Bugtraq

• Thread Index

• [ MDKSA-2007:229 ] - Updated phpMyAdmin packages fix multiple vulnerabilities
  • From: security
• Several persistent XSS and CSRF on Wireless-G ADSL Gateway with SpeedBooster (WAG54GS)
  • From: Adrian P
• [ GLSA 200711-32 ] Feynmf: Insecure temporary file creation
  • From: Pierre-Yves Rofes
• Re: Certificate spoofing issue with Mozilla, Konqueror, Safari 2
  • From: Kapetanakis Giannis
• [ GLSA 200711-31 ] Net-SNMP: Denial of Service
  • From: Pierre-Yves Rofes
• [ GLSA 200711-30 ] PCRE: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• [ GLSA 200711-29 ] Samba: Execution of arbitrary code
  • From: Pierre-Yves Rofes
• EEYE: BitDefender Online Scanner 8 Double Decode Heap Overflow
  • From: eEye Advisories
• [ MDKSA-2007:228 ] - Updated cups packages fix vulnerabilities
  • From: security
• [ MDKSA-2007:227 ] - Updated poppler packages fix vulnerabilities
  • From: security
• Banks (Wellsfargo.com) using CDNs to deliver Javascript: enables password theft by anyone compromising or controlling the CDN
  • From: joel
• [security bulletin] HPSBUX02289 SSRT071461 rev.1 - HP-UX Running BIND 8, Remote DNS Cache Poisoning
  • From: security-alert
• Re: Certificate spoofing issue with Mozilla, Konqueror, Safari 2
  • From: Nils Toedtmann
• [ MDKSA-2007:226 ] - Updated kernel packages fix multiple vulnerabilities and bugs
  • From: security
• Re: Certificate spoofing issue with Mozilla, Konqueror, Safari 2
  • From: Michal Zalewski
• Re: Certificate spoofing issue with Mozilla, Konqueror, Safari 2
  • From: Graeme Fowler
• Re: Certificate spoofing issue with Mozilla, Konqueror, Safari 2
  • From: Kapetanakis Giannis
• [ GLSA 200711-28 ] Perl: Buffer overflow
  • From: Pierre-Yves Rofes
• rPSA-2007-0242-1 php5 php5-cgi php5-mysql php5-pear php5-pgsql php5-soap php5-xsl
  • From: rPath Update Announcements
• Certificate spoofing issue with Mozilla, Konqueror, Safari 2
  • From: Nils Toedtmann
• Alcatel OmniPCX Enterprise VoIP Vulnerability
  • From: daniel . stirnimann
• Wordpress Cookie Authentication Vulnerability
  • From: Steven J. Murdoch
• Citrix NetScaler Web Management XSS
  • From: nnposter
• Re: IceBB 1.0rc6 <= Remote SQL Injection
  • From: aeroxteam-nospam
• [Aria-Secutiy Net] Click&BaneX SQL Injection
  • From: no-reply
• [SECURITY] [DSA 1407-1] New cupsys packages fix arbitrary code execution
  • From: Moritz Muehlenhoff
• Crash in LIVE555 Media Server 2007.11.01
  • From: Luigi Auriemma
• [ GLSA 200711-22 ] Poppler, KDE: User-assisted execution of arbitrary code
  • From: Pierre-Yves Rofes
• IceBB 1.0rc6 <= Remote SQL Injection
  • From: aeroxteam-nospam
• [ MDKSA-2007:225 ] - Updated net-snmp packages fix remote denial of service vulnerability
  • From: security
• Belkin Wireless G Router DoS
  • From: r00t
• VigileCMS 1.4 Multiple Remote Vulnerabilities
  • From: info
• [ GLSA 200711-21 ] Bochs: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• [ GLSA 200711-23 ] VMware Workstation and Player: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• [ GLSA 200711-27 ] Link Grammar: User-assisted execution of arbitrary code
  • From: Pierre-Yves Rofes
• [ GLSA 200711-25 ] MySQL: Denial of Service
  • From: Pierre-Yves Rofes
• Re: [Full-disclosure] Microsoft Jet Engine MDB File Parsing Stack Overflow Vulnerability
  • From: jf
• Vulnerability Hash Database - Maillist
  • From: Sowhat
• [ GLSA 200711-26 ] teTeX: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• [ GLSA 200711-24 ] Mozilla Thunderbird: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• [ECHO_ADV_84$2007] ProfileCMS <= 1.0 Remote SQL Injection Vulnerability
  • From: erdc
• Re: Microsoft Jet Engine MDB File Parsing Stack Overflow Vulnerability
  • From: Juha-Matti Laurio
• [ MDKSA-2007:224 ] - Updated samba packages fix vulnerabilities
  • From: security
• [ MDKSA-2007:222 ] - Updated koffice packages fix vulnerabilities
  • From: security
• [ MDKSA-2007:223 ] - Updated pdftohtml packages fix vulnerabilities
  • From: security
• Sciurus Hosting Panel Code &#304;njection
  • From: admin
• security contact for mitsubishi electric?
  • From: Chris Withers
• Re: Microsoft Jet Engine MDB File Parsing Stack Overflow Vulnerability
  • From: CaseArmour.net Security Administrator
• Myspace Clone Script (index.php) Remote File Inclusion Vulnerability
  • From: verys-secret
• Black Lily 2007 (products.php class) Remote SQL Injection Vulnerability
  • From: verys-secret
• net-finity (links.php) Remote SQL Injection Vulnerability
  • From: verys-secret
• RE: Standing Up Against German Laws - Project HayNeedle
  • From: Quark IT - Hilton Travis
• [USN-544-2] Samba regression
  • From: Jamie Strandboge
• rPSA-2007-0241-1 samba samba-swat
  • From: rPath Update Announcements
• JiRos Upload Manager SQL Injection
  • From: no-reply
• Re: Breaking RSA: Totient indirect factorization
  • From: Erick Galinkin
• Re: Breaking RSA: Totient indirect factorization
  • From: Watson Ladd
• Javamail login username and password same email problem
  • From: thetaung
• AhnLab AntiVirus Remote Kernel Memory Corruption
  • From: Sowhat
• Microsoft Jet Engine MDB File Parsing Stack Overflow Vulnerability
  • From: cocoruder
• [ MDKSA-2007:221 ] - Updated kdegraphics packages fix vulnerabilities in kpdf
  • From: security
• [USN-544-1] Samba vulnerabilities
  • From: Jamie Strandboge
• [RISE-2007004] Apple Mac OS X 10.4.x Kernel i386_set_ldt() Integer Overflow Vulnerability
  • From: RISE Security
• [USN-543-1] VMWare vulnerabilities
  • From: Kees Cook
• [ MDKSA-2007:220 ] - Updated gpdf packages fix vulnerabilities
  • From: security
• PR07-26: Persistent XSS on Aruba 800 Mobility Controller's login page
  • From: research
• PR07-02: XSS on Liferay Portal Enterprise 4.1.1 login page ('login' parameter)
  • From: research
• [USN-542-2] KOffice vulnerabilities
  • From: Jamie Strandboge
• Re: Breaking RSA: Totient indirect factorization
  • From: gandlf
• EEYE: Multiple Vulnerabilities In .FLAC File Format and Various Media Applications
  • From: eEye Advisories
• [ MDKSA-2007:219 ] - Updated xpdf packages fix vulnerabilities
  • From: security
• [TKADV2007-001] Mac OS X TIOCSETD IOCTL Kernel Memory Corruption Vulnerability
  • From: Tobias Klein
• Aida-Web Information Exposure
  • From: MC Iglo
• Re: Breaking RSA: Totient indirect factorization
  • From: Clifton Royston
• Re: HPSBUX02287 SSRT071485 rev.1 - HP-UX Running HP Secure Shell, Remotely Gain Extended Privileges
  • From: Nick Boyce
• iDefense Security Advisory 11.14.07: Apple Mac OS X AppleTalk Socket IOCTL Kernel Stack Buffer Overflow Vulnerability
  • From: iDefense Labs
• Secunia Research: Samba "reply_netbios_packet()" Buffer Overflow Vulnerability
  • From: Secunia Research
• [SAMBA] CVE-2007-5398 - Remote Code Execution in Samba's nmbd
  • From: Gerald (Jerry) Carter
• [SAMBA] CVE-2007-4572 - GETDC mailslot processing buffer overrun in nmbd
  • From: Gerald (Jerry) Carter
