Mail Index

• Thread Index

• Re: Internet explorer 7.0 spoofing
  • From: mouss
• Re: Re: XChat 2.8.4-1 - Multiple Vulnerabilities
  • From: omnipresent
• Proviso SiteKiosk File Download Vulnerability
  • From: nebelfrost23
• Efestech Video v5,0 (id) Remote Sql Injection
  • From: dj_remix_20
• [SECURITY] [DSA 1531-2] New policyd-weight packages fix insecure temporary files
  • From: Thijs Kinkhorst
• PacketTrap Networks pt360 2.0.39 TFTPD Remote DoS Exploit
  • From: r57blg
• London DEFCON meet - DC4420 - New Venue - Wednesday 2nd April, 2008
  • From: Major Malfunction
• [TKADV2008-002] avast! 4.7 aavmker4.sys Kernel Memory Corruption
  • From: Tobias Klein
• rPSA-2008-0132-1 lighttpd
  • From: rPath Update Announcements
• Directory traversal in 2X ThinClientServer v5.0_sp1-r3497
  • From: Luigi Auriemma
• [SECURITY] [DSA 1535-1] New iceweasel packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• Paper by Amit Klein (Trusteer): "PowerDNS Recursor DNS Cache Poisoning [pharming]"
  • From: Amit Klein
• iDefense Security Advisory 03.31.08: Macrovision InstallShield InstallScript One-Click Install Untrusted Library Loading Vulnerability
  • From: iDefense Labs
• EasyNews-40tr Multiple Remote Vulnerabilities (SQL Injection Exploit/XSS/LFI)
  • From: irancrash
• [SECURITY] [DSA 1536-1] New libxine packages fix several vulnerabilities
  • From: Thijs Kinkhorst
• CAU-2008-0001 - Slowly Closing Door Race Condition
  • From: I)ruid
• Terracotta Personal Edition Multiple vulnerabilities
  • From: joseph . giron13
• cevado technologies real estate CMS SQL injection
  • From: joseph . giron13
• [SECURITY] [DSA 1533-2] New exiftags packages fix several vulnerabilities
  • From: Devin Carraway
• TCP/IP security vulnerability disclosed
  • From: J. Oquendo
• [ GLSA 200804-01 ] CUPS: Multiple vulnerabilities
  • From: Robert Buchholz
• Re: Re: Internet explorer 7.0 spoofing
  • From: w0lfd33m
• Re: Internet explorer 7.0 spoofing
  • From: Razi Shaban
• Re: Hamachi Password Disclosure Vulnerability
  • From: anonymous
• RE: Internet explorer 7.0 spoofing
  • From: Darth Jedi
• Re: Re: Re: Internet explorer 7.0 spoofing
  • From: jplopezy
• Writers Block SQL Injection Vulnerabilities
  • From: nebelfrost23
• HPSBMA02317 SSRT080026 rev.1 - HP Select Identity Software, Gain Unauthorized Access
  • From: security-alert
• Datalife Engine 6.7 XSRF
  • From: irancrash
• [USN-597-1] OpenSSH vulnerability
  • From: Kees Cook
• HPSBTU02325 SSRT080006 rev.1 - HP Internet Express for Tru64 UNIX running PostgreSQL, Arbitrary Code Execution, Privilege Elevation, or Denial of Service (DoS)
  • From: security-alert
• ANNOUNCE: Apache-SSL security release - apache_1.3.41+ssl_1.59
  • From: Adam Laurie
• Directory traversal in LANDesk Management Suite 8.80.1.1
  • From: Luigi Auriemma
• RE: Internet explorer 7.0 spoofing
  • From: Mike Diaz
• [ MDVSA-2008:081 ] - Updated CUPS packages fix multiple vulnerabilities
  • From: security
• [SECURITY] [DSA 1537-1] New xpdf packages fix multiple vulnerabilities
  • From: Devin Carraway
• [ GLSA 200804-02 ] bzip2: Denial of Service
  • From: Pierre-Yves Rofes
• Webwasher Denial of Service Vulnerability
  • From: security
• [USN-598-1] CUPS vulnerabilities
  • From: Jamie Strandboge
• Vulnerabilities in kses-based HTML filters
  • From: lpilorz
• Joomla Component com_lms SQL Injection
  • From: no-reply
• Parallels virtuozzo's VZPP multiple csrf vulnerabilities
  • From: poplix
• [USN-588-2] MySQL regression
  • From: Jamie Strandboge
• Recon 2008 CFP last call, early registration open
  • From: Recon Conference
• Cisco Security Advisory: Cisco Unified Communications Disaster Recovery Framework Command Execution Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• POC2008 call for papers
  • From: pocadm
• ZDI-08-014: Apple Quicktime Multiple Opcode Memory Corruption Vulnerabilities
  • From: zdi-disclosures
• ZDI-08-018: Apple QuickTime Run Length Encoding Heap Overflow Vulnerability
  • From: zdi-disclosures
• Medium security hole affecting Festival on Debian unstable/testing and Ubuntu Hardy Heron
  • From: Tim Brown
• ZDI-08-016: Apple QuickTime MP4A Atom Parsing Heap Corruption Vulnerability
  • From: zdi-disclosures
• ZDI-08-015: Apple QuickTime Clipping Region Heap Overflow Vulnerability
  • From: zdi-disclosures
• CA Alert Notification Server Multiple Vulnerabilities
  • From: Williams, James K
• ZDI-08-019: Apple QuickTime Malformed VR obji Atom Parsing Memory Corruption Vulnerability
  • From: zdi-disclosures
• CA ARCserve Backup for Laptops and Desktops Server and CA Desktop Management Suite Multiple Vulnerabilities
  • From: Williams, James K
• KwsPHP Module ConcoursPhoto XSS
  • From: hsx
• CORE-2008-0314 - Orbit Downloader "Download failed" buffer overflow
  • From: CORE Security Technologies Advisories
• iDefense Security Advisory 04.02.08: Symantec Internet Security 2008 ActiveDataInfo.LaunchProcess Design Error Vulnerability
  • From: iDefense Labs
• ZDI-08-017: Apple QuickTime Kodak Encoding Heap Overflow Vulnerability
  • From: zdi-disclosures
• iDefense Security Advisory 04.03.08: SCO UnixWare pkgadd Directory Traversal Vulnerability
  • From: iDefense Labs
• [security bulletin] HPSBMA02323 SSRT080032 rev.1 - HP USB Floppy Drive Key (Option) for ProLiant Servers, Local Virus Infection
  • From: security-alert
• iDefense Security Advisory 04.02.08: Symantec Norton Internet Security 2008 ActiveX Control Buffer Overflow Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 04.03.08: Computer Associates Alert Notification Service Multiple RPC Buffer Overflow Vulnerabilities
  • From: iDefense Labs
• [SECURITY] [DSA 1539-1] New mapserver packages fix multiple vulnerabilities
  • From: Devin Carraway
• [SECURITY] [DSA 1538-1] New alsaplayer packages fix arbitrary code execution
  • From: Devin Carraway
• rPSA-2008-0136-1 cups
  • From: rPath Update Announcements
• rPSA-2008-0138-1 tshark wireshark
  • From: rPath Update Announcements
• rPSA-2008-0139-1 gnome-ssh-askpass openssh openssh-client openssh-server
  • From: rPath Update Announcements
• F5 BIG-IP Management Interface Perl Injection
  • From: nnposter
• TheGreenBowVPN, Login Credentials Disclosure
  • From: evilcry
• Blogator-script 0.95 Change User Password Vulnerbility
  • From: hadihadi_zedehal_2006
• [ GLSA 200804-03 ] OpenSSH: Privilege escalation
  • From: Robert Buchholz
• Alkacon OpenCms sessions.jsp searchfilter XSS
  • From: nnposter
• Blogator-script 0.95 SQL Injection Vulnerbility
  • From: hadihadi_zedehal_2006
• [ GLSA 200804-05 ] NX: User-assisted execution of arbitrary code
  • From: Robert Buchholz
• openMosix userspace library stack-based buffer overflow
  • From: jose
• Tumbleweed SecureTransport FileTransfer ActiveX Control Buffer Overflow
  • From: Patrick Webster
• CDNetworks Nefficient Download(NeffyLauncher.dll) Vulnerabilities
  • From: Simon Ryeo
• [ GLSA 200804-06 ] UnZip: User-assisted execution of arbitrary code
  • From: Robert Buchholz
• Attack Technique: File Download Injection
  • From: Jeff Williams
• Wikepage Opus 13 2007.2 Directory Traversal Vulnerbility
  • From: virangar_nml
• [SECURITY] [DSA 1540-1] New lighttpd packages fix denial of service
  • From: Steve Kemp
• Multiple vulnerabilities in HP OpenView NNM 7.53
  • From: Luigi Auriemma
• [ GLSA 200804-04 ] MySQL: Multiple vulnerabilities
  • From: Robert Buchholz
• Swiki 1.5 Multiple Cross-Site Scripting Vulnerabilities
  • From: brad . antoniewicz
• Re: Wikepage Opus 13 2007.2 Directory Traversal Vulnerbility
  • From: yeppy
• WoltLab(R) Community Framework XSS and Full Path Disclosure Vulnerability
  • From: Jessica Hope
• Wayport Public Access PC Authentication Bypass Weakness
  • From: Pascal Cretain
• [security bulletin] HPSBMA02327 SSