Mail Index

• Thread Index

• Beehive/SendFile.NET - Secure File Transfer Appliance Hardcoded Credentials
  • From: brad . antoniewicz
• Re: Loginwindow.app and Mac OS X
  • From: oc photon
• Re: Loginwindow.app and Mac OS X
  • From: Jacob Appelbaum
• PHPMyTourney Remote file include Vulnerability
  • From: security
• Ghostscript buffer overflow
  • From: Chris Evans
• Re: Loginwindow.app and Mac OS X
  • From: Matt Johnston
• Centreon <= 1.4.2.3 (index.php) Remote File Disclosure
  • From: sys-project
• [ MDVSA-2008:055 ] - Updated ghostscript packages fix arbitrary code execution vulnerability
  • From: security
• netOffice Dwins 1.3 Remote code execution.
  • From: db
• rPSA-2008-0091-1 cups
  • From: rPath Update Announcements
• rPSA-2008-0092-1 tshark wireshark
  • From: rPath Update Announcements
• Release: Pass-The-Hash toolkit v1.3
  • From: Hernan Ochoa
• rPSA-2008-0093-1 thunderbird
  • From: rPath Update Announcements
• rPSA-2008-0094-1 kernel
  • From: rPath Update Announcements
• [USN-582-1] Thunderbird vulnerabilities
  • From: Jamie Strandboge
• [ MDVSA-2008:056 ] - Updated gnumeric packages fix vulnerability
  • From: security
• Mambo com_Musica "id" Remote SQL Injection
  • From: no-reply
• Koobi CMS 4.3.0 - 4.2.3 (categ) Remote SQL Injection Vulnerability
  • From: sys-project
• h2desk helpdesk path disclosure vulnerability
  • From: joseph . giron13
• PHP-Nuke Copyright 2005 SQL
  • From: turkish-warriorr
• Livebox Router vulnerability to REMOTE BUFFER OVERFLOW DoS (FTPD)_
  • From: 0in . email
• The Router Hacking Challenge is Over!
  • From: Petko D. Petkov
• Dynamic photo gallery V1.02 SQL Injection
  • From: no-reply
• [ GLSA 200803-02 ] Firebird: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• kcwiki 1.0 multiple remote file inclusion vulnerabilities.
  • From: muuratsalo experimental hack lab
• [ GLSA 200803-01 ] Adobe Acrobat Reader: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• Recon 2008 - Call For Paper
  • From: Recon
• Squid Analysis Report Generator <= 2.2.3.1 buffer overflow
  • From: L4teral
• [ GLSA 200803-03 ] Audacity: Insecure temporary file creation
  • From: Pierre-Yves Rofes
• Re: Crafty Syntax Xss Vulnerability
  • From: erics
• XSS in XP Book version 3.0
  • From: xx_hack_xx_2004
• [DSECRG-08-017] Flyspray 0.9.9.4 Multiple Security Vulnerabilities
  • From: Digital Security Research Group
• CSRF in joomla 1.0.11 stable version
  • From: vivek_infosec
• DDIVRT-2008-10 PacketTrap TFTP Directory Traversal Vulnerability
  • From: vulnerabilityresearch
• Re: CSRF in joomla 1.0.11 stable version
  • From: zinho
• Multiple integer overflows in Borland StarTeam server 10.0.0.57
  • From: Luigi Auriemma
• Cross-site Scripting and CSRF in TorrentTrader Classic v1.08
  • From: Valery Marchuk
• LayerOne 2008 Update
  • From: Layer One
• DDIVRT-2008-09 PacketTrap PT360 Tool Suite TFTP Denial of Service Vulnerability
  • From: vulnerabilityresearch
• [ GLSA 200803-05 ] SplitVT: Privilege escalation
  • From: Pierre-Yves Rofes
• [ GLSA 200803-06 ] SWORD: Shell command injection
  • From: Pierre-Yves Rofes
• [ GLSA 200803-07 ] Paramiko: Information disclosure
  • From: Pierre-Yves Rofes
• [SECURITY] [DSA 1511-1] New libicu packages fix multiple problems
  • From: Steve Kemp
• [ GLSA 200803-04 ] Mantis: Cross-Site Scripting
  • From: Pierre-Yves Rofes
• Airscanner Mobile Security Advisory #07122001: Eye-Fi Multiple Vulnerabilities
  • From: Seth Fogie
• VMSA-2008-0004 Low: Updated e2fsprogs service console package
  • From: VMware Security team
• [ MDVSA-2008:057 ] - Updated wireshark packages fix denial of service vulnerabilities
  • From: security
• PHP-Nuke Module eGallery "pid" Remote SQL Injection
  • From: no-reply
• PHP-Nuke Module "seminar" Local FIle Inclusion
  • From: no-reply
• Re: Crafty Syntax Xss Vulnerability
  • From: cmzs
• SolpotCrew Advisory #16 - Mitra Informatika Solusindo cart Remote Sql Injection Exploit
  • From: nyubicrew
• [ GLSA 200803-08 ] Win32 binary codecs: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• Minigal 2 critical XSS
  • From: jose
• [ GLSA 200803-09 ] Opera: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• Dovecot mail_extra_groups setting is often used insecurely
  • From: Timo Sirainen
• CORE-2008-0124: Multiple vulnerabilities in Google's Android SDK
  • From: Core Security Technologies Advisories
• Arbitrary commands execution in Versant Object Database 7.0.1.3
  • From: Luigi Auriemma
• [SECURITY] [DSA 1512-1] New evolution packages fix arbitrary code execution
