Bugtraq

• Date Index

• rPSA-2009-0123-1 apr-util, rPath Update Announcements
• rPSA-2009-0124-1 curl, rPath Update Announcements
• [USN-823-1] KDE-Graphics vulnerabilities, Marc Deslauriers
• [ MDVSA-2009:220 ] davfs, security
• [USN-822-1] KDE-Libs vulnerabilities, Marc Deslauriers
• [SECURITY] [DSA 1872-1] New Linux 2.6.18 packages fix several vulnerabilities, dann frazier
• [ MDVSA-2009:219 ] kompozer, security
• [ MDVSA-2009:218 ] w3c-libwww, security
• Packet Storm is back online., Packet Storm
• DoS vulnerability in Google Chrome, MustLive
  • <Possible follow-ups>
  • RE: DoS vulnerability in Google Chrome, advisories
    • Re: DoS vulnerability in Google Chrome, MustLive
  • Re: DoS vulnerability in Google Chrome, advisories
    • Re: DoS vulnerability in Google Chrome, MustLive
• Update Scanner - Firefox Extension - Chrome Privileged Code Injection, Roberto Suggi Liverani
• FLIP Flash Album Deluxe 1.8.407.1 (.fft File) Crash Vulnerability Exploit, the_3dit0r
• Radvision's Scopia Cross Site Scripting Vulnerabilities, Francesco Bianchino
• AiO ( All into One) Flash Mixer 3 (.afp File) Crash Vulnerability Exploit, the_3dit0r
• WizzRSS Firefox Extension - Privileged Code Injection, Nick Freeman
• ScribeFire Firefox Extension - Privileged Code Injection, Nick Freeman
• Feed Sidebar Firefox Extension - Privileged Code Injection, Nick Freeman
• [ MDVSA-2009:217 ] mozilla-thunderbird, security
• [ MDVSA-2009:216 ] mozilla-thunderbird, security
• [ MDVSA-2009:215 ] audacity, security
• [ MDVSA-2009:214 ] python-celementtree, security
• [ MDVSA-2009:213 ] wxgtk, security
  • <Possible follow-ups>
  • [ MDVSA-2009:213 ] wxgtk, security
• WM Downloader (.Smi/ .Ram/ .pls/ .smil/ .wax/ .wpl File) Local Buffer Overflow Exploit, the_3dit0r
• CoolPreviews - Firefox Extension - Chrome Privileged Code Injection, Roberto Suggi Liverani
• [ MDVSA-2009:212 ] python, security
  • <Possible follow-ups>
  • [ MDVSA-2009:212 ] python, security
• [ MDVSA-2009:211 ] expat, security
• [SECURITY] [DSA 1871-1] New wordpress packages fix several vulnerabilities, Steffen Joeris
• Local Kernel Buffer Overflow vulnerability in Avast!, s . leberre
• FreeBSD <= 6.1 kqueue() NULL pointer dereference, Przemyslaw Frasunek
• DoS vulnerabilities in Mozilla Firefox, Internet Explorer and Chrome, MustLive
• Cuteflow Version 2.10.3 "edituser.php" Security Bypass Vulnerability, hever
• Infinity <= v2.X.X (Local File Disclosure/Auth Bypass) Vulnerabilities, gamr-14
• Clear Text Storage of Password in CS-MARS v6.0.4 and Earlier, ryan . wessels
  • Re: Clear Text Storage of Password in CS-MARS v6.0.4 and Earlier, Eloy Paris
• VMSA-2009-0010 VMware Hosted products update libpng and Apache HTTP Server, VMware Security team
• [ MDVSA-2009:210 ] gnutls, security
• [ MDVSA-2009:209 ] java-1.6.0-openjdk, security
• [USN-817-1] Thunderbird vulnerabilities, Jamie Strandboge
• [ MDVSA-2009:208 ] libgadu, security
• SQL Injection vulnerabilities in Subdreamer CMS, itweb
  • <Possible follow-ups>
  • Re: SQL Injection vulnerabilities in Subdreamer CMS, ziad
• t2?09 Challenge - Free Tickets Available, Tomi Tuominen
• [USN-820-1] Pidgin vulnerability, Marc Deslauriers
• iDefense Security Advisory 07.28.09: Multiple Vendor Microsoft ATL/MFC ActiveX Information Disclosure Vulnerability, iDefense Labs
• [Bkis-11-2009] ProShow Gold Buffer Overflow Vulnerabilities, Bkis
• iDefense Security Advisory 07.28.09: Multiple Vendor Microsoft ATL/MFC ActiveX Security Bypass Vulnerability, iDefense Labs
• iDefense Security Advisory 08.11.09: Multiple Vendor Microsoft ATL/MFC ActiveX Type Confusion Vulnerability, iDefense Labs
• Bypassing OWASP ESAPI XSS Protection inside Javascript, Inferno
  • RE: Bypassing OWASP ESAPI XSS Protection inside Javascript, Schmidt, Chris
• [USN-809-1] GnuTLS vulnerabilities, Jamie Strandboge
• [SECURITY] [DSA 1870-1] New pidgin packages fix arbitrary code execution, Nico Golde
• [ MDVSA-2009:207 ] perl-Compress-Raw-Bzip2, security
• [SECURITY] [DSA 1869-1] New curl packages fix SSL certificate verification weakness, Nico Golde
• iDefense Security Advisory 08.11.09: Microsoft Office Web Components 2000 Buffer Overflow Vulnerability, iDefense Labs
• Adobe Flex 3.3 SDK DOM-Based XSS, labs
• Cisco Security Advisory: Firewall Services Module Crafted ICMP Message Vulnerability, Cisco Systems Product Security Incident Response Team
• [USN-802-2] Apache regression, Marc Deslauriers
• [ MDVSA-2009:206 ] wget, security
• ZDI-09-059: Oracle Secure Backup Administration Server Multiple Command Injection Vulnerabilities, ZDI Disclosures
• ZDI-09-058: Oracle Secure Backup Administration Server Authentication Bypass Vulnerability, ZDI Disclosures
• rPSA-2009-0121-1 kernel open-vm-tools, rPath Update Announcements
• [SECURITY] [DSA 1866-1] New kdegraphics packages fix several vulnerabilities, Steffen Joeris
• rPSA-2009-0119-1 apr apr-util, rPath Update Announcements
• [SECURITY] [DSA 1867-1] New kdelibs packages fix several vulnerabilities, Steffen Joeris
• rPSA-2009-0118-1 mod_dav_svn subversion, rPath Update Announcements
• [SECURITY] [DSA 1868-1] New kde4libs packages fix several vulnerabilities, Steffen Joeris
• CORE-2009-0727: Libpurple msn_slplink_process_msg() Arbitrary Write Vulnerability, CORE Security Technologies Advisories
• [ GLSA 200908-06 ] CDF: User-assisted execution of arbitrary code, Alex Legler
• [ GLSA 200908-09 ] DokuWiki: Local file inclusion, Alex Legler
• CA20090818-02: Security Notice for CA Internet Security Suite, Kotas, Kevin J
• [ GLSA 200908-10 ] Dillo: User-assisted execution of arbitrary code, Alex Legler
• [ GLSA 200908-08 ] ISC DHCP: dhcpd Denial of Service, Alex Legler
• CA20090818-01: Security Notice for CA Host-Based Intrusion Prevention System, Kotas, Kevin J
• [ GLSA 200908-05 ] Subversion: Remote execution of arbitrary code, Alex Legler
• [ GLSA 200908-07 ] Perl Compress::Raw modules: Denial of Service, Alex Legler
• [security bulletin] HPSBMA02448 SSRT061231 rev.1 - HP Network Node Manager (NNM) Remote Console Running on Windows, Local Execution of Arbitrary Code, Denial of Service (DoS), security-alert
• Cisco Security Advisory: Cisco Security Advisory: Cisco IOS XR Software Border Gateway Protocol Vulnerability, Cisco Systems Product Security Incident Response Team
• ntop <= 3.3.10 Basic Authentication Null Pointer Denial of Service, brad . antoniewicz
  • (Reposting truncated message) Re: ntop <= 3.3.10 Basic Authentication Null Pointer Denial of Service, dm
• [USN-818-1] curl vulnerability, Kees Cook
• Safari buffer overflow, Leon Juranic
• Vtiger CRM 5.0.4 Multiple Vulnerabilities, ascii
• [ MDVSA-2009:205 ] kernel, security
• TheGreenBow VPN Client tgbvpn.sys DoS and Potential Local, contact . fingers
• [SECURITY] [DSA 1865-1] New Linux 2.6.18 packages fix several vulnerabilities, dann frazier
• [DSECRG-09-051] Adobe JRun 4 Multiple XSS, research
• [ MDVSA-2009:204 ] wxgtk, security
• [DSECRG-09-052] Adobe JRun 4 Directory Traversal Vulnerabilities, research
• DeepSec 2009 - Preliminary Schedule is online, DeepSec Conference
• Piwigo SQL Injection Vulnerability - Security Advisory - SOS-09-007, Lists
• [DSECRG-09-022] Adobe Coldfusion 8 Multiple Linked XSS Vulnerabilies, research
  • Re: [DSECRG-09-022] Adobe Coldfusion 8 Multiple Linked XSS Vulnerabilies, Mike Duncan
• Easy Music Player 1.0.0.2 (wav) Universal Local Buffer Exploit, ostoure . sazan
  • <Possible follow-ups>
