ZDI-10-030: Apple WebKit CSS run-in Attribute Rendering Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• Last Call for Papers, CONFidence 2010, 25-26May, Last Call for Papers
  • From: Andrzej Targosz
• rPSA-2010-0018-1 bind bind-utils caching-nameserver
  • From: rPath Update Announcements
• [SECURITY] [DSA 2017-1] New pulseaudio packages fix insecure temporary directory
  • From: Giuseppe Iuculano
• ZDI-10-032: SAP MaxDB Malformed Handshake Request Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [USN-912-1] Audio File Library vulnerability
  • From: Marc Deslauriers
• ZDI-10-031: Apple Webkit Blink Event Dangling Pointer Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• SugarCRM Stored XSS vulnerability
  • From: Jeromie Jackson
• rPSA-2010-0022-1 sendmail sendmail-cf
  • From: rPath Update Announcements
• Vulnerability httpdx v1.5.3
  • From: Mehdi Mahdjoub - Sysdream IT Security Services
• QuickZip 0day detailed write-up
  • From: Security
• Re: ZoneAlarm Security Circumvention
  • From: Ansgar Wiechers
• ZDI-10-029: Apple WebKit innerHTML element Substitution Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• New vulnerabilities in Abton
  • From: MustLive
• ZoneAlarm 9 (ForceField) Security Disclosure
  • From: Andrew Barkley
• Multiple DOM-Based XSS in Dojo Toolkit SDK
  • From: labs
• PlumberCon 10 - Call for Papers
  • From: astera
• CVE-2010-0188 Exploit Code
  • From: villys777
• ...because you can't get enough of clickjacking
  • From: Michal Zalewski
• [SECURITY] [DSA 2016-1] New drupal6 packages fix several vulnerabilities
  • From: Giuseppe Iuculano
• Zigurrat CMS SQL Injection Vulnerability
  • From: faghani
• Pars CMS SQL Injection Vulnerability
  • From: faghani
• Vulnerability in phpAdsNew, OpenAds and OpenX
  • From: MustLive
• [HITB-Announce] HITBSecConf2010 - Dubai Agenda Released
  • From: Hafez Kamal
• Sun Java System Communication Express CSRF via HPP
  • From: edgard . chammas
• Ananta Gazelle SQL Injection Vulnerability
  • From: admin
• [Tool] sqlmap 0.8 released
  • From: Bernardo Damele A. G.
• SyScan'10 CFP
  • From: thomas@xxxxxxxxxx
• ZDI-10-027: Skype Protocol Handler datapath Argument Injection Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• VUPEN Security Research - Apple Safari ColorSync Profile Integer Overflow Vulnerability
  • From: VUPEN Security Research
• ZDI-10-028: Skype URI Processing Arbitrary XML File Deletion Vulnerability
  • From: ZDI Disclosures
• [SECURITY] [DSA 2012-1] New Linux 2.6.26 packages fix several issues
  • From: dann frazier
• [SECURITY] [DSA 2013-1] New egroupware packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• iDefense Security Advisory 03.11.10: Multiple Vendor WebKit HTML Element Use After Free Vulnerability
  • From: iDefense Labs
• [USN-911-1] MoinMoin vulnerabilities
  • From: Jamie Strandboge
• [ MDVSA-2010:061 ] ncpfs
  • From: security
• [XSS] I found a xss in phpmyadmin 3.3.0 when we create new database in interface!
  • From: lis cker
• [SECURITY] [DSA 2014-1] New moin packages fix several vulnerabilities
  • From: Giuseppe Iuculano
• Vulnerabilities in Abton
  • From: MustLive
• Multiple vulnerabilities in SUPERAntiSpyware and Super Ad Blocker
  • From: Luka Milkovic
• [USN-909-1] dpkg vulnerability
  • From: Kees Cook
• [SECURITY] [DSA 2011-1] New dpkg packages fix path traversal
  • From: Nico Golde
• [ MDVSA-2010:060 ] squid
  • From: security
• Skype URI Handler Input Validation
  • From: Paul Craig
• Friendly-Tech FriendlyTR69 CPE Remote Management V2.8.9 SQL Injection Vulnerability
  • From: lament
• CVE-2010-0624: Heap-based buffer overflow in GNU Tar and GNU Cpio
  • From: Jakob Lell
• [SECURITY] [DSA-2010-1] New kvm packages fix several vulnerabilities
  • From: dann frazier
• iDefense Security Advisory 03.09.10: Microsoft Excel MDXTUPLE Record Heap Overflow Vulnerability
  • From: iDefense Labs
• [SECURITY] [DSA 2009-1] New tdiary packages fix cross-site scripting
  • From: Steffen Joeris
• [USN-908-1] Apache vulnerabilities
  • From: Marc Deslauriers
• Secunia Research: XnView DICOM Parsing Integer Overflow Vulnerability
  • From: Secunia Research
• [ MDVSA-2010:059 ] virtualbox
  • From: security
• iDefense Security Advisory 03.09.10: Microsoft Excel MDXSET Record Heap Overflow Vulnerability
  • From: iDefense Labs
• Secunia Research: Employee Timeclock Software Backup Information Disclosure
  • From: Secunia Research
• iDefense Security Advisory 03.09.10: Microsoft Excel Sheet Object Type Confusion Vulnerability
  • From: iDefense Labs
• Vulnerabilities in Hydra Engine
  • From: MustLive
• VUPEN Security Research - Microsoft Office Excel Record Processing Code Execution Vulnerability
  • From: VUPEN Security Research
• Secunia Research: Employee Timeclock Software "mysqldump" Password Disclosure
  • From: Secunia Research
• [ MDVSA-2010:058 ] php
  • From: security
• CORE-2009-1103: Microsoft Office Excel DbOrParamQry Record Parsing Vulnerability
  • From: CORE Security Technologies Advisories
• CORE-2009-0813: Windows Movie Maker and Microsoft Producer IsValidWMToolsStream() Heap Overflow
  • From: CORE Security Technologies Advisories
• Secunia Research: Employee Timeclock Software SQL Injection Vulnerabilities
  • From: Secunia Research
• iDefense Security Advisory 03.09.10: Microsoft Excel FNGROUPNAME Record Uninitialized Memory Vulnerability
  • From: iDefense Labs
• [xss] a xss on "threadid" parameter in BBSMAX
  • From: lis cker
• ZDI-10-026: Hewlett-Packard OVPI helpmanager Servlet Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-025: Microsoft Office Excel XLSX File Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [security bulletin] HPSBMA02489 SSRT090065 rev.1 - HP Performance Insight , Remote Execution of Arbitrary Commands
  • From: security-alert
• Re: Apple Airport Wireless Products: Promiscuous FTP PORT Allowed in FTP Proxy Provides Security Bypass
  • From: Sabahattin Gucukoglu
• Croogo CMS 1.2 Cross Site Scripting Vulnerabilities
  • From: Paulino Calderon
• [SECURITY] [DSA 2008-1] New typo3-src packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• IBM ENOVIA SmarTeam v5 Cross Site Scripting Vulnerability
  • From: lament
• SQL injection vulnerability in wILD CMS
  • From: Maciej Gojny
• [ MDVSA-2010:057 ] apache
  • From: security
• Re: phpinfo() XSS Vulnerability
  • From: Salvatore Fresta aka Drosophila
• rPSA-2010-0013-1 gzip
  • From: rPath Update Announcements
• ZoneAlarm Security Circumvention
  • From: Andrew Barkley
• [USN-907-1] gnome-screensaver vulnerabilities
  • From: Marc Deslauriers
• rPSA-2010-0014-1 mysql mysql-bench mysql-server
  • From: rPath Update Announcements
• rPSA-2010-0012-1 postgresql postgresql-contrib postgresql-server
  • From: rPath Update Announcements
• rPSA-2010-0011-1 gnome-ssh-askpass openssh openssh-client openssh-server
  • From: rPath Update Announcements
• "Writing JIT-Spray Shellcode for fun and profit" by DSecRG
  • From: DSecRG
• [XSS] i found a xss on "page" parameter in "eccredit.php" in Dvbbs < 8.3.0
  • From: lis cker
• phpinfo() XSS Vulnerability
  • From: info
• Re: Apple Airport Wireless Products: Promiscuous FTP PORT Allowed in FTP Proxy Provides Security Bypass
  • From: drstrangep0rk
• [xss] a xss on "action" parameter in BBSMAX
  • From: lis cker
• Apache mod_isapi Dangling Pointer Vulnerability - Security Advisory - SOS-10-002
  • From: Lists
• [ MDVSA-2010:056 ] openoffice.org
  • From: security
• [ MDVSA-2010:055 ] poppler
  • From: security
• Re: ncpfs, Multiple Vulnerabilities
  • From: dan . j . rosenberg
• ncpfs, Multiple Vulnerabilities
  • From: Dan Rosenberg
• Call for Papers: EC2ND 2010
  • From: Konrad Rieck
• SQL injection vulnerability in Natychmiast CMS
  • From: Maciej Gojny
• Juniper SA Series Cross Site Scripting Issue
  • From: Security Lists NL
• Re: Todd Miller Sudo local root exploit discovered by Slouching
  • From: Steve Shockley
• iDefense Security Advisory 03.04.10: Autonomy KeyView OLE Document Integer Overflow Vulnerability
  • From: iDefense Labs
• [ MDVSA-2010:054 ] pam_krb5
  • From: security
• [xss] a xss on "ThreadID" parameter in BBSXP 2008 from china
  • From: lis cker
• CA20100304-01: Security Notice for CA SiteMinder
  • From: Williams, James K
• fcrontab Information Disclosure Vulnerability
  • From: Dan Rosenberg
• Unspecified EMC Documentum Remote Code Execution Vulnerability
  • From: dr_ch1na
• Open redirection vulnerability in the Drupal API function drupal_goto (Drupal 6.15 and 5.21)
  • From: Martin Barbella
• Apple Airport Wireless Products: Promiscuous FTP PORT Allowed in FTP Proxy Provides Security Bypass
  • From: Sabahattin Gucukoglu
• NSOADV-2010-006: Authentium Command Free Scan ActiveX Control buffer overflow
  • From: NSO Research
• IETF effort: Security Assesment of the Internet Protocol
  • From: Fernando Gont
• Re: Re: Todd Miller Sudo local root exploit discovered by Slouching
  • From: noone
• VMSA-2010-0004 ESX Service Console and vMA third party updates
  • From: VMware Security Team
• [SECURITY] [DSA 2007-1] New cups packages fix arbitrary code execution
  • From: Nico Golde
• [USN-906-1] CUPS vulnerabilities
  • From: Marc Deslauriers
• CORRECTION: CORE-2009-0913 - Luxology Modo 401 .LXO Integer Overflow
  • From: CORE Security Technologies Advisories
• Re: Todd Miller Sudo local root exploit discovered by Slouching
  • From: Jann Horn
• Cisco Security Advisory: Cisco Digital Media Player Remote Display Unauthorized Content Injection Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco Digital Media Manager
