Bugtraq

• Thread Index

• Firefox 3.0 security bug: Extensions can STILL hide themselves
  • From: azurIt
• Trust Testing and Metrics
  • From: Pete Herzog
• n.runs-SA-2008.001 - Jscape Secure FTP Applet
  • From: security
• Benja CMS 0.1 (Upload/XSS) Multiple Remote Vulnerabilities
  • From: tan_prathan
• [ MDVSA-2008:120 ] - Updated nasm packages fix vulnerability
  • From: security
• rPSA-2008-0201-1 xorg-x11 xorg-x11-fonts xorg-x11-tools xorg-x11-xfs
  • From: rPath Update Announcements
• rPSA-2008-0200-1 xorg-server
  • From: rPath Update Announcements
• [ MDVSA-2008:119 ] - Updated exiv2 packages fix vulnerability
  • From: security
• [ MDVSA-2008:118 ] - Updated net-snmp/ucd-snmp packages fix vulnerabilities
  • From: security
• Diigo Toolbar - Global XSS and Information Leakage in SSL URLs
  • From: Ferruh Mavituna
• BackTrack 3 Final has been released
  • From: Max Moser
• [SECURITY] [DSA 1598-1] New libtk-img packages fix arbitrary code execution
  • From: Thijs Kinkhorst
• Secunia Research: XnView, NConvert, and GFL SDK Sun TAAC Buffer Overflow
  • From: Secunia Research
• [ MDVSA-2008:117 ] - Updated fetchmail packages fix DoS vulnerability
  • From: security
• Re: RFI ====> vBulletin v3.6.5
  • From: hh-ua
• An Apology.
  • From: cwrigh20
• [ GLSA 200806-07 ] X.Org X server: Multiple vulnerabilities
  • From: Matthias Geerdsen
• RE: A more detailed description of the Jura F90 vulnerability.
  • From: Craig Wright
• RE: A more detailed description of the Jura F90 vulnerability.
  • From: Thor (Hammer of God)
• CSW Security Advisory 0002: Oral B SmartMonitor Information Disclosure Vulnerability and DoS
  • From: craigswright
• vBulletin 3.7.1 PL1 and lower, vBulletin 3.6.10 PL1: XSS in modcp index
  • From: Jessica Hope
• Academic Web Tools CMS <= 1.4.2.8 Multiple Vulnerabilities
  • From: Admin
• eLineStudio Site Composer (ESC) <=2.6 Multiple Vulnerabilities
  • From: Admin
• [USN-612-11] openssl-blacklist update
  • From: Jamie Strandboge
• RE: A more detailed description of the Jura F90 vulnerability.
  • From: Thor (Hammer of God)
• Cisco Security Advisory: Cisco Intrusion Prevention System Jumbo Frame Denial of Service
  • From: Cisco Systems Product Security Incident Response Team
• A more detailed description of the Jura F90 vulnerability.
  • From: Craig Wright
• CA ARCserve Backup Discovery Service Denial of Service Vulnerability
  • From: Williams, James K
• Secunia Research: TorrentTrader Multiple SQL Injection Vulnerabilities
  • From: Secunia Research
• Announcement && CFP: ISOI 5, Tallinn Estonia
  • From: Gadi Evron
• [USN-617-1] Samba vulnerabilities
  • From: Jamie Strandboge
• [security bulletin] HPSBST02344 SSRT080087 rev.1 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS08-030 to MS08-036
  • From: security-alert
• S21SEC-044-en:OpenDocMan Cross Site Scripting (XSS)
  • From: S21sec labs
• [ GLSA 200806-06 ] Evolution: User-assisted execution of arbitrary code
  • From: Pierre-Yves Rofes
• iPhoneDbg Toolkit
  • From: Nicolas A. Economou
• fetchmail security announcement fetchmail-SA-2007-02 (CVE-2007-4565)
  • From: ma+bt
• [ GLSA 200806-05 ] cbrPager: User-assisted execution of arbitrary code
  • From: Pierre-Yves Rofes
• fetchmail security announcement fetchmail-SA-2008-01 (CVE-2008-2711)
  • From: ma+bt
• Server freezed in Skulltag 0.97d2-RC2
  • From: Luigi Auriemma
• Hacking Coffee Makers.
  • From: Craig Wright
• NULL pointer in the HTTP/XML-RPC service of Crysis 1.21
  • From: Luigi Auriemma
• [ MDVSA-2008:115 ] - Updated x11-server packages fix several vulnerabilities
  • From: security
• [ MDVSA-2008:116 ] - Updated x11-server packages fix several vulnerabilities
  • From: security
• [DSECRG-08-026] LFI in Open Azimyt CMS 0.22
  • From: Digital Security Research Group
• VistaReseller Panel BETA Xss Vulnerability
  • From: irancrash
• Returnil Virtual System 2008 - Password Disclosure Issue
  • From: mikuvoli
• [ECHO_ADV_97$2008] Pre News Manager <= 1.0 (index.php id) Sql Injection Vulnerability
  • From: erdc
• PHP JOBWEBSITE PRO (JobSearch3.php) SQL Injection Vulnerability
  • From: sys-project
• [ECHO_ADV_98$2008] Pre Ads Portal <= 2.0 Sql Injection Vulnerability
  • From: erdc
• Denial of Service in S.T.A.L.K.E.R. 1.0006
  • From: Luigi Auriemma
• DUC NO-IP Local Password Information Disclosure Vulnerability
  • From: glafkos
• E-SMART CART (productsofcat.asp) Remote SQL Injection Vulnerability
  • From: sys-project
• Muitiple XSS - Glassfish Web Interface (Sun Java System Application Server 9.1_01 (build b09d-fcs) )
  • From: Eduardo Jorge
• Re: AS/400 Vulnerabilities
  • From: Marco Ivaldi
• [ GLSA 200806-04 ] rdesktop: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• GSC Privilege Escalation Exploit
  • From: Moose
• Collection of Vulnerabilities in Fully Patched Vim 7.1
  • From: Jan Minář
• Re: Collection of Vulnerabilities in Fully Patched Vim 7.1
  • From: Bram Moolenaar
• Re: AS/400 Vulnerabilities
  • From: security curmudgeon
• [ MDVSA-2008:113 ] - Updated kernel packages fix security issue
  • From: security
• [ MDVSA-2008:114 ] - Updated util-linux-ng packages fix log injection issue
  • From: security
• Technical Details of Security Issues Regarding Safari for Windows
  • From: LIUDIEYU dot COM
• RE: Securify bulletin: Microsoft Active Directory Denial-of-service
  • From: Michael Wojcik
• RE: AS/400 Vulnerabilities
  • From: Michael Wojcik
• [USN-612-9] openssl-blacklist update
  • From: Jamie Strandboge
• Securify bulletin: Microsoft Active Directory Denial-of-service
  • From: Securify Bulletins
• [USN-612-10] OpenVPN regression
  • From: Jamie Strandboge
• Exploit for vBulletin "obscure" XSS (3.7.1 & 3.6.10)
  • From: Jessica Hope
• AS/400 Vulnerabilities
  • From: Jon Kibler
• [USN-616-1] X.org vulnerabilities
  • From: Kees Cook
• [SECURITY] [DSA 1597-1] New mt-daapd packages fix several vulnerabilities
  • From: Devin Carraway
• [SECURITY] [DSA 1596-1] New typo3 packages fix several vulnerabilities
  • From: Thijs Kinkhorst
• [ MDVSA-2008:112 ] - Updated kernel packages fix security issues
  • From: security
• [SECURITY] [DSA 1595-1] New xorg-server packages fix several vulnerabilities
  • From: Thijs Kinkhorst
• Pooya Site Builder (PSB) SQL Injection Vulnerabilities
  • From: Admin
• DEFCON Switzerland looking for DEFCON visitors
  • From: DEF CON Switzerland
• SNMPv3 Authentication Bypass - CVE-2008-0960
  • From: inode
• ASPPortal Free Version (Topic_Id) Remote SQL Injection Vulnerability
  • From: sys-project
• rPSA-2008-0189-1 kernel xen
  • From: rPath Update Announcements
• iDefense Security Advisory 06.11.08: Multiple Vendor X Server MIT-SHM Extension Information Disclosure Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 06.11.08: Multiple Vendor X Server Record and Security Extensions Multiple Memory Corruption Vulnerabilities
  • From: iDefense Labs
• Xigla Multiple Products - Multiple Vulnerabilities
  • From: Admin
• iDefense Security Advisory 06.11.08: Multiple Vendor X Server Render Extension Gradient Creation Integer Overflow Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 06.11.08: Multiple Vendor X Server Render Extension ProcRenderCreateCursor() Integer Overflow Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 06.11.08: Multiple Vendor X Server Render Extension AllocateGlyph() Integer Overflow Vulnerability
  • From: iDefense Labs
• [SECURITY] [DSA 1594-1] New imlib2 packages fix arbitrary code execution
  • From: Moritz Muehlenhoff
• [security bulletin] HPSBMA02340 SSRT080024, SSRT080041 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code, Denial of Service (DoS)
  • From: security-alert
• phpRaider <= v1.0.6,7 Maybe Other Versions Remote File include Vulnerable
  • From: none
• Flat Calendar v1.1 Remote Permission Bypass Vulnerability
  • From: none
• CORE-2008-0125: CitectSCADA ODBC service vulnerability
  • From: CORE Security Technologies Advisories
• Secunia Research: uTorrent / BitTorrent Web UI HTTP "Range" Header DoS
  • From: Secunia Research
• PHPEasyData 1.5.4 Multiple Vulnerabilities
  • From: Sylvain
• TYPO3 Security Bulletin TYPO3-20080611-1: Multiple vulnerabilities in TYPO3 Core
  • From: lars
• [security bulletin] HPSBUX02342 SSRT080063 rev.1 - HP-UX Running Apache or Tomcat with PHP, Remote Execution of Arbitrary Code
  • From: security-alert
• ZDI-08-040: Microsoft DirectX SAMI File Format Name Parsing Stack Overflow Vulnerability
  • From: zdi-disclosures
• ZDI-08-039: Microsoft Internet Explorer DOM Ojbect substringData() Heap Overflow Vulnerability
  • From: zdi-disclosures
• Many bugs on CMS system Piugame
