Bugtraq

• Thread Index

• Multiple Cross Site Scripting (XSS) and SQL injection Vulnerabilities in XRMS, CVE-2008-3664
  • From: Fabian Fingerle
• FreeBSD Security Advisory FreeBSD-SA-08:09.icmp6
  • From: FreeBSD Security Advisories
• Re: Has anyone implemented "double forward DNS"?
  • From: terry white
• FreeBSD Security Advisory FreeBSD-SA-08:07.amd64
  • From: FreeBSD Security Advisories
• Re: Has anyone implemented "double forward DNS"?
  • From: Glynn Clements
• Re: Has anyone implemented "double forward DNS"?
  • From: Ansgar Wiechers
• Re: Has anyone implemented "double forward DNS"?
  • From: Jerry Franz
• Re: In search of examples of malicious source code
  • From: Gabriele Zanoni
• [ MDVSA-2008:185 ] python-django
  • From: security
• [ MDVSA-2008:184 ] libtiff
  • From: security
• FreeBSD Security Advisory FreeBSD-SA-08:08.nmount
  • From: FreeBSD Security Advisories
• RE: Google Chrome Automatic File Download
  • From: James C. Slora Jr.
• Re: Has anyone implemented "double forward DNS"?
  • From: The Fungi
• TransLucid 1.75 (fckeditor) Remote Arbitrary File Upload
  • From: admin
• Cisco Secure ACS Denial Of Service Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Secure ACS EAP Parsing Vulnerability
  • From: Laurent Butti
• Re: Google Chrome Automatic File Download
  • From: Razi Shaban
• RES: Google Chrome Automatic File Download
  • From: DIOGO LEAL CHAGAS
• Cisco Security Advisory: Remote Access VPN and SIP Vulnerabilities in Cisco PIX and Cisco ASA
  • From: Cisco Systems Product Security Incident Response Team
• [Tool] Distack framework for attack detection and traffic analysis
  • From: Christoph Mayer
• Google Chrome Browser (ver.0.2.149.27) Vulnerability
  • From: psy . echo
• Google Chrome Automatic File Download
  • From: nerex
• Secunia Research: Novell iPrint Client nipplib.dll "IppCreateServerRef()" Buffer Overflow
  • From: Secunia Research
• RUXCON 2008 Final Call For Papers
  • From: cfp
• Has anyone implemented "double forward DNS"?
  • From: Duncan Simpson
• Exploit
  • From: Admin
• T2´08 Challenge - Free Tickets Available
  • From: Tomi Tuominen
• In search of examples of malicious source code
  • From: Steve . Coleman
• [ MDVSA-2008:183 ] opensc
  • From: security
• [Suspected Spam]New IETF I-D-: Security Assessment of the Internet Protocol version 4
  • From: Fernando Gont
• [USN-639-1] tiff vulnerability
  • From: Kees Cook
• [Tool] sqlmap 0.6 released
  • From: Bernardo Damele A. G.
• CS-Cart <= 1.3.5 SQL Injection
  • From: GulfTech Security Research
• [ MDVSA-2008:182 ] wordnet
  • From: security
• [AJECT] Softalk IMAP Server 8.5.1 DoS vulnerability
  • From: João Antunes
• Postfix Linux-only local denial of service
  • From: Wietse Venema
• ToorCon X Lineup & Training Seminars Posted & Pre-Registration Ending
  • From: h1kari
• [security bulletin] HPSBMA02362 SSRT080044, SSRT080045 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Denial of Service (DoS)
  • From: security-alert
• HPSBUX02354 SSRT080113 rev.1 - HP-UX Running Netscape / Red Hat Directory Server, Remote Cross Site Scripting (XSS) or Remote Denial of Service (DoS)
  • From: security-alert
• [SECURITY] [DSA 1634-1] New wordnet packages fix arbitrary code execution
  • From: Thijs Kinkhorst
• [SECURITY] [DSA 1633-1] New slash packages fix multiple vulnerabilities
  • From: Florian Weimer
• [oCERT-2008-014] WordNet stack and heap overflows
  • From: Rob Holland
• PoCfix (PoC for Postfix local root vuln - CVE-2008-2936)
  • From: Roman Medina-Heigl Hernandez
• rPSA-2008-0264-1 ruby
  • From: rPath Update Announcements
• Multiple Cross Site Scripting (XSS) Vulnerabilities in vtigerCRM 5.0.4, CVE-2008-3101
  • From: Fabian Fingerle
• [SECURITY] [DSA 1627-2] New opensc package fix incomplete check
  • From: Thijs Kinkhorst
• Plesk 8.6.0 authentication flaw allows to gain virtual user priviledges
  • From: Felix Buenemann
• [SECURITY] [DSA-1597-2] New mt-daapd package fix regression
  • From: Devin Carraway
• Re: [Advisory] Invision Power Board <= 2.3.5 Multiple Vulnerabilities and Security Bypass
  • From: gmdarkfig
• VMSA-2008-0014 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Server, VMware ESX address information disclosure, privilege escalation and other security issues.
  • From: VMware Security team
• Re: [Exploit] Invision Power Board <= 2.3.5 Multiple Vulnerabilities
  • From: gmdarkfig
• [Exploit] Invision Power Board <= 2.3.5 Multiple Vulnerabilities
  • From: gmdarkfig
• [ MDVSA-2008:181 ] ipsec-tools
  • From: security
• [Advisory] Invision Power Board <= 2.3.5 Multiple Vulnerabilities and Security Bypass
  • From: gmdarkfig
• [scip_Advisory 3807] Dreambox DM500 webserver long URL request denial of service
  • From: Marc Ruef
• ZDI-08-054: Multiple Vendor libpurple MSN Protocol SLP Message Heap Overflow Vulnerability
  • From: zdi-disclosures
• reviving the botnets@ mailing list: a new statregy in fighting cyber crime
  • From: Gadi Evron
• [security bulletin] HPSBUX02365 SSRT080118 rev.1 - HP-UX Running Apache, Remote Cross Site Scripting (XSS) or Denial of Service (DoS)
  • From: security-alert
• [IVIZ-08-005] IBM Lenovo BIOS Plain Text Password Disclosure
  • From: iViZ Security Advisories
• [IVIZ-08-002] Hewlett-Packard BIOS Plain Text Password Disclosure
  • From: iViZ Security Advisories
• XSS and Data Manipulation attacks found in CMS PHPCart.
  • From: vaibhav aher
• [IVIZ-08-004] Intel BIOS Plain Text Password Disclosure
  • From: iViZ Security Advisories
• [IVIZ-08-003] TrueCrypt Security Model bypass exploiting wrong BIOS API usage
  • From: iViZ Security Advisories
• [USN-638-1] Yelp vulnerability
  • From: Kees Cook
• [IVIZ-08-007] DriveCrypt Security Model bypass exploiting wrong BIOS API usage
  • From: iViZ Security Advisories
• [IVIZ-08-008] LILO Security Model bypass exploiting wrong BIOS API usage
  • From: iViZ Security Advisories
• [security bulletin] HPSBMA02363 SSRT080106 rev.1 - HP Enterprise Discovery Running on Windows, Remote Authorized User, Gain Extended Privileges
  • From: security-alert
• [ MDVSA-2008:180-1 ] libxml2
  • From: security
• PacSec 2008 CFP (Deadline Sept. 1, Conference Nov. 12/13) and BA-Con 2008 Speakers (Sept .30/ Oct. 1)
  • From: Dragos Ruiu
• White Wolf Labs #080826-1: Kyocera Mita Scanner File Utility (Multiple)
  • From: Seth Fogie
• [SECURITY] [DSA 1631-1] New libxml2 packages fix denial of service
  • From: Steve Kemp
• Multiple Vulnerabilities in AWStats Totals
  • From: Elliot Kendall
• Hopeless comments regarding the pointless "HP System Management Homepage (SMH) Unspecified XSS"
  • From: Luca.carettoni
• [SECURITY] [DSA 1632-1] New tiff packages fix arbitrary code execution
  • From: Thijs Kinkhorst
• ZoneMinder Multiple Vulnerabilities
  • From: filip . palian
• Mini-NUKE v2.3 Freehost (tr) Multiple Remote SQL Injection Vulnerabilities
  • From: byccc
• ToorCon X CFP Closing and Workshops and Seminars discounted until Friday!
