Bugtraq

Date Index

[Prev Page][Next Page]

[USN-927-3] Thunderbird regression, Jamie Strandboge
AneCMS Multiple Vulnerabilities, admin
VUPEN Security Research - VMware Products Movie Decoder Heap Overflow Vulnerability, VUPEN Security Research
Secunia Research: VMWare VMnc Codec HexTile Encoding Buffer Overflow, Secunia Research
Secunia Research: VMWare VMnc Codec HexTile Encoding Two Integer Truncation Vulnerabilities, Secunia Research
WinSoftMagic Photo Editor .PNG File Buffer Overflow, eidelweiss
Vulnerabilities in phpCOIN, MustLive
- Re: Vulnerabilities in phpCOIN, Susan Bradley
JAVA web start arbitrary command-line injection - "-XXaltjvm" arbitrary dll loading (0day), Reversemode
ZDI-10-068: Apple QuickTime H.263 Array Index Parsing Remote Code Execution Vulnerability, ZDI Disclosures
[USN-624-2] Erlang vulnerability, Jamie Strandboge
VMSA-2010-0007 VMware hosted products, vCenter Server and ESX patches resolve multiple security issues, VMware Security team
Secunia Research: Pulse CMS Cross-Site Request Forgery, Secunia Research
[USN-926-1] ClamAV vulnerabilities, Jamie Strandboge
Secunia Research: Pulse CMS Arbitrary File Upload Vulnerability, Secunia Research
[USN-925-1] MoinMoin vulnerabilities, Jamie Strandboge
Vulnerabilities in CMS SiteLogic, MustLive
- <Possible follow-ups>
- Vulnerabilities in CMS SiteLogic, MustLive
TCPDF Library Remote Code Execution Vulnerability, Matthias -apoc- Hecker
DeepSec 2010 - Call for Papers and Experts, DeepSec Conference
[HITB-Announce] FINAL CALL - CFP for HITBSecConf2010 Amsterdam, Hafez Kamal
Vulnerabilities in Dunia Soccer, MustLive
- Re: Vulnerabilities in Dunia Soccer, Susan Bradley
  - Re: Vulnerabilities in Dunia Soccer, MustLive
    - Re: Vulnerabilities in Dunia Soccer, Susan Bradley
[USN-924-1] Kerberos vulnerabilities, Kees Cook
[USN-923-1] OpenJDK vulnerabilities, Kees Cook
[ MDVSA-2010:069 ] nss, security
CORE-2010-0323: XSS Vulnerability in NextGEN Gallery Wordpress Plugin, CORE Security Technologies Advisories
ZDI-10-067: Apple QuickTime Pict BkPixPat Remote Code Execution Vulnerability, ZDI Disclosures
[SECURITY] [DSA 2030-1] New mahara packages fix sql injection, Nico Golde
ZDI-10-066: CA XOsoft Control Service entry_point.aspx Remote Code Execution Vulnerability, ZDI Disclosures
MITKRB5-SA-2010-003 [CVE-2010-0629] denial of service in kadmind in older krb5 releases, Tom Yu
ZDI-10-065: CA XOsoft xosoapapi.asmx Multiple Remote Code Execution Vulnerabilities, ZDI Disclosures
CA20100406-01: Security Notice for CA XOsoft, Kotas, Kevin J
Hack.lu 2010 CfP, info
Miranda TLS MitM with XMPP/Jabber protocol, Jan Schejbal
[SECURITY] [DSA 2029-1] New imlib2 packages fix arbitrary code execution, Nico Golde
ZDI-10-063: Mozilla Firefox Cross Document DOM Node Moving Code Execution Vulnerability, ZDI Disclosures
Vulnerabilities in TAK cms, MustLive
ZDI-10-062: Novell Netware NWFTPD RMD/RNFR/DELE Argument Parsing Remote Code Execution Vulnerabilities, ZDI Disclosures
Vulnerabilities in HoloCMS, MustLive
ZDI-10-046: Mozilla Firefox Web Worker Array Remote Code Execution Vulnerability, ZDI Disclosures
[SECURITY] [DSA 2028-1] New xpdf packages fix several vulnerabilities, Luciano Bello
ZDI-10-057: Sun Java Runtime Environment JPEGImageDecoderImpl Remote Code Execution Vulnerability, ZDI Disclosures
ZDI-10-059: Sun Java Runtime Environment JPEGImageEncoderImpl Remote Code Execution Vulnerability, ZDI Disclosures
ZDI-10-055: Sun Java Runtime Environment Mutable InetAddress Socket Policy Violation Vulnerability, ZDI Disclosures
ZDI-10-052: Sun Java Runtime Environment XNewPtr Remote Code Execution Vulnerability, ZDI Disclosures
ZDI-10-058: Apple Mac OS X ImageIO Framework JPEG2000 Remote Code Execution Vulnerability, ZDI Disclosures
ZDI-10-051: Sun Java Runtime RMIConnectionImpl Privileged Context Remote Code Execution Vulnerability, ZDI Disclosures
ZDI-10-050: Mozilla Firefox nsTreeSelection EventListener Remote Code Execution Vulnerability, ZDI Disclosures
ZDI-10-061: Sun Java Runtime CMM readMabCurveData Remote Code Execution Vulnerability, ZDI Disclosures
ZDI-10-049: Mozilla Firefox PluginArray nsMimeType Dangling Pointer Remote Code Execution Vulnerability, ZDI Disclosures
ZDI-10-048: Mozilla Firefox nsTreeContentView Dangling Pointer Remote Code Execution Vulnerability, ZDI Disclosures
ZDI-10-054: Sun Java Runtime Environment JPEGImageReader stepX Remote Code Execution Vulnerability, ZDI Disclosures
ZDI-10-060: Sun Java Runtime Environment MixerSequencer Invalid Array Index Remote Code Execution Vulnerability, ZDI Disclosures
ZDI-10-047: Mozilla Firefox libpr0n imgContainer Bits-Per-Pixel Change Remote Code Execution Vulnerability, ZDI Disclosures
ZDI-10-053: Sun Java Runtime Environment MIDI File metaEvent Remote Code Execution Vulnerability, ZDI Disclosures
ZDI-10-056: Sun Java Runtime Environment Trusted Methods Chaining Remote Code Execution Vulnerability, ZDI Disclosures
ZDI-10-045: Apple QuickTime MPEG-1 genl Atom Remote Code Execution Vulnerability, ZDI Disclosures
Apple Safari <= Tag (heap spray) Remote Buffer Overflow Exploit (osX), eidelweiss
[SECURITY] [DSA 2027-1] New xulrunner packages fix several vulnerabilities, Moritz Muehlenhoff
[security bulletin] HPSBMA02490 SSRT090222 rev.2 - HP SOA Registry Foundation, Remote Unauthorized Access to Data, Cross Site Scripting (XSS), Privilege Escalation, security-alert
ZDI-10-044: Apple QuickTime FLI LinePacket Remote Code Execution Vulnerability, ZDI Disclosures
ZDI-10-043: Apple QuickTime FlashPix NumberOfTiles Remote Code Execution Vulnerability, ZDI Disclosures
ZDI-10-042: Apple QuickTime MediaVideo Compressor Name Remote Code Execution Vulnerability, ZDI Disclosures
ZDI-10-041: Apple QuickTime QDM2/QDCA Atom Remote Code Execution Vulnerability, ZDI Disclosures
ZDI-10-040: Apple QuickTime RLE Bit Depth Remote Code Execution Vulnerability, ZDI Disclosures
ZDI-10-039: Apple OS X Internet Enabled Disk Image Remote Code Execution Vulnerability, ZDI Disclosures
ZDI-10-038: Apple QuickTime QDMC/QDM2 Remote Code Execution Vulnerability, ZDI Disclosures
ZDI-10-037: Apple QuickTime MJPEG Sample Dimensions Remote Code Execution Vulnerability, ZDI Disclosures
ZDI-10-036: Apple QuickTime H.263 PictureHeader Remote Code Execution Vulnerability, ZDI Disclosures
ZDI-10-035: Apple QuickTime genl Atom Remote Code Execution Vulnerability, ZDI Disclosures
ZDI-10-034: Microsoft Internet Explorer Tabular Data Control ActiveX Remote Code Execution Vulnerability, ZDI Disclosures
ZDI-10-033: Microsoft Internet Explorer TIME2 Behavior Remote Code Execution Vulnerability, ZDI Disclosures
[SECURITY] [DSA 2026-1] New netpbm-free packages fix denial of service, Giuseppe Iuculano