  • From: Psymera
• [ MDVSA-2008:111 ] - Updated Evolution packages fix vulnerabilities
  • From: security
• ZDI-08-038: QuickTime SMIL qtnext Redirect File Execution
  • From: zdi-disclosures
• iDefense Security Advisory 06.10.08: Multiple Vendor FreeType2 PFB Memory Corruption Vulnerability
  • From: iDefense Labs
• ZDI-08-037: Apple QuickTime Indeo Video Buffer Overflow Vulnerability
  • From: zdi-disclosures
• XSS - Glassfish Web Admin Interface (Sun Java System Application Server 9.1_01 (build b09d-fcs) )
  • From: Eduardo Jorge
• iDefense Security Advisory 06.10.08: Multiple Vendor FreeType2 Multiple Heap Overflow Vulnerabilities
  • From: iDefense Labs
• iDefense Security Advisory 06.10.08: Multiple Vendor FreeType2 PFB Integer Overflow Vulnerability
  • From: iDefense Labs
• Cisco Security Advisory: SNMP Version 3 Authentication Vulnerabilities
  • From: Cisco Systems Product Security Incident Response Team
• iDefense Security Advisory 06.10.08: Multiple Vendor OpenOffice rtl_allocateMemory() Integer Overflow Vulnerability
  • From: iDefense Labs
• [security bulletin] HPSBMA02338 SSRT080024, SSRT080041 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code, Denial of Service (DoS)
  • From: security-alert
• Secunia Research: Apple QuickTime PICT Image Parsing Buffer Overflow
  • From: Secunia Research
• [web-app] Insanely Simple Blog 0.5 (index) Remote SQL Injection Vulnerabilities
  • From: unohope
• [web-app] yBlog 0.2.2.2 Multiple Remote Vulnerabilities
  • From: unohope
• [web-app] DCFM Blog 0.9.4 (comments) Remote SQL Injection Vulnerability
  • From: unohope
• [web-app] ErfurtWiki <= R1.02b (css) Local File Inclusion Vulnerability
  • From: unohope
• [oCERT-2008-006] multiple SNMP implementations HMAC authentication spoofing
  • From: Andrea Barisani
• [web-app] Tornado Knowledge Retrieval System <= 4.2 Remote XSS Vulnerability
  • From: unohope
• Further Correction to BID 29112 "Apache Server HTML Injection and UTF-7 XSS Vulnerability"
  • From: William A. Rowe, Jr.
• [SECURITY] [DSA 1593-1] New tomcat5.5 packages cross-site scripting
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 1592-2] New Linux 2.6.18 packages fix overflow conditions
  • From: dann frazier
• webTA by kronos - XSS
  • From: Alex Eden
• XSS - NEXTGEN GALLERY 0.96 WORDPRESS PLUGIN
  • From: Eduardo Jorge
• [SECURITY] [DSA 1592-1] New Linux 2.6.18 packages fix overflow conditions
  • From: dann frazier
• [ GLSA 200806-03 ] Imlib 2: User-assisted execution of arbitrary code
  • From: Tobias Heinlein
• FreeSSHD 1.2.1 (Post Auth) Remote Seh Overflow Exploit
  • From: m . memelli
• [USN-615-1] Evolution vulnerabilities
  • From: Jamie Strandboge
• Re: iDefense Security Advisory 06.04.08: VMware Tools HGFS Local Privilege Escalation Vulnerability
  • From: iDefense Labs
• SchoolCenter URL Handling Cross Site Scripting Vulnerability
  • From: DoZ
• rPSA-2008-0185-1 vsftpd
  • From: rPath Update Announcements
• Vulnerability in Network General/Net Scout product
  • From: jgrove_2000
• Akamai Technologies Security Advisory 2008-0003 (Akamai Client Software)
  • From: Akamai Security Team
• Secunia Research: Akamai Red Swoosh Cross-Site Request Forgery
  • From: Secunia Research
• [ MDVSA-2008:110 ] - Updated Firefox packages fix vulnerabilities
  • From: security
• WEBAlbum <= 2.0 Remote Stored Cross Site Scripting Vulnerability
  • From: tan_prathan
• F5 FirePass Content Inspection Management XSS
  • From: nnposter
• Re: iDefense Security Advisory 06.04.08: VMware Tools HGFS Local Privilege Escalation Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 06.04.08: VMware Multiple Products vmware-authd Untrusted Library Loading Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 06.04.08: VMware Tools HGFS Local Privilege Escalation Vulnerability
  • From: iDefense Labs
• AST-2008-009: (Corrected subject) Remote crash vulnerability in ooh323 channel driver
  • From: Asterisk Security Team
• Akamai Download Manager File Downloaded To Arbitrary Location Vulnerability
  • From: cocoruder
• SMEweb 1.4b (SQL/XSS) Multiple Remote Vulnerabilities
  • From: tan_prathan
• Remote DoS vulnerability in Linksys WRH54G
  • From: dubingyao
• [security bulletin] HPSBST02312 SSRT071428 rev.2 - HP StorageWorks Storage Mirroring Software, Remote Execution of Arbitrary Code
  • From: security-alert
• e107 Plugin echat MENU Blind SQL Injection Vulnerability
  • From: hadihadi_zedehal_2006
• AST-2008-009: AST-2008-007 Cryptographic keys generated by OpenSSL on Debian-based systems compromised
  • From: Asterisk Security Team
• CA Secure Content Manager HTTP Gateway Service FTP Request Vulnerabilities
  • From: Williams, James K
• CORE-2008-0425 - NASA BigView Stack Buffer Overflow
  • From: CORE Security Technologies Advisories
• Re: ZDI-08-034: HP StorageWorks Storage Mirroring Authentication Processing Stack Overflow Vulnerability
  • From: Luigi Auriemma
• iDefense Security Advisory 06.04.08: Kaspersky Internet Security IOCTL Stack Based Buffer Overflow Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 06.04.08: Skype File URI Security Bypass Code Execution Vulnerability
  • From: iDefense Labs
• TPTI-08-05: CA ETrust Secure Content Manager Gateway FTP LIST Stack Overflow Vulnerability
  • From: DVLabs
• ZDI-08-036: CA ETrust Secure Content Manager Gateway FTP LIST Stack Overflow
  • From: zdi-disclosures
• ZDI-08-035: CA ETrust Secure Content Manager Gateway FTP PASV Stack Overflow Vulnerability
  • From: zdi-disclosures
• ZDI-08-034: HP StorageWorks Storage Mirroring Authentication Processing Stack Overflow Vulnerability
  • From: zdi-disclosures
• VMSA-2008-0009 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Fusion, VMware Server, VMware VIX API, VMware ESX, VMware ESXi resolve critical security issues
  • From: VMware Security team
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco PIX and Cisco ASA
  • From: Cisco Systems Product Security Incident Response Team
• Akamai Technologies Security Advisory 2008-0001 (Download Manager)
  • From: Akamai Security Team
• iDefense Security Advisory 06.03.08: Sun Java System Active Server Pages Buffer Overflow Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 06.03.08: Sun Java System Active Server Pages Authorization Bypass Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 06.03.08: Sun Java System Active Server Pages Multiple Directory Traversal Vulnerabilities
  • From: iDefense Labs
• IMF 2008 - Deadline Extension (2nd try)
  • From: Oliver Goebel
• iDefense Security Advisory 06.03.08: Sun Java System Active Server Pages Multiple Command Injection Vulnerabilities
  • From: iDefense Labs
• CSIS-RI-0003: Multiple buffer overflow vulnerabilities in HP ActiveX
  • From: rand
• iDefense Security Advisory 06.03.08: Sun Java System Active Server Pages Information Disclosure Vulnerability
  • From: iDefense Labs
• [security bulletin] HPSBMA02326 SSRT071490 rev.1 - HP Instant Support HPISDataManager.dll Running on Windows, Remote Execution of Arbitrary Code
  • From: security-alert
• iDefense Security Advisory 06.03.08: Sun Java System Active Server Pages File Creation Vulnerability
  • From: iDefense Labs
• QuickerSite Multiple Vulnerabilities
  • From: Admin
• [ MDVSA-2008:109 ] - Updated kernel packages fix bugs
  • From: security
• AST-2008-008: Remote Crash Vulnerability in SIP channel driver when run in pedantic mode
  • From: Asterisk Security Team
• [USN-614-1] Linux kernel vulnerabilities
  • From: Kees Cook
• AccessMe Tool Release
  • From: Oliver Lavery
• [NSG 03-06-2008] C6 Messenger Installation Url DownloaderActiveX Control Remote Download & Execute Exploit
  • From: ipsdix
• London DEFCON June meet - DC4420 - Thursday 5th June
  • From: Major Malfunction
• [ GLSA 200806-01 ] mtr: Stack-based buffer overflow
  • From: Tobias Heinlein
• RE: Windows Installer msiexec GUID Buffer Overflow
  • From: Thor (Hammer of God)
• [ GLSA 200806-02 ] libxslt: Execution of arbitrary code
  • From: Tobias Heinlein
• Re: Windows Installer msiexec GUID Buffer Overflow
  • From: 0xjbrown41
• [security bulletin] HPSBST02312 SSRT071428 rev.1 - HP StorageWorks Storage Mirroring Software, Remote Execution of Arbitrary Code
  • From: security-alert
• [SECURITY] [DSA 1591-1] New libvorbis packages fix several vulnerabilities
  • From: Thijs Kinkhorst
• Windows Installer msiexec GUID Buffer Overflow
  • From: Patrick Webster
• [SECURITY] CVE-2008-1947: Tomcat host-manager XSS vulnerability
  • From: Mark Thomas
• Advisory: Xerox Workaround & planned patch
  • From: suzanne . hawley
• DEFCON 16 Updates - Get involved!