  • From: Thijs Kinkhorst
• Firewire Attack on Windows Vista
  • From: Bernhard Mueller
• Re: Firewire Attack on Windows Vista
  • From: Thierry Zoller
• Multiple vulnerabilities in Perforce Server 2007.3/143793
  • From: Luigi Auriemma
• ERRATA: [ GLSA 200801-09 ] X.Org X server and Xfont library: Multiple vulnerabilities
  • From: Robert Buchholz
• [ GLSA 200803-10 ] lighttpd: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• [ MDVSA-2008:059 ] - Updated tcl packages fix vulnerability
  • From: security
• RE: Firewire Attack on Windows Vista
  • From: Roger A. Grimes
• [ MDVSA-2008:058 ] - Updated openldap packages fix multiple vulnerabilities
  • From: security
• [USN-583-1] Evolution vulnerability
  • From: Kees Cook
• [ GLSA 200803-12 ] Evolution: Format string vulnerability
  • From: Pierre-Yves Rofes
• [ MDVSA-2008:060 ] - Updated Joomla! packages fix multiple vulnerabilities
  • From: security
• [USN-584-1] OpenLDAP vulnerabilities
  • From: Jamie Strandboge
• [ GLSA 200803-11 ] Vobcopy: Insecure temporary file creation
  • From: Pierre-Yves Rofes
• [SECURITY] [DSA 1503-2] New Linux kernel 2.4.27 packages fix several issues
  • From: dann frazier
• [DSECRG-08-018] Ruby 1.8.6 (Webrick Httpd 1.3.1) Directory traversal file Download Vulnerability
  • From: Alexandr Polyakov
• Re: Firewire Attack on Windows Vista
  • From: Peter Watkins
• Re: Firewire Attack on Windows Vista
  • From: Daniel O'Connor
• Sun JDK image parsing vulnerabilities
  • From: Chris Evans
• Re: Firewire Attack on Windows Vista
  • From: Tonnerre Lombard
• Checkpoint VPN-1 UTM Edge cross-site scripting
  • From: Henri Lindberg - Smilehouse Oy
• PHP-Nuke KutubiSitte "kid" SQL Injection
  • From: lovebug
• Re: [DSECRG-08-018] Ruby 1.8.6 (Webrick Httpd 1.3.1) Directory traversal file Download Vulnerability
  • From: H D Moore
• RE: Firewire Attack on Windows Vista
  • From: bzhbfzj3001
• RE: Firewire Attack on Windows Vista
  • From: Larry Seltzer
• Directory traversal in MicroWorld eScan Server 9.0.742.98
  • From: Luigi Auriemma
• [ MDVSA-2008:061 ] - Updated mailman packages fix multiple XSS vulnerabilities
  • From: security
• Re: Multiple vulnerabilities in Double-Take 5.0.0.2865
  • From: Steve Shockley
• [SECURITY] [DSA 1513-1] New lighttpd packages fix CGI source disclosure
  • From: Steve Kemp
• [USN-582-2] Thunderbird vulnerabilities
  • From: Jamie Strandboge
• [ MDVSA-2008:062 ] - Updated Thunderbird packages fix multiple vulnerabilities
  • From: security
• WordPress Multiple Cross-Site Scripting Vulnerabilities
  • From: DoZ
• Horde Webmail file inclusion proof of concept & patch.
  • From: ppelanne
• [ MDVSA-2008:063 ] - Updated Evolution packages fix critical vulnerability
  • From: security
• Re: [Full-disclosure] Firewire Attack on Windows Vista
  • From: Tim
• Re: [Full-disclosure] Firewire Attack on Windows Vista
  • From: Tim
• RE: [Full-disclosure] Firewire Attack on Windows Vista
  • From: Larry Seltzer
• Re: [Full-disclosure] Firewire Attack on Windows Vista
  • From: Tim
• PHP-Nuke KutubiSitte "kid" SQL Injection exploit code adding
  • From: r080cy90r
• RE: [Full-disclosure] Firewire Attack on Windows Vista
  • From: Glenn.Everhart
• RE: Firewire Attack on Windows Vista
  • From: Thor (Hammer of God)
• RE: [Full-disclosure] Firewire Attack on Windows Vista
  • From: Larry Seltzer
• RE: [Full-disclosure] Firewire Attack on Windows Vista
  • From: Thor (Hammer of God)
• Re: [Full-disclosure] Firewire Attack on Windows Vista
  • From: Tim
• Re: Firewire Attack on Windows Vista
  • From: Tonnerre Lombard
• Re: Firewire Attack on Windows Vista
  • From: Nathanael Hoyle
• Multiple vulnerabilities in MailEnable Professional/Enterprise 3.13
  • From: Luigi Auriemma
• RE: [Full-disclosure] Firewire Attack on Windows Vista
  • From: Larry Seltzer
• RE: [Full-disclosure] Firewire Attack on Windows Vista
  • From: Thor (Hammer of God)
• RE: [Full-disclosure] Firewire Attack on Windows Vista
  • From: Thor (Hammer of God)
• RE: [Full-disclosure] Firewire Attack on Windows Vista
  • From: Larry Seltzer
• rPSA-2008-0099-1 dbus dbus-glib dbus-qt dbus-x11
  • From: rPath Update Announcements
• [ MDVSA-2008:064 ] - Updated tomboy packages fix improper LD_LIBRARY_PATH handling
  • From: security
• XSS in Neptune Web Server
  • From: nima_501
• [ GLSA 200803-13 ] VLC: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• [ GLSA 200803-14 ] Ghostscript: Buffer overflow
  • From: Pierre-Yves Rofes
• Re: Horde Webmail file inclusion proof of concept & patch.
  • From: Ben Klang
• F5 BIG-IP Web Management Console XSS
  • From: nnposter
• Alkacon OpenCms logfileViewSettings.jsp XSS, file disclosure
  • From: nnposter
• [TKADV2008-001] Panda Internet Security/Antivirus+Firewall 2008 cpoint.sys Kernel Driver Memory Corruption Vulnerability
  • From: Tobias Klein
• WoltLab Burning Board Lite 2 Beta 1 Thread Delete CSRF Vulnerability
  • From: nbbn
• RE: [Full-disclosure] Firewire Attack on Windows Vista
  • From: Larry Seltzer
• RE: [Full-disclosure] Firewire Attack on Windows Vista
  • From: Larry Seltzer
• Re: [Full-disclosure] Firewire Attack on Windows Vista
  • From: Tim
• [SECURITY] [DSA 1514-1] New moin packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• [ GLSA 200803-15 ] phpMyAdmin: SQL injection vulnerability
  • From: Pierre-Yves Rofes
• [security bulletin] HPSBUX02306 SSRT071463 rev.2 - HP-UX Running ARPA Transport, Remote Denial of Service (DoS)
  • From: security-alert
• Re: [Full-disclosure] Firewire Attack on Windows Vista
  • From: Tim
• VHCS <= 2.4.7.1 (vhcs2_daemon) Remote Root Exploit
  • From: gmdarkfig
• Re: [Full-disclosure] Firewire Attack on Windows Vista
  • From: Jacob Appelbaum
• [ MDVSA-2008:065 ] - Updated pulseaudio packages fix denial of service vulnerabilities
  • From: security
• RE: [Full-disclosure] Firewire Attack on Windows Vista
  • From: Larry Seltzer
• Re: Firewire Attack on Windows Vista
  • From: Stefan Kanthak
• PHP-Nuke SQL injection Module "Hadith" [cat]
  • From: lovebug
• Firebird remote BOF POC
  • From: underwater
• Re: [Full-disclosure] Firewire Attack on Windows Vista
  • From: Stefan Kanthak
• Summer Camp 2008 - La Garrotxa
  • From: Gerardo García Peña
• RE: [Full-disclosure] Firewire Attack on Windows Vista
  • From: Larry Seltzer
• Re: [Full-disclosure] Firewire Attack on Windows Vista
  • From: Ansgar -59cobalt- Wiechers
• [ GLSA 200803-16 ] MPlayer: Multiple buffer overflows
  • From: Pierre-Yves Rofes
• Invalid memory access in Acronis True Image Group Server 1.5.19.191
  • From: Luigi Auriemma
• Denial of Service in PacketTrap TFTP server 2.0.3901.0
  • From: Luigi Auriemma
• [ GLSA 200803-17 ] PDFlib: Multiple buffer overflows
  • From: Pierre-Yves Rofes
• NULL pointer in Remotely Anywhere 8.0.668
  • From: Luigi Auriemma
• Directory traversal and NULL pointer in Acronis PXE Server 2.0.0.1076
  • From: Luigi Auriemma
• iDefense Security Advisory 03.10.08: SAP MaxDB Signedness Error Heap Corruption Vulnerability
  • From: iDefense Labs
• Vulnerabilities in Timbuktu Pro 8.6.5
  • From: Luigi Auriemma
• Multiple vulnerabilities in ASG-Sentry 7.0.0
  • From: Luigi Auriemma
• iDefense Security Advisory 03.10.08: SAP MaxDB sdbstarter Privilege Escalation Vulnerability
  • From: iDefense Labs
• NULL pointer in Acronis True Image Windows Agent 1.0.0.54
  • From: Luigi Auriemma
• Directory traversal in Argon Client Management Services 1.31
  • From: Luigi Auriemma
• [ GLSA 200803-18 ] Cacti: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• [security bulletin] HPSBUX02316 SSRT071495 rev.1 - HP-UX running HP CIFS Server (Samba), Remote Execution of Arbitrary Code
  • From: security-alert
• Re: [Full-disclosure] Firewire Attack on Windows Vista
  • From: Jacob Appelbaum
• Advisory: SQL-Injections in Mapbender
  • From: RedTeam Pentesting GmbH
• Re: [Full-disclosure] Vulnerabilities in Timbuktu Pro 8.6.5
  • From: titon
• Mambo Components ensenanzas "id" Remote SQL Injection
  • From: no-reply
• Re: [Full-disclosure] Vulnerabilities in Timbuktu Pro 8.6.5
  • From: Luigi Auriemma
• Re: Firewire Attack on Windows Vista
  • From: Steve Shockley
• [security bulletin] HPSBUX02313 SSRT080015 rev.2 - HP-UX Running Apache, Remote Cross Site Scripting (XSS)
  • From: security-alert
• PHP-Nuke Module NukeC30 sql injection
  • From: houssamix
• [USN-585-1] Python vulnerabilities
  • From: Kees Cook
• Re: Remotely Anywhere 'Accept-Charset' Parameter NULL Pointer
  • From: patrick
• ACROS Security: Session Fixation Vulnerability in WebLogic Administration Console (#2008-03-11-2)
  • From: ACROS Security