  • From: David Hulton
• [IVIZ-08-006] DiskCryptor Security Model bypass exploiting wrong BIOS API usage
  • From: iViZ Security Advisories
• [IVIZ-08-009] Grub Legacy Security Model bypass exploiting wrong BIOS API usage
  • From: iViZ Security Advisories
• Crafty Syntax Live Help <= 2.14.6 SQL Injection
  • From: GulfTech Security Research
• SECOBJADV-2008-03.2: PartyGaming PartyPoker Malicious Update Vulnerability
  • From: Security Objectives Corporation
• [DSECRG-08-037] Multiple Local File Include Vulnerabilities in Pluck CMS 4.5.2
  • From: Digital Security Research Group [DSecRG]
• Secunia Research: Novell iPrint Client ActiveX Control Multiple Buffer Overflows
  • From: Secunia Research
• Secunia Research: Calendarix Basic Two SQL Injection Vulnerabilities
  • From: Secunia Research
• [DSECRG-08-038] Multiple Local File Include Vulnerabilities in ezContents CMS 2.0.3
  • From: Digital Security Research Group [DSecRG]
• RE: Arbitrary Code Execution in Commands: K, Control-], g]
  • From: Michael Wojcik
• Secunia Research: Novell iPrint Client ActiveX Control "GetFileList()" Information Disclosure
  • From: Secunia Research
• Re: TimeTrex Time and Attendance Cookie Theft
  • From: Mike
• OneNews Beta 2 Multiple Vulnerabilities
  • From: crimson . loyd
• Fedora confirms: Our servers were breached
  • From: Juha-Matti Laurio
• Secunia Research: Trend Micro Products Web Management Authentication Bypass
  • From: Secunia Research
• Re: Fedora confirms: Our servers were breached
  • From: Dragos Ruiu
• [SECURITY] [DSA 1631-1] New libxml2 packages fix denial of service
  • From: Steve Kemp
• Re: RE: TimeTrex Time and Attendance Cookie Theft
  • From: hi
• [oCERT-2008-008] multiple heap overflows in xine-lib
  • From: Will Drewry
• Re: Null Byte Local file Inclusion in FAR - PHP Project version:1.0
  • From: William McAfee
• Apple OSX Leopard (10.5+), inadequate ACL insight can create vuln
  • From: bgtrq . tryfixingit
• Contest: Best Advances for OpenVAS Network Vulnerability Tests
  • From: Michael Wiegand
• Call For Papers - Hackers 2 Hackers Conference 5th Edition - Brazil
  • From: cfp
• [ MDVSA-2008:180 ] libxml2
  • From: security
• Vim: Arbitrary Code Execution in Commands: K, Control-], g]
  • From: Jan Minář
• RE: TimeTrex Time and Attendance Cookie Theft
  • From: Alex Eden
• [ MDVSA-2008:179 ] metisse
  • From: security
• PR08-20: Bypassing ASP .NET "ValidateRequest" for Script Injection Attacks
  • From: ProCheckUp Research
• TimeTrex Time and Attendance Cookie Theft
  • From: DoZ
• [SECURITY] [DSA 1630-1] New Linux 2.6.18 packages fix several vulnerabilities
  • From: dann frazier
• Null Byte Local file Inclusion in FAR - PHP Project version:1.0
  • From: beenudel1986
• UPDATE: [ GLSA 200804-22 ] PowerDNS Recursor: DNS Cache Poisoning
  • From: Robert Buchholz
• [ MDVSA-2008:178 ] xine-lib
  • From: security
• [ MDVSA-2008:177 ] xine-lib
  • From: security
• rPSA-2008-0259-1 postfix
  • From: rPath Update Announcements
• CORE-2008-0813 - vBulletin Cross Site Scripting Vulnerability
  • From: CORE Security Technologies Advisories
• CORE-2008-0624: Anzio Web Print Object Buffer Overflow
  • From: CORE Security Technologies Advisories
• IMF 2008 - Call for Participation
  • From: Oliver Goebel
• [ MDVSA-2008:176 ] mtr
  • From: security
• [ MDVSA-2008:175 ] yelp
  • From: security
• [USN-636-1] Postfix vulnerability
  • From: Kees Cook
• Folder Lock <= 5.9.5 Local Password Information Disclosure
  • From: glafkos
• ToorCon 10 Call For Papers
  • From: David Hulton
• [ MDVSA-2008:174 ] kernel
  • From: security
• [ MDVSA-2008:173 ] kdegraphics
  • From: security
• [SECURITY] [DSA 1629-2] New postfix packages fix installability problem on i386
  • From: Thijs Kinkhorst
• SunShop <= 4.1.4 SQL Injection
  • From: GulfTech Security Research
• Vanilla <= 1.1.4 Script Injection/ XSS
  • From: GulfTech Security Research
• [security bulletin] HPSBST02360 SSRT080117 rev.2 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS08-041 to MS08-051
  • From: security-alert
• [SECURITY] [DSA 1629-1] New postfix packages fix privilege escalation
  • From: Thijs Kinkhorst
• [security bulletin] HPSBMA02345 SSRT080039 rev.2 - HP System Management Homepage (SMH) for Linux and Windows, Remote Cross Site Scripting (XSS)
  • From: security-alert
• Ovidentia 6.6.5 XSS (index.php)&#8207;
  • From: mostafa_ragab
• Tool: PorkBind v1.3 Nameserver Security Scanner (New Version)
  • From: Derek Callaway
• [DSECRG-08-036] Multiple Security Vulnerabilities in Freeway eCommerce 1.4.1.171
  • From: Digital Security Research Group [DSecRG]
• NewsHOWLER 1.03 Beta Cookie Handling Via Sql injection
  • From: r3d . w0rm
• Re: ManageEngine Firewall Analyzer arbitrary file disclosure to authorized user
  • From: Eder Wentz
• Nokia 6131 NFC URI/URL Spoofing and DoS Advisory
  • From: Collin R. Mulliner
• PHP Live Helper <= 2.0.1 Multiple Vulnerabilities
  • From: GulfTech Security Research
• [ MDVSA-2008:172 ] amarok
  • From: security
• [ MDVSA-2008:171 ] postfix
  • From: security
• FlexCMS <= 2.5 Cross Site Scripting Vulnerability
  • From: irancrash
• Mambo 4.6.2 Full Version - Multiple Cross Site Scripting - By Khashayar Fereidani
  • From: irancrash
• munky-bliki lfi
  • From: r3d . w0rm
• Re: MicroWorld MailScan - Multiple Vulnerabilities within Admin-Webinterface
  • From: oliver karow
• Cisco Security Advisory: Vulnerability in Cisco WebEx Meeting Manager ActiveX Control
  • From: Cisco Systems Product Security Incident Response Team
• [ GLSA 200808-12 ] Postfix: Local privilege escalation vulnerability
  • From: Raphael Marichez
• rPSA-2008-0255-1 freetype
  • From: rPath Update Announcements
• Security Assessment of the Internet Protocol
  • From: Fernando Gont
• ZDI-08-053: Symantec Veritas Storage Foundation Scheduler Service NULL Session Authentication Bypass Vulnerability
  • From: zdi-disclosures
• SYM08-015_SFW_SecurityUpdateBypass
  • From: Mike Prosser
• Postfix local privilege escalation via hardlinked symlinks
  • From: Wietse Venema
• [ MDVSA-2008:169 ] hplip
  • From: security
• [security bulletin] HPSBOV02357 SSRT080058 rev.1 - HP OpenVMS TCP/IP Services running BIND, Remote DNS Cache Poisoning
  • From: security-alert
• [ MDVSA-2008:168 ] stunnel
  • From: security
• Microsoft Windows Messenger Remote Illegal Access Vulnerability
  • From: cocoruder
• [ MDVSA-2008:170 ] cups
  • From: security
• CORE-2008-0103: Internet Explorer Zone Elevation Restrictions Bypass and Security Zone Restrictions Bypass
  • From: CORE Security Technologies Advisories
• [security bulletin] HPSBTU02358 SSRT080058 rev.1 - HP Tru64 UNIX running BIND, Remote DNS Cache Poisoning
  • From: security-alert
• NULL pointer in Ventrilo 3.0.2
  • From: Luigi Auriemma
• Vim 7.2c.002 Fixes Arbitrary Command Execution when Handling Tar Archives
  • From: Jan Minář
• rPSA-2008-0243-1 idle python
  • From: rPath Update Announcements
• iDefense Security Advisory 08.12.08: Microsoft Windows Color Management Module Heap Buffer Overflow Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 08.12.08: Microsoft Excel FORMAT Record Invalid Array Index Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 08.12.08: Microsoft Excel Chart AxesSet Invalid Array Index Vulnerability
  • From: iDefense Labs
• [TKADV2008-006] CA HIPS KmxFw.sys Kernel Memory Corruption
