Bugtraq

• Thread Index

• [SECURITY] [DSA 1981-2] New maildrop packages fix regression
  • From: Steffen Joeris
• [USN-893-1] Samba vulnerability
  • From: Marc Deslauriers
• PR09-19: Cross-Site Scripting (XSS) on CommonSpot server
  • From: research
• [SECURITY] [DSA 1981-1] New maildrop packages fix privilege escalation
  • From: Steffen Joeris
• Firefox Observation Plugin Attack
  • From: Ivan Buetler
• Rising AntiVirus 2008/2009/2010 Local Privilege Escalation Exploit
  • From: dlrow1991
• [USN-891-1] lintian vulnerabilities
  • From: Kees Cook
• [security bulletin] HPSBMA02502 SSRT090171 rev.1 - HP OpenView Storage Data Protector, Local Unauthorized Access
  • From: security-alert
• [SECURITY] [DSA 1980-1] New ircd-hybrid/ircd-ratbox packages fix arbitrary code execution
  • From: Steffen Joeris
• [ MDVSA-2010:028 ] kdelibs4
  • From: security
• PR09-15: XSS injection vulnerability within HP System Management Homepage (Insight Manager)
  • From: research
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco Unified MeetingPlace
  • From: Cisco Systems Product Security Incident Response Team
• [USN-803-2] Dhcp vulnerability
  • From: Jamie Strandboge
• [SECURITY] [DSA-1979-1] New lintian packages fix multiple vulnerabilities
  • From: Raphael Geissert
• [RT-SA-2010-003] Geo++(R) GNCASTER: Faulty implementation of HTTP Digest Authentication
  • From: RedTeam Pentesting GmbH
• [RT-SA-2010-002] Geo++(R) GNCASTER: Insecure handling of NMEA-data
  • From: RedTeam Pentesting GmbH
• [RT-SA-2010-001] Geo++(R) GNCASTER: Insecure handling of long URLs
  • From: RedTeam Pentesting GmbH
• [InterN0T] ShareTronix 1.0.4 - HTML Injection Vulnerability
  • From: advisories
• [ MDVSA-2010:027 ] kdelibs4
  • From: security
• Re: Microsoft IE 6&7 Crash Exploit
  • From: Berend-Jan Wever
• Re: [Full-disclosure] e107 latest download link is backdoored
  • From: Gregor Schneider
• Mod_proxy from apache 1.3 - Integer overflow which causes heap overflow.
  • From: pi3
• [security bulletin] HPSBMA02502 SSRT090171 rev.1 - HP OpenView Storage Data Protector, Local Unauthorized Access
  • From: security-alert
• PR09-02 Multiple Cross-Site Scripting (XSS) / Cross Domain redirects and Server path information disclosure on SAP BusinessObjects version 12
  • From: Rolando Fuentes
• Re: RE: Microsoft IE 6&7 Crash Exploit
  • From: sdasdasd
• [USN-890-4] PyXML vulnerabilities
  • From: Jamie Strandboge
• Re: Re: e107 latest download link is backdoored
  • From: track
• RE: Microsoft IE 6&7 Crash Exploit
  • From: Santhosh
• More information on CVE-2009-3580
  • From: Chris Travers
• Re: [Full-disclosure] e107 latest download link is backdoored
  • From: Fernando Augusto
• The future of XSS attacks
  • From: MustLive
• [SECURITY] [DSA 1978-1] New phpgroupware packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• Netsupport gateway remote DoS
  • From: watcher60
• Cross-Site Scripting vulnerability in 3D Cloud for Joomla
  • From: MustLive
• Paper: Weaning the Web off of Session Cookies
  • From: Timothy D. Morgan
• [ MDVSA-2010:026 ] openldap
  • From: security
• [security bulletin] HPSBMA02477 SSRT090177 rev.4 - HP OpenView Network Node Manager (OV NNM), Remote Denial of Service (DoS)
  • From: security-alert
• [IBM Datapower XS40] Denial of Service
  • From: erik
• Microsoft IE 6&7 Crash Exploit
  • From: info
• Re: [Full-disclosure] e107 latest download link is backdoored
  • From: Gregor Schneider
• Re: [Full-disclosure] e107 latest download link is backdoored
  • From: David Sopas
• Re: e107 latest download link is backdoored
  • From: Carsten Eilers
• Setting arbitrary Personas without user interaction in Firefox 3.6
  • From: Artur Janc
• Secunia Research: Google Chrome Pop-Up Block Menu Handling Vulnerability
  • From: Secunia Research
• [SECURITY] [DSA-1977-1] New python packages fix several vulnerabilities
  • From: Giuseppe Iuculano
• FWD: LedgerSMB Security Advisory: Multiple Vulnerabilities
  • From: Chris Travers
• Security improvements of Microsoft Silverlight Build 3.0.50106.0?
  • From: Juha-Matti Laurio
• [ MDVSA-2010:025 ] php-pear-Mail
  • From: security
• DDIVRT-2009-27 F2L-3000 files2links SQL Injection Vulnerability
  • From: ddivulnalert
• [ MDVSA-2010:024 ] coreutils
  • From: security
• Re: e107 latest download link is backdoored
  • From: Valery Marchuk
• Re: e107 latest download link is backdoored
  • From: Chris Travers
• CVE-2009-3583, confirming problem and adding info
  • From: Chris Travers
• [SECURITY] CVE-2009-2901 Apache Tomcat insecure partial deploy after failed undeploy
  • From: Mark Thomas
• Safari 4.0.4 Crash
  • From: systemx00
• [SECURITY] CVE-2009-2902 Apache Tomcat unexpected file deletion in work directory
  • From: Mark Thomas
• [SECURITY] CVE-2009-2693 Apache Tomcat unexpected file deletion and/or alteration
  • From: Mark Thomas
• e107 latest download link is backdoored
  • From: Bogdan Calin
• London DEFCON January meet - DC4420 - Wed 27th Jan 2010
  • From: Major Malfunction
• Abusing weak PRNGs in PHP applications
  • From: gat3way
• Publique! CMS SQL Injection Vulnerabilities
  • From: Christophe dlf
• Silverstripe <= v2.3.4: two XSS vulnerabilities
  • From: Moritz Naumann
• [USN-890-2] Python 2.5 vulnerabilities
  • From: Jamie Strandboge
• iBoutique v4.0
  • From: flashcreazione
• Kayako SupportSuite Multiple Persistent Cross Site Scripting (Current Versions)
  • From: pen-test
• [USN-890-3] Python 2.4 vulnerabilities
  • From: Jamie Strandboge
• [SECURITY] [DSA-1976-1] New dokuwiki packages fix several vulnerabilities
  • From: Giuseppe Iuculano
• IdeaCMS v1.0 (fck) Remote Arbitrary File Upload
  • From: whh_iran
• FortiGuard Advisory: Microsoft Internet Explorer Remote Memory Corruption Vulnerability
  • From: noreply-secresearch@xxxxxxxxxxxx
• ZDI-10-010: RealNetworks RealPlayer Skin Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• Microsoft Windows NT #GP Trap Handler Allows Users to Switch Kernel Stack
  • From: Tavis Ormandy
• ZDI-10-012: Microsoft Internet Explorer Baseline Tag Rendering Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-011: Microsoft Internet Explorer Table Layout Col Tag Cache Update Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-014: Microsoft Internet Explorer item Object Memory Corruption Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-013: Microsoft Internet Explorer Table Layout Reuse Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-007: RealNetworks RealPlayer SMIL getAtom Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-008: RealNetworks RealPlayer SIPR Codec Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-006: RealNetworks RealPlayer GIF Handling Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-004: Cisco CiscoWorks IPM GIOP getProcessName Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-005: RealNetworks RealPlayer ASMRulebook Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [SECURITY] [DSA-1972-2] New audiofile packages fix buffer overflow
  • From: Stefan Fritsch
• [ MDVSA-2010:023 ] phpldapadmin
  • From: security
• ZDI-10-009: RealNetworks RealPlayer IVR Format Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [ MDVSA-2010:022 ] openssl
  • From: security
• eWebeditor Directory Traversal Vulnerability
  • From: info
• TheGreenBow VPN Client Local Stack Overflow Vulnerability - Security Advisory - SOS-10-001
  • From: Lists
• RE: All China, All The Time
  • From: Jim Harrison
• ZDI-10-003: Novell ZENworks Asset Management docfiledownload Remote SQL Injection Vulnerability
  • From: ZDI Disclosures
• Insufficient User Input Validation in VP-ASP 6.50 Demo Code
  • From: CodeScan Labs Advisories
• [SECURITY] [DSA-1975-1] Security Support for Debian 4.0 to be discontinued on February 15th
  • From: Stefan Fritsch
• [ MDVSA-2010:021 ] bind
  • From: security
• [UPDATE] NSOADV-2010-001: Panda Security Local Privilege Escalation
  • From: NSO Research
• [USN-890-1] Expat vulnerabilities
  • From: Jamie Strandboge
• [ MDVSA-2010:020 ] gzip
  • From: security
• [USN-889-1] gzip vulnerabilities
  • From: Marc Deslauriers
• [USN-888-1] Bind vulnerabilities
  • From: Marc Deslauriers
• [ MDVSA-2010:019 ] gzip
  • From: security
• RE: All China, All The Time
  • From: Tim Mullen
• [SECURITY] [DSA 1974-1] New gzip packages fix arbitrary code execution
  • From: Steffen Joeris
• Re: All China, All The Time
  • From: Lawrence Pingree
• Secunia Research: HP Power Manager "formExportDataLogs" Directory Traversal
  • From: Secunia Research
• Cisco Security Advisory: CiscoWorks Internetwork Performance Monitor CORBA GIOP Overflow Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Secunia Research: Adobe Shockwave Player 3D Model Buffer Overflow
  • From: Secunia Research
• [Onapsis Security Advisory 2010-001] SAP WebAS Integrated ITS Remote Command Execution
  • From: Onapsis Research Labs
• Re: Kingsoft DuBa Browser Shield ActiveX Remote Exec 0day POC
  • From: hanzhengqi
• Secunia Research: Adobe Shockwave Player 3D Model Two Integer Overflows
  • From: Secunia Research
• Secunia Research: Adobe Shockwave Player Integer Overflow Vulnerability
  • From: Secunia Research
• vBulletin nulled (validator.php) files/directories disclosure
  • From: kw3rln
• [security bulletin] HPSBMA02474 SSRT090107 rev.2 - HP Power Manager, Remote Execution of Arbitrary Code
  • From: security-alert
• Secunia Research: Adobe Shockwave Player Four Integer Overflow Vulnerabilities
  • From: Secunia Research
• Secunia Research: HP Power Manager "formExportDataLogs" Buffer Overflow
  • From: Secunia Research
• Cisco Security Advisory: Cisco IOS XR Software SSH Denial of Service Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• [SECURITY] [DSA 1973-1] New glibc packages fix information disclosure
  • From: Aurelien Jarno
• [CORELAN-10-006] BOF Vulnerability in S.O.M.P.L. Player
  • From: Security
• [ MDVSA-2010:016 ] wireshark
  • From: security
• [ MDVSA-2010:018 ] phpMyAdmin
  • From: security
• Re: facebook 'routing flaw'?
  • From: Matthew Leeds
• [security bulletin] HPSBMA02485 SSRT090252 rev.1 - HP Power Manager, Remote Execution of Arbitrary Code
  • From: security-alert
• [ MDVSA-2010:017 ] ruby
  • From: security
• Re: facebook 'routing flaw'?
  • From: Suramya Tomar
• RE: facebook 'routing flaw'?
  • From: Sacks, Cailan C
• [ MDVSA-2010:015 ] roundcubemail
  • From: security
• Blaze Apps Multiple Vulnerabilities
  • From: admin
• ezContents CMS Multiple Vulnerabilities
  • From: admin
• Re: All China, All The Time
  • From: Neil Dickey
• Kingsoft DuBa Browser Shield ActiveX Remote Exec 0day POC
  • From: superli
• Baidu Security Center FireFoxProxy ActiveX Remote Exec 0day POC
  • From: superli
• Xunlei XPPlayer ActiveX Remote Exec 0day POC
  • From: superli
• Multiple Vulnerabilities in XOOPS 2.4.3 and earlier
  • From: CodeScan Labs Advisories
• Re: facebook 'routing flaw'?
  • From: Manny Ponce
• OpenOffice for Windows ".slk" File Parsing Null Pointer Vulnerability
  • From: karakorsankara
• JBroFuzz 1.9 Fuzzer Released!
  • From: subere
• Study of BlackBerry Proof-of-Concept Malicious Applications (Whitepaper)
  • From: Mayank Aggarwal
• QvodPlayer ColorFilter Codec ActiveX Remote Exec
  • From: info
• facebook 'routing flaw'?
  • From: Michael Scheidell
• Re: All China, All The Time
  • From: Marcello Magnifico
• 0day vulnerability Sogou input method to obtain system privileges
  • From: k4mr4n_st
• [SECURITY] [DSA-1972-1] New audiofile packages fix buffer overflow
  • From: Stefan Fritsch
• Zenoss Multiple Admin CSRF
  • From: Adam Baldwin
• [ MDVSA-2010:013 ] transmission
  • From: security
• [ MDVSA-2010:014 ] transmission
  • From: security
• [USN-886-1] Pidgin vulnerabilities
  • From: Marc Deslauriers
• [USN-887-1] LibThai vulnerability
  • From: Marc Deslauriers
• Re: All China, All The Time
  • From: Steven J. Koch
• [ MDVSA-2010:011 ] mysql
  • From: security
• [ATHCON2010] CFP/1st Call for Papers - AthCon IT Security Conference
  • From: Kyprianos Vasilopoulos
• [ MDVSA-2010:012 ] mysql
  • From: security
• Reminder: Campus Party EU 2010 Call For Participants
  • From: Campus Party EU Spain
• AOL 9.5 ActiveX Heap Overflow Vulnerability
  • From: karakorsankara
• GDT and LDT in Windows kernel vulnerability exploitation (paper)
  • From: Gynvael Coldwind
• [USN-885-1] LibThai vulnerability
  • From: Marc Deslauriers
• Re: [Full-disclosure] Sprint / Verizon MiFi CSRF+CSS Gives up GPS info to attacker
  • From: Adam Baldwin
• Code to mitigate IE event zero-day (CVE-2010-0249)
  • From: ds . adv . pub
• [ MDVSA-2010:010 ] libthai
  • From: security
• Browser Fuzzer 3
  • From: krakowlabs
• RE: All China, All The Time
  • From: Jim Harrison
• Re: [Full-disclosure] Sprint / Verizon MiFi CSRF+CSS Gives up GPS info to attacker
  • From: A. Ramos
• [ MDVSA-2010:009 ] php
  • From: security
• [ MDVSA-2010:008 ] php
  • From: security
• [ MDVSA-2010:007 ] php
  • From: security
• [security bulletin] HPSBUX02495 SSRT090151 rev.2 - HP-UX Running sendmail, Remote Denial of Service (DoS)
  • From: security-alert
• C4 SCADA Security Advisory - Rockwell Automation (Allen Bradley) Multiple Vulnerabilities in Micrologix 1100 & 1400 Series Controllers
  • From: Eyal Udassin
• RE: All China, All The Time
  • From: Thor (Hammer of God)
• Re: All China, All The Time
  • From: Gadi Evron
• Re: Major security risk in the unlock pattern for Android devices
  • From: Brian Altenhofel
• RE: Major security risk in the unlock pattern for Android devices
  • From: Francis, Shannon
• VUPEN Security Research - Adobe Acrobat and Reader U3D Integer Overflow Vulnerability
  • From: VUPEN Security Research
• Major security risk in the unlock pattern for Android devices
  • From: Dan Dascalescu
• rPSA-2010-0004-1 openssl openssl-scripts
  • From: rPath Update Announcements
• Sprint / Verizon MiFi CSRF+CSS Gives up GPS info to attacker
  • From: Adam Baldwin
• SEC Consult SA-20100115-0 :: Local file inclusion/execution and multiple CSRF vulnerabilities in LetoDMS (formerly MyDMS)
  • From: Lukas Weichselbaum
• [SECURITY] [DSA-1971-1] New libthai packages fix arbitrary code execution
  • From: Giuseppe Iuculano
• [USN-885-1] Transmission vulnerabilities
  • From: Jamie Strandboge
• [security bulletin] HPSBMA02433 SSRT090084 rev.2 - HP Discovery & Dependency Mapping Inventory (DDMI) Running on Windows, Remote Unauthorized Access, Execution of Arbitrary Code
  • From: security-alert
• [ GLSA 201001-05 ] net-snmp: Authorization bypass
  • From: Stefan Behte
• [USN-884-1] OpenSSL vulnerability
  • From: Kees Cook
• All China, All The Time
  • From: Thor (Hammer of God)
• [ GLSA 201001-07 ] Blender: Untrusted search path
  • From: Stefan Behte
• [ GLSA 201001-09 ] Ruby: Terminal Control Character Injection
  • From: Alex Legler
• XSS Vulnerability in Drupal's Node Blocks contributed module (6.x-1.3 and 5.x-1.1)
  • From: Marty Barbella
• [ GLSA 201001-06 ] aria2: Multiple vulnerabilities
  • From: Stefan Behte
• [ GLSA 201001-04 ] VirtualBox: Multiple vulnerabilities
  • From: Stefan Behte
• Hellcode Research: OpenOffice File Parsing Null Pointer Vulnerability
  • From: karakorsankara
• [ GLSA 201001-08 ] SquirrelMail: Multiple vulnerabilities
  • From: Stefan Behte
• [ MDVSA-2010:005 ] krb5
  • From: security
• RE: All China, All The Time
  • From: Thor (Hammer of God)
• [ MDVSA-2010:006 ] krb5
  • From: security
• [SECURITY] [DSA-1970-1] New openssl packages fix denial of service
  • From: Stefan Fritsch
• [USN-882-1] PHP vulnerabilities
  • From: Marc Deslauriers
• [security bulletin] HPSBPI02500 SSRT090263 rev.1 - HP Web Jetadmin, Remote Unauthorized Access to Data, Denial of Service (DoS)
  • From: security-alert
• [ MDVSA-2010:004 ] bash
  • From: security
• [CORE-2009-1209] Google SketchUp 'lib3ds' 3DS Importer Memory Corruption
  • From: CORE Security Advisories
• Yoono Firefox Extension - Privileged Code Injection
  • From: Nick Freeman
• [USN-883-1] network-manager-applet vulnerabilities
  • From: Marc Deslauriers
• [USN-881-1] Kerberos vulnerability
  • From: Kees Cook
• [SECURITY] [DSA-1969-1] New krb5 packages fix denial of service
  • From: Giuseppe Iuculano
• [ MDVSA-2010:003 ] sendmail
  • From: security
• iDefense Security Advisory 01.12.10: Adobe Reader and Acrobat JpxDecode Memory Corruption Vulnerability
  • From: iDefense Labs
• Cross Site Identification (CSID) attack. Description and demonstration.
  • From: Ronen Z
• Secunia Research: Microsoft Windows Flash Player Movie Unloading Vulnerability
  • From: Secunia Research
• MITKRB5-SA-2009-004 [CVE-2009-4212] integer underflow in AES and RC4 decryption
  • From: Tom Yu
• [CORELAN-10-004] TurboFTP Server 1.00.712 remote DoS
  • From: Security
• ZDI-10-002: Oracle Secure Backup observiced.exe Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• Invitation: nullcon Goa 2010 International Security & Hacking Conference
  • From: nullcon
• HITB Ezine 'Reloaded' - Issue #001
  • From: Hafez Kamal
• [ MDVSA-2010:002 ] pidgin
  • From: security
• [ MDVSA-2010:001 ] pidgin
  • From: security
• [ MDVSA-2009:241-1 ] squid
  • From: security
• [ MDVSA-2009:293-1 ] squidGuard
  • From: security
• XSS Vulnerability in Active Calendar 1.2.0
  • From: Marty Barbella
• [ MDVSA-2009:227-1 ] freeradius
  • From: security
• [ MDVSA-2010:000 ] firefox
  • From: security
• XSS vulnerabilities in 34 millions flash files
  • From: MustLive
• [ MDVSA-2009:316-3 ] expat
  • From: security
• Cross-Site Scripting vulnerability in JVClouds3D for Joomla
  • From: MustLive
• Nginx, Varnish, Cherokee, thttpd, mini-httpd, WEBrick, Orion, AOLserver, Yaws and Boa log escape sequence injection
  • From: ascii
• [ MDVSA-2009:316-2 ] expat
  • From: security
• NSOADV-2010-001: Panda Security Local Privilege Escalation
  • From: NSO Research
• [SECURITY] [DSA 1968-1] New pdns-recursor packages fix potential code execution
  • From: Florian Weimer
• [CORELAN-10-001] Audiotran 1.4.1 buffer overflow
  • From: Security
• Re: TELUS Security Labs VR - ACDSee Systems ACDSee Products XBM File Handling Buffer Overflow
  • From: Steve Shockley
• TELUS Security Labs VR - ACDSee Systems ACDSee Products XBM File Handling Buffer Overflow
  • From: noreply
• MacOS X 10.5/10.6 libc/strtod(3) buffer overflow
  • From: cxib
• [ MDVSA-2009:316-1 ] expat
  • From: security
• Google Chrome 3.0.195.38 | Chrome Frame - Reloading Memory Allocation based Tab Crashing
  • From: Aditya K Sood
• [HACKATTACK Advisory 080110] Windows Live Messenger 2009 ActiveX DoS Vulnerability
  • From: advisory
• Secunia Research: Adobe Illustrator Encapsulated Postscript Parsing Vulnerability
  • From: Secunia Research
• [USN-878-1] Firefox 3.5 and Xulrunner 1.9.1 regression
  • From: Jamie Strandboge
• [USN-877-1] Firefox 3.0 and Xulrunner 1.9 regression
  • From: Jamie Strandboge
• ZDI-10-001: Novell iManager eDirectory Plugin Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• Security contact at Lexmark?
  • From: Protek Research Lab
• [SECURITY] [DSA 1967-1] New transmission packages fix directory traversal
  • From: Moritz Muehlenhoff
• VMSA-2010-0001 ESX Service Console updates for nss and nspr
  • From: VMware Security team
• [USN-880-1] GIMP vulnerabilities
  • From: Marc Deslauriers
• [SECURITY] [DSA 1966-1] New horde3 packages fix cross-site scripting
  • From: Steffen Joeris
• [ MDVSA-2009:300-2 ] apache-conf
  • From: security
• [ MDVSA-2009:300-1 ] apache-conf
  • From: security
• FreeBSD Security Advisory FreeBSD-SA-10:03.zfs
  • From: FreeBSD Security Advisories
• FreeBSD Security Advisory FreeBSD-SA-10:02.ntpd
  • From: FreeBSD Security Advisories
• FreeBSD Security Advisory FreeBSD-SA-10:01.bind
  • From: FreeBSD Security Advisories
• [SECURITY] [DSA-1965-1] New phpldapadmin packages fix remote file inclusion
  • From: Giuseppe Iuculano
• HTTP Digest Integrity: Another look, in light of recent attacks
  • From: Timothy D. Morgan
• Re: Multiple vulnerabilities in LineWeb 1.0.5
  • From: ign . sec
• Re: [WEB SECURITY] Re: Link Injection Redirection Attacks - Exploiting Google Chrome Design Flaw
  • From: Aditya K Sood
• [TOOL RELEASE] Microsoft SQL Server Fingerprint Too BETA-3l!!!
  • From: Nelson Brito
• Critical PowerDNS Recursor Security Vulnerabilities: please upgrade ASAP to 3.1.7.2
  • From: bert hubert
• [USN-879-1] Kerberos vulnerability
  • From: Kees Cook
• Re: Link Injection Redirection Attacks - Exploiting Google Chrome Design Flaw
  • From: Peter Watkins
• Re: Secunia Research: TSC2 Help Desk CTab ActiveX Control Buffer Overflow
  • From: sales
• {PRL} Novell Netware CIFS And AFP Remote Memory Consumption DoS
  • From: Protek Research Lab
• [ GLSA 201001-03 ] PHP: Multiple vulnerabilities
  • From: Tobias Heinlein
• Re: Link Injection Redirection Attacks - Exploiting Google Chrome Design Flaw
  • From: Michal Zalewski
• [ MDVSA-2009:220-1 ] davfs
  • From: security
• Multiple vulnerabilities in LineWeb 1.0.5
  • From: ign . sec
• UPDATE: MITKRB5-SA-2009-003 [CVE-2009-3295] KDC denial of service in cross-realm referral processing
  • From: Tom Yu
• Re: [Full-disclosure] [Tool] DeepToad 1.1.0
  • From: T Biehn
• Re: [Full-disclosure] [Tool] DeepToad 1.1.0
  • From: Joxean Koret
• SyScan'10 Call For Training (CFT)
  • From: organiser@xxxxxxxxxx
• REWTERZ-20100103 - Ofilter Player Local Denial of Service (DoS) Vulnerability
  • From: rewterz security team
• REWTERZ-20100101 - n.player Local Heap Overflow Vulnerability
  • From: rewterz security team
• Re: [Full-disclosure] [Tool] DeepToad 1.1.0
  • From: T Biehn
• Re: Y2K10 spamassassin bug, 2010 year mails discared as spam
  • From: Rudy Zijlstra
• Link Injection Redirection Attacks - Exploiting Google Chrome Design Flaw
  • From: Aditya K Sood
• REWTERZ-20100102 - Nemesis Player (NSP) Local Denial of Service (DoS) Vulnerability
  • From: rewterz security team
• Re: Y2K10 spamassassin bug, 2010 year mails discared as spam
  • From: Steve Shockley
• Y2K10 spamassassin bug, 2010 year mails discared as spam
  • From: Eduardo Romero
• httpdx webserver v1.5 Remote Source Disclosure
  • From: info
• [ GLSA 201001-01 ] NTP: Denial of Service
  • From: Stefan Behte
• [Tool] DeepToad 1.1.0
  • From: Joxean Koret
• Java vulnerability
  • From: Paul
• [ GLSA 201001-02 ] Adobe Flash Player: Multiple vulnerabilities
  • From: Alex Legler
• [USN-876-1] PostgreSQL vulnerabilities
  • From: Jamie Strandboge
• Secunia Research: PDF-XChange Viewer Content Parsing Memory Corruption Vulnerability
  • From: Secunia Research
• WASC Announcement: WASC Threat Classification v2.0 Published
  • From: announcements
• Latest Intel Pro/10* ethernet adaptor drivers contain vulnerable MSVC runtime!
  • From: Stefan Kanthak
• [SECURITY] [DSA-1964-1] New PostgreSQL packages fix several vulnerabilities
  • From: Florian Weimer
• [SECURITY] [DSA-1953-2] New expat packages fix regression
  • From: Stefan Fritsch
• [ MDVSA-2009:346 ] kde
  • From: security
• Re: RE: Tests about semicolon zero-day (BID 37460)
  • From: crashbrz
• RE: Tests about semicolon zero-day (BID 37460)
  • From: Nelson Brito
• [SECURITY] [DSA 1958-1] New libtool packages fix privilege escalation
  • From: Raphael Geissert
• RE: Tests about semicolon zero-day (BID 37460)
  • From: Nelson Brito
• Secunia Research: AproxEngine Multiple Vulnerabilities
  • From: Secunia Research
• FreeWebshop.org: multiple vulnerabilities
  • From: Akita Software Security
• [ MDVSA-2009:345 ] acl
  • From: security
• Tests about semicolon zero-day (BID 37460)
  • From: Crash - DcLabs
• [ MDVSA-2009:146-1 ] imap
  • From: security
• MITKRB5-SA-2009-003 [CVE-2009-3295] KDC denial of service in cross-realm referral processing
  • From: Tom Yu
• [ MDVSA-2009:189-1 ] apache-mod_auth_mysql
  • From: security
• Code to mitigate IIS semicolon zero-day
  • From: ds . adv . pub
• [ MDVSA-2009:344 ] perl-DBD-Pg
  • From: security
• [ MDVSA-2009:244-1 ] xfig
  • From: security
• [SECURITY] [DSA 1957-1] New aria2 packages fix arbitrary code execution
  • From: Steffen Joeris
• Sheedravi CMS SQL Injection Vulnerability
  • From: faghani
• DBHCMS Web Content Management System v1.1.4 RFI Vulnerability
  • From: info
• [InterN0T] LiveZilla - XSS Vulnerability
  • From: advisories
• [SECURITY] [DSA 1963-1] New unbound packages fix DNSSEC validation
  • From: Florian Weimer
• [ MDVSA-2009:343 ] acpid
  • From: security
• [ MDVSA-2009:342 ] acpid
  • From: security
• Microsoft IIS 0Day Vulnerability in Parsing Files (semi-colon bug)
  • From: bugreport
• [tools] hostmap-0.2.1 released
  • From: Alessandro Tanasi
• [ MDVSA-2009:341 ] dstat
  • From: security
• [ MDVSA-2009:340 ] jpgraph
  • From: security
• Remote Buffer Overflow Exploit (TFTP Daemon Version 1.9) by Socket_0x03
  • From: Socket_0x03
• ClubHack2009 presentations are now online
  • From: ClubHack
• Vulnerability in Joomulus for Joomla
  • From: MustLive
• RE: TLS Renegotiation Vulnerability: Proof of Concept Code (Python)
  • From: Ivan Buetler
• XSS Vulnerability in JpGraph 3.0.6
  • From: Martin Barbella
• [SECURITY] [DSA-1962-1] New kvm packages fix several vulnerabilities
  • From: Giuseppe Iuculano
• [SECURITY] [DSA 1961-1] New bind9 packages fix cache poisoning
  • From: Florian Weimer
• [ MDVSA-2009:339 ] firefox
  • From: security
• [ MDVSA-2009:338 ] firefox
  • From: security
• RE: TLS Renegotiation Vulnerability: Proof of Concept Code (Python)
  • From: Barry Raveendran Greene
• Re: phpPollScript - 1.3 Remote File Include
  • From: Packet Storm
• ClarkConnect XSS vulnerability
  • From: edgard . chammas
• [security bulletin] HPSBUX02498 SSRT090264 rev.1 - HP-UX Running Apache, Remote Unauthorized Data Injection, Denial of
  • From: security-alert
• Remote Buffer Overflow Exploit (TFTP Daemon Version 1.9) by Socket_0x03
  • From: Socket_0x03
• [ MDVSA-2009:337 ] proftpd
  • From: security
• SQL-Ledger – several vulnerabilities
  • From: Alexander Klink
• TLS Renegotiation Vulnerability: Proof of Concept Code (Python)
  • From: RedTeam Pentesting GmbH
• pragmaMx CMS Blind SQL/XPath Injection vulnerability
  • From: hadikiamarsi
• phpPollScript - 1.3 Remote File Include
  • From: admin
• [ GLSA 200912-02 ] Ruby on Rails: Multiple vulnerabilities
  • From: Alex Legler
• [SECURITY] [DSA 1960-1] New acpid packages fix weak file permissions
  • From: Raphael Geissert
• [SECURITY] [DSA-1959-1] New ganeti packages fix arbitrary command execution
  • From: Raphael Geissert
• [USN-874-1] Firefox 3.5 and Xulrunner 1.9.1 vulnerabilities
  • From: Jamie Strandboge
• [USN-873-1] Firefox 3.0 and Xulrunner 1.9 vulnerabilities
  • From: Jamie Strandboge
• SMF (Simple Machine Forum) 1.1.11 XSS - Discovered by : Khashayar Fereidani
  • From: irancrash
• [USN-875-1] Red Hat Cluster Suite vulnerabilities
  • From: Jamie Strandboge
• [ISecAuditors Security Advisories] PHP-Calendar <= v1.1 'configfile' Remote and Local File Inclusion vulnerability
  • From: ISecAuditors Security Advisories
• [ISecAuditors Security Advisories] Simple PHP Blog <= 0.5.1 Local File Include vulnerability
  • From: ISecAuditors Security Advisories
• [ MDVSA-2009:336 ] koffice
  • From: security
• Re: Powered By Dvbbs Version 7.1.0 Sp1 By Pass
  • From: macaco-listo
• TPTI-09-15: HP OpenView Data Protector Cell Manager Heap Overflow Vulnerability
  • From: dvlabs
• ZDI-09-099: Hewlett-Packard OpenView Data Protector Backup Client Service Buffer Overflow Vulnerability
  • From: ZDI Disclosures
• Campus Party Eu 2010 Security Challenge - Call For Participants
  • From: Campus Party EU Spain
• Rumba XML XSS vulnerability
  • From: hadikiamarsi
• [Suspected Spam][oCERT-2009-019] Ganeti path sanitization errors
  • From: Andrea Barisani
• [ MDVSA-2009:335 ] ffmpeg
  • From: security
• SEC Consult SA-20091217-0 :: Authentication bypass and file manipulation in Sitecore Staging Module
  • From: Lukas Weichselbaum
• [ISecAuditors Security Advisories] QuiXplorer <=2.4.1beta Remote Code Execution vulnerability
  • From: ISecAuditors Security Advisories
• VUPEN Security Research - Winamp PNG and JPEG Data Integer Overflow Vulnerabilities
  • From: VUPEN Security Research
• [ISecAuditors Security Advisories] Horde 3.3.5 "PHP_SELF" Cross-Site Scripting vulnerability
  • From: ISecAuditors Security Advisories
• Secunia Research: Winamp Oktalyzer Parsing Integer Overflow Vulnerability
  • From: Secunia Research
• Secunia Research: Winamp Impulse Tracker Sample Parsing Buffer Overflow
  • From: Secunia Research
• Secunia Research: Winamp Impulse Tracker Instrument Parsing Buffer Overflows
  • From: Secunia Research
• [ISecAuditors Security Advisories] Cisco ASA <= 8.x VPN SSL module Clientless URL-list control bypass
  • From: ISecAuditors Security Advisories
• Secunia Research: Winamp Ultratracker File Parsing Buffer Overflow
  • From: Secunia Research
• [ MDVSA-2009:334 ] poppler
  • From: security
• [security bulletin] HPSBMA02252 SSRT061258, SSRT061259 rev.1 - HP OpenView Storage Data Protector, Remote Arbitrary Code Execution
  • From: security-alert
• [SECURITY] [DSA 1956-1] New xulrunner packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• rPSA-2009-0161-1 hwdata kernel
  • From: rPath Update Announcements
• Cisco Security Advisory: Multiple Cisco WebEx WRF Player Vulnerabilities
  • From: Cisco Systems Product Security Incident Response Team
• {PRL} QuickHeal antivirus 2010 Local Privilege Escalation
  • From: Protek Research Lab
• [SECURITY] [DSA 1955-1] New network-manager/network-manager-applet packages fix information disclosure
  • From: Steffen Joeris
• [security bulletin] HPSBMA02416 SSRT090008 rev.4 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code
  • From: security-alert
• Kaspersky Lab Multiple Products Local Privilege Escalation Vulnerability
  • From: Maxim A. Kulakov
• FW: [Full-disclosure] File Access Vulnerability in Easy File Sharing Web Server
  • From: Thor (Hammer of God)
• VideoCache 1.9.2 vccleaner root vulnerability
  • From: Dominick LaTrappe
• Family Connections <= 2.1.3 Multiple Remote Vulnerabilities
  • From: Salvatore Fresta aka Drosophila
• [SECURITY] [DSA 1954-1] New cacti packages fix insufficient input sanitising
  • From: Steffen Joeris
• File Access Vulnerability in Easy File Sharing Web Server
  • From: Thor (Hammer of God)
• [ISecAuditors Security Advisories] WP-Forum <= 2.3 SQL Injection vulnerabilities
  • From: ISecAuditors Security Advisories
• [SECURITY] [DSA-1953-1] New expat packages fix denial of service
  • From: Stefan Fritsch
• VMSA-2009-0017 VMware vCenter, ESX patch and vCenter Lab Manager releases address cross-site scripting issues
  • From: VMware Security Team
• [ MDVSA-2009:333 ] postgresql
  • From: security
• Trango Broadband Wireless Rogue SU Authentication Bug
  • From: Blair
• [scip-Advisory 4063] PasswordManager Pro 6.1 Script Injection Vulnerability
  • From: Stefan Friedli
• [BMSA-2009-08] Multiple Vulnerabilities in PyForum
  • From: Nam Nguyen
• Daloradius XSS Vulnerability
  • From: hadikiamarsi
• [SECURITY] [DSA 1952-1] New asterisk packages fix several vulnerabilities
  • From: Steffen Joeris
• APC Switched Rack PDU XSS Vulnerability
  • From: jpecou
• [SECURITY] [DSA 1952-2] End-of-life announcement for asterisk in oldstable
  • From: Steffen Joeris
• [SECURITY] [DSA 1951-1] New firefox-sage packages fix insufficient input sanitizing
  • From: Steffen Joeris
• WSCreator 1.1 Blind SQL Injection
  • From: Salvatore Fresta aka Drosophila
• Re: WX Guest Book 1.1.208 (SQL/XSS) Multiple Remote Vulnerabilities
  • From: Packet Storm
• [security bulletin] HPSBUX02482 SSRT090249 rev.2 - HP-UX Running OpenSSL, Remote Unauthorized Data Injection, Denial of Service (DoS)
  • From: security-alert
• Exposing HMS HICP Protocol + Intellicom NetBiterConfig.exe Remote Buffer Overflow (Not patched)
  • From: Reversemode
• [security bulletin] HPSBUX02409 SSRT080171 rev.3 - HP-UX Running VERITAS File System (VRTSvxfs) or VERITAS Oracle Disk
  • From: security-alert
• Zabbix Agent : Bypass of EnableRemoteCommands=0
  • From: Nicob
• DC4420 - London DEFCON - Christmas drinks - Wednesday 16th December
  • From: Major Malfunction
• [SECURITY] [DSA-1950-1] New webkit packages fix several vulnerabilities
  • From: Giuseppe Iuculano
• Monkey HTTPd improper input validation vulnerability
  • From: Patroklos Argyroudis
• B2C Booking Centre Systems - SQL Injection Vulnerability
  • From: Salvatore Fresta aka Drosophila
• EEGshop v1.2
  • From: secu_lab_ir
• Cross-Site Scripting vulnerabilities in Invision Power Board
  • From: MustLive
• Re: IPB v2.x up to 3.0.4 XSS vulnerability
  • From: MustLive
• Re: E-Store SQL Injection Vulnerability
  • From: Packet Storm
• Miniweb 2.0 Full Path Disclosure
  • From: Salvatore Fresta aka Drosophila
• WX Guest Book 1.1.208 (SQL/XSS) Multiple Remote Vulnerabilities
  • From: admin
• Loggix Project <= 9.4.5 Multiple Remote File Inclusion Vulnerabilities
  • From: admin
• Zabbix Server : Multiple remote vulnerabilities
  • From: Nicob
• Hacktics Advisory Dec09: Oracle eBusiness Suite - Multiple Vulnerabilities Allow Remote Takeover
  • From: Ofer Maor
• [SECURITY] [DSA 1949-1] New php-net-ping packages fix arbitrary code execution
  • From: Raphael Geissert
• [ MDVSA-2009:259-1 ] snort
  • From: security
• Camino 1.6.10 Remote Array Overrun (Arbitrary code execution)
  • From: cxib
• Flock 2.5.2 Remote Array Overrun (Arbitrary code execution)
  • From: cxib
• [ MDVSA-2009:296-1 ] gimp
  • From: security
• [security bulletin] HPSBMA02483 SSRT090257 rev.2 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code
  • From: security-alert
• [security bulletin] HPSBPI02472 SSRT090196 rev.2 - Certain HP Color LaserJet Printers, Remote Unauthorized Access to Data, Denial of Service
  • From: security-alert