  • Re: Easy Music Player 1.0.0.2 (wav) Universal Local Buffer Exploit, support
• [SECURITY] [DSA 1864-1] New Linux 2.6.24 packages fix privilege escalation, dann frazier
• DUgallery 3.0 / Remote Admin Bug, spymeta
• [ MDVSA-2009:203 ] curl, security
• [SECURITY] [DSA 1863-1] New zope2.10/zope2.9 packages fix arbitrary code execution, Nico Golde
• [SECURITY] [DSA 1862-1] New Linux 2.6.26 packages fix privilege escalation, dann frazier
• [ MDVSA-2009:202 ] memcached, security
• ClubHack2009: Call for Papers/Speakers, ClubHack
• ICQ 6.5 HTML-injection vulnerability, ss_contacts
• new vulnerability founded by ostoure, ostoure . sazan
• [SECURITY] [DSA 1861-1] New libxml packages fix several issues, Nico Golde
• [IMF 2009] Call for Participation, Oliver Goebel
• Linux NULL pointer dereference due to incorrect proto_ops initializations, Tavis Ormandy
  • Re: Linux NULL pointer dereference due to incorrect proto_ops initializations, Przemyslaw Frasunek
• KIWICON ]|[ - 2009 Call For Papers, Kiwicon <3
• Fwd: Follow-up: Heartland CEO on Data Breach: QSAs Let Us Down, Jeffrey Walton
• Chris Paget Defcon RFID Presentation Slides Now Online, Timothy (Thor) Mullen
• Static analysis tool exposition (SATE) 2009 - call for participation, Vadim Okun
• Windows 7 Firewire Attacks - and Defense Techniques, Security Research Publications
• [security bulletin] HPSBMA02447 SSRT090062 rev.1 - Insight Control Suite For Linux (ICE-LX) Cross Site Request Forgery (CSRF) , Remote Execution of Arbitrary Code, Denial of Service (DoS), and Other Vulnerabilities, security-alert
• Authentication Bypass of Snom Phone Web Interface, Walter Sprenger
• Elkapax CMS Cross site scripting vulnerability, faghani
  • Re: Elkapax CMS Cross site scripting vulnerability, security curmudgeon
• [USN-816-1] fetchmail vulnerability, Kees Cook
• [SECURITY] [DSA 1860-1] New Ruby packages fix several issues, Florian Weimer
• [ MDVSA-2009:201 ] fetchmail, security
• Microsoft Wordpad Memory Exhaustion (msftedit), murderkey
• Hijacking Safari 4 Top Sites with Phish Bombs, Inferno
• Chavoosh CMS SQL Injection Vulnerability, faghani
• [ MDVSA-2009:200 ] libxml, security
• 2WIRE Gateway Authentication Bypass & Password Reset, hkm
• [DSECRG-09-033] SAP Netweaver UDDI - XSS Security Vulnerability, Alexandr Polyakov
• JibberBook GuestBook 2.3 Multiple Vulnerabilities, contact
• [security bulletin] HPSBUX02437 SSRT090038 rev.2 - HP-UX Running XNTP, Remote Execution of Arbitrary Code, security-alert
• Plume CMS Multiple SQL Injection Vulnerabilities - Security Advisory - SOS-09-006, Lists
• [PT-2008-09] Microsoft Windows MSMQ Privilege Escalation Vulnerability, Valery Marchuk
• [security bulletin] HPSBTU02454 SSRT080172 rev.1 - HP Internet Express for Tru64 UNIX Running Samba, Remote Information Disclosure, security-alert
• ZDI-09-056: Microsoft Office OWC10.Spreadsheet ActiveX BorderAround() Heap Corruption Vulnerability, ZDI Disclosures
• ZDI-09-054: Microsoft Office OWC10.Spreadsheet ActiveX msDataSourceObject() Heap Corruption Vulnerability, ZDI Disclosures
• ZDI-09-053: Microsoft Windows WINS Service Heap Overflow Vulnerability, ZDI Disclosures
• ZDI-09-057: Microsoft Remote Desktop Client Arbitrary Code Execution Vulnerability, ZDI Disclosures
• ZDI-09-055: Microsoft Office OWC10 ActiveX Control Loading and Unloading Heap Corruption Vulnerability, ZDI Disclosures
• [USN-815-1] libxml2 vulnerabilities, Marc Deslauriers
• Sql injection in OCS Inventory NG Server 1.2.1, gmcbr0 gmcbr0
• TPTI-09-06: Microsoft Windows Workstation Service NetrGetJoinInformation Heap Corruption Vulnerability, dvlabs
• IE7 Script, James C. Slora Jr.
• AST-2009-005: Remote Crash Vulnerability in SIP channel driver, Asterisk Security Team
• [security bulletin] HPSBUX02450 SSRT090141 rev1 - HP-UX ttrace(2), Local Denial of Service (DoS), security-alert
  • <Possible follow-ups>
  • [security bulletin] HPSBUX02450 SSRT090141 rev1 - HP-UX ttrace(2), Local Denial of Service (DoS), security-alert
• [USN-814-1] openjdk-6 vulnerabilities, Kees Cook
• [SECURITY] [DSA 1859-1] New libxml2 packages fix several issues, Nico Golde
• [SECURITY] [DSA 1858-1] New imagemagick packages fix several vulnerabilities, Luciano Bello
• [SECURITY] [DSA 1843-2] New squid3 packages fix regression, Nico Golde
• [ MDVSA-2009:197 ] nss, security
  • <Possible follow-ups>
  • [ MDVSA-2009:197 ] nss, security
• [USN-813-2] Apache vulnerability, Jamie Strandboge
• [ MDVSA-2009:199 ] subversion, security
• [SECURITY] [DSA 1856-1] New mantis packages fix information leak, Thijs Kinkhorst
• XSS in SqLiteManager, hadikiamarsi
• [NGENUITY] - Spiceworks Multiple Vulnerabilities (XSS & CSRF), Adam Baldwin
• [USN-812-1] Subversion vulnerability, Jamie Strandboge
• [SECURITY] [DSA 1857-1] New camlimages packages fix arbitrary code execution, Steffen Joeris
• [SECURITY] [DSA 1855-1] New subversion packages fix arbitrary code execution, Florian Weimer
• [RT-SA-2009-005] Papoo CMS: Authenticated Arbitrary Code Execution, RedTeam Pentesting GmbH
• [SECURITY] [DSA 1854-1] New APR packages fix arbitrary code execution, Florian Weimer
• [USN-813-1] apr vulnerability, Jamie Strandboge
• [NGENUITY] - Ticket Subject Persistent XSS in Kayako SupportSuite, Adam Baldwin
• [ MDVSA-2009:198 ] firefox, security
• [ MDVSA-2009:161-1 ] squid, security
• [USN-813-3] apr-util vulnerability, Jamie Strandboge
• ZDI-09-052: CA Unicenter Software Delivery dtscore.dll Stack Overflow Vulnerability, ZDI Disclosures
• ZDI-09-051: EMC Replication Manager Client Control Service Remove Code Execution Vulnerability, ZDI Disclosures
• ASUS Eee PC and other series: BIOS SMM privilege escalation vulnerabilities, core collapse
• iDefense Security Advisory 08.07.09: Adobe Flash Player Invalid Loader Object Reference Vulnerability, iDefense Labs
• [SECURITY] [DSA 1852-1] New fetchmail packages fix SSL certificate verification weakness, Nico Golde
• [ MDVSA-2009:196 ] samba, security
• [SECURITY] [DSA 1853-1] New memcached packages fix arbitrary code execution, Nico Golde
• Subversion heap overflow, Matt Lewis
• [security bulletin] HPSBTU02453 SSRT091037 rev.1 - HP Tru64 UNIX BIND Server, Denial of Service (DoS), security-alert
  • <Possible follow-ups>
  • [security bulletin] HPSBTU02453 SSRT091037 rev.1 - HP Tru64 UNIX BIND Server, Denial of Service (DoS), security-alert
• [security bulletin] HPSBOV02452 SSRT090161 rev.1 - HP TCP/IP Services for OpenVMS BIND Server Remote Denial of Service (DoS), security-alert
• [security bulletin] HPSBUX02451 SSRT090137 rev.1 - HP-UX Running BIND, Remote Denial of Service (DoS), security-alert
  • <Possible follow-ups>
  • [security bulletin] HPSBUX02451 SSRT090137 rev.1 - HP-UX Running BIND, Remote Denial of Service (DoS), security-alert
• [ GLSA 200908-04 ] Adobe products: Multiple vulnerabilities, Robert Buchholz
• [ GLSA 200908-03 ] libTIFF: User-assisted execution of arbitrary code, Robert Buchholz
• CFP: International workshop on Secure Software Engineering, secse
• CA20090806-01: Security Notice for Data Transport Services, Kotas, Kevin J
• CA20090806-02: Security Notice for Unicenter Asset Portfolio Management, Unicenter Desktop and Server Management, Unicenter Patch Management, Kotas, Kevin J
• iDefense Security Advisory 08.06.09: Microsoft Internet Explorer HTML TIME 'ondatasetcomplete' Use After Free Vulnerability, iDefense Labs
• iDefense Security Advisory 08.06.09: Adobe Flash Player URL Parsing Heap Overflow Vulnerability, iDefense Labs
