Bugtraq

• Thread Index

• SAP NetWeaver XSS Vulnerability
  • From: Martin Suess
• JetAudio Basic 7.0.3 BufferOverFlow PoC
  • From: alphanix00
• CA20090123-01: Cohesion Tomcat Multiple Vulnerabilities (Updated - v1.1)
  • From: Williams, James K
• OpenX 2.6.3 - Local File Inclusion
  • From: admin
• Secunia Research: OpenX Multiple Vulnerabilities
  • From: Secunia Research
• [USN-712-1] Vim vulnerabilities
  • From: Marc Deslauriers
• ACROS Security: HTML Injection in BEA (Oracle) WebLogic Server Console (ASPR #2009-01-27-1)
  • From: ACROS Security
• NewsCMSlite Insecure Cookie Handling
  • From: admin
• Re: FUD Forum < 2.7.1 PHP code injection vurnelability
  • From: riklaunim
• [USN-711-1] KTorrent vulnerabilities
  • From: Marc Deslauriers
• [USN-710-1] xine-lib vulnerabilities
  • From: Marc Deslauriers
• [SECURITY] [DSA 1711-1] New TYPO3 packages fix remote code execution
  • From: Nico Golde
• [SECURITY] [DSA 1710-1] New ganglia-monitor-core packages fix remote code execution
  • From: Steffen Joeris
• WB News v2.0.X Remote File include ..
  • From: security
• Re: Oblog XSS valnerability
  • From: dan . crowley
• CA20090123-01: Cohesion Tomcat Multiple Vulnerabilities
  • From: Williams, James K
• Re: munky-bliki lfi
  • From: security curmudgeon
• [ MDVSA-2009:027 ] cups
  • From: security
• EleCard MPEG PLAYER (.m3u file) Local Stack Overflow Exploit
  • From: alphanix00
• Benchmarking attacks and major security weakness on all recent Windows versions up to Windows 200
  • From: thadeum
• Browse3d (.sfs file) Local Stack Overflow Exploit
  • From: alphanix00
• Re: [Full-disclosure] ZDI-09-007: Apple QuickTime Cinepak Codec MDAT Heap Corruption Vulnerability
  • From: Juha-Matti Laurio
• Re: ZDI-09-007: Apple QuickTime Cinepak Codec MDAT Heap Corruption Vulnerability
  • From: security curmudgeon
• MediaMonkey 3.0.6 (.m3u file) Local Buffer Overflow PoC
  • From: alphanix00
• /bin/login DoS remains after DSA-1709
  • From: Paul Szabo
• Nokia Multimedia Player (.AVI File) Null Dereference Pointer Exploit
  • From: alphanix00
• LDF Sql injection vulnerability
  • From: arash . setayeshi
• SonyEricsson WAP Push Denial of Service
  • From: Mobile Security Lab
• Lootan(kedor) Sql Injection vulnerability
  • From: arash . setayeshi
• [HACKATTACK Advisory 25012009]ConPresso CMS 4.07 - Session Fixation, XFS, XSS
  • From: office
• Browser3D 3.5 (.sfs File) Local Stack Overflow Exploit (c)
  • From: maroc-anti-connexion
• VUplayer (.wax file) local buffer overflow crash exploit
  • From: storms0uth
• Problems with syscall filtering technologies on Linux
  • From: Chris Evans
• ZDI-09-009: EMC AutoStart Backbone Engine Trusted Pointer Code Execution Vulnerability
  • From: zdi-disclosures
• Oblog XSS valnerability
  • From: arash . setayeshi
• [ MDVSA-2009:026 ] phpMyAdmin
  • From: security
• BBSxp Xss vulnerability
  • From: arashps0
• Secunia Research: AXIS Camera Control "image_pan_tilt" Property Buffer Overflow
  • From: Secunia Research
• PHP-Nuke 8.0 Downloads Blind Sql Injection
  • From: r3d . w0rm
• [ MDVSA-2009:025 ] pidgin
  • From: security
• [TKADV2009-003] GStreamer Heap Overflow and Array Index out of Bounds Vulnerabilities
  • From: Tobias Klein
• ZDI-09-007: Apple QuickTime Cinepak Codec MDAT Heap Corruption Vulnerability
  • From: zdi-disclosures
• [ MDVSA-2009:021 ] php
  • From: security
• [ MDVSA-2009:023 ] php
  • From: security
• VUPlayer 2.49 .ASX local universal BOF exploit
  • From: maroc-anti-connexion
• [ GLSA 200901-15 ] Net-SNMP: Denial of Service
  • From: Pierre-Yves Rofes
• ZDI-09-005: Apple QuickTime VR Track Header Atom Heap Corruption Vulnerability
  • From: zdi-disclosures
• [ MDVSA-2009:022 ] php
  • From: security
• Asp-project Cookie Handling
  • From: r3d . w0rm
• ZDI-09-008: Apple QuickTime STSD JPEG Atom Heap Corruption Vulnerability
  • From: zdi-disclosures
• ZDI-09-006: Apple QuickTime AVI Header nBlockAlign Heap Corruption Vulnerability
  • From: zdi-disclosures
• [ MDVSA-2009:020 ] xine-lib
  • From: security
• [ MDVSA-2009:024 ] php4
  • From: security
• Digital Security opens a site of its research center DSec Research Group
  • From: Digital Security Research Group
• [IMF 2009] Call for Papers
  • From: Oliver Goebel
• [ GLSA 200901-14 ] Scilab: Insecure temporary file usage
  • From: Pierre-Yves Rofes
• Re: [Full-disclosure] Oracle Containers For Java Directory Traversal (OC4J) Oracle Application Server 10g (10.1.3.1.0) Oracle HTTP Server
  • From: Mark Thomas
• Joomla component beamospetition 1.0.12 Sql Injection
  • From: vds_s
• Cisco Security Advisory: Cisco Unified Communications Manager CAPF Denial of Service Vulnerability`
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco Security Manager Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• [DSECRG-09-004] AXIS 70U Network Document Server - Privilege Escalation and XSS
  • From: Digital Security Research Group
• CfP: 16th ACM Conference on Computer and Communications Security (CCS) 2009
  • From: Christopher Kruegel
• [SECURITY] [DSA 1709-1] New shadow packages fix privilege escalation
  • From: Thijs Kinkhorst
• [SECURITY] [DSA 1693-2] New phppgadmin packages fix regression
  • From: Thijs Kinkhorst
• rPSA-2009-0014-1 hplip
  • From: rPath Update Announcements
• [ GLSA 200901-13 ] Pidgin: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• rPSA-2009-0008-1 openssl
  • From: rPath Update Announcements
• rPSA-2009-0010-1 ntp ntp-utils
  • From: rPath Update Announcements
• rPSA-2009-0009-1 bind bind-utils
  • From: rPath Update Announcements
• rPSA-2009-0011-1 perl
  • From: rPath Update Announcements
• Videos from HITBSecConf2008 - Malaysia released!
  • From: Praburaajan
• Secunia Research: OpenSG Radiance RGBE Buffer Overflow Vulnerability
  • From: Secunia Research
• Re: Remote Cisco IOS FTP exploit
  • From: security curmudgeon
• Microsoft Bluetooth Stack OBEX Directory Traversal
  • From: alberto . morenot
• [security bulletin] HPSBMA02400 SSRT080144 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code
  • From: security-alert
• Secunia Research: Trend Micro Network Security Component Vulnerabilities
  • From: Secunia Research
• Oracle Containers For Java Directory Traversal (OC4J) Oracle Application Server 10g (10.1.3.1.0) Oracle HTTP Server
  • From: Eduardo Vela
• MoinMoin Wiki Engine XSS Vulnerability
  • From: swhite
• Re: Remote Cisco IOS FTP exploit
  • From: Russell L. Smoak
• [ANNOUNCE] Apache Jackrabbit 1.5.2 released
  • From: Jukka Zitting
• Cybershade CMS Remote File include vulnerability
  • From: security
• Secunia Research: EasyHDR Pro Radiance RGBE Buffer Overflow
  • From: Secunia Research
• [SECURITY] [DSA 1708-1] New Git packages fix remote code execution
  • From: Florian Weimer
• [ MDVSA-2009:019 ] imlib2
  • From: security
• Web Hacking Incidents update for Jan 19th
  • From: Ofer Shezaf
• Advisory: Oracle EBusiness Suite Sensitive Information Disclosure Vulnerability
  • From: Aditya K Sood
• [ GLSA 200901-12 ] noip-updater: Execution of arbitrary code
  • From: Pierre-Yves Rofes
• [Wintercore Research ] Fujitsu SystemcastWizard Lite PXEService Remote Buffer Overflow.