• [security bulletin] HPSBMA02425 SSRT080091 rev.2 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code
  • From: security-alert
• [security bulletin] HPSBMA02424 SSRT080125 rev.2 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code
  • From: security-alert
• phpCollegeExchange 0.1.5c Multiple SQL Injection Vulnerabilities
  • From: Salvatore Fresta aka Drosophila
• [security bulletin] HPSBMA02400 SSRT080144 rev.3 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code
  • From: security-alert
• [ MDVSA-2009:332 ] gimp
  • From: security
• Re: TLS / SSLv3 vulnerability explained (New ways to leverage the vulnerability)
  • From: Thierry Zoller
• [USN-872-1] KDE 4 Runtime vulnerabilities
  • From: Jamie Strandboge
• Digital Scribe 1.4.1 Multiple SQL Injection Vulnerabilities
  • From: Salvatore Fresta aka Drosophila
• E-Store SQL Injection Vulnerability
  • From: Salvatore Fresta aka Drosophila
• [USN-871-2] KDE 4 vulnerabilities
  • From: Jamie Strandboge
• [USN-871-1] KDE vulnerability
  • From: Jamie Strandboge
• [USN-870-1] PyGreSQL vulnerability
  • From: Jamie Strandboge
• [ MDVSA-2009:331 ] kdegraphics
  • From: security
• [ MDVSA-2009:330 ] kdelibs
  • From: security
• [security bulletin] HPSBMA02477 SSRT090177 rev.3 - HP OpenView Network Node Manager (OV NNM), Remote Denial of Service (DoS)
  • From: security-alert
• [security bulletin] HPSBMA02483 SSRT090257 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code
  • From: security-alert
• [ MDVSA-2009:329 ] kernel
  • From: security
• [USN-869-1] Linux kernel vulnerabilities
  • From: Kees Cook
• [security bulletin] HPSBUX02480 SSRT090253 rev.1 - HP-UX Running VRTSweb, Remote Execution of Arbitrary Code, Increase of Privilege
  • From: security-alert
• CORE-2009-1013: Multiple XSS and Injection Vulnerabilities in TestLink Test Management and Execution System
  • From: CORE Security Technologies Advisories
• RE: Millions of PDF invisibly embedded with your internal disk paths
  • From: Thor (Hammer of God)
• iDefense Security Advisory 12.08.09: Microsoft Windows Indeo32 Codec Parsing Heap Corruption Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 12.08.09: Microsoft WordPad Word97 Converter Integer Overflow Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 12.08.09: Microsoft Internet Explorer HTML Layout Engine Uninitialized Memory Vulnerability
  • From: iDefense Labs
• CA20091208-01: Security Notice for CA Service Desk
  • From: Kotas, Kevin J
• ZDI-09-098: Symantec Multiple Products VRTSweb.exe Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [ MDVSA-2009:030-1 ] amarok
  • From: security
• TPTI-09-14: HP OpenView NNM ovwebsnmpsrv.exe OVwSelection Stack Overflow Vulnerability
  • From: dvlabs
• TPTI-09-13: HP OpenView NNM snmpviewer.exe CGI Host Header Stack Overflow Vulnerability
  • From: dvlabs
• TPTI-09-12: HP OpenView NNM ovalarm.exe CGI Accept-Language Stack Overflow Vulnerability
  • From: dvlabs
• TPTI-09-11: HP OpenView NNM OvWebHelp.exe CGI Topic Heap Overflow Vulnerability
  • From: dvlabs
• TPTI-09-10: HP OpenView NNM webappmon.exe CGI Host Header Buffer Overflow Vulnerability
  • From: dvlabs
• TPTI-09-09: HP OpenView NNM ovsessionmgr.exe userid/passwd Heap Overflow Vulnerability
  • From: dvlabs
• [USN-868-1] GRUB 2 vulnerability
  • From: Jamie Strandboge
• TPTI-09-08: HP OpenView NNM ovlogin.exe CGI userid/passwd Heap Overflow Vulnerability
  • From: dvlabs
• Advisory 02/2009: PHPIDS Unserialize() Vulnerability
  • From: Stefan Esser
• ZDI-09-088: Microsoft Internet Explorer IFrame Attributes Circular Reference Dangling Pointer Vulnerability
  • From: ZDI Disclosures
• ZDI-09-095: Hewlett-Packard OpenView NNM Snmp.exe Oid Variable Buffer Overflow Vulnerability
  • From: ZDI Disclosures
• ZDI-09-097: Hewlett-Packard OpenView NNM nnmRptConfig.exe Template Variable strcat Overflow Vulnerability
  • From: ZDI Disclosures
• [ MDVSA-2009:328 ] ntp
  • From: security
• ZDI-09-096: Hewlett-Packard OpenView NNM nnmRptConfig.exe Template Variable vsprintf Overflow Vulnerability
  • From: ZDI Disclosures
• ZDI-09-094: Hewlett-Packard OpenView NNM Multiple Command Injection Vulnerabilities
  • From: ZDI Disclosures
• [ MDVSA-2009:276-1 ] python-django
  • From: security
• [ MDVSA-2009:059-1 ] xchat
  • From: security
• [USN-867-1] Ntp vulnerability
  • From: Jamie Strandboge
• Zen Cart local file disclosure vulnerability
  • From: Bogdan Calin
• Fortinet Advisory: Fortinet Discovers Microsoft Office Project Vulnerability
  • From: noreply-secresearch
• Advisory 03/2009: Piwik Cookie unserialize() Vulnerability
  • From: Stefan Esser
• UPDATE: DISA Unix SRR root compromise / CVE-2009-4211 / VU#433821
  • From: Frank Stuart
• ZDI-09-090: Microsoft Windows Intel Indeo Codec Parsing Stack Overflow Vulnerability
  • From: ZDI Disclosures
• ZDI-09-092: Adobe Flash Player JPEG Parsing Heap Overflow Vulnerability
  • From: ZDI Disclosures
• ZDI-09-093: Adobe Flash Player ActionScript Exception Handler Integer Overflow Vulnerability
  • From: ZDI Disclosures
• Fortinet Advisory: Fortinet Discovers Vulnerability in Indeo Codec
  • From: noreply-secresearch
• ZDI-09-087: Microsoft Internet Explorer CSS Race Condition Code Execution Vulnerability
  • From: ZDI Disclosures
• IPB v2.x up to 3.0.4 XSS vulnerability
  • From: Xacker
• [ MDVSA-2009:046-1 ] dia
  • From: security
• ZDI-09-091: Hewlett-Packard Application Recovery Manager MSG_PROTOCOL Stack Overflow Vulnerability
  • From: ZDI Disclosures
• Notepad++ buffer overflow issue
  • From: Don HO
• [security bulletin] HPSBUX02495 SSRT090151 rev.1 - HP-UX Running sendmail, Remote Denial of Service (DoS)
  • From: security-alert
• ZDI-09-086: Microsoft Internet Explorer XHTML DOM Manipulation Memory Corruption Vulnerability
  • From: ZDI Disclosures
• [ MDVSA-2009:091-1 ] mod_perl
  • From: security
• [ MDVSA-2009:038-1 ] blender
  • From: security
• [ MDVSA-2009:093-1 ] mpg123
  • From: security
• ZDI-09-089: Microsoft Windows Intel Indeo Codec Parsing Heap Overflow Vulnerability
  • From: ZDI Disclosures
• [SECURITY] [DSA 1948-1] New ntp packages fix denial of service
  • From: Nico Golde
• [ MDVSA-2009:126-1 ] eggdrop
  • From: security
• [ MDVSA-2009:099-1 ] openafs
  • From: security
• [ MDVSA-2009:098-1 ] krb5
  • From: security
• [ MDVSA-2009:327 ] clamav
  • From: security
• [ MDVSA-2009:133-1 ] irssi
  • From: security
• Re: Security Contact for Netcool at IBM?
  • From: Troy Bollinger
• Applicure Technologies response
  • From: tomer
• [ MDVSA-2009:191-1 ] OpenEXR
  • From: security
• [security bulletin] HPSBMA02481 SSRT090113 rev.1 - HP OpenView Data Protector Application Recovery Manager, Remote Denial
  • From: security-alert
• [ MDVSA-2009:251-1 ] postgresql8.2
  • From: security
• Security Contact for Netcool at IBM?