  • From: Tobias Klein
• iDefense Security Advisory 08.12.08: Microsoft PowerPoint Viewer 2003 Cstring Integer Overflow Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 08.12.08: Microsoft PowerPoint Viewer 2003 Out of Bounds Array Index Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 08.12.08: Microsoft Office WPG Image File Heap Buffer Overflow Vulnerability
  • From: iDefense Labs
• Vim: Netrw: FTP User Name and Password Disclosure
  • From: Jan Minář
• [ MDVSA-2008:166 ] clamav
  • From: security
• ZDI-08-050: Microsoft Internet Explorer XHTML Rendering Memory Corruption Vulnerability
  • From: zdi-disclosures
• [ MDVSA-2008:167 ] kernel
  • From: security
• Re: Vim: Netrw: FTP User Name and Password Disclosure
  • From: Tony Mechelynck
• iDefense Security Advisory 08.12.08: Microsoft Office BMP Input Filter Heap Overflow Vulnerability
  • From: iDefense Labs
• ZDI-08-049: Microsoft Windows Graphics Rendering Engine PICT Heap Corruption
  • From: zdi-disclosures
• ZDI-08-051: Microsoft Internet Explorer Table Layout Memory Corruption Vulnerability
  • From: zdi-disclosures
• ZDI-08-048: Microsoft Excel COUNTRY Record Memory Corruption Vulnerability
  • From: zdi-disclosures
• [security bulletin] HPSBUX02356 SSRT080051 rev.1 - HP-UX Running ftpd, Remote Privileged Access
  • From: security-alert
• Surf Jack - HTTPS will not save you
  • From: lists
• Re: [funsec] Internet attacks against Georgian web sites
  • From: Paul Ferguson
• Re: OpenID/Debian PRNG/DNS Cache poisoning advisory
  • From: Ben Laurie
• Re: [funsec] Internet attacks against Georgian web sites
  • From: Paul Ferguson
• CA Host-Based Intrusion Prevention System SDK kmxfw.sys Multiple Vulnerabilities
  • From: Williams, James K
• Re: OpenID/Debian PRNG/DNS Cache poisoning advisory
  • From: Tim Dierks
• Re: OpenID/Debian PRNG/DNS Cache poisoning advisory
  • From: "Hal Finney"
• rPSA-2008-0253-1 git gitweb
  • From: rPath Update Announcements
• Re: OpenID/Debian PRNG/DNS Cache poisoning advisory
  • From: Leichter, Jerry
• VMSA-2008-0012 Updated VirtualCenter addresses User Account Disclosure Vulnerability
  • From: VMware Security Team
• VMSA-2008-0013 Updated ESX packages for OpenSSL, net-snmp, perl
  • From: VMware Security Team
• Internet attacks against Georgian web sites
  • From: Gadi Evron
• Re: OpenID/Debian PRNG/DNS Cache poisoning advisory
  • From: Forrest J. Cavalier III
• Re: OpenID/Debian PRNG/DNS Cache poisoning advisory
  • From: Florian Weimer
• Re: OpenID/Debian PRNG/DNS Cache poisoning advisory
  • From: Stefan Kanthak
• iDefense Security Advisory 08.04.08: Solaris snoop SMB Decoding Multiple Stack Buffer Overflow Vulnerabilities
  • From: iDefense Labs
• [AJECT] hMailServer 4.4.1 DoS vulnerability
  • From: João Antunes
• iDefense Security Advisory 08.04.08: Solaris snoop SMB Decoding Multiple Format String Vulnerabilities
  • From: iDefense Labs
• Re: TGS CMS Remote Code Execution Exploit
  • From: lcat
• Re: OpenID/Debian PRNG/DNS Cache poisoning advisory
  • From: Ben Laurie
• Re: OpenID/Debian PRNG/DNS Cache poisoning advisory
  • From: Ben Laurie
• RE: OpenID/Debian PRNG/DNS Cache poisoning advisory
  • From: Clausen, Martin (DK - Copenhagen)
• Layered Defense Research Advisory: Alcatel-Lucent OmniSwitch products, Stack Buffer Overflow
  • From: dh
• Re: Team SHATTER Security Advisory: SQL Injection in Oracle Database (DBMS_DEFER_SYS.DELETE_TRAN)
  • From: Team SHATTER
• Apache Tomcat <= 6.0.18 UTF8 Directory Traversal Vulnerability
  • From: emericboit
• rPSA-2008-0247-1 gvim vim vim-minimal
  • From: rPath Update Announcements
• [ GLSA 200808-11 ] UUDeview: Insecure temporary file creation
  • From: Pierre-Yves Rofes
• rPSA-2008-0249-1 openldap openldap-clients openldap-servers
  • From: rPath Update Announcements
• K-Links Directory Blind SQL Injection Exploit
  • From: hadihadi_zedehal_2006
• Re: [DSECRG-08-035] Local File Include Vulnerability in Gallery 1.5.7, 1.6-alpha3
  • From: o_0 . iahumeil
• [SECURITY] [DSA 1627-1] New PowerDNS packages reduce DNS spoofing risk
  • From: Florian Weimer
• Ovidentia Sql Injection
  • From: r3d . w0rm
• [ GLSA 200808-10 ] Adobe Reader: User-assisted execution of arbitrary code
  • From: Robert Buchholz
• Kayako SupportSuite < 3.30.00 Multiple Vulnerabilities
  • From: GulfTech Security Research
• [security bulletin] HPSBUX02351 SSRT080058 rev.4 - HP-UX Running BIND, Remote DNS Cache Poisoning
  • From: security-alert
• key blacklisting & file size (was: OpenID/Debian PRNG/DNS Cache poisoning advisory)
  • From: Solar Designer
• Re: OpenID/Debian PRNG/DNS Cache poisoning advisory
  • From: Nicolas Williams
• Re: OpenID/Debian PRNG/DNS Cache poisoning advisory
  • From: Eric Rescorla
• Re: OpenID/Debian PRNG/DNS Cache poisoning advisory
  • From: Leichter, Jerry
• Re: OpenID/Debian PRNG/DNS Cache poisoning advisory
  • From: Nicolas Williams
• Re: OpenID/Debian PRNG/DNS Cache poisoning advisory
  • From: Paul Hoffman
• Re: [OpenID] OpenID/Debian PRNG/DNS Cache poisoning advisory
  • From: Ben Laurie
• Re: OpenID/Debian PRNG/DNS Cache poisoning advisory
  • From: Nicolas Williams
• Re: OpenID/Debian PRNG/DNS Cache poisoning advisory
  • From: Ben Laurie
• Re: OpenVMS fingerd remote stack overflow
  • From: Tim Newsham
• Re: OpenID/Debian PRNG/DNS Cache poisoning advisory
  • From: Eric Rescorla
• Re: OpenID/Debian PRNG/DNS Cache poisoning advisory
  • From: Perry E. Metzger
• New paper: An Illustrated Guide to the Kaminsky DNS Vulnerability
  • From: Steve Friedl
• Re: OpenID/Debian PRNG/DNS Cache poisoning advisory
  • From: Dan Kaminsky
• Re: OpenID/Debian PRNG/DNS Cache poisoning advisory
  • From: Peter Gutmann
• RE: OpenID/Debian PRNG/DNS Cache poisoning advisory
  • From: Dave Korn
• RE: OpenID/Debian PRNG/DNS Cache poisoning advisory
  • From: Leichter, Jerry
• [ GLSA 200808-09 ] OpenLDAP: Denial of Service vulnerability
  • From: Raphael Marichez
• [DSECRG-08-035] Local File Include Vulnerability in Gallery 1.5.7, 1.6-alpha3
  • From: Digital Security Research Group [DSecRG]
• Re: [OpenID] OpenID/Debian PRNG/DNS Cache poisoning advisory
  • From: Dick Hardt
• [ GLSA 200808-08 ] stunnel: Security bypass
  • From: Raphael Marichez
• Re: OpenID/Debian PRNG/DNS Cache poisoning advisory
  • From: Ben Laurie
• [ GLSA 200808-07 ] ClamAV: Multiple Denials of Service
  • From: Raphael Marichez
• Re: OpenID/Debian PRNG/DNS Cache poisoning advisory
  • From: Eric Rescorla
• RE: OpenID/Debian PRNG/DNS Cache poisoning advisory
  • From: Dave Korn
• Vim: Unfixed Vulnerabilities in Tar Plugin Version 20
  • From: Jan Minář
• Re: [OpenID] OpenID/Debian PRNG/DNS Cache poisoning advisory
  • From: Ben Laurie
• [AJECT] WinGate Email Server (IMAP) vulnerability
  • From: João Antunes
• Re: OpenID/Debian PRNG/DNS Cache poisoning advisory
  • From: Eric Rescorla
• Re: [OpenID] OpenID/Debian PRNG/DNS Cache poisoning advisory
  • From: Gerald Beuchelt
• [AJECT] NoticeWare IMAP Email Server 4.6.2 DoS vulnerability
  • From: João Antunes
• OpenID/Debian PRNG/DNS Cache poisoning advisory
  • From: Ben Laurie
• Re: [funsec] facebook messages worm
  • From: Juha-Matti Laurio
• Re: Re: [SE-2008-01] J2ME Security Vulnerabilities 2008
  • From: 0xjbrown41
• [ MDVSA-2008:164 ] python
  • From: security
• re: [SE-2008-01] J2ME Security Vulnerabilities 2008
  • From: Security Explorations
• [ MDVSA-2008:163 ] python
  • From: security
• [ MDVSA-2008:162 ] qemu
  • From: security
• Re: OpenVMS fingerd remote stack overflow
  • From: mlbugtraq
• [ MDVSA-2008:161 ] rxvt
  • From: security
• Re: [SE-2008-01] J2ME Security Vulnerabilities 2008
  • From: 0xjbrown41
• e107 <= 0.7.11 Arbitrary Variable Overwriting
  • From: GulfTech Security Research
• Re: OpenVMS fingerd remote stack overflow
  • From: Kevin Finisterre (lists)
• Re: OpenVMS fingerd remote stack overflow
  • From: Alexander Sotirov
• [SE-2008-01] J2ME Security Vulnerabilities 2008
  • From: Security Explorations
• Re: [funsec] facebook messages worm
  • From: Gadi Evron
• Whitepaper: DNS zone redelegation
  • From: Bernhard Mueller
• facebook messages worm
  • From: Gadi Evron
• Re: [funsec] facebook messages worm
  • From: Gadi Evron
• Re: [Full-disclosure] [funsec] facebook messages worm
  • From: Juha-Matti Laurio
• Endless loop and resources consumption in Halo 1.0.7.0615
  • From: Luigi Auriemma
• Re: [funsec] facebook messages worm
  • From: Gadi Evron
• OpenVMS fingerd remote stack overflow
  • From: Shaun Colley
• [security bulletin] HPSBUX02355 SSRT080023 rev.1 - HP-UX Using libc, Remote Denial of Service (DoS)
  • From: security-alert
• [security bulletin] HPSBUX02351 SSRT080058 rev.3 - HP-UX Running BIND, Remote DNS Cache Poisoning
  • From: security-alert
• [ GLSA 200808-06 ] libxslt: Execution of arbitrary code
  • From: Tobias Heinlein
• [USN-635-1] xine-lib vulnerabilities
  • From: Jamie Strandboge
• [ GLSA 200808-05 ] ISC DHCP: Denial of Service
  • From: Tobias Heinlein
• Apache HTTP Server mod_proxy_ftp Wildcard Characters Cross-Site Scripting
  • From: marc_bevand
• Google Notebook and Google Bookmarks Cross Site Scripting Vulnerabilities
  • From: alfredo . melloni
• CA Products That Embed Ingres Multiple Vulnerabilities
  • From: Williams, James K
• Interesting things at sec-consult.com, DNS-whitepaper available tomorrow
  • From: Bernhard Mueller
• Re: 8e6 Technologies R3000 Internet Filter Bypass with Host Decoy
  • From: jyoung01
• MyClan Sql Injection
  • From: r3d . w0rm
• PHP-NUKE module Kleinanzeigen SQL injection (lid)
  • From: lovebug
• rPSA-2008-0246-1 gaim
  • From: rPath Update Announcements
• rPSA-2008-0245-1 cups
  • From: rPath Update Announcements
• [ GLSA 200808-04 ] Wireshark: Denial of Service
  • From: Robert Buchholz
• [ GLSA 200808-03 ] Mozilla products: Multiple vulnerabilities
  • From: Robert Buchholz
• [ GLSA 200808-02 ] Net-SNMP: Multiple vulnerabilities
  • From: Robert Buchholz
• [ GLSA 200808-01 ] xine-lib: User-assisted execution of arbitrary code
  • From: Robert Buchholz
• Pluck 4.5.2 Multiple Cross Site Scripting Vulnerabilities
  • From: irancrash
• IGES CMS <=2.0 Multiple Vulnerabilities
  • From: admin
• Plogger <= 3.0 SQL Injection
  • From: GulfTech Security Research
• 8e6 Technologies R3000 Internet Filter Bypass with Host Decoy
  • From: nnposter
• Xampp Linux 1.6.7 Multiple Cross Site Scripting Vulnerabilities
  • From: irancrash
• CORE-2008-0716 - Sun xVM VirtualBox Privilege Escalation Vulnerability
  • From: CORE Security Technologies Advisories
• Team SHATTER Security Advisory: SQL Injection in Oracle Database (DBMS_DEFER_SYS.DELETE_TRAN)
  • From: Team SHATTER
• Team SHATTER Security Advisory: Cross-site scripting in Oracle Enterprise Manager (REFRESHCHOICE Parameter)
  • From: Team SHATTER
• Team SHATTER Security Advisory: SQL Injection in Oracle Application Server (WWEXP_API_ENGINE)
  • From: Team SHATTER
• [USN-626-2] Devhelp, Epiphany, Midbrowser and Yelp update
  • From: Jamie Strandboge
• UNAK-CMS Lfi
  • From: r3d . w0rm
• [SECURITY] [DSA 1627-1] New opensc packages fix smart card vulnerability
  • From: Thijs Kinkhorst
• TGS CMS Remote Code Execution Exploit
  • From: 0in . email
• Keld: PHP-MySQL News Script 0.7.1 Remote SQL injection Vulnerability
  • From: crimson . loyd
• Server termination in America's Army 2.8.3.1
  • From: Luigi Auriemma
• Homes 4 Sale Remote XSS Vulnerabilitiy
  • From: Ghost hacker
• Pligg Auto-Voter Using XSS to Bypass CSRF Protection
  • From: michaelbrooks
• iDefense Security Advisory 08.01.08: Ingres Database for Linux ingvalidpw Untrusted Library Path Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 08.01.08: Ingres Database for Linux libbecompat Stack Based Buffer Overflow Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 08.01.08: Ingres Database for Linux verifydb Insecure File Permissions Modification Vulnerability
  • From: iDefense Labs
• file upload exploit
  • From: win32 . exe
• [ MDVSA-2008:160 ] libxslt
  • From: security
• Re: Windows Vista Power Management & Local Security Policy
  • From: William A. Rowe, Jr.
• Re: how to request a cve id?
  • From: William A. Rowe, Jr.
• n.runs-SA-2008.005 - Apple Inc. - CoreServices Framework’s CarbonCore Framework - Arbitrary Code Execution (remote)
  • From: security@xxxxxxxxx
• iDefense Security Advisory 07.31.08: Apple Mac OS X CoreGraphics PDF Type1 Font Integer Overflow Vulnerability
  • From: iDefense Labs
• [USN-632-1] Python vulnerabilities
  • From: Kees Cook
• [USN-633-1] libxslt vulnerabilities
  • From: Kees Cook
• DNS Multiple Race Exploiting Tool
  • From: AR
• eVision 2.0 Sql Injection/Remote File Disclosure/Remote File Upload/IG
  • From: r3d . w0rm
• [USN-634-1] OpenLDAP vulnerability
  • From: Kees Cook
• [CVE-2008-1232] Apache Tomcat XSS vulnerability
  • From: Mark Thomas
• [SECURITY] [DSA 1626-1] New httrack packages fix arbitrary code execution
  • From: Thijs Kinkhorst
• [SECURITY] [DSA 1625-1] New cupsys packages fix arbitrary code execution
  • From: Thijs Kinkhorst
• libxslt heap overflow
  • From: chris
• [CVE-2008-2370] Apache Tomcat information disclosure vulnerability
  • From: Mark Thomas
• CA ARCserve Backup for Laptops and Desktops Server LGServer Service Vulnerability
  • From: Williams, James K
• [ GLSA 200807-16 ] Python: Multiple vulnerabilities
  • From: Robert Buchholz
• [SECURITY] [DSA 1624-1] New libxslt packages fix arbitrary code execution
  • From: Moritz Muehlenhoff
• [ GLSA 200807-13 ] VLC: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• [ GLSA 200807-14 ] Linux Audit: Buffer overflow
  • From: Pierre-Yves Rofes
• [SECURITY] [DSA 1623-1] New dnsmasq packages fix cache poisoning
  • From: Moritz Muehlenhoff
• [ GLSA 200807-15 ] Pan: User-assisted execution of arbitrary code
  • From: Pierre-Yves Rofes
• iDefense Security Advisory 07.30.08: SAP MaxDB dbmsrv Untrusted Execution Path Vulnerability
  • From: iDefense Labs
• [~] Greetz : Me93fg & Mr.SaFa7
  • From: Ghost hacker
• [SECURITY] [DSA 1622-1] New newsx packages fix arbitrary code execution
  • From: Thijs Kinkhorst
• Secunia Research: Blue Coat K9 Web Protection Response Handling Buffer Overflows
  • From: Secunia Research
• Pligg <= 9.9.0 Multiple Vulnerabilities
  • From: GulfTech Security Research
• [security bulletin] HPSBUX02286 SSRT071466 rev.1 - HP-UX Running System Administration Manager (SAM), Unintended Remote Access
  • From: security-alert
• Secunia Research: Blue Coat K9 Web Protection "Referer" Header Buffer Overflow
  • From: Secunia Research
• [oCERT-2008-009] libxslt heap overflow
  • From: Andrea Barisani
• [ MDVSA-2008:159 ] licq
  • From: security
• Citrix MetaFrame Privilege Escalation
  • From: Wendel Guglielmetti Henrique
• DEV WMS Multiple Vulnerabilities
  • From: irancrash
• [ MDVSA-2008:158 ] silc-toolkit
  • From: security
• Cisco IOS shellcode explanation - additional
  • From: Andy Davis
• Tool: PorkBind Nameserver Security Scanner
  • From: super
• RealNetworks RealPlayer ActiveX Illegal Resource Reference Vulnerability
  • From: cocoruder
• MJGuest 6.8 GT Cross Site Scripting Vulnerability
  • From: irancrash
• NULL pointer in Unreal Tournament 2004 v3369
  • From: Luigi Auriemma
• HIOX Browser Statistics 2.0 Remote File Inclusion Vulnerability
  • From: Ghost hacker
• HIOX Random Ad 1.3 (hioxRandomAd.php hm) RFI Vulnerability
  • From: Ghost hacker
• RE: Remote Cisco IOS FTP exploit
  • From: Paul Oxman (poxman)
• Memory corruption and NULL pointer in Unreal Tournament III 1.2
  • From: Luigi Auriemma
• HIOX Star Rating System 1.0 Remote File Inclusion Vulnerability
  • From: Ghost hacker
• Cisco IOS shellcode explanation
  • From: Andy Davis
• shoutbox Remote Database Dawnload Exploit
  • From: Ghost hacker
• [ MDVSA-2008:157 ] - ffmpeg
  • From: security
• Re: E-Mail header Injection in HiFriend
  • From: Adrian Pastor
• Remote Cisco IOS FTP exploit
  • From: Andy Davis
• [USN-630-1] ffmpeg vulnerability
  • From: Kees Cook
• n.runs-SA-2008.004 - AVG Anti-Virus Divide by Zero - DoS (remote)
  • From: security
• Gregarius <= 0.5.4 SQL Injection
  • From: GulfTech Security Research
• rPSA-2008-0235-1 fetchmail fetchmailconf
  • From: rPath Update Announcements
• [DSECRG-08-034] Local File Include Vulnerability in Minishowcase v09b136
  • From: Digital Security Research Group [DSecRG]
• VMSA-2008-00011 Updated ESX service console packages for Samba and vmnix
  • From: VMware Security team
• plugin Rss Remote File Inclusion Vulnerability
  • From: Ghost hacker
• [USN-631-1] poppler vulnerability
  • From: Kees Cook
• rPSA-2008-0238-1 firefox
  • From: rPath Update Announcements
• [ MDVSA-2008:156 ] - Updated libpng packages fix vulnerability
  • From: security
• rPSA-2008-0237-1 tshark wireshark
  • From: rPath Update Announcements
• PhpJobScheduler 3.1 Remote File Inclusion Vulnerability
  • From: Ghost hacker
• rPSA-2008-0236-1 httpd mod_ssl
  • From: rPath Update Announcements
• [USN-626-1] Firefox and xulrunner vulnerabilities
  • From: Jamie Strandboge
• iDefense Security Advisory 07.28.08: Hewlett-Packard OVIS Probe Builder Arbitrary Process Termination Vulnerability
  • From: iDefense Labs
• Cross Site Scripting (XSS) in Owl <=0.95, CVE-2008-3100
  • From: Fabian Fingerle
• ViArt <= 3.5 SQL Injection
  • From: GulfTech Security Research
• Multiple Cross-Site Scripting Vulnerabilities in Web Wiz Rich Text Editor version 4.02
  • From: supportrup
• Re: how to request a cve id?
  • From: Steven M. Christey
• RE: Windows Vista Power Management & Local Security Policy
  • From: Greg
• JamRoom <= 3.3.8 Authentication Bypass
  • From: GulfTech Security Research
• [security bulletin] HPSBMA02353 SSRT080066 rev.1 - HP OpenView Internet Services Running Probe Builder, Remote Denial of Service (DoS)
  • From: security-alert
• Tool release: [evilgrade] - Using DNS cache poisoning to exploit poor update implementations
  • From: [ISR] - Infobyte Security Research
• [DSECRG-08-033] Local File Include Vulnerability in Pixelpost 1.7.1
  • From: Digital Security Research Group [DSecRG]
• Security Bypass Vulnerabilities AXESSTEL
  • From: Bboyhacks
• [SECURITY] [DSA 1621-1] New icedove packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• [ MDVSA-2008:155-1 ] - Updated Thunderbird packages fix multiple vulnerabilities
  • From: security
• how to request a cve id?
  • From: xpzhang
• [SECURITY] [DSA 1620-1] New python2.5 packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 1619-1] New python-dns packages fix DNS response spoofing
  • From: Devin Carraway
• Re: [Full-disclosure] Vim: Insecure Temporary File Creation During Build: Arbitrary Code Execution
  • From: Jan Minář
• [SECURITY] [DSA 1618-1] New ruby1.9 packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• [ MDVSA-2008:155 ] - Updated Thunderbird packages fix multiple vulnerabilities
  • From: security
• [SECURITY] [DSA 1616-2] New clamav packages fix denial of service
  • From: Devin Carraway
• ZDI-08-047: RealNetworks RealPlayer rmoc3260 ActiveX Control Memory Corruption Vulnerability
  • From: zdi-disclosures
• http://www.zerodayinitiative.com/advisories/ZDI-08-046
  • From: zdi-disclosures
• ZDI-08-045: Apple Safari StyleSheet ownerNode Heap Corruption Vulnerability
  • From: zdi-disclosures
• Re: [bugtraq] Re: [Full-disclosure] CAU-EX-2008-0002: Kaminsky DNS Cache Poisoning
  • From: Tuc at T-B-O-H.NET
• Re: [Full-disclosure] Vim: Insecure Temporary File Creation During Build: Arbitrary Code Execution
  • From: Robert Buchholz
• Re: [Full-disclosure] CAU-EX-2008-0002: Kaminsky DNS Cache Poisoning Flaw Exploit
  • From: Ganbold
• Re: [Full-disclosure] Vim: Insecure Temporary File Creation During Build: Arbitrary Code Execution
  • From: Steven M. Christey
• SECOBJADV-2008-02: Cygwin Installation and Update Process can be Subverted Vulnerability
  • From: advisories
• ezContents CMS Renote File inclusion
  • From: security
• XRMS 1.99.2 (RFI/XSS/IG) Multiple Remote Vulnerabilities
  • From: azzcoder
• Secunia Research: RealPlayer SWF Frame Handling Buffer Overflow
  • From: Secunia Research
• [SECURITY] [DSA 1617-1] New refpolicy packages fix incompatible policy
  • From: Devin Carraway
• Re: [Full-disclosure] Vim: Insecure Temporary File Creation During Build: Arbitrary Code Execution
  • From: Robert Buchholz
• [USN-629-1] Thunderbird vulnerabilities
  • From: Jamie Strandboge
• Re: [Full-disclosure] Vim: Insecure Temporary File Creation During Build: Arbitrary Code Execution
  • From: Jan Minář
• [ MDVSA-2008:154 ] - Updated xemacs packages fix vulnerability
  • From: security
• CAU-EX-2008-0002: Kaminsky DNS Cache Poisoning Flaw Exploit
  • From: I)ruid
• [Full-disclosure] [tool] SDT Cleaner 1.0
  • From: Nahuel C. Riva
• [SECURITY] [DSA 1616-1] new clamav packages fix denial of service
  • From: Devin Carraway
• [ MDVSA-2008:153 ] - Updated emacs packages fix vulnerability
  • From: security
• Re: Wordpress Malicious File Execution Vulnerability
  • From: otto
• [SECURITY] [DSA 1615-1] New xulrunner packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 1614-1] New iceweasel packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• [USN-628-1] PHP vulnerabilities
  • From: Jamie Strandboge
• Vim: Flawed Fix of Arbitrary Code Execution Vulnerability in filetype.vim
  • From: Jan Minář
• [SECURITY] [DSA 1540-3] New lighttpd packages fix regression
  • From: Thijs Kinkhorst
• RE: Windows Vista Power Management & Local Security Policy
  • From: Good Securitypractice
• AST-2008-010: Asterisk IAX 'POKE' resource exhaustion
  • From: Asterisk Security Team
• RE: Windows Vista Power Management & Local Security Policy
  • From: Abe Getchell
• AST-2008-011: Traffic amplification in IAX2 firmware provisioning system
  • From: Asterisk Security Team
• [ MDVSA-2008:152 ] - Updated wireshark packages fix denial of service vulnerability
  • From: security
• RE: Windows Vista Power Management & Local Security Policy
  • From: Jim Harrison
• RE: Windows Vista Power Management & Local Security Policy
  • From: James C. Slora Jr.