  • From: vulns
• Ralinktech wireless cards drivers vulnerability
  • From: springsec
• 53KF Web IM 2009 Cross-Site Scripting Vulnerabilities
  • From: Heart
• [ MDVSA-2009:018 ] tomcat5
  • From: security
• FBI XSS Vulnerability
  • From: sohrab_behroozian
• Sagem router f@st 2404 remote reset poc
  • From: alphanix00
• Excel Viewer OCX 3.1/3.2 Denial of Service PoC
  • From: alphanix00
• [ MDVSA-2009:017 ] kdebase
  • From: security
• [ MDVSA-2009:016 ] xen
  • From: security
• Announce: RSBAC 1.4.0 released
  • From: Amon Ott
• Active Bids
  • From: pouya . s3rver
• [ MDVSA-2009:013 ] mplayer
  • From: security
• DMXReady Blog Manager (SQL/XSS)
  • From: pouya . s3rver
• [ MDVSA-2009:015 ] ffmpeg
  • From: security
• [ MDVSA-2009:014 ] mplayer
  • From: security
• Syslserve 1.058 Denial of Service Vulnerability
  • From: vuln_research
• [USN-700-2] Perl regression
  • From: Kees Cook
• [SECURITY] [DSA 1706-1] New amarok packages fix arbitrary code execution
  • From: Moritz Muehlenhoff
• [ MDVSA-2009:012 ] mozilla-thunderbird
  • From: security
• [SECURITY] [DSA 1707-1] New iceweasel packages fix several vulnerabilities
  • From: Steffen Joeris
• [USN-709-1] tar vulnerability
  • From: Jamie Strandboge
• [SECURITY] [DSA 1705-1] New netatalk packages fix arbitrary code execution
  • From: Nico Golde
• [waraxe-2009-SA#070] - Multiple Vulnerabilities in MKPortal <= 1.2.1
  • From: come2waraxe
• [TZO-2009-2] Avira Antivir - Priviledge escalation
  • From: Thierry Zoller
• Errata: [TZO-2009-1] Avira Antivir - RAR - Division by Zero & Null Pointer Dereference
  • From: Thierry Zoller
• ANNOUNCE: apache_1.3.41+ssl_1.60 released
  • From: Adam Laurie
• Oracle Secure Backup NDMP_CONECT_CLIENT_AUTH Command Buffer Overflow Vulnerability
  • From: noreply-secresearch@xxxxxxxxxxxx
• Oracle Secure Backup's observiced.exe Denial Of Service vulnerability
  • From: noreply-secresearch@xxxxxxxxxxxx
• Oracle Secure Backup Multiple Denial Of Service vulnerabilities
  • From: noreply-secresearch@xxxxxxxxxxxx
• Re: iDefense Security Advisory 01.13.09: Oracle Secure Backup Administration Server login.php Command Injection Vulnerability
  • From: security curmudgeon
• [ MDVSA-2009:011 ] virtualbox
  • From: security
• Re: Assurent VR - Oracle BEA WebLogic Server Apache Connector Buffer Overflow
  • From: security curmudgeon
• Windows NTP Time Server Syslog Monitor 1.0.000 Denial of Service Vulnerability
  • From: vuln_research
• TFTPUtil GUI TFTP Server Denial of Service Vulnerability
  • From: vuln_research
• TFTPUtil GUI TFTP Directory Traversal
  • From: vuln_research
• [ GLSA 200901-11 ] Avahi: Denial of Service
  • From: Pierre-Yves Rofes
• [ GLSA 200901-10 ] GnuTLS: Certificate validation error
  • From: Pierre-Yves Rofes
• Oracle TimesTen Remote Format String
  • From: Joxean Koret
• Oracle Secure Backup 10g Remote Code Execution
  • From: Joxean Koret
• ZDI-09-004: Oracle TimesTen evtdump Remote Format String Vulnerability
  • From: zdi-disclosures
• ZDI-09-003: Oracle Secure Backup exec_qr() Command Injection Vulnerability
  • From: zdi-disclosures
• [SECURITY] [DSA 1704-1] New xulrunner packages fix several vulnerabilities
  • From: Steffen Joeris
• [TZO-2009-1] Avira Antivir - RAR - Division by Zero & Null Pointer Dereference
  • From: Thierry Zoller
• OTSTurntables 1.00.027 (.ofl) Local Stack Overflow Exploit
  • From: crimson . loyd
• Cisco Security Advisory: IronPort Encryption Appliance / PostX and PXE Encryption Vulnerabilities
  • From: Cisco Systems Product Security Incident Response Team
• Call for Papers: Cyber Warfare
  • From: kgconference
• [ MDVSA-2009:010 ] qemu
  • From: security
• Cisco Security Advisory: Cisco ONS Platform Crafted Packet Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• [ MDVSA-2009:009 ] kvm
  • From: security
• Oracle CPU Jan 2009 Advisories.
  • From: Alexandr Polyakov
• Cisco Security Response: Cisco IOS Cross-Site Scripting Vulnerabilities
  • From: Cisco Systems Product Security Incident Response Team
• [ MDVSA-2009:008 ] qemu
  • From: security
• DoS code for Cisco VLAN Trunking Protocol Vulnerability
  • From: showrun . lee
• PR08-19: XSS on Cisco IOS HTTP Server
  • From: ProCheckUp Research
• RE: DoS code for Cisco VLAN Trunking Protocol Vulnerability
  • From: Paul Oxman (poxman)
• WowWee Rovio - Insufficient Access Controls - Covert Audio/Video Snooping Possible
  • From: Brian Dowling
• [ MDVSA-2009:007 ] ntp
  • From: security
• Trigger Abuse of MDSYS.SDO_TOPO_DROP_FTBL in Oracle 10g R1 and R2
  • From: David Litchfield
• iDefense Security Advisory 01.13.09: Oracle Secure Backup Administration Server login.php Command Injection Vulnerability
  • From: iDefense Labs
• phpList <= 2.10.8 Local File inclusion
  • From: admin
• iDefense Security Advisory 01.13.09: Oracle Secure Backup Administration Server login.php Command Injection Vulnerability
  • From: iDefense Labs
• Cisco Unified IP Phone 7960G and 7940G (SIP) RTP Header Vulnerability
  • From: Laurent Butti
• iDefense Security Advisory 01.13.09: Oracle Database 10g R2 Summary Advisor Arbitrary File Rewrite Vulnerability
  • From: iDefense Labs
• FreeBSD Security Advisory FreeBSD-SA-09:04.bind
  • From: FreeBSD Security Advisories
• iDefense Security Advisory 01.13.09: RIM BlackBerry Enterprise Server Attachment Service PDF Distiller Uninitialized Memory Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 01.13.09: RIM BlackBerry Enterprise Server Attachment Service PDF Distiller 'bitmaps' Heap Overflow Vulnerability
  • From: iDefense Labs
• [USN-708-1] HPLIP vulnerability
  • From: Marc Deslauriers
• rPSA-2009-0007-1 pam_krb5
  • From: rPath Update Announcements
• rPSA-2009-0005-1 git gitweb
  • From: rPath Update Announcements
• ZDI-09-002: Microsoft SMB NT Trans2 Request Parsing Remote Code Execution Vulnerability
  • From: zdi-disclosures
• ZDI-09-001: Microsoft SMB NT Trans Request Parsing Remote Code Execution Vulnerability
  • From: zdi-disclosures
• iDefense Security Advisory 01.13.09: RIM BlackBerry Enterprise Server Attachment Service PDF Distiller 'symWidths' Heap Overflow Vulnerability
  • From: iDefense Labs
• rPSA-2009-0006-1 samba samba-client samba-server samba-swat
  • From: rPath Update Announcements
• ANNOUNCE: DEFCON London - DC4420 - January meet - Thursday 15th Jan 2009
  • From: Major Malfunction
• [ MDVSA-2009:006 ] openoffice.org
  • From: security
• [ GLSA 200901-08 ] Online-Bookmarks: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• [ GLSA 200901-09 ] Adobe Reader: User-assisted execution of arbitrary code
  • From: Robert Buchholz
• PDFBuilderX 2.2 Arbitrary File Overwrite
  • From: fakeperson7
• Secunia Research: DevIL "iGetHdrHeader()" Buffer Overflow Vulnerabilities
  • From: Secunia Research
• [SECURITY] [DSA 1703-1] New bind9 packages fix cryptographic weakness
  • From: Florian Weimer
• [SECURITY] [DSA 1702-1] New ntp packages fix cryptographic weakness
  • From: Florian Weimer
• [TKADV2009-001] Sun Solaris aio_suspend() Kernel Integer Overflow Vulnerability