  • From: Cisco Systems Product Security Incident Response Team
• [ GLSA 201003-01 ] sudo: Privilege escalation
  • From: Alex Legler
• Re: Todd Miller Sudo local root exploit discovered by Slouching
  • From: Kingcope
• Re: Todd Miller Sudo local root exploit discovered by Slouching
  • From: andy
• Re: NSOADV-2010-004: McAfee LinuxShield remote/local code execution
  • From: NSO Research
• RE: NSOADV-2010-004: McAfee LinuxShield remote/local code execution
  • From: Veal, Richard
• Cisco Security Advisory: Cisco Unified Communications Manager Denial of Service Vulnerabilities
  • From: Cisco Systems Product Security Incident Response Team
• NSOADV-2010-004: McAfee LinuxShield remote/local code execution
  • From: NSO Research
• ZDI-10-024: Novell eDirectory SOAP Request Parsing Denial of Service Vulnerability
  • From: ZDI Disclosures
• Luxology Modo 401 .LXO Integer Overflow
  • From: CORE Security Technologies Advisories
• [SECURITY] [DSA 2006-1] New sudo packages fix several vulnerabilities
  • From: Giuseppe Iuculano
• [ MDVSA-2010:053 ] apache
  • From: security
• [xss] i found a Cross Site Scripting Vulnerability about Discuz! 'uid' Parameter
  • From: lis cker
• iDefense Security Advisory 03.02.10: IBM Lotus Domino Web Access ActiveX Stack Buffer Overflow Vulnerability
  • From: iDefense Labs
• Re: Circumventing Critical Security in Windows XP
  • From: Ansgar Wiechers
• Re: Re: Circumventing Critical Security in Windows XP
  • From: Jann Horn
• Eshbel Priority MarketGate module Cross Site Scripting Vulnerability
  • From: lament
• Todd Miller Sudo local root exploit discovered by Slouching
  • From: Kingcope
• Sparta Systems TrackWise TeamAccess module Multiple Cross Site Scripting Vulnerabilities
  • From: lament
• ZDI-10-023: Multiple Vendor librpc.dll Signedness Error Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [ MDVSA-2010:052 ] sudo
  • From: security
• 1024CMS Blind SQL Injection Vulnerability
  • From: admin
• ZDI-10-022: IBM Informix librpc.dll Multiple Remote Code Execution Vulnerabilities
  • From: ZDI Disclosures
• Re: Easy FTP Server 1.7.0.2 Remote BoF
  • From: Paul Makowski
• [ MDVSA-2010:051 ] mozilla-thunderbird
  • From: security
• Re: Information disclosure vulnerability in Drupal's Realname User Reference Widget contributed module (version 6.x-1.0)
  • From: mori
• [SECURITY] [DSA 2004-1] New Linux 2.6.24 packages fix several vulnerabilities
  • From: dann frazier
• [SECURITY] [DSA 2004-1] New samba packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• Oracle Siebel 7.x CRM Cross Site Scripting Vulnerability
  • From: lament
• ARISg5 (Version 5.0) Cross Site Scripting Vulnerability
  • From: lament
• CONFidence 2010 /25-26 May/, CfP
  • From: andrzej . targosz
• Re: Re: Circumventing Critical Security in Windows XP
  • From: anonym
• Month of PHP Security 2010 - CALL FOR PAPERS
  • From: Stefan Esser
• [USN-905-1] sudo vulnerabilities
  • From: Jamie Strandboge
• ARISg5 (version 5.0) cross site scripting vulnerability
  • From: Yaniv Miron
• [ MDVSA-2010:050 ] apache-mod_security
  • From: security
• getPlus insufficient domain name validation vulnerability
  • From: Akita Software Security
• AST-2010-003: Invalid parsing of ACL rules can compromise security
  • From: Asterisk Security Team
• [ MDVSA-2010:049 ] sudo
  • From: security
• SyScan'10 CALL FOR PAPERS
  • From: thomas@xxxxxxxxxx
• SQL injection vulnerability in WebAdministrator Lite CMS
  • From: Maciej Gojny
• [ MDVSA-2010:048 ] roundcubemail
  • From: security
• Form-based HTTP Authentication Proof of Concept
  • From: Timothy D. Morgan
• Hacktics Advisory Feb10: XSS in IBM WebSphere Portal & Lotus WCM
  • From: Ofer Maor
• NSOADV-2010-003: DATEV ActiveX Control remote command execution
  • From: NSO Research
• [USN-904-1] Squid vulnerability
  • From: Marc Deslauriers
• SQL injection vulnerability in LiveChatNow
  • From: Support TEAM
• Rbot Owner Reaction Command Execution
  • From: Matthias -apoc- Hecker
• ESA-2010-003: EMC HomeBase Server Arbitrary File Upload Vulnerability
  • From: Security_Alert
• iDefense Security Advisory 02.23.10: Multiple Vendor NOS Microsystems getPlus Downloader Input Validation Vulnerability
  • From: iDefense Labs
• [ MDVSA-2010:047 ] fuse
  • From: security
• ZDI-10-021: Novell NetStorage xsrvd Long Pathname Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-020: EMC HomeBase SSL Service Arbitrary File Upload Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• Kojoney (SSH honeypot) remote DoS
  • From: Nicob
• [TKADV2010-003] avast! 4.8 and 5.0 aavmker4.sys Kernel Memory Corruption
  • From: Tobias Klein
• CA20100223-01: Security Notice for CA eHealth Performance Manager
  • From: Kotas, Kevin J
• Re: Chuck Norris Botnet and Broadband Routers
  • From: Adrian P.