• [security bulletin] HPSBUX02284 SSRT071483 rev.2 - HP-UX Running Java JRE and JDK, Remote Unauthorized Access
  • From: security-alert
• iDefense Security Advisory 11.14.07: Apple Mac OS X AppleTalk ASP Message Kernel Heap Overflow Vulnerability
  • From: iDefense Labs
• Some hashes for the record
  • From: shadown
• iDefense Security Advisory 11.14.07: Apple Mac OS X Mach Port Inheritance Privilege Escalation Vulnerability
  • From: iDefense Labs
• Re: Breaking RSA: Totient indirect factorization
  • From: Alexander Klimov
• iDefense Security Advisory 11.14.07: Apple Mac OS X AppleTalk mbuf Kernel Heap Overflow Vulnerability
  • From: iDefense Labs
• Re: Standing Up Against German Laws - Project HayNeedle
  • From: Frank Guthausen
• [ GLSA 200711-20 ] Pioneers: Denial of Service
  • From: Pierre-Yves Rofes
• Breaking RSA: Totient indirect factorization
  • From: gandlf
• [ GLSA 200711-19 ] TikiWiki: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• TPTI-07-20: Apple Quicktime Movie Stack Overflow Vulnerability
  • From: DVLabs
• [ GLSA 200711-18 ] Cpio: Buffer overflow
  • From: Pierre-Yves Rofes
• Re: Standing Up Against German Laws - Project HayNeedle
  • From: imipak
• [ GLSA 200711-17 ] Ruby on Rails: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• Re: Standing Up Against German Laws - Project HayNeedle
  • From: Raj Mathur
• [security bulletin] HPSBMA02288 SSRT071465 rev.1 - HP OpenView Operations (OVO) Running on HP-UX and Solaris, Remote Unauthorized Access, Denial of Service (DoS)
  • From: security-alert
• [ MDKSA-2007:218 ] - Updated mono packages fix arbitrary code execution vulnerability
  • From: security
• Six Remote Memory Corruption Vulnerabilities in IBM WebSphere MQ 6.0
  • From: IRM Research
• Konqueror Remote Denial Of Service
  • From: laurent . gaffie
• DocuSafe "Search" SQL Injection
  • From: No-Reply
• Free Forums "search" Sql Injection
  • From: No-Reply
• [USN-542-1] poppler vulnerabilities
  • From: Kees Cook
• Predictable DNS transaction IDs in Microsoft DNS Server
  • From: Alla Bezroutchko
• Aria-Security.Net: MetaCart SQL Injection
  • From: No-Reply
• ExoPHPdesk user profile XSS / profile SQL injection
  • From: Joseph . giron13
• [USN-541-1] Emacs vulnerability
  • From: Kees Cook
• Re: Standing Up Against German Laws - Project HayNeedle
  • From: Stefano Zanero
• Re: Standing Up Against German Laws - Project HayNeedle
  • From: Valdis . Kletnieks
• Re: Standing Up Against German Laws - Project HayNeedle
  • From: johan beisser
• Re: [Full-disclosure] Standing Up Against German Laws - Project HayNeedle
  • From: johan beisser
• [ MDKSA-2007:217 ] - Updated libpng packages fix multiple vulnerabilities
  • From: security
• Re: Standing Up Against German Laws - Project HayNeedle
  • From: Paul Wouters
• iDefense Security Advisory 11.12.07: Novell NetWare Client Local Privilege Escalation Vulnerability
  • From: iDefense Labs
• [USN-540-1] flac vulnerability
  • From: Kees Cook
• Re: [Full-disclosure] Standing Up Against German Laws - Project HayNeedle
  • From: Duncan Simpson
• Re: Standing Up Against German Laws - Project HayNeedle
  • From: Florian Echtler
• Oracle 11g/10g Installation Vulnerability
  • From: David Litchfield
• Re: [Full-disclosure] Standing Up Against German Laws - Project HayNeedle
  • From: Peter Conrad
• PHP <= 5.2.5 Gettext Lib Multiple Denial of service
  • From: laurent . gaffie
• PHP <= 5.2.5 stream_wrapper_register() denial of service
  • From: laurent . gaffie
• After 6 months - fix available for Microsoft DNS cache poisoning attack
  • From: Amit Klein
• [ MDKSA-2007:216 ] - Updated kernel packages fix multiple vulnerabilities and bugs
  • From: security
• Re: Bosdev Multiple vulnerabilities
  • From: sales
• ATC-08 Call for papers (repost)
  • From: atc08
• [ISecAuditors Security Advisories] VTLS.web.gateway cgi is vulnerable to XSS
  • From: ISecAuditors Security Advisories
• PR07-13: Cross-site Scripting / HTML injection on F5 FirePass 4100 SSL VPN 'download_plugin.php3' server-side script
  • From: research
• [ GLSA 200711-16 ] CUPS: Memory corruption
  • From: Pierre-Yves Rofes
• [ MDKSA-2007:204-1 ] - Updated cups packages fix vulnerability
  • From: security
• [ GLSA 200711-15 ] FLAC: Buffer overflow
  • From: Pierre-Yves Rofes
• Re: Standing Up Against German Laws - Project HayNeedle
  • From: johan beisser
• [ GLSA 200711-14 ] Mozilla Firefox, SeaMonkey, XULRunner: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• AutoIndex <= 2.2.2 Cross Site Scripting and Denial of Service
  • From: L4teral
• HPSBUX02287 SSRT071485 rev.1 - HP-UX Running HP Secure Shell, Remotely Gain Extended Privileges
  • From: security-alert
• RFID: Security Briefings
  • From: angelo
• Re: Standing Up Against German Laws - Project HayNeedle
  • From: Matt D. Harris
• Cisco IOS Shellcode
  • From: Research
• FLEA-2007-0067-1 pidgin
  • From: Foresight Linux Essential Announcement Service
• Alice - dns spoofer
  • From: fabio
• FLEA-2007-0065-1 libpng
  • From: Foresight Linux Essential Announcement Service
• FLEA-2007-0069-1 perl
  • From: Foresight Linux Essential Announcement Service
• Re: Standing Up Against German Laws - Project HayNeedle
  • From: johan beisser
• iDefense Security Advisory 11.12.07: WinPcap NPF.SYS bpf_filter_init Arbitrary Array Indexing Vulnerability
  • From: iDefense Labs
• FLEA-2007-0064-1 pcre
  • From: Foresight Linux Essential Announcement Service
• FLEA-2007-0068-1 ruby
  • From: Foresight Linux Essential Announcement Service
• FLEA-2007-0063-1 perl
  • From: Foresight Linux Essential Announcement Service
• PHP-Nuke Module Advertising Blind SQL Injection
  • From: Guns
• CVE-2007-3694: Cross site scripting (XSS) in broadcast machine
  • From: Hanno Böck
• PeopleAggregatory security advisory - re CVE-2007-5631
  • From: phil
• Re: [Full-disclosure] Standing Up Against German Laws - Project HayNeedle
  • From: Jan Newger
• Standing Up Against German Laws - Project HayNeedle
  • From: Paul Sebastian Ziegler
• Re: Re: Simple Machine Forum - Private section/posts/info disclosure
  • From: rx
• Oracle 0-day to get SYSDBA access
  • From: pete
• FLEA-2007-0066-1 ImageMagick
  • From: Foresight Linux Essential Announcement Service
• Eggblog v3.1.0 XSS Vulnerability
  • From: mesut
• [SECURITY] [DSA 1405-2] New zope-cmfplone packages fix regression
  • From: Thijs Kinkhorst
• Aria-Security.Net Research: Rapid Classified HotList Image
  • From: Advisory
• [48Bits Advisory] QuickTime Panorama Sample Atom Heap Overflow
  • From: [48bits] vulndev
• iDefense Security Advisory 11.09.07: AOL AmpX ActiveX Control Multiple Buffer Overflow Vulnerabilities
  • From: iDefense Labs
• [SECURITY] [DSA 1406-1] New horde3 packages fix several vulnerabilities
  • From: Thijs Kinkhorst
• iDefense Security Advisory 11.09.07: IBM Informix Dynamic Server DBLANG Directory Traversal Vulnerability
  • From: iDefense Labs
• SQL injection bug found in TBSource.