• ACROS Security: HTML Injection in BEA WebLogic Server Console (ASPR #2008-03-11-1)
  • From: ACROS Security
• Re: [Full-disclosure] Firewire Attack on Windows Vista
  • From: FD
• CORE-2008-0204: Timbuktu Pro Remote Path Traversal and Log Injection
  • From: Core Security Technologies Advisories
• ZDI-08-008: Microsoft Excel BIFF File Format Cell Record Parsing Memory Corruption Vulnerability
  • From: zdi-disclosures
• Advisory Adobe LiveCycle Workflow XSS Vulnerability
  • From: Liquidmatrix Security Digest
• PHP-Nuke Module ZClassifieds [cat] SQL Injection
  • From: lovebug
• [ GLSA 200803-19 ] Apache: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• [ GLSA 200803-20 ] International Components for Unicode: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• TPTI-08-03: Microsoft Excel Rich Text Memory Corruption Vulnerability
  • From: DVLabs
• iDefense Security Advisory 03.11.08: Microsoft Excel DVAL Heap Corruption Vulnerability
  • From: iDefense Labs
• uberghey cms 0.3.1 multiple local file inclusion vulnerabilities
  • From: muuratsalo experimental hack lab
• [SECURITY] [DSA 1515-1] New libnet-dns-perl packages fix several vulnerabilities
  • From: Florian Weimer
• travelsized cms 0.4.1 multiple local file inclusion vulnerabilities
  • From: muuratsalo experimental hack lab
• iDefense Security Advisory 03.11.08: Microsoft Excel 2003 Malformed Formula Memory Corruption Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 03.11.08: Microsoft Outlook mailto Command Line Switch Injection
  • From: iDefense Labs
• Re: VHCS <= 2.4.7.1 (vhcs2_daemon) Remote Root Exploit
  • From: Maximiliano Müller
• Cisco Security Advisory: Cisco Secure Access Control Server for Windows User-Changeable Password Vulnerabilities
  • From: Cisco Systems Product Security Incident Response Team
• hacking a pacemaker
  • From: Gadi Evron
• Cisco ACS UCP Remote Pre-Authentication Buffer Overflows
  • From: Felix 'FX' Lindner
• rPSA-2008-0106-1 lighttpd
  • From: rPath Update Announcements
• ZDI-08-010: Java Web Start encoding Stack Buffer Overflow
  • From: zdi-disclosures
• ZDI-08-009: Java Web Start tempbuff Stack Buffer Overflow
  • From: zdi-disclosures
• Powered by phpBB 2001, 2006 (SQL)
  • From: turkish-warriorr
• [ GLSA 200803-21 ] Sarg: Remote execution of arbitrary code
  • From: Raphael Marichez
• Format string in McAfee Framework 3.6.0.569 (ePolicy Orchestrator 4.0)
  • From: Luigi Auriemma
• rPSA-2008-0108-1 dovecot
  • From: rPath Update Announcements
• Re: Directory traversal and DoS in WinIPDS G52-33-021
  • From: ph
• Re: PHP-Nuke Module NukeC30 sql injection
  • From: my_msn_my_msn_my
• XSS in PHP-Nuke (eWeather module)
  • From: nima_501
• Directory traversal in EdiorCMS V3.0
  • From: wsn1983
• Re: Re: VHCS <= 2.4.7.1 (vhcs2_daemon) Remote Root Exploit
  • From: app
• Rise of the spammers
  • From: vulns
• Re: Firewire Attack on Windows Vista
  • From: Stefan Kanthak
• Rapid7 Advisory R7-0032: Microsoft Internet Explorer FTP Command Injection Vulnerability
  • From: kralor
• Zabbix (zabbix_agentd) denial of service
  • From: Milen Rangelov
• Update+Errata: Re: A paper by Amit Klein (Trusteer): "OpenBSD DNS Cache Poisoning and Multiple O/S Predictable IP ID Vulnerability"
  • From: Amit Klein
• Re: Re: Re: VHCS <= 2.4.7.1 (vhcs2_daemon) Remote Root Exploit
  • From: sad_wabi_user
• PR08-02: Plone CMS Security Research - the Art of Plowning
  • From: ProCheckUp Research
• Office XP Remote SQL Injection
  • From: no-reply
• [ MDVSA-2008:066 ] - Updated gcc packages fix directory traversal vulnerability in fastjar
  • From: security
• ZDI-08-011: IBM Informix Dynamic Server DBPATH Buffer Overflow Vulnerability
  • From: zdi-disclosures
• ZDI-08-012: IBM Informix Dynamic Server Authentication Password Stack Overflow Vulnerability
  • From: zdi-disclosures
• Cisco Security Advisory: CiscoWorks Internetwork Performance Monitor Remote Command Execution Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• [ GLSA 200803-22 ] LIVE555 Media Server: Denial of Service
  • From: Pierre-Yves Rofes
• Airspan WiMAX ProST Authentication Bypass Vulnerability
  • From: admin
• Re: Office XP Remote SQL Injection
  • From: Steve Shockley
• EasyGallery <= 5.0tr - Multiple Remote Vulnerabilities
  • From: sys-project
• Black Hat Announcements: New CFP system and Japan '08 confirmed
  • From: jmoss
• Local persistent DoS in Windows XP SP2 Taskmgr
  • From: SkyOut
• [SECURITY] [DSA 1516-1] New dovecot packages fix privilege escalation
  • From: Florian Weimer
• Troopers08 Security Conference, April 23/24 (Munich/Germany)
  • From: Enno Rey
• [USN-586-1] mailman vulnerability
  • From: Kees Cook
• Rosoft Media Player 4.1.8 RML Stack Based Buffer Overflow
  • From: opexoc
• XNview 1.92.1 Long Filename Overflow
  • From: Sylvain
• [SECURITY] [DSA 1517-1] New ldapscripts packages fix information disclosure
  • From: Thijs Kinkhorst
• [SECURITY] [DSA 1518-1] New backup-manager packages fix information disclosure
  • From: Thijs Kinkhorst
• [SECURITY] [DSA 1519-1] New horde3 packages fix information disclosure
  • From: Thijs Kinkhorst
• Joomla components com_guide "category" Remote SQL Injection [Aria-Security]
  • From: no-reply
• Re: Local persistent DoS in Windows XP SP2 Taskmgr
  • From: paraw
• [SECURITY] [DSA 1520-1] New smarty packages fix arbitrary code execution
  • From: Thijs Kinkhorst
• Re: Format string in McAfee Framework 3.6.0.569 (ePolicy Orchestrator 4.0)
  • From: neodwija
• [ GLSA 200803-23 ] Website META Language: Insecure temporary file usage
  • From: Pierre-Yves Rofes
• RE: Local persistent DoS in Windows XP SP2 Taskmgr
  • From: Thor (Hammer of God)
• vuln in snewscms Rus v 2.3
  • From: www . yo . by
• EasyCalendar <= 4.0tr - Multiple Remote Vulnerabilities
  • From: sys-project
• [SECURITY] [DSA 1521-1] New lighttpd packages fix arbitrary file disclosure
  • From: Steve Kemp
• Security Advisory on RSA Web ID (XSS)
  • From: quentin . berdugo
• raidsonic nas-4220 crypt disk key leak (stored in plain on unencrypted partition)
  • From: Collin R. Mulliner
• [SECURITY] [DSA 1493-2] New sdl-image1.2 packages fix arbitrary code execution
  • From: Thijs Kinkhorst
• Re: Rosoft Media Player 4.1.8 RML Stack Based Buffer Overflow
  • From: david130490
• Mutiple Timesheets <= 5.0 - Multiple Remote Vulnerabilities
  • From: sys-project
• Re: Format string in McAfee Framework 3.6.0.569 (ePolicy Orchestrator 4.0)
  • From: greentea-lemon
• VLC highlander bug
  • From: Luigi Auriemma
• Multiple vulnerabilities in Net Inspector 6.5.0.828
  • From: Luigi Auriemma
• Buffer-overflow in BootManage TFTPD 1.99
  • From: Luigi Auriemma
• Home FTP Server DoS
  • From: 0in . email
• Agile Hacking
  • From: Petko D. Petkov
• [SECURITY] [DSA 1485-2] New icedove packages fix regression
  • From: Moritz Muehlenhoff
• Cross Site Scripting (XSS) in phpstats 0.1_alpha, CVE-2008-0125
  • From: Hanno Böck
• Re: Re: Rosoft Media Player 4.1.8 RML Stack Based Buffer Overflow
  • From: opexoc
• Re: Re: Rosoft Media Player 4.1.8 RML Stack Based Buffer Overflow
  • From: opexoc
• [SECURITY] [DSA 1522-1] New unzip packages fix potential code execution
  • From: Florian Weimer
• [SECURITY] [DSA 1523-1] New ikiwiki packages fix cross-site scripting
  • From: Florian Weimer
• eForum 0.4 XSS
  • From: omnipresent
• VMSA-2008-0005 Updated VMware Workstation, VMware Player, VMware Server, VMware ACE, and VMware Fusion resolve critical security issues
  • From: VMware Security team
• [ GLSA 200803-25 ] Dovecot: Multiple vulnerabilities
  • From: Robert Buchholz
• Internet Explorer 7.0 crash
  • From: jplopezy
• [security bulletin] HPSBST02320 SSRT080028 rev.1 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS08-014 to MS08-017
  • From: security-alert
• cPanel 11.x => List Directories and Folders
  • From: xx_hack_xx_2004
• MITKRB5-SA-2008-001: double-free, uninitialized data vulnerabilities in krb5kdc
  • From: raeburn
• [ GLSA 200803-26 ] Adobe Acrobat Reader: Insecure temporary file creation
  • From: Robert Buchholz
• Digital Armaments March-April Hacking Challenge: 5,000$ Prize - Client Vulnerabilities and Exploit