  • From: Tobias Klein
• [ GLSA 200901-07 ] MPlayer: Multiple vulnerabilities
  • From: Tobias Heinlein
• [SECURITY] [DSA 1701-1] New OpenSSL packages fix cryptographic weakness
  • From: Florian Weimer
• Hack Aethra SV 1042 Adsl/Voip Router
  • From: SmoKe
• [TKADV2009-002] Amarok Integer Overflow and Unchecked Allocation Vulnerabilities
  • From: Tobias Klein
• [security bulletin] HPSBMA02392 SSRT071481 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Denial of Service (DoS)
  • From: security-alert
• Visuplay CMS SQL injection vulnerability
  • From: joseph . giron13
• SyScan'09 Call For Paper - Shanghai, Hong Kong, Singapore, Taipei
  • From: organiser@xxxxxxxxxx
• [ MDVSA-2009:005 ] xterm
  • From: security
• [SECURITY] [DSA 1700-1] New lasso packages fix validation bypass
  • From: Moritz Muehlenhoff
• [ GLSA 200901-06 ] Tremulous: User-assisted execution of arbitrary code
  • From: Pierre-Yves Rofes
• [BMSA-2009-01] Authentication bypass in Interspire Shopping Cart v4.0.1 and below
  • From: Nam Nguyen
• PHP Buffer Overflow(popen)
  • From: ew1zz
• RE: Oracle Database Buffer Overflow in SYS.KUPF$FILE_INT.GET_FULL_FILENAME (Oracle CPU April 2008 DB11)
  • From: Integrigy Alerts
• [USN-707-1] CUPS vulnerabilities
  • From: Marc Deslauriers
• [ GLSA 200901-05 ] Streamripper: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• [SECURITY] [DSA 1699-1] New zaptel packages fix privilege escalation
  • From: Florian Weimer
• [ GLSA 200901-04 ] D-Bus: Denial of Service
  • From: Robert Buchholz
• [ GLSA 200901-03 ] pdnsd: Denial of Service and cache poisoning
  • From: Robert Buchholz
• Comersus Shopping Cart <= v6 Remote User Pass Exploit
  • From: ajannhwt
• [ GLSA 200901-02 ] JHead: Multiple vulnerabilities
  • From: Robert Buchholz
• [ GLSA 200901-01 ] NDISwrapper: Arbitrary remote code execution
  • From: Robert Buchholz
• Re: Team SHATTER Security Advisory: Oracle Database Buffer Overflow in SYS.KUPF$FILE_INT.GET_FULL_FILENAME (DB11)
  • From: Joxean Koret
• Re: Team SHATTER Security Advisory: Oracle Database Buffer Overflow in SYS.KUPF$FILE_INT.GET_FULL_FILENAME (DB11)
  • From: security curmudgeon
• [ MDVSA-2009:002 ] bind
  • From: security
• [ MDVSA-2009:004 ] pam_mount
  • From: security
• [ MDVSA-2009:003 ] python
  • From: security
• Re: Leak of SNMP write password via SNMP read community in NETGEAR WG102 - Prosafe 802.11g Access Point
  • From: Simon Richter
• Re: Leak of SNMP write password via SNMP read community in NETGEAR WG102 - Prosafe 802.11g Access Point
  • From: Steve Shockley
• Java Runtime UTF-8 Decoder Smuggling Vector
  • From: William A. Rowe, Jr.
• Re: Leak of SNMP write password via SNMP read community in NETGEAR WG102 - Prosafe 802.11g Access Point
  • From: Simon Richter
• Leak of SNMP write password via SNMP read community in NETGEAR WG102 - Prosafe 802.11g Access Point
  • From: mad-vaittes
• Re: Linux Kernel 2.6.18/2.6.24/2.6.20/2.6.22/2.6.21 denial of service exploit
  • From: Shaochun Wang
• Re: Plunet BusinessManager failure in access controls and multiple stored cross site scripting
  • From: Stefano Zanero
• ShakaCon 2009 Call for Papers and Trainers
  • From: Shakacon
• [SECURITY] [DSA 1698-1] New gforge packages fix SQL injection
  • From: Thijs Kinkhorst
• [USN-706-1] Bind vulnerability
  • From: Jamie Strandboge
• AST-2009-001: Information leak in IAX2 authentication
  • From: Asterisk Security Team
• [USN-705-1] NTP vulnerability
  • From: Jamie Strandboge
• Re: [IBM Datapower XS40] Denial of Service
  • From: terrordactylspam
• LayerOne 2009 Call for Papers
  • From: LayerOne Call For Papers
• CORE-2008-1128: Openfire multiple vulnerabilities
  • From: CORE Security Technologies Advisories
• [IBM Datapower XS40] Denial of Service
  • From: erik
• PHP-Fusion Mod vArcade 1.8 Sql Injection Vulnerability
  • From: irancrash
• [USN-704-1] OpenSSL vulnerability
  • From: Jamie Strandboge
• Re: [Suspected Spam]"Security Assessment of the Internet Protocol" & the IETF
  • From: Jerome Athias
• CA20090107-01: CA Service Metric Analysis and CA Service Level Management smmsnmpd Arbitrary Command Execution Vulnerability
  • From: Williams, James K
• FreeBSD Security Advisory FreeBSD-SA-09:01.lukemftpd
  • From: FreeBSD Security Advisories
• FreeBSD Security Advisory FreeBSD-SA-09:02.openssl
  • From: FreeBSD Security Advisories
• [SECURITY] [DSA 1697-1] New iceape packages fix several vulnerabilities
  • From: Steffen Joeris
• [SECURITY] [DSA 1696-1] New icedove packages fix several vulnerabilities
  • From: Steffen Joeris
• Plunet BusinessManager failure in access controls and multiple stored cross site scripting
  • From: Matteo Ignaccolo
• PHP-Fusion Mod E-Cart Sql Injection
  • From: r3d . w0rm
• [USN-701-1] Thunderbird vulnerabilities
  • From: Jamie Strandboge
• Secunia Research: TSC2 Help Desk CTab ActiveX Control Buffer Overflow
  • From: Secunia Research
• Cisco Security Advisory: Cisco Global Site Selector Appliances DNS Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• PHP-Fusion Mod Members Bewerb Sql Injection
  • From: r3d . w0rm
• [USN-701-2] Thunderbird vulnerabilities
  • From: Jamie Strandboge
• Secunia Research: HP OpenView Network Node Manager Multiple Vulnerabilities
  • From: Secunia Research
• CFP: COLSEC 2009
  • From: Patrice CLEMENTE
• Plunet BusinessManager failure in access controls and multiple stored cross site scripting
  • From: Matteo Ignaccolo
• [oCERT-2008-016] Multiple OpenSSL signature verification API misuses
  • From: Will Drewry
• VUPLAYER BufferOver flow POC
  • From: alphanix00
• New WHID web hacking incidents
  • From: Ofer Shezaf
• [SECURITY] [DSA 1694-2] New xterm packages fix regression
  • From: Florian Weimer
• [USN-703-1] xterm vulnerability
  • From: Kees Cook
• Re: php 4.x php5.2.x all "show_source()" ,"highlight_file()" bypass&#8207;
  • From: Slack Traq
• [Suspected Spam]"Security Assessment of the Internet Protocol" & the IETF
  • From: Fernando Gont
• [USN-702-1] Samba vulnerability
  • From: Marc Deslauriers
• Walusoft TFTPServer2000 Version 3.6.1 Directory Traversal
  • From: vuln_research
• Re: php 4.x php5.2.x all "show_source()" ,"highlight_file()" bypass&#8207;
  • From: faze0r
• Re: php 4.x php5.2.x all "show_source()" ,"highlight_file()" bypass&#8207;
  • From: a
• MSFXDC Metasploit eXploits Development Contest
  • From: Jerome Athias
• php 4.x php5.2.x all "show_source()" ,"highlight_file()" bypass&#8207;
  • From: l1un
• ANNOUNCE: RFIDIOt ver 01.v released - Jan 2009
  • From: Adam Laurie
• Google Chrome FTP PASV IP Malicious Port Scanning Vulnerability.
  • From: Aditya K Sood
• Destiny Media Player 1.61 (.lst File) Local Stack Overflow Exploit
  • From: crimson . loyd
• SolucionWeb (main.php?id_area) Remote SQL injection Vulnerability
  • From: Ehsan_Hp200
• Re: Linux Kernel 2.6.18/2.6.24/2.6.20/2.6.22/2.6.21 denial of service exploit
  • From: Eugene Teo
• Call for papers and trainers - SeacureIT 2009
  • From: Stefano Zanero
• PollPro 3.0 XSRF VuLn.