  • From: drakomo
• [SECURITY] [DSA 1405-1] New zope-cmfplone packages fix arbitrary code execution
  • From: Thijs Kinkhorst
• Re: Simple Machine Forum - Private section/posts/info disclosure
  • From: Jindrich Kubec
• xoops mylinks module - sql injection
  • From: root
• Re: Simple Machine Forum - Private section/posts/info disclosure
  • From: klynn . securityfocus
• Re: SiteMinder Agent: Cross Site Scripting
  • From: Williams, James K
• [ MDKSA-2007:214 ] - Updated flac packages fix vulnerability
  • From: security
• li-guestbook sql inj
  • From: abc . seo
• Re: Re: SiteMinder Agent: Cross Site Scripting
  • From: overet
• [ MDKSA-2007:215 ] - Updated openldap packages fix vulnerability
  • From: security
• CanSecWest 2008 CFP (deadline Nov 30, conf Mar 26-28) and PacSec Dojo's
  • From: Dragos Ruiu
• [SECURITY] [DSA 1403-1] New phpmyadmin packages fix cross-site scripting
  • From: Thijs Kinkhorst
• AST-2007-024 - Fallacious security advisory spread on the Internet involving buffer overflow in Zaptel's sethdlc application
  • From: The Asterisk Development Team
• [SECURITY] [DSA 1404-1] New gallery2 packages fix privilege escalation
  • From: Thijs Kinkhorst
• [ MDKSA-2007:212 ] - Updated pcre packages fix vulnerability
  • From: security
• [ MDKSA-2007:213 ] - Updated pcre packages fix vulnerability
  • From: security
• Aria-Security.Net Research: Lotfian BROCHURE Management System
  • From: Advisory
• [ MDKSA-2007:211 ] - Updated pcre packages fix vulnerability
  • From: security
• [ GLSA 200711-13 ] 3proxy: Denial of Service
  • From: Pierre-Yves Rofes
• [security bulletin] HPSBUX02285 SSRT071484 rev.1 - HP-UX Running Aries PA Emulator, Local Unauthorized Access
  • From: security-alert
• [ GLSA 200711-11 ] Nagios Plugins: Two buffer overflows
  • From: Pierre-Yves Rofes
• [ GLSA 200711-12 ] Tomboy: User-assisted execution of arbitrary code
  • From: Pierre-Yves Rofes
• Re: SiteMinder Agent: Cross Site Scripting
  • From: securityfocus
• [OpenPKG-SA-2007.023] OpenPKG Security Advisory (perl)
  • From: OpenPKG GmbH
• Simple Machine Forum - Private section/posts/info disclosure
  • From: h3llcode
• Aria-Security.Net Research: Request For Travel Sql Injection
  • From: Advisory
• Re: iDefense Security Advisory 11.07.07: Oracle 10g R2 PITRIG_DROPMETADATA Buffer Overflow Vulnerability
  • From: buzzy
• [ GLSA 200711-10 ] Mono: Buffer overflow
  • From: Pierre-Yves Rofes
• [ GLSA 200711-09 ] MadWifi: Denial of Service
  • From: Pierre-Yves Rofes
• iDefense Security Advisory 11.07.07: Oracle 10g R2 PITRIG_DROPMETADATA Buffer Overflow Vulnerability
  • From: iDefense Labs
• [SECURITY] [DSA 1402-1] New gforge packages fix several vulnerabilities
  • From: Steve Kemp
• [ GLSA 200711-08 ] libpng: Multiple Denials of Service
  • From: Pierre-Yves Rofes
• [ GLSA 200711-07 ] Python: User-assisted execution of arbitrary code
  • From: Pierre-Yves Rofes
• [ GLSA 200711-06 ] Apache: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• Secunia Research: Xpdf "Stream.cc" Multiple Vulnerabilities
  • From: Secunia Research
• Secunia Research: AbiWord Link Grammar "separate_sentence()" Buffer Overflow
  • From: Secunia Research
• Secunia Research: Link Grammar "separate_sentence()" Buffer Overflow
  • From: Secunia Research
• SiteMinder Agent: Cross Site Scripting
  • From: Giuseppe Gottardi
• [ GLSA 200711-05 ] SiteBar: Multiple issues
  • From: Pierre-Yves Rofes
• [ MDKSA-2007:210 ] - Updated xfs package prevents arbitrary code execution vulnerabilities
  • From: security
• [ GLSA 200711-04 ] Evolution: User-assisted remote execution of arbitrary code
  • From: Pierre-Yves Rofes
• [SECURITY] [DSA 1400-1] New perl packages fix arbitrary code execution
  • From: Florian Weimer
• MyWebFTP Password Disclosure
  • From: [NO-REPLY]
• iDefense Security Advisory 11.06.07: Microsoft DebugView Privilege Escalation Vulnerability
  • From: iDefense Labs
• rPSA-2007-0231-1 pcre
  • From: rPath Update Announcements
• Re: IM upgrade automated social engineering attack
  • From: Dragos Ruiu
• PhpNuke (add-on) MS TopSites Edit Exploit And Html Injection
  • From: Guns
• Cypress BX script backdoored?
  • From: Chris
• Re: SMF .htaccess bypass
  • From: anuj tenani
• IDMOS v1.0 Alpha Multiple RFI Vulnerability
  • From: Guns
• Re: SMF .htaccess bypass
  • From: Matt D. Harris
• SMF .htaccess bypass
  • From: h3llcode
• Re: IM upgrade automated social engineering attack
  • From: Roman Shirokov
• [CVE-2007-5741] Plone: statusmessages and linkintegrity unsafe network data hotfix
  • From: mj
• [ MDKSA-2007:209 ] - Updated netpbm packages fix vulnerability
  • From: security
• [USN-539-1] CUPS vulnerability
  • From: Kees Cook
• rPSA-2007-0232-1 perl
  • From: rPath Update Announcements
• [ MDKSA-2007:208 ] - Updated ghostscript packages fix vulnerability
  • From: security
• [ MDKSA-2007:207 ] - Updated perl packages fix vulnerability
  • From: security
• [SECURITY] [DSA 1401-1] New iceape packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• ZDI-07-067: Apple QuickTime PICT File Poly Opcodes Heap Corruption Vulnerability
  • From: zdi-disclosures
• ZDI-07-066: Apple Quicktime PICT File PackBitsRgn Parsing Heap Corruption Vulnerability
  • From: zdi-disclosures
• ZDI-07-068: Apple QuickTime Uncompressedfile Opcode Stack Overflow Vulnerability
  • From: zdi-disclosures
• ZDI-07-065: Apple QuickTime Color Table RGB Parsing Heap Corruption Vulnerability
  • From: zdi-disclosures
• iDefense Security Advisory 11.05.07: Apple QuickTime Panorama Sample Atom Heap Buffer Overflow Vulnerability
  • From: iDefense Labs
• [SECURITY] [DSA 1399-1] New pcre3 packages fix arbitrary code execution
  • From: Florian Weimer
• Leopard's firewall damages Skype and WoW
  • From: Juergen Schmidt
• Re: Comments re ISC's announcement on bind9 security
  • From: Tim
• iDefense Security Advisory 11.02.07: Sun Microsystems Solaris srsexec Format String Vulnerability
  • From: iDefense Labs
• [Tool] sqlmap: a blind SQL injection tool (release 0.5)
  • From: Bernardo Damele
• [SECURITY] [DSA 1398-1] New perdition packages fix arbitrary code execution
  • From: Noah Meyerhans
• JBC Explorer <= V7.20 RC 1 Remote Code Execution Exploit
  • From: gmdarkfig
• Skalinks <= 1_5 Cross Site Request Forgery Add Admin
  • From: djvincy
• [SECURITY] [DSA 1397-1] New mono packages fix integer overflow
  • From: Moritz Muehlenhoff
• [ MDKSA-2007:206 ] - Updated pwlib packages fix vulnerability
  • From: security
• phphelpdesk Multiple vulnerabilities
  • From: Joseph . giron13
• RE: mac trojan in-the-wild
  • From: Thor (Hammer of God)
• [ MDKSA-2007:205 ] - Updated opal packages fix vulnerability
  • From: security
• Re: [UPH-07-03] Firefly Media Server remote format string vulnerability
  • From: nnp
• DoS Exploit for DHCPd bug (Bugtraq ID 25984 ; CVE-2007-5365)
  • From: Roman Medina-Heigl Hernandez
• RE: mac trojan in-the-wild
  • From: Gadi Evron
• RE: mac trojan in-the-wild
  • From: Roger A. Grimes
• [ GLSA 200711-02 ] OpenSSH: Security bypass
  • From: Pierre-Yves Rofes
• Re: [Full-disclosure] mac trojan in-the-wild
  • From: Paul Schmehl
• [UPH-07-01] Firefly Media Server DoS
  • From: nnp
• Re: [UPH-07-01] Firefly Media Server DoS
  • From: nnp
• the heart of the problem [was: RE: mac trojan in-the-wild]
  • From: Gadi Evron
• [UPH-07-02] Firefly Media Server DoS
  • From: nnp
• [UPH-07-03] Firefly Media Server remote format string vulnerability
  • From: nnp
• Re: [Full-disclosure] mac trojan in-the-wild
  • From: Peter Besenbruch
• RE: mac trojan in-the-wild
  • From: Jim Harrison
• Re: mac trojan in-the-wild
  • From: Nick FitzGerald
• RE: mac trojan in-the-wild
  • From: Roger A. Grimes
• Re: mac trojan in-the-wild
  • From: Robert McArdle
• Re: [Full-disclosure] mac trojan in-the-wild
  • From: Peter Besenbruch
• RE: mac trojan in-the-wild
  • From: Memisyazici, Aras
• Re: [botnets] re MAC trojan (fwd)
  • From: Gadi Evron