  • From: info
• [ GLSA 200803-24 ] PCRE: Buffer overflow
  • From: Tobias Heinlein
• MITKRB5-SA-2008-001: double-free, uninitialized data vulnerabilities in krb5kdc
  • From: raeburn
• MITKRB5-SA-2008-002: array overrun in RPC library used by kadmin (resend, corrected subject)
  • From: raeburn
• CORE-2008-0123: Leopard Server Remote Path Traversal
  • From: Core Security Technologies Advisories
• [SECURITY] [DSA 1524-1] New krb5 packages fix multiple vulnerabilities
  • From: Noah Meyerhans
• iDefense Security Advisory 03.18.08: Multiple Vendor CUPS CGI Heap Overflow Vulnerability
  • From: iDefense Labs
• [ MDVSA-2008:067 ] - Updated nagios packages fix multiple vulnerabilities
  • From: security
• [ GLSA 200803-27 ] MoinMoin: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• AST-2008-005: HTTP Manager ID is predictable
  • From: Asterisk Security Team
• phpBB 2.0.23 Session Hijacking Vulnerability
  • From: nbbn@xxxxxxx
• Mambo/joomla com_intellect "page" LFI [Aria-Security]
  • From: no-reply
• AST-2008-003: Unauthenticated calls allowed from SIP channel driver
  • From: Asterisk Security Team
• [ MDVSA-2008:068 ] - Updated unzip packages vulnerability
  • From: security
• [USN-587-1] Kerberos vulnerabilities
  • From: Kees Cook
• AST-2008-002: Two buffer overflows in RTP Codec Payload Handling
  • From: Asterisk Security Team
• AST-2008-004: Format String Vulnerability in Logger and Manager
  • From: Asterisk Security Team
• HPSBST02321 SSRT080029 rev.1 - HP StorageWorks Library and Tape Tools (LTT) Running on HP-UX, Local Unauthorized Access
  • From: security-alert
• Question on CERT-FI and CPNI Joint Vulnerability Advisory on Archive Formats?
  • From: James Connery
• CS-Cart XSS
  • From: swhite
• IBM Rational ClearQuest Web Multiple XSS Vulnerabilities
  • From: swhite
• [ GLSA 200803-28 ] OpenLDAP: Denial of Service vulnerabilities
  • From: Pierre-Yves Rofes
• [ MDVSA-2008:069 ] - Updated Kerberos packages fix multiple vulnerabilities
  • From: security
• [ MDVSA-2008:070 ] - Updated Kerberos packages fix multiple vulnerabilities
  • From: security
• [ GLSA 200803-29 ] ViewVC: Multiple vulnerabilities
  • From: Tobias Heinlein
• [ MDVSA-2008:071 ] - Updated Kerberos packages fix multiple vulnerabilities
  • From: security
• rPSA-2008-0112-1 krb5 krb5-server krb5-services krb5-test krb5-workstation
  • From: rPath Update Announcements
• [ GLSA 200803-30 ] ssl-cert eclass: Certificate disclosure
  • From: Robert Buchholz
• [SECURITY] [DSA 1506-2] New iceape packages fix regression
  • From: Moritz Muehlenhoff
• Pizco vulnerable to buffer overflow in activex
  • From: david130490
• Easy-Clanpage 2.2 (id) Remote SQL Injection Vulnerability
  • From: info
• [SECURITY] [DSA 1525-1] New asterisk packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• [USN-588-1] MySQL vulnerabilities
  • From: Jamie Strandboge
• KAPhotoservice (album.asp) Remote SQL Injection Exploit
  • From: sys-project
• [SECURITY] [DSA 1522-1] New xwine packages fix several vulnerabilities
  • From: Steve Kemp
• Note about recently publicized CA BrightStor ActiveX exploit code
  • From: Williams, James K
• [ MDVSA-2008:072 ] - Updated kernel packages fix vulnerability
  • From: security
• Multiple heap overflows in xine-lib 1.1.11
  • From: Luigi Auriemma
• [USN-589-1] unzip vulnerability
  • From: Kees Cook
• [ MDVSA-2008:073 ] - Updated perl-Net-DNS packages fix DoS vulnerability
  • From: security
• [ MDVSA-2008:074 ] - Updated audacity package fixes insecure temporary directory creation
  • From: security
• CanSecWest 2008 PWN2OWN - Mar 26-28
  • From: Dragos Ruiu
• [MSA02240108] IE7 allows overwriting of several headers leading to Http request Splitting and smuggling.
  • From: Minded Security Research Labs
• [INFIGO-2008-03-07]: Surgemail 38k4 IMAP server remote stack overflow
  • From: infocus
• MS08-014
  • From: Anonymous
• Re: Horde Webmail file inclusion proof of concept & patch.
  • From: David Morton
• [MSA01240108] IE7 Transfer-Encoding: chunked allows Request Splitting/Smuggling.