• Outpost Security Suite Pro ver. 2009 Multiple vulnerabilities
  • From: jplopezy
• [USN-627-1] Dnsmasq vulnerability
  • From: Jamie Strandboge
• PR08-16: CSRF (Cross-site Request Forgery) on Moodle edit profile page
  • From: ProCheckUp Research
• PR08-15: Several Webroot Disclosures on Moodle
  • From: ProCheckUp Research
• PR08-13: Persistent Cross-site Scripting (XSS) on Moodle via blog entry title
  • From: ProCheckUp Research
• [DSECRG-08-032] Claroline 1.8.10 Multiple XSS Vulnerabilities
  • From: Digital Security Research Group [DSecRG]
• [SECURITY] [DSA 1613-1] new libgd2 packages fix multiple vulnerabilities
  • From: Devin Carraway
• FGA-2008-16: EMC Dantz Retrospect 7 backup Server Authentication Module Weak Password Hash Arithmetic Vulnerability
  • From: zhliu
• [security bulletin] HPSBMA02346 SSRT080097 rev.3 - HP OpenView Select Identity Active Directory Bidirectional LDAP Connector, Remote Unauthorized Access
  • From: security-alert
• [ GLSA 200807-12 ] BitchX: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• Vulnerability: SocialEngine (SocialEngine.net) high risk security flaw
  • From: Tim Loshak
• [ MDVSA-2008:151 ] - Updated libxslt packages fix buffer overflow vulnerability
  • From: security
• NULL pointer in ZDaemon 1.08.07
  • From: Luigi Auriemma
• Re: [ GLSA 200807-10 ] Bacula: Information disclosure
  • From: dan
• [ GLSA 200807-11 ] PeerCast: Buffer overflow
  • From: Pierre-Yves Rofes
• [ GLSA 200807-10 ] Bacula: Information disclosure
  • From: Pierre-Yves Rofes
• E-Mail header Injection in HiFriend
  • From: Peter Wiesen
• [SECURITY] [DSA 1612-1] New ruby1.8 packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• [White Paper] Abusing HTML 5 Structured Client-side Storage
  • From: Alberto Trivero
• Re: SchoolCenter URL Handling Cross Site Scripting Vulnerability
  • From: Tester
• Flip V3.0 final
  • From: Cru3l . b0y
• Re: Pwnie Awards 2008
  • From: David Litchfield
• [DSECRG-08-031] Local File Include Vulnerability in Interact 2.4.1
  • From: Digital Security Research Group [DSecRG]
• FGA-2008-16: EMC Dantz Retrospect 7 backup Client 7.5.116 NULL-Pointer reference Denial of Service Vulnerability
  • From: zhliu
• Vim: Improper Implementation of shellescape()/Arbitrary Code Execution
  • From: Jan Minář
• RE: Windows Vista Power Management & Local Security Policy
  • From: Abe Getchell
• RE: Windows Vista Power Management & Local Security Policy
  • From: Jim Harrison
• MyBlog <=0.9.8 Multiple Vulnerabilities
  • From: admin
• RE: Windows Vista Power Management & Local Security Policy
  • From: Abe Getchell
• Easydynamicpages 30tr Multipe Vulerabilities ( Xss / Sql Injection Exploit / File Disclosure Exploit )
  • From: irancrash
• EZWebAlbum (dlfilename) Remote File Disclosure Vulnerability
  • From: Ghost hacker
• Maran PHP Blog Xss By Khashayar Fereidani
  • From: irancrash
• Vulnerability CVE-2008-3671 - MyReview's vulnerability in the access control system
  • From: Julien Thomas
• FGA-2008-16: EMC Dantz Retrospect 7 backup Client 7.5.116 Remote Memory corruption Vulnerability
  • From: zhliu
• Easybookmarker 40tr Xss Vulnerability By Khashayar Fereidani
  • From: irancrash
• EMC Dantz Retrospect 7 backup Client PlainText Password Hash Disclosure Vulnerability
  • From: zhliu
• [ MDVSA-2008:150 ] - Updated mysql packages fix vulnerabilities
  • From: security
• Easyecards 310a Multipe Vulerabilities ( Xss / Sql Injection Exploit / File Disclosure Exploit ) By Khashayar Fereidani
  • From: irancrash
• RE: Windows Vista Power Management & Local Security Policy
  • From: Thor (Hammer of God)
• EasyPublish 3.0tr Multiple Vulnerabilities ( Xss / Sql Injection Exploit / File Disclosure Exploit )
  • From: irancrash
• Re: Oracle Database Local Untrusted Library Path Vulnerability
  • From: jmpascual
• [ MDVSA-2008:149 ] - Updated mysql packages fix vulnerabilities
  • From: security
• RE: Windows Vista Power Management & Local Security Policy
  • From: Abe Getchell
• RE: Windows Vista Power Management & Local Security Policy
  • From: Jim Harrison
• RE: Lateral SQL Injection Revisited - No Special Privs Required
  • From: David Litchfield
• Oracle Database Local Untrusted Library Path Vulnerability
  • From: Joxean Koret
• rPSA-2008-0231-1 bind bind-utils
  • From: rPath Update Announcements
• [security bulletin] HPSBUX02351 SSRT080058 rev.2 - HP-UX Running BIND, Remote DNS Cache Poisoning
  • From: security-alert
• Re: Lateral SQL Injection Revisited - No Special Privs Required
  • From: a . polyakov
• Windows Vista Power Management & Local Security Policy
  • From: Abe Getchell
• [DSECRG-08-030] Claroline 1.8.9 Multiple Security Vulnerabilities
  • From: Digital Security Research Group [DSecRG]
• Re: Vim: Insecure Temporary File Creation During Build: Arbitrary Code Execution
  • From: Nikolai Weibull
• [ISecAuditors Security Advisories] SmbClientParser Perl module allows remote command execution
  • From: ISecAuditors Security Advisories
• Lateral SQL Injection Revisited - No Special Privs Required
  • From: David Litchfield
• [ MDVSA-2008:148 ] - Updated Firefox packages fix vulnerabilities
  • From: security
• Def_Blog 1.0.3 Multiple Remote SQL Injection Vulnerabilities
  • From: tan_prathan
• Vim: Insecure Temporary File Creation During Build: Arbitrary Code Execution
  • From: Jan Minář
• Security Vacation Guide
  • From: Pete Herzog
• ZDI-08-042: Sun Java Web Start Sandbox Bypass Vulnerability
  • From: zdi-disclosures
• ZDI-08-043: Sun Java Web Start vm args Stack Buffer Overflow
  • From: zdi-disclosures
• ZDI-08-044: Mozilla Firefox CSSValue Array Memory Corruption Vulnerability
  • From: zdi-disclosures
• communitycms-0.1 Remote File Includion
  • From: n3tr00t3r
• [USN-623-1] Firefox vulnerabilities
  • From: Jamie Strandboge
• Oracle Portal XSS fixed by CPU July 2008
  • From: Andrea Purificato
• HPSBMA02346 SSRT080097 rev.2 - HP Select Identity Active Directory Bidirectional LDAP Connector, Remote Unauthorized Access
  • From: security-alert
• [DSECRG-08-029] Local File Include in Dokeos E-Learning System 1.8.5
  • From: Digital Security Research Group
• ekoparty security trainings (2008) announcement
  • From: ekoparty
• [security bulletin] HPSBUX02351 SSRT080058 rev.1 - HP-UX Running BIND, Remote DNS Cache Poisoning
  • From: security-alert
• [SECURITY] [DSA 1611-1] New afuse packages fix privilege escalation
  • From: Thijs Kinkhorst
• IETF Internet-Draft on TCP Port randomization
  • From: Fernando Gont
• rPSA-2008-0035-1 httpd mod_ssl
  • From: rPath Update Announcements
• openPro 1.3.1 (LIBPATH) Remote RFI Vulnerability
  • From: Ghost hacker
• [SECURITY] [DSA 1544-2] New pdns-recursor packages fix predictable randomness
  • From: Florian Weimer
• n.runs-SA-2008.002 - F-Prot Out-of-Bound Memory Access DoS (remote)
  • From: security
• [DSECRG-08-028] File read in Velocity web-server
  • From: Alexandr Polyakov
• [ECHO_ADV_100$2008] Comdev Web Blogger <= 4.1.3 (arcmonth) Sql Injection Vulnerability
  • From: adv
• [security bulletin] HPSBMA02133 SSRT061201 rev.9 - HP Oracle for OpenView (OfO) Critical Patch Update
  • From: security-alert