  • From: The Dark Tangent
• rPSA-2008-0181-1 openssl openssl-scripts
  • From: rPath Update Announcements
• [ECHO_ADV_96$2008] HiveMaker Professional <= 1.0.2 (cid) Sql Injection Vulnerability
  • From: erdc
• ComicShout 2.8 (news.php news_id) SQL Injection Vulnerability
  • From: sys-project
• OtomiGenX v2.2 Ultimate Authentication bypass Vulnerability
  • From: hadihadi_zedehal_2006
• Re: xt:Commerce possible DoS
  • From: decoder-bugtraq
• BP Blog 6.0 (id) Remote Blind SQL Injection Vulnerability
  • From: sys-project
• ARP handler Inspection tool released
  • From: Andrea Di Pasquale
• rPSA-2008-0180-1 samba samba-client samba-server samba-swat
  • From: rPath Update Announcements
• [SECURITY] [DSA 1553-2] New ikiwiki packages fix regression
  • From: Thijs Kinkhorst
• SQL Injection leading to authorization bypass in Torrent Trader Classic v1.08 and earlier
  • From: Charles Vaughn
• Re: VisualSentinel 0.7 Cross Agent Scripting Vulnerability
  • From: m . morcote
• LokiCMS Multiple Vulnerabilities through Authorization weakness
  • From: Alireza Hassani
• VisualSentinel 0.7 Cross Agent Scripting Vulnerability
  • From: bugtraq
• [SECURITY] [DSA 1588-2] New Linux 2.6.18 packages fix several vulnerabilities
  • From: dann frazier
• [SECURITY] [DSA 1590-1] New samba packages fix arbitrary code execution
  • From: Florian Weimer
• VMSA-2008-0008 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Fusion resolve critical security issues
  • From: VMware Security team
• Dot Net Nuke (DNN) <= 4.8.3 XSS Vulnerability
  • From: Admin
• XEROX DocuShare URL XSS Injection Vulnerabilities
  • From: DoZ
• Re: [HV-INFO] Enova hardware encryption: false sense of security
  • From: rwann
• dvbbs8.2(access/sql)version login.asp remote sql injection
  • From: hackerb
• RE: Bypassing URL Authentication and Authorization with HTTP Verb Tampering
  • From: Jim Harrison
• [ MDVSA-2008:108 ] - Updated samba packages fix arbitrary code execution vulnerability
  • From: security
• Flash Blog Sql Injection
  • From: 16 . her0
• [ GLSA 200805-22 ] MPlayer: User-assisted execution of arbitrary code
  • From: Tobias Heinlein
• Re: [HV-INFO] Enova hardware encryption: false sense of security
  • From: rwann
• FlashBlog Remote File Upload Vulnerability
  • From: mefisto
• [ GLSA 200805-23 ] Samba: Heap-based buffer overflow
  • From: Tobias Heinlein
• Secunia Research: imlib2 PNM and XPM Buffer Overflow
  • From: Secunia Research
• Secunia Research: Samba "receive_smb_raw()" Buffer Overflow Vulnerability
  • From: Secunia Research
• Calcium web calendar: Reflected XSS
  • From: Marvin Simkin
• Bypassing URL Authentication and Authorization with HTTP Verb Tampering
  • From: Arshan Dabirsiaghi
• Vulnerability Advisory on OpenSSL
  • From: josh
• [ MDVSA-2008:107 ] - Updated openssl package fixes denial of service vulnerabilities
  • From: security
• [security bulletin] HPSBUX02334 SSRT071403 rev.2 - HP-UX Running ftp, Remote Denial of Service (DoS)
  • From: security-alert
• [SAMBA] CVE-2008-1105 - Boundary failure when parsing SMB responses
  • From: Gerald (Jerry) Carter
• Cisco Security Advisory: CiscoWorks Common Services Arbitrary Code Execution Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• rPSA-2008-0105-1 evolution
  • From: rPath Update Announcements
• Re: CORE-2008-0126: Multiple vulnerabilities in iCal
  • From: Steven M. Christey
• [NSG_28-5-08] CA Internet Security Suite 2008 (UmxEventCli.dll/SaveToFile()) remote file corruption poc
  • From: ipsdix
• RE: function sleep() in all versions of PHP
  • From: Michael Wojcik
• Re: function sleep() in all versions of PHP
  • From: Glynn Clements
• rPSA-2008-0178-1 php php-mysql php-pgsql
  • From: rPath Update Announcements
• iDefense Security Advisory 05.27.08: EMC AlphaStor Server Agent Multiple Stack Buffer Overflow Vulnerabilities
  • From: iDefense Labs
• ZDI-08-033: Motorola RAZR JPG Processing Stack Overflow Vulnerability
  • From: zdi-disclosures
• iDefense Security Advisory 05.27.08: EMC AlphaStor Library Manager Arbitrary Command Execution Vulnerability
  • From: iDefense Labs
• Re: IOS Rookit: the sky isn't falling (yet)
  • From: Felix 'FX' Lindner
• [ GLSA 200805-21 ] Roundup: Permission bypass
  • From: Tobias Heinlein
• rPSA-2008-0177-1 emacs emacs-leim
  • From: rPath Update Announcements
• Re: function sleep() in all versions of PHP
  • From: Michael G. Reed
• Re: function sleep() in all versions of PHP
  • From: Charles Morris
• [SECURITY] [DSA 1588-1] New Linux 2.6.18 packages fix several vulnerabilities
  • From: dann frazier
• Re: function sleep() in all versions of PHP
  • From: cxib
• Re: MDAP ANTs PWNAGE: dumping the admin password of the BT Home Hub
  • From: Adrian Pastor
• Security, Open Source Style
  • From: Josh Bressers
• Re: function sleep() in all versions of PHP
  • From: Juan Miguel - Prisma Virtual -
• Re: CORE-2008-0126: Multiple vulnerabilities in iCal
  • From: security curmudgeon
• IOS Rookit: the sky isn't falling (yet)
  • From: Nicolas FISCHBACH
• RoomPHPlanning 1.5 (weekview.php) SQL Injection Vulnerability
  • From: hadihadi_zedehal_2006
• [security bulletin] HPSBUX02335 SSRT071454 rev.2 - HP-UX Running useradd(1M), Local Unauthorized Access
  • From: security-alert
• Re: Vbulletin 3.7.0 Gold >> Sql injection on faq.php
  • From: skyline
• T2'08: Call for Papers 2008 (Helsinki / Finland)
  • From: Tomi Tuominen
• Re: function sleep() in all versions of PHP
  • From: Mark Sanders
• [SECURITY] [DSA 1587-1] New mtr packages fix execution of arbitrary code
  • From: Steve Kemp
• SECOBJADV-2008-01: Lenovo SystemUpdate SSL Certificate Issuer Spoofing Vulnerability
  • From: Security Objectives, Inc.