• [ MDVSA-2009:195-1 ] apr, security
• iDefense Security Advisory 08.06.09: IBM AIX libC _LIB_INIT_DBG Arbitrary File Creation Vulnerability, iDefense Labs
• OpenCms (7.5.0) - Vulnerability: Cross-Site Scripting, Phishing Through Frames, Application Error, katie . french
• iDefense Security Advisory 08.06.09: Sun Java Runtime Environment (JRE) Pack200 Decompression Integer Overflow Vulnerability, iDefense Labs
• [CSS09-01] SlideShowPro Director File Disclosure Vulnerability, Scott Miles
• [ MDVSA-2009:195 ] apr, security
• [ MDVSA-2009:194 ] wireshark, security
• [ MDVSA-2009:193 ] ruby, security
• [SECURITY] [DSA 1851-1] New gst-plugins-bad0.10 packages fix arbitrary code execution, Steffen Joeris
• fetchmail security announcement fetchmail-SA-2009-01 (CVE-2009-2666), ma+bt
• ZDI-09-047: Microsoft Internet Explorer getElementsByTagName Memory Corruption Vulnerability, ZDI Disclosures
• ZDI-09-050: Sun Java Web Start JPEG Header Parsing Integer Overflow Vulnerability, ZDI Disclosures
• ZDI-09-049: Sun Java Pack200 Decoding Inner Class Count Integer Overflow Vulnerability, ZDI Disclosures
• ZDI-09-048: Microsoft Internet Explorer CSS Behavior Memory Corruption Vulnerability, ZDI Disclosures
• Multiple Flaws in Huawei SmartAX MT880 [was: Multiple Flaws in Huawei D100], jerome . athias
• [ MDVSA-2009:192 ] phpmyadmin, security
• [USN-811-1] Firefox and Xulrunner vulnerability, Jamie Strandboge
• [USN-810-2] NSPR update, Jamie Strandboge
• [USN-810-1] NSS vulnerabilities, Jamie Strandboge
• [BONSAI] SQL Injection in CS-Cart, Bonsai - Information Security
• Palm Pre WebOS 1.0.4 Remote execution of arbitrary HTML code vulnerability, palmprehacker
• Team SHATTER Security Advisory: Multiple SQL Injection vulnerabilities in Oracle Enterprise Manager, Shatter
• SAP Business One 2005 Remote Buffer Overflow Vulnerability., mikey27
• [SECURITY] [DSA 1850-1] New libmodplug packages fix arbitrary code execution, Steffen Joeris
• Discloser 0.0.4-rc2 SQL Injection Vulnerability, Salvatore Fresta aka Drosophila
• Cross-Site Scripting vulnerabiliy in Firefox and Opera, MustLive
• Blink Blog System Authentication Bypass, Salvatore Fresta aka Drosophila
• [security bulletin] HPSBUX02181 SSRT061289 rev.4 - HP-UX Running IPFilter, Remote Denial of Service (DoS), security-alert
• [security bulletin] HPSBMA02445 SSRT090058 rev.1 - HP Serviceguard Manager, Remote Execution of Arbitrary Code, Denial of Service (DoS), security-alert
• AST-2009-004: Remote Crash Vulnerability in RTP stack, Asterisk Security Team
• [ MDVSA-2009:191 ] OpenEXR, security
• [ MDVSA-2009:190 ] OpenEXR, security
• [SECURITY] [DSA 1849-1] New xml-security-c packages fix signature forgery, Florian Weimer
• [SECURITY] [DSA 1848-1] New znc packages fix remote code execution, Florian Weimer
• Advisory: Adobe Flash Player and AIR AVM2 intf_count Integer Overflow Remote Code Execution (CVE-2009-1869), Roee Hay
• [ GLSA 200908-02 ] BIND: Denial of Service, Alex Legler
• [ MDVSA-2009:189 ] apache-mod_auth_mysql, security
• [ GLSA 200908-01 ] OpenSC: Multiple vulnerabilities, Tobias Heinlein
• [ MDVSA-2009:188 ] php4-eaccelerator, security
• [ MDVSA-2009:187 ] nagios, security
• [ MDVSA-2009:186 ] firebird, security
• [ MDVSA-2009:185 ] firefox, security
• [ MDVSA-2009:184 ] apache-mod_security, security
• [ MDVSA-2009:183 ] apache-mod_security, security
• [ MDVSA-2009:182 ] firefox, security
• XOOPS Multiple Cross-Site Scripting Vulnerabilities - Security Advisory - SOS-09-005, Lists
• [SECURITY] [DSA 1834-2] New apache/apache2-mpm-itk fix regression, Stefan Fritsch
• wordpress plugins wp-Table v1.52 Remote File Inclusion Vulnerability, Cru3l.b0y
  • Re: wordpress plugins wp-Table v1.52 Remote File Inclusion Vulnerability, Francesco Laurita
    • Re: wordpress plugins wp-Table v1.52 Remote File Inclusion Vulnerability, YGN Ethical Hacker Group (http://yehg.net)
• rPSA-2009-0113-1 bind bind-utils, rPath Update Announcements
• [security bulletin] HPSBUX02421 SSRT090047 rev.1 - HP-UX Running Kerberos, Remote Denial of Service (DoS), Execution of Arbitrary Code, security-alert
• EPSON Status Monitor 3 local privilege escalation vulnerability, nospam
• Re: THISISNOTMYEXPLOIT, Kingcope
  • <Possible follow-ups>
  • Re: THISISNOTMYEXPLOIT, Kingcope
• [ MDVSA-2009:181 ] bind, security
• [SECURITY] [DSA 1847-1] New bind9 packages fix denial of service, Florian Weimer
• [ MDVSA-2009:180 ] compface, security
• [ MDVSA-2009:179 ] mysql, security
• [ MDVSA-2009:178 ] squid, security
• [ MDVSA-2009:177 ] ruby, security
• [ MDVSA-2009:176 ] git, security
• [ MDVSA-2009:175 ] pango, security
• Cisco Security Advisory: Cisco IOS Software Border Gateway Protocol 4-Byte Autonomous System Number Vulnerabilities, Cisco Systems Product Security Incident Response Team
• [ MDVSA-2009:174 ] perl-Compress-Raw-Zlib, security
• Pre-Beta Invite , New (Free) Anti-Virus Software, Andrew Mcphee
• [USN-808-1] Bind vulnerability, Kees Cook
• [SECURITY] [DSA 1846-1] New kvm packages fix denial of service, dann frazier
• [SECURITY] [DSA 1845-1] New Linux 2.6.26 packages fix several vulnerabilities, dann frazier
• [SECURITY] [DSA 1844-1] New Linux 2.6.24 packages fix several vulnerabilities, dann frazier
• [ MDVSA-2009:173 ] pidgin, security
• FreeBSD Security Advisory FreeBSD-SA-09:12.bind, FreeBSD Security Advisories
• [ MDVSA-2009:172 ] dhcp, security
• [ MDVSA-2009:170 ] initscripts, security
• [ MDVSA-2009:171 ] pulseaudio, security
• [ MDVSA-2009:169 ] libtiff, security
• [ MDVSA-2009:167 ] php, security
• [ MDVSA-2009:168 ] apache, security
• [ MDVSA-2009:166 ] c-client, security
• [security bulletin] HPSBMA02438 SSRT090092 rev.1 - HP ProLiant DL/ML 100 Series G5/G6 Servers with ProLiant Onboard Administrator Powered by LO100i, Remote Denial of Service (DoS), security-alert
• [ MDVSA-2009:165 ] ghostscript, security
• CORE-2009-0707: Firebird SQL op_connect_request main listener shutdown vulnerability, CORE Security Technologies Advisories
• [RISE-2009003] Linux eCryptfs parse_tag_3_packet Encrypted Key Buffer Overflow Vulnerability, RISE Security
• [ MDVSA-2009:164 ] jasper, security
• [RISE-2009002] Linux eCryptfs parse_tag_11_packet Literal Data Buffer Overflow Vulnerability, RISE Security
• Cisco Security Advisory: Active Template Library (ATL) Vulnerability, Cisco Systems Product Security Incident Response Team
• [ MDVSA-2009:163 ] tomcat5, security
• [SECURITY] [DSA 1843-1] New squid3 packages fix denial of service, Nico Golde
• [ MDVSA-2009:162 ] java-1.6.0-openjdk, security
• Fwd: Google Chrome About:blank Spoof, Lostmon lords
• [ MDVSA-2009:161 ] squid, security
• [ MDVSA-2009:160 ] ruby, security
• [SECURITY] [DSA 1842-1] New openexr packages fix several vulnerabilities, Moritz Muehlenhoff
• DoS vulnerabilities in Internet Explorer, MustLive
• cross site scripting the browser google "chrome", biko linux
  • Fwd: cross site scripting the browser google "chrome", Karn Ganeshen
• computer crime statistics, Choon Ming
  • RE: computer crime statistics, McDonnell, Michael
    • Re: computer crime statistics, Scotty
      • RE: computer crime statistics, Michael Theroux
      • RE: computer crime statistics, Paul Petersen
• NcFTPd <= 2.8.5 remote jail breakout, Kingcope
  • Re: NcFTPd <= 2.8.5 remote jail breakout, Kingcope
• [DZC-2009-001] The Movie Player and VLC Media Player Real Data Transport parsing integer underflow., tixxDZ
• [Tool] sqlmap 0.7 released, Bernardo Damele A. G.