• VUPEN Security Research - Symantec Products "SYMLTCOM.dll" Buffer Overflow Vulnerability
  • From: VUPEN Security Research
• [ MDVSA-2010:046 ] ncpfs
  • From: security
• [ MDVSA-2010:045 ] php
  • From: security
• Chuck Norris Botnet and Broadband Routers
  • From: Gadi Evron
• Official Portal 2007 Multiple Vulnerabilities
  • From: info
• [ MDVSA-2010:043 ] libtheora
  • From: security
• Request for feedback on TCP security (IETF effort)
  • From: Fernando Gont
• [DSECRG-09-039] Symantec Antivirus 10.0 ActiveX - buffer Overflow.
  • From: Alexandr Polyakov
• ZDI-10-019: Mozilla Firefox showModalDialog Cross-Domain Scripting Vulnerability
  • From: ZDI Disclosures
• jQuery Validate 1.6.0 Demo Code Advisory
  • From: CodeScan Labs Advisories
• London DEFCON February meet - DC4420 - Wed 24th Feb 2010
  • From: Major Malfunction
• Easy FTP Server 1.7.0.2 Remote BoF
  • From: jonbutler88
• Re: Circumventing Critical Security in Windows XP
  • From: Jeroen
• [SECURITY] [DSA 2003-1] New Linux 2.6.18 packages fix several vulnerabilities
  • From: dann frazier
• Hacktics Advisory Feb10: Persistent XSS in Microsoft SharePoint Portal
  • From: Ofer Maor
• Multiple Adobe Products - XML External Entity And XML Injection Vulnerabilities
  • From: Roberto Suggi Liverani
• [USN-902-1] Pidgin vulnerabilities
  • From: Marc Deslauriers
• [ MDVSA-2010:044 ] mysql
  • From: security
• CA20100222-01: Security Notice for CA Service Desk
  • From: Kotas, Kevin J
• RE: [WEB SECURITY] Trustwave's SpiderLabs Security Advisory TWSL2010-001
  • From: David Byrne
• Secunia Research: Bournal Insecure Temporary Files Security Issue
  • From: Secunia Research
• Secunia Research: Bournal ccrypt Information Disclosure Security Issue
  • From: Secunia Research
• SEC Consult SA-20100208-0 :: Backdoor and Vulnerabilities in Xerox WorkCentre Printers Web Interface
  • From: SEC Consult Research
• [ MDVSA-2010:042 ] firefox
  • From: security
• [SECURITY] [DSA-2002-1] New polipo packages fix denial of service
  • From: Stefan Fritsch
• Re: [Onapsis Security Advisory 2010-004] SAP J2EE Authentication Phishing Vector
  • From: david . durham
• [SECURITY] [DSA-2001-1] New php5 packages fix multiple vulnerabilities
  • From: Raphael Geissert
• SQL injection vulnerability in Amelia CMS
  • From: Maciej Gojny
• Re: Circumventing Critical Security in Windows XP
  • From: Ansgar Wiechers
• AST-2010-002: Dialplan injection vulnerability
  • From: Asterisk Security Team
• [USN-890-5] XML-RPC for C and C++ vulnerabilities
  • From: Jamie Strandboge
• [SECURITY] [DSA 2000-1] New ffmpeg packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• SphereCMS Blind SQL Injection Vulnerability
  • From: admin
• Kusaba X <= 0.9 XSS/CSRF vulnerabilities
  • From: systemx00
• [USN-896-1] Firefox 3.5 and Xulrunner 1.9.1 vulnerabilities
  • From: Jamie Strandboge
• TLS/SSL Hardening & Compatibility Report 2010
  • From: Thierry Zoller
• RE: Trusteer Rapport Security Circumvention
  • From: Amit Klein
• BugCon 2010 Call For Papers
  • From: saintarmin
• Re: Re: Joomla (Jw_allVideos) Remote File Download Vulnerability
  • From: info
• RE: [WEB SECURITY] Trustwave's SpiderLabs Security Advisory TWSL2010-001
  • From: Ivan Buetler
• [ MDVSA-2010:034-2 ] kernel
  • From: security
• Re: Enomaly ECP: Multiple vulnerabilities in VMcasting protocol & implementation.
  • From: lars
• [SECURITY] [DSA 1998-1] New kdelibs packages fix arbitrary code execution
  • From: Moritz Muehlenhoff
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco Security Agent
  • From: Cisco Systems Product Security Incident Response Team
• [ MDVSA-2010:041 ] pidgin
  • From: security
• Circumventing Critical Security in Windows XP
  • From: barkley
• Pixel Portal Sql Injection Vulnerability
  • From: info
• [USN-895-1] Firefox 3.0 and Xulrunner 1.9 vulnerabilities
  • From: Jamie Strandboge
• [ MDVSA-2010:039 ] netpbm
  • From: security
• [ MDVSA-2010:034-1 ] kernel
  • From: security
• [SECURITY] [DSA 1999-1] New xulrunner packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• [ MDVSA-2010:040 ] gnome-screensaver
  • From: security
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco Firewall Services Module Skinny Client Control Protocol Inspection Denial of Service Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Secunia Research: Mozilla Firefox Memory Corruption Vulnerability
  • From: Secunia Research
• Cross-Site Scriting on Portwise SSL VPN v4.6
  • From: research
• ZDI-10-018: IBM Cognos Server Backdoor Account Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• MITKRB5-SA-2010-001 [CVE-2010-0283] krb5-1.7 KDC denial of service
  • From: Tom Yu
• Trusteer Rapport Security Circumvention
  • From: barkley
• Huawei HG510 CSRF, Auth Bypass, DoS
  • From: ivan . markovic
• Pogodny CMS SQL vulnerabilities
  • From: Maciej Gojny
• IE address bar characters into a small feature
  • From: info
• VMSA-2010-0003 ESX Service Console update for net-snmp
  • From: VMware Security Team
• Insomnia : ISVA-100216.1 - Windows URL Handling Vulnerability
  • From: Brett Moore
• [ MDVSA-2010:038 ] maildrop
  • From: security
• VUPEN Security Research - OpenOffice Word Document Processing Heap Overflow Vulnerabilities
  • From: VUPEN Security Research
• Re: Joomla (Jw_allVideos) Remote File Download Vulnerability
  • From: lafrancevi
• Enomaly ECP: Multiple vulnerabilities in VMcasting protocol & implementation.
  • From: sam . johnston
• Multiple Stored XSS in XOOPS 2.4.4 Admin Section
  • From: beenudel1986
• [USN-901-1] Squid vulnerabilities
  • From: Marc Deslauriers
• Chrome Password Manager Cross Origin Weakness (CVE-2010-0556)
  • From: VSR Advisories
• Information disclosure vulnerability in Drupal's Realname User Reference Widget contributed module (version 6.x-1.0)
  • From: Martin Barbella
• [USN-900-1] Ruby vulnerabilities
  • From: Marc Deslauriers
• [ MDVSA-2010:037 ] fetchmail
  • From: security
• Joomla (Jw_allVideos) Remote File Download Vulnerability
  • From: info
• [SECURITY] [DSA-1997-1] New mysql-dfsg-5.0 packages fix several vulnerabilities
  • From: Giuseppe Iuculano
• RE: Trustwave's SpiderLabs Security Advisory TWSL2010-001
  • From: David Byrne
• [SECURITY] [DSA-1996-1] New Linux 2.6.26 packages fix several vulnerabilities
  • From: dann frazier
• [ MDVSA-2010:036 ] webmin
  • From: security
• cmsmadesimple Multiple Security Issues : XSS+ LFI
  • From: beenudel1986
• [security bulletin] HPSBMA02486 SSRT090049 rev.2 - HP OpenView Network Node Manager (OV NNM) Java Runtime Environment (JRE) and Java Developer Kit (JDK), Remote Execution of Arbitrary Code and Other Vulnerabilities
  • From: security-alert
• iDefense Security Advisory 02.09.10: Microsoft PowerPoint LinkedSlideAtom Heap Overflow Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 02.09.10: Microsoft PowerPoint OEPlaceholderAtom Invalid Array Indexing Vulnerability
  • From: iDefense Labs
• e-Sentinel Security Advisory - Ref: Session Hijacking iPhone Facebook Application ver 3.1.2
  • From: bill . robson
• iDefense Security Advisory 02.09.10: Microsoft PowerPoint OEPlaceholderAtom Use-After-Free Vulnerability
  • From: iDefense Labs
• ChemViewX v1.9.5 ActiveX Control Mutliple Stack Overflows
  • From: Paul Craig
• SQL injection vulnerability in apemCMS
  • From: Maciej Gojny
• (resend) RE: [WEB SECURITY] Trustwave's SpiderLabs Security Advisory TWSL2010-001
  • From: Chris Weber