• Zina 1.0rc3 Remote Directory Traversal Vulnerability & XSS Vulnerability
  • From: irancrash
• Repair Online v1.2 (sentout) Create Admin Vulnerability
  • From: unohope
• Advisory - Rsyncrypto maybe affected from Debian OpenSSL reduced entropy problem
  • From: Aviram Jenik
• Campus Bulletin Board v3.4 Multiple Remote Vulnerabilities
  • From: unohope
• Ablespace 1.0 'cat_id' Parameter SQL Injection Vulnerability
  • From: a . jasbi
• Class System v2.3 Multiple Remote Vulnerabilities
  • From: unohope
• Mini-CWB <= 2.1.1 Remote XSS Vulnerability
  • From: tan_prathan
• function sleep() in all versions of PHP
  • From: gogulas
• phpFix v2 Multiple SQL Injection Vulnerability
  • From: unohope
• Excuse Online (pwd) SQL Injection Vulnerability
  • From: unohope
• Re: vuln in WordPress plugin Upload File(UP)
  • From: none
• Re: IOS rootkits (fwd)
  • From: Gadi Evron
• PCPIN Chat 6: potential XSS vulnerability in URL redirection script
  • From: admin
• vuln in WordPress plugin Upload File(UP)
  • From: my
• Re: BosNews v4.0 Remote add user admin
  • From: sales
• dzoic handshakes sql injection >> index.php on $fname
  • From: a . jasbi
• [ MDVSA-2008:106 ] - Updated gnutls packages fix denial of service vulnerabilities
  • From: security
• xt:Commerce possible DoS
  • From: decoder-bugtraq
• rPSA-2008-0176-1 php php-cgi php-imap php-mcrypt php-mysql php-mysqli php-pgsql php-soap php-xsl php5 php5-cgi php5-imap php5-mcrypt php5-mysql php5-mysqli php5-pear php5-pgsql php5-soap php5-xsl
  • From: rPath Update Announcements
• PR07-15: Cross-site Scripting (XSS) / HTML injection on F5 FirePass 4100 SSL VPN 'my.logon.php3' server-side script
  • From: Ricardo Martins - Chief Security Officers
• [DSECRG-08-025] Local File Include in OneCMS 2.5
  • From: Digital Security Research Group
• e107 Plugin BLOG Engine v2.2 (macgurublog.php/uid) Blind SQL Injection Vulnerability
  • From: hadihadi_zedehal_2006
• [DSECRG-08-024] Multiple Security Vulnerabilities (RFI,LFI,XSS) in QuateCMS
  • From: Digital Security Research Group
• Re: Re: Vbulletin 3.7.0 Gold >> Sql injection on faq.php
  • From: andy . huang
• Re: /home/putnopvut/asa/AST-2008-007/AST-2008-007: AST-2008-007 Cryptographic keys generated by OpenSSL on Debian-based systems compromised
  • From: Florian Weimer
• [SECURITY] [DSA 1586-1] New xine-lib packages fix several vulnerabilities
  • From: Devin Carraway
• abledating 2.4 >> Sql injection and cross site scripting on search_results.php
  • From: a . jasbi
• IRM Security Advisory : Barracuda Networks Spam Firewall Cross-Site Scripting Vulnerability
  • From: Mark Crowther
• rPSA-2008-0174-1 gnutls
  • From: rPath Update Announcements
• /home/putnopvut/asa/AST-2008-007/AST-2008-007: AST-2008-007 Cryptographic keys generated by OpenSSL on Debian-based systems compromised
  • From: Asterisk Security Team
• BMForum Remote 5.6 Miltiple XSS Vulnerability
  • From: tan_prathan
• Exteen Blog XSS Remote Cookie Disclosure Exploit
  • From: tan_prathan
• [security bulletin] HPSBUX02337 SSRT080072 rev.1 - HP-UX Running HP-UX Secure Shell, Local Unauthorized Access and Denial of Service (DoS)
  • From: security-alert
• phpSQLiteCMS Multiple Remote XSS Vulnerability
  • From: tan_prathan
• PHPFreeForum <= 1.0 RC2 Remote XSS Vulnerability
  • From: tan_prathan
• ZDI-08-031: Trillian MSN MIME Header Stack-Based Overflow Vulnerability
  • From: zdi-disclosures
• ZDI-08-030: Trillian Multiple Protocol XML Parsing Memory Corruption Vulnerability
  • From: zdi-disclosures
• ZDI-08-029: Trillian AIM.DLL Long HTML Font Parameter Stack Overflow Vulnerability
  • From: zdi-disclosures
• ZDI-08-028: IBM Lotus Sametime Community Services Multiplexer Stack Overflow Vulnerability
  • From: zdi-disclosures
• [ GLSA 200805-20 ] GnuTLS: Execution of arbitrary code
  • From: Robert Buchholz
• MDAP ANTs PWNAGE: dumping the admin password of the BT Home Hub
  • From: Adrian Pastor
• iDefense Security Advisory 05.21.08: Multiple Vendor Snort IP Fragment TTL Evasion Vulnerability
  • From: iDefense Labs
• www file share pro 5.30 insecure multiple
  • From: output
• CORE-2008-0126: Multiple vulnerabilities in iCal
  • From: Core Security Technologies Advisories
• Re: Vbulletin 3.7.0 Gold >> Sql injection on faq.php
  • From: Matias Blanco
• [SECURITY] [DSA 1584-1] New libfissound packages fix execution of arbitrary code
  • From: Steve Kemp
• [USN-612-8] openssl-blacklist update
  • From: Jamie Strandboge
• Cisco Security Advisory: Cisco Voice Portal Privilege Escalation Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco IOS Secure Shell Denial of Service
  • From: Cisco Systems Product Security Incident Response Team
• [USN-613-1] GnuTLS vulnerabilities
  • From: Kees Cook
• Re: Re: Re: Exploiting Google MX servers as Open SMTP Relays
  • From: pablo . ximenes
• Re: mjguest 6.7 (ALL VERSION) Xss & Redirection Vuln
  • From: alighieri_m
• [DSECRG-08-020] Alcatel OmniPCX Office Remote Comand Execution
  • From: Digital Security Research Group
• [DSECRG-08-023] SAP Web Application Server XSS Security Vulnerability
  • From: Digital Security Research Group
• [ MDVSA-2008:105 ] - Updated kernel packages fix vulnerabilities
  • From: security
• Re: Vbulletin 3.7.0 Gold >> Sql injection on faq.php
  • From: martin . meredith
• CORE-2008-0415: Borland Interbase 2007 Integer Overflow
  • From: CORE Security Technologies
• RE: An account of the Estonian Internet War
  • From: Gadi Evron
• [ GLSA 200805-18 ] Mozilla products: Multiple vulnerabilities
  • From: Robert Buchholz
• [ GLSA 200805-19 ] ClamAV: Multiple vulnerabilities
  • From: Robert Buchholz
• [ GLSA 200805-17 ] Perl: Execution of arbitrary code
  • From: Tobias Heinlein
• [SECURITY] [DSA 1582-1] New peercast packages fix arbitrary code execution
  • From: Thijs Kinkhorst
• [SECURITY] [DSA 1583-1] New gnome-peercast packages fix several vulnerabilities
  • From: Thijs Kinkhorst
• RE: An account of the Estonian Internet War
  • From: Viktor Larionov
• Mantis Bug Tracker 1.1.1 Multiple Vulnerabilities
  • From: ascii
• [SECURITY] [DSA 1581-1] New gnutls13 packages fix potential code execution
  • From: Florian Weimer
• [security bulletin] HPSBUX02332 SSRT080056 rev.2 - HP-UX Running Apache With PHP, Remote Denial of Service (DoS), Gain Extended Privileges
  • From: security-alert
• [security bulletin] HPSBUX02335 SSRT071454 rev.1 - HP-UX Running useradd(1M), Local Unauthorized Access
  • From: security-alert
• ZDI-08-026: CA BrightStor ARCserve Backup Remote Buffer Overflow
  • From: zdi-disclosures
• Starsgames Control Panel <= 4.6.2 Remote XSS Vulnerability
  • From: tan_prathan
• [SECURITY] [DSA 1580-1] New phpgedview packages fix privilege escalation
  • From: Thijs Kinkhorst
• Secunia Research: Foxit Reader "util.printf()" Buffer Overflow
  • From: Secunia Research
• Vbulletin 3.7.0 Gold >> Sql injection on faq.php
  • From: a . jasbi
• eCMS-v0.4.2 (SQL/PB) Multiple Remote Vulnerabilities
  • From: hadihadi_zedehal_2006
• Vulnerability Advisory on GnuTLS
  • From: josh
• [USN-612-7] OpenSSH update
  • From: Kees Cook
• CA ARCserve Backup caloggerd and xdr Functions Vulnerabilities
  • From: Williams, James K
• An account of the Estonian Internet War
  • From: Gadi Evron
• AppServ Open Project < = 2.5.10 Remote XSS Vulnerability
  • From: tan_prathan
• ZDI-08-027: CA BrightStor ARCserve Backup Arbitrary File Writing Vulnerability
  • From: zdi-disclosures
• Mtr - remote and local stack overflow - uncomment situation in libresolv.