• Arbitrary code execution in Netrw version 127, Vim 7.2b
  • From: Jan Minář
• Re: Re: Microsoft DNS patch KB951748 incompatible with Zonealarm
  • From: dwg5901
• Oracle Application Server PLSQL injection flaw
  • From: David Litchfield
• [security bulletin] HPSBMA02346 SSRT080097 rev.1 - HP Select Identity Active Directory Bidirectional LDAP Connector, Remote Unauthorized Access
  • From: security-alert
• [ MDVSA-2008:146 ] - Updated poppler packages fix arbitrary code execution vulnerability
  • From: security
• iDefense Security Advisory 07.15.08: Oracle Database Local Untrusted Library Path Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 07.15.08: Oracle Database DBMS_AQELM Package Buffer Overflow Vulnerability
  • From: iDefense Labs
• [ MDVSA-2008:147 ] - Updated pcre packages fix vulnerability
  • From: security
• iDefense Security Advisory 07.15.08: Oracle Internet Directory Pre-Authentication LDAP DoS Vulnerability
  • From: iDefense Labs
• [ GLSA 200807-09 ] Mercurial: Directory traversal
  • From: Tobias Heinlein
• [SECURITY] [DSA 1569-3] New cacti packages fix regression
  • From: Thijs Kinkhorst
• [SECURITY] [DSA 1610-1] New gaim packages fix execution of arbitrary code
  • From: Steve Kemp
• [SECURITY] [DSA 1609-1] New lighttpd packages fix multiple DOS issues
  • From: Steve Kemp
• [ MDVSA-2008:145 ] - Updated bluez/bluez-utils packages fix SDP packet parsing vulnerability
  • From: security
• HPSBST02350 SSRT080102 rev.1 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS08-037 to MS08-040
  • From: security-alert
• [USN-624-1] PCRE vulnerability
  • From: Kees Cook
• CFP now open for ClubHack2008 - India
  • From: ClubHack
• Yuhhu Pubs Black Cat Remote SQL Injection Exploit
  • From: RM-x
• Re: PR07-37: XSS on Apache HTTP Server 413 error pages via malformed HTTP method
  • From: ProCheckUp Research
• DeepSec 2008 - Last call for submissions
  • From: DeepSec Conference Vienna
• FreeBSD Security Advisory FreeBSD-SA-08:06.bind
  • From: FreeBSD Security Advisories
• Pluck Local File inclusion
  • From: admin
• Simple DNS Plus 5.0/4.1 < remote Denial of Service exploit
  • From: Rotem-BugSec
• [SECURITY] [DSA 1608-1] New mysql-dfsg-5.0 packages fix authorization bypass
  • From: Devin Carraway
• Re: Re: Microsoft DNS patch KB951748 incompatible with Zonealarm
  • From: nelsrob
• Re: New Paper: More than 600 million users surf at high risk
  • From: Rob Thompson
• Re: Microsoft DNS patch KB951748 incompatible with Zonealarm
  • From: Steve Shockley
• Re: Microsoft DNS patch KB951748 incompatible with Zonealarm
  • From: jgable
• [ MDVSA-2008:144 ] - Updated openldap packages fix slapd DoS vulnerability
  • From: security
• [ MDVSA-2008:138-1 ] - Updated OpenOffice.org packages fix vulnerability
  • From: security
• RE: New Paper: More than 600 million users surf at high risk
  • From: Jeff Martin
• [NETRAGARD SECURITY ADVISORY][Apple Core Image Fun House <= 2.0 OS X -- Arbitrary Code Execution][NETRAGARD-20080711]
  • From: Netragard Security Advisories
• [ GLSA 200807-08 ] BIND: Cache poisoning
  • From: Matthias Geerdsen
• [SECURITY] [DSA 1607-1] New iceweasel packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• ZDI-08-041: Novell eDirectory dhost Integer Overflow Code Execution Vulnerability
  • From: zdi-disclosures
• [ MDVSA-2008:143 ] - Updated pidgin packages fix MSN protocol handler vulnerability
  • From: security
• Re: PR07-37: XSS on Apache HTTP Server 413 error pages via malformed HTTP method
  • From: mcalautt
• iDefense Security Advisory 07.09.08: Novell eDirectory LDAP Search Request Heap Corruption Vulnerability
  • From: iDefense Labs
• [ MDVSA-2008:140 ] - Updated ruby packages fix vulnerabilities
  • From: security
• [ MDVSA-2008:141 ] - Updated ruby packages fix vulnerabilities
  • From: security
• [ GLSA 200807-06 ] Apache: Denial of Service
  • From: Robert Buchholz
• London DEFCON July meet - DC4420 - Thursday 10th July (today!)
  • From: alien
• rPSA-2008-0223-1 poppler
  • From: rPath Update Announcements
• phpuserbase 1.3 (menu) Remote File Inclusion Vulnerability
  • From: Ghost hacker
• [ GLSA 200807-07 ] NX: User-assisted execution of arbitrary code
  • From: Robert Buchholz
• gapicms v9.0.2 (dirDepth) Remote File Inclusion Vulnerability
  • From: Ghost hacker
• Re: Microsoft DNS patch KB951748 incompatible with Zonealarm FIXED
  • From: davee1
• Nessus plugins for recent MS Bulletins
  • From: Chandrashekhar B
• [ MDVSA-2008:142 ] - Updated ruby packages fix vulnerabilities
  • From: security
• Context IS Advisory - MS08-39 OWA XSS
  • From: Context IS - Disclosure
• [ MDVSA-2008:139 ] - Updated BIND packages fix critical DNS vulnerability
  • From: security
• [ GLSA 200807-05 ] OpenOffice.org: User-assisted execution of arbitrary code
  • From: Pierre-Yves Rofes
• Microsoft DNS patch KB951748 incompatible with Zonealarm
  • From: Pages-Web.com - Services internet
• rPSA-2008-0218-1 ruby
  • From: rPath Update Announcements
• [SECURITY] [DSA 1606-1] poppler packages fix execution of arbitrary code
  • From: Steve Kemp
• Insomnia : ISVA-080709.1 - Microsoft SQL Server - Corrupt Backup File Heap Overflow
  • From: Brett Moore
• Local information disclosure in WeFi Client v3.3.3.0
  • From: XiaShing
• Re: Unauthorized reading confirmation from Outlook
  • From: Alexander Klink
• [ MDVSA-2008:138 ] - Updated OpenOffice.org packages fix vulnerability
  • From: security
• [ MDVSA-2008:137 ] - Updated OpenOffice.org fix vulnerability, and a few other bugs
  • From: security
• Re: [Full-disclosure] iDefense Security Advisory 07.08.08: Microsoft SQL Server Restore Integer Underflow Vulnerability
  • From: Cesar
• rPSA-2008-0217-1 vsftpd
  • From: rPath Update Announcements
• rPSA-2008-0216-1 firefox
  • From: rPath Update Announcements
• Minneapolis DC612 Meeting July 10th, 2008@6pm
  • From: David Bryan
• [ MDVSA-2008:136 ] - Updated Firefox packages fix vulnerabilities
  • From: security
• [USN-622-1] Bind vulnerability
  • From: Kees Cook
• iDefense Security Advisory 07.08.08: Microsoft SQL Server Restore Integer Underflow Vulnerability
  • From: iDefense Labs
• Cisco Security Advisory: Multiple Cisco Products Vulnerable to DNS Cache Poisoning Attacks
  • From: Cisco Systems Product Security Incident Response Team
• [ GLSA 200807-04 ] Poppler: User-assisted execution of arbitrary code
  • From: Matthias Geerdsen
• [SECURITY] [DSA 1605-1] DNS vulnerability impact on the libc stub resolver
  • From: Florian Weimer
• XSS in admin logs - vBulletin 3.7.2 and lower, vBulletin 3.6.10 PL2 and lower
  • From: Jessica Hope
• [SECURITY] [DSA 1604-1] BIND 8 deprecation notice
  • From: Florian Weimer
• [SECURITY] [DSA 1603-1] New bind9 packages fix cache poisoning
  • From: Florian Weimer
• [security bulletin] HPSBMA02349 SSRT080043 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Unauthorized Access to Data
  • From: security-alert
• [security bulletin] HPSBMA02348 SSRT080033 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code, Denial of Service (DoS)
  • From: security-alert
• Re: Local vulnerability in WeFi Client v3.2.1.4.1(Update)
  • From: galia
• Call for Papers for the MEITSEC 2008 is now open.