• [security bulletin] HPSBMA02488 SSRT100013 rev.1 - HP ProLiant Support Pack 8.30 for Windows, Remote Code Execution, Information Disclosure
  • From: security-alert
• [security bulletin] HPSBPI02507 SSRT100012 rev.2 - HP DreamScreen, Remote Disclosure of Information
  • From: security-alert
• [SECURITY] [DSA 1994-1] New ajaxterm packages fix session hijacking
  • From: Raphael Geissert
• [ MDVSA-2010:035 ] openoffice.org
  • From: security
• [USN-899-1] Tomcat vulnerabilities
  • From: Marc Deslauriers
• RE: Trustwave's SpiderLabs Security Advisory TWSL2010-001
  • From: David Byrne
• [Onapsis Security Advisory 2010-002] SAP J2EE Engine MDB Path Traversal
  • From: Onapsis Research Labs
• [Onapsis Security Advisory 2010-003] SAP WebDynpro Runtime XSS/CSS Injection
  • From: Onapsis Research Labs
• [Onapsis Security Advisory 2010-004] SAP J2EE Authentication Phishing Vector
  • From: Onapsis Research Labs
• [SECURITY] [DSA 1993-1] New otrs2 packages fix SQL injection
  • From: Raphael Geissert
• [security bulletin] HPSBMA02486 SSRT090049 rev.1 - HP OpenView Network Node Manager (OV NNM) Java Runtime Environment (JRE) and Java Developer Kit (JDK), Remote Execution of Arbitrary Code and Other Vulnerabilities
  • From: security-alert
• Trustwave's SpiderLabs Security Advisory TWSL2010-001
  • From: Trustwave Advisories
• [USN-898-1] gnome-screensaver vulnerability
  • From: Marc Deslauriers
• Re: [WEB SECURITY] Trustwave's SpiderLabs Security Advisory TWSL2010-001
  • From: Arian J. Evans
• stratsec Security Advisory SS-2010-003 - Microsoft SMB Client Pool Overflow
  • From: stratsec Research
• [USN-897-1] MySQL vulnerabilities
  • From: Marc Deslauriers
• [security bulletin] HPSBMA02484 SSRT090076 rev.1 - HP Network Node Manager (NNM), Remote Execution of Arbitrary Commands
  • From: security-alert
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco IronPort Encryption Appliance
  • From: Cisco Systems Product Security Incident Response Team
• Windows SMB NTLM Authentication Weak Nonce Vulnerability
  • From: Hernan Ochoa
• ACM CCS 2010: Call for Workshop Proposals
  • From: Christopher Kruegel
• ZDI-10-017: Microsoft Office PowerPoint Viewer TextBytesAtom Record Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-016: Microsoft Windows ShellExecute Improper Sanitization Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-015: Microsoft Windows RLE Video Decompressor Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• TPTI-10-02: Microsoft Office PowerPoint Viewer TextCharsAtom Record Code Execution Vulnerability
  • From: ZDI Disclosures
• CORE-2009-0827: Microsoft Office Excel / Word OfficeArtSpgr Container Pointer Overwrite Vulnerability
  • From: CORE Security Technologies Advisories
• Secunia Research: Microsoft PowerPoint File Path Handling Buffer Overflow
  • From: Secunia Research
• #HITB - Special Report: HITB2009 CTF Weapons of Mass Destruction
  • From: Hafez Kamal
• RE: Samba Remote Zero-Day Exploit
  • From: David Jacoby
• Re: [Full-disclosure] Samba Remote Zero-Day Exploit
  • From: Krzysztof Halasa
• Aruba Advisory ID: AID-020810 TLS Protocol Session Renegotiation Security Vulnerability
  • From: Robbie Gill
• Re: Samba Remote Zero-Day Exploit
  • From: Stefan Kanthak
• RE: Samba Remote Zero-Day Exploit
  • From: Michael Wojcik
• Hacktics Advisory Feb09: XSS in Oracle E-Business Suite
  • From: Ofer Maor
• Re: Samba Remote Zero-Day Exploit
  • From: paul . szabo
• [Hacking Event] Night Da Hack 2010 : Call For Proposals
  • From: m . mahdjoub
• [CORE-2010-0121] Multiple Vulnerabilities with 8.3 Filename Pseudonyms in Web Servers
  • From: CORE Security Technologies Advisories
• JDownloader Remote Code Execution
  • From: Matthias -apoc- Hecker
• Re: Samba Remote Zero-Day Exploit
  • From: Stefan Kanthak
• Re: Samba Remote Zero-Day Exploit
  • From: Dan Kaminsky
• Re: Samba Remote Zero-Day Exploit
  • From: Kingcope
• RE: Samba Remote Zero-Day Exploit
  • From: Michael Wojcik
• Re: Samba Remote Zero-Day Exploit
  • From: Dan Kaminsky
• Re: [Full-disclosure] Samba Remote Zero-Day Exploit
  • From: Thierry Zoller