Vulnerability Centreon IT & Network Monitoring v2.1.5, Mehdi Mahdjoub - Sysdream IT Security Services
VMSA-2010-0006 ESX Service Console updates for samba and acpid, VMware Security Team
Juniper SRX Critical Denial of Service Vulnerability, J. Oquendo
VUPEN Security Research - Apple Quicktime PICT Handling Heap Overflow Vulnerability, VUPEN Security Research
DynPG CMS v4.1.0 Multiple Remote File Inclusion Vulnerability, eidelweiss
- <Possible follow-ups>
- Re: DynPG CMS v4.1.0 Multiple Remote File Inclusion Vulnerability, eidelweiss
VUPEN Security Research - Sun Java JDK/JRE AWT Library Invalid Index Vulnerability, VUPEN Security Research
CSRF Vulnerability in OSSIM 2.2.1, nicolas . grandjean
Zabbix <= 1.8.1 SQL Injection, Dawid Golunski
VUPEN Security Research - Sun Java JDK/JRE AWT Library Invalid Pointer Vulnerability, VUPEN Security Research
VUPEN Security Research - Apple Quicktime FLC Encoded Movie Heap Overflow Vulnerability, VUPEN Security Research
VUPEN Security Research - Sun Java JDK/JRE Unpack200 Buffer Overflow Vulnerability, VUPEN Security Research
VUPEN Security Research - Apple Quicktime PICT Processing Integer Overflow Vulnerability, VUPEN Security Research
VUPEN Security Research - Apple iTunes ColorSync Profile Integer Overflow Vulnerability, VUPEN Security Research
[USN-922-1] libnss-db vulnerability, Kees Cook
iDefense Security Advisory 03.30.10: Oracle Java Runtime Environment Image FIle Buffer Overflow Vulnerability, iDefense Labs
BitComet <= 1.19 Remote DOS Exploit, Pierre Noguès
[SECURITY] [DSA 2024-1] New moin packages fix cross-site scripting, Giuseppe Iuculano
[Suspected Spam]Vulnerabilities in NoCMS, MustLive
Secunia Research: Sun Java JDK/JRE Soundbank Resource Name Buffer Overflow, Secunia Research
OpenDcHub 0.8.1 Remote Code Execution Exploit, Pierre Noguès
[SECURITY] [DSA 2025-1] New icedove packages fix several vulnerabilities, Steffen Joeris
Trustwave's SpiderLabs Security Advisory TWSL2010-002, Trustwave Advisories
Elevation of Privilege Vulnerability in iTunes for Windows, jason
Multiple XSS vulnerabilities in OSSIM 2.2.1, nicolas . grandjean
Secunia Research: Sun Java JDK/JRE Soundbank Resource Parsing Buffer Overflow, Secunia Research
[SECURITY] CVE-2008-2370: Apache CouchDB Timing Attack Vulnerability, Jan Lehnardt
- <Possible follow-ups>
- [SECURITY] CVE-2008-2370: Apache CouchDB Timing Attack Vulnerability, Jan Lehnardt
[security bulletin] HPSBOV02506 SSRT090244 rev.1 - HP Secure Web Server for OpenVMS (based on Apache) CSWS, Remote Denial of Service (DoS), Unauthorized Disclosure of Information, Unauthorized Modification of Information, security-alert
iDefense Security Advisory 03.30.10: Microsoft Internet Explorer 'onreadystatechange' Use After Free Vulnerability, iDefense Labs
CVE-2010-0684: Apache ActiveMQ Persistent Cross-Site Scripting (XSS) Vulnerability, rajat swarup
VMSA-2010-0005 VMware products address vulnerabilities in WebAccess, VMware Security Team
OXID eShop Enterprise: Session Fixation and XSS Vulnerabilities, michael . mueller
Secunia Research: ViewVC Regular Expression Search Cross-Site Scripting, Secunia Research
[security bulletin] HPSBMA02513 SSRT090110 rev.1 - Insight Control for Linux (IC-Linux) Remote Execution of Arbitrary Code, Local Unauthorized Elevation of Privilege, security-alert
[security bulletin] HPSBMA02490 SSRT090222 rev.1 - HP SOA Registry Foundation, Remote Unauthorized Access to Data, Cross Site Scripting (XSS), Privilege Escalation, security-alert
[security bulletin] HPSBUX02514 SSRT100010 rev.1 - HP-UX running AudFilter rules enabled, Local Denial of Service (DoS), security-alert
[USN-919-1] Emacs vulnerability, Kees Cook
Joomla Component com_weblinks Sql Injection Vulnerability, info
Re: [Full-disclosure] Medium security hole in Varnish reverse proxy, John Adams
- Re: [Full-disclosure] Medium security hole in Varnish reverse proxy, Tim Brown
Joomla Component com_xmap Sql Injection Vulnerability, info
XSS vulnerability in easy page cms, info
Vulnerabilities in MiniManager for Project MANGOS, MustLive
Remote buffer overflow in aircrack-ng causes DOS and possible code execution, Lukas Lueg
SQL Injection Vulnerabilitie in PhotoPost vBGallery 2.5, Andreas Kirbach
[security bulletin] HPSBOV02497 SSRT090245 rev.2 - HP TCP/IP Services for OpenVMS Running NTP, Remote Execution of Arbitrary Code, Denial of Service (DoS), security-alert
Exploiting nano, Dan Rosenberg
Medium security hole in Varnish reverse proxy, Tim Brown
London DEFCON March meet - DC4420 - Wednesday March 31st 2010, Major Malfunction
[ MDVSA-2010:068 ] php, security
- <Possible follow-ups>
- [ MDVSA-2010:068 ] php, security
- [ MDVSA-2010:068 ] php, security
[SECURITY] [DSA 2023-1] New curl packages fix arbitrary code execution, Steffen Joeris
{PRL} Novell Netware FTP Remote Stack Overflow, Francis Provencher
Vulnerabilities in ArcManager, MustLive
[security bulletin] HPSBUX02509 SSRT100032 rev.1 - HP-UX Running NFS/ONCplus, NFS Inadvertently Enabled, security-alert
Vulnerabilities in TooFAST, MustLive
[ MDVSA-2010:067 ] kernel, security
Hackito Ergo Sum Conference (Paris 8-10 April 2010) : Schedule, Jonathan Brossard
Multiple Vulnerabilities in EASY Enterprise DMS, michael . mueller
There is a Permanent-type Cross-Site Vulnerability in “Personal Signature” in all version of Discuz!. It can be written by the worm!, lis cker
Ruxcon 2010 Call For Papers, cfp
[security bulletin] HPSBUX02508 SSRT100007 rev.1 - HP-UX Running sendmail with STARTTLS Enabled, Remote Unauthorized Access, security-alert
[security bulletin] HPSBMA02436 SSRT080064 rev.1 - HP Project and Portfolio Management Center (PPMC), Remote Cross Site Scripting (XSS), security-alert
[ MDVSA-2010:066 ] kernel, security
Vulnerabilities in WeBAM, MustLive
- Re: Vulnerabilities in WeBAM, Salvatore Fresta aka Drosophila
Cisco Security Advisory: Cisco IOS Software Session Initiation Protocol Denial of Service Vulnerabilities, Cisco Systems Product Security Incident Response Team
- <Possible follow-ups>
- Cisco Security Advisory: Cisco IOS Software Session Initiation Protocol Denial of Service Vulnerabilities, Cisco Systems Product Security Incident Response Team
- Cisco Security Advisory: Cisco IOS Software Session Initiation Protocol Denial of Service Vulnerabilities, Cisco Systems Product Security Incident Response Team
Symlink attack with Solaris Update manager and Sun Patch Cluster, bugs
Multiple vulnerabilities in Deliver, Dan Rosenberg
[USN-917-1] Puppet vulnerabilities, Marc Deslauriers
Secunia Research: Pulse CMS Arbitrary File Deletion Vulnerability, Secunia Research
