Bugtraq

• Thread Index

• [InterN0T] Pivot 1.40.4-7 - Multiple Vulnerabilities
  • From: security
• CakeCMS XSRF Vulnerability
  • From: onur . turkeshan
• Link Logger syslogd resource overwhelm DoS
  • From: mcyr2
• SugarCRM 5.2.0e Remote Code Execution
  • From: ascii
• [TZO-30-2009] Kaspersky and the silent patch that wasn't (PDF evasion, forced full disclosure)
  • From: Thierry Zoller
• [TZO-37-2009] Apple Safari <v4 Remote code execution
  • From: Thierry Zoller
• [waraxe-2009-SA#074] - Multiple Vulnerabilities in TorrentTrader Classic 1.09
  • From: come2waraxe
• [SECURITY] [DSA 1815-1] New libtorrent-rasterbar packages fix denial of service
  • From: Moritz Muehlenhoff
• [TZO-36-2009] Apple Safari & Quicktime Denial of Service
  • From: Thierry Zoller
• [TZO-33-2009] Frisk F-prot evasion (TAR)
  • From: Thierry Zoller
• [TZO-32-2009] Norman generic bypass (RAR)
  • From: Thierry Zoller
• [TZO-31-2009] Ikarus multiple generic evasions (CAB,ZIP,RAR)
  • From: Thierry Zoller
• [USN-779-1] Firefox and Xulrunner vulnerabilities
  • From: Jamie Strandboge
• Serena Dimensions CM has insufficient default privileges
  • From: roland . gruber . extern
• Secunia Research: Mozilla Firefox Java Applet Loading Vulnerability
  • From: Secunia Research
• [USN-787-1] Apache vulnerabilities
  • From: Jamie Strandboge
• VUPEN Security - Adobe Acrobat and Reader JBIG2 Filter Heap Overflow Vulnerability
  • From: VUPEN Security Research
• VUPEN Security - Microsoft Office Word Document Parsing Buffer Overflow Vulnerability
  • From: VUPEN Security Research
• iDefense Security Advisory 06.11.09: Adobe Reader and Acrobat FlateDecode Integer Overflow Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 06.11.09: Microsoft Windows 2000 Print Spooler Remote Stack Buffer Overflow Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 06.11.09: Microsoft Excel SST Record Integer Overflow Vulnerability
  • From: iDefense Labs
• ModSecurity (Core Rules) HTTP Parameter Pollution Filter Bypass Vulnerability
  • From: lavakumar kuppan
• FortiGuard Advisory: Adobe Reader/Acrobat TrueType Font Processing Memory Corruption Vulnerability
  • From: noreply-secresearch@xxxxxxxxxxxx
• iDefense Security Advisory 06.11.09: Multiple Vendor WebKit Error Handling Use After Free Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 06.11.09: Microsoft Active Directory Hexdecimal DN AttributeValue Invalid Free Vulnerability
  • From: iDefense Labs
• MULTIPLE SQL INJECTION VULNERABILITIES --Splog <= v-1.2 Beta-->
  • From: y3nh4ck3r
• (Post Form login var 'username') BLIND SQLi exploit--Open Biller 0.1-->
  • From: y3nh4ck3r
• ZDI-09-042: Adobe Reader U3D RHAdobeMeta Stack Overflow Vulnerability
  • From: ZDI Disclosures
• F5 FirePass Cross-Site Scripting vulnerability
  • From: Sjoerd Resink
• [USN-786-1] apr-util vulnerabilities
  • From: Jamie Strandboge
• ZDI-09-036: Microsoft Internet Explorer setCapture Memory Corruption Vulnerability
  • From: ZDI Disclosures
• Apple Safari cross-domain XML theft vulnerability
  • From: Chris Evans
• Secunia Research: Adobe Reader JBIG2 Text Region Segment Buffer Overflow
  • From: Secunia Research
• ZDI-09-041: Microsoft Internet Explorer 8 Rows Property Dangling Pointer Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-09-039: Microsoft Internet Explorer onreadystatechange Memory Corruption Vulnerability
  • From: ZDI Disclosures
• Secunia Research: Microsoft PowerPoint Freelance Layout Parsing Vulnerability
  • From: Secunia Research
• ZDI-09-037: Microsoft Internet Explorer Concurrent Ajax Request Memory Corruption Vulnerability
  • From: ZDI Disclosures
• [ECHO_ADV_110$2009] Firefox (GNU/Linux version) <= 3.0.10 Denial Of Services
  • From: y3dips
• ZDI-09-040: Microsoft Office Excel QSIR Record Pointer Corruption Vulnerability
  • From: ZDI Disclosures
• XM Easy Personal FTP Server HELP and TYPE command Remote Denial of Service exploit
  • From: vinodsharma . mimit
• ZDI-09-035: Microsoft Word Document Stack Based Buffer Overflow Vulnerability
  • From: ZDI Disclosures
• FortiGuard Advisory: Apple Safari Remote Memory Corruption Vulnerability
  • From: noreply-secresearch@xxxxxxxxxxxx
• ZDI-09-038: Microsoft Internet Explorer Event Handler Memory Corruption Vulnerability
  • From: ZDI Disclosures
• FortiGuard Advisory: Microsoft Internet Explorer DHTML Handling Remote Memory Corruption Vulnerability
  • From: noreply-secresearch@xxxxxxxxxxxx
• [security bulletin] HPSBUX02435 SSRT090059 rev.1 - HP-UX Running OpenSSL, Remote Denial of Service (DoS), Bypass Security Restrictions
  • From: security-alert
• [SECURITY] UPDATED CVE-2008-5515 RequestDispatcher directory traversal vulnerability
  • From: Mark Thomas
• FreeBSD Security Advisory FreeBSD-SA-09:09.pipe
  • From: FreeBSD Security Advisories
• FreeBSD Security Advisory FreeBSD-SA-09:10.ipv6
  • From: FreeBSD Security Advisories
• FreeBSD Security Advisory FreeBSD-SA-09:11.ntpd
  • From: FreeBSD Security Advisories
• [USN-775-2] Quagga regression
  • From: Kees Cook
• catching up on several recently fixed bugs of note
  • From: Michal Zalewski
• CORE-2008-0826 - Internet Explorer Security Zone restrictions bypass
  • From: CORE Security Technologies Advisories
• CORE-2009-0521 - DX Studio Player Firefox plug-in command injection
  • From: CORE Security Technologies Advisories
• Re: XMLHttpRequest file upload vulnerability Chrome 2 & Safari 3
  • From: Michal Zalewski
• CVE-2009-1151: phpMyAdmin Remote Code Execution Proof of Concept
  • From: Adrian P.
• Secunia Research: Microsoft Excel String Parsing Integer Overflow Vulnerability
  • From: Secunia Research
• Secunia Research: Microsoft Excel Record Parsing Array Indexing Vulnerability
  • From: Secunia Research
• Re: XMLHttpRequest file upload vulnerability Chrome 2 & Safari 3
  • From: Adrian P.
• New paper - Testing the Enterprise Security: Anti-Spam and Anti-Virus Solutions
  • From: marian . ventuneac
• [USN-785-1] ipsec-tools vulnerabilities
  • From: Marc Deslauriers
• (Post Form var 'username') BLIND SQLi exploit --S-CMS <= v-2.0 Beta3-->
  • From: y3nh4ck3r
• MULTIPLE SQL INJECTION VULNERABILITIES --S-CMS <= v-2.0 Beta3-->
  • From: y3nh4ck3r
• MULTIPLE LOCAL FILE INCLUSION VULNERABILITIES --S-CMS <= v-2.0 Beta3-->
  • From: y3nh4ck3r
• [security bulletin] HPSBMA02430 SSRT080094 rev.1 - HP OpenView Network Node Manager (OV NNM) Running SNMP and MIB, Remote Execution of Arbitrary Code, Denial of Service (DoS)
  • From: security-alert
• TELUS Security Labs VR - Microsoft Office Excel Malformed Records Stack Buffer Overflow
  • From: noreply
• XMLHttpRequest file upload vulnerability Chrome 2 & Safari 3
  • From: pantera_bleed
• Apple Safari local file theft vulnerability
  • From: Chris Evans
• ZDI-09-034: Apple Safari SVG Set.targetElement() Memory Corruption Vulnerability
  • From: ZDI Disclosures
• ZDI-09-032: Apple WebKit attr() Invalid Attribute Memory Corruption Vulnerability
  • From: ZDI Disclosures
• ZDI-09-031: libpurple MSN Protocol SLP Message Heap Overflow Vulnerability
  • From: ZDI Disclosures
• ZDI-09-033: Apple WebKit dir Attribute Freeing Dangling Object Pointer Vulnerability
  • From: ZDI Disclosures
• [USN-784-1] ImageMagick vulnerability
  • From: Jamie Strandboge
• [SECURITY] CVE-2008-5515 RequestDispatcher directory traversal vulnerability
  • From: Mark Thomas
• New paper by Amit Klein (Trusteer) - Temporary user tracking in major browsers and Cross-domain information leakage and attacks
  • From: Amit Klein
• [USN-783-1] eCryptfs vulnerability
  • From: Kees Cook
• Rasterbar libtorrent arbitrary file overwrite vulnerability
  • From: Dimitris Glynos
• [ MDVSA-2009:132 ] libsndfile
  • From: security
• [ MDVSA-2009:131 ] apr-util
  • From: security
• [SECURITY] [DSA 1813-1] New evolution-data-server packages fix several vulnerabilities
  • From: Steffen Joeris
• [DSECRG-09-015] SAP GUI 6.4 Buffer Overflow vulnerability
  • From: Alexandr Polyakov
• [ MDVSA-2009:131-1 ] apr-util
  • From: security
• ('dest') Blind (SQLi) EXPLOIT --Kjtechforce mailman Beta-1 -->
  • From: y3nh4ck3r
• [ MDVSA-2009:130 ] gstreamer0.10-plugins-good
  • From: security
• [security bulletin] HPSBMA02433 SSRT090084 rev.1 - HP Discovery & Dependency Mapping Inventory (DDMI) Running on Windows, Remote Unauthorized Access
  • From: security-alert
• SQL INJECTION VULNERABILITY--Kjtechforce mailman Beta-1-->
  • From: y3nh4ck3r
• Re: [InterN0T] SiteCore.NET 6.0.0 - XSS Vulnerability-fixed
  • From: pm
• Re: [Full-disclosure] Cross Site Scripting in PHP Nuke 8.0 Version
  • From: Christian Kujau
• Re: Exploiting IE8 UTF-7 XSS Vulnerability using Local Redirection
  • From: lord . ittk
• EC2ND 2009 CFP - 5th European Conference on Computer Network Defence
  • From: Maggi Federico
• Reminder: DeepSec 2009 Call for Papers is open
  • From: DeepSec Conference
• LightOpenCMS 0.1 pre-alpha Remote SQL Injection
  • From: Salvatore "drosophila" Fresta
• [ISecAuditors Security Advisories] Joomla! 1.5.10 JA_Purity Multiple Persistent XSS
  • From: ISecAuditors Security Advisories
• [SECURITY] CVE-2009-0580 UPDATED Apache Tomcat User enumeration vulnerability with FORM authentication
  • From: Mark Thomas
• [ MDVSA-2009:129 ] file
  • From: security
• [Security] XM Easy Personal FTP Server Multiple DoS vulnerabilities
  • From: neeraj . thakar
• Re: Re: [InterN0T] Geeklog 1.5 - Pre-Installation Vulnerabilities
  • From: peter
• Re: [SECURITY] CVE-2009-0580 Apache Tomcat User enumeration vulnerability with FORM authentication
  • From: Christopher Schultz
• Re: [InterN0T] Geeklog 1.5 - Pre-Installation Vulnerabilities
  • From: Dirk Haun
• [SECURITY] [DSA 1812-1] New apr-util packages fix several vulnerabilities
  • From: Stefan Fritsch
• [ MDVSA-2009:128 ] libmodplug
  • From: security
• SQL INJECTION VULNERABILITY--LightOpen CMS Devel 0.1-->
  • From: y3nh4ck3r
• [InterN0T] Flatnux 2009-03-27 - XSS Vulnerabilities + More
  • From: security
• [InterN0T] Geeklog 1.5 - Pre-Installation Vulnerabilities
  • From: security
• [InterN0T] SiteCore.NET 6.0.0 - XSS Vulnerability
  • From: security
• [InterN0T] LightNEasy 2.2.2 - HTML Injection Vulnerability
  • From: security
• [InterN0T] moziloCMS 1.11.1 - XSS Vulnerability
  • From: security
• [SECURITY] CVE-2009-0783 Apache Tomcat Information disclosure
  • From: Mark Thomas
• OCS Inventory NG 1.02 - Directory Traversal
  • From: Nico Leidecker
• [ MDVSA-2009:127 ] gaim
  • From: security
• [SECURITY] CVE-2009-0580 Apache Tomcat User enumeration vulnerability with FORM authentication
  • From: Mark Thomas
• [SECURITY] CVE-2009-0033 Apache Tomcat DoS when using Java AJP connector
  • From: Mark Thomas
• [USN-780-1] CUPS vulnerability
  • From: Marc Deslauriers
• Re: TPTI-09-03: Apple iTunes Multiple Protocol Handler Buffer Overflow Vulnerabilities
  • From: Will Drewry
• [USN-781-1] Pidgin vulnerabilities
  • From: Marc Deslauriers
• [USN-781-2] Gaim vulnerabilities
  • From: Marc Deslauriers
• Advisory: Apple QuickTime Image Description Atom Sign Extension Memory Corruption
  • From: Roee Hay
• [SECURITY] [DSA 1810-1] New libapache-mod-jk packages fix information disclosure
  • From: Stefan Fritsch
• CORE-2009-0420 - Apple CUPS IPP_TAG_UNSUPPORTED Handling null pointer Vulnerability
  • From: CORE Security Technologies Advisories
• TPTI-09-03: Apple iTunes Multiple Protocol Handler Buffer Overflow Vulnerabilities
  • From: dvlabs
• [SECURITY] [DSA 1810-1] New cups/cupsys packages fix denial of service
  • From: Nico Golde
• TPTI-09-04: Apple Terminal xterm Resize Escape Sequence Memory Corruption Vulnerability
  • From: dvlabs
• ZDI-09-030: Apple Quicktime PICT Opcode 0x71 Heap Overflow Vulnerability
  • From: ZDI Disclosures
• ZDI-09-029: Apple QuickTime Jpeg2000 Marker Size Heap Overflow Vulnerability
  • From: ZDI Disclosures
• ZDI-09-028: Apple QuickTime CRGN Atom Parsing Heap Buffer Overflow Vulnerability
  • From: ZDI Disclosures
• ZDI-09-027: Apple Quicktime PICT Opcode 0x8201 Heap Overflow Vulnerability
  • From: ZDI Disclosures
• ZDI-09-026: Apple QuickTime Packed-bit Decoding Heap Overflow Vulnerability
  • From: ZDI Disclosures
• ZDI-09-025: Apple Quicktime Picture Viewer FLC Delta-Encoded Frame Decompression Vulnerability
  • From: ZDI Disclosures
• [security bulletin] HPSBUX02429 SSRT090058 rev.2 - HP-UX Running Java, Remote Execution of Arbitrary Code and Other Vulnerabilities
  • From: security-alert
• MULTIPLE LOCAL FILE INCLUSION VULNERABILITIES -- Online Grades & Attendance <= v-3.2.6 -->
  • From: y3nh4ck3r
• [SECURITY] [DSA 1809-1] New Linux 2.6.26 packages fix several vulnerabilities
  • From: dann frazier
• [ MDVSA-2009:126 ] eggdrop
  • From: security
• Secunia Research: Apple QuickTime MS ADPCM Encoding Buffer Overflow
  • From: Secunia Research
• ACDSee Products TIFF and Font Parsing Buffer Overflow Vulnerabilities
  • From: VUPEN Security Research
• Secunia Research: QuickTime Sorenson Video 3 Content Parsing Vulnerability
  • From: Secunia Research
• (Post Form --> 'cc') Blind (SQLi) EXPLOIT --Online Grades & Attendance <= v-3.2.6-->
  • From: y3nh4ck3r
• Re: Re: (Post Form --> Parent Register (name)) Credentials Changer (SQLi) EXPLOIT -- Online Grades & Attendance v-3.2.6-->
  • From: y3nh4ck3r
• The father of all bombs - another webdav fiasco
  • From: Kingcope
• Re: (Post Form --> Parent Register (name)) Credentials Changer (SQLi) EXPLOIT -- Online Grades & Attendance v-3.2.6-->
  • From: Jeremy Brown
• [USN-778-1] cron vulnerability
  • From: Jamie Strandboge
• Zemana Antilogger 1.9.2 DoS attack
  • From: loginit
• ZDI-09-024: Safenet SoftRemote IKE Service Remote Stack Overflow Vulnerability
  • From: ZDI Disclosures
• ACSAC 2009 submissions due June 8 and June 10 (extended)
  • From: acsac . publicity
• [SECURITY] [DSA 1808-1] New drupal6 packages fix insufficient input sanitising
  • From: Steffen Joeris
• Re: MULTIPLE REMOTE VULNERABILITIES --Small Pirates v-2.1-->
  • From: y3nh4ck3r
• FRHACK 2009 Final Call For Papers extended
  • From: Jerome Athias
• MULTIPLE SQL INJECTION VULNERABILITIES -- Online Grades & Attendance v-3.2.6 -->
  • From: y3nh4ck3r
• CFP 26C3 / 26th Chaos Communication Congress
  • From: lists
• ASMAX AR 804 gu Web Management Console Arbitrary Shell Command Injection Vulnerability
  • From: michal . sajdak
• OCS Inventory NG 1.02 - Multiple SQL Injections
  • From: Nico Leidecker
• (Post Form --> Parent Register (name)) Credentials Changer (SQLi) EXPLOIT -- Online Grades & Attendance v-3.2.6-->
  • From: y3nh4ck3r
• [ MDVSA-2009:124 ] apache
  • From: security
• [SECURITY] [DSA 1807-1] New cyrus-sasl2/cyrus-sasl2-heimdal packages fix arbitrary code execution
  • From: Nico Golde
• FIREFOX URL space character SPOOF
  • From: xushaopei
• ICQ 6.5 URL Search Hook/ICQToolBar.dll .URL file processing Windows Explorer remote buffer overflow poc
  • From: nospam
• [ MDVSA-2009:125 ] wireshark
  • From: security
• Linksys WAG54G2 Web Management Console Local Arbitrary Shell Command Injection Vulnerability
  • From: michal . sajdak
• Whitepaper
  • From: Jared DeMott
• Re: [InterN0T] Achievo 1.3.4 - XSS Vulnerability
  • From: security
• SonicWALL SSL-VPN Appliance Format String Vulnerability
  • From: Patrick Webster
• VMSA-2009-0007 VMware Hosted products and ESX and ESXi patches resolve security issues
  • From: VMware Security team
• Re: [InterN0T] AdPeeps 8.5d1 - XSS and HTML Injection Vulnerabilities
  • From: support
• Re: Re: [InterN0T] AMember 3.1.7 - Multiple Vulnerabilities
  • From: security
• (whitepaper) Microsoft WPAD Technology Weaknesses [PTResearch Team]
  • From: srublev
• Re: PHP Nuke v.8.0 (referer) SQL Injection
  • From: a
• [TZO-28-2009] - Avira Antivir generic RAR,CAB,ZIP
  • From: Thierry Zoller
• Novell Groupwise fails to properly sanitize emails.
  • From: c3rb3r
• [InterN0T] Achievo 1.3.4 - XSS Vulnerability
  • From: security
• CORE-2009-0401 - StoneTrip S3DPlayers remote command injection
  • From: CORE Security Technologies Advisories
• Re: Insufficient Authentication vulnerability in Acer notebooks
  • From: Susan Bradley
• Re[2]: [TZO-27-2009] Firefox Denial of Service (Keygen)
  • From: Thierry Zoller
• [TZO-27-2009] Firefox Denial of Service (Keygen)
  • From: Thierry Zoller
• Re: Insufficient Authentication vulnerability in Acer notebooks
  • From: MustLive
• Re: [InterN0T] AMember 3.1.7 - Multiple Vulnerabilities
  • From: TK147
• Call For Papers – ACM CCS 2009 Workshops
  • From: Christopher Kruegel
• ZDI-09-021: Apple QuickTime PICT Unspecified Tag Heap Overflow Vulnerability
  • From: ZDI Disclosures
• Re: [TZO-27-2009] Firefox Denial of Service (Keygen)
  • From: Tavis Ormandy
• rPSA-2009-0091-1 cyrus-sasl cyrus-sasl-server
  • From: rPath Update Announcements
• [Bkis-09-2009] XSS vulnerability in 'Monitor_Bandwidth' - PRTG Traffic Grapher
  • From: Bkis
• rPSA-2009-0095-1 tshark wireshark
  • From: rPath Update Announcements
• ecshop 2.6.2
  • From: info
• Survey: "MIME/Content-Type-Sniffing" Issues in Image Uploads in Forum Scripts
  • From: Jacques Copeau
• rPSA-2009-0092-1 ntp ntp-utils
  • From: rPath Update Announcements
• MULTIPLE REMOTE VULNERABILITIES --Small Pirates v-2.1-->
  • From: y3nh4ck3r
• New paper: Understanding Microsoft's KB971492 IIS WebDAV Vuln
  • From: Steve Friedl
• [InterN0T] AdPeeps 8.5d1 - XSS and HTML Injection Vulnerabilities
  • From: security
• [ MDVSA-2009:123 ] opensc
  • From: security
• Re[2]: [Full-disclosure] [TZO-26-2009] Firefox (all?) Denial of Service through unclamped loop (SVG)
  • From: Thierry Zoller
• Re[2]: Addendum : [TZO-26-2009] Firefox (all?) Denial of Service through unclamped loop (SVG)
  • From: Vladimir '3APA3A' Dubrovin
• Re: [Full-disclosure] [TZO-26-2009] Firefox (all?) Denial of Service through unclamped loop (SVG)
  • From: Michal Zalewski
• Re[2]: [Full-disclosure] Addendum : [TZO-26-2009] Firefox (all?) Denial of Service through unclamped loop (SVG)
  • From: Thierry Zoller
• [ GLSA 200905-09 ] libsndfile: User-assisted execution of arbitrary code
  • From: Alex Legler
• Re: Addendum : [TZO-26-2009] Firefox (all?) Denial of Service through unclamped loop (SVG)
  • From: Jim Parkhurst
• [security bulletin] HPSBUX02429 SSRT090058 rev.1 - HP-UX Running Java, Remote Execution of Arbitrary Code and Other Vulnerabilities
  • From: security-alert
• Vanilla v.1.1.7 Cross-Site Scripting
  • From: darkz . gsa
• PHP Nuke v.8.0 (referer) SQL Injection
  • From: darkz . gsa
• Re: Backdoor in com_rsgallery2 gallery extension for joomla
  • From: Jonah Braun
• W3af ninja training class in NYC
  • From: Michelangelo Sidagni
• [IMF 2009] 3rd Call - Deadline Extended
  • From: Oliver Goebel
• Addendum : [TZO-26-2009] Firefox (all?) Denial of Service through unclamped loop (SVG)
  • From: Thierry Zoller
• [ GLSA 200905-08 ] NTP: Remote execution of arbitrary code
  • From: Alex Legler
• SEC Consult SA-20090525-4 :: SonicOS Format String Vulnerability
  • From: Bernhard Mueller
• SEC Consult SA-20090525-3 :: SonicWALL Global VPN Client Local Privilege Escalation Vulnerability
  • From: Bernhard Mueller
• COWON America jetCast 2.0.4.1109 (.mp3) local heap buffer overlow exploit
  • From: nospam
• SEC Consult SA-20090525-2 :: SonicWALL Global Security Client Local Privilege Escalation Vulnerability
  • From: Bernhard Mueller
• [ GLSA 200905-07 ] Pidgin: Multiple vulnerabilities
  • From: Alex Legler
• SEC Consult SA-20090525-1 :: Nortel Contact Center Manager Server Password Disclosure Vulnerability
  • From: Bernhard Mueller
• Backdoor in com_rsgallery2 gallery extension for joomla
  • From: Jan van Niekerk
• SEC Consult SA-20090525-0 :: Nortel Contact Center Manager Server Authentication Bypass Vulnerability
  • From: Bernhard Mueller
• Multiple vulnerabilities in several ATEN IP KVM Switches
  • From: Jakob Lell
• [TZO-26-2009] Firefox (all?) Denial of Service through unclamped loop (SVG)
  • From: Thierry Zoller
• Arcade Trade Script XSS
  • From: SmOk3
• PAPER: Generic Unpacking of Self-modifying, Aggressive, Packed Binary Programs
  • From: Piotr Bania
• Hardening OSX against CVE-2008-5353
  • From: Marc Schoenefeld
• [ GLSA 200905-05 ] FreeType: Multiple vulnerabilities
  • From: Alex Legler
• Secunia Research: Sun Solaris "sadmind" Buffer Overflow Vulnerability
  • From: Secunia Research
• MULTIPLE SQL INJECTION VULNERABILITIES --Joomla Component 'Boy Scout Advancement' <= v-0.3 (com_bsadv)-->
  • From: y3nh4ck3r
• [ MDVSA-2009:122 ] squirrelmail
  • From: security
• [SECURITY] [DSA 1806-1] New cscope packages fix arbitrary code execution
  • From: Moritz Muehlenhoff
• Re: FUD Forum < 2.7.1 PHP code injection vurnelability
  • From: naudefj
• [ GLSA 200905-04 ] GnuTLS: Multiple vulnerabilities
  • From: Alex Legler
• [ GLSA 200905-02 ] Cscope: User-assisted execution of arbitrary code
  • From: Pierre-Yves Rofes
• [InterN0T] AMember 3.1.7 - Multiple Vulnerabilities
  • From: security
• [ GLSA 200905-03 ] IPSec Tools: Denial of Service
  • From: Alex Legler
• [ GLSA 200905-06 ] acpid: Denial of Service
  • From: Pierre-Yves Rofes
• Secunia Research: Sun Solaris "sadmind" Integer Overflow Vulnerability
  • From: Secunia Research
• MULTIPLE REMOTE VULNERABILITIES --MiniTwitter<=v0.3-Beta-->
  • From: y3nh4ck3r
• ChinaGames (CGAgent.dll) ActiveX Remote Code Execution Exploit
  • From: info
• [oCERT-2009-006] Android improper package verification when using shared uids
  • From: Will Drewry
• [SECURITY] [DSA 1805-1] New pidgin packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• [TZO-25-2009] Panda generic evasion (TAR)
  • From: Thierry Zoller
• [TZO-24-2009] Panda generic evasion (CAB)
  • From: Thierry Zoller
• LxBlog
  • From: info
• [ MDVSA-2009:121 ] lcms
  • From: security
• Serena Dimensions CM Desktop Client does not validate the server SSL certificate
  • From: roland . gruber . extern
• [SECURITY] [DSA 1802-2] New squirrelmail packages correct incomplete fix
  • From: Thijs Kinkhorst
• Novell GroupWise Internet Agent Remote Buffer Overflow Vulnerabilities
  • From: VUPEN Security Research
• DotNetNuke ErrorPage.aspx Cross-Site Scripting Vulnerability
  • From: Ben Hawkes
• [ MDVSA-2009:120 ] openssl
  • From: security
• MULTIPLE SQL INJECTION VULNERABILITIES --Flash Quiz Beta 2-->
  • From: y3nh4ck3r
• Novell GroupWise Web Access Multiple XSS
  • From: swhite
• DDIVRT-2009-25 IPsession SQL Injection Vulnerability
  • From: ddvulnalert
• iDefense Security Advisory 05.20.09: IBM AIX libc MALLOCDEBUG File Overwrite Vulnerability
  • From: iDefense Labs
• (GET vars 'x' & 'y') ADMIN FUNCTION EXECUTION--Jorp v-1.3.05.09-->
  • From: y3nh4ck3r
• [security bulletin] HPSBPI02398 SSRT080166 rev.3 - Certain HP LaserJet Printers, HP Color LaserJet Printers, and HP Digital Senders, Remote Unauthorized Access to Files
  • From: security-alert
• CORE-2009-0109 - Multiple XSS in Sun Communications Express
  • From: CORE Security Technologies Advisories
• Re: [security bulletin] HPSBMA02426 SSRT090053 rev.1 - HP System Management Homepage (SMH) for Linux and Windows Running PHP and OpenSSL, Remote Cross Site Scripting (XSS), Unauthorized Access
  • From: Steve Shockley
• Armorlogic Profense Web Application Firewall 2.4 multiple vulnerabilities.
  • From: publists
• [USN-777-1] Ntp vulnerabilities
  • From: Jamie Strandboge
• DMXReady Registration Manager Arbitrary File Upload Vulnerability
  • From: info
• Re: Insufficient Authentication vulnerability in Acer notebooks
  • From: Susan Bradley
• Shakacon Security Conference - Trainers and Speakers Finalized
  • From: Shakacon
• [SECURITY] [DSA 1804-1] New ipsec-tools packages fix denial of service
  • From: Nico Golde
• [SECURITY] [DSA 1803-1] New nsd packages fix denial of service
  • From: Thijs Kinkhorst
• Cisco Security Advisory: CiscoWorks TFTP Directory Traversal Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• [ MDVSA-2009:119 ] kernel
  • From: security
• Re: Insufficient Authentication vulnerability in Asus notebook
  • From: Just1n T1mberlake
• RE: Insufficient Authentication vulnerability in Asus notebook
  • From: Jim Harrison
• Re: Insufficient Authentication vulnerability in Asus notebook
  • From: Ansgar Wiechers
• Re: Insufficient Authentication vulnerability in Asus notebook
  • From: Susan Bradley
• Re: Insufficient Authentication vulnerability in Asus notebook
  • From: Bob Fiero
• Re: Insufficient Authentication vulnerability in Acer notebooks
  • From: MustLive
• iDefense Security Advisory 05.14.09: Multiple Vendor Outside In Multiple Spreadsheet Buffer Overflow Vulnerabilities
  • From: iDefense Labs
• iDefense Security Advisory 05.14.09: Multiple Vendor Outside In Spreadsheet Buffer Overflow Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 05.14.09: Multiple Vendor Outside In Spreadsheet Integer Overflow Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 05.14.09: Multiple Vendor Outside In Multiple Integer Overflow Vulnerabilities
  • From: iDefense Labs
• [SECURITY] [DSA 1800-1] New Linux 2.6.26 packages fix several vulnerabilities
  • From: dann frazier
• MULTIPLE REMOTE VULNERABILITIES --my-Gesuad 0.9.14-->
  • From: y3nh4ck3r
• MULTIPLE REMOTE VULNERABILITIES --my-colex 1.4.2-->
  • From: y3nh4ck3r
• [security bulletin] HPSBMA02427 SSRT090069 rev.1 - HP Remote Graphics Software (RGS) Sender Running Easy Login, Remote Unauthorized Access
  • From: security-alert
• [security bulletin] HPSBMA02426 SSRT090053 rev.1 - HP System Management Homepage (SMH) for Linux and Windows Running PHP and OpenSSL, Remote Cross Site Scripting (XSS), Unauthorized Access
  • From: security-alert
• Fwd: [Full-disclosure] IIS6 + webdav and unicode rides again in 2009
  • From: Thierry Zoller
• rPSA-2009-0084-1 kernel
  • From: rPath Update Announcements
• WinAppDbg module v1.1 is out!
  • From: Mario Alejandro Vilas Jerez
• [TKADV2009-006] libsndfile/Winamp VOC Processing Heap Buffer Overflow
  • From: Tobias Klein
• NetDecision TFTP Server 4.2 TFTP Directory Traversal
  • From: vuln_research
• BugCON '09 has swine influenza!!
  • From: Carlos Augusto
• [ MDVSA-2009:113 ] cyrus-sasl
  • From: security
• ZDI-09-022: Apple Safari Malformed SVGList Parsing Code Execution Vulnerability
  • From: ZDI Disclosures
• PAPER: Dynamic Data Flow Analysis via Virtual Code Integration (aka The SpiderPig case)
  • From: Piotr Bania
• Conference on Cyber Warfare: registration open!
  • From: kgconference
• [ MDVSA-2009:114 ] ipsec-tools
  • From: security
• rPSA-2009-0086-1 postgresql postgresql-contrib postgresql-server
  • From: rPath Update Announcements
• [ MDVSA-2009:115 ] phpMyAdmin
  • From: security
• ZDI-09-023: Apple OS X ATSServer Compact Font Format Parsing Memory Corruption Vulnerability
  • From: ZDI Disclosures
• [ MDVSA-2009:116 ] gnutls
  • From: security
• [TZO-22-2009] Bitdefender generic evasion of heuristics (for PDF)
  • From: Thierry Zoller
• [ MDVSA-2009:118 ] kernel
  • From: security
• [TZO-23-2009] Avira antivir generic evasion of heuristics (for PDF)
  • From: Thierry Zoller
• [SECURITY] [DSA 1802-1] New squirrelmail packages fix several vulnerabilities
  • From: Thijs Kinkhorst
• [security bulletin] HPSBMA02428 SSRT090048 rev.1 - HP System Management Homepage (SMH) for Linux and Windows, Remote Cross Site Scripting (XSS)
  • From: security-alert
• INSECURE COOKIE HANDLING VULNERABILITIES --Dog Pedigree Online Database v1.0.1-Beta-->
  • From: y3nh4ck3r
• (GET var 'id') BLIND SQL INJECTION EXPLOIT --Dog Pedigree Online Database v1.0.1-Beta -->
  • From: y3nh4ck3r
• Namad Cms Remote File Download
  • From: info
• [ MDVSA-2009:117 ] ntp
  • From: security
• Re: POC & exploit for Apache mod_rewrite off-by-one
  • From: arulvadivel1
• HTTP Parameter Pollution
  • From: Luca.carettoni
• [SECURITY] [DSA 1801-1] New ntp packages fix several vulnerabilities
  • From: Thijs Kinkhorst
• eggdrop/windrop remote crash vulnerability
  • From: Thomas Sader
• RE: Insufficient Authentication vulnerability in Asus notebook
  • From: Steve Quan
• Re: Insufficient Authentication vulnerability in Asus notebook
  • From: nameless
• Re: Insufficient Authentication vulnerability in Asus notebook
  • From: Daniel Hazelton
• RE: Insufficient Authentication vulnerability in Asus notebook
  • From: Mike Wilson
• Re: Insufficient Authentication vulnerability in Asus notebook
  • From: Susan Bradley
• Re: Insufficient Authentication vulnerability in Asus notebook
  • From: Susan Bradley
• Re: Insufficient Authentication vulnerability in Asus notebook
  • From: Ansgar Wiechers
• Re: Insufficient Authentication vulnerability in Asus notebook
  • From: KF (lists)
• Re: Re: MULTIPLE REMOTE SQL INJECTION VULNERABILITIES---MIM:InfiniX v1.2.003--->
  • From: y3nh4ck3r
• MULTIPLE CODE INJECTION VULNERABILITIES --TUENTI--SPAIN-->
  • From: y3nh4ck3r
• Re: Insufficient Authentication vulnerability in Asus notebook
  • From: Michael Scheidell
• MULTIPLE SQL INJECTION VULNERABILITIES --Shutter v-0.1.1-->
  • From: y3nh4ck3r
• Re: MULTIPLE REMOTE SQL INJECTION VULNERABILITIES---MIM:InfiniX v1.2.003--->
  • From: Tomas Kuliavas
• Re: Insufficient Authentication vulnerability in Asus notebook
  • From: nameless
• Re: Insufficient Authentication vulnerability in Asus notebook
  • From: Mike Vasquez
• RE: Insufficient Authentication vulnerability in Asus notebook
  • From: Mike Wilson
• iDefense Security Advisory 05.14.09: Apple Mac OS X xnu Kernel workqueue_additem/workqueue_removeitem Index Validation Vulnerability
  • From: iDefense Labs
• Re: Insufficient Authentication vulnerability in Asus notebook
  • From: Bob Fiero
• Re: Insufficient Authentication vulnerability in Asus notebook
  • From: Jeremy Brown
• [security bulletin] HPSBMA02417 SSRT090031 rev.1 - HP Data Protector Express and HP Data Protector Express Single Server Edition (SSE), Local Denial of Service (DoS), Execution of Arbitrary Code
  • From: security-alert
• Re: Insufficient Authentication vulnerability in Asus notebook
  • From: Susan Bradley
• Re: MULTIPLE REMOTE SQL INJECTION VULNERABILITIES---MIM:InfiniX v1.2.003--->
  • From: robi
• Insufficient Authentication vulnerability in Asus notebook
  • From: MustLive
• [ MDVSA-2009:112 ] ipsec-tools
  • From: security
• (GET var 'member') BLIND SQL INJECTION EXPLOIT --FAMILY CONNECTIONS <= v1.9 -->
  • From: y3nh4ck3r
• Pinnacle Studio 12 "Hollywood FX Compressed Archive" (.hfz) directory traversal vulnerability poc
  • From: ipsdix
• maxcms2.0 creat new admin exploit
  • From: info
• [USN-776-2] KVM regression
  • From: Marc Deslauriers
• Re: FormMail 1.92 Multiple Vulnerabilities
  • From: ascii
• Re: The security tools list, new version with more than 200 new tools!
  • From: Ying
• Re: FormMail 1.92 Multiple Vulnerabilities
  • From: David Cantrell
• iDefense Security Advisory 05.12.09: Microsoft PowerPoint Notes Container Heap Corruption Vulnerability
  • From: iDefense Labs
• [ MDVSA-2009:110 ] squirrelmail
  • From: security
• iDefense Security Advisory 05.12.09: Microsoft PowerPoint Build List Memory Corruption Vulnerability
  • From: iDefense Labs
• [ MDVSA-2009:111-1 ] firefox
  • From: security
• iDefense Security Advisory 05.12.09: Microsoft PowerPoint Integer Overflow Vulnerability
  • From: iDefense Labs
• [ MDVSA-2009:111 ] firefox
  • From: security
• [USN-776-1] KVM vulnerabilities
  • From: Kees Cook
• iDefense Security Advisory 05.12.09: Microsoft PowerPoint PPT95 Import Multiple Stack Buffer Overflow Vulnerabilities
  • From: iDefense Labs
• iDefense Security Advisory 05.12.09: Microsoft PowerPoint 4.2 Conversion Filter Stack Overflow
  • From: iDefense Labs
• [USN-775-1] Quagga vulnerability
  • From: Kees Cook
• iDefense Security Advisory 05.12.09: Microsoft PowerPoint PPT95 Import Multiple Stack Buffer Overflow Vulnerabilities
  • From: iDefense Labs
• iDefense Security Advisory 05.12.09: Microsoft PowerPoint PPT 4.0 Importer Multiple Stack Buffer Overflow Vulnerabilities
  • From: iDefense Labs
• iDefense Security Advisory 05.12.09: Microsoft PowerPoint 4.2 Conversion Filter Heap Corruption Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 05.12.09: Microsoft PowerPoint 4.2 Conversion Filter Stack Buffer Overflow Vulnerability
  • From: iDefense Labs
• Re: The security tools list, new version with more than 200 new tools!
  • From: Ying
• ZDI-09-020: Microsoft Office PowerPoint Notes Container Heap Overflow Vulnerability
  • From: ZDI Disclosures
• ZDI-09-019: Microsoft Office PowerPoint OutlineTextRefAtom Parsing Memory Corruption Vulnerability
  • From: ZDI Disclosures
• Re: The security tools list, new version with more than 200 new tools!
  • From: Stephen Mullins
• Secunia Research: Microsoft PowerPoint Atom Parsing Buffer Overflows
  • From: Secunia Research
• User options changer (SQLi) EXPLOIT --Bigace CMS -stable release- 2.5-->
  • From: y3nh4ck3r
• CA20090126-01: CA Anti-Virus Engine Detection Evasion Multiple Vulnerabilities [Updated]
  • From: Williams, James K
• Re: Five days left to find the oldest data loss incident
  • From: Elazar Broad
• Sun IDM Arbitrary Commands Execution Vulnerability
  • From: abb@xxxxxxxxx
• Re: Insufficient Authentication vulnerability in Acer notebooks
  • From: Øystein Larsen
• FormMail 1.92 Multiple Vulnerabilities
  • From: ascii
• Re: Universal XSS in all Google Services
  • From: Nam Nguyen
• Re: Insufficient Authentication vulnerability in Acer notebooks
  • From: Garrett M. Groff
• The security tools list, new version with more than 200 new tools!
  • From: Ying
• Exploiting IE8 UTF-7 XSS Vulnerability using Local Redirection
  • From: Inferno
• Bitweaver <= 2.6 /boards/boards_rss.php / saveFeed() remote code execution exploit
  • From: nospam
• Syhunt: A-A-S (Application Access Server) Multiple Security Vulnerabilities
  • From: Felipe M. Aragon
• Security Advisory: Banks in Australia
  • From: militan . c7
• Re: Insufficient Authentication vulnerability in Acer notebooks
  • From: dpo5003
• xcon2009 is coming
  • From: bugdigger
• [SECURITY] [DSA 1799-1] New qemu packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• [security bulletin] HPSBMA02348 SSRT080033 rev.2 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code, Denial of Service (DoS)
  • From: security-alert
• [security bulletin] HPSBMA02349 SSRT080043 rev.3 - HP OpenView Network Node Manager (OV NNM), Remote Unauthorized Access to Data
  • From: security-alert
• Re: Five days left to find the oldest data loss incident
  • From: Dragos Ruiu
• (POST var 'rating') BLIND SQL INJECTION--microTopic v1 Initial Release-->
  • From: y3nh4ck3r
• [oCERT-2009-004] AjaxTerm session id collision
  • From: Andrea Barisani
• [USN-774-1] MoinMoin vulnerability
  • From: Marc Deslauriers
• Re: TinyWebGallery <= 1.7.6 LFI / Remote Code Execution Exploit
  • From: michael
• Five days left to find the oldest data loss incident
  • From: Juha-Matti Laurio
• Advisory - Gmail/Google Doc PDF Repurposing Integrated Attacks - Cookie Hijacking / Stealing
  • From: Aditya K Sood
• RE: Insufficient Authentication vulnerability in Acer notebooks
  • From: David Sánchez Martín
• [Bkis-08-2009] Microchip MPLAB IDE Buffer Overflow Vulnerability
  • From: Bkis
• [ MDVSA-2009:109 ] quagga
  • From: security
• Insufficient Authentication vulnerability in Acer notebooks
  • From: MustLive
• [SECURITY] [DSA 1798-1] New pango1.0 packages fix arbitrary code execution
  • From: Steffen Joeris
• TinyWebGallery <= 1.7.6 LFI / Remote Code Execution Exploit
  • From: travesti
• [TZO-21-2009] Fprot CAB bypass / evasion
  • From: Thierry Zoller
• Changes : [TZO-17-2009]Trendmicro multiple bypass/evasions
  • From: Thierry Zoller
• [TZO-20-2009] AVG ZIP evasion / bypass
  • From: Thierry Zoller
• [SECURITY] [DSA 1797-1] New xulrunner packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• speaker Bill Blunden on Rootkits...
  • From: Alex Keller
• Universal XSS in all Google Services
  • From: Inferno
• Vpopmail/QmailAdmin User's Quota Multiple Integer Overflows
  • From: Jacobo Avariento Gimeno
• BLIND SQL INJECTION exploit (GET var 'AlbumID')--RTWebalbum 1.0.462-->
  • From: y3nh4ck3r
• [security bulletin] HPSBUX02366 SSRT080120 rev.2 - HPUX Running useradd(1M), Local Unauthorized Access
  • From: security-alert
• Claroline v.1.8.11 Cross-Site Scripting
  • From: darkz . gsa
• Re: [WEB SECURITY] [TOOL] moth - vulnerable web application vmware
  • From: romain
• [TOOL] moth - vulnerable web application vmware
  • From: Andres Riancho
• [SECURITY] [DSA 1796-1] New libwmf packages fix denial of service
  • From: Nico Golde
• [USN-773-1] Pango vulnerability
  • From: Marc Deslauriers
• [USN-772-1] MPFR vulnerability
  • From: Marc Deslauriers
• [USN-771-1] libmodplug vulnerabilities
  • From: Marc Deslauriers
• [oCERT-2009-001] Pango integer overflow in heap allocation size calculations
  • From: Will Drewry
• [ MDVSA-2009:108 ] zsh
  • From: security
• SQL INJECTION VULNERABILITIES--ST-Gallery version 0.1 alpha-->
  • From: y3nh4ck3r
• [ MDVSA-2009:107 ] acpid
  • From: security
• [SECURITY] [DSA 1795-1] New ldns packages fix arbitrary code execution
  • From: Devin Carraway
• Update: [TZO-15-2009] Aladdin eSafe generic bypass - Forced release
  • From: Thierry Zoller
• Secunia Research: Garmin Communicator Plug-In Domain Locking Security Bypass
  • From: Secunia Research
• [SECURITY] [DSA 1794-1] New Linux 2.6.18 packages fix several vulnerabilities
  • From: dann frazier
• EUSecWest 2009 (May27/28) London Agenda and PacSec 2009 (Nov 4/5) Tokyo CFP deadline: June 1 2009
  • From: Dragos Ruiu
• Persistent XSS in Kayako Support Suite
  • From: pen-test
• [SECURITY] [DSA 1793-1] New kdegraphics packages fix multiple vulnerabilities
  • From: Noah Meyerhans
• [SECURITY] [DSA 1792-1] New drupal6 packages fix multiple vulnerabilities
  • From: Noah Meyerhans
• [SECURITY] [DSA 1791-1] New moin packages fix cross-site scripting
  • From: Steffen Joeris
• [ MDVSA-2009:106 ] libwmf
  • From: security
• New Browser Security Paper: Why Silent Updates Boost Security
  • From: Stefan Frei
• [security bulletin] HPSBMA02419 SSRT090060 rev.1 - Insight Control Suite For Linux (ICE-LX) Multiple Remote Vulnerabilities In Nagios
  • From: security-alert
• [SECURITY] [DSA 1790-1] New xpdf packages fix multiple vulnerabilities
  • From: Noah Meyerhans
• BLIND SQL INJECTION EXPLOIT--TemaTres 1.0.3-->
  • From: y3nh4ck3r
• MULTIPLE REMOTE VULNERABILITIES--TemaTres 1.0.3-->
  • From: y3nh4ck3r
• [DSECRG-09-038] Sun Glassfish Woodstock Project - Linked XSS Vulnerability
  • From: Digital Security Research Group [DSecRG]
• [RT-SA-2009-003] IceWarp WebMail Server: SQL Injection in Groupware Component
  • From: RedTeam Pentesting GmbH
• CONFidence 2009 trainings
  • From: andrzej . targosz
• [DSECRG-09-034] Sun Glassfish Enterprise Server - Multiple Linked XSS vulnerabilies
  • From: Digital Security Research Group [DSecRG]
• [RT-SA-2009-001] IceWarp WebMail Server: Cross Site Scripting in Email View
  • From: RedTeam Pentesting GmbH
• [USN-770-1] ClamAV vulnerability
  • From: Jamie Strandboge
• [RT-SA-2009-002] IceWarp WebMail Server: User-assisted Cross Site Scripting in RSS Feed Reader
  • From: RedTeam Pentesting GmbH
• [RT-SA-2009-004] IceWarp WebMail Server: Client-Side Specification of "Forgot Password" eMail Content
  • From: RedTeam Pentesting GmbH
• [SECURITY] [DSA 1789-1] New php5 packages fix several vulnerabilities
  • From: Thijs Kinkhorst
• [SECURITY] [DSA 1787-1] New quagga packages fix denial of service
  • From: Florian Weimer
• LayerOne 2009 - Final Announcement
  • From: LayerOne Call For Papers
• [security bulletin] HPSBMA02374 SSRT080046 rev.2 - HP OpenView Network Node Manager (OV NNM), Remote Denial of Service (DoS)
  • From: security-alert
• [security bulletin] HPSBMA02425 SSRT080091 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code
  • From: security-alert
• MULTPLE REMOTE VULNERABILITIES --ProjectCMS v-1.1 Beta-->
  • From: y3nh4ck3r
• [USN-769-1] libwmf vulnerability
  • From: Marc Deslauriers
• [ MDVSA-2009:105 ] memcached
  • From: security
• Grabit <= 1.7.2 beta 3 NZB file parsing stack overflow
  • From: Niels Teusink
• [SecNiche WhitePaper ] - PDF Silent HTTP Form Repurposing Attacks
  • From: Aditya K Sood
• Secunia Research: IBM Tivoli Storage Manager Remote Agent Service Buffer Overflows
  • From: Secunia Research
• “Cross-Site Scripting” vulnerability in MyBB 1.4.5
  • From: Jacques Copeau
• Call for Papers Hack.lu 2009
  • From: hack.lu 2009 info
• [SECURITY] [DSA 1787-1] New Linux 2.6.24 packages fix several vulnerabilities
  • From: dann frazier
• Coppermine Photo Gallery 1.4.21 Cross-Site Scripting
  • From: darkz . gsa
• [ GLSA 200905-01 ] Asterisk: Multiple vulnerabilities
  • From: Robert Buchholz
• [SECURITY] [DSA 1786-1] New acpid packages fix denial of service
  • From: Steffen Joeris
• about inactive account hijacking
  • From: innate
• [TZO-18-2009] Mcafee multiple evasions/bypasses (RAR, ZIP)
  • From: Thierry Zoller
• [SECURITY] [DSA 1785-1] New wireshark packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• Re: Symantec Fax Viewer Control v10 (DCCFAXVW.DLL) remote buffer overflow exploit
  • From: Nick FitzGerald
• CA20090429-01: CA ARCserve Backup Apache HTTP Server Multiple Vulnerabilities
  • From: Williams, James K
• New WebApp security paper: Anti-fraud Image Solutions
  • From: WebAppSec
• BH USA CFP closing next Tuesday
  • From: jmoss
• multiple vendor - PF NULL pointer dereference
  • From: rembrandt
• USER OPTIONS CHANGER EXPLOIT --MiniTwitter v0.2-Beta+->
  • From: y3nh4ck3r
• BLIND SQL INJECTION--Leap CMS 0.1.4-->
  • From: y3nh4ck3r
• Addonics NAS Adapter FTP Remote Denial of Service
  • From: mcyr2
• Re: Security tools list: First Version
  • From: Ulises2k
• MULTIPLE SQL INJECTION VULNERABILITIES --MiniTwitter v0.2-Beta-->
  • From: y3nh4ck3r
• Durzosploit v0.1 alpha
  • From: Benjilenoob
• [ MDVSA-2009:102 ] apache
  • From: security
• [SECURITY] [DSA 1784-1] New freetype packages fix arbitrary code execution
  • From: Nico Golde
• [ MDVSA-2009:104 ] udev
  • From: security
• [ MDVSA-2009:103 ] udev
  • From: security
• Re: Symantec Fax Viewer Control v10 (DCCFAXVW.DLL) remote buffer overflow exploit
  • From: secure
• MULTIPLE REMOTE VULNERABILITIES--Leap CMS 0.1.4-->
  • From: y3nh4ck3r
• Re: ZDI-09-018: Symantec Client Security Alert Originator Service Stack Overflow Vulnerability
  • From: Steve Shockley
• Security tools list: First Version
  • From: Ying
• [TZO-17-2009]Trendmicro multiple bypass/evasions
  • From: Thierry Zoller
• Addendum: [TZO-17-2009]Trendmicro multiple bypass/evasions
  • From: Thierry Zoller
• [security bulletin] HPSBMA02400 SSRT080144 rev.2 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code
  • From: security-alert
• [TZO-16-2009] Nod32 CAB bypass/evasion
  • From: Thierry Zoller
• ZDI-09-018: Symantec Client Security Alert Originator Service Stack Overflow Vulnerability
  • From: ZDI Disclosures
• SQL INJECTION (SQLi) VULNERABILITY--ProjectCMS v1.0 Beta Final-->
  • From: y3nh4ck3r
• iDefense Security Advisory 04.29.09: Symantec System Center Alert Management System Console Arbitrary Program Execution Design Error Vulnerability
  • From: iDefense Labs
• Symantec Fax Viewer Control v10 (DCCFAXVW.DLL) remote buffer overflow exploit
  • From: nospam
• Proxy bypass vulnerability & plain text passwords in LevelOne AMG-2000
  • From: SEC Consult Research
• [SECURITY] [DSA 1783-1] New mysql-dfsg-5.0 packages fix multiple vulnerabilities
  • From: Devin Carraway
• [SECURITY] [DSA 1782-1] New mplayer packages fix arbitrary code execution
  • From: Steffen Joeris
• Positron Security Advisory #2009-001: Memcached and MemcacheDB ASLR Bypass Weakness
  • From: Positron Security
• [ MDVSA-2009:101 ] xpdf
  • From: security
• [ MDVA-2009:057 ] usermode
  • From: security
• [SECURITY] [DSA 1781-1] New ffmpeg-debian packages fix arbitrary code execution
  • From: Steffen Joeris
• Re: security tools list
  • From: Andrew L. Davis
• [SECURITY] [DSA 1780-1] New libdbd-pg-perl packages fix potential code execution
  • From: Florian Weimer
• iDefense Security Advisory 04.28.09: TIBCO SmartSockets Stack Buffer Overflow Vulnerability
  • From: iDefense Labs
• [USN-765-1] Firefox and Xulrunner vulnerabilities
  • From: Jamie Strandboge
• [USN-766-1] acpid vulnerability
  • From: Marc Deslauriers
• MULTIPLE REMOTE SQL INJECTION VULNERABILITIES---MIM:InfiniX v1.2.003--->
  • From: y3nh4ck3r
• one shot remote root for linux?
  • From: Gadi Evron
• RE: SQL INJECTION (SHELL UPLOAD)--EZ-blog Beta2-->
  • From: Memisyazici, Aras
• [USN-761-2] PHP vulnerabilities
  • From: Marc Deslauriers
• [USN-767-1] FreeType vulnerability
  • From: Marc Deslauriers
• Re: Formshield Captcha - Older Version vulnerable to replay attacks
  • From: arvind doraiswamy
• [security bulletin] HPSBUX02366 SSRT080120 rev.1 - HPUX Running useradd(1M), Local Unauthorized Access
  • From: security-alert
• Secunia Research: HP OpenView Network Node Manager "ovalarmsrv" Integer Overflow
  • From: Secunia Research
• security tools list
  • From: Ying
• [ MDVSA-2009:099 ] openafs
  • From: security
• Errata: [TZO-13-2009] Avira Antivir generic CAB evasion / bypass
  • From: Thierry Zoller
• Re: [IVIZ-08-016] F-Secure f-prot Antivirus for Linux corrupted ELF header Security Bypass
  • From: security
• [ MDVSA-2009:098 ] krb5
  • From: security
• [security bulletin] HPSBMA02424 SSRT080125 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code
  • From: security-alert
• [ MDVSA-2009:096-1 ] printer-drivers
  • From: security
• DDIVRT-2009-24 Precidia Ether232 Memory Corruption
  • From: ddivulnalert
• [SECURITY] [DSA 1779-1] New apt packages fix several vulnerabilities
  • From: Thijs Kinkhorst
• [TZO-14-2009] Comodo Antivirus RAR evasion
  • From: Thierry Zoller
• SQL INJECTION (SHELL UPLOAD)--EZ-blog Beta2-->
  • From: y3nh4ck3r
• [TZO-15-2009] Aladdin eSafe generic bypass - Forced release
  • From: Thierry Zoller
• Remote iodinetd DoS vulnerability on Debian Lenny
  • From: Albert Sellarès
• [TZO-13-2009] Avira Antivir generic CAB evasion / bypass
  • From: Thierry Zoller
• MataChat Cross-Site Scripting Vulnerabilities
  • From: IrIsT . Ir
• T2'09: Call for Papers 2009 (Helsinki / Finland)
  • From: Tomi Tuominen
• [ MDVSA-2009:097 ] clamav
  • From: security
• [ MDVSA-2009:097 ] clamav
  • From: security
• Aruba Advisory ID: AID-42309 Management User Authentication Bypass Vulnerability When Using Public Key Based SSH Authentication
  • From: Robbie Gill
• [ MDVSA-2009:096 ] printer-drivers
  • From: security
• MSL-2009-001 - Samsung Missing Provisioning Authentication
  • From: Mobile Security Lab
• [ MDVSA-2009:095 ] ghostscript
  • From: security
• Juniper Advisory
  • From: security
• REMOTE SQL INJECTION (SQLi) VULNERABILITY--Photo-Rigma.BiZ v30-->
  • From: y3nh4ck3r
• Pragyan CMS 2.6.4 Multiple SQL Injection Vulnerabilities
  • From: Salvatore "drosophila" Fresta
• RE: Cisco ASA5520 Web VPN Host Header XSS
  • From: Mark-David McLaughlin (marmclau)
• Formshield Captcha - Older Version vulnerable to replay attacks
  • From: arvind doraiswamy
• CVE-2009-1190: Spring Framework Remote Denial of Service Vulnerability
  • From: Mark Thomas
• WOOT'09 call for papers
  • From: Alexander Sotirov
• [ GLSA 200904-20 ] CUPS: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• FOWLCMS 1.1--Multiple Remote Vulnerabilities-->
  • From: y3nh4ck3r
• Re: Windows Update (re-)installs outdated Flash ActiveX on Windows XP
  • From: Andrew Kuriger
• Re: [DSECRG-09-037] abk-soft AbleSpace CMS 1.0 - Multiple security vulnerabilities
  • From: sales
• [USN-764-1] Firefox and Xulrunner vulnerabilities
  • From: Jamie Strandboge
• Re: Windows Update (re-)installs outdated Flash ActiveX on Windows XP
  • From: Vladimir '3APA3A' Dubrovin
• [ MDVSA-2009:094 ] mysql
  • From: security
• [SECURITY] [DSA 1778-1] New mahara packages fix cross-site scripting
  • From: Nico Golde
• FreeBSD Security Advisory FreeBSD-SA-09:08.openssl
  • From: FreeBSD Security Advisories
• Re: [Bkis-07-2009] 010 Editor Multiple Buffer Overflow Vulnerabilities
  • From: Tavis Ormandy
• [Tool] sqlmap 0.7rc1 released
  • From: Bernardo Damele A. G.
• [ MDVSA-2009:093 ] mpg123
  • From: security
• FreeBSD Security Advisory FreeBSD-SA-09:07.libc
  • From: FreeBSD Security Advisories
• [Bkis-07-2009] 010 Editor Multiple Buffer Overflow Vulnerabilities
  • From: Bkis
• [TZO-12-2009] SUN / Oracle JVM Remote code execution
  • From: Thierry Zoller
• SAP Cfolders Multiple Stored XSS Vulnerabilies
  • From: Digital Security Research Group [DSecRG]
• SAP Cfolders Multiple Linked XSS Vulnerabilities
  • From: Digital Security Research Group [DSecRG]
• CORE-2009-0114 - HTTP Response Splitting vulnerability in Sun Delegated Administrator
  • From: CORE Security Technologies Advisories
• Python winappdbg module v1.0 is out!
  • From: Mario Alejandro Vilas Jerez
• MixedCMS 1.0--Multiple Remote Vulnerabilities-->
  • From: y3nh4ck3r
• Re: Trend Micro OfficeScan Client - DOS
  • From: Thierry Zoller
• Re: Addonics NAS Adapter (bts.cgi) Remote DoS Exploit (post-auth)
  • From: Jeremy Brown
• [SECURITY] [DSA 1776-1] New slurm-llnl packages fix privilege escalation
  • From: Thijs Kinkhorst
• Trend Micro OfficeScan Client - DOS
  • From: jplopezy
• [SECURITY] [DSA 1777-1] New git-core packages fix privilege escalation
  • From: Thijs Kinkhorst
• CVE-2009-0991 PoC
  • From: Dennis Yurichev
• [USN-763-1] xine-lib vulnerabilities
  • From: Marc Deslauriers
• [USN-762-1] APT vulnerabilities
  • From: Jamie Strandboge
• [USN-761-1] PHP vulnerabilities
  • From: Marc Deslauriers
• Addonics NAS Adapter (bts.cgi) Remote DoS Exploit (post-auth)
  • From: mcyr2
• [security bulletin] HPSBMA02422 SSRT080146 rev.1 - HP StorageWorks Storage Mirroring, Remote Execution of Arbitrary Code, Denial of Service (DoS), Unauthorized Access
  • From: security-alert
• Addendum :[TZO-09-2009] Avast bypass / evasion (Limited details)
  • From: Thierry Zoller
• [security bulletin] HPSBMA02414 SSRT080185 rev.1 - HP Storage Essentials Running Secure NaviCLI, Remote Unauthorized Access, Gain Extended Privileges
  • From: security-alert
• Windows Update (re-)installs outdated Flash ActiveX on Windows XP
  • From: Stefan Kanthak
• Creasito e-commerce content manager Authentication Bypass
  • From: Salvatore "drosophila" Fresta
• Multiple Remote Vulnerabilities--SQLi-(INSECURE-COOKIE-HANDLING)-LFI-->
  • From: y3nh4ck3r
• WysGui CMS 1.2 BETA(Insecure Cookie Handling)--Blind-sql-injection-exploit-->
  • From: y3nh4ck3r
• Sungard Banner System XSS
  • From: reportback
• Multi-lingual E-Commerce System 0.2 Multiple Remote Vulnerabilities
  • From: Salvatore "drosophila" Fresta
• Linksys WRT54GC - Admin Password Change (POC)
  • From: gabriel
• Cross-site Scripting vulnerability in Stronghold/2.3 Apache/1.2.6 C2NetUS/2007
  • From: XiaShing
• CLAN TIGER CMS 1.1.1 (AUTH BYPASS) SQL-INJECTION
  • From: y3nh4ck3r
• [SECURITY] [DSA 1775-1] New php-json-ext packages fix denial of service
  • From: Steffen Joeris
• [ GLSA 200904-19 ] LittleCMS: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• [ GLSA 200904-18 ] udev: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• [ GLSA 200904-17 ] Adobe Reader: User-assisted execution of arbitrary code
  • From: Robert Buchholz
• Malleo 1.2.3 Local File Inclusion Vulnerability
  • From: Salvatore "drosophila" Fresta
• CLAN TIGER CMS--AUTH BYPASS LOGIN FORM (SQL INJECTION)-->
  • From: y3nh4ck3r
• CLAN TIGER CMS--MULTIPLE COOKIES HANDLING VULNERABILITIES-->
  • From: y3nh4ck3r
• CLAN TIGER CMS--(module custompage.php) BLIND SQL INJECTION-->
  • From: y3nh4ck3r
• [ GLSA 200904-16 ] libsndfile: User-assisted execution of arbitrary code
  • From: Pierre-Yves Rofes
• rPSA-2009-0059-1 poppler
  • From: rPath Update Announcements
• Secunia Research: CUPS pdftops JBIG2 Symbol Dictionary Buffer Overflow
  • From: Secunia Research
• Secunia Research: Xpdf JBIG2 Symbol Dictionary Buffer Overflow Vulnerability
  • From: Secunia Research
• [TZO-11-2009] Fortinet bypass / evasion (Limited details)
  • From: Thierry Zoller
• [TZO-09-2009] NOD32 (Eset) bypass / evasion (Limited details)
  • From: Thierry Zoller
• rPSA-2009-0060-1 ghostscript
  • From: rPath Update Announcements
• [ GLSA 200904-15 ] mpg123: User-assisted execution of arbitrary code
  • From: Robert Buchholz
• rPSA-2009-0064-1 icu
  • From: rPath Update Announcements
• [SECURITY] [DSA 1774-1] New ejabberd packages fix cross-site scripting
  • From: Steffen Joeris
• Tiny Blogr 1.0.0 rc4 Authentication Bypass
  • From: Salvatore "drosophila" Fresta
• [IMF 2009] 2nd Call for Papers - Submission Open
  • From: Oliver Goebel
• [USN-760-1] CUPS vulnerability
  • From: Jamie Strandboge
• rPSA-2009-0063-1 udev
  • From: rPath Update Announcements
• rPSA-2009-0061-1 cups
  • From: rPath Update Announcements
• [TZO-09-2009] Avast bypass / evasion (Limited details)
  • From: Thierry Zoller
• [TZO-08-2009] Bitdefender generic bypass/evasion
  • From: Thierry Zoller
• [SECURITY] [DSA 1773-1] New cups packages fix arbitrary code execution
  • From: Steffen Joeris
• rPSA-2009-0062-1 tshark wireshark
  • From: rPath Update Announcements
• [USN-759-1] poppler vulnerabilities
  • From: Marc Deslauriers
• ERNW Security Advisory 01-2009: XSS in Blackberries Mobile Data Service Connection Service
  • From: mozilla
• Miniweb Buffer Overflow
  • From: ew1zz
• Miniweb server Multiple Vulnerabilities
  • From: ew1zz
• [DSECRG-09-020] Apache Geronimo - XSRF vulnerabilities
  • From: DSecRG
• [DSECRG-09-019] Apache Geronimo - XSS vulnerabilities.txt
  • From: DSecRG
• [DSECRG-09-018] Apache Geronimo - Directory Traversal vulnerabilities
  • From: DSecRG
• skpd: A tool to dump processes to executable ELF files
  • From: Albert Sellarès
• iDefense Security Advisory 04.15.09: Microsoft WordPad Word97 Converter Stack Buffer Overflow Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 04.15.09: IBM AIX muxatmd Buffer Overflow Vulnerability
  • From: iDefense Labs
• [SECURITY] [DSA 1771-1] New clamav packages fix several vulnerabilities
  • From: Florian Weimer
• DDIVRT-2009-23 Apache ActiveMQ Numerous Cross Site Scripting Issues
  • From: ddvulnalert
• webSPELL 4.2.0c--XSS (BYPASS BBCODE) COOKIES STEALING VULNERABILITY--
  • From: y3nh4ck3r
• SQL Injection in package DBMS_AQADM_SYS
  • From: ak
• [SECURITY] [DSA 1772-1] New udev packages fix privilege escalation
  • From: Florian Weimer
• Geeklog <= 1.5.2 savepreferences()/*blocks[] remote sql injection exploit
  • From: nospam
• Secunia Research: Danske Bank e-Sec Control Module Error Logging Buffer Overflow
  • From: Secunia Research
• Phorum < 5.2.10 Cross-Site Scripting/Request Forgery
  • From: research
• Unprivileged DB users can see APEX password hashes
  • From: ak
• SQL Injection in package DBMS_AQIN
  • From: ak
• SEC Consult SA-20090415-1 :: Nortel Application Gateway 2000 Password Disclosure Vulnerability
  • From: Bernhard Mueller
• [USN-758-1] udev vulnerabilities
  • From: Kees Cook
• XSS with mod_perl perl_status utility
  • From: antonia . goodwin
• Secunia Research: Oracle BEA WebLogic Server Plug-ins Certificate Buffer Overflow
  • From: Secunia Research
• HITBSecConf2009 - Malaysia: Call for Papers
  • From: S. Praburaajan
• SEC Consult SA-20090415-0 :: Multiple Vulnerabilities in Novell Teaming
  • From: Bernhard Mueller
• Secunia Research: DivX Web Player Stream Format Chunk Buffer Overflow
  • From: Secunia Research
• Secunia Research: Oracle BEA WebLogic Server Plug-ins Integer Overflow
  • From: Secunia Research
• [USN-757-1] Ghostscript vulnerabilities
  • From: Marc Deslauriers
• Zervit Webserver Buffer Overflow
  • From: ewizz
• Secunia Research: SAP GUI KWEdit ActiveX Control "SaveDocumentAs()" Insecure Method
  • From: Secunia Research
• Microsoft Office Excel Remote Memory Corruption Vulnerability
  • From: noreply-secresearch@xxxxxxxxxxxx
• [ GLSA 200904-14 ] F-PROT Antivirus: Denial of Service
  • From: Pierre-Yves Rofes
• ZDI-09-017: Oracle Applications Server 10g Format String Vulnerability
  • From: ZDI Disclosures
• [ GLSA 200904-13 ] Ventrilo: Denial of Service
  • From: Pierre-Yves Rofes
• iDefense Security Advisory 04.14.09: Microsoft Word 2000 WordPerfect 6.x Converter Stack Corruption Vulnerability
  • From: iDefense Labs
• [DSECRG-09-037] abk-soft AbleSpace CMS 1.0 - Multiple security vulnerabilities
  • From: DSecRG
• MonGoose 2.4 Directory Traversal Vulnerability
  • From: ew1zz
• Re: OSCommerce Session Fixation Vulnerability
  • From: tech107
• BugCON '09, Mexico: Call For Papers
  • From: Carlos Augusto
• Re: [NOBYTES.COM: #12] osCommerce 2.2rc2a - Information Disclosure
  • From: Anonymous
• Re: PHP-Revista Multiple vulnerabilities
  • From: marianiscc
• [ MDVSA-2009:092 ] ntp
  • From: security
• [USN-756-1] ClamAV vulnerability
  • From: Jamie Strandboge
• OpenBSD 4.3 up to OpenBSD-current: PF null pointer dereference - remote DoS (kernel panic)
  • From: rembrandt
• [Suspected Spam][Positive Technologies SA 2009-01] PGP Desktop Pgpdisk.sys And Pgpwded.sys Multiple Vulnerabilities
  • From: Valery Marchuk
• [SECURITY] [DSA 1770-1] New imp4 packages fix cross-site scripting
  • From: Steffen Joeris
• Re: Critical SQL Injection PHPNuke <= 7.8 - Your_Account module
  • From: mefuentes61
• Hacker Space Fest 2009 CFP: Call For Paper
  • From: Philippe Mailinglist
• [ MDVSA-2009:091 ] mod_perl
  • From: security
• Re: In Response to Bid 34130 Invalid
  • From: vpandey
• ftpdmin v. 0.96 RNFR remote buffer overflow exploit
  • From: nospam
• HP Deskjet 6800 XSS in Web Interface
  • From: mcyr2
• In Response to Bid 34130 Invalid
  • From: Aditya K Sood
• [BMSA 2009-04] Remote DoS in Internet Explorer
  • From: Nam Nguyen
• [SECURITY] [DSA 1769-1] New openjdk-6 packages fix arbitrary code execution
  • From: Florian Weimer
• Re: Layered Defense Research Advisory: Format String Vulnerability: FortiClient Version 3
  • From: prabhup
• Opening Intranets to attack by using Internet Explorer [paper]
  • From: Cesar
• VMSA-2009-0006 VMware Hosted products and patches for ESX and ESXi resolve a critical security vulnerability
  • From: VMware Security Team
• Dynamic Flash Forum 1.0 Beta Multiple Remote Vulnerabilities
  • From: Salvatore "drosophila" Fresta
• [ GLSA 200904-12 ] Wicd: Information disclosure
  • From: Tobias Heinlein
• [ MDVSA-2009:090 ] php
  • From: security
• [SECURITY] [DSA 1754-1] New roundup packages fix privilege escalation
  • From: Florian Weimer
• [DSECRG-09-036] Chance-i Techno Vision Security System - Directory Traversal File Download
  • From: DSecRG
• [SECURITY] [DSA 1768-1] New openafs packages potential code execution
  • From: Florian Weimer
• Summer Camp Garrotxa 2009 event
  • From: Gerardo García Peña
• Loggix Project 9.4.5 Blind SQL Injection
  • From: Salvatore "drosophila" Fresta
• [ MDVSA-2009:089 ] opensc
  • From: security
• PHP 5.2.9 curl safe_mode & open_basedir bypass
  • From: cxib
• [DSECRG-09-035] Chance-i DiViS DVR ActiveX - Heap Overflow
  • From: DSecRG
• PHP-agenda <= 2.2.5 Remote File Overwriting
  • From: Salvatore "drosophila" Fresta
• Bid 34130 Invalid
  • From: vpandey
• Reminder: RAID 2009 CFP
  • From: Corrado Leita
• [ MDVSA-2009:088 ] wireshark
  • From: security
• [security bulletin] HPSBMA02420 SSRT071458 rev.1 - HP ProCurve Manager and HP ProCurve Manager Plus, Remote Unauthorized Access to Data
  • From: security-alert
• Secunia Research: Ghostscript jbig2dec JBIG2 Processing Buffer Overflow
  • From: Secunia Research
• [ GLSA 200904-10 ] Avahi: Denial of Service
  • From: Robert Buchholz
• [SECURITY] [DSA 1767-1] New multipath-tools packages fix denial of service
  • From: Nico Golde
• IBM BladeCenter Advanced Management Module Multiple vulnerabilities
  • From: Henri Lindberg - Smilehouse Oy