  • From: Michael Gripenstedt
• Secunia Research: Novell iPrint Client Date/Time Parsing Buffer Overflow
  • From: Secunia Research
• Secunia Research: Novell iPrint Client "target-frame" Parameter Buffer Overflow
  • From: Secunia Research
• [ MDVSA-2009:282-1 ] cups
  • From: security
• [SECURITY] [DSA 1947-1] New Shibboleth packages fix cross-site scripting
  • From: Moritz Muehlenhoff
• Mozilla Firefox JavaScript Prompt Spoofing Weakness
  • From: tcphttp
• [USN-866-1] gnome-screensaver vulnerability
  • From: Marc Deslauriers
• [ MDVSA-2009:326 ] mysql
  • From: security
• [ MDVSA-2009:325 ] ruby
  • From: security
• CVE-2009-3586: CoreHTTP web server off-by-one buffer overflow vulnerability
  • From: Patroklos Argyroudis
• [ MDVSA-2009:199-1 ] subversion
  • From: security
• [ MDVSA-2009:256-1 ] dbus
  • From: security
• [ MDVSA-2009:243-2 ] freetype2
  • From: security
• [ MDVSA-2009:254-1 ] graphviz
  • From: security
• [ MDVSA-2009:324 ] php
  • From: security
• [ MDVSA-2009:252-1 ] perl-IO-Socket-SSL
  • From: security
• [ MDVSA-2008:233-1 ] libcdaudio
  • From: security
• [ MDVSA-2009:229-1 ] cyrus-imapd
  • From: security
• [USN-865-1] Bind vulnerability
  • From: Marc Deslauriers
• [ MDVSA-2009:322 ] mono
  • From: security
• PhpShop Multiple Vulnerabilities
  • From: Andrea Fabrizi
• [ MDVSA-2009:323 ] apache
  • From: security
• Re: Millions of PDF invisibly embedded with your internal disk paths
  • From: Pavel Machek
• [ MDVSA-2009:234-2 ] silc-toolkit
  • From: security
• Re: Re: Re: Re: Back door trojan in acajoom-3.2.6 for joomla
  • From: anonymous
• Re: Millions of PDF invisibly embedded with your internal disk paths
  • From: Nick FitzGerald
• [SECURITY] [DSA 1946-1] New belpic packages fix cryptographic weakness
  • From: Steffen Joeris
• [ MDVSA-2009:232-1 ] libsamplerate
  • From: security
• Re: Millions of PDF invisibly embedded with your internal disk paths
  • From: Nick FitzGerald
• [ MDVSA-2009:317 ] netpbm
  • From: security
• [ MDVSA-2009:219-1 ] kompozer
  • From: security
• [ MDVSA-2009:260-1 ] imagemagick
  • From: security
• [ MDVSA-2009:215-1 ] audacity
  • From: security
• [ MDVSA-2009:272-1 ] libmikmod
  • From: security
• [ MDVSA-2009:321 ] pidgin
  • From: security
• [ MDVSA-2009:316 ] expat
  • From: security
• [ MDVSA-2009:284-1 ] gd
  • From: security
• [ MDVSA-2009:320 ] samba
  • From: security
• [ MDVSA-2009:231-1 ] htmldoc
  • From: security
• [ MDVSA-2009:307-1 ] libtool
  • From: security
• [ MDVSA-2009:319 ] xine-lib
  • From: security
• [ MDVSA-2009:318 ] xmlsec1
  • From: security
• [ MDVSA-2009:249-1 ] newt
  • From: security
• [ MDVSA-2009:297-1 ] ffmpeg
  • From: security
• [ MDVSA-2009:128-1 ] libmodplug
  • From: security
• RE: Millions of PDF invisibly embedded with your internal disk paths
  • From: Ian Bradshaw
• [ MDVSA-2009:201-1 ] fetchmail
  • From: security
• [ MDVSA-2009:314 ] apr
  • From: security
• [ MDVSA-2009:224-1 ] postfix
  • From: security
• [ MDVSA-2009:130-1 ] gstreamer0.10-plugins-good
  • From: security
• [ MDVSA-2009:200-1 ] libxml
  • From: security
• [ MDVSA-2009:213-1 ] wxgtk
  • From: security
• [ MDVSA-2009:292-1 ] wireshark
  • From: security
• [ MDVSA-2009:218-1 ] w3c-libwww
  • From: security
• [ MDVSA-2009:206-1 ] wget
  • From: security
• [ MDVSA-2009:223-1 ] xerces-c
  • From: security
• [ MDVSA-2009:312 ] dhcp
  • From: security
• [ MDVSA-2009:211-1 ] expat
  • From: security
• [ MDVSA-2009:315 ] libneon
  • From: security
• [ MDVSA-2009:212-1 ] python
  • From: security
• [ MDVSA-2009:157-1 ] perl-Compress-Raw-Zlib
  • From: security
• [ MDVSA-2009:287-1 ] xpdf
  • From: security
• [ MDVSA-2009:311 ] ghostscript
  • From: security
• Secunia Research: DevIL DICOM "GetUID()" Buffer Overflow Vulnerability
  • From: Secunia Research
• [ MDVSA-2009:142-1 ] jasper
  • From: security
• PHP 5.3.1 open_basedir bypass
  • From: cxib
• [ MDVSA-2009:158-3 ] pango
  • From: security
• [ MDVSA-2009:208-1 ] libgadu
  • From: security
• [InterN0T] Google Analytics plugin for Wordpress - XSS Vulnerability
  • From: advisories
• [ MDVSA-2009:203-1 ] curl
  • From: security
• [ MDVSA-2009:169-1 ] libtiff
  • From: security
• [ MDVSA-2009:290-1 ] firefox
  • From: security
• Invision Power Board <= 3.0.4 Local PHP File Inclusion and SQL Injection
  • From: Dawid Golunski
• [ MDVSA-2009:313-1 ] bind
  • From: security
• RE: Millions of PDF invisibly embedded with your internal disk paths
  • From: Thor (Hammer of God)
• [ MDVSA-2009:132-1 ] libsndfile
  • From: security
• FreeBSD Security Advisory FreeBSD-SA-09:15.ssl [REVISED]
  • From: FreeBSD Security Advisories
• [ MDVSA-2009:308 ] gnutls
  • From: security
• [ MDVSA-2009:310 ] openssl
  • From: security
• CORE-2009-0911: DAZ Studio Arbitrary Command Execution
  • From: CORE Security Technologies Advisories
• [USN-863-1] QEMU vulnerability
  • From: Jamie Strandboge
• [ MDVSA-2009:113-1 ] cyrus-sasl
  • From: security
• [ MDVSA-2009:309 ] ntp
  • From: security
• U.S. Defense Information Systems Agency (DISA) Unix Security Readiness Review (SRR) root compromise / VU#433821
  • From: Frank Stuart
• [ MDVSA-2009:103-1 ] udev
  • From: security
• [ MDVSA-2009:112-1 ] ipsec-tools
  • From: security
• [ MDVSA-2009:108-1 ] zsh
  • From: security
• [ MDVSA-2009:106-1 ] libwmf
  • From: security
• [ MDVSA-2009:107-1 ] acpid
  • From: security
• [ MDVSA-2009:197-3 ] nss
  • From: security
• [ MDVSA-2009:217-3 ] mozilla-thunderbird
  • From: security
• [SECURITY] [DSA 1945-1] New gforge packages fix denial of service
  • From: Steffen Joeris
• [SECURITY] [DSA 1944-1] New request-tracker packages fix session hijack vulnerability
  • From: Steffen Joeris
• FreeBSD Security Advisory FreeBSD-SA-09:17.freebsd-update
  • From: FreeBSD Security Advisories
• FreeBSD Security Advisory FreeBSD-SA-09:16.rtld
  • From: FreeBSD Security Advisories
• FreeBSD Security Advisory FreeBSD-SA-09:15.ssl
  • From: FreeBSD Security Advisories
• Re: Millions of PDF invisibly embedded with your internal disk paths
  • From: Pavel Machek
• Adobe Illustrator CS4 (V14.0.0) Encapsulated Postscript (.eps) Overlong DSC Comment Buffer Overflow Exploit
  • From: nospam
• [ MDVSA-2009:121-1 ] lcms
  • From: security
• [SECURITY] [DSA 1943-1] New openldap2.3/openldap packages fix SSL certificate verification weakness
  • From: Giuseppe Iuculano
• Call for Papers - you Sh0t the Sheriff 4 - Security Conference, Brazil
  • From: Luiz Eduardo
• Re: ** FreeBSD local r00t zeroday
  • From: Barkın KILIÇ
• Secunia Research: Lateral Arts Photobox uploader ActiveX Control Buffer Overflow
  • From: Secunia Research
• Re: ** FreeBSD local r00t zeroday
  • From: Robert BARABAS
• Same-origin policy bypass vulnerabilities in several VPN products reported
  • From: Juha-Matti Laurio
• [ GLSA 200912-01 ] OpenSSL: Multiple vulnerabilities
  • From: Alex Legler
• Re: [Full-disclosure] Remote Command Execution in dotDefender Site Management
  • From: Andrew Farmer
• 40 vulnerabilities in SMF 1.1.10/SMF 2.0RC2 by elhacker.net (Simple Audit)
  • From: smf2 . review
• Secunia Research: Roxio Creator Image Rendering Integer Overflow Vulnerability
  • From: Secunia Research
• Re: [rejected] Oracle exploit for CTXSYS.DRVXTABC.CREATE_TABLES and others
  • From: Andrea Purificato
• AST-2009-010: RTP Remote Crash Vulnerability
  • From: Asterisk Security Team
• Theeta CMS (Cross Site Scripting,SQL Injection) Multiple Vulnerabilities
  • From: c0dy
• Upcoming FreeBSD Security Advisory
  • From: FreeBSD Security Officer
• Re: [Full-disclosure] ** FreeBSD local r00t zeroday
  • From: Ryan Steinmetz
• ** FreeBSD local r00t zeroday
  • From: Kingcope
• [oCERT-2009-017] PHP multiple issues
  • From: Andrea Barisani
• WinAppDbg 1.3 is out!