Cisco Security Advisory: Cisco IOS Software IPsec Vulnerability, Cisco Systems Product Security Incident Response Team
Cisco Security Advisory: Cisco IOS Software NAT Skinny Call Control Protocol Vulnerability, Cisco Systems Product Security Incident Response Team
Secunia Research: Pulse CMS login.php Arbitrary File Writing Vulnerability, Secunia Research
Symlink attack with Solaris Update manager, bugs
[SECURITY] [DSA 2022-1] New mediawiki packages fix several vulnerabilities, Nico Golde
Secunia Research: Pulse CMS Arbitrary File Writing Vulnerability, Secunia Research
[USN-918-1] Samba vulnerability, Marc Deslauriers
"$referer" export lead to the cross-site flaws in all versions of Discuz!, lis cker
[USN-916-1] Kerberos vulnerabilities, Kees Cook
CVE-2009-2907: SpringSource Hyperic HQ multiple XSS vulnerabilities, s2-security
[HITB-Announce] HITBSecConf2009 - Malaysia Videos Released! *Correction*, Hafez Kamal
CVE-2009-4505 OpenCMS OAMP Comments Module XSS, Cyrill Brunschwiler
Vulnerabilities in WordPress, MustLive
Insecure SMS authorization scheme at LiqPAY micro-payments of PrivatBank (Ukraine), Andriy Tereshchenko
{PRL} Lexmark Multiple Laser printer FTP Remote Denial of Services, Francis Provencher
Internet Explorer 7.0 0day Vulnerability, k4mr4n_St
[CORELAN-10-015] - Remote Help 0.0.7 Httpd DoS (Format String), Security
Aris AGX agXchange ESM Cross Site Scripting Vulnerability, lament
Safari browser port blocking bypassed by integer overflow, Gary Niger
MITKRB5-SA-2010-002 denial of service in SPNEGO [CVE-2010-0628 VU#839413], Tom Yu
[ MDVSA-2010:065 ] cpio, security
Vulnerabilities in CaptchaSecurityImages, MustLive
[HITB-Announce] HITBSecConf2009 - Malaysia Videos Released!, Hafez Kamal
- <Possible follow-ups>
- [HITB-Announce] HITBSecConf2009 - Malaysia Videos Released!, Hafez Kamal
MX Simulator Server 2010-02-06 Remote Buffer Overflow PoC, Salvatore Fresta aka Drosophila
[DSECRG-09-064] SAP GUI - Insecure method, code execution, Alexandr Polyakov
Vulnerability Astaro Security Linux v5, Mehdi Mahdjoub - Sysdream IT Security Services
- Re: Vulnerability Astaro Security Linux v5, Akos Szalkai
- <Possible follow-ups>
- Re: Vulnerability Astaro Security Linux v5, jdaniel
IE 6.0 - Local Crash Exploit, info
- Re: IE 6.0 - Local Crash Exploit, Veg
[SECURITY] [DSA 2021-1] New spamass-milter packages fix remote command execution, Giuseppe Iuculano
REMINDER: Month of PHP Security 2010 - CALL FOR PAPERS - Only 3 weeks left, Stefan Esser
[ MDVSA-2010:064 ] libpng, security
[ MDVSA-2010:063 ] libpng, security
{PRL} Lexmark Multiple Laser Printer Remote Stack Overflow, Francis Provencher
CFP - GameSec 2010 - Conference on Decision and Game Theory for Security, Albert Levi
[SECURITY] [DSA 2020-1] New ikiwiki packages fix cross-site scripting, Nico Golde
[ MDVSA-2010:062 ] curl, security
[SECURITY] [DSA-2019-1] New pango1.0 packages fix denial of service, Giuseppe Iuculano
IBM Lotus 6.x names.nsf Cross Site Scripting Vulnerability, lament
- Re: IBM Lotus 6.x names.nsf Cross Site Scripting Vulnerability, security curmudgeon
Firefox 3.6 for Windows includes a forged CA cert, Francis Litterio
- Re: Firefox 3.6 for Windows includes a forged CA cert, dveditz
- Re: Firefox 3.6 for Windows includes a forged CA cert, Mike Duncan
- Re: Firefox 3.6 for Windows includes a forged CA cert, Marcus Meissner
- <Possible follow-ups>
- Re: Firefox 3.6 for Windows includes a forged CA cert, adam
Aris AGX agXchange ESM Open Redirection Vulnerability, lament
Vulnerability Httpdx v1.5.3b, Mehdi Mahdjoub - Sysdream IT Security Services
[USN-915-1] Thunderbird vulnerabilities, Marc Deslauriers
announcing skipfish, an automated web app security scanner, Michal Zalewski
IBM Lotus 6.x HTTP Response Splitting Vulnerability, lament
[SECURITY] [DSA-2018-1] New php5 packages fix null pointer dereference, Raphael Geissert
There are lost of xss vul in PHPWind v6.0 !, lis cker
CA20100318-01: Security Notice for CA ARCserve Backup, Kotas, Kevin J
Sahana 0.6.2.2 Authentication Bypass, Christopher
Secunia Research: Quicksilver Forums "mysqldump" Password Disclosure, Secunia Research
Secunia Research: Quicksilver Forums Cross-Site Request Forgery Vulnerability, Secunia Research
Secunia Research: Quicksilver Forums Backup Information Disclosure, Secunia Research
Miranda IM silent TLS failure, Jan Schejbal
Vulnerabilities in VXDate for Joomla, MustLive
[CORELAN-10-13] - Windisc Local Stack BOF, Security
[security bulletin] HPSBGN02511 SSRT100022 rev.2 - HP Small Form Factor or Microtower PC with Broadcom Integrated NIC Firmware, Remote Execution of Arbitrary Code, security-alert
CORE-2010-0311 - eFront-learning PHP file inclusion vulnerability, CORE Security Technologies Advisories
CORE-2009-0803: Virtual PC Hypervisor Memory Protection Vulnerability, CORE Security Technologies Advisories
[USN-913-1] libpng vulnerabilities, Marc Deslauriers
ZDI-10-030: Apple WebKit CSS run-in Attribute Rendering Remote Code Execution Vulnerability, ZDI Disclosures
Last Call for Papers, CONFidence 2010, 25-26May, Last Call for Papers, Andrzej Targosz
rPSA-2010-0018-1 bind bind-utils caching-nameserver, rPath Update Announcements
[SECURITY] [DSA 2017-1] New pulseaudio packages fix insecure temporary directory, Giuseppe Iuculano
ZDI-10-032: SAP MaxDB Malformed Handshake Request Remote Code Execution Vulnerability, ZDI Disclosures
[USN-912-1] Audio File Library vulnerability, Marc Deslauriers
ZDI-10-031: Apple Webkit Blink Event Dangling Pointer Remote Code Execution Vulnerability, ZDI Disclosures
SugarCRM Stored XSS vulnerability, Jeromie Jackson
rPSA-2010-0022-1 sendmail sendmail-cf, rPath Update Announcements
Vulnerability httpdx v1.5.3, Mehdi Mahdjoub - Sysdream IT Security Services
QuickZip 0day detailed write-up, Security
ZDI-10-029: Apple WebKit innerHTML element Substitution Remote Code Execution Vulnerability, ZDI Disclosures
New vulnerabilities in Abton, MustLive
ZoneAlarm 9 (ForceField) Security Disclosure, Andrew Barkley
Multiple DOM-Based XSS in Dojo Toolkit SDK, labs
PlumberCon 10 - Call for Papers, astera
CVE-2010-0188 Exploit Code, villys777
...because you can't get enough of clickjacking, Michal Zalewski
[SECURITY] [DSA 2016-1] New drupal6 packages fix several vulnerabilities, Giuseppe Iuculano
Zigurrat CMS SQL Injection Vulnerability, faghani
Pars CMS SQL Injection Vulnerability, faghani
Vulnerability in phpAdsNew, OpenAds and OpenX, MustLive
[HITB-Announce] HITBSecConf2010 - Dubai Agenda Released, Hafez Kamal
Sun Java System Communication Express CSRF via HPP, edgard . chammas
Ananta Gazelle SQL Injection Vulnerability, admin
[Tool] sqlmap 0.8 released, Bernardo Damele A. G.