  • From: Minded Security Research Labs
• DotNetNuke Default Machine Key Exposure
  • From: labs
• webutil.pl is still vulnerable against Remote Command Execution.
  • From: zero-x
• {securityreason.com}PHP 5 *printf() - Integer Overflow
  • From: cxib
• XSS in cPanel 11.x
  • From: xx_hack_xx_2004
• Re: Simple Machines Forum "SMF Shoutbox" Mod Persistent XSS
  • From: vermsky
• Safari 3.1 for windows download bug
  • From: jplopezy
• Buffer-overflow in ASUS Remote Console 2.0.0.24
  • From: Luigi Auriemma
• rPSA-2008-0116-1 unzip
  • From: rPath Update Announcements
• rPSA-2008-0118-1 bzip2
  • From: rPath Update Announcements
• Fedora, Ubuntu publish wrong advisories for CVE-2007-6318
  • From: Abel Cheung
• hacking the mitsubishi GB-50A
  • From: Chris Withers
• phpAddressBook v2.11 Multiple Local File Inclusion Vulnerabilities
  • From: Guns
• Google SoC 2008: Security Projects
  • From: jkouns
• Safari browser 3.1 (525.13) spoofing
  • From: jplopezy
• EfesTech E-Kontr (id) Remote SQL INJECTION
  • From: dj_remix_20
• Re: Potential SQL injection vulnerability in Apache::AuthCAS
  • From: dcastro
• [ MDVSA-2008:075 ] - Updated bzip2 packages fix denial of service vulnerability
  • From: security
• F5 BIG-IP Web Management Audit Log XSS
  • From: nnposter
• Linksys phone adapter denial of service
  • From: sipherr
• Alkacon OpenCms users_list.jsp searchfilter XSS
  • From: nnposter
• ircu/snircd remote crash vulnerability
  • From: Chris Porter
• RE: hacking the mitsubishi GB-50A
  • From: Desai, Ashish
• Re: Linksys phone adapter denial of service
  • From: J. Oquendo
• Re: XSS in cPanel 11.x
  • From: morin . josh
• [SECURITY] [DSA 1527-1] New debian-goodies packages fix privilege escalation
  • From: Thijs Kinkhorst
• [DSECRG-08-019] LFI in PowerBook 1.21
  • From: Digital Security Research Group
• [DSECRG-08-020] RFI-LFI in PowerClan 1.14a
  • From: Digital Security Research Group
• [DSECRG-08-021] Multiple LFI in PowerPHPBoard 1.00b
  • From: Digital Security Research Group
• Hamachi Password Disclosure Vulnerability
  • From: evilcry
• Re: Re: Linksys phone adapter denial of service
  • From: sipherr
• Re: Linksys phone adapter denial of service
  • From: orsino
• Re: Linksys phone adapter denial of service
  • From: J. Oquendo
• RE: hacking the mitsubishi GB-50A
  • From: James C. Slora Jr.
• HIS-webshop is vulnerable against Directory-Traversal (www.shoppark.de)
  • From: zero-x
• [SECURITY] [DSA 1528-1] New serendipity packages fix cross site scripting
  • From: Thijs Kinkhorst
• [USN-591-1] libicu vulnerabilities
  • From: Jamie Strandboge
• [USN-590-1] bzip2 vulnerability
  • From: Kees Cook
• [ GLSA 200803-31 ] MIT Kerberos 5: Multiple vulnerabilities
  • From: Robert Buchholz
• [ GLSA 200803-32 ] Wireshark: Denial of Service
  • From: Pierre-Yves Rofes
• Re: Linksys phone adapter denial of service
  • From: Michael VERGOZ
• aeries browser interface(ABI) 3.8.3.14 Remote SQL Injection
  • From: arsalan1991
• Re: hacking the mitsubishi GB-50A
  • From: Vincent Archer
• Re: hacking the mitsubishi GB-50A
  • From: Chris Withers
• Re: [BUGTRAQ] RE: hacking the mitsubishi GB-50A
  • From: Joe
• [SECURITY] [DSA 1530-1] New cupsys packages fix multiple vulnerabilities
  • From: Noah Meyerhans
• e107 My_Gallery Plugin Arbitrary File Download Vulnerability
  • From: Jerome Athias
• rPSA-2008-0120-1 gnome-ssh-askpass openssh openssh-client openssh-server
  • From: rPath Update Announcements
• Cuteflow Bin v1.5.0 Local File Inclusion Vuln
  • From: r57blg
• rPSA-2008-0123-1 ruby
  • From: rPath Update Announcements
• [DSECRG-08-022] Multiple Security Vulnerabilities in Bolinos 4.6.1
  • From: Digital Security Research Group
• CORE-2007-1212: SILC pkcs_decode buffer overflow
  • From: Core Security Technologies Advisories
• phpBB PJIRC mod LFI
  • From: 0in . email
• Blackboard Academic Suite Multiple XSS Vulnerabilities
  • From: knight4vn
• [security bulletin] HPSBTU02322 SSRT080011 rev.1 - HP Tru64 UNIX running SSH/SFTP Server, Remote Execution of Arbitrary Code or Denial of Service (DoS)
  • From: security-alert
• Aztech ADSL2/2+ 4 Port remote root
  • From: sipherr
• Re: hacking the mitsubishi GB-50A
  • From: Steven M. Christey
• php-addressbook v2.0 SQL Injection Vulnerbility