  • From: pi3
• [security bulletin] HPSBST02336 SSRT080071 rev.1 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS08-026 to MS08-029
  • From: security-alert
• [ MDVSA-2008:103 ] - Updated libid3tag packages fix denial of service vulnerability
  • From: security
• Re: Cpanel all version >> root access with a reseller account.
  • From: dave
• Insomnia : ISVA-080516.1 - Altiris Deployment Solution - SQL Injection
  • From: Brett Moore
• DoS attacks using SQL Wildcards - White Paper
  • From: Ferruh Mavituna
• Re: Apache Server HTML Injection and UTF-7 XSS Vulnerability
  • From: William A. Rowe, Jr.
• Microsoft word javascript execution
  • From: jplopezy
• Wordpress Malicious File Execution Vulnerability
  • From: tan_prathan
• Re: Re: Re: Re: Re: Apache Server HTML Injection and UTF-7 XSS Vulnerability
  • From: Tom . Donovan
• Insomnia : ISVA-080516.2 - Altiris Deployment Solution - Domain Account Disclosure
  • From: Brett Moore
• Smeego CMS vulnerability
  • From: 0in . email
• [SECURITY] [DSA 1579-1] New netpbm-free packages fix arbitrary code execution
  • From: Devin Carraway
• Re: Apple iPhone 1.1.3 remote DoS exploit
  • From: sohotguy
• Cpanel all version >> root access with a reseller account.
  • From: a . jasbi
• Re: Re: Re: Re: Apache Server HTML Injection and UTF-7 XSS Vulnerability
  • From: Tim
• Re: Re: Re: Re: Apache Server HTML Injection and UTF-7 XSS Vulnerability
  • From: Paul Szabo
• Re: Re: Re: Re: Apache Server HTML Injection and UTF-7 XSS Vulnerability
  • From: yos20053
• StanWeb.CMS (default.asp id) Remote SQL Injection Exploit
  • From: sys-project
• PHP-Nuke Module KuraniKerim [sid] SQL Injection
  • From: lovebug
• [SECURITY] [DSA 1578-1] New php4 packages fix several vulnerabilities
  • From: Thijs Kinkhorst
• CFP for HITBSecConf2008 - Malaysia now open
  • From: Praburaajan
• IOS rootkits
  • From: Gadi Evron
• [ MDVSA-2008:101 ] - Updated rdesktop packages fix vulnerabilities
  • From: security
• [ MDVSA-2008:102 ] - Updated libvorbis packages fix vulnerabilities
  • From: security
• [SECURITY] [DSA 1576-2] New openssh packages fix predictable randomness
  • From: Noah Meyerhans
• Re: Re: Re: Apache Server HTML Injection and UTF-7 XSS Vulnerability
  • From: Jon Ribbens
• Hack.lu 2008 CfP
  • From: info
• ZDI-08-025: Symantec Altiris Deployment Solution Domain Credential Disclosure Vulnerability
  • From: zdi-disclosures
• ZDI-08-024: Symantec Altiris Deployment Solution SQL Injection Vulnerability
  • From: zdi-disclosures
• SunShop Version 3.5.1 Remote Blind Sql Injection
  • From: irvian . info
• RE: Cisco Security Advisory: Cisco Unified Presence Denial of Service Vulnerabilities (UNCLASSIFIED)
  • From: Walker, Theresa A CIV DISA CSD
• Re: Re: Re: Apache Server HTML Injection and UTF-7 XSS Vulnerability
  • From: Tom . Donovan
• Aruba Mobility Controller TACACS User Authentication and Cross Site Scripting Vulnerabilities (Aruba Advisory ID: AID-051408)
  • From: Robbie (Rupinder) Gill
• Debian generated SSH-Keys working exploit
  • From: mm
• Kostenloses Linkmanagementscript SQL Injection Vulnerabilities
  • From: hadihadi_zedehal_2006
• Re: Re: Re: Apache Server HTML Injection and UTF-7 XSS Vulnerability
  • From: lament hero
• [USN-612-6] OpenVPN regression
  • From: Jamie Strandboge
• [ GLSA 200805-16 ] OpenOffice.org: Multiple vulnerabilities
  • From: Robert Buchholz
• Correction to BID 29112 "Apache Server HTML Injection and UTF-7 XSS Vulnerability"
  • From: William A. Rowe, Jr.
• Re: Cisco BBSM Captive Portal Cross-site Scripting
  • From: Eloy Paris
• Cisco Security Advisory: Cisco Unified Presence Denial of Service Vulnerabilities
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco Content Switching Module Memory Leak Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• [ GLSA 200805-15 ] libid3tag: Denial of Service
  • From: Tobias Heinlein
• [USN-612-5] OpenSSH update
  • From: Jamie Strandboge
• Cisco Security Advisory: Cisco Unified Communications Manager Denial of Service Vulnerabilities
  • From: Cisco Systems Product Security Incident Response Team
• CFP: European Conference on Computer Network Defense
  • From: Stefano Zanero
• [SECURITY] [DSA 1576-1] New openssh packages fix predictable randomness
  • From: Florian Weimer
• [USN-612-4] ssl-cert vulnerability
  • From: Kees Cook
• Malformed Acrobat Distiller 8 .joboptions
  • From: Paul Craig
• Microsoft Office Publisher PUB File Parsing Remote Memory Corruption Vulnerability
  • From: cocoruder
• [SECURITY] [DSA 1577-1] New gforge packages fix insecure temporary files
  • From: Thijs Kinkhorst
• Cisco BBSM Captive Portal Cross-site Scripting
  • From: brad . antoniewicz
• [ GLSA 200805-14 ] Common Data Format library: User-assisted execution of arbitrary code
  • From: Pierre-Yves Rofes
• iDefense Security Advisory 05.13.08: Microsoft Word CSS Processing Memory Corruption Vulnerability
  • From: iDefense Labs
• ZDI-08-023: Microsoft Office RTF Parsing Engine Memory Corruption Vulnerability
  • From: zdi-disclosures
• TPTI-08-04: Microsoft Office Jet Database Engine Column Parsing Stack Overflow Vulnerability
  • From: DVLabs
• [USN-612-2] OpenSSH vulnerability
  • From: Jamie Strandboge
• [USN-612-1] OpenSSL vulnerability
  • From: Jamie Strandboge
• [SECURITY] [DSA 1571-1] New openssl packages fix predictable random number generator
  • From: Florian Weimer
• iDefense Security Advisory 05.12.08: Microsoft Windows I2O Filter Utility Driver (i2omgmt.sys) Local Privilege Escalation Vulnerability
  • From: iDefense Labs
• [SECURITY] [DSA 1575-1] New Linux 2.6.18 packages fix denial of service
  • From: dann frazier
• [MajorSecurity Advisory #52]ActualAnalyzer family - Cross Site Scripting Issues
  • From: admin
• [ GLSA 200805-13 ] PTeX: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• [ GLSA 200805-12 ] Blender: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• [ GLSA 200805-11 ] Chicken: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• Re: Re: Re: Apache Server HTML Injection and UTF-7 XSS Vulnerability
  • From: cxib
• [security bulletin] HPSBUX02334 SSRT071403 rev.1 - HP-UX Running ftp, Remote Denial of Service (DoS)
  • From: security-alert
• Re: Exploiting Google MX servers as Open SMTP Relays
  • From: Lamont Granquist
• Re: Re: Exploiting Google MX servers as Open SMTP Relays
  • From: pablo . ximenes
• [SECURITY] [DSA 1574-1] New icedove packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• Re: Exploiting Google MX servers as Open SMTP Relays
  • From: Clifton Royston
• [SECURITY] [DSA 1573-1] New php5 packages fix several vulnerabilities
  • From: Thijs Kinkhorst
• Confirmed Program for SyScan'08 Hong Kong
  • From: organiser@xxxxxxxxxx
• [ GLSA 200805-10 ] Pngcrush: User-assisted execution of arbitrary code
  • From: Pierre-Yves Rofes
• [SECURITY] [DSA 1572-1] New php5 packages fix several vulnerabilities
  • From: Thijs Kinkhorst
• Re: Exploiting Google MX servers as Open SMTP Relays
  • From: Bojan Zdrnja
• Joomla Component xsstream-dm 0.01 Beta SQL Injection
  • From: houssamix
• [ MDVSA-2008:100 ] - Updated perl packages fix denial of service vulnerability
  • From: security
• [SECURITY] [DSA 1573-1] New rdesktop packages fix several vulnerabilities
  • From: Thijs Kinkhorst
• [ GLSA 200805-09 ] MoinMoin: Privilege escalation
  • From: Pierre-Yves Rofes
• Re: Re: Apache Server HTML Injection and UTF-7 XSS Vulnerability
  • From: yos20053
• Re: Exploiting Google MX servers as Open SMTP Relays
  • From: Todd T. Fries
• Re: Exploiting Google MX servers as Open SMTP Relays
  • From: Todd T. Fries
• Re: Exploiting Google MX servers as Open SMTP Relays
  • From: Gadi Evron
• OtherLogic[vocourse.php]SQL Injection Exploit
  • From: Breeeeh
• Re: Exploiting Google MX servers as Open SMTP Relays
  • From: Michael Scheidell
• Re: Apache Server HTML Injection and UTF-7 XSS Vulnerability
  • From: cxib
• SazCart <= 1.5.1 (prodid) Remote SQL Injection Exploit
  • From: sys-project
• [ GLSA 200805-07 ] Linux Terminal Server Project: Multiple vulnerabilities
  • From: Robert Buchholz
• [ MDVSA-2008:099 ] - Updated ImageMagick packages fix vulnerabilities
  • From: security
• XSS and CSRF vulnerability on Cpanel 11
  • From: Matteo Carli
• FInal EUSecWest 2008 Speakers
  • From: Dragos Ruiu
• [ GLSA 200805-06 ] Firebird: Data disclosure
  • From: Robert Buchholz
• Oracle Application Server 10G ORA_DAV Basic Authentication Bypass Vulnerability
  • From: Deniz Cevik
• [ GLSA 200805-08 ] InspIRCd: Denial of Service
  • From: Robert Buchholz
• Apache Server HTML Injection and UTF-7 XSS Vulnerability
  • From: lament hero
• [USN-611-3] GStreamer Good Plugins vulnerability
  • From: Jamie Strandboge
• [USN-611-2] vorbis-tools vulnerability
  • From: Jamie Strandboge
• FLEA-2008-0008-1 firefox
  • From: Foresight Linux Essential Announcement Service
• [USN-611-1] Speex vulnerability
  • From: Jamie Strandboge
• Re: After 6 months - fix available for Microsoft DNS cache poisoning attack
  • From: Amit Klein
• ezContents CMS Version 2.0.0 SQL Injection Vulnerabilities
  • From: hadihadi_zedehal_2006
• Re: [ECHO_ADV_91$2008] Online Rental Property Script <= 4.5 (pid) Blind Sql Injection Vulnerability
  • From: catalina . danila
• iDefense Security Advisory 05.07.08: Multiple Vendor rdesktop process_redirect_pdu() BSS Overflow Vulnerability
  • From: iDefense Labs
• ZYWALL Referer Header XSS Vulnerability
  • From: Deniz Cevik
• iDefense Security Advisory 05.07.08: Multiple Vendor rdesktop channel_process() Integer Signedness Vulnerability
  • From: iDefense Labs
• [ GLSA 200805-04 ] eGroupWare: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• Re: After 6 months - fix available for Microsoft DNS cache poisoning attack
  • From: rick . a . cook
• Novell Client <= 4.91 SP4 Local Stack overflow / B.S.O.D (unauthentificated user)
  • From: laurent . gaffie
• iDefense Security Advisory 05.07.08: Multiple Vendor rdesktop iso_recv_msg() Integer Underflow Vulnerability
  • From: iDefense Labs
• Exploiting Google MX servers as Open SMTP Relays
  • From: pablo . ximenes
• Vulnerability in Multiple Web Application
  • From: linux0day
• Re: Microsot DID DISCLOSE potential Backdoor
  • From: J. Oquendo
• Re: Microsot DID DISCLOSE potential Backdoor
  • From: J. Oquendo
• RE: Microsot DID DISCLOSE potential Backdoor
  • From: Ken Schaefer
• VBZooM <=V1.11 "reply.php" SQL Injection Vulnerability
  • From: Cr4zY . CrAcKeR
• Re: QTOFileManager V 1.0<== Remote File Upload Vulnerability
  • From: Cr4zY . CrAcKeR
• Multiple XSS In TuxCMS All Version
  • From: hadikiamarsi
• [ GLSA 200805-03 ] Multiple X11 terminals: Local privilege escalation
  • From: Tobias Heinlein
• [USN-610-1] LTSP vulnerability
  • From: Kees Cook
• [USN-609-1] OpenOffice.org vulnerabilities
  • From: Kees Cook
• rPSA-2008-0162-1 kernel
  • From: rPath Update Announcements
• Adobe Acrobat Professional Javascript For PDF Security Feature Bypass and Memory Corruption Vulnerabilities
  • From: cocoruder
• [Advisory Update]Adobe Reader/Acrobat Remote PDF Print Silently Vulnerability
  • From: cocoruder
• rPSA-2008-0157-1 kernel
  • From: narita.hiroo
• [ MDVSA-2008:098 ] - Updated openssh packages fix vulnerability
  • From: security
• [ MDVSA-2008:096 ] - Updated emacs packages fix vulnerability in vcdiff
  • From: security
• [ MDVSA-2008:097 ] - Updated kdelibs packages fix vulnerability in start_kdeinit
  • From: security
• mvnForum 1.1 Cross Site Scripting
  • From: decoder-bugtraq
• Sphider 1.3.4 Cross Site Scripting
  • From: decoder-bugtraq
• [SECURITY] [DSA 1570-1] New kazehakase packages fix execution of arbitrary code
  • From: Steve Kemp
• [USN-605-1] Thunderbird vulnerabilities
  • From: Jamie Strandboge
• Power Editor LOCAL FILE INCLUSION Vulnerbility
  • From: hadihadi_zedehal_2006
• [USN-607-1] Emacs vulnerabilities
  • From: Jamie Strandboge
• QTOFileManager V 1.0<== Remote File Upload Vulnerability
  • From: Cr4zY . CrAcKeR
• Invitation - OWASP AppSec Europe May 19-22 2008 - Belgium
  • From: Sebastien Deleersnyder
• [USN-608-1] KDE vulnerability
  • From: Jamie Strandboge
• [security bulletin] HPSBMA02331 SSRT080000 rev.2 - HP-UX running WBEM Services, Remote Execution of Arbitrary Code, Gain Extended Privileges
  • From: security-alert
• HPSBUX02332 SSRT080056 rev.1 - HP-UX running Apache with PHP, Remote Denial of Service (DoS), Gain Extended Privileges
  • From: security-alert
• RE: Microsot DID DISCLOSE potential Backdoor
  • From: Ken Schaefer
• HPSBUX02324 SSRT080034 rev.1 - HP-UX Running Netscape Directory Server (NDS), Local Gain Extended Privileges
  • From: security-alert
• [tool announcement] tmin - a handy fuzzing test case optimizer
  • From: Michal Zalewski
• [SECURITY] [DSA 1554-2] New roundup packages fix regression
  • From: Thijs Kinkhorst
• Advisory SE-2008-03: PHP Multibyte Shell Command Escaping Bypass Vulnerability
  • From: Stefan Esser
• [SECURITY] [DSA 1569-2] New cacti packages fix regression
  • From: Thijs Kinkhorst
• [ GLSA 200805-02 ] phpMyAdmin: Information disclosure
  • From: Pierre-Yves Rofes
• Advisory SE-2008-02: PHP GENERATE_SEED() Weak Random Number Seed Vulnerability
  • From: Stefan Esser
• Security Advisory for Bugzilla 3.0.3, 3.1.3, 2.22.3, and 2.20.5
  • From: mkanat
• [ GLSA 200805-01 ] Horde Application Framework: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• CORE-2008-0129 - Wonderware SuiteLink Denial of Service vulnerability
  • From: CORE Security Technologies Advisories
• Novell eDirectory unauthenticated access to SOAP interface
  • From: Nicob
• Novell eDirectory DoS via HTTP headers
  • From: Nicob
• [SECURITY] [DSA 1569-1] New cacti packages fix multiple vulnerabilities
  • From: Thijs Kinkhorst
• [ECHO_ADV_93$2008] Kmita Tellfriend <= 2.0 (file) Remote File Inclusion Vulnerability
  • From: erdc
• [ECHO_ADV_94$2008] Kmita Mail <= 3.0 (file) Remote File Inclusion Vulnerability
  • From: erdc
• Scout Portal Toolkit <= 1.4.0 (ParentId) Remote SQL Injection Exploit
  • From: sys-project
• [ECHO_ADV_92$2008] Anserv Auction XL (viewfaqs.php cat) Blind Sql Injection Vulnerability
  • From: erdc
• [ECHO_ADV_90$2008] PostNuke Module pnEncyclopedia <= 0.2.0 (id) Blind Sql Injection Vulnerability
  • From: erdc
• [ECHO_ADV_95$2008] BackLinkSpider (cat_id) Blind Sql Injection Vulnerability
  • From: erdc
• [SECURITY] [DSA 1568-1] New b2evolution packages fix cross site scripting
  • From: Thijs Kinkhorst
• [SECURITY] [DSA 1567-1] New blender packages fix arbitrary code execution
  • From: Devin Carraway
• [ECHO_ADV_91$2008] Online Rental Property Script <= 4.5 (pid) Blind Sql Injection Vulnerability
  • From: erdc
• [USN-606-1] CUPS vulnerability
  • From: Jamie Strandboge
• LifeType 1.2.8
  • From: irancrash