• [security bulletin] HPSBUX02503 SSRT100019 rev.1 - HP-UX Running Java, Remote Increase in Privilege, Denial of Service and Other
  • From: security-alert
• [security bulletin] HPSBMA02487 SSRT100024 rev.1 - HP Operations Agent Running on Solaris 10, Remote Unauthorized Access
  • From: security-alert
• [ MDVSA-2010:034 ] kernel
  • From: security
• Re: [Full-disclosure] Samba Remote Zero-Day Exploit
  • From: Thierry Zoller
• Re: Samba Remote Zero-Day Exploit
  • From: paul . szabo
• mongoose Space Character Remote File Disclosure Vulnerability
  • From: info
• Re: Samba Remote Zero-Day Exploit
  • From: Stefan Kanthak
• [MajorSecurity Advisory #65]Motorola Milestone Smartphone Denial of Service
  • From: david
• Re: [Full-disclosure] Samba Remote Zero-Day Exploit
  • From: paul . szabo
• LDF (Default.asp) Sql Injection Vulnerability
  • From: Arash . Setayeshi
• CORELAN-10-010 - GeFest Web HomeServer v1.0 Remote Directory Traversal Vulnerability
  • From: Security
• Re: Samba Remote Zero-Day Exploit
  • From: paul . szabo
• [DSECRG-09-065] TVUPlayer PlayerOcx.ocx ActiveX - Insecure method
  • From: Alexandr Polyakov
• Re: Multiple vulnerabilities in XAMPP (advisory #7)
  • From: MustLive
• [Suspected Spam]Vulnerability in Tagcloud for DataLife Engine
  • From: MustLive
• Re: Samba Remote Zero-Day Exploit
  • From: paul . szabo
• [ MDVSA-2010:033 ] squid
  • From: security
• Re: Samba Remote Zero-Day Exploit
  • From: Kingcope
• Re: [Webappsec] Paper: Weaning the Web off of Session Cookies
  • From: Timothy D. Morgan
• Samba Remote Zero-Day Exploit
  • From: Kingcope
• Recon Call for Papers - July 9-11 2010
  • From: Hugo Fortier
• Secunia Research: libmikmod Module Parsing Vulnerabilities
  • From: Secunia Research
• JAHx102 - HuskiCMS local file inclusion
  • From: noreply
• JAHx101 - Huski retail mulitple SQL injection vulnerabilities
  • From: noreply
• CORE-2010-0104 - LANDesk OS command injection
  • From: CORE Security Technologies Advisories
• CORELAN-10-009 : Ipswitch IMAIL 11.01 multiple vulnerabilities (reversible encryption + weak ACL)
  • From: Security
• CORELAN-10-008 - Multiple vulnerabilities found in evalmsi 2.1.03
  • From: Peter Van Eeckhoutte
• Re: Multiple vulnerabilities in XAMPP (advisory #7)
  • From: MustLive
• [SECURITY] [DSA 1992-1] New chrony packages fix denial of service
  • From: Nico Golde
• [ MDVSA-2010:032 ] rootcerts
  • From: security
• [MajorSecurity Advisory #64]Apple Safari 4.0.4 Denial of Service
  • From: david
• [SECURITY] [DSA-1990-1] New trac-git packages fix code execution
  • From: Florian Weimer
• [SECURITY] [DSA 1991-1] New squid/squid3 packages fix denial of service
  • From: Steffen Joeris
• [SECURITY] [DSA-1990-2] New trac-git package fixes regression
  • From: Stefan Fritsch
• [security bulletin] HPSBMA02504 SSRT090220 rev.1 - HP System Management Homepage (SMH) for Linux and Windows, Remote Cross Site Scripting (XSS)
  • From: security-alert
• CORE-2009-0625: Internet Explorer Dynamic OBJECT tag and URLMON sniffing vulnerabilities
  • From: Core Security Technologies Advisories
• [DSECRG-09-011] HP StorageWorks 1_8 G2 Tape Autoloader - privilege escalation DOS
  • From: Alexandr Polyakov
• [Hellcode Research]: AOL 9.5 File Parsing Buffer Overflow Vulnerability
  • From: karakorsankara
• [Suspected Spam]Hackito Ergo Sum 2010 - Call For Paper - HES2010 CFP
  • From: Philippe Mailinglist
• [SECURITY] [DSA-1989-1] New fuse packages fix denial of service
  • From: Giuseppe Iuculano
• [CSO10002] Attachment path traversal in Outlook Web Access
  • From: Ricardo Martins - Chief Security Officers
• [ MDVSA-2010:031 ] wireshark
  • From: security
• [SECURITY] [DSA-1988-1] New qt4-x11 packages fix several vulnerabilities
  • From: Giuseppe Iuculano
• AST-2010-001: T.38 Remote Crash Vulnerability
  • From: Asterisk Security Team
• [security bulletin] HPSBOV02505 SSRT100023 rev.1 - HP OpenVMS RMS, Local Escalation of Privilege
  • From: security-alert
• [SECURITY] [DSA 1986-1] New moodle packages fix several vulnerabilities
  • From: Steffen Joeris
• [security bulletin] HPSBUX02479 SSRT090212 rev.1 - HP-UX running HP CIFS Server (Samba), Remote Unauthorized Access