  • From: b4DchiLd
• Top 5-ish Threats to Watch for in 2009
  • From: Pete Herzog
• Re: Linux Kernel 2.6.18/2.6.24/2.6.20/2.6.22/2.6.21 denial of service exploit
  • From: joris
• [SECURITY] [DSA 1695-1] New Ruby packages fix denial of service
  • From: Florian Weimer
• [SECURITY] [DSA 1694-1] New xterm packages fix remote code execution
  • From: Florian Weimer
• A tool to identify the MD5 certs on FF
  • From: Memisyazici, Aras
• Re: apache 1.x <=> 2.x suphp (suPHP_ConfigPath) bypass safe mode exploit&#8206;
  • From: ms5ote
• Linux Kernel 2.6.18/2.6.24/2.6.20/2.6.22/2.6.21 denial of service exploit
  • From: i9p
• CFP uCon Security Conference 2009 - Recife, Brazil
  • From: uCon Security Conference
• apache 1.x <=> 2.x suphp (suPHP_ConfigPath) bypass safe mode exploit&#8206;
  • From: v8i
• Re: php-nuke 8.0 module sections artid blind sql inj vuln.
  • From: John Haywood
• MD5 Considered Harmful Today: Creating a rogue CA certificate
  • From: Alexander Sotirov
• Re: MagpieRSS XSS 0day
  • From: Antone Roundy
• php-nuke 8.0 module sections artid blind sql inj vuln.
  • From: the . dumenci
• Megacubo 5.0.7 (mega://) remote eval() injection exploit
  • From: pyro
• reliable IOS exploitation
  • From: Gadi Evron
• [SECURITY] [DSA 1693-1] New phppgadmin packages fix several vulnerabilities
  • From: Thijs Kinkhorst
• Mavi Emlak Sql Injection
  • From: r3d . w0rm
• Re: Re: Google Chrome Browser (ChromeHTML://) remote parameter injection POC
  • From: nospam
• [ MDVSA-2008:246 ] kernel
  • From: security
• MagpieRSS XSS 0day
  • From: admin
• Madrese-Portal Sql Injection
  • From: r3d . w0rm
• ViArt Shopping Cart v3.5 Multiple Remote Vulnerabilities
  • From: XiaShing
• MSN messenger sends IP addresses Public and Private
  • From: Carmelo Brancato
• hm? new vulnerabilities? wav windows media
  • From: anonymous
• [SECURITY] [DSA 1692-1] New php-xajax packages fix cross-site scripting
  • From: Steffen Joeris
• Joomla Component mdigg 2.2.8 Blind SQL Injection Exploit
  • From: hadihadi_zedehal_2006
• ClubHack2008 presentations are now online
  • From: ClubHack
• PHP-Fusion Mod TI - Blog System Sql Injection
  • From: r3d . w0rm
• Castlecops security site closed for good
  • From: Michael Scheidell
• joomla com_lowcosthotels sql injection
  • From: lovebug
• Re: Google Chrome Browser (ChromeHTML://) remote parameter injection POC
  • From: Already-sended-information-to-security-focus
• MS Windows Media Player * (.WAV) Remote Integrer Overflow
  • From: Laurent . gaffie
• Google Chrome Browser (ChromeHTML://) remote parameter injection POC
  • From: nospam
• FreeBSD Security Advisory FreeBSD-SA-08:12.ftpd
  • From: FreeBSD Security Advisories
• PGP Desktop 9.0.6 Denial Of Service - ZeroDay
  • From: contact . fingers
• [ GLSA 200812-21 ] ClamAV: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• [ GLSA 200812-24 ] VLC: Multiple vulnerabilities
  • From: Tobias Heinlein
• [ GLSA 200812-22 ] Ampache: Insecure temporary file usage
  • From: Pierre-Yves Rofes
• [USN-698-3] Nagios vulnerabilities
  • From: Marc Deslauriers
• FRHACK Registration open (Christmas offer)
  • From: Jerome Athias
• Personal Sticky Threads v1.0.3c vbulletin Add-on problem
  • From: xl4nothing
• [ GLSA 200812-23 ] Imlib2: User-assisted execution of arbitrary code
  • From: Pierre-Yves Rofes
• [SECURITY] [DSA 1688-2] New courier-authlib packages fix regression
  • From: Florian Weimer
• [USN-700-1] Perl vulnerabilities
  • From: Kees Cook
• [security bulletin] HPSBST02397 SSRT080187 rev.1 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS08-078
  • From: security-alert
• [USN-677-2] OpenOffice.org Internationalization update
  • From: Jamie Strandboge
• DDIVRT-2008-16 Citrix Broadcast Server 6.0 login.asp SQL Injection --- Update for BID 32832
  • From: VulnerabilityResearch
• Re: rPSA-2008-0341-1 dovecot
  • From: olga
• FreeBSD Security Advisory FreeBSD-SA-08:13.protosw
  • From: FreeBSD Security Advisories
• [ISecAuditors Security Advisories] PSI remote integer overflow DoS
  • From: ISecAuditors Security Advisories
• [ MDVA-2008:241 ] mailscanner
  • From: security
• CORE-2008-1210: Qemu and KVM VNC server remote DoS
  • From: CORE Security Technologies Advisories
• [ GLSA 200812-20 ] phpCollab: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• Re: [IVIZ-08-016] F-Secure f-prot Antivirus for Linux corrupted ELF header Security Bypass
  • From: mikael . albrecht
• rPSA-2008-0341-1 dovecot
  • From: rPath Update Announcements
• [ISecAuditors Security Advisories] Multiple vulnerabilities in WiFi router COMTREND CT-536/HG-536+
  • From: ISecAuditors Security Advisories
• [SECURITY] [DSA 1690-1] New avahi packages fix denial of service
  • From: Florian Weimer
• [ISecAuditors Security Advisories] Wordpress is vulnerable to an unauthorized upgrade and XSS
  • From: ISecAuditors Security Advisories
• [SECURITY] [DSA 1689-1] New proftpd-dfsg packages fix Cross-Site Request Forgery
  • From: Martin Schulze
• Secunia Research: Trend Micro HouseCall ActiveX Control Arbitrary Code Execution
  • From: Secunia Research
• CoolPlayer 2.19 (Skin File) Local Buffer Overflow Exploit
  • From: writ3r-dont-want-bugtraq-spam-
• [USN-697-1] Imlib2 vulnerability
  • From: Marc Deslauriers
• FreeSSHd Multiple Remote Stack Overflow Vulnerabilities
  • From: writ3r-dont-want-bugtraq-spam-
• POC for CVE-2008-5619 (roundcubemail PHP arbitrary code injection)
  • From: Jacobo Avariento Gimeno
• [SECURITY] [DSA 1691-1] New moodle packages fix several vulnerabilities
  • From: Thijs Kinkhorst
• [UPRSN] Ubuntu Privacy Remix 8.04r2 introduces "noexec"-mounting by default
  • From: Ubuntu Privacy Remix Team
• [USN-698-2] Nagios3 vulnerabilities
  • From: Marc Deslauriers
• [USN-699-1] Blender vulnerabilities
  • From: Marc Deslauriers
• Secunia Research: Trend Micro HouseCall "notifyOnLoadNative()" Vulnerability
  • From: Secunia Research
• [SECURITY] [DSA 1678-2] New perl packages fix regression
  • From: Florian Weimer
• [USN-698-1] Nagios vulnerability
  • From: Marc Deslauriers
• Re: chicomas <=2.0.4 Multiple Vulnerabilities
  • From: security curmudgeon
• chicomas <=2.0.4 Multiple Vulnerabilities
  • From: admin
• [SECURITY] [DSA 1688-1] New courier-authlib packages fix SQL injection
  • From: Steffen Joeris
• [ GLSA 200812-19 ] PowerDNS: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• rPSA-2008-0338-1 cups
  • From: rPath Update Announcements
• PHP APC vulnerable to local attacks
  • From: Moritz Naumann
• HTC Touch vCard over IP Denial of Service
  • From: Mobile Security Lab
• [security bulletin] HPSBST02394 SSRT080183 rev.1 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS08-070 to MS08-077
  • From: security-alert
• SEC Consult SA-20081219-0 :: Fujitsu-Siemens WebTransactions remote command injection vulnerability
  • From: Bernhard Mueller
• Re: CONFidence 2009, CFP
  • From: Dominik 'Rathann' Mierzejewski
• [USN-696-1] Avahi vulnerabilities
  • From: Jamie Strandboge
• CONFidence 2009, CFP
  • From: Andrzej Targosz
• EasySiteNetwork (joke.php?id) Remote SQL injection Vulnerability
  • From: Ehsan_Hp200
• [ MDVSA-2008:245 ] firefox
  • From: security
• php python extension safe_mode bypass
  • From: amir
• [USN-695-1] shadow vulnerability
  • From: Kees Cook
• Firefox cross-domain text theft (CESA-2008-011)
  • From: Chris Evans
• [USN-694-1] libvirt vulnerability
  • From: Jamie Strandboge
• [SECURITY] CVE-2008-2938 - Apache Tomcat information disclosure vulnerability - Update 2
  • From: Mark Thomas
• [USN-690-3] Firefox vulnerabilities
  • From: Jamie Strandboge
• Re: Joomla: Session hijacking vulnerability, CVE-2008-4122
  • From: darkz . gsa
• [USN-690-2] Firefox vulnerabilities
  • From: Jamie Strandboge
• [TKADV2008-015] Sun Solaris SIOCGTUNPARAM IOCTL Kernel NULL pointer dereference
  • From: Tobias Klein
• [USN-693-1] LittleCMS vulnerability
  • From: Kees Cook
• [USN-692-1] Gadu vulnerability
  • From: Kees Cook
• [USN-690-1] Firefox and xulrunner vulnerabilities
  • From: Jamie Strandboge
• [ MDVSA-2008:244 ] mozilla-firefox
  • From: security
• Network Security Scanner OpenVAS 2.0.0 Released
  • From: Michael Wiegand
• n.runs-SA-2008.010 - Opera HTML parsing Code Execution
  • From: security
• RE: [Full-disclosure] ZDI-08-088: Oracle E-Business Suite Self-Service Web Applications SQL Injection Vulnerability
  • From: Integrigy Security
• Re: [IVIZ-08-016] F-Secure f-prot Antivirus for Linux corrupted ELF header Security Bypass
  • From: frisk
• [ GLSA 200812-18 ] JasPer: User-assisted execution of arbitrary code
  • From: Robert Buchholz
• Joomla: Session hijacking vulnerability, CVE-2008-4122
  • From: Hanno Böck
• CVE-2008-0971 - Barracuda Networks products Multiple Cross-Site Scripting Vulnerabilities
  • From: marian . ventuneac
• CVE-2008-1094 - Barracuda Span Firewall SQL Injection Vulnerability
  • From: marian . ventuneac
• ZDI-08-088: Oracle E-Business Suite Business Intelligence SQL Injection Vulnerability
  • From: zdi-disclosures
• [ GLSA 200812-17 ] Ruby: Multiple vulnerabilities
  • From: Tobias Heinlein
• Re: ooVoo 1.7.1.35 (URL Protocol) remote unicode buffer overflow poc
  • From: philip . robertson
• [ MDVSA-2008:243 ] enscript
  • From: security
• [USN-691-1] Ruby vulnerability
  • From: Marc Deslauriers
• Re: Moodle 1.9.3 Remote Code Execution
  • From: hackeriri
• Re: Re: Moodle 1.9.3 Remote Code Execution
  • From: martin
• [SECURITY] [DSA 1687-1] New Linux 2.6.18 packages fix several vulnerabilities
  • From: dann frazier
• Re: Re: Multiple XSRF in DD-WRT (Remote Root Command Execution)
  • From: 0xjbrown41
• [ MDVSA-2008:242 ] wireshark
  • From: security
• Fwd: TmaxSoft JEUS Alternate Data Streams Vulnerability
  • From: Simon Ryeo
• TmaxSoft JEUS Alternate Data Streams Vulnerability
  • From: Simon Ryeo
• Re: Moodle 1.9.3 Remote Code Execution
  • From: Jamie Riden
• phpList vulnerability
  • From: phplist
• Multiple XSS Vulnerabilities in World Recipe 2.11
  • From: security
• Re: Moodle 1.9.3 Remote Code Execution
  • From: lent
• [TKADV2008-014] MPlayer TwinVQ Processing Stack Buffer Overflow Vulnerability
  • From: Tobias Klein
• CFAGCMS Remote File Inclusion
  • From: admin
• [ GLSA 200812-16 ] Dovecot: Multiple vulnerabilities
  • From: Tobias Heinlein
• [ GLSA 200812-15 ] POV-Ray: User-assisted execution of arbitrary code
  • From: Pierre-Yves Rofes
• [SECURITY] [DSA 1686-1] New no-ip packages fix arbitrary code execution
  • From: Moritz Muehlenhoff
• [ GLSA 200812-14 ] aview: Insecure temporary file usage
  • From: Tobias Heinlein
• [ GLSA 200812-13 ] OpenOffice.org: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• [ GLSA 200812-12 ] Honeyd: Insecure temporary file creation
  • From: Tobias Heinlein
• Moodle 1.9.3 Remote Code Execution
  • From: ascii
• [SECURITY] [DSA 1685-1] New uw-imap packages fix multiple vulnerabilities
  • From: Steffen Joeris
• Nokia N70/N73 Bluetooth Stack OBEX Implementation Denial of Service
  • From: yangdn
• rPSA-2008-0336-1 tshark wireshark
  • From: rPath Update Announcements
• ASP-CMS v.1.0 Sql Injection/Database Disclosure
  • From: r3d . w0rm
• Re: Re: Multiple XSRF in DD-WRT (Remote Root Command Execution)
  • From: dan . crowley
• Re: Multiple XSRF in DD-WRT (Remote Root Command Execution)
  • From: David E. Thiel
• Aspect9: Internet Explorer 8.0 Beta 2 Anti-XSS Filter Vulnerabilities
  • From: Rafel Ivgi
• Re: Multiple XSRF in DD-WRT (Remote Root Command Execution)
  • From: dan . crowley
• Re: Multiple XSRF in DD-WRT (Remote Root Command Execution)
  • From: Sebastian Gottschall (DD-WRT)
• Re: Multiple XSRF in DD-WRT (Remote Root Command Execution)
  • From: Sebastian Gottschall (DD-WRT)
• Secunia Research: CA ARCserve Backup RPC "handle_t" Argument Vulnerability
  • From: Secunia Research
• Re[2]: Multiple XSRF in DD-WRT (Remote Root Command Execution)
  • From: Vladimir '3APA3A' Dubrovin
• Re: Multiple XSRF in DD-WRT (Remote Root Command Execution)
  • From: pUm
• facto Database Disclosure
  • From: r3d . w0rm
• Meta Cart Free Database Disclosure
  • From: r3d . w0rm
• aspProductCatalog Sql Injection
  • From: r3d . w0rm
• Black Hat: New Webinar, Japan audio now on-line.
  • From: jmoss
• Re: Multiple XSRF in DD-WRT (Remote Root Command Execution)
  • From: David E. Thiel
• Re: Multiple XSRF in DD-WRT (Remote Root Command Execution)
  • From: Hanno Böck
• AST-2008-012: Remote crash vulnerability in IAX2
  • From: Asterisk Security Team
• Browser Security Handbook
  • From: Michal Zalewski
• [ GLSA 200812-11 ] CUPS: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• CA ARCserve Backup LDBserver Vulnerability
  • From: Williams, James K
• [ MDVSA-2008:240 ] vinagre
  • From: security
• Max's Guestbook (XSS) Remote Vulnerability
  • From: 08253
• iDefense Security Advisory 12.10.08: Microsoft Excel Malformed Object Memoy Corruption Vulnerability
  • From: iDefense Labs
• [ GLSA 200812-10 ] Archive::Tar: Directory traversal vulnerability
  • From: Robert Buchholz
• [ GLSA 200812-09 ] OpenSC: Insufficient protection of smart card PIN
  • From: Robert Buchholz
• [security bulletin] HPSBUX02393 SSRT080057 rev.1 - HP-UX Running DCE, Remote Denial of Service (DoS)
  • From: security-alert
• CORE-2008-0228: Microsoft Word Malformed FIB Arbitrary Free Vulnerability
  • From: CORE Security Technologies Advisories
• Microsoft SQL Server 2005 sp_replwritetovarbin memory overwrite (update to SEC Consult SA-20081209)
  • From: Bernhard Mueller
• Re: Multiple XSRF in DD-WRT (Remote Root Command Execution)
  • From: s . gottschall
• [IVIZ-08-016] F-Secure f-prot Antivirus for Linux corrupted ELF header Security Bypass
  • From: iViZ Security Advisories
• [IVIZ-08-015] Sophos Antivirus for Linux vulnerability
  • From: iViZ Security Advisories
• [IVIZ-08-014] AVG antivirus for Linux vulnerability
  • From: iViZ Security Advisories
• [IVIZ-08-013] Avast antivirus for Linux multiple vulnerabilities
  • From: iViZ Security Advisories
• [IVIZ-08-012] Bitdefender antivirus for Linux multiple vulnerabilities
  • From: iViZ Security Advisories
• [IVIZ-08-011] ClamAV lzh unpacking segmentation fault
  • From: iViZ Security Advisories
• [SECURITY] [DSA 1684-1] New lcms packages fix multiple vulnerabilities
  • From: Devin Carraway
• [USN-678-2] GnuTLS regression
  • From: Jamie Strandboge
• [USN-689-1] Vinagre vulnerability
  • From: Kees Cook
• ISOI 6, Dallas, TX - January 29, 30
  • From: Gadi Evron
• Insomnia : ISVA-081209.1 - IE Webdav Request Parsing Heap Corruption Vulnerability
  • From: Brett Moore
• ZDI-08-087: Microsoft Internet Explorer Webdav Request Parsing Heap Corruption Vulnerability
  • From: zdi-disclosures
• ZDI-08-086: Microsoft Office Word Document Table Property Stack Overflow Vulnerability
  • From: zdi-disclosures
• ZDI-08-085: Microsoft Office RTF Drawing Object Heap Overflow Vulnerability
  • From: zdi-disclosures
• ZDI-08-084: Microsoft Office RTF Consecutive Drawing Object Parsing Heap Corruption Vulnerability
  • From: zdi-disclosures
• ZDI-08-083: Microsoft Animation ActiveX Control Malformed AVI Parsing Code Execution Vulnerability
  • From: zdi-disclosures
• Secunia Research: Microsoft Hierarchical FlexGrid Control Integer Overflows
  • From: Secunia Research
• iDefense Security Advisory 12.09.08: Microsoft Windows Graphics Device Interface Integer Overflow Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 12.09.08: Microsoft Internet Explorer 5.01 EMBED tag Long File Name Extension Stack Buffer Overflow Vulnerability (iDefense Exclusive)
  • From: iDefense Labs
• CORE-2008-1127 - Vinagre show_error() format string vulnerability
  • From: CORE Security Technologies Advisories
• Secunia Research: Microsoft Excel NAME Record Array Indexing Vulnerability
  • From: Secunia Research
• Secunia Research: Microsoft Word RTF Polyline/Polygon Integer Overflow
  • From: Secunia Research
• Multiple Vendor Anti-Virus Software Malicious WebPage Detection Bypass -Update-
  • From: xhakerman2006
• Re: DoS attacks on MIME-capable software via complex MIME emails
  • From: Vladimir '3APA3A' Dubrovin
• rPSA-2008-0332-1 kernel
  • From: rPath Update Announcements
• SEC Consult SA-20081109-0 :: Microsoft SQL Server 2000 sp_replwritetovarbin limited memory overwrite vulnerability
  • From: Bernhard Mueller
• PHP safe_mode can be bypassed via proc_open() and custom environment.
  • From: gat3way
• [ MDVSA-2008:236-1 ] vim
  • From: security
• DoS attacks on MIME-capable software via complex MIME emails
  • From: bruhns
• Re: [Full-disclosure] MS OWA 2003 Redirection Vulnerability - [MSRC 7368br]
  • From: Peter Watkins
• Multiple XSRF in DD-WRT (Remote Root Command Execution)
  • From: th3 . r00k . ieatpork
• ZDI-08-082: BMC PatrolAgent Version Logging Format String Vulnerability
  • From: zdi-disclosures
• DoS Vulnerability in Aruba Mobility Controller Caused by Malformed EAP Frame (Aruba Advisory ID: AID-12808)
  • From: Robbie (Rupinder) Gill
• [security bulletin] HPSBMA02390 SSRT071481 rev.1 - HP OpenView Performance Agent, HP Performance Agent, Remote Denial of Service (DoS)
  • From: security-alert
• [SECURITY] [DSA 1683-1] New streamripper packages fix potential code execution
  • From: Florian Weimer
• Neostrada Livebox Remote Network Down PoC Exploit
  • From: 0in . email
• [security bulletin] HPSBMA02391 SSRT071481 rev.1 - HP OpenView Reporter and HP Reporter Running on Windows, Remote Denial of Service (DoS)
  • From: security-alert
• Re: RadAsm <=2.2.1.5 Local Command Execution
  • From: Li Gen
• [SVRT-07-08] Vulnerability in Face Recognition Authentication Mechanism of Lenovo-Asus-Toshiba Laptops
  • From: SVRT-Bkis
• Re: SecurityReason: PHP 5.2.6 SAPI php_getuid() overload
  • From: Eygene Ryabinkin
• Multiple Vendor Anti-Virus Software Malicious WebPage Detection Bypass
  • From: xhakerman2006
• Re: SecurityReason: PHP 5.2.6 SAPI php_getuid() overload
  • From: Maksymilian Arciemowicz
• [DSECRG-08-041] Stored XSS Vulnerability in Xoops 2.3.x
  • From: Digital Security Research Group [DSecRG]
• [DSECRG-08-040] Multiple Local File Include Vulnerabilities in Xoops 2.3.x
  • From: Digital Security Research Group [DSecRG]
• Re: SecurityReason: PHP 5.2.6 SAPI php_getuid() overload
  • From: Eygene Ryabinkin
• RadAsm <=2.2.1.5 Local Command Execution
  • From: xhakerman2006
• XSS in PHPepperShop v 1.4
  • From: th3 . r00k . ieatpork
• Two XSS Flaws in PrestaShop 1.1.0.3
  • From: th3 . r00k . ieatpork
• [SECURITY] [DSA 1682-1] New squirrelmail packages fix cross site scripting
  • From: Thijs Kinkhorst
• SecurityReason: PHP 5.2.6 SAPI php_getuid() overload
  • From: cxib
• [ GLSA 200812-08 ] Mgetty: Insecure temporary file usage
  • From: Pierre-Yves Rofes
• Re: SecurityReason : PHP 5.2.6 dba_replace() destroying file
  • From: Eygene Ryabinkin
• [ MDVSA-2008:239 ] clamav
  • From: security
• Re: SecurityReason : PHP 5.2.6 dba_replace() destroying file
  • From: Ilia Alshanetsky
• Re: SecurityReason : PHP 5.2.6 dba_replace() destroying file
  • From: Eygene Ryabinkin
• RE: DDIVRT-DDIVRT-2008-15 iPhone Configuration Web Utility 1.0 for Windows Directory Traversal
  • From: VulnerabilityAlert
• CVE-2008-5079: multiple listen()s on same socket corrupts the vcc table
  • From: Hugo Dias
• [ MDVSA-2008:238 ] libsamplerate
  • From: security
• ZDI-08-081: Sun Java Web Start and Applet Multiple Sandbox Bypass Vulnerabilities
  • From: zdi-disclosures
• ZDI-08-080: Sun Java AWT Library Sandbox Violation Vulnerability
  • From: zdi-disclosures
• ZDI-08-079: Trillian AIM Plugin Malformed XML Tag Heap Overflow Vulnerability
  • From: zdi-disclosures
• ZDI-08-078: Trillian IMG SRC ID Memory Corruption Vulnerability
  • From: zdi-disclosures
• ZDI-08-077: Trillian AIM IMG Tag Parsing Stack Overflow Vulnerability
  • From: zdi-disclosures
• iDefense Security Advisory 12.04.08: Sun Java JRE TrueType Font Parsing Integer Overflow Vulnerability
  • From: iDefense Labs
• [USN-687-1] nfs-utils vulnerability
  • From: Marc Deslauriers
• [ MDVSA-2008:237 ] apache2
  • From: security
• Re: Joomla Component GameQ
  • From: packet
• iDefense Security Advisory 12.04.08: Sun Java JRE Pack200 Decompression Integer Overflow Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 12.04.08: Sun Java Web Start GIF Decoding Memory Corruption Vulnerability
  • From: iDefense Labs
• Joomla Component mydyngallery
  • From: r3d . w0rm
• iDefense Security Advisory 12.04.08: Sun Java JRE TrueType Font Parsing Heap Overflow Vulnerability
  • From: iDefense Labs
• [SECURITY] [DSA 1681-1] New Linux 2.6.24 packages fix several vulnerabilities
  • From: dann frazier
• Re: XSS in Internet Explorer 6 and 7
  • From: MustLive
• [UPRSN] Ubuntu Privacy Remix 8.04r1 fixes security issues
  • From: Ubuntu Privacy Remix Team
• CVE-2008-2086: Java Web Start File Inclusion via System Properties Override
  • From: VSR Advisories
• Joomla Component GameQ
  • From: r3d . w0rm
• [SECURITY] [DSA 1680-1] New clamav packages fix potential code execution
  • From: Florian Weimer
• DDIVRT-2008-18 Orb Denial of Service
  • From: DDI . VulnerabilityAlert
• Advisory 06/2008: PHP ZipArchive::extractTo() Directory Traversal Vulnerability
  • From: Stefan Esser
• [ MDVSA-2008:236 ] vim
  • From: security
• Re: [USN-684-1] ClamAV vulnerability
  • From: 0xjbrown41
• [USN-686-1] AWStats vulnerability
  • From: Kees Cook
• [USN-685-1] Net-SNMP vulnerabilities
  • From: Kees Cook
• Re: VMSA-2008-0019 VMware Hosted products and patches for ESX and ESXi resolve a critical security issue and update bzip2
  • From: Steve Shockley
• Re: [HACKATTACK Advisory 20081127]Social Impress CMS 1.1 - Session Fixation
  • From: rene . sato
• [security bulletin] HPSBUX02389 SSRT080141 rev.1 - HP-UX, Local Denial of Service (DoS)
  • From: security-alert
• [SVRT-06-08] MULTI SECURITY VULNERABILITIES IN MVNFORUM
  • From: SVRT-Bkis
• [SECURITY] [DSA 1679-1] New awstats packages fix cross-site scripting
  • From: Florian Weimer
• [USN-684-1] ClamAV vulnerability
  • From: Kees Cook
• [HACKATTACK Advisory 20081203]Pro Clan Manager 0.4.2 - Session Fixation
  • From: office
• [SECURITY] [DSA 1678-1] New perl packages fix privilege escalation
  • From: Steffen Joeris
• VMSA-2008-0019 VMware Hosted products and patches for ESX and ESXi resolve a critical security issue and update bzip2
  • From: VMware Security team
• Re: Re: Re: Wrong report: BID 32287, Pi3Web ISAPI DoS vulnerability
  • From: zimpel
• [SECURITY] [DSA 1677-1] New CUPS packages fix arbitrary code execution
  • From: Martin Schulze
• [ GLSA 200812-07 ] Mantis: Multiple vulnerabilities
  • From: Robert Buchholz
• [ GLSA 200812-02 ] enscript: User-assisted execution of arbitrary code
  • From: Robert Buchholz
• [ GLSA 200812-04 ] lighttpd: Multiple vulnerabilities
  • From: Robert Buchholz
• [ GLSA 200812-05 ] libsamplerate: User-assisted execution of arbitrary code
  • From: Robert Buchholz
• [USN-683-1] Imlib2 vulnerability
  • From: Marc Deslauriers
• [ GLSA 200812-03 ] IPsec-Tools: racoon Denial of Service
  • From: Robert Buchholz
• [ GLSA 200812-06 ] libxml2: Multiple vulnerabilities
  • From: Robert Buchholz
• [ GLSA 200812-01 ] OptiPNG: User-assisted execution of arbitrary code
  • From: Robert Buchholz
• Re: /bin/login gives root to group utmp
  • From: 0xjbrown41
• Cpanel fantastico Privilege Escalation "ModSec and PHP restriction Bypass"
  • From: l1un
• Dates for SyScan'09
  • From: organiser@xxxxxxxxxx
• [SECURITY] [DSA 1676-1] New flamethrower packages fix denial of service
  • From: dann frazier
• [USN-682-1] libvorbis vulnerabilities
  • From: Marc Deslauriers
• [USN-681-1] ImageMagick vulnerability
  • From: Marc Deslauriers
• [BMSA 2008-09] Two buffer overflow vulnerabilities in Rumpus v6.0
  • From: Nam Nguyen
• Re: Re: Wrong report: BID 32287, Pi3Web ISAPI DoS vulnerability
  • From: zimpel
• Re: Re: Wrong report: BID 32287, Pi3Web ISAPI DoS vulnerability
  • From: het_ebadi
• /bin/login gives root to group utmp
  • From: Paul Szabo
• [TKADV2008-013] VLC media player RealMedia Processing Integer Overflow Vulnerability
  • From: Tobias Klein
• [SECURITY] [DSA 1675-1] New phpmyadmin packages fix cross site scripting
  • From: Thijs Kinkhorst
• [SECURITY] [DSA 1674-1] New jailer packages fix denial of service
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 1673-1] New wireshark packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 1672-1] New imlib2 packages fix arbitrary code execution
  • From: Moritz Muehlenhoff
• [tool] Exomind v0.2 is out!
  • From: Jose Orlicki
• SecurityReason : PHP 5.2.6 dba_replace() destroying file
  • From: cxib
• DC4420 - DEFCON London - Christmas meeting - Tuesday 2nd December 2008
  • From: Major Malfunction
• AssoCIateD 1.4.4 Remote Cross Site Scripting Vulnerability
  • From: tan_prathan
• [USN-680-1] Samba vulnerability
  • From: Marc Deslauriers
• [HACKATTACK Advisory 20081127]Social Impress CMS 1.1 - Session Fixation
  • From: office
• FreeRainbowTables.com has changed generation platform
  • From: Jerome Athias
• Re: WHMCS V3.7.1 Sensible Information Disclosure
  • From: julianrdz91
• WHMCS V3.7.1 Sensible Information Disclosure
  • From: julianrdz91
• Re: XSS in Internet Explorer 6 and 7
  • From: Thierry Zoller
• XSS in Internet Explorer 6 and 7
  • From: MustLive
• Updated: Google Chrome 0.4.154.25 URI Meta Character URL Obfuscation
  • From: Aditya K Sood
• [USN-668-1] Thunderbird vulnerabilities
  • From: Jamie Strandboge
• [USN-678-1] GnuTLS vulnerability
  • From: Jamie Strandboge
• Re: [SVRT-05-08] Critical BoF vulnerability found in ffdshow affecting all internet browsers (SVRT-Bkis)
  • From: svrt
• [CFP] FRHACK 01 Call For Papers (save the dates!)
  • From: Jerome Athias
• Re: Microsoft VISTA TCP/IP stack buffer overflow
  • From: Edi Strosar
• WordPress XSS vulnerability in RSS Feed Generator
  • From: Jeremias Reith
• RSA EnVision Remote Password Disclosure
  • From: nicolas . viot
• Re: Microsoft VISTA TCP/IP stack buffer overflow
  • From: dale
• [security bulletin] HPSBTU02382 SSRT080132 rev.1 - HP Secure Web Server for Tru64 UNIX or Internet Express for Tru64 UNIX running PHP, Remote Denial of Service (DoS) or Arbitrary Code Execution
  • From: security-alert
• Re: OpenSSH security advisory: cbc.adv
  • From: Bob Beck
• New tool and paper for Oracle forensics...
  • From: David Litchfield
• [USN-677-1] OpenOffice.org vulnerabilities
  • From: Jamie Strandboge
• MyBB 1.4.3 my_post_key Disclosure Vulnerability
  • From: nbbn@xxxxxxx
• Re: OpenSSH security advisory: cbc.adv
  • From: Fabian Hänsel
• Re: [SVRT-05-08] Critical BoF vulnerability found in ffdshow affecting all internet browsers (SVRT-Bkis)
  • From: Nam Nguyen
• Re: Re: OpenSSH security advisory: cbc.adv
  • From: "dennis jackson"
• Re: [SVRT-05-08] Critical BoF vulnerability found in ffdshow affecting all internet browsers (SVRT-Bkis)
  • From: Eygene Ryabinkin
• CanSecWest 2009 CFP (March 18-20 2009, Deadline December 8 2008)
  • From: Dragos Ruiu
• Re: OpenSSH security advisory: cbc.adv
  • From: Damien Miller
• Re: OpenSSH security advisory: cbc.adv
  • From: Nick Boyce
• Re: Re: Wrong report: BID 32287, Pi3Web ISAPI DoS vulnerability
  • From: zimpel
• [SECURITY] [DSA 1671-1] New iceweasel packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• Siemens C450IP/C475IP DoS
  • From: Martin Kluge
• WebStudio CMS 'pageid' Blind SQL Injection
  • From: glafkos
• [SECURITY] [DSA 1670-1] New enscript packages fix arbitrary code execution
  • From: Moritz Muehlenhoff
• [USN-674-2] HPLIP vulnerabilities
  • From: Marc Deslauriers
• Re: Re: OpenSSH security advisory: cbc.adv
  • From: Guillaume MULLER
• [USN-675-2] Gaim vulnerability
  • From: Marc Deslauriers
• [USN-676-1] WebKit vulnerability
  • From: Marc Deslauriers
• Re: OpenSSH security advisory: cbc.adv
  • From: Nick Boyce
• FreeBSD Security Advisory FreeBSD-SA-08:11.arc4random
  • From: FreeBSD Security Advisories
• [USN-675-1] Pidgin vulnerabilities
  • From: Marc Deslauriers
• Google Chrome MetaCharacter URI Obfuscation Vulnerability
  • From: Aditya K Sood
• [SVRT-05-08] Critical BoF vulnerability found in ffdshow affecting all internet browsers (SVRT-Bkis)
  • From: svrt
• Amaya (id) Remote Stack Overflow Vulnerability
  • From: writ3r
• Amaya (URL Bar) Remote Stack Overflow Vulnerability
  • From: writ3r
• Re: Re: MS Internet Explorer 7 Denial Of Service Exploit
  • From: Glynn Clements
• [ MDVSA-2008:235 ] mozilla-thunderbird
  • From: security
• Re: MS Internet Explorer 7 Denial Of Service Exploit
  • From: Nick Kirby
• Re: Wrong report: BID 32287, Pi3Web ISAPI DoS vulnerability
  • From: tecklord
• Re: Re: Re: MS Internet Explorer 7 Denial Of Service Exploit
  • From: 0xjbrown41
• [SECURITY] [DSA 1669-1] New xulrunner packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• Revised: OpenSSH security advisory: cbc.adv
  • From: Damien Miller
• Re: OpenSSH security advisory: cbc.adv
  • From: Otto Moerbeek
• Wrong report: BID 32287, Pi3Web ISAPI DoS vulnerability
  • From: zimpel
• rPSA-2008-0328-1 httpd mod_ssl
  • From: rPath Update Announcements
• rPSA-2008-0327-1 httpd mod_ssl
  • From: rPath Update Announcements
• rPSA-2008-0324-1 gvim vim vim-minimal
  • From: rPath Update Announcements
• [SECURITY] [DSA 1668-1] New hf packages fix execution of arbitrary code
  • From: Steve Kemp
• Re: Re: MS Internet Explorer 7 Denial Of Service Exploit
  • From: craig
• [SVRT-04-08] Vulnerability in WireShark 1.0.4 for DoS Attack
  • From: svrt
• Adobe Flash Multiple Vulnerabilities
  • From: iSEC Partners
• [ MDVSA-2008:234 ] kernel
  • From: security
• DDIVRT-2008-15 iPhone Configuration Web Utility 1.0 for Windows Directory Traversal
  • From: vulnerabilityresearch
• OpenSSH security advisory: cbc.adv
  • From: Damien Miller
• KVIrc 3.4.2 Shiny (uri handler) remote command execution exploit
  • From: Pyrokinesis
• ZDI-08-076: EMC Control Center SAN Manager SST_SENDFILE Remote File Retrieval Vulnerability
  • From: zdi-disclosures
• ZDI-08-075: EMC Control Center SAN Manager Master SST_CTGTRANS Overflow Vulnerability
  • From: zdi-disclosures
• [ MDVSA-2008:233 ] libcdaudio
  • From: security
• Re: Re: Re: Re: Re: Re: Opera 9.6x file:// overflow
  • From: send9
• SecurityReason : PHP 5.2.6 (error_log) safe_mode bypass
  • From: cxib
• Re: Re: Re: Re: Re: Opera 9.6x file:// overflow
  • From: theindigowolf
• Re: Cpanel 11.x Local File Inclusion & Cross Site Scripting - Discovered By Khashayar Fereidani
  • From: dkoston
• Re: Re: Cpanel 11.x Local File Inclusion & Cross Site Scripting - Discovered By Khashayar Fereidani
  • From: irancrash
• Social Engine 2.7 CRLF Injection + SQL injection
  • From: office
• Re: Re: Re: Re: Re: Opera 9.6x file:// overflow
  • From: psy . echo
• [security bulletin] HPSBMA02388 SSRT080059 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Cross Site Scripting (XSS)
  • From: security-alert
• boastMachine v3.1 Remote Sql Injection
  • From: r3d . w0rm
• [ MDVSA-2008:220-1 ] kernel
  • From: security
• Re: Cpanel 11.x Local File Inclusion & Cross Site Scripting - Discovered By Khashayar Fereidani
  • From: Jan van Niekerk
• Re: Re: Re: Re: Opera 9.6x file:// overflow
  • From: Zack Payton
• Re: [ MDVSA-2008:232 ] dovecot
  • From: Eygene Ryabinkin
• Re: Re: Re: Re: Opera 9.6x file:// overflow
  • From: peterjohan@xxxxxxx
• [ MDVSA-2008:232 ] dovecot
  • From: security
• [USN-674-1] HPLIP vulnerabilities
  • From: Marc Deslauriers
• Re: [ MDVSA-2008:231 ] libxml2
  • From: Eygene Ryabinkin
• rPSA-2008-0325-1 libxml2
  • From: rPath Update Announcements
• PR07-40: Authentication Bypass, Passwords Leakage and SNMP Injection on 3Com AP 8760
  • From: ProCheckUp Research
• [SECURITY] [DSA 1667-1] New python2.4 packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• [ MDVSA-2008:231 ] libxml2
  • From: security
• PR08-09: Unauthenticated File Retrieval on Sun Java System Identity Manager "ext" parameter
  • From: ProCheckUp Research
• Secunia Research: Streamripper Multiple Buffer Overflows
  • From: Secunia Research
• Re: Opera 9.6x file:// overflow
  • From: xiashing
• Microsoft VISTA TCP/IP stack buffer overflow
  • From: Thomas Unterleitner
• PR07-11: Cross-site Request Forgery (CSRF) on Sun Java System Identity Manager
  • From: ProCheckUp Research
• Metasploit Framework 3.2 Released
  • From: H D Moore
• Firefox cross-domain image theft (CESA-2008-009)
  • From: Chris Evans
• [USN-673-1] libxml2 vulnerabilities
  • From: Kees Cook
• Re: Re: Re: Opera 9.6x file:// overflow
  • From: send9
• Black Hat November News: CFPS Now Open, Webinar 5 and Japan on-line.
  • From: jmoss
• Re: Re: Opera 9.6x file:// overflow
  • From: jplopezy
• [security bulletin] HPSBST02386 SSRT080164 rev.1 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS08-067 to MS08-069
  • From: security-alert
• Outdated and vulnerable OpenSource libraries used in "Deutsche Telekom" home banking software
  • From: Stefan Kanthak
• [DSECRG-08-039] Local File Include Vulnerability in Pluck CMS 4.5.3
  • From: Digital Security Research Group
• [ MDVSA-2008:230 ] firefox
  • From: security
• [SECURITY] [DSA 1666-1] New libxml2 packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• [USN-672-1] ClamAV vulnerability
  • From: Kees Cook
• [USN-667-1] Firefox and xulrunner vulnerabilities
  • From: Jamie Strandboge
• [ MDVSA-2008:227-1 ] gnutls
  • From: security
• Re: Opera 9.6x file:// overflow
  • From: jplopezy
• rPSA-2008-0322-1 gnutls
  • From: rPath Update Announcements
• Kimson cms cross site scripting vulnerability
  • From: md . r00t . defacer
• [USN-671-1] MySQL vulnerabilities
  • From: Marc Deslauriers
• [waraxe-2008-SA#069] - Multiple Sql Injection in vBulletin 3.7.4
  • From: come2waraxe
• Exodus v0.10 uri handler arbitrary parameter injection
  • From: Pyrokinesis
• Opera 9.6x file:// overflow
  • From: send9
• RE: MS OWA 2003 Redirection Vulnerability - [MSRC 7368br]
  • From: Castigliola, Angelo
• rPSA-2008-0321-1 enscript
  • From: rPath Update Announcements
• [waraxe-2008-SA#068] - Sql Injection in vBulletin 3.7.3.pl1
  • From: come2waraxe
• [ GLSA 200811-05 ] PHP: Multiple vulnerabilities
  • From: Tobias Heinlein
• Microsoft Windows Server Service (MS08-067) Exploit
  • From: Debasis Mohanty
• Re: MS OWA 2003 Redirection Vulnerability - [MSRC 7368br]
  • From: Piergiorgio Venuti
• ANNOUNCE: RFIDIOt release RFIDIOt-0.1u
  • From: Adam Laurie
• Re: [Full-disclosure] MS OWA 2003 Redirection Vulnerability - [MSRC 7368br]
  • From: Micheal Cottingham
• [ MDVSA-2008:229 ] clamav
  • From: security
• [USN-670-1] VMBuilder vulnerability
  • From: Jamie Strandboge
• [ MDVSA-2008:228 ] mozilla-firefox
  • From: security
• Re: A-Link WL54AP3 and WL54AP2 CSRF+XSS vulnerability
  • From: billy . markette
• New Whitepaper - .NET Framework Rootkits: Backdoors inside your Framework
  • From: Erez Metula
• Digital Armaments October-November Hacking Challenge: Linux Local Kernel Exploit (5,000$)
  • From: info
• Team SHATTER Security Advisory: Oracle Database Multiple SQL Injection vulnerabilities in LTADM
  • From: Shatter
• [ MDVSA-2008:227 ] gnutls
  • From: security
• Team SHATTER Security Advisory: Oracle Database multiple SQL Injection vulnerabilities in Workspace Manager
  • From: Shatter
• Team SHATTER Security Advisory: Oracle Database SQL Injection in SYS.DBMS_CDC_PUBLISH.ALTER_AUTOLOG_CHANGE_SOURCE
  • From: Shatter
• Team SHATTER Security Advisory: Oracle Database SQL Injection in SYS.DBMS_CDC_IPUBLISH.ALTER_HOTLOG_INTERNAL_CSOURCE
  • From: Shatter