• [ MDVSA-2009:159 ] mysql, security
• [SECURITY] [DSA 1841-1] New git-core packages fix denial of service, Nico Golde
• IXXO Cart! Standalone and Joomla Component SQL Injection, SmOk3
• rPSA-2009-0111-1 kernel, rPath Update Announcements
• Remote File Inclusion in aiocp, hadikiamarsi
  • <Possible follow-ups>
  • Remote File Inclusion In AIOCP, hadikiamarsi
• PHP filesystem attack vectors - Take Two, ascii
• Cisco WLC 4402 Denial-of-Service vulnerability, SySS security advisories -- Christoph Bott
• Oracle CPUjul2009, Dennis Yurichev
• URL spoofing bug involving Firefox's error pages and document.write, jplopezy
  • Message not available
    • Message not available
      • Re: URL spoofing bug involving Firefox's error pages and document.write, xu shaopei
        • Re: URL spoofing bug involving Firefox's error pages and document.write, YGN Ethical Hacker Group (http://yehg.net)
  • <Possible follow-ups>
  • Re: URL spoofing bug involving Firefox's error pages and document.write, security
    • Re: URL spoofing bug involving Firefox's error pages and document.write, Michael Wood
• [ MDVA-2009:158 ] pango, security
• [ISecAuditors Security Advisories] Joomla! < 1.5.12 Multiple Full Path Disclosure vulnerabilities, ISecAuditors Security Advisories
• [USN-806-1] Python vulnerabilities, Marc Deslauriers
• Re: wordpress plugins WP Super Cache v0.8.3 Remote File Inclusion Vulnerability, MustLive
• Stored XSS on Communigate Pro 5.2.14 and prior versions, Andrea Purificato - bunker
• LifeType 1.2.8 Remote File Inclusion Vulnerability, Cru3l.b0y
  • Re: LifeType 1.2.8 Remote File Inclusion Vulnerability, GulfTech Security Research
• Ocean CMS 0.0.2 Remote File Inclusion Vulnerability, Cru3l.b0y
• wordpress plugins WP Super Cache v0.8.3 Remote File Inclusion Vulnerability, Cru3l.b0y
  • Re: wordpress plugins WP Super Cache v0.8.3 Remote File Inclusion Vulnerability, g30rg3_x
• [GSEC-TZO-45-2009] iPhone remote code execution, Thierry Zoller
• [SECURITY] [DSA 1840-1] New xulrunner packages fix several vulnerabilities, Steffen Joeris
• Akamai Technologies Security Advisory 2009-0001 (Download Manager), Akamai Security Team
• Phorum : Permanent Cross-Site Scripting Vulnerabilities, crashfr
• [USN-798-1] Firefox and Xulrunner vulnerabilities, Jamie Strandboge
• [security bulletin] HPSBUX02437 SSRT090038 rev.1 - HP-UX Running XNTP, Remote Execution of Arbitrary Code, security-alert
• Need information, for MPlayer demux_open_vqf TwinVQ File Handling Buffer Overflow CVE-2008-5616, Rajendra Prasad . Palnaty
• RainbowCrack 1.4 is released - The Time-Memory Tradeoff Hash Cracker, shuanglei
• Adobe Acrobat 9.1.2 NOS Local Privilege Escalation Exploit, Jeremy Brown
• ZDI-09-046: Novell Privileged User Manager Remote DLL Injection Vulnerability, ZDI Disclosures
• Re: Re: [Full-disclosure] [ISecAuditors Security Advisories] Gmail vulnerable to automated password cracking, admin
• mChek 3.4 Information Disclosure, gursev . kalra
• [INFIGO-2009-07-09]: NASA Common Data Format remote buffer overflow(s), infocus
• Re: DoS vulnerabilities in Firefox, Internet Explorer, Opera and Chrome, MustLive
  • <Possible follow-ups>
  • Re: DoS vulnerabilities in Firefox, Internet Explorer, Opera and Chrome, MustLive
• Update: [GSEC-TZO-44-2009] One bug to rule them all - Firefox, IE, Safari,Opera, Chrome,Seamonkey,iPhone,iPod,Wii,PS3...., Thierry Zoller
  • Re: [Full-disclosure] Update: [GSEC-TZO-44-2009] One bug to rule them all - Firefox, IE, Safari, Opera, Chrome, Seamonkey, iPhone, iPod, Wii, PS3...., Michal Zalewski
    • Re[2]: [Full-disclosure] Update: [GSEC-TZO-44-2009] One bug to rule them all - Firefox, IE, Safari, Opera, Chrome, Seamonkey, iPhone, iPod, Wii, PS3...., Thierry Zoller
      • Re: Re[2]: [Full-disclosure] Update: [GSEC-TZO-44-2009] One bug to rule them all - Firefox, IE, Safari, Opera, Chrome, Seamonkey, iPhone, iPod, Wii, PS3...., Michal Zalewski
        • Re: Re[2]: [Full-disclosure] Update: [GSEC-TZO-44-2009] One bug to rule them all - Firefox, IE, Safari, Opera, Chrome, Seamonkey, iPhone, iPod, Wii, PS3...., Steven M. Christey
          • Re[4]: [Full-disclosure] Update: [GSEC-TZO-44-2009] One bug to rule them all - Firefox, IE, Safari, Opera, Chrome, Seamonkey, iPhone, iPod, Wii, PS3...., Thierry Zoller
            • Re[4]: [Full-disclosure] Update: [GSEC-TZO-44-2009] One bug to rule them all - Firefox, IE, Safari, Opera, Chrome, Seamonkey, iPhone, iPod, Wii, PS3...., Steven M. Christey
          • Re[2]: [Full-disclosure] Update: [GSEC-TZO-44-2009] One bug to rule them all - Firefox, IE, Safari, Opera, Chrome, Seamonkey, iPhone, iPod, Wii, PS3...., Thierry Zoller
        • Re[4]: [Full-disclosure] Update: [GSEC-TZO-44-2009] One bug to rule them all - Firefox, IE, Safari, Opera, Chrome, Seamonkey, iPhone, iPod, Wii, PS3...., Thierry Zoller
          • Re: Re[4]: [Full-disclosure] Update: [GSEC-TZO-44-2009] One bug to rule them all - Firefox, IE, Safari, Opera, Chrome, Seamonkey, iPhone, iPod, Wii, PS3...., Michal Zalewski
            • Re[6]: [Full-disclosure] Update: [GSEC-TZO-44-2009] One bug to rule them all - Firefox, IE, Safari, Opera, Chrome, Seamonkey, iPhone, iPod, Wii, PS3...., Thierry Zoller
              • Re: Re[6]: [Full-disclosure] Update: [GSEC-TZO-44-2009] One bug to rule them all - Firefox, IE, Safari, Opera, Chrome, Seamonkey, iPhone, iPod, Wii, PS3...., Michal Zalewski
                • Re[8]: [Full-disclosure] Update: [GSEC-TZO-44-2009] One bug to rule them all - Firefox, IE, Safari, Opera, Chrome, Seamonkey, iPhone, iPod, Wii, PS3...., Thierry Zoller
    • Re: [Full-disclosure] Update: [GSEC-TZO-44-2009] One bug to rule them all - Firefox, IE, Safari, Opera, Chrome, Seamonkey, iPhone, iPod, Wii, PS3...., Andrew Farmer
• [ GLSA 200907-16 ] Python: Integer overflows, Robert Buchholz
• [ MDVSA-2009:153 ] dhcp, security
• [SECURITY] [DSA 1837-1] New dbus packages fix denial of service, Steffen Joeris
• [ MDVSA-2009:157 ] perl-Compress-Raw-Zlib, security
• [ MDVSA-2009:154 ] dhcp, security
• [USN-805-1] Ruby vulnerabilities, Marc Deslauriers
• [SECURITY] [DSA 1839-1] New gst-plugins-good0.10 packages fix arbitrary code execution, Steffen Joeris
• DoS vulnerabilities in Firefox, Internet Explorer, Opera and Chrome, MustLive
  • RE: DoS vulnerabilities in Firefox, Internet Explorer, Opera and Chrome, Jeremiah Gowdy
• [ MDVSA-2009:155 ] git, security
• [ GLSA 200907-15 ] Nagios: Execution of arbitrary code, Robert Buchholz