  • From: Mario Alejandro Vilas Jerez
• Re: [Full-disclosure] ** FreeBSD local r00t zeroday
  • From: Ed Carp
• [ MDVSA-2009:305 ] php
  • From: security
• [SECURITY] [DSA 1942-1] New wireshark packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• Eshopbuilde CMS SQL Injection Vulnerability
  • From: faghani
• [ MDVSA-2009:304 ] bind
  • From: security
• Oracle exploit for CTXSYS.DRVXTABC.CREATE_TABLES and others
  • From: Andrea Purificato
• [ GLSA 200911-06 ] PEAR Net_Traceroute: Command injection
  • From: Alex Legler
• [ MDVSA-2009:304 ] php
  • From: security
• TLS / SSLv3 vulnerability explained (New ways to leverage the vulnerability)
  • From: Thierry Zoller
• Announce: RFIDIOt-1.0a released - November 2009
  • From: Adam Laurie
• Windows packages for BIND9 contain vulnerable MSVC runtime components
  • From: Stefan Kanthak
• Eureka Mail Client Remote Buffer Overflow Exploit XP SP3 English Egghunter Edition
  • From: k4mr4n_St
• [ MDVSA-2009:306 ] dovecot
  • From: security
• Xxasp v3.3.2 Sql injection
  • From: secu_lab_ir
• [USN-862-1] PHP vulnerabilities
  • From: Marc Deslauriers
• Remote Command Execution in dotDefender Site Management
  • From: John Dos
• [BMSA-2009-07] Backdoor in PyForum
  • From: Nam Nguyen
• [ MDVSA-2009:303 ] php
  • From: security
• Some more details on IE STYLE zero-day
  • From: ds . adv . pub
• Cacti 0.8.7e: Multiple security issues
  • From: Moritz Naumann
• [security bulletin] HPSBUX02482 SSRT090249 rev.1 - HP-UX Running OpenSSL, Remote Unauthorized Data Injection, Denial of
  • From: security-alert
• [SECURITY] [DSA 1941-1] New poppler packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA-1940-1] New php5 packages fix several issues
  • From: Stefan Fritsch
• [ GLSA 200911-05 ] Wireshark: Multiple vulnerabilities
  • From: Alex Legler
• [resent] [ GLSA 200911-04 ] dstat: Untrusted search path
  • From: Robert Buchholz
• [ GLSA 200911-03 ] UW IMAP toolkit: Multiple vulnerabilities
  • From: Robert Buchholz
• Re: Millions of PDF invisibly embedded with your internal disk paths
  • From: Patrick Webster
• rPSA-2009-0156-1 sun-jdk sun-jre
  • From: rPath Update Announcements
• rPSA-2009-0155-1 httpd mod_ssl
  • From: rPath Update Announcements
• rPSA-2009-0154-1 httpd mod_ssl
  • From: rPath Update Announcements
• [SECURITY] [DSA 1939-1] New libvorbis packages fix several vulnerabilities
  • From: Giuseppe Iuculano
• Vulnerabilities in WP-Cumulus for WordPress
  • From: MustLive
• [security bulletin] HPSBMA02417 SSRT090031 rev.2 - HP Data Protector Express and HP Data Protector Express Single Server
  • From: security-alert
• [USN-861-1] libvorbis vulnerabilities
  • From: Marc Deslauriers
• New Paper: MitM Attacks against the chipTAN comfort Online Banking System
  • From: RedTeam Pentesting GmbH
• Executing arbitrary PHP code on OpenX <= 2.8.1
  • From: Moritz Naumann
• XM Easy Personal FTP Server Remote DoS Vulnerability
  • From: leinakesi
• TYPSoft FTP Server 'APPE' and 'DELE' Commands Remote DoS Vulnerabilities
  • From: leinakesi
• RE: Millions of PDF invisibly embedded with your internal disk paths
  • From: Thor (Hammer of God)
• CORE-2009-0910: Autodesk Maya Script Nodes Arbitrary Command Execution
  • From: CORE Security Technologies Advisories
• CORE-2009-0909: Autodesk 3DS Max Application Callbacks Arbitrary Command Execution
  • From: CORE Security Technologies Advisories
• CORE-2009-0908: Autodesk SoftImage Scene TOC Arbitrary Command Execution
  • From: CORE Security Technologies Advisories
• Millions of PDF invisibly embedded with your internal disk paths
  • From: Inferno
• [ MDVSA-2009:301 ] kernel
  • From: security
• Code to mitigate IE STYLE zero-day
  • From: ds . adv . pub
• [ MDVSA-2009:302 ] php
  • From: security
• [SECURITY] [DSA 1938-1] New php-mail packages fix insufficient input sanitising
  • From: Steffen Joeris
• [Bkis-13-2009] e107 Multiple Vulnerabilities
  • From: Bkis
• Vulnerabilities in plugins for WordPress
  • From: MustLive
• [SECURITY] [DSA 1937-1] New gforge packages fix cross-site scripting
  • From: Steffen Joeris
• ZDI-09-085: Hewlett-Packard Operations Manager Server Backdoor Account Code Execution Vulnerability
  • From: ZDI Disclosures
• VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components
  • From: VMware Security Team
• IE7
  • From: info
• K-Meleon 1.5.3 Remote Array Overrun (Arbitrary code execution)
  • From: cxib
• [security bulletin] HPSBMA02478 SSRT090251 rev.1 - HP Operations Manager for Windows, Remote Unauthorized Access
  • From: security-alert
• PHP "multipart/form-data" denial of service
  • From: Bogdan Calin
• Firefox 3.5.3 Remote Array Overrun (UPDATE)
  • From: cxib
• KDE KDELibs 4.3.3 Remote Array Overrun (Arbitrary code execution)
  • From: cxib
• SeaMonkey 1.1.8 Remote Array Overrun (Arbitrary code execution)
  • From: cxib
• Opera 10.01 Remote Array Overrun (Arbitrary code execution)
  • From: cxib
• NSA Iraqi Computer Attacks And U.S. Defense
  • From: Gadi Evron
• AssetsSoSimple supplier_admin.php Supplier Field XSS
  • From: Bugs NotHugs
• Auto Manager admin.cgi Multiple Field XSS
  • From: Bugs NotHugs
• [security bulletin] HPSBMA02477 SSRT090177 rev.2 - HP OpenView Network Node Manager (OV NNM), Remote Denial of Service (DoS)
  • From: security-alert
• [security bulletin] HPSBPI02472 SSRT090196 rev.1 - Certain HP Color LaserJet Printers, Remote Unauthorized Access to Data, Denial of Service
  • From: security-alert
• [USN-860-1] Apache vulnerabilities
  • From: Jamie Strandboge
• CORE-2009-1027: IBM SolidDB invalid error code vulnerability
  • From: CORE Security Technologies Advisories
• Announcement: Critical Internet Infrastructure WG is now open to public participation
  • From: Gadi Evron
• Secunia Research: RhinoSoft Serv-U TEA Decoding Buffer Overflow
  • From: Secunia Research
• [security bulletin] HPSBMI02473 SSRT080138 rev.1 - Cisco Catalyst Blade Switch 3020/3120, Remote Denial of Service (DoS)
  • From: security-alert
• TLS / SSLv3 vulnerability explained (DRAFT)
  • From: Thierry Zoller
• DEFCON London - DC4420 - NO MEETING this Thursday! 19th November 2009
  • From: Major Malfunction
• [security bulletin] HPSBUX02409 SSRT080171 rev.2 - HP-UX Running VERITAS File System (VRTSvxfs) or VERITAS Oracle Disk Manager (VRTSodm), Local Escalation of Privilege
  • From: security-alert
• [ GLSA 200911-02 ] Sun JDK/JRE: Multiple vulnerabilites
  • From: Alex Legler