• Maian Uploader v4.0 XSS Vulnerabilities
  • From: irancrash
• Re: Lifetype 1.2.7 XSS Vulnerability
  • From: securityfocus
• Re: Re: GroupWise 7.0 mailto: scheme buffer overflow
  • From: jplopezy
• Microsot DID DISCLOSE potential Backdoor
  • From: J. Oquendo
• Maian Links v3.1 XSS Vulnerabilities
  • From: irancrash
• Maian Music v1.1 Multiple Vulnerabilities (Xss/SQL Injection)
  • From: irancrash
• Maian Recipe v1.2 Xss Vulnerabilities
  • From: irancrash
• Multiple vulnerabilities in WebMod 0.48
  • From: Luigi Auriemma
• Maian Support v1.3 Xss Vulnerabilities
  • From: irancrash
• Maian Greeting v2.1 Multiple Vulnerabilities (XSS/SQL INJECTION)
  • From: irancrash
• Maian Weblog v4.0 XSS Vulnerabilities
  • From: irancrash
• Maian Guestbook v3.2 XSS Vulnerabilities
  • From: irancrash
• Maian Search v1.1 Multiple Vulnerabilities (XSS/SQL INJECTION)
  • From: irancrash
• Maian Cart v1.1 XSS Vulnerabilities
  • From: irancrash
• Maian Gallery v2.0 XSS Vulnerability
  • From: irancrash
• Photos and Presentation Materials from HITBSecConf2008 - Dubai Released
  • From: Praburaajan
• Re: GroupWise 7.0 mailto: scheme buffer overflow
  • From: hollebcons
• SiteXS CMS Remote File Upload Vulnerability
  • From: hadikiamarsi
• [TOOL] SSL Capable NetCat (and more)
  • From: GomoR
• Fixed: LiveCart SQL injection vulnerability fixed since version 1.1.2
  • From: LiveCart
• blur6ex-0.3.462 LOCAL FILE INCLUSION Vulnerbility
  • From: hadihadi_zedehal_2006
• rPSA-2008-0157-1 kernel
  • From: rPath Update Announcements
• Denial of Service in Call of Duty 4 1.5
  • From: Luigi Auriemma
• chicomas.2.0.4
  • From: hadikiamarsi
• [ MDVSA-2008:095 ] - Updated OpenOffice.org packages fix vulnerabilities
  • From: security
• Zomplog 3.8.2 XSS Vulnerability
  • From: irancrash
• project alumni v1.0.9 (info.php) SQL Injection Vulnerability
  • From: hadihadi_zedehal_2006
• Lifetype 1.2.7 XSS Vulnerability
  • From: irancrash
• BlackBook v1.0 Multiple XSS Vulnerabilities
  • From: irancrash
• [SECURITY] [DSA 1566-1] New cpio packages fix denial of service
  • From: Steve Kemp
• Re: netOffice Dwins 1.3 Remote code execution.
  • From: luiswang
• php-addressbook v2.0 Multiple Remote Vulnerabilities (LFI/XSS)
  • From: irancrash
• [SECURITY] [DSA 1565-1] New Linux 2.6.18 packages fix several vulnerabilities
  • From: dann frazier
• Team SHATTER Security Advisory: Oracle Database Buffer Overflow in SYS.KUPF$FILE_INT.GET_FULL_FILENAME (DB11)
  • From: Team SHATTER
• Team SHATTER Security Advisory: Oracle Database SQL Injection in SYS.DBMS_CDC_UTILITY.LOCK_CHANGE_SET (DB02)
  • From: Team SHATTER
• vlBook 1.21 (ALL VERSION)
  • From: irancrash
• mjguest 6.7 (ALL VERSION) Xss & Redirection Vuln
  • From: irancrash
• Team SHATTER Security Advisory: Oracle Database Buffer Overflow in SYS.DBMS_AQJMS_INTERNAL (DB15)
  • From: Team SHATTER
• [SECURITY] [DSA 1564-1] New wordpress packages fix several vulnerabilities
  • From: Thijs Kinkhorst
• iDefense Security Advisory 04.30.08: Akamai Download Manager Arbitrary Program Execution Vulnerability
  • From: iDefense Labs
• XSS in AstroCam
  • From: Steffen Wendzel
• Re: R.I.P. rgod
  • From: Christian Kujau
• Re: Re: heanet.dl.sourceforge.net hacked?
  • From: securityfocus . com
• Re: heanet.dl.sourceforge.net hacked?
  • From: Marshall Eubanks
• [SECURITY] [DSA 1563-1] New asterisk packages fix denial of service
  • From: Moritz Muehlenhoff
• Re: heanet.dl.sourceforge.net hacked?
  • From: Rainer Duffner
• Re: heanet.dl.sourceforge.net hacked?
  • From: mirrors
• Re: heanet.dl.sourceforge.net hacked?
  • From: Pieter de Boer
• heanet.dl.sourceforge.net hacked?
  • From: Michael Scheidell
• CFP: Workshop on Open Source Software for Computer and Network Forensics
  • From: Stefano Zanero
• Re: rPSA-2008-0151-1 libpng
  • From: Liran Cohen
• Critical Vulnerability in SNMPc
  • From: NGSSoftware Insight Security Research
• [security bulletin] HPSBMA02331 SSRT080000 rev.1 - HP-UX running WBEM Services, Remote Execution of Arbitrary Code, Gain Extended Privileges
  • From: security-alert
• [ MDVSA-2008:093 ] - Updated vorbis-tools packages fix vulnerabilities
  • From: security
• [ MDVSA-2008:092 ] - Updated gstreamer-plugins-good packages fix vulnerabilities
  • From: security
• Re: R.I.P. rgod
  • From: Christian Kujau
• XSS Attack
  • From: hadikiamarsi
• Re: Yourfreeworld Styleish Text Ads Script
  • From: rohit
• rPSA-2008-0151-1 libpng
  • From: rPath Update Announcements
• SugarCRM Community Edition Local File Disclosure Vulnerability
  • From: roberto . suggi
• [ GLSA 200804-30 ] KDE start_kdeinit: Multiple vulnerabilities
  • From: Matthias Geerdsen
• Re: h2desk helpdesk path disclosure vulnerability
  • From: john
• CORE-2008-0320 - Insufficient argument validation of hooked SSDT functions on multiple Antivirus and Firewalls
  • From: CORE Security Technologies Advisories
• [ECHO_ADV_89$2008] Softbiz Web Host Directory Script (search_result.php host_id) Blind Sql Injection Vulnerability
  • From: erdc
• [ECHO_ADV_88$2008] Prozilla Hosting Index (directory.php cat_id) Blind Sql Injection Vulnerability
  • From: erdc
• [SECURITY] [DSA 1562-1] New iceape packages fix arbitrary code execution
  • From: Moritz Muehlenhoff
• Microsoft SWI blog inaccuracies
  • From: Amit Klein
• Minibb 2.2a XSS Vulnerability
  • From: irancrash
• [SECURITY] [DSA 1561-1] New ldm packages fix information disclosure
  • From: Thijs Kinkhorst
• bug report
  • From: hadikiamarsi
• London DEFCON meet - Thursday 1st May - DC4420
  • From: Major Malfunction
• GroupWise 7.0 mailto: scheme buffer overflow
  • From: jplopezy
• [SECURITY] [DSA 1560-1] New kronolith2 packages fix cross site scripting
  • From: Thijs Kinkhorst
• [SECURITY] [DSA 1556-2] New perl packages fix denial of service
  • From: Florian Weimer
• Re: R.I.P. rgod
  • From: blacklight
• Re: Simple Machines Forum "SMF Shoutbox" Mod Persistent XSS
  • From: pobore
• rPSA-2008-0149-1 idle python
  • From: rPath Update Announcements
• IMF 2008 - 2nd Call for Papers
  • From: Oliver Goebel
• Re: Firefox 3.0 beta 5 crash (Slightly unrelated)
  • From: Skratz0r
• Wordpress 2.5 Cookie Integrity Protection Vulnerability
  • From: Steven J. Murdoch
• Re: Curious vulnerability in Excel 2007
  • From: jplopezy
• GroupWise 7 attached bugs
  • From: jplopezy
• Curious vulnerability in Excel 2007
  • From: jplopezy
• Re: Firefox 3.0 beta 5 crash
  • From: Mauro Faccenda
• [ GLSA 200804-29 ] Comix: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• R.I.P. rgod
  • From: ipsdix
• Lotus expeditor rcplauncher uri handler vulnerability
  • From: Thomas Pollet
• [ MDVSA-2008:091 ] - Updated wireshark packages fix denial of service vulnerabilities
  • From: security
• [SECURITY] [DSA 1558-1] New xulrunner packages fix arbitrary code execution
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 1534-2] New iceape packages fix regression
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 1556-1] New perl packages fix denial of service
  • From: Florian Weimer
• [SECURITY] [DSA 1557-1] New phpmyadmin packages fix several vulnerabilities
  • From: Thijs Kinkhorst
• HPSBGN02333 SSRT080031 rev.1 - HP Software Update HPeDiag Running on Windows, Remote Disclosure of Information and Execution of Arbitrary Code
  • From: security-alert
• A New Class of Vulnerability in Oracle: Lateral SQL Injection