  • From: Meitsec2008 Conference
• Pwnie Awards 2008
  • From: Alexander Sotirov
• PHP-NUKE SQL Module's Name 4ndvddb
  • From: lovebug
• [ GLSA 200807-03 ] PCRE: Buffer overflow
  • From: Robert Buchholz
• Re: Multiple vulnerabilities in TietoEnator's Procapita school administration system, at least version
  • From: Juha-Matti Laurio
• [oCERT-2008-007] libpoppler uninitialized pointer
  • From: Andrea Barisani
• [SECURITY] [DSA 1602-1] New pcre3 packages fix arbitrary code execution
  • From: Florian Weimer
• [ MDVSA-2008:135 ] - Updated gnome-screensaver packages fix authentication vulnerability
  • From: security
• [ MDVSA-2008:134 ] - Updated squid packages fix DoS vulnerability
  • From: security
• [ MDVSA-2008:133 ] - Updated sympa packages fix DoS vulnerability
  • From: security
• [ MDVSA-2008:132 ] - Updated gnome-screensaver packages fix authentication vulnerability
  • From: security
• [ MDVSA-2008:131 ] - Updated phpMyAdmin packages fix multiple vulnerabilities
  • From: security
• Novell GroupWise Messenger Client (GWIM) Remote Stack Overflow
  • From: [ISR] - Infobyte Security Research
• [DSECRG-08-027] Multiple RFI-LFI in 1024 CMS 1.4.3, 1.4.4 RFC
  • From: Digital Security Research Group [DSecRG]
• F5 FirePass 1200 SNMP daemon DoS
  • From: nnposter
• [ MDVSA-2008:129 ] - Updated PHP packages fix multiple vulnerabilities
  • From: security
• [ MDVSA-2008:130 ] - Updated PHP packages fix multiple vulnerabilities
  • From: security
• Unauthorized reading confirmation from Outlook
  • From: Augusto Paes de Barros
• Local vulnerability in WeFi Client v3.2.1.4.1(Update)
  • From: XiaShing
• [SECURITY] [DSA 1601-1] New wordpress packages fix several vulnerabilities
  • From: Thijs Kinkhorst
• [ MDVSA-2008:128 ] - Updated PHP packages fix multiple vulnerabilities
  • From: security
• [ MDVSA-2008:127 ] - Updated PHP packages fix multiple vulnerabilities
  • From: security
• [ MDVSA-2008:126 ] - Updated PHP packages fix multiple vulnerabilities
  • From: security
• [ MDVSA-2008:125 ] - Updated PHP packages fix multiple vulnerabilities
  • From: security
• rPSA-2008-0212-1 tshark wireshark
  • From: rPath Update Announcements
• rPSA-2008-0211-1 mercurial mercurial-hgk
  • From: rPath Update Announcements
• Re: New Paper: More than 600 million users surf at high risk
  • From: Rob Thompson
• Re: New Paper: More than 600 million users surf at high risk
  • From: Rainer Duffner
• Release of Pass-The-Hash Toolkit v1.4
  • From: Hernan Ochoa
• Secunia Research: VLC Media Player WAV Processing Integer Overflow
  • From: Secunia Research
• ISEC 2008(Information Security Conference) Guide
  • From: isec
• RE: New Paper: More than 600 million users surf at high risk
  • From: Nick FitzGerald
• [tool] ratproxy - passive web application security assessment tool
  • From: Michal Zalewski
• [USN-619-1] Firefox vulnerabilities
  • From: Jamie Strandboge
• RE: New Paper: More than 600 million users surf at high risk
  • From: Paul Schmehl
• [SECURITY] [DSA 1560-1] New sympa packages fix denial of service
  • From: Steve Kemp
• Re: Collection of Vulnerabilities in Fully Patched Vim 7.1
  • From: Jan Minář
• Deepsec Talks 2007 are online - registration for 2008 is open
  • From: DeepSec 2008
• RE: New Paper: More than 600 million users surf at high risk
  • From: Larry Seltzer
• RE: New Paper: More than 600 million users surf at high risk
  • From: Larry Seltzer
• Vuln name: Ruby rb_ary_fill() DOS
  • From: snagg
• New Paper: More than 600 million users surf at high risk
  • From: Stefan Frei
• [ GLSA 200807-02 ] Motion: Execution of arbitrary code
  • From: Tobias Heinlein
• [security bulletin] HPSBMA02345 SSRT080039 rev.1 - HP System Management Homepage (SMH) for Linux and Windows, Remote Cross Site Scripting (XSS)
  • From: security-alert
• [ GLSA 200807-01 ] Python: Multiple integer overflows
  • From: Tobias Heinlein
• [SCANIT-2008-001] QNX phgrafx Privilege Escalation Vulnerability
  • From: Scanit Labs
• CFP 25C3 - The 25th Chaos Communication Congress 2008
  • From: fukami
• [SCANIT-2008-003] Wordtrans-web Remote Command Execution Vulnerability
  • From: Scanit Labs
• [SCANIT-2008-002] Wordtrans-web Remote Command Execution Vulnerability
  • From: Scanit Labs
• [USN-617-2] Samba regression
  • From: Jamie Strandboge
• Endless loop in Soldner 33724
  • From: Luigi Auriemma
• Re: Rhythmbox Vulnerability
  • From: wargame89
• RSS-aggregator Multiple vulnerabilities
  • From: Sylvain
• [security bulletin] HPSBMA02338 SSRT080024, SSRT080041 rev.2 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code, Denial of Service (DoS)
  • From: security-alert
• Re: Remote SQL Injection
  • From: packet
• Security and Hacking Papers - Updated!
  • From: ork
• Endless loop in Halo 1.07
  • From: Luigi Auriemma
• Remote SQL Injection
  • From: saidmoftakhar
• Multiple vulnerabilities in S.T.A.L.K.E.R. 1.0006
  • From: Luigi Auriemma
• Re: Double Denial of Service in Call of Duty 4 1.6
  • From: Luigi Auriemma
• [Tool] PktAnon packet trace anonymization tool released
  • From: Christoph Mayer
• [security bulletin] HPSBUX02341 SSRT080075 rev.1 - HP-UX running HP CIFS Server (Samba), Remote Execution of Arbitrary Code
  • From: security-alert
• BA-Con 2008 CFP - Buenos Aires, Sept. 30 / Oct. 1 (closes July 11 2008)
  • From: Dragos Ruiu
• [security bulletin] HPSBUX02342 SSRT080063 rev.2 - HP-UX Running Apache with PHP, Remote Execution of Arbitrary Code
  • From: security-alert
• rPSA-2008-0207-1 kernel
  • From: rPath Update Announcements
• New Release of 'Unhide' (20080519)
  • From: yago jesus
• [ MDVSA-2008:124 ] - Updated xine-lib packages fix vulnerability in Speex decoder
  • From: security
• [USN-621-1] Ruby vulnerabilities
  • From: Jamie Strandboge
• WellyBlog Open Source Blog Portal Cross Site Scripting Vulnerabilitiy
  • From: the_3dit0r
• [SECURITY] [DSA 1599-1] New dbus packages fix privilege escalation
  • From: Moritz Muehlenhoff
• rPSA-2008-0206-1 ruby
  • From: rPath Update Announcements
• [USN-620-1] OpenSSL vulnerabilities
  • From: Jamie Strandboge
• Evolution Vulnerability
  • From: jplopezy
• Pidgin 2.4.1 Vulnerability
  • From: jplopezy
• The Rat CMS (SQL/XSS) Multiple Remote Vulnerabilities
  • From: tan_prathan
• Rhythmbox Vulnerability
  • From: jplopezy
• Multiple vulnerabilities in TietoEnator's Procapita school administration system, at least version "842 Procapita 840SP1"
  • From: pelzi
• Re: IdeBox (include) Remote File Inclusion Vulnerability
  • From: Vladimir '3APA3A' Dubrovin
• [ MDVSA-2008:123 ] - Updated imlib2 packages fix vulnerabilities
  • From: security
• [ECHO_ADV_99$2008] Relative Real Estate Systems <= 3.0 (listing_id) Sql Injection Vulnerability
  • From: adv
• Cisco Security Advisory: Cisco Unified Communications Manager Denial of Service and Authentication Bypass Vulnerabilities
  • From: Cisco Systems Product Security Incident Response Team
• mcGuestbook 1.2 (lang) Remote File Inclusion Vulnerability
  • From: Ghost hacker
• ERRATA - n.runs-SA-2008.001 - Jscape Secure FTP Applet
  • From: security
• IdeBox (include) Remote File Inclusion Vulnerability
  • From: Ghost hacker
• [ GLSA 200806-11 ] IBM JDK/JRE: Multiple vulnerabilities
  • From: Tobias Heinlein
• [BMSA 2008-07] Format string vulnerability in 5th street
  • From: Nam Nguyen
• RSS-aggregator (display) Remote File Inclusion Vulnerability
  • From: Ghost hacker
• [ MDVSA-2008:122 ] - Updated clamav packages fix vulnerability
  • From: security
• fetchmail REVISED security announcement fetchmail-SA-2008-01 (CVE-2008-2711)
  • From: ma+bt
• [ GLSA 200806-10 ] FreeType: User-assisted execution of arbitrary code
  • From: Robert Buchholz
• [ GLSA 200806-09 ] libvorbis: Multiple vulnerabilities
  • From: Robert Buchholz
• [ GLSA 200806-08 ] OpenSSL: Denial of Service
  • From: Robert Buchholz
• NULL pointer in World in Conflict 1.008
  • From: Luigi Auriemma
• [ MDVSA-2008:121 ] - Updated freetype2 packages fix vulnerabilities
  • From: security
• Re: Summary of AS/400 Vulnerability Information
  • From: Jon Kibler
• Double Denial of Service in Call of Duty 4 1.6
  • From: Luigi Auriemma