• Re: mac trojan in-the-wild
  • From: nnp
• [USN-537-2] Compiz vulnerability
  • From: Kees Cook
• Re: Comments re ISC's announcement on bind9 security
  • From: Shane Kerr
• Re: Comments re ISC's announcement on bind9 security
  • From: Tim
• Re: Comments re ISC's announcement on bind9 security
  • From: Shane Kerr
• Scribe <= 2.0 Remote PHP Code Execution
  • From: kingoftheworld92
• Secunia Research: ACDSee Products Image and Archive Plug-ins Buffer Overflows
  • From: Secunia Research
• [ GLSA 200711-03 ] Gallery: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• IM upgrade automated social engineering attack
  • From: Dragos Ruiu
• [ GLSA 200711-01 ] gFTP: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• RE: Cryptome: NSA has access to Windows Mobile smartphones
  • From: Kurt Dillard
• RE: mac trojan in-the-wild
  • From: Alex Eckelberry
• RE: mac trojan in-the-wild
  • From: Alex Eckelberry
• ZDI-07-063: RealPlayer RA Field Size File Processing Heap Oveflow Vulnerability
  • From: zdi-disclosures
• Re: Comments re ISC's announcement on bind9 security
  • From: Tim
• RE: mac trojan in-the-wild
  • From: Thor (Hammer of God)
• [ MDKSA-2007:204 ] - Updated cups packages fix vulnerability
  • From: security
• Re: mac trojan in-the-wild
  • From: Matthew Leeds
• [ MDKSA-2007:203 ] - Updated xen packages fix multiple vulnerabilities
  • From: security
• Re: Comments re ISC's announcement on bind9 security
  • From: Theo de Raadt
• Re: Re: Comments re ISC's announcement on bind9 security
  • From: ntn
• Re: Airkiosk/formlib application is XSS vuln
  • From: Raymond Pete
• Two XSS on Blue Coat ProxySG Management Console
  • From: research
• Cryptome: NSA has access to Windows Mobile smartphones
  • From: Juha-Matti Laurio
• Re: Airkiosk/formlib application is XSS vuln
  • From: skien
• Re: Comments re ISC's announcement on bind9 security
  • From: Network Protocol Security
• ZDI-07-062: RealNetworks RealPlayer PLS File Memory Corruption Vulnerability
  • From: zdi-disclosures
• SEC Consult SA-20071101-0 :: Multiple Vulnerabilities in SonicWALL SSL-VPN Client
  • From: Bernhard Mueller
• mac trojan in-the-wild
  • From: Gadi Evron
• (tool announce) Orizon v0.50 announce
  • From: Paolo Perego
• ZDI-07-061: RealNetworks RealPlayer SWF Processing Remote Code Execution Vulnerability
  • From: zdi-disclosures
• ZDI-07-064: Novell Client Trust Heap Overflow Vulnerability
  • From: zdi-disclosures
• Synergiser <= 1.2 RC1 Local File Inclusion & Full path disclosure
  • From: kingoftheworld92
• sBlog 0.7.3 Beta Cross Site Request Forgery
  • From: Guns
• ZDI-07-060: HP OpenView Radia Integration Server File System Exposure Vulnerability
  • From: zdi-disclosures
• ZDI-07-059: Verity KeyView SDK Multiple File Format Parsing Vulnerabilities
  • From: zdi-disclosures
• Re: Comments re ISC's announcement on bind9 security
  • From: Henrik Langos
• CFP: International workshop on Secure Software Engineering - Deadline extended!
  • From: secse08
• ZDI-07-058: Oracle E-Business Suite SQL Injection Vulnerability
  • From: zdi-disclosures
• rPSA-2007-0227-1 cups
  • From: rPath Update Announcements
• (tool announcement) bunny the fuzzer
  • From: Michal Zalewski
• [security bulletin] HPSBMA02238 SSRT061260 rev.2 - HP OpenView Reporter Running Shared Trace Service, Remote Arbitrary Code Execution
  • From: security-alert
• [security bulletin] HPSBMA02237 SSRT061260 rev.2 - HP OpenView Performance Agent (OVPA) Running Shared Trace Service, Remote Arbitrary Code Execution
  • From: security-alert
• [security bulletin] HPSBMA02236 SSRT061260 rev.2 - HP OpenView Performance Manager (OVPM) Running Shared Trace Service on HP-UX, Solaris, and Windows, Remote Arbitrary Code Execution
  • From: security-alert
• iDefense Security Advisory 10.31.07: Symantec Altiris Deployment Solution TFTP/MTFTP Service Directory Traversal Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 10.31.07: Macrovision InstallShield Update Service ActiveX Unsafe Method Vulnerability
  • From: iDefense Labs
• Re: Comments re ISC's announcement on bind9 security
  • From: Shane Kerr
• Re: [gentoo-announce] [ GLSA 200710-30 ] OpenSSL: Remote execution of arbitrary code
  • From: Steffan Baron
• SEC Consult SA-20071031-0 :: Perdition IMAP Proxy Format String Vulnerability
  • From: Bernhard Mueller
• Secunia Research: McAfee E-Business Server Auth Packet Handling Buffer Overflow
  • From: Secunia Research
• Secunia Research: CUPS IPP Tags Memory Corruption Vulnerability
  • From: Secunia Research
• In Memoriam: Jun-ichiro Hagino
  • From: Dragos Ruiu
• [ GLSA 200710-30 ] OpenSSL: Remote execution of arbitrary code
  • From: Pierre-Yves Rofes
• ILIAS <= 3.8.3 Cross Site Scripting
  • From: L4teral
• [ GLSA 200710-31 ] Opera: Multiple vulnerabilities
  • From: Raphael Marichez
• Re: Firefox / IE6 crash on javascript nested loops
  • From: Jan Heisterkamp
• iDefense Security Advisory 10.30.07: IBM AIX ftp domacro Parameter Buffer Overflow Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 10.30.07: IBM AIX bellmail Stack Buffer Overflow Vulnerability
  • From: iDefense Labs
• Firefox / IE6 crash on javascript nested loops
  • From: thabob
• iDefense Security Advisory 10.30.07: IBM AIX lqueryvg Stack Buffer Overflow Vulnerability
  • From: iDefense Labs
• DeepSec 2007 Registration: hurry up, seats are filling fast
  • From: Stefano Zanero
• iDefense Security Advisory 10.30.07: IBM AIX lquerypv Stack Buffer Overflow Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 10.30.07: IBM AIX dig dns_name_fromtext Integer Underflow Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 10.30.07: IBM AIX 5.2 crontab BSS Buffer Overflow Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 10.30.07: IBM AIX swcons Local Arbitrary File Access Vulnerability
  • From: iDefense Labs
• Django 0.96 (stable) Admin Panel CSRF
  • From: J. Carlos Nieto
• Secunia Research: IPSwitch IMail Server IMail Client Buffer Overflow
  • From: Secunia Research
• Siebel Security Basics
  • From: Jonathan Katz
• RFIDIOt release - version 0.1q
  • From: Adam Laurie
• Airkiosk/formlib application is XSS vuln
  • From: skienlab
• Re: Holes in the firewall of Mac OS X Leopard
  • From: Juergen Schmidt
• Re: Holes in the firewall of Mac OS X Leopard
  • From: Brandon S. Allbery KF8NH
• Holes in the firewall of Mac OS X Leopard
  • From: Juergen Schmidt
• Memory overwrites in JVM via malformed TrueType font
  • From: NGSSoftware Insight Security Research
• Re: Windows binary of "GSview 4.8" contain vulnerable zlib (CAN-2005-2096)
  • From: Stefan Kanthak
• Untrusted Java applet can connect to localhost
  • From: NGSSoftware Insight Security Research
• Windows binary of "Virtual Floppy Drive 2.1" contains vulnerable zlib (CAN-2005-2096)
  • From: Stefan Kanthak
• Heap overflow in RealPlayer ID3 tag parser
  • From: NGSSoftware Insight Security Research
• Comments re ISC's announcement on bind9 security
  • From: Network Protocol Security
• rPSA-2007-0225-2 firefox thunderbird
  • From: rPath Update Announcements
• [SECURITY] [DSA 1388-3] New dhcp packages fix arbitrary code execution
  • From: Noah Meyerhans
• SAXON version 5.4 SQL Injection Vulnerability
  • From: securityresearch
• SAXON version 5.4 Multiple Path Disclosure Vulnerabilities
  • From: securityresearch
• Secunia Research: IBM Tivoli Storage Manager Client CAD Service Script Insertion
  • From: Secunia Research
• Security Briefings
  • From: angelo
• Omnistar Live Software Cross-Site Scripting Vulrnability
  • From: DoZ
• FLEA-2007-0062-1 firefox
  • From: Foresight Linux Essential Announcement Service
• FLEA-2007-0061-1 sun-jre sun-jdk
  • From: Foresight Linux Essential Announcement Service
• How to subvert Oracle Database Vault
  • From: Joxean Koret
• Team SHATTER Alert: Oracle Database Buffer overflow vulnerability in procedure DBMS_AQADM_SYS.DBLINK_INFO
  • From: Team SHATTER
• Final Call for Papers for Security Track at ApacheCon Europe 2008
  • From: Lars Eilebrecht
• SAXON version 5.4 XSS Attack Vulnerability
  • From: securityresearch
• Team SHATTER Alert: Oracle Database Buffer overflow vulnerability in function MDSYS.SDO_CS.TRANSFORM
  • From: Team SHATTER
• AGTC-Membership system v1.1a (adduser) Remote Add Admin Exploit
  • From: Guns
• Webroot Desktop Firewall <=5.5.10.20 DNS recursion
  • From: komarov
• Advisory SE-2007-01: TikiWiki Remote PHP Code Evaluation Vulnerability
  • From: Stefan Esser
• [waraxe-2007-SA#059] - XSS in WordPress 2.3
  • From: come2waraxe
• teatro 1.6 ( basePath ) Remote File Include Vulnerability
  • From: alkomandoz-hacker
• Smart-Shop Shopping Cart Cross-Site Scripting Vulrnability
  • From: DoZ
• [SECURITY] [DSA 1396-1] New iceweasel packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• rPSA-2007-0225-1 firefox
  • From: rPath Update Announcements
• Re: Novell OpenSUSE SWAMP multiple XSS
  • From: test
• RealNetworks RealPlayer/RealOne Player/Helix Player Remote Memory Corruption
  • From: Piotr Bania
• FLEA-2007-0060-1 initscripts
  • From: Foresight Linux Essential Announcement Service
• Micro Login System v1.0 (userpwd.txt) Password Disclosure Vulnerability
  • From: Guns
• RealNetworks RealPlayer/RealOne Player/Helix Player Remote Heap Corruption
  • From: Piotr Bania
• [USN-538-1] libpng vulnerabilities
  • From: Kees Cook
• [ GLSA 200710-28 ] Qt: Buffer overflow
  • From: Raphael Marichez
• [Trick] VigileCMS All Versions DataMining Remote Hash Disclosure
  • From: kingoftheworld92
• [ GLSA 200710-29 ] Sylpheed, Claws Mail: User-assisted remote execution of arbitrary code
  • From: Raphael Marichez
• Multi Host Forum Pro phpbb & ipb Multiple Sql Injection
  • From: kingoftheworld92
• TikiWiki <= 1.9.8.1 Cross Site Scripting / Local File Inclusion
  • From: L4teral
• IRM Discover More Vulnerabilities in Cisco IOS
  • From: Andy Davis
• usd250 helpdesk XSS vulnerabily.
  • From: Joseph . giron13
• Directory traversal flaw in shttp
  • From: digineo Advisories
• iDefense Security Advisory 10.25.07: Trend Micro Tmxpflt.sys IOCTL 0xa0284403 Buffer Overflow Vulnerability
  • From: iDefense Labs
• [PoC] DNS Recursion bandwidth amplification
  • From: Shadow
• i-Gallery 3.4 bug crack password!
  • From: hackerbinhphuoc
• First ever ModSecurity public training at OWASP/WASC conf in SJ
  • From: Ofer Shezaf
• Re: Re: RE: playing for fun with <=IE7
  • From: laurent . gaffie
• Re: A-Cart SQL Injection And Cross-Site Scripting
  • From: laurent . gaffie
• rPSA-2007-0221-1 php php-mysql php-pgsql
  • From: rPath Update Announcements
• [SECURITY] [DSA 1395-1] New xen-utils packages fix file truncation
  • From: Steve Kemp
• HPSBMA02133 SSRT061201 rev.6 - HP Oracle for OpenView (OfO) Critical Patch Update
  • From: security-alert
• Flatnuke3 Remote Cookie Manipoulation / Privilege Escalation
  • From: kingoftheworld92
• [SECURITY] [DSA 1389-2] New zoph packages fix SQL injection
  • From: Thijs Kinkhorst
• [ GLSA 200710-27 ] ImageMagick: Multiple vulnerabilities
  • From: Raphael Marichez
• [ GLSA 200710-26 ] HPLIP: Privilege escalation
  • From: Raphael Marichez
• [ GLSA 200710-25 ] MLDonkey: Privilege escalation
  • From: Raphael Marichez
• iDefense Security Advisory 10.23.07: IBM Lotus Notes Client TagAttributeListCopy Buffer Overflow Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 10.23.07: IBM Lotus Domino IMAP Buffer Overflow Vulnerability
  • From: iDefense Labs
• OSI CODES - PHP Live! Remote File Inclusion
  • From: [ NO REPLY ]
• Bosdev Multiple vulnerabilities
  • From: Joseph . giron13
• Novell OpenSUSE SWAMP multiple XSS
  • From: morin . josh
• [GS07-02] RSA Keon Multiple Cross-Site Scripting Vulnerabilities
  • From: Fatih Ozavci
• rPSA-2007-0222-1 cpio tar
  • From: rPath Update Announcements
• [Aria-Security.Net] CodeWidgets.Com Online Event Registration Multiple login SQL Injection
  • From: [ NO REPLY ]
• Aleris Software Systems Web Publisher Calendar SQL injection
  • From: Joseph . giron13
• HPSBMA02279 SSRT071298 rev.1 - HP OpenView Configuration Management (CM) Infrastructure (Radia) and Client Configuration Manager (CCM) Running httpd.tkd, Remote Unauthorized Access to Data
  • From: security-alert
• Aria-Security.Net [Web based alpha tabbed address book SQL Injection]
  • From: [ NO REPLY ]
• [SECURITY] [DSA 1394-1] New reprepro packages fix authentication bypass
  • From: Thijs Kinkhorst
• [USN-537-1] gnome-screensaver vulnerability
  • From: Kees Cook
• [USN-536-1] Thunderbird vulnerabilities
  • From: Kees Cook
• [Vulz] PHP Basic Multiple Vulnerabilities by Xcross87 & Alucar
  • From: pete.houston.17187
• [USN-531-2] dhcp vulnerability
  • From: Kees Cook
• [SECURITY] [DSA 1372-2] New ktorrent packages fix directory traversal
  • From: Steve Kemp
• 3proxy 0.5.3j released (bugfix)
  • From: 3APA3A
• [SECURITY] [DSA 1393-1] New xfce4-terminal packages fix arbitrary command execution
  • From: Steve Kemp
• SYMSA-2007-013: Lotus Notes Memory Mapped Files Vulnerability
  • From: research
• [Vulz] PHP Basic Multiple Vulnerabilities by Xcross87 & Alucar
  • From: pete . houston . 17187
• Korean GHBoard Multiple Vulnerabilities by Xcross87
  • From: pete . houston . 17187
• [ MDKSA-2007:202 ] - Updated Firefox packages fix multiple vulnerabilities
  • From: security
• [Vulz] eFileMan 7.x Multiple Vulnerabilities by Xcross87
  • From: pete . houston . 17187
• [Vulz] eLouai's Download Script Remote File Download Vulnerability
  • From: pete . houston . 17187
• [Vulz] Japanese PHP Gallery Hosting File Upload Vulz
  • From: pete . houston . 17187
• [Vulz] Seeblick 1.0 Beta File Upload Vulz
  • From: pete . houston . 17187
• SYMSA-2007-012: Microsoft Windows CE IGMP Denial of Service
  • From: research
• [vuln.sg] IBM Lotus Notes Attachment Viewer Buffer Overflow Vulnerabilities
  • From: vulnpost-remove
• Airscanner Mobile Security Advisory #07101401: Mobile-spy Victim/User Phone/SMS/URL Log Spoofing and Persistent XSS Injection
  • From: Seth Fogie
• [ GLSA 200710-24 ] OpenOffice.org: Heap-based buffer overflow
  • From: Raphael Marichez
• CFP for HITBSecConf2008 - Dubai now open
  • From: Praburaajan
• [USN-535-1] Firefox vulnerabilities
  • From: Kees Cook
• [ MDKSA-2007:201 ] - Updated hplip packages fix vulnerabilities
  • From: security
• [USN-501-2] Ghostscript vulnerability
  • From: Kees Cook
• Corsaire Security Advisory - Citrix Access Gateway session ID disclosure issue
  • From: advisories
• [ GLSA 200710-23 ] Star: Directory traversal vulnerability
  • From: Raphael Marichez
• Camino release 1.5.2 fixes several vulnerabilities
  • From: Juha-Matti Laurio
• Hackish XSS in shoutbox/blocco.php
  • From: deme
• [TOOL] w3af - Web Application Attack and Audit Framework
  • From: Andres Riancho
• [USN-531-1] dhcp vulnerability
  • From: Kees Cook
• Jeebles Directory Local File Inclusion
  • From: hack2prison
• simple dns rebinding protection with dnsmasq
  • From: Collin R. Mulliner
• Folder Access bypass
  • From: hack2prison
• [USN-533-1] util-linux vulnerability
  • From: Kees Cook
• Cracking the iPhone (5 article series)
  • From: H D Moore
• [USN-534-1] OpenSSL vulnerability
  • From: Kees Cook
• [USN-532-1] nagios-plugins vulnerability
  • From: Kees Cook
• [ELEYTT] Public Advisory 20-10-2007
  • From: Michal Bucko
• Simple PHP Blog (sphpblog) <= 0.5.1 Multiple Vulnerabilities
  • From: gmdarkfig
• [Aria-Security.Net] dmcms.0.7.0 SQL Injection
  • From: [No Reply]
• [ GLSA 200710-22 ] TRAMP: Insecure temporary file creation
  • From: Raphael Marichez
• PacSec 2007 Agenda (Tokyo 11-29/30)
  • From: Dragos Ruiu
• Re: Windows binary of "GSview 4.8" contain vulnerable zlib (CAN-2005-2096)
  • From: Stefan Kanthak
• [ GLSA 200710-21 ] TikiWiki: Arbitrary command execution
  • From: Raphael Marichez
• ReloadCMS Vulnerable
  • From: sekuru
• Simple Machines Forum multiple sql injection flaws with exploit code.
  • From: th3 . r00k . spammenot
• Re: Windows binary of "GSview 4.8" contain vulnerable zlib (CAN-2005-2096)
  • From: farion42
• [SECURITY] [DSA 1392-1] New xulrunner packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• [Aria-Security.Net] SearchSimon Lite Cross-Site Scripting Vuln.
  • From: [ NO REPLY ]
• [SECURITY] [DSA 1391-1] New icedove packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• [CAID 35754]: CA Host-Based Intrusion Prevention System (CA HIPS) Server Vulnerability
  • From: Williams, James K
• A-Cart SQL Injection And Cross-Site Scripting
  • From: [ NO REPLY ]
• [SECURITY] [DSA 1390-1] New t1lib packages fix arbitrary code execution
  • From: Noah Meyerhans
• rPSA-2007-0220-1 ImageMagick
  • From: rPath Update Announcements
• [ GLSA 200710-20 ] PDFKit, ImageKits: Buffer overflow
  • From: Raphael Marichez
• [ MDKSA-2007:200 ] - Updated tk packages fix vulnerabilities
  • From: security
• S21SEC-038-en: Alcatel Omnivista 4760 Cross-Site Scripting
  • From: S21sec Labs
• [ GLSA 200710-19 ] The Sleuth Kit: Integer underflow
  • From: Raphael Marichez
• [ GLSA 200710-18 ] util-linux: Local privilege escalation
  • From: Raphael Marichez
• Official Windows binaries of "curl" contain vulnerable zlib 1.2.2 (CAN-2005-2096)
  • From: Stefan Kanthak
• Serious holes affecting SiteBar 3.3.8
  • From: Tim Brown
• rPSA-2007-0219-1 libpng
  • From: rPath Update Announcements
• Softwin's anti-virus BitDefender contains vulnerable zlib (CA-2007-07)
  • From: Stefan Kanthak
• Windows binary of "GSview 4.8" contain vulnerable zlib (CAN-2005-2096)
  • From: Stefan Kanthak
• [SECURITY] [DSA 1389-1] New zoph packages fix SQL injection
  • From: Moritz Muehlenhoff
• Re[2]: [Full-disclosure] The Death of Defence in Depth ? - An invitation to Hack.lu
  • From: Thierry Zoller
• Re: Multiple CSRF in SimplePHPBlog
  • From: Hanno Böck
• Re: SSH attacks - anyone else seen these?
  • From: Tim
• CFP C H A S E - 2 0 0 7 Lahore Pakistan
  • From: chase
• [CORRECTED] Microsoft Windows XP SP2/2003 - Macrovision SecDrv.sys privilege escalation (0day)
  • From: Reversemode
• [security bulletin] HPSBMA02274 SSRT071445 rev.2 - HP System Management Homepage (SMH) for HP-UX, Remote Cross Site Scripting (XSS)
  • From: security-alert
• [security bulletin] HPSBUX02273 SSRT071476 rev.2 - HP-UX Running Apache, Remote Unauthorized Denial of Service (DoS)
  • From: security-alert
• [SECURITY] [DSA 1388-1] New dhcp packages fix arbitrary code execution
  • From: Steve Kemp
• Nortel Telephony Server Denial of Service
  • From: daniel . stirnimann
• Latest web hacking incidents
  • From: Ofer Shezaf
• Nortel IP Phone forced re-authentication
  • From: daniel . stirnimann
• Nortel IP Phone Flooding Denial of Service
  • From: daniel . stirniman
• Nortel IP Phone Surveillance Mode
  • From: daniel . stirnimann
• Nortel UNIStim IP Softphone Buffer-Overflow
  • From: daniel . stirnimann
• Microsoft Windows XP/2003 Macrovision SecDrv.sys privilege escalation (0day)
  • From: Reversemode
• SYMSA-2007-011: Microsoft WM5 PocketPC Phone Ed SMS Handler Issue
  • From: research
• [ MDKSA-2007:199 ] - Updated phpMyAdmin packages fix multiple vulnerabilities
  • From: security
• Re: SSH attacks - anyone else seen these?
  • From: pand0ra
• SQL Injection Flaw in Oracle Workspace Manager
  • From: David Litchfield
• Re: Netgear FVG318 is vunerable to DOS attack
  • From: NetGear
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco PIX and ASA Appliances
  • From: Cisco Systems Product Security Incident Response Team
• Re: SSH attacks - anyone else seen these?
  • From: James Lay
• Cisco Security Advisory: Multiple Vulnerabilities in Firewall Services Module
  • From: Cisco Systems Product Security Incident Response Team
• Re: Third-party patch for CVE-2007-3896, UPDATE NOW
  • From: KJK::Hyperion
• Cisco Security Advisory: Cisco Unified Communications Web-based Management Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Re: RE: CheckPoint Secure Platform Multiple Buffer Overflows
  • From: hvazquez
• Oracle audit issue with XMLDB ftp service
  • From: NGSSoftware Insight Security Research
• AST-2007-023 - SQL Injection Vulnerabilty in cdr_addon_mysql
  • From: Asterisk Security Team
• Oracle RDBMS TNS Data packet DoS
  • From: NGSSoftware Insight Security Research
• Multiple SQL Injection Flaws in Oracle CTX_DOC package
  • From: NGSSoftware Insight Security Research
• Oracle TNS Listener DoS and/or remote memory inspection
  • From: NGSSoftware Insight Security Research
• Multiple CSRF in SimplePHPBlog
  • From: deme
• [ GLSA 200710-17 ] Balsa: Buffer overflow
  • From: Raphael Marichez
• [ MDKSA-2007:195 ] - Updated kernel packages fix multiple vulnerabilities and bugs
  • From: security
• IRM Vendor Alerts: Six critical remote vulnerabilities in TIBCO SmartPGM FX
  • From: Andy Davis
• Re: SSH attacks - anyone else seen these?
  • From: Jose Nazario
• Re: SSH attacks - anyone else seen these?
  • From: Mark R. Bowyer
• Re: SSH attacks - anyone else seen these?
  • From: Gayathri Swaminathan
• RE: Cisco PSIRT response on IRM Demonstrates Multiple Cisco IOS Exploitation Techniques
  • From: Andy Davis
• [security bulletin] HPSBUX02277 SSRT071453 rev.1 - HP-UX Running OpenSSL, Local Denial of Service (DoS)
  • From: security-alert
• [security bulletin] HPSBTU02276 SSRT071472 rev.1 - HP Tru64 UNIX Running Apache Tomcat, Remote Unauthorized Access, Remote Denial of Service (DoS)
  • From: security-alert
• [security bulletin] HPSBST02280 SSRT071480 rev.1 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS07-055 to MS07-060
  • From: security-alert
• [ MDKSA-2007:197 ] - Updated tar packages prevent buffer overflow
  • From: security
• [ MDKSA-2007:196 ] - Updated kernel packages fix multiple vulnerabilities and bugs
  • From: security
• [security bulletin] HPSBMA02230 SSRT071436 rev.2 - HP Select Identity, Remote Unauthorized Access
  • From: security-alert
• SSH attacks - anyone else seen these?
  • From: Tim
• Secunia Research: IrfanView Palette File Importing Buffer Overflow Vulnerability
  • From: Secunia Research
• [ MDKSA-2007:198 ] - Updated util-linux packages fix vulnerability
  • From: security
• WWWISIS <= 7.1 (IsisScript) Multiple Vulnerabilities
  • From: jose luis góngora fernández
• FW: [Dailydave] Canada's Response to Black Hat - SecTor 2007
  • From: Taylor, Gord
• RE: playing for fun with <=IE7
  • From: avivra
• about phpMyAdmin setup.php XSS vulnerability
  • From: Marc Delisle
• CVE-2007-4600 - Mathcad Protect Worksheet Vulnerability
  • From: bugtraq
• Re: RE: playing for fun with <=IE7
  • From: jason . gerfen
• HTML Injection Vuln in nssboard
  • From: kcghost
• [ GLSA 200710-15 ] KDM: Local privilege escalation
  • From: Pierre-Yves Rofes
• eXtremail(ly easy) remote roots
  • From: mu-b
• [SECURITY] [DSA 1387-1] New librpcsecgss packages fix arbitrary code execution
  • From: Florian Weimer
• Xcomputer - Lang Parameter Cross-Site Scripting Vulnerability
  • From: jose luis góngora fernández
• Stringbeans (Portal) - Lang Parameter Cross-Site Scripting Vulnerability
  • From: jose luis góngora fernández
• InnovaShop?® (mgs.jps) Cross Siting Scripting
  • From: jose luis góngora fernández
• SYMSA-2007-010: Microsoft ActiveSync 4.x Weak Password Obfuscation
  • From: research
• RE: playing for fun with <=IE7
  • From: James C. Slora Jr.
• Re: [Full-disclosure] Remote Desktop Command Fixation Attacks
  • From: pdp (architect)
• RE: playing for fun with <=IE7
  • From: Roger A. Grimes
• Third-party patch for CVE-2007-3896 (Internet Explorer 7 invalid URI handling) available
  • From: KJK::Hyperion
• Re: Remote Desktop Command Fixation Attacks
  • From: pdp (architect)
• RE: [Full-disclosure] Remote Desktop Command Fixation Attacks
  • From: Alex Everett
• [ GLSA 200710-16 ] X.Org X server: Composite local privilege escalation
  • From: Pierre-Yves Rofes
• [SECURITY] [DSA 1386-1] New wesnoth packages fix denial of service
  • From: Martin Schulze
• [SECURITY] [DSA 1386-2] New wesnoth packages fix denial of service
  • From: Martin Schulze
• Clients buffer-overflow in Live for Speed 0.5X10
  • From: Luigi Auriemma
• playing for fun with <=IE7
  • From: laurent . gaffie
• [ GLSA 200710-12 ] T1Lib: Buffer overflow
  • From: Pierre-Yves Rofes
• VImpX ActiveX (VImpX.ocx v. 4.7.3.0) Remote
  • From: saw_xyz
• [ GLSA 200710-10 ] SKK Tools: Insecure temporary file creation
  • From: Raphael Marichez
• [ GLSA 200710-14 ] DenyHosts: Denial of Service
  • From: Pierre-Yves Rofes
• [SECURITY] [DSA 1381-2] New Linux 2.6.18 packages fix several vulnerabilities
  • From: dann frazier
• [ GLSA 200710-13 ] Ampache: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• [ GLSA 200710-11 ] X Font Server: Multiple Vulnerabilities
  • From: Pierre-Yves Rofes
• Re: Cisco PSIRT response on IRM Demonstrates Multiple Cisco IOS Exploitation Techniques
  • From: Mark Senior
• [USN-530-1] hplip vulnerability
  • From: Kees Cook
• RE: Remote Desktop Command Fixation Attacks
  • From: Thor (Hammer of God)
• RE: [Full-disclosure] Remote Desktop Command Fixation Attacks
  • From: Pete Simpson
• Re: Cisco PSIRT response on IRM Demonstrates Multiple Cisco IOS Exploitation Techniques
  • From: Roman Medina-Heigl Hernandez
• Re: Remote Desktop Command Fixation Attacks
  • From: hvdkooij
• SEC Consult SA-20071012-0 :: Madwifi xrates element remote DOS
  • From: Bernhard Mueller
• OpenSSL Security Advisory
  • From: Ben Laurie
• Re: Tikiwiki 1.9.8 exploit ITW
  • From: 3APA3A
• Re: Joomla! swMenuFree 4.6 Component Remote File Include
  • From: sean
• Tikiwiki 1.9.8 exploit ITW
  • From: Moritz Naumann
• rPSA-2007-0214-1 initscripts
  • From: rPath Update Announcements
• RE: Remote Desktop Command Fixation Attacks
  • From: Jim Harrison
• [CAID 35724, 35725, 35726]: CA BrightStor ARCserve Backup Multiple Vulnerabilities
  • From: Williams, James K
• S21SEC-037-en: OPAL SIP Protocol Remote Denial of Service
  • From: S21sec Labs
• [USN-529-1] Tk vulnerability
  • From: Kees Cook
• [security bulletin] HPSBMA02230 SSRT071436 rev.1 - HP Select Identity, Remote Unauthorized Access
  • From: security-alert
• Re: URI handling woes in Acrobat Reader, Netscape,Miranda, Skype
  • From: Thierry Zoller
• iDefense Security Advisory 10.11.07: Multiple Vendor FLAC Library Multiple Integer Overflow Vulnerabilities
  • From: iDefense Labs
• Re: Remote Desktop Command Fixation Attacks
  • From: pdp (architect)
• EEYE: CA BrightStor ArcServe Backup Server Arbitrary Pointer Dereference
  • From: eEye Advisories
• [USN-528-1] MySQL vulnerabilities
  • From: Kees Cook
• CA BrightStor ARCServe BackUp Message Engine Remote Stack Overflow Vulnerability
  • From: hfli
• [security bulletin] HPSBUX02273 SSRT071476 rev. 1 - HP-UX running Apache, Remote Unauthorized Denial of Service (DoS)
  • From: security-alert
• Re: Remote Desktop Command Fixation Attacks
  • From: pdp (architect)
• RE: Cisco PSIRT response on IRM Demonstrates Multiple Cisco IOS Exploitation Techniques
  • From: Andy Davis
• Re: URI handling as the harbinger of interaction errors
  • From: Florian Weimer
• Re: Vulnerabilities
  • From: Victor Brilon
• Re: [Full-disclosure] The Death of Defence in Depth ? - An invitation to Hack.lu
  • From: Felix 'FX' Lindner
• Re: Cisco PSIRT response on IRM Demonstrates Multiple Cisco IOS Exploitation Techniques
  • From: Halvar Flake
• Re: Vulnerabilities
  • From: sottwell
• Re[2]: [Full-disclosure] URI handling woes in Acrobat Reader, Netscape, Miranda, Skype
  • From: Thierry Zoller
• Black Hat Tokyo + DC and Europe CfPs now open.
  • From: Jeff Moss
• Joomla! swMenuFree 4.6 Component Remote File Include
  • From: Guns
• Re: [Full-disclosure] Remote Desktop Command Fixation Attacks
  • From: gjgowey
• Re: Cisco PSIRT response on IRM Demonstrates Multiple Cisco IOS Exploitation Techniques
  • From: Florian Weimer
• Re: Cisco PSIRT response on IRM Demonstrates Multiple Cisco IOS Exploitation Techniques
  • From: Halvar Flake
• Re: RE: CheckPoint Secure Platform Multiple Buffer Overflows
  • From: fwadmin
• M$ will fix URI?
  • From: Memisyazici, Aras
• RE: [Full-disclosure] Remote Desktop Command Fixation Attacks
  • From: Paul Melson
• October Microsoft Tuesday
  • From: Todd Manning
• [ MDKSA-2007:194 ] - Updated libvorbis packages fix vulnerabilities
  • From: security
• CORE-2007-0928: Stack-based buffer overflow vulnerability in OpenBSD’s DHCP server
  • From: Core Security Technologies Advisories
• Re: [Full-disclosure] Remote Desktop Command Fixation Attacks
  • From: pdp (architect)
• Re: [Full-disclosure] Remote Desktop Command Fixation Attacks
  • From: gboyce
• Fwd: [Full-disclosure] URI handling woes in Acrobat Reader, Netscape,Miranda, Skype
  • From: merigoth
• RE: Remote Desktop Command Fixation Attacks
  • From: M. Burnett
• URI handling as the harbinger of interaction errors
  • From: Steven M. Christey
• RE: Cisco PSIRT response on IRM Demonstrates Multiple Cisco IOS Exploitation Techniques
  • From: Andy Davis
• IRM Advisory: Cisco IOS LPD Remote Stack Overflow
  • From: Andy Davis
• TPTI-07-18: EMC RepliStor Server Heap Overflow Vulnerability
  • From: TSRT
• RE: Remote Desktop Command Fixation Attacks
  • From: Thor (Hammer of God)
• ZDI-07-057: Firebird process_packet() Remote Stack Overflow Vulnerability
  • From: zdi-disclosures
• ZDI-07-056: IBM DB2 DB2JDS Multiple Vulnerabilities
  • From: zdi-disclosures
• ZDI-07-055: Microsoft Windows DCERPC Authentication Denial of Service Vulnerability
  • From: zdi-disclosures
• [ELEYTT] 10PAZDZIERNIK2007
  • From: Michal Bucko
• Re: Cisco PSIRT response on IRM Demonstrates Multiple Cisco IOS Exploitation Techniques
  • From: Halvar Flake
• Re: Remote Desktop Command Fixation Attacks
  • From: Steve Shockley
• iDefense Security Advisory 10.10.07: Kaspersky Web Scanner ActiveX Format String Vulnerability
  • From: iDefense Labs
• Vulnerabilities digest
  • From: 3APA3A
• [SECURITY] [DSA 1379-2] New openssl packages fix arbitrary code execution
  • From: Noah Meyerhans
• AST-2007-022: Buffer overflows in voicemail when using IMAP storage
  • From: The Asterisk Development Team
• Cisco Security Advisory: Cisco Wireless Control System Conversion Utility Adds Default Password
  • From: Cisco Systems Product Security Incident Response Team
• 0day: Hacking secured CITRIX from outside
  • From: pdp (architect)
• Re: iDefense Security Advisory 10.09.07: Microsoft Windows Mail and Outlook Express NNTP Protocol Heap Overflow
  • From: Nick FitzGerald
• Several vulnerabilities in CMS Made Simple 1.1.3.1
  • From: Omid
• wmtrssreader joomla component 1.0 Remote File Include Vulnerability
  • From: cyber-crime
• Remote Desktop Command Fixation Attacks
  • From: pdp (architect)
• Cisco PSIRT response on IRM Demonstrates Multiple Cisco IOS Exploitation Techniques
  • From: Damir Rajnovic
• 3Com WIFI router remote administration vulnerability.
  • From: Guy Mizrahi
• Regarding vulnerability in ViArt Shop
  • From: support
• [ GLSA 200710-08 ] KOffice, KWord, KPDF, KDE Graphics Libraries: Stack-based buffer overflow
  • From: Pierre-Yves Rofes
• [ GLSA 200710-09 ] NX 2.1: User-assisted execution of arbitrary code
  • From: Pierre-Yves Rofes
• Re: [Full-disclosure] URI handling woes in Acrobat Reader, Netscape,Miranda, Skype
  • From: gjgowey
• The Death of Defence in Depth ? - An invitation to Hack.lu
  • From: Thierry Zoller
• Re: [Full-disclosure] URI handling woes in Acrobat Reader, Netscape, Miranda, Skype
  • From: KJK::Hyperion
• iDefense Security Advisory 10.09.07: Microsoft Windows Mail and Outlook Express NNTP Protocol Heap Overflow
  • From: iDefense Labs
• NULL pointer crash in World in Conflict 1.000
  • From: Luigi Auriemma
• Re: [Full-disclosure] URI handling woes in Acrobat Reader, Netscape,Miranda, Skype
  • From: Geo.
• Re: [Full-disclosure] URI handling woes in Acrobat Reader, Netscape, Miranda, Skype
  • From: Valdis . Kletnieks
• RE: URI handling woes in Acrobat Reader, Netscape, Miranda, Skype
  • From: Jim Slora
• [USN-527-1] xen-3.0 vulnerability
  • From: Kees Cook
• Re: Re[2]: [Full-disclosure] URI handling woes in Acrobat Reader, Netscape,Miranda, Skype
  • From: Glynn Clements
• RE: [Full-disclosure] URI handling woes in Acrobat Reader, Netscape, Miranda, Skype
  • From: Brett Moore
• Research: Cybercrime and the Electoral System
  • From: Oliver Friedrichs
• LedgerSMB < 1.2.8, SQL-Ledger 2.x Multiple SQL Injection Issues
  • From: Chris Travers
• Re: [Full-disclosure] URI handling woes in Acrobat Reader, Netscape, Miranda, Skype
  • From: KJK::Hyperion
• Vulnerabilities
  • From: xoxland
• Re: [Full-disclosure] URI handling woes in Acrobat Reader, Netscape,Miranda, Skype
  • From: Morning Wood
• DNewsWeb Softwares Cross Site Scripting Vulrnability
  • From: DoZ
• Re: URI handling woes in Acrobat Reader, Netscape, Miranda, Skype
  • From: Andreas Lindenblatt
• Re: [Full-disclosure] URI handling woes in Acrobat Reader, Netscape,Miranda, Skype
  • From: Geo.
• RE: Re[2]: [Full-disclosure] URI handling woes in Acrobat Reader, Netscape, Miranda, Skype
  • From: Roger A. Grimes
• rPSA-2007-0212-1 util-linux
  • From: rPath Update Announcements
• Viart Shopping Cart Directory Transversal Vuln
  • From: [ NO REPLY ]
• Re: [Full-disclosure] URI handling woes in Acrobat Reader, Netscape,Miranda, Skype
  • From: Geo.
• Black Hat Tokyo + DC and Europe CfPs now open.
  • From: Jeff Moss
• Re: URI handling woes in Acrobat Reader, Netscape, Miranda, Skype
  • From: Andreas Lindenblatt
• [security bulletin] HPSBMA02275 SSRT071445 rev.1 - HP System Management Homepage (SMH) for Linux and Windows, Remote Cross Site Scripting (XSS)
  • From: security-alert
• Re[3]: [Full-disclosure] URI handling woes in Acrobat Reader, Netscape,Miranda, Skype
  • From: 3APA3A
• Re[2]: [Full-disclosure] URI handling woes in Acrobat Reader, Netscape, Miranda, Skype
  • From: Thierry Zoller
• [security bulletin] HPSBMA02274 SSRT071445 rev.1 - HP System Management Homepage (SMH) for HP-UX, Remote Cross Site Scripting (XSS)
  • From: security-alert
• [security bulletin] HPSBUX02181 SSRT061289 rev.3 - HP-UX Running IPFilter, Remote Denial of Service (DoS)
  • From: security-alert
• [security bulletin] HPSBUX01137 SSRT5954 rev.11 - HP-UX Running TCP/IP (IPv4), Remote Denial of Service (DoS)
  • From: security-alert
• BT Home Flub: Pwnin the BT Home Hub
  • From: Adrian P
• [security bulletin] HPSBUX02262 SSRT071447 rev. 1 - HP-UX running Apache, Remote Arbitrary Code Execution, Cross Site Scripting (XSS)
  • From: security-alert
• rPSA-2007-0210-1 xen
  • From: rPath Update Announcements
• TorrentTrader Classic Mutiple Remote vulnerabilities
  • From: security
• [ GLSA 200710-06 ] OpenSSL: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• [ GLSA 200710-02 ] PHP: Multiple vulnerabilities
  • From: Raphael Marichez
• new vuln in snewscms.net.ru in lang file
  • From: info
• [ GLSA 200710-05 ] QGit: Insecure temporary file creation
  • From: Pierre-Yves Rofes
• [ GLSA 200710-03 ] libvorbis: Multiple vulnerabilities
  • From: Raphael Marichez
• [ GLSA 200710-07 ] Tk: Buffer overflow
  • From: Raphael Marichez
• [ GLSA 200710-04 ] libsndfile: Buffer overflow
  • From: Raphael Marichez
• [SECURITY] [DSA 1362-2] New lighttpd packages fix buffer overflow
  • From: Steve Kemp
• Re: Re[2]: [Full-disclosure] URI handling woes in Acrobat Reader, Netscape,Miranda, Skype
  • From: Kurt Dillard
• Else If cms Multiple Remote vulnerabilities
  • From: security
• idmos-phoenix cms Remote File inclusion
  • From: security
• Re[2]: [Full-disclosure] URI handling woes in Acrobat Reader, Netscape,Miranda, Skype
  • From: Thierry Zoller
• CMS Creamotion - Remote File inclusion
  • From: security
• Re: [Full-disclosure] URI handling woes in Acrobat Reader, Netscape,Miranda, Skype
  • From: Geo.
• Re[2]: [Full-disclosure] URI handling woes in Acrobat Reader, Netscape, Miranda, Skype
  • From: Thierry Zoller
• SSHatter 0.6
  • From: Tim Brown
• Re[2]: URI handling woes in Acrobat Reader, Netscape, Miranda, Skype
  • From: Thierry Zoller