• [SECURITY] [DSA 1838-1] New pulseaudio packages fix privilege escalation, Florian Weimer
• [ MDVSA-2009:156 ] net-snmp, security
• Adobe related service (getPlus_HelperSvc.exe) local elevation of privileges, nospam
• Hacking CSRF Tokens using CSS History Hack, Inferno
• CORE-2009-0227: Real Helix DNA RTSP and SETUP request handler vulnerabilities, CORE Security Technologies Advisories
• [ISecAuditors Security Advisories] Gmail vulnerable to automated password cracking, ISecAuditors Security Advisories
  • Re: [Full-disclosure] [ISecAuditors Security Advisories] Gmail vulnerable to automated password cracking, cevans
    • Re: [Full-disclosure] [ISecAuditors Security Advisories] Gmail vulnerable to automated password cracking, Vicente Aguilera
• PulseAudio local race condition privilege escalation vulnerability, Akita Software Security
• [ MDVSA-2009:152 ] pulseaudio, security
• COMRaider Idefense Labs CreateFolder() and Copy() Insecure Method (Hard Disk Filler Exploit), irancrash
• [ GLSA 200907-14 ] Rasterbar libtorrent: Directory traversal, Robert Buchholz
• [SECURITY] [DSA 1836-1] New fckeditor packages fix arbitrary code execution, Moritz Muehlenhoff
• [USN-804-1] PulseAudio vulnerability, Kees Cook
• [oCERT-2009-011] Android improper camera and audio permission verification, Andrea Barisani
• [DSECRG-09-031] Oracle BEA Weblogic 10.3 Linked ХSS vulnerability, DSecRG
• [ GLSA 200907-13 ] PulseAudio: Local privilege escalation, Robert Buchholz
• [DSECRG-09-025] Oracle Secure Enterprise Search 10.1.8 Linked XSS vulnerability, DSecRG
• FRHACK List of Talks and Speakers released, Jerome Athias
• Vulnerable DLLs distributed with Terratec HomeCinema 6.3, Stefan Kanthak
• [ MDVSA-2009:151 ] dhcp, security
• Update: [TZO-06-2009] IBM Proventia - Generic bypass (Limited disclosure - see details), Thierry Zoller
  • Re: Update: [TZO-06-2009] IBM Proventia - Generic bypass (Limited disclosure - see details), Vladimir '3APA3A' Dubrovin
    • Re[2]: Update: [TZO-06-2009] IBM Proventia - Generic bypass (Limited disclosure - see details), Thierry Zoller
• iDefense Security Advisory 07.15.09: Microsoft Office Publisher 2007 Arbitrary Pointer Dereference Vulnerability, iDefense Labs
• [SECURITY] [DSA 1834-1] New apache2 packages fix denial of service, Stefan Fritsch
• [SECURITY] [DSA 1835-1] New tiff packages fix several vulnerabilities, Moritz Muehlenhoff
• Cross-Site Scripting vulnerability in Mozilla, Firefox and Chrome, MustLive
  • Re: Cross-Site Scripting vulnerability in Mozilla, Firefox and Chrome, Michal Zalewski
    • Re: Cross-Site Scripting vulnerability in Mozilla, Firefox and Chrome, MustLive
  • <Possible follow-ups>
  • Re: Cross-Site Scripting vulnerability in Mozilla, Firefox and Chrome, advisories
    • Re: Cross-Site Scripting vulnerability in Mozilla, Firefox and Chrome, MustLive
• Mobile Rediff Username and Password Disclosure, gursev . kalra
• [GSEC-TZO-44-2009] One bug to rule them all - Firefox, IE, Safari,Opera, Chrome,Seamonkey,iPhone,iPod,Wii,PS3...., Thierry Zoller
  • Re: [GSEC-TZO-44-2009] One bug to rule them all - Firefox, IE, Safari,Opera, Chrome,Seamonkey,iPhone,iPod,Wii,PS3...., R Dicaire
    • Re[2]: [GSEC-TZO-44-2009] One bug to rule them all - Firefox, IE, Safari,Opera, Chrome,Seamonkey,iPhone,iPod,Wii,PS3...., Thierry Zoller
  • <Possible follow-ups>
  • Re:[GSEC-TZO-44-2009] One bug to rule them all - Firefox, IE, Safari,Opera, Chrome,Seamonkey,iPhone,iPod,Wii,PS3...., Thierry Zoller
  • Re: [GSEC-TZO-44-2009] One bug to rule them all - Firefox, IE, Safari,Opera, Chrome,Seamonkey,iPhone,iPod,Wii,PS3...., MustLive
• iDefense Security Advisory 07.15.09: Microsoft Embedded OpenType Font Engine (T2EMBED.DLL) Heap Buffer Overflow Vulnerability, iDefense Labs
• Cisco Security Advisory: Vulnerabilities in Unified Contact Center Express Administration Pages, Cisco Systems Product Security Incident Response Team
• MULTIPLE ARBITRARY INFORMATION DISCLOSURE AND EDITION --ILIAS LMS <= 3.10.7/3.9.9-->, y3nh4ck3r
• Admin News Tools 2.5 Remote File Download Vulnerability, info
• [USN-803-1] dhcp vulnerability, Jamie Strandboge
• [SECURITY] [DSA 1833-1] New dhcp3 packages fix arbitrary code execution, Florian Weimer
• TPTI-09-05: Microsoft DirectShow QuickTime Atom Parsing Memory Corruption Vulnerability, dvlabs
• ZDI-09-045: Microsoft DirectShow Quicktime Atom Parsing Memory Corruption Vulnerability, ZDI Disclosures
• [ GLSA 200907-12 ] ISC DHCP: dhcpclient Remote execution of arbitrary code, Alex Legler
• Secunia Research: Novell eDirectory iMonitor "Accept-Language" Buffer Overflow, Secunia Research
• FortiGuard Advisory: Microsoft Office Web Components Remote Memory Corruption Vulnerability, noreply-secresearch@xxxxxxxxxxxx
• Virtualmin Multiple Vulnerabilities, Filip Palian
• [SECURITY] [DSA 1829-2] New sork-passwd-h3 packages fix regression, Steffen Joeris
• [oCERT-2009-010] mimeTeX and mathTeX buffer overflows and command injection, Andrea Barisani
• [SECURITY] [DSA 1831-1] New djbdns packages fix privilege escalation, Thijs Kinkhorst
• [SECURITY] [DSA 1832-1] New camlimages packages fix arbitrary code execution, Thijs Kinkhorst
• [ MDVSA-2009:150 ] libtiff, security
• [USN-802-1] Apache vulnerabilities, Marc Deslauriers
• [USN-801-1] tiff vulnerability, Marc Deslauriers
• [USN-799-1] D-Bus vulnerability, Marc Deslauriers
• [USN-800-1] irssi vulnerability, Jamie Strandboge
• [security bulletin] HPSBGN02446 SSRT090111 rev.1 - HP ProCurve Threat Management Services zl Module (J9155A), Remote Unauthorized Access, Denial of Service (DoS), security-alert
• [oCERT-2009-012] libtiff tools integer overflows, Andrea Barisani
• DDIVRT-2009-26 LogRover SQL Injection Authentication Bypass, ddivulnalert
• [ GLSA 200907-11 ] GStreamer plug-ins: User-assisted execution of arbitrary code, Robert Buchholz
• [ GLSA 200907-10 ] Syslog-ng: Chroot escape, Robert Buchholz
• [ GLSA 200907-09 ] Cyrus-SASL: Execution of arbitrary code, Robert Buchholz
• [ GLSA 200907-08 ] Multiple Ralink wireless drivers: Execution of arbitrary code, Robert Buchholz
• [ GLSA 200907-07 ] ModPlug: User-assisted execution of arbitrary code, Robert Buchholz
• [ GLSA 200907-06 ] Adobe Reader: User-assisted execution of arbitrary code, Robert Buchholz
• VMSA-2009-0009 ESX Service Console updates for udev, sudo, and curl, VMware Security team
• [ GLSA 200907-05 ] git: git-daemon Denial of Service, Robert Buchholz