  • From: hadihadi_zedehal_2006
• Re: Logaholic Web Analytics Software
  • From: andre
• Cisco Security Advisory: Multiple DLSw Denial of Service Vulnerabilities in Cisco IOS
  • From: Cisco Systems Product Security Incident Response Team
• [USN-592-1] Firefox vulnerabilities
  • From: Jamie Strandboge
• Cisco Security Advisory: Vulnerability in Cisco IOS with OSPF, MPLS VPN, and Supervisor 32, Supervisor 720, or Route Switch Processor 720
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco IOS User Datagram Protocol Delivery Issue For IPv4/IPv6 Dual-stack Routers
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco IOS Multicast Virtual Private Network (MVPN) Data Leak
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco IOS Virtual Private Dial-up Network Denial of Service Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Invision Power Board <=2.3.x iFrame Vuln
  • From: shaheemirza
• ZDI-08-013: Novell eDirectory for Linux Stack Overflow
  • From: zdi-disclosures
• Re: hacking the mitsubishi GB-50A
  • From: Chris Withers
• Multiple vulnerabilities in solidDB 06.00.1018
  • From: Luigi Auriemma
• [ MDVSA-2008:076 ] - Updated wml packages fix symlink vulnerabilities
  • From: security
• [USN-593-1] Dovecot vulnerabilities
  • From: Kees Cook
• Multiple XSS in DigiDomain
  • From: xx_hack_xx_2004
• [ MDVSA-2008:077 ] - Updated perl-Tk packages fix GIF processing vulnerability
  • From: security
• [USN-594-1] libnet-dns-perl vulnerability
  • From: Kees Cook
• [SECURITY] [DSA 1529-1] New Firebird packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• [ MDVSA-2008:078 ] - Updated openssh packages fix X connection hijacking
  • From: security
• [USN-596-1] Ruby vulnerabilities
  • From: Kees Cook
• TopperMod 2.0 Remote SQL Injection Vulnerability
  • From: r57blg
• [securityreason] *BSD libc (strfmon) Multiple vulnerabilities
  • From: cxib
• [USN-595-1] SDL_image vulnerabilities
  • From: Kees Cook
• JAF-CMS 4.0 RC2 Multiple Remote File Inclusion Vulnerabilities
  • From: r57blg
• [SECURITY] [DSA 1531-1] New policyd-weight packages fix insecure temporary files
  • From: Thijs Kinkhorst
• Re: JAF-CMS 4.0 RC2 Multiple Remote File Inclusion Vulnerabilities
  • From: str0ke
• Re: [securityreason] *BSD libc (strfmon) Multiple vulnerabilities
  • From: Christos Zoulas
• rPSA-2008-0128-1 firefox
  • From: rPath Update Announcements
• [SECURITY] [DSA 1532-1] New xulrunner packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• [ MDVSA-2008:079 ] - Updated sarg packages fix multiple vulnerabilities
  • From: security
• [SECURITY] [DSA 1533-1] New exiftags packages fix several vulnerabilities
  • From: Devin Carraway
• Smf 1.1.4 Remote File Inclusion Vulnerabilities
  • From: sibertrwolf
• Re: Heap overflow in Sybase MobiLink 10.0.1.3629
  • From: jsavill
• [security bulletin] HPSBGN02305 SSRT080004 rev.1 - HP Compaq Business Notebook PC BIOS, Local Denial of Service (DoS)
  • From: security-alert
• [security bulletin] HPSBGN02319 SSRT080027 rev.1 - HP Compaq Notebook PC BIOS, Local Unauthorized Access
  • From: security-alert
• [security bulletin] HPSBOV02278 SSRT071479 rev.1 - HP OpenVMS SSH Using TCP/IP Services for OpenVMS, Remote Unauthorized Access
  • From: security-alert
• XChat 2.8.4-1 - Multiple Vulnerabilities
  • From: evilcry
• CA Multiple Products DSM ListCtrl ActiveX Control Buffer Overflow Vulnerability
  • From: Williams, James K
• Re: Smf 1.1.4 Remote File Inclusion Vulnerabilities
  • From: fake
• [SECURITY] [DSA 1534-1] New iceape packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• Re: Smf 1.1.4 Remote File Inclusion Vulnerabilities
  • From: Jindrich Kubec
• Immunity Debugger 1.5
  • From: Nicolas Waisman
• Re: XChat 2.8.4-1 - Multiple Vulnerabilities
  • From: fabio
• Re: Smf 1.1.4 Remote File Inclusion Vulnerabilities
  • From: Mike Duncan
• Internet explorer 7.0 spoofing
  • From: jplopezy
• [ MDVSA-2008:080 ] - Updated Firefox packages fix multiple vulnerabilities
  • From: security
• VMSA-2008-0006 Updated libxml2 service console package
  • From: VMware Security team
• Re: Internet explorer 7.0 spoofing
  • From: w0lfd33m
• CuteFlow Version 1.5.0 Multiple Remote Vulnerabilities
  • From: hadihadi_zedehal_2006