SyScan'10 CFP, thomas@xxxxxxxxxx
ZDI-10-027: Skype Protocol Handler datapath Argument Injection Remote Code Execution Vulnerability, ZDI Disclosures
VUPEN Security Research - Apple Safari ColorSync Profile Integer Overflow Vulnerability, VUPEN Security Research
ZDI-10-028: Skype URI Processing Arbitrary XML File Deletion Vulnerability, ZDI Disclosures
[SECURITY] [DSA 2012-1] New Linux 2.6.26 packages fix several issues, dann frazier
[SECURITY] [DSA 2013-1] New egroupware packages fix several vulnerabilities, Moritz Muehlenhoff
iDefense Security Advisory 03.11.10: Multiple Vendor WebKit HTML Element Use After Free Vulnerability, iDefense Labs
[USN-911-1] MoinMoin vulnerabilities, Jamie Strandboge
[ MDVSA-2010:061 ] ncpfs, security
[XSS] I found a xss in phpmyadmin 3.3.0 when we create new database in interface!, lis cker
[SECURITY] [DSA 2014-1] New moin packages fix several vulnerabilities, Giuseppe Iuculano
Vulnerabilities in Abton, MustLive
Multiple vulnerabilities in SUPERAntiSpyware and Super Ad Blocker, Luka Milkovic
[USN-909-1] dpkg vulnerability, Kees Cook
[SECURITY] [DSA 2011-1] New dpkg packages fix path traversal, Nico Golde
[ MDVSA-2010:060 ] squid, security
Skype URI Handler Input Validation, Paul Craig
Friendly-Tech FriendlyTR69 CPE Remote Management V2.8.9 SQL Injection Vulnerability, lament
CVE-2010-0624: Heap-based buffer overflow in GNU Tar and GNU Cpio, Jakob Lell
[SECURITY] [DSA-2010-1] New kvm packages fix several vulnerabilities, dann frazier
iDefense Security Advisory 03.09.10: Microsoft Excel MDXTUPLE Record Heap Overflow Vulnerability, iDefense Labs
[SECURITY] [DSA 2009-1] New tdiary packages fix cross-site scripting, Steffen Joeris
[USN-908-1] Apache vulnerabilities, Marc Deslauriers
Secunia Research: XnView DICOM Parsing Integer Overflow Vulnerability, Secunia Research
[ MDVSA-2010:059 ] virtualbox, security
iDefense Security Advisory 03.09.10: Microsoft Excel MDXSET Record Heap Overflow Vulnerability, iDefense Labs
Secunia Research: Employee Timeclock Software Backup Information Disclosure, Secunia Research
iDefense Security Advisory 03.09.10: Microsoft Excel Sheet Object Type Confusion Vulnerability, iDefense Labs
Vulnerabilities in Hydra Engine, MustLive
VUPEN Security Research - Microsoft Office Excel Record Processing Code Execution Vulnerability, VUPEN Security Research
Secunia Research: Employee Timeclock Software "mysqldump" Password Disclosure, Secunia Research
[ MDVSA-2010:058 ] php, security
CORE-2009-1103: Microsoft Office Excel DbOrParamQry Record Parsing Vulnerability, CORE Security Technologies Advisories
CORE-2009-0813: Windows Movie Maker and Microsoft Producer IsValidWMToolsStream() Heap Overflow, CORE Security Technologies Advisories
Secunia Research: Employee Timeclock Software SQL Injection Vulnerabilities, Secunia Research
iDefense Security Advisory 03.09.10: Microsoft Excel FNGROUPNAME Record Uninitialized Memory Vulnerability, iDefense Labs
[xss] a xss on "threadid" parameter in BBSMAX, lis cker
ZDI-10-026: Hewlett-Packard OVPI helpmanager Servlet Remote Code Execution Vulnerability, ZDI Disclosures
ZDI-10-025: Microsoft Office Excel XLSX File Parsing Remote Code Execution Vulnerability, ZDI Disclosures
[security bulletin] HPSBMA02489 SSRT090065 rev.1 - HP Performance Insight , Remote Execution of Arbitrary Commands, security-alert
Croogo CMS 1.2 Cross Site Scripting Vulnerabilities, Paulino Calderon
[SECURITY] [DSA 2008-1] New typo3-src packages fix several vulnerabilities, Moritz Muehlenhoff
IBM ENOVIA SmarTeam v5 Cross Site Scripting Vulnerability, lament
SQL injection vulnerability in wILD CMS, Maciej Gojny
[ MDVSA-2010:057 ] apache, security
rPSA-2010-0013-1 gzip, rPath Update Announcements
ZoneAlarm Security Circumvention, Andrew Barkley
- Re: ZoneAlarm Security Circumvention, Ansgar Wiechers
[USN-907-1] gnome-screensaver vulnerabilities, Marc Deslauriers
rPSA-2010-0014-1 mysql mysql-bench mysql-server, rPath Update Announcements
rPSA-2010-0012-1 postgresql postgresql-contrib postgresql-server, rPath Update Announcements
rPSA-2010-0011-1 gnome-ssh-askpass openssh openssh-client openssh-server, rPath Update Announcements
"Writing JIT-Spray Shellcode for fun and profit" by DSecRG, DSecRG
[XSS] i found a xss on "page" parameter in "eccredit.php" in Dvbbs < 8.3.0, lis cker
phpinfo() XSS Vulnerability, info
- Re: phpinfo() XSS Vulnerability, Salvatore Fresta aka Drosophila
[xss] a xss on "action" parameter in BBSMAX, lis cker
Apache mod_isapi Dangling Pointer Vulnerability - Security Advisory - SOS-10-002, Lists
[ MDVSA-2010:056 ] openoffice.org, security
[ MDVSA-2010:055 ] poppler, security
ncpfs, Multiple Vulnerabilities, Dan Rosenberg
- <Possible follow-ups>
- Re: ncpfs, Multiple Vulnerabilities, dan . j . rosenberg
Call for Papers: EC2ND 2010, Konrad Rieck
- <Possible follow-ups>
- Call for Papers: EC2ND 2010, Konrad Rieck
SQL injection vulnerability in Natychmiast CMS, Maciej Gojny
Juniper SA Series Cross Site Scripting Issue, Security Lists NL
iDefense Security Advisory 03.04.10: Autonomy KeyView OLE Document Integer Overflow Vulnerability, iDefense Labs
[ MDVSA-2010:054 ] pam_krb5, security
[xss] a xss on "ThreadID" parameter in BBSXP 2008 from china, lis cker
CA20100304-01: Security Notice for CA SiteMinder, Williams, James K
fcrontab Information Disclosure Vulnerability, Dan Rosenberg
Unspecified EMC Documentum Remote Code Execution Vulnerability, dr_ch1na
Open redirection vulnerability in the Drupal API function drupal_goto (Drupal 6.15 and 5.21), Martin Barbella
Apple Airport Wireless Products: Promiscuous FTP PORT Allowed in FTP Proxy Provides Security Bypass, Sabahattin Gucukoglu
- <Possible follow-ups>
- Re: Apple Airport Wireless Products: Promiscuous FTP PORT Allowed in FTP Proxy Provides Security Bypass, drstrangep0rk
  - Re: Apple Airport Wireless Products: Promiscuous FTP PORT Allowed in FTP Proxy Provides Security Bypass, Sabahattin Gucukoglu
NSOADV-2010-006: Authentium Command Free Scan ActiveX Control buffer overflow, NSO Research
IETF effort: Security Assesment of the Internet Protocol, Fernando Gont
VMSA-2010-0004 ESX Service Console and vMA third party updates, VMware Security Team
[SECURITY] [DSA 2007-1] New cups packages fix arbitrary code execution, Nico Golde
[USN-906-1] CUPS vulnerabilities, Marc Deslauriers
CORRECTION: CORE-2009-0913 - Luxology Modo 401 .LXO Integer Overflow, CORE Security Technologies Advisories
Cisco Security Advisory: Cisco Digital Media Player Remote Display Unauthorized Content Injection Vulnerability, Cisco Systems Product Security Incident Response Team
Cisco Security Advisory: Multiple Vulnerabilities in Cisco Digital Media Manager, Cisco Systems Product Security Incident Response Team
[ GLSA 201003-01 ] sudo: Privilege escalation, Alex Legler