• [ GLSA 200907-04 ] Apache: Multiple vulnerabilities, Alex Legler
• [SECURITY] [DSA 1830-1] New icedove packages fix several vulnerabilities, Steffen Joeris
• [SECURITY] [DSA 1753-2] End-of-life announcement for icedove in oldstable, Steffen Joeris
• [SECURITY] [DSA 1829-1] New sork-passwd-h3 packages fix cross-site scripting, Steffen Joeris
• Update: [TZO-26-2009] Firefox (all?) Denial of Service through unclamped loop (SVG), Thierry Zoller
  • <Possible follow-ups>
  • Re: Update: [TZO-26-2009] Firefox (all?) Denial of Service through unclamped loop (SVG), Neil Dickey
    • Re: Update: [TZO-26-2009] Firefox (all?) Denial of Service through unclamped loop (SVG), Nick Boyce
      • Re[2]: Update: [TZO-26-2009] Firefox (all?) Denial of Service through unclamped loop (SVG), Thierry Zoller
        • Re: Re[2]: Update: [TZO-26-2009] Firefox (all?) Denial of Service through unclamped loop (SVG), Nick Boyce
• Atlantic SimpleCaddy Shopping Cart Price Manipulation, domingos . bruges
• HTC / Windows Mobile OBEX FTP Service Directory Traversal, alberto . morenot
• [ MDVSA-2009:149 ] apache, security
  • <Possible follow-ups>
  • [ MDVSA-2009:149 ] apache, security
• Update: [TZO-27-2009] Firefox Denial of Service (Keygen), Thierry Zoller
• Pwnie Awards 2009, Alexander Sotirov
• MySQL <= 5.0.45 post auth format string vulnerability, Kingcope
• CORE-2009-01515 - WordPress Privileges Unchecked in admin.php and Multiple Information, Core Security Technologies Advisories
  • <Possible follow-ups>
  • Re: CORE-2009-01515 - WordPress Privileges Unchecked in admin.php and Multiple Information, Asher995
    • RE: CORE-2009-01515 - WordPress Privileges Unchecked in admin.php and Multiple Information, Chillman, Paul, Vodafone UK
    • Re: CORE-2009-01515 - WordPress Privileges Unchecked in admin.php and Multiple Information, paul . szabo
      • Re: CORE-2009-01515 - WordPress Privileges Unchecked in admin.php and Multiple Information, Steve Shockley
• [ MDVSA-2009:124-1 ] apache, security
• [ MDVSA-2009:148 ] kernel, security
• Citrix XenCenterWeb Multiple Vulnerabilities, Claudio Criscione
  • <Possible follow-ups>
  • Re: Citrix XenCenterWeb Multiple Vulnerabilities, bill . carovano
• [SECURITY] [DSA 1828-1] New ocsinventory-agent packages fix arbitrary code execution, Nico Golde
• CFP - Security Byte / OWASP Asia 2009, cfp
• SEC Consult SA-20090707-0 :: Symbian S60 / Nokia firmware media codecs multiple memory corruption vulnerabilities, Bernhard Mueller
• RE: Decompilation Injection, Maty Siman
• [USN-797-1] tiff vulnerability, Marc Deslauriers
• [USN-796-1] Pidgin vulnerability, Marc Deslauriers
• Pwning Nokia phones (and other Symbian based smartphones), Bernhard Mueller
• Medium security hole in TekRADIUS, Tim Brown
• High security hole in NullLogic Groupware, Tim Brown
• [SECURITY] [DSA 1827-1] New ipplan packages fix cross-site scripting, Steffen Joeris
• [Bkis-10-2009] Photo DVD Maker Professional Buffer Overflow Vulnerability, Bkis
• Avax Vector ActiveX 1.3 (avPreview.ocx) Denial of Service Exploit, Satan_hackers
• [ GLSA 200907-03 ] APR Utility Library: Multiple vulnerabilities, Alex Legler
• [SECURITY] [DSA 1826-1] New eggdrop packages fix several vulnerabilities, Steffen Joeris
• [security bulletin] HPSBPI02398 SSRT080166 rev.4 - Certain HP LaserJet Printers, HP Color LaserJet Printers, and HP Digital Senders, Remote Unauthorized Access to Files, security-alert
• [oCERT-2009-008] Dillo integer overflow, Andrea Barisani
• Cross-Site Scripting vulnerabilities in Mozilla, Internet Explorer, Opera and Chrome, MustLive
  • Re: Cross-Site Scripting vulnerabilities in Mozilla, Internet Explorer, Opera and Chrome, Michal Zalewski
    • Re: Cross-Site Scripting vulnerabilities in Mozilla, Internet Explorer, Opera and Chrome, Liu Die Yu
• [oCERT-2009-007] FCKeditor input sanitization errors, Andrea Barisani
• [SECURITY] [DSA 1825-1] New nagios2/nagios3 packages fix arbitrary code execution, Nico Golde
• One Click Ownage [White Paper and Scripts], Ferruh Mavituna
• Multiple Flaws in Axesstel MV 410R, filip . palian
• [ GLSA 200907-02 ] ModSecurity: Denial of Service, Alex Legler
• [ GLSA 200907-01 ] libwmf: User-assisted execution of arbitrary code, Alex Legler
• [USN-795-1] Nagios vulnerability, Marc Deslauriers
• [USN-794-1] Perl vulnerability, Marc Deslauriers
• [ISecAuditors Security Advisories] Joomla! < 1.5.12 Multiple XSS vulnerabilities in HTTP Headers, ISecAuditors Security Advisories
• [oCERT-2009-009] CamlImages integer overflows, Andrea Barisani
• eAccelerator encoder files backup Vulnerability, linuxrootkit2008
• Sourcefire 3D Sensor and DC, privilege escalation vulnerability, c3rb3r
• [security bulletin] HPSBUX02431 SSRT090085 rev.1 - HP-UX Running Apache Web Server Suite, Remote Denial of Service (DoS), Execution of Arbitrary Code, security-alert
• [security bulletin] HPSBUX02440 SSRT090106 rev.1 - HP-UX Running NFS/ONCplus, Local Denial of Service (DoS), security-alert
• VMSA-2009-0008 ESX Service Console update for krb5, VMware Security Team
• radware AppWall Web Application Firewall: Source code disclosure on management interface, Kirchner Michael
• phion airlock Web Application Firewall: Remote Denial of Service via Management Interface (unauthenticated) and Command Execution, Kirchner Michael
• Artofdefence Hyperguard Web Application Firewall: Remote Denial of Service, Kirchner Michael
• REMINDER : HITBSecConf2009 - Malaysia: Call for Papers, Praburaajan
• dedecms v5.3 Arbitrary File Upload Vulnerability, info
• Empire Cms 5.1 sql injection, info
• [ MDVSA-2009:147 ] pidgin, security
• XAMPP for Windows (Xss/PHPinfo) Multiple Vulnerability, Cru3l.b0y
  • Re: XAMPP for Windows (Xss/PHPinfo) Multiple Vulnerability, Vladimir '3APA3A' Dubrovin
• SIPS v0.2.2 Remote File Inclusion Vulnerability, Cru3l.b0y
  • Re: SIPS v0.2.2 Remote File Inclusion Vulnerability, Vladimir '3APA3A' Dubrovin
  • Re: SIPS v0.2.2 Remote File Inclusion Vulnerability, Joe
• [ GLSA 200906-05 ] Wireshark: Multiple vulnerabilities, Tobias Heinlein
• Multiple Flaws in Huawei D100, filip . palian
  • <Possible follow-ups>
  • Re: Multiple Flaws in Huawei D100, wojwar
• [ GLSA 200906-04 ] Apache Tomcat JK Connector: Information disclosure, Alex Legler
• [ GLSA 200906-03 ] phpMyAdmin: Multiple vulnerabilities, Alex Legler
• [ MDVSA-2009:146 ] imap, security
• [ GLSA 200906-02 ] Ruby: Denial of Service, Alex Legler