  • From: security-alert
• OpenCart CSRF Vulnerability
  • From: ben
• 360 Security Guard breg device drivers Privilege Escalation Vulnerabilitie
  • From: qiqiguaiguai
• Remote Vulnerability in AIX RPC.cmsd released by iDefense
  • From: Rodrigo Rubira Branco (BSDaemon)
• [SECURITY] [DSA 1987-1] New lighttpd packages fix denial of service
  • From: Nico Golde
• Tinypug Multiple Vulnerabilities
  • From: admin
• [security bulletin] HPSBUX02464 SSRT090210 rev.1 - HP Enterprise Cluster Master Toolkit (ECMT) running on HP-UX, Local
  • From: security-alert
• [SECURITY] [DSA 1985-1] New sendmail packages fix SSL certificate verification weakness
  • From: Giuseppe Iuculano
• RaakCms Multiple Vulnerabilities
  • From: info
• [SECURITY] [DSA 1984-1] New libxerces2-java packages fix denial of service
  • From: Giuseppe Iuculano
• [CORE-2009-1126] Corel Paint Shop Pro Photo X2 FPX Heap Overflow
  • From: CORE Security Technologies Advisories
• Re: [Webappsec] Paper: Weaning the Web off of Session Cookies
  • From: Chris Travers
• Re: [Webappsec] Paper: Weaning the Web off of Session Cookies
  • From: Timothy D. Morgan
• iDefense Security Advisory 02.01.10: RealNetworks RealPlayer 11 HTTP Chunked Encoding Integer Overflow Vulnerability
  • From: iDefense Labs
• Security Advisory for Bugzilla 3.0.10, 3.2.5, 3.4.4, and 3.5.2
  • From: mkanat
• Joomla (com_gambling) SQL Injection Vulnerabilities
  • From: md . r00t . defacer
• [ MDVSA-2010:030 ] kernel
  • From: security
• [CORE-2010-0106] Cisco Secure Desktop XSS/JavaScript Injection
  • From: Core Security Technologies Advisories
• XSS vulnerability in Drupal's MP3 Player contributed module (version 6.x-1.0-beta1)
  • From: Martin Barbella
• Re: [Webappsec] Paper: Weaning the Web off of Session Cookies
  • From: Timothy D. Morgan
• iDefense Security Advisory 02.01.10: RealNetworks RealPlayer CMediumBlockAllocator Integer Overflow Vulnerability
  • From: iDefense Labs
• Re: Cross-Site History Manipulation (XSHM)
  • From: Michal Zalewski
• iDefense Security Advisory 02.01.10: Real Networks RealPlayer Compressed GIF Handling Integer Overflow
  • From: iDefense Labs
• VMSA-2010-0002 VMware vCenter update release addresses multiple security issues in Java JRE
  • From: VMware Security Team
• [SECURITY] [DSA 1983-1] New Wireshark packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• [TKADV2010-001] Oracle Solaris UCODE_GET_VERSION IOCTL Kernel NULL Pointer Dereference
  • From: Tobias Klein
• eWebeditor ASP Version Multiple Vulnerabilities
  • From: info
• Tavanmand Portal (fckeditor) Remote Arbitrary File Upload Vulnerability
  • From: info
• {PRL} Xerox Workcenter 4150 Remote Buffer Overflow
  • From: Francis Provencher
• Cross-Site History Manipulation (XSHM)
  • From: Alex Roichman
• Re: [Webappsec] Paper: Weaning the Web off of Session Cookies
  • From: Arian J. Evans
• Advisory: jBCrypt < 0.3 character encoding vulnerability
  • From: Damien Miller
• [SECURITY] [DSA 1982-1] New hybserv packages fix denial of service
  • From: Steffen Joeris
• Re: [Webappsec] Paper: Weaning the Web off of Session Cookies
  • From: Timothy D. Morgan
• iPhone certificate flaws
  • From: cryptopath
• [SECURITY] [DSA 1841-2] New git-core packages fix build failure
  • From: Thijs Kinkhorst
• Re: Microsoft IE 6&7 Crash Exploit
  • From: k4mr4n_st
• OCS Inventory NG Server <= 1.3b3 (login) Remote Authentication Bypass
  • From: Nicolas DEROUET
• [ MDVSA-2010:029 ] rootcerts
  • From: security
• Multiple vulnerabilities in XAMPP (advisory #7)
  • From: MustLive
• Multiple vulnerabilities in XAMPP (advisories #5 and #6)
  • From: MustLive
• Multiple vulnerabilities in XAMPP (advisories #3 and #4)
  • From: MustLive
• Multiple vulnerabilities in XAMPP (advisories #1 and #2)
  • From: MustLive
• Re: [Webappsec] Paper: Weaning the Web off of Session Cookies
  • From: Arian J. Evans
• Re: [Webappsec] Paper: Weaning the Web off of Session Cookies
  • From: James Landis
• [SECURITY] [DSA 1968-2] New pdns-recursor packages fix cache poisoning
  • From: Florian Weimer
• [USN-892-1] FUSE vulnerability
  • From: Kees Cook