  • From: David Litchfield
• [ GLSA 200804-27 ] SILC: Multiple vulnerabilities
  • From: Tobias Heinlein
• DDIVRT-2008-11 BadBlue uninst.exe DoS
  • From: vulnerabilityresearch
• Trillian 3.1 basic nick crash
  • From: jplopezy
• [ GLSA 200804-28 ] JRockit: Multiple vulnerabilities
  • From: Tobias Heinlein
• Re: xine-lib NES Sound Format Demuxer Buffer Overflow
  • From: Guido Landi
• xine-lib NES Sound Format Demuxer Buffer Overflow
  • From: laurent . gaffie
• [W01-0408] Realtek HD Audio Codec Drivers (Vista) - Local Privilege Escalation
  • From: vulns
• PR07-44: XSS on RSA Authentication Agent login page
  • From: ProCheckUp Research
• PR07-43: Cross-domain redirect on RSA Authentication Agent
  • From: ProCheckUp Research
• Re: NetClassifieds Sql Injection
  • From: laurent . gaffie
• [ GLSA 200804-26 ] Openfire: Denial of Service
  • From: Robert Buchholz
• [ GLSA 200804-25 ] VLC: User-assisted execution of arbitrary code
  • From: Robert Buchholz
• [SECURITY] [DSA 1555-1] New iceweasel packages fix arbitrary code execution
  • From: Moritz Muehlenhoff
• Zune software - arbitrary file overwrite
  • From: info
• NetClassifieds Sql Injection
  • From: noreply
• LayerOne 2008 - Final Pre-Con Update
  • From: Layer One
• Horde Webmail XSS [Aria-Security]
  • From: noreply
• AST-2008-006 - 3-way handshake in IAX2 incomplete
  • From: Security Officer
• Re: Default key algorithm in Thomson and BT Home Hub routers
  • From: ap
• Default key algorithm in Thomson and BT Home Hub routers
  • From: Adrian Pastor
• [SECURITY] [DSA 1554-1] New roundup packages fix cross-site scripting vulnerability
  • From: Noah Meyerhans
• Re: Firefox 3.0 beta 5 crash
  • From: Gianluca Borello
• Firefox 3.0 beta 5 crash
  • From: jplopezy
• Safari 3.1.1 Multiple Vulnerabilities for windows
  • From: jplopezy
• Cross site scripting issues in s9y (CVE-2008-1386, CVE-2008-1387)
  • From: Hanno Böck
• [USN-604-1] Gnumeric vulnerability
  • From: Kees Cook
• Correcting CVEs (was Re: [Full-disclosure] Cross site scripting issues in s9y (CVE-2008-1386, CVE-2008-1387))
  • From: Hanno Böck
• [USN-602-1] Firefox vulnerabilities
  • From: Jamie Strandboge
• Re: Powered by gCards v1.46 SQL
  • From: packet
• [ GLSA 200804-24 ] DBmail: Data disclosure
  • From: Matthias Geerdsen
• Xoops All Version -Articles- Article.PHP (ID) Blind SQL Injection ExpL0it
  • From: crazy_kinq
• [ GLSA 200804-23 ] CUPS: Integer overflow vulnerability
  • From: Matthias Geerdsen
• ANNOUNCE: Security Implications of Windows Access Tokens Whitepaper
  • From: luke . jennings
• Sea-Surfing on the Motorola Surfboard
  • From: th3 . r00k . nospam
• Re: Re: Smf 1.1.4 Remote File Inclusion Vulnerabilities
  • From: douchbag
• Powered by gCards v1.46 SQL
  • From: turkish-warriorr
• IRM Security Advisory : RedDot CMS SQL injection vulnerability
  • From: Mark Crowther
• [SECURITY] [DSA 1553-1] New ikiwiki packages fix cross-site request forgery
  • From: Florian Weimer
• Acidcat CMS Multiple Vulnerabilities
  • From: admin
• [ MDVSA-2008:090 ] - Updated OpenOffice.org packages fix vulnerabilities
  • From: security
• Deciphering the PHP-Nuke Capthca
  • From: Michael . Brooks . SPAM
• SyScan'08 Singapore - Call for Paper
  • From: organiser@xxxxxxxxxx
• Deciphering the Simple Machines Forum audio Captcha
  • From: Michael . Brooks . SPAM
• Token Kidnapping (Microsoft Security Advisory 951306) presentation available
  • From: Cesar
• [SECURITY] [DSA 1552-1] New mplayer packages fix arbitrary code execution
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 1551-1] New python2.4 packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• ANNOUNCE: RFIDIOt-0.1s release (now available for Windows)
  • From: Adam Laurie
• Team SHATTER Security Advisory: IBM DB2 UDB Arbitrary code execution in ADMIN_SP_C/ADMIN_SP_C2 procedures
  • From: Team SHATTER
• [ GLSA 200804-22 ] PowerDNS Recursor: DNS Cache Poisoning
  • From: Robert Buchholz
• Team SHATTER Security Advisory: IBM DB2 UDB Arbitrary file overwrite in SYSPROC.NNSTAT procedure
  • From: Team SHATTER
• Team SHATTER Security Advisory: Multiple DoS in JAR files manipulation procedures
  • From: Team SHATTER
• Wikepage Wiki v.2007-2 Cross-Site Scripting
  • From: darkz . gsa
• [ GLSA 200804-21 ] Adobe Flash Player: Multiple vulnerabilities
  • From: Robert Buchholz
• LightNEasy v.1.2.2 flat Multiple Vulnerabilities
  • From: darkz . gsa
• 5th avenue Shopping Cart SQL Injection
  • From: noreply
• [ GLSA 200804-20 ] Sun JDK/JRE: Multiple vulnerabilities
  • From: Robert Buchholz
• BitTorrent Clients and CSRF
  • From: th3 . r00k . nospam
• [ MDVSA-2008:089 ] - Updated poppler packages fix vulnerability
  • From: security
• [ MDVSA-2008:088 ] - Updated clamav packages fix multiple vulnerabilities
  • From: security
• [ GLSA 200804-19 ] PHP Toolkit: Data disclosure and Denial of Service
  • From: Robert Buchholz
• iDefense Security Advisory 04.17.08: Multiple Vendor OpenOffice QPRO File Parsing Integer Underflow Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 04.17.08: Multiple Vendor OpenOffice QPRO Multiple Heap Overflow Vulnerabilities
  • From: iDefense Labs
• iDefense Security Advisory 04.17.08: Multiple Vendor OpenOffice EMF EMR_BITBLT Record Integer Overflow Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 04.17.08: Multiple Vendor OpenOffice OLE DocumentSummaryInformation Heap Overflow Vulnerability
  • From: iDefense Labs
• [SECURITY] [DSA 1550-1] New suphp packages fix local privilege escalation
  • From: Moritz Muehlenhoff
• Re: [Full-disclosure] Secunia Research: Lotus Notes Folio Flat File Parsing Buffer Overflows
  • From: Juha-Matti Laurio
• [SECURITY] [DSA 1549-1] New clamav packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• Re: BigAnt Server 2.2 PreAuth Remote SEH Overflow Exploit (0day)
  • From: m . memelli
• [USN-603-2] KOffice vulnerability
  • From: Kees Cook
• [USN-603-1] poppler vulnerability
  • From: Kees Cook
• [SECURITY] [DSA 1548-1] New xpdf packages fix arbitrary code exitution
  • From: Devin Carraway
• Announcement - DeepSec Conference 2008, Nov 11-14 2008
  • From: DeepSec Conference
• Microsoft Works 7 WkImgSrv.dll crash POC
  • From: wsn1983
• [security bulletin] HPSBMA02328 SSRT071293 rev.2 - HP OpenView Network Node Manager (OV NNM) Running Apache, Remote Cross Site Scripting (XSS), Denial of Service (DoS), Execute Arbitrary Code
  • From: security-alert
• [security bulletin] HPSBST02329 SSRT080048 rev.1 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS08-018 to MS08-025
  • From: security-alert
• [security bulletin] HPSBMA02133 SSRT061201 rev.8 - HP Oracle for OpenView (OfO) Critical Patch Update
  • From: security-alert
• [ GLSA 200804-18 ] Poppler: User-assisted execution of arbitrary code
  • From: Robert Buchholz
• [ GLSA 200804-17 ] Speex: User-assisted execution of arbitrary code
  • From: Robert Buchholz
• [ GLSA 200804-16 ] rsync: Execution of arbitrary code
  • From: Robert Buchholz
• [SECURITY] [DSA 1547-1] New OpenOffice.org packages fix arbitrary code execution
  • From: Martin Schulze
• [oCERT-2008-004] multiple speex implementations insufficient boundary checks
  • From: Andrea Barisani
• [ MDVSA-2008:087 ] - Updated policykit package fixes format string vulnerability
  • From: security
• FreeBSD Security Advisory FreeBSD-SA-08:05.openssh
  • From: FreeBSD Security Advisories