• [ MDVSA-2009:144 ] ghostscript, security
• [ MDVSA-2009:142 ] jasper, security
• Shakacon III - Presentations Posted to site, Shakacon
• [ MDVSA-2009:145 ] php, security
• AjaxPortal v3.0 Remote File Inclusion Vulnerability, Cru3l.b0y
• [ MDVSA-2009:143 ] netpbm, security
• osTicket v1.6 RC4 Admin Login Blind SQLi, Adam Baldwin
• Mega File Manager Remote File Vuln, ceza_fuat_kolik
• [ GLSA 200906-01 ] libpng: Information disclosure, Tobias Heinlein
• iDefense Security Advisory 06.26.09: HP Network Node Manager rping Stack Buffer Overflow Vulnerability, iDefense Labs
• [ MDVSA-2009:141 ] mozilla-thunderbird, security
• MULTIPLE SQL INJECTION VULNERABILITIES --PHP-AddressBook v-4.0.x-->, y3nh4ck3r
• evil little dictionary, Pavel Machek
• Report vulnerabilities, JP
• Trillian SSL Certificate Vulnerability, Gabriel Menezes Nunes
  • <Possible follow-ups>
  • Re: Trillian SSL Certificate Vulnerability, krymson
• Gizmo SSL Certificate Vulnerability, Gabriel Menezes Nunes
• aMSN SSL Certificate Vulnerability, Gabriel Menezes Nunes
• Security Assessment of TCP at the IETF, Fernando Gont
• [USN-782-1] Thunderbird vulnerabilities, Jamie Strandboge
• [SECURITY] [DSA 1824-1] New phpmyadmin packages fix several vulnerabilities, Thijs Kinkhorst
• SQL INJECTION VULNERABILITY --AlumniServer v-1.0.1-->, y3nh4ck3r
• iDefense Security Advisory 06.25.09: Motorola Timbuktu Pro PlughNTCommand Stack Based Buffer Overflow Vulnerability, iDefense Labs
• [SECURITY] [DSA 1823-1] New samba packages fix several vulnerabilities, Thijs Kinkhorst
• (POST var 'resetpwemail') BLIND SQL INJECTION EXPLOIT --AlumniServer v-1.0.1-->, y3nh4ck3r
• iDefense Security Advisory 06.25.09: Unisys Business Information Server Stack Buffer Overflow, iDefense Labs
• [USN-792-1] OpenSSL vulnerabilities, Marc Deslauriers
• [ MDVSA-2009:140 ] gaim, security
• [USN-791-3] Smarty vulnerability, Kees Cook
• [USN-791-2] Moodle vulnerability, Kees Cook
• [USN-791-1] Moodle vulnerabilities, Kees Cook
• [USN-790-1] Cyrus SASL vulnerability, Kees Cook
• Cisco Security Advisory: Vulnerabilities in Cisco Video Surveillance Products, Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco Physical Access Gateway Denial of Service Vulnerability, Cisco Systems Product Security Incident Response Team
• CHASE - 2009 Lahoe Pakistan | Call for Papers, Muhammad Farooq-i-Azam
• [ MDVSA-2009:139 ] libtorrent-rasterbar, security
• Re: Authentication Bypass in BASE version 1.2.4 and prior, timmedin
• Trustwave's SpiderLabs Security Advisory TWSL2009-002, Trustwave Advisories
• Authentication Bypas in BASE version 1.2.4 and prior, timmedin
  • <Possible follow-ups>
  • Re: Authentication Bypas in BASE version 1.2.4 and prior, timmedin
• n.runs-SA-2009.005 - Apple Safari - Information disclosure, security
• n.runs-SA-2009.006 - Apple Safari - Null pointer dereference, security
  • n.runs-SA-2009.007 - Adobe Acrobat - Invalid pointer write could lead to arbitrary code execution, security
  • n.runs-SA-2010.002 - Alcatel-Lucent - arbitrary code execution on OmniVista 4760, security
  • n.runs-SA-2010.001 - Alcatel-Lucent - unauthenticated administrative access to CTI CCA Server, security
  • n.runs-SA-2010.002 - Alcatel-Lucent - arbitrary code execution on OmniVista 4760, security
  • n.runs-SA-2010.003 - Hewlett Packard LaserJet MFP devices - Directory Traversal in PJL interface, security
• [SECURITY] [DSA 1822-1] New mahara packages fix cross-site scripting, Nico Golde
• CFP: ISOI 7 - Sept 17, 18 - San Diego, Gadi Evron
• [ MDVSA-2009:138 ] tomcat5, security
• [SECURITY] [DSA 1821-1] New amule packages fix insufficient input sanitising, Steffen Joeris
• [ MDVSA-2009:136 ] tomcat5, security
• Back door trojan in acajoom-3.2.6 for joomla, Jan van Niekerk
  • Re: Back door trojan in acajoom-3.2.6 for joomla, Jan van Niekerk
  • <Possible follow-ups>
  • Re: Re: Back door trojan in acajoom-3.2.6 for joomla, chris . boergermann
    • Re: Re: Back door trojan in acajoom-3.2.6 for joomla, Jeffrey Walton
  • Re: Re: Re: Back door trojan in acajoom-3.2.6 for joomla, elkekas
  • Re: Re: Re: Re: Back door trojan in acajoom-3.2.6 for joomla, anonymous
• [RISE-2009001] ToolTalk rpc.ttdbserverd _tt_internal_realpath Buffer Overflow Vulnerability, RISE Security
• FretsWeb 1.2 Multiple Local File Inclusion Vulnerabilities, ceza_fuat_kolik
• fuzzylime cms <= 3.03a Local Inclusion / Arbitrary File Corruption PoC, ceza_fuat_kolik
• phportal 1.0 Insecure Cookie Handling Vulnerability, ceza_fuat_kolik
• FretsWeb 1.2 (name) Remote Blind SQL Injection Exploit, ceza_fuat_kolik
• CMS Buzz (XSS/PC/HI) Multiple Remote Vulnerabilities, ceza_fuat_kolik
• [USN-789-1] GStreamer Good Plugins vulnerability, Marc Deslauriers
• [ MDVSA-2009:137 ] java-1.6.0-openjdk, security
• (GET var 'name') BLIND SQL INJECTION EXPLOIT --FretsWeb 1.2-->, y3nh4ck3r
• MULTIPLE LOCAL FILE INCLUSION VULNERABILITIES --FretsWeb 1.2-->, y3nh4ck3r
• PhpPortal v1 Insecure Cookie Handling Vulnerability, ceza_fuat_kolik
• Re: Advisory: Apple QuickTime Image Description Atom Sign Extension Memory Corruption, rajendra . palnaty
• [SECURITY] [DSA 1819-1] New vlc packages fix several vulnerabilities, Steffen Joeris
• The Möbius Defense, the end of Defense in Depth, Pete Herzog
• [TZO-34-2009] Frisk FPROT generic evasion (RAR,ARJ,LHA), Thierry Zoller
• ERRATA: [TZO-32-2009] Norman generic bypass (RAR), Thierry Zoller
• [SECURITY] [DSA 1820-1] New xulrunner packages fix several vulnerabilities, Steffen Joeris
• Nokia 6212 classic URI spoofing and DoS advisory (original date: Dec. 2008), Collin Mulliner
• iPhone Safari phone-auto-dial vulnerability (original date: Nov. 2008), Collin Mulliner
  • Re: iPhone Safari phone-auto-dial vulnerability (original date: Nov. 2008), Collin Mulliner
• [TZO-43-2009] - Clamav generic evasion (CAB), Thierry Zoller
• [SECURITY] [DSA 1818-1] New gforge packages fix insufficient input sanitising, Steffen Joeris
• [SECURITY] [DSA 1817-1] New ctorrent packages fix arbitrary code execution, Nico Golde
• [ MDVSA-2009:135 ] kernel, security
• [ MDVSA-2009:134 ] firefox, security
• CERT-FI statement on the Outpost24 TCP issues updated, Juha-Matti Laurio
• Re: [Full-disclosure] WinAppDbg version 1.2 is out!, Jared DeMott
  • Re: [Full-disclosure] WinAppDbg version 1.2 is out!, Mario Alejandro Vilas Jerez
• [SECURITY] [DSA 1816-1] New apache2 packages fix privilege escalation, Stefan Fritsch