NSOADV-2010-004: McAfee LinuxShield remote/local code execution, NSO Research
- RE: NSOADV-2010-004: McAfee LinuxShield remote/local code execution, Veal, Richard
  - Re: NSOADV-2010-004: McAfee LinuxShield remote/local code execution, NSO Research
ZDI-10-024: Novell eDirectory SOAP Request Parsing Denial of Service Vulnerability, ZDI Disclosures
Luxology Modo 401 .LXO Integer Overflow, CORE Security Technologies Advisories
[SECURITY] [DSA 2006-1] New sudo packages fix several vulnerabilities, Giuseppe Iuculano
[ MDVSA-2010:053 ] apache, security
[xss] i found a Cross Site Scripting Vulnerability about Discuz! 'uid' Parameter, lis cker
iDefense Security Advisory 03.02.10: IBM Lotus Domino Web Access ActiveX Stack Buffer Overflow Vulnerability, iDefense Labs
Eshbel Priority MarketGate module Cross Site Scripting Vulnerability, lament
Todd Miller Sudo local root exploit discovered by Slouching, Kingcope
- Re: Todd Miller Sudo local root exploit discovered by Slouching, andy
  - Re: Todd Miller Sudo local root exploit discovered by Slouching, Kingcope
  - Re: Todd Miller Sudo local root exploit discovered by Slouching, Jann Horn
- <Possible follow-ups>
- Re: Re: Todd Miller Sudo local root exploit discovered by Slouching, noone
  - Re: Todd Miller Sudo local root exploit discovered by Slouching, Steve Shockley
Sparta Systems TrackWise TeamAccess module Multiple Cross Site Scripting Vulnerabilities, lament
ZDI-10-023: Multiple Vendor librpc.dll Signedness Error Remote Code Execution Vulnerability, ZDI Disclosures
[ MDVSA-2010:052 ] sudo, security
1024CMS Blind SQL Injection Vulnerability, admin
ZDI-10-022: IBM Informix librpc.dll Multiple Remote Code Execution Vulnerabilities, ZDI Disclosures
[ MDVSA-2010:051 ] mozilla-thunderbird, security
[SECURITY] [DSA 2004-1] New Linux 2.6.24 packages fix several vulnerabilities, dann frazier
[SECURITY] [DSA 2004-1] New samba packages fix several vulnerabilities, Moritz Muehlenhoff
Oracle Siebel 7.x CRM Cross Site Scripting Vulnerability, lament
CONFidence 2010 /25-26 May/, CfP, andrzej . targosz
Month of PHP Security 2010 - CALL FOR PAPERS, Stefan Esser
[USN-905-1] sudo vulnerabilities, Jamie Strandboge
ARISg5 (version 5.0) cross site scripting vulnerability, Yaniv Miron
- <Possible follow-ups>
- ARISg5 (Version 5.0) Cross Site Scripting Vulnerability, lament
[ MDVSA-2010:050 ] apache-mod_security, security
getPlus insufficient domain name validation vulnerability, Akita Software Security
AST-2010-003: Invalid parsing of ACL rules can compromise security, Asterisk Security Team
[ MDVSA-2010:049 ] sudo, security
SyScan'10 CALL FOR PAPERS, thomas@xxxxxxxxxx
SQL injection vulnerability in WebAdministrator Lite CMS, Maciej Gojny
[ MDVSA-2010:048 ] roundcubemail, security
Form-based HTTP Authentication Proof of Concept, Timothy D. Morgan
Hacktics Advisory Feb10: XSS in IBM WebSphere Portal & Lotus WCM, Ofer Maor
NSOADV-2010-003: DATEV ActiveX Control remote command execution, NSO Research
[USN-904-1] Squid vulnerability, Marc Deslauriers
SQL injection vulnerability in LiveChatNow, Support TEAM
Rbot Owner Reaction Command Execution, Matthias -apoc- Hecker
ESA-2010-003: EMC HomeBase Server Arbitrary File Upload Vulnerability, Security_Alert
iDefense Security Advisory 02.23.10: Multiple Vendor NOS Microsystems getPlus Downloader Input Validation Vulnerability, iDefense Labs
[ MDVSA-2010:047 ] fuse, security
ZDI-10-021: Novell NetStorage xsrvd Long Pathname Remote Code Execution Vulnerability, ZDI Disclosures
ZDI-10-020: EMC HomeBase SSL Service Arbitrary File Upload Remote Code Execution Vulnerability, ZDI Disclosures
Kojoney (SSH honeypot) remote DoS, Nicob
[TKADV2010-003] avast! 4.8 and 5.0 aavmker4.sys Kernel Memory Corruption, Tobias Klein
CA20100223-01: Security Notice for CA eHealth Performance Manager, Kotas, Kevin J
VUPEN Security Research - Symantec Products "SYMLTCOM.dll" Buffer Overflow Vulnerability, VUPEN Security Research
[ MDVSA-2010:046 ] ncpfs, security
[ MDVSA-2010:045 ] php, security
Chuck Norris Botnet and Broadband Routers, Gadi Evron
- Re: Chuck Norris Botnet and Broadband Routers, Adrian P.
Official Portal 2007 Multiple Vulnerabilities, info
[ MDVSA-2010:043 ] libtheora, security
Request for feedback on TCP security (IETF effort), Fernando Gont
[DSECRG-09-039] Symantec Antivirus 10.0 ActiveX - buffer Overflow., Alexandr Polyakov
ZDI-10-019: Mozilla Firefox showModalDialog Cross-Domain Scripting Vulnerability, ZDI Disclosures
jQuery Validate 1.6.0 Demo Code Advisory, CodeScan Labs Advisories
London DEFCON February meet - DC4420 - Wed 24th Feb 2010, Major Malfunction
Easy FTP Server 1.7.0.2 Remote BoF, jonbutler88
- <Possible follow-ups>
- Re: Easy FTP Server 1.7.0.2 Remote BoF, Paul Makowski
[SECURITY] [DSA 2003-1] New Linux 2.6.18 packages fix several vulnerabilities, dann frazier
Hacktics Advisory Feb10: Persistent XSS in Microsoft SharePoint Portal, Ofer Maor
Multiple Adobe Products - XML External Entity And XML Injection Vulnerabilities, Roberto Suggi Liverani
[USN-902-1] Pidgin vulnerabilities, Marc Deslauriers
[ MDVSA-2010:044 ] mysql, security
CA20100222-01: Security Notice for CA Service Desk, Kotas, Kevin J
Secunia Research: Bournal Insecure Temporary Files Security Issue, Secunia Research
Secunia Research: Bournal ccrypt Information Disclosure Security Issue, Secunia Research
SEC Consult SA-20100208-0 :: Backdoor and Vulnerabilities in Xerox WorkCentre Printers Web Interface, SEC Consult Research
[ MDVSA-2010:042 ] firefox, security
[SECURITY] [DSA-2002-1] New polipo packages fix denial of service, Stefan Fritsch
[SECURITY] [DSA-2001-1] New php5 packages fix multiple vulnerabilities, Raphael Geissert
SQL injection vulnerability in Amelia CMS, Maciej Gojny
AST-2010-002: Dialplan injection vulnerability, Asterisk Security Team
[USN-890-5] XML-RPC for C and C++ vulnerabilities, Jamie Strandboge
[SECURITY] [DSA 2000-1] New ffmpeg packages fix several vulnerabilities, Moritz Muehlenhoff
SphereCMS Blind SQL Injection Vulnerability, admin
Kusaba X <= 0.9 XSS/CSRF vulnerabilities, systemx00
[USN-896-1] Firefox 3.5 and Xulrunner 1.9.1 vulnerabilities, Jamie Strandboge
TLS/SSL Hardening & Compatibility Report 2010, Thierry Zoller
BugCon 2010 Call For Papers, saintarmin
[ MDVSA-2010:034-2 ] kernel, security
[SECURITY] [DSA 1998-1] New kdelibs packages fix arbitrary code execution, Moritz Muehlenhoff
Cisco Security Advisory: Multiple Vulnerabilities in Cisco Security Agent, Cisco Systems Product Security Incident Response Team
[ MDVSA-2010:041 ] pidgin, security
Circumventing Critical Security in Windows XP, barkley
- Re: Circumventing Critical Security in Windows XP, Ansgar Wiechers
- <Possible follow-ups>
- Re: Circumventing Critical Security in Windows XP, Jeroen
- Re: Re: Circumventing Critical Security in Windows XP, anonym
  - Re: Re: Circumventing Critical Security in Windows XP, Jann Horn
  - Re: Circumventing Critical Security in Windows XP, Ansgar Wiechers
Pixel Portal Sql Injection Vulnerability, info
[USN-895-1] Firefox 3.0 and Xulrunner 1.9 vulnerabilities, Jamie Strandboge
[ MDVSA-2010:039 ] netpbm, security
[ MDVSA-2010:034-1 ] kernel, security
[SECURITY] [DSA 1999-1] New xulrunner packages fix several vulnerabilities, Moritz Muehlenhoff
[ MDVSA-2010:040 ] gnome-screensaver, security
Cisco Security Advisory: Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances, Cisco Systems Product Security Incident Response Team
- <Possible follow-ups>
- Cisco Security Advisory: Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances, Cisco Systems Product Security Incident Response Team
- Cisco Security Advisory: Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances, Cisco Systems Product Security Incident Response Team
Cisco Security Advisory: Cisco Firewall Services Module Skinny Client Control Protocol Inspection Denial of Service Vulnerability, Cisco Systems Product Security Incident Response Team
- <Possible follow-ups>
- Cisco Security Advisory: Cisco Firewall Services Module Skinny Client Control Protocol Inspection Denial of Service Vulnerability, Cisco Systems Product Security Incident Response Team
Secunia Research: Mozilla Firefox Memory Corruption Vulnerability, Secunia Research
Cross-Site Scriting on Portwise SSL VPN v4.6, research
ZDI-10-018: IBM Cognos Server Backdoor Account Remote Code Execution Vulnerability, ZDI Disclosures
MITKRB5-SA-2010-001 [CVE-2010-0283] krb5-1.7 KDC denial of service, Tom Yu
Trusteer Rapport Security Circumvention, barkley
- RE: Trusteer Rapport Security Circumvention, Amit Klein
Huawei HG510 CSRF, Auth Bypass, DoS, ivan . markovic
Pogodny CMS SQL vulnerabilities, Maciej Gojny
IE address bar characters into a small feature, info
VMSA-2010-0003 ESX Service Console update for net-snmp, VMware Security Team
Insomnia : ISVA-100216.1 - Windows URL Handling Vulnerability, Brett Moore
[ MDVSA-2010:038 ] maildrop, security
VUPEN Security Research - OpenOffice Word Document Processing Heap Overflow Vulnerabilities, VUPEN Security Research
Enomaly ECP: Multiple vulnerabilities in VMcasting protocol & implementation., sam . johnston
- <Possible follow-ups>
- Re: Enomaly ECP: Multiple vulnerabilities in VMcasting protocol & implementation., lars
Multiple Stored XSS in XOOPS 2.4.4 Admin Section, beenudel1986
[USN-901-1] Squid vulnerabilities, Marc Deslauriers
Chrome Password Manager Cross Origin Weakness (CVE-2010-0556), VSR Advisories
Information disclosure vulnerability in Drupal's Realname User Reference Widget contributed module (version 6.x-1.0), Martin Barbella
- <Possible follow-ups>
- Re: Information disclosure vulnerability in Drupal's Realname User Reference Widget contributed module (version 6.x-1.0), mori
[USN-900-1] Ruby vulnerabilities, Marc Deslauriers
[ MDVSA-2010:037 ] fetchmail, security
Joomla (Jw_allVideos) Remote File Download Vulnerability, info
- <Possible follow-ups>
- Re: Joomla (Jw_allVideos) Remote File Download Vulnerability, lafrancevi
- Re: Re: Joomla (Jw_allVideos) Remote File Download Vulnerability, info
[SECURITY] [DSA-1997-1] New mysql-dfsg-5.0 packages fix several vulnerabilities, Giuseppe Iuculano
[SECURITY] [DSA-1996-1] New Linux 2.6.26 packages fix several vulnerabilities, dann frazier
[ MDVSA-2010:036 ] webmin, security
cmsmadesimple Multiple Security Issues : XSS+ LFI, beenudel1986
[security bulletin] HPSBMA02486 SSRT090049 rev.2 - HP OpenView Network Node Manager (OV NNM) Java Runtime Environment (JRE) and Java Developer Kit (JDK), Remote Execution of Arbitrary Code and Other Vulnerabilities, security-alert
iDefense Security Advisory 02.09.10: Microsoft PowerPoint LinkedSlideAtom Heap Overflow Vulnerability, iDefense Labs
iDefense Security Advisory 02.09.10: Microsoft PowerPoint OEPlaceholderAtom Invalid Array Indexing Vulnerability, iDefense Labs
e-Sentinel Security Advisory - Ref: Session Hijacking iPhone Facebook Application ver 3.1.2, bill . robson
iDefense Security Advisory 02.09.10: Microsoft PowerPoint OEPlaceholderAtom Use-After-Free Vulnerability, iDefense Labs
ChemViewX v1.9.5 ActiveX Control Mutliple Stack Overflows, Paul Craig
SQL injection vulnerability in apemCMS, Maciej Gojny
[security bulletin] HPSBMA02488 SSRT100013 rev.1 - HP ProLiant Support Pack 8.30 for Windows, Remote Code Execution, Information Disclosure, security-alert
[security bulletin] HPSBPI02507 SSRT100012 rev.2 - HP DreamScreen, Remote Disclosure of Information, security-alert
[SECURITY] [DSA 1994-1] New ajaxterm packages fix session hijacking, Raphael Geissert
[ MDVSA-2010:035 ] openoffice.org, security
[USN-899-1] Tomcat vulnerabilities, Marc Deslauriers
RE: Trustwave's SpiderLabs Security Advisory TWSL2010-001, David Byrne
[Onapsis Security Advisory 2010-002] SAP J2EE Engine MDB Path Traversal, Onapsis Research Labs
[Onapsis Security Advisory 2010-003] SAP WebDynpro Runtime XSS/CSS Injection, Onapsis Research Labs
[Onapsis Security Advisory 2010-004] SAP J2EE Authentication Phishing Vector, Onapsis Research Labs
- <Possible follow-ups>
- Re: [Onapsis Security Advisory 2010-004] SAP J2EE Authentication Phishing Vector, david . durham
[SECURITY] [DSA 1993-1] New otrs2 packages fix SQL injection, Raphael Geissert
[security bulletin] HPSBMA02486 SSRT090049 rev.1 - HP OpenView Network Node Manager (OV NNM) Java Runtime Environment (JRE) and Java Developer Kit (JDK), Remote Execution of Arbitrary Code and Other Vulnerabilities, security-alert
Trustwave's SpiderLabs Security Advisory TWSL2010-001, Trustwave Advisories
- Re: [WEB SECURITY] Trustwave's SpiderLabs Security Advisory TWSL2010-001, Arian J. Evans
- (resend) RE: [WEB SECURITY] Trustwave's SpiderLabs Security Advisory TWSL2010-001, Chris Weber
- RE: [WEB SECURITY] Trustwave's SpiderLabs Security Advisory TWSL2010-001, Ivan Buetler
  - RE: [WEB SECURITY] Trustwave's SpiderLabs Security Advisory TWSL2010-001, David Byrne
- <Possible follow-ups>
- RE: Trustwave's SpiderLabs Security Advisory TWSL2010-001, David Byrne
[USN-898-1] gnome-screensaver vulnerability, Marc Deslauriers
stratsec Security Advisory SS-2010-003 - Microsoft SMB Client Pool Overflow, stratsec Research
[USN-897-1] MySQL vulnerabilities, Marc Deslauriers
[security bulletin] HPSBMA02484 SSRT090076 rev.1 - HP Network Node Manager (NNM), Remote Execution of Arbitrary Commands, security-alert
Cisco Security Advisory: Multiple Vulnerabilities in Cisco IronPort Encryption Appliance, Cisco Systems Product Security Incident Response Team
Windows SMB NTLM Authentication Weak Nonce Vulnerability, Hernan Ochoa
ACM CCS 2010: Call for Workshop Proposals, Christopher Kruegel
ZDI-10-017: Microsoft Office PowerPoint Viewer TextBytesAtom Record Remote Code Execution Vulnerability, ZDI Disclosures
ZDI-10-016: Microsoft Windows ShellExecute Improper Sanitization Code Execution Vulnerability, ZDI Disclosures
ZDI-10-015: Microsoft Windows RLE Video Decompressor Remote Code Execution Vulnerability, ZDI Disclosures
TPTI-10-02: Microsoft Office PowerPoint Viewer TextCharsAtom Record Code Execution Vulnerability, ZDI Disclosures
CORE-2009-0827: Microsoft Office Excel / Word OfficeArtSpgr Container Pointer Overwrite Vulnerability, CORE Security Technologies Advisories
Secunia Research: Microsoft PowerPoint File Path Handling Buffer Overflow, Secunia Research
Aruba Advisory ID: AID-020810 TLS Protocol Session Renegotiation Security Vulnerability, Robbie Gill
Hacktics Advisory Feb09: XSS in Oracle E-Business Suite, Ofer Maor
[Hacking Event] Night Da Hack 2010 : Call For Proposals, m . mahdjoub
[CORE-2010-0121] Multiple Vulnerabilities with 8.3 Filename Pseudonyms in Web Servers, CORE Security Technologies Advisories
JDownloader Remote Code Execution, Matthias -apoc- Hecker
[security bulletin] HPSBUX02503 SSRT100019 rev.1 - HP-UX Running Java, Remote Increase in Privilege, Denial of Service and Other, security-alert
[security bulletin] HPSBMA02487 SSRT100024 rev.1 - HP Operations Agent Running on Solaris 10, Remote Unauthorized Access, security-alert
[ MDVSA-2010:034 ] kernel, security
mongoose Space Character Remote File Disclosure Vulnerability, info
[MajorSecurity Advisory #65]Motorola Milestone Smartphone Denial of Service, david
LDF (Default.asp) Sql Injection Vulnerability, Arash . Setayeshi
CORELAN-10-010 - GeFest Web HomeServer v1.0 Remote Directory Traversal Vulnerability, Security
[DSECRG-09-065] TVUPlayer PlayerOcx.ocx ActiveX - Insecure method, Alexandr Polyakov
[Suspected Spam]Vulnerability in Tagcloud for DataLife Engine, MustLive
[ MDVSA-2010:033 ] squid, security
Samba Remote Zero-Day Exploit, Kingcope
- Re: Samba Remote Zero-Day Exploit, Kingcope
- <Possible follow-ups>
- Re: Samba Remote Zero-Day Exploit, paul . szabo
  - Re: [Full-disclosure] Samba Remote Zero-Day Exploit, Thierry Zoller
  - Re: Samba Remote Zero-Day Exploit, Kingcope
    - Re: Samba Remote Zero-Day Exploit, paul . szabo
- Re: Samba Remote Zero-Day Exploit, paul . szabo
  - RE: Samba Remote Zero-Day Exploit, David Jacoby
- Re: Samba Remote Zero-Day Exploit, paul . szabo
  - Message not available
    - Re: Samba Remote Zero-Day Exploit, Stefan Kanthak
      - RE: Samba Remote Zero-Day Exploit, Michael Wojcik
        
        Re: Samba Remote Zero-Day Exploit, Stefan Kanthak
        
        RE: Samba Remote Zero-Day Exploit, Michael Wojcik
      - Re: Samba Remote Zero-Day Exploit, Dan Kaminsky
        
        Re: Samba Remote Zero-Day Exploit, Stefan Kanthak
        
        Re: Samba Remote Zero-Day Exploit, Dan Kaminsky
  - Re: [Full-disclosure] Samba Remote Zero-Day Exploit, Thierry Zoller
    - Re: [Full-disclosure] Samba Remote Zero-Day Exploit, paul . szabo
    - Re: [Full-disclosure] Samba Remote Zero-Day Exploit, Krzysztof Halasa
Recon Call for Papers - July 9-11 2010, Hugo Fortier
Secunia Research: libmikmod Module Parsing Vulnerabilities, Secunia Research
JAHx102 - HuskiCMS local file inclusion, noreply
JAHx101 - Huski retail mulitple SQL injection vulnerabilities, noreply
CORE-2010-0104 - LANDesk OS command injection, CORE Security Technologies Advisories
CORELAN-10-009 : Ipswitch IMAIL 11.01 multiple vulnerabilities (reversible encryption + weak ACL), Security
CORELAN-10-008 - Multiple vulnerabilities found in evalmsi 2.1.03, Peter Van Eeckhoutte
[SECURITY] [DSA 1992-1] New chrony packages fix denial of service, Nico Golde
[ MDVSA-2010:032 ] rootcerts, security
[MajorSecurity Advisory #64]Apple Safari 4.0.4 Denial of Service, david
[SECURITY] [DSA-1990-1] New trac-git packages fix code execution, Florian Weimer
[SECURITY] [DSA 1991-1] New squid/squid3 packages fix denial of service, Steffen Joeris
[SECURITY] [DSA-1990-2] New trac-git package fixes regression, Stefan Fritsch
[security bulletin] HPSBMA02504 SSRT090220 rev.1 - HP System Management Homepage (SMH) for Linux and Windows, Remote Cross Site Scripting (XSS), security-alert
CORE-2009-0625: Internet Explorer Dynamic OBJECT tag and URLMON sniffing vulnerabilities, Core Security Technologies Advisories
[DSECRG-09-011] HP StorageWorks 1_8 G2 Tape Autoloader - privilege escalation DOS, Alexandr Polyakov
[Hellcode Research]: AOL 9.5 File Parsing Buffer Overflow Vulnerability, karakorsankara
[SECURITY] [DSA-1989-1] New fuse packages fix denial of service, Giuseppe Iuculano
[CSO10002] Attachment path traversal in Outlook Web Access, Ricardo Martins - Chief Security Officers
[ MDVSA-2010:031 ] wireshark, security
[SECURITY] [DSA-1988-1] New qt4-x11 packages fix several vulnerabilities, Giuseppe Iuculano
AST-2010-001: T.38 Remote Crash Vulnerability, Asterisk Security Team
[security bulletin] HPSBOV02505 SSRT100023 rev.1 - HP OpenVMS RMS, Local Escalation of Privilege, security-alert
[SECURITY] [DSA 1986-1] New moodle packages fix several vulnerabilities, Steffen Joeris
[security bulletin] HPSBUX02479 SSRT090212 rev.1 - HP-UX running HP CIFS Server (Samba), Remote Unauthorized Access, security-alert
OpenCart CSRF Vulnerability, ben
360 Security Guard breg device drivers Privilege Escalation Vulnerabilitie, qiqiguaiguai
Remote Vulnerability in AIX RPC.cmsd released by iDefense, Rodrigo Rubira Branco (BSDaemon)
[SECURITY] [DSA 1987-1] New lighttpd packages fix denial of service, Nico Golde
Tinypug Multiple Vulnerabilities, admin
[security bulletin] HPSBUX02464 SSRT090210 rev.1 - HP Enterprise Cluster Master Toolkit (ECMT) running on HP-UX, Local, security-alert
[SECURITY] [DSA 1985-1] New sendmail packages fix SSL certificate verification weakness, Giuseppe Iuculano
RaakCms Multiple Vulnerabilities, info
[SECURITY] [DSA 1984-1] New libxerces2-java packages fix denial of service, Giuseppe Iuculano
[CORE-2009-1126] Corel Paint Shop Pro Photo X2 FPX Heap Overflow, CORE Security Technologies Advisories
iDefense Security Advisory 02.01.10: RealNetworks RealPlayer 11 HTTP Chunked Encoding Integer Overflow Vulnerability, iDefense Labs
Security Advisory for Bugzilla 3.0.10, 3.2.5, 3.4.4, and 3.5.2, mkanat
Joomla (com_gambling) SQL Injection Vulnerabilities, md . r00t . defacer
[ MDVSA-2010:030 ] kernel, security
[CORE-2010-0106] Cisco Secure Desktop XSS/JavaScript Injection, Core Security Technologies Advisories
XSS vulnerability in Drupal's MP3 Player contributed module (version 6.x-1.0-beta1), Martin Barbella
iDefense Security Advisory 02.01.10: RealNetworks RealPlayer CMediumBlockAllocator Integer Overflow Vulnerability, iDefense Labs
iDefense Security Advisory 02.01.10: Real Networks RealPlayer Compressed GIF Handling Integer Overflow, iDefense Labs
VMSA-2010-0002 VMware vCenter update release addresses multiple security issues in Java JRE, VMware Security Team
[SECURITY] [DSA 1983-1] New Wireshark packages fix several vulnerabilities, Moritz Muehlenhoff
[TKADV2010-001] Oracle Solaris UCODE_GET_VERSION IOCTL Kernel NULL Pointer Dereference, Tobias Klein
eWebeditor ASP Version Multiple Vulnerabilities, info
Tavanmand Portal (fckeditor) Remote Arbitrary File Upload Vulnerability, info
{PRL} Xerox Workcenter 4150 Remote Buffer Overflow, Francis Provencher
Cross-Site History Manipulation (XSHM), Alex Roichman
- Re: Cross-Site History Manipulation (XSHM), Michal Zalewski
Advisory: jBCrypt < 0.3 character encoding vulnerability, Damien Miller
[SECURITY] [DSA 1982-1] New hybserv packages fix denial of service, Steffen Joeris
iPhone certificate flaws, cryptopath
- [Suspected Spam]Hackito Ergo Sum 2010 - Call For Paper - HES2010 CFP, Philippe Mailinglist
[SECURITY] [DSA 1841-2] New git-core packages fix build failure, Thijs Kinkhorst
OCS Inventory NG Server <= 1.3b3 (login) Remote Authentication Bypass, Nicolas DEROUET
[ MDVSA-2010:029 ] rootcerts, security
Multiple vulnerabilities in XAMPP (advisory #7), MustLive
- Message not available
  - Re: Multiple vulnerabilities in XAMPP (advisory #7), MustLive
    - Message not available
      - Re: Multiple vulnerabilities in XAMPP (advisory #7), MustLive
Multiple vulnerabilities in XAMPP (advisories #5 and #6), MustLive
Multiple vulnerabilities in XAMPP (advisories #3 and #4), MustLive
Multiple vulnerabilities in XAMPP (advisories #1 and #2), MustLive
[SECURITY] [DSA 1968-2] New pdns-recursor packages fix cache poisoning, Florian Weimer
[USN-892-1] FUSE vulnerability, Kees Cook
[SECURITY] [DSA 1981-2] New maildrop packages fix regression, Steffen Joeris
[USN-893-1] Samba vulnerability, Marc Deslauriers
PR09-19: Cross-Site Scripting (XSS) on CommonSpot server, research
[SECURITY] [DSA 1981-1] New maildrop packages fix privilege escalation, Steffen Joeris
Firefox Observation Plugin Attack, Ivan Buetler
Rising AntiVirus 2008/2009/2010 Local Privilege Escalation Exploit, dlrow1991
[USN-891-1] lintian vulnerabilities, Kees Cook
[SECURITY] [DSA 1980-1] New ircd-hybrid/ircd-ratbox packages fix arbitrary code execution, Steffen Joeris
[ MDVSA-2010:028 ] kdelibs4, security
PR09-15: XSS injection vulnerability within HP System Management Homepage (Insight Manager), research
Cisco Security Advisory: Multiple Vulnerabilities in Cisco Unified MeetingPlace, Cisco Systems Product Security Incident Response Team
[USN-803-2] Dhcp vulnerability, Jamie Strandboge
[SECURITY] [DSA-1979-1] New lintian packages fix multiple vulnerabilities, Raphael Geissert
[RT-SA-2010-003] Geo++(R) GNCASTER: Faulty implementation of HTTP Digest Authentication, RedTeam Pentesting GmbH
[RT-SA-2010-002] Geo++(R) GNCASTER: Insecure handling of NMEA-data, RedTeam Pentesting GmbH
[RT-SA-2010-001] Geo++(R) GNCASTER: Insecure handling of long URLs, RedTeam Pentesting GmbH
[InterN0T] ShareTronix 1.0.4 - HTML Injection Vulnerability, advisories
[ MDVSA-2010:027 ] kdelibs4, security
Mod_proxy from apache 1.3 - Integer overflow which causes heap overflow., pi3
[security bulletin] HPSBMA02502 SSRT090171 rev.1 - HP OpenView Storage Data Protector, Local Unauthorized Access, security-alert
- <Possible follow-ups>
- [security bulletin] HPSBMA02502 SSRT090171 rev.1 - HP OpenView Storage Data Protector, Local Unauthorized Access, security-alert
PR09-02 Multiple Cross-Site Scripting (XSS) / Cross Domain redirects and Server path information disclosure on SAP BusinessObjects version 12, Rolando Fuentes
[USN-890-4] PyXML vulnerabilities, Jamie Strandboge
More information on CVE-2009-3580, Chris Travers
The future of XSS attacks, MustLive
[SECURITY] [DSA 1978-1] New phpgroupware packages fix several vulnerabilities, Moritz Muehlenhoff
Netsupport gateway remote DoS, watcher60
Cross-Site Scripting vulnerability in 3D Cloud for Joomla, MustLive
Paper: Weaning the Web off of Session Cookies, Timothy D. Morgan
- Re: [Webappsec] Paper: Weaning the Web off of Session Cookies, James Landis
  - Re: [Webappsec] Paper: Weaning the Web off of Session Cookies, Arian J. Evans
    - Re: [Webappsec] Paper: Weaning the Web off of Session Cookies, Timothy D. Morgan
      - Re: [Webappsec] Paper: Weaning the Web off of Session Cookies, Arian J. Evans
        
        Re: [Webappsec] Paper: Weaning the Web off of Session Cookies, Timothy D. Morgan
        
        Message not available
        
        Re: [Webappsec] Paper: Weaning the Web off of Session Cookies, Timothy D. Morgan
  - Re: [Webappsec] Paper: Weaning the Web off of Session Cookies, Timothy D. Morgan
    - Re: [Webappsec] Paper: Weaning the Web off of Session Cookies, Chris Travers
[ MDVSA-2010:026 ] openldap, security
[security bulletin] HPSBMA02477 SSRT090177 rev.4 - HP OpenView Network Node Manager (OV NNM), Remote Denial of Service (DoS), security-alert
Microsoft IE 6&7 Crash Exploit, info
- RE: Microsoft IE 6&7 Crash Exploit, Santhosh
- Re: Microsoft IE 6&7 Crash Exploit, Berend-Jan Wever
- <Possible follow-ups>
- Re: RE: Microsoft IE 6&7 Crash Exploit, sdasdasd
- Re: Microsoft IE 6&7 Crash Exploit, k4mr4n_st
Setting arbitrary Personas without user interaction in Firefox 3.6, Artur Janc
Secunia Research: Google Chrome Pop-Up Block Menu Handling Vulnerability, Secunia Research
[SECURITY] [DSA-1977-1] New python packages fix several vulnerabilities, Giuseppe Iuculano
FWD: LedgerSMB Security Advisory: Multiple Vulnerabilities, Chris Travers
Security improvements of Microsoft Silverlight Build 3.0.50106.0?, Juha-Matti Laurio
[ MDVSA-2010:025 ] php-pear-Mail, security
DDIVRT-2009-27 F2L-3000 files2links SQL Injection Vulnerability, ddivulnalert
[ MDVSA-2010:024 ] coreutils, security
CVE-2009-3583, confirming problem and adding info, Chris Travers
[SECURITY] CVE-2009-2901 Apache Tomcat insecure partial deploy after failed undeploy, Mark Thomas
Safari 4.0.4 Crash, systemx00
[SECURITY] CVE-2009-2902 Apache Tomcat unexpected file deletion in work directory, Mark Thomas
[SECURITY] CVE-2009-2693 Apache Tomcat unexpected file deletion and/or alteration, Mark Thomas
e107 latest download link is backdoored, Bogdan Calin
- Re: e107 latest download link is backdoored, Chris Travers
- Re: e107 latest download link is backdoored, Valery Marchuk
- Re: e107 latest download link is backdoored, Carsten Eilers
  - Re: [Full-disclosure] e107 latest download link is backdoored, David Sopas
  - Re: [Full-disclosure] e107 latest download link is backdoored, Gregor Schneider
    - Re: [Full-disclosure] e107 latest download link is backdoored, Fernando Augusto

[Index of Archives] [Netfilter] [Security] [PHP] [Linux Kernel]