• ZDI-09-043: Apple Java CColorUIResource Pointer Derference Code Execution Vulnerability, ZDI Disclosures
• WinAppDbg version 1.2 is out!, Mario Alejandro Vilas Jerez
• phpMyTourney adminfunctions.php Remote File Include Vulnerabilities, IrIsT . Ir
• [ MDVSA-2009:133 ] irssi, security
• Official release of "Keykeriki" open source wireless keyboard sniffer, Max Moser
• CA20090615-02: CA Service Desk Tomcat Cross Site Scripting Vulnerability, Williams, James K
• CA20090615-01: CA ARCserve Backup Message Engine Denial of Service Vulnerabilities (Updated), Williams, James K
• CA20090615-01: CA ARCserve Backup Message Engine Denial of Service Vulnerabilities, Williams, James K
• [TZO-40-2009] Clamav generic bypass (RAR,CAB,ZIP), Thierry Zoller
• [TZO-33-2009] Fprot generic bypass (TAR), Thierry Zoller
• Netgear DG632 Router Remote DoS Vulnerability, Tom Neaves
  • Message not available
    • Message not available
      • Message not available
        • Re: Netgear DG632 Router Remote DoS Vulnerability, Tom Neaves
          • Re[2]: [Full-disclosure] Netgear DG632 Router Remote DoS Vulnerability, Vladimir '3APA3A' Dubrovin
  • Re: [Full-disclosure] Netgear DG632 Router Remote DoS Vulnerability, Hanno Böck
• Netgear DG632 Router Authentication Bypass Vulnerability, Tom Neaves
• [DSF-02-2009] - Zoki Catalog SQL Injection, SmOk3
• [USN-788-1] Tomcat vulnerabilities, Marc Deslauriers
• [SECURITY] [DSA 1814-1] New libsndfile packages fix arbitrary code execution, Nico Golde
• [InterN0T] Webmedia Explorer - XSS Vulnerability, security
• [InterN0T] transLucid 1.75 - Multiple Vulnerabilities, security
• [InterN0T] TBDev 01-01-2008 - Multiple Vulnerabilities, security
• [InterN0T] SkyBlueCanvas 1.1 r237 - Multiple Vulnerabilities, security
• [InterN0T] Pivot 1.40.4-7 - Multiple Vulnerabilities, security
• CakeCMS XSRF Vulnerability, onur . turkeshan
• Link Logger syslogd resource overwhelm DoS, mcyr2
• SugarCRM 5.2.0e Remote Code Execution, ascii
• [TZO-30-2009] Kaspersky and the silent patch that wasn't (PDF evasion, forced full disclosure), Thierry Zoller
• [TZO-37-2009] Apple Safari <v4 Remote code execution, Thierry Zoller
• [waraxe-2009-SA#074] - Multiple Vulnerabilities in TorrentTrader Classic 1.09, come2waraxe
• [SECURITY] [DSA 1815-1] New libtorrent-rasterbar packages fix denial of service, Moritz Muehlenhoff
• [TZO-36-2009] Apple Safari & Quicktime Denial of Service, Thierry Zoller
• [TZO-33-2009] Frisk F-prot evasion (TAR), Thierry Zoller
• [TZO-32-2009] Norman generic bypass (RAR), Thierry Zoller
• [TZO-31-2009] Ikarus multiple generic evasions (CAB,ZIP,RAR), Thierry Zoller
• [USN-779-1] Firefox and Xulrunner vulnerabilities, Jamie Strandboge
• Serena Dimensions CM has insufficient default privileges, roland . gruber . extern
• Secunia Research: Mozilla Firefox Java Applet Loading Vulnerability, Secunia Research
• [USN-787-1] Apache vulnerabilities, Jamie Strandboge
• VUPEN Security - Adobe Acrobat and Reader JBIG2 Filter Heap Overflow Vulnerability, VUPEN Security Research
• VUPEN Security - Microsoft Office Word Document Parsing Buffer Overflow Vulnerability, VUPEN Security Research
  • Re: VUPEN Security - Microsoft Office Word Document Parsing Buffer Overflow Vulnerability, Nick Boyce
• iDefense Security Advisory 06.11.09: Adobe Reader and Acrobat FlateDecode Integer Overflow Vulnerability, iDefense Labs
• iDefense Security Advisory 06.11.09: Microsoft Windows 2000 Print Spooler Remote Stack Buffer Overflow Vulnerability, iDefense Labs
• iDefense Security Advisory 06.11.09: Microsoft Excel SST Record Integer Overflow Vulnerability, iDefense Labs
• ModSecurity (Core Rules) HTTP Parameter Pollution Filter Bypass Vulnerability, lavakumar kuppan
• FortiGuard Advisory: Adobe Reader/Acrobat TrueType Font Processing Memory Corruption Vulnerability, noreply-secresearch@xxxxxxxxxxxx
• iDefense Security Advisory 06.11.09: Multiple Vendor WebKit Error Handling Use After Free Vulnerability, iDefense Labs
• iDefense Security Advisory 06.11.09: Microsoft Active Directory Hexdecimal DN AttributeValue Invalid Free Vulnerability, iDefense Labs
• MULTIPLE SQL INJECTION VULNERABILITIES --Splog <= v-1.2 Beta-->, y3nh4ck3r
• (Post Form login var 'username') BLIND SQLi exploit--Open Biller 0.1-->, y3nh4ck3r
• ZDI-09-042: Adobe Reader U3D RHAdobeMeta Stack Overflow Vulnerability, ZDI Disclosures
• F5 FirePass Cross-Site Scripting vulnerability, Sjoerd Resink
• [USN-786-1] apr-util vulnerabilities, Jamie Strandboge
• ZDI-09-036: Microsoft Internet Explorer setCapture Memory Corruption Vulnerability, ZDI Disclosures
• Apple Safari cross-domain XML theft vulnerability, Chris Evans
• Secunia Research: Adobe Reader JBIG2 Text Region Segment Buffer Overflow, Secunia Research
• ZDI-09-041: Microsoft Internet Explorer 8 Rows Property Dangling Pointer Code Execution Vulnerability, ZDI Disclosures
• ZDI-09-039: Microsoft Internet Explorer onreadystatechange Memory Corruption Vulnerability, ZDI Disclosures
• Secunia Research: Microsoft PowerPoint Freelance Layout Parsing Vulnerability, Secunia Research
• ZDI-09-037: Microsoft Internet Explorer Concurrent Ajax Request Memory Corruption Vulnerability, ZDI Disclosures
• [ECHO_ADV_110$2009] Firefox (GNU/Linux version) <= 3.0.10 Denial Of Services, y3dips
• ZDI-09-040: Microsoft Office Excel QSIR Record Pointer Corruption Vulnerability, ZDI Disclosures
• XM Easy Personal FTP Server HELP and TYPE command Remote Denial of Service exploit, vinodsharma . mimit
• ZDI-09-035: Microsoft Word Document Stack Based Buffer Overflow Vulnerability, ZDI Disclosures
• FortiGuard Advisory: Apple Safari Remote Memory Corruption Vulnerability, noreply-secresearch@xxxxxxxxxxxx
• ZDI-09-038: Microsoft Internet Explorer Event Handler Memory Corruption Vulnerability, ZDI Disclosures
• FortiGuard Advisory: Microsoft Internet Explorer DHTML Handling Remote Memory Corruption Vulnerability, noreply-secresearch@xxxxxxxxxxxx
• [security bulletin] HPSBUX02435 SSRT090059 rev.1 - HP-UX Running OpenSSL, Remote Denial of Service (DoS), Bypass Security Restrictions, security-alert
• [SECURITY] UPDATED CVE-2008-5515 RequestDispatcher directory traversal vulnerability, Mark Thomas
• FreeBSD Security Advisory FreeBSD-SA-09:09.pipe, FreeBSD Security Advisories
• FreeBSD Security Advisory FreeBSD-SA-09:10.ipv6, FreeBSD Security Advisories
• FreeBSD Security Advisory FreeBSD-SA-09:11.ntpd, FreeBSD Security Advisories
• [USN-775-2] Quagga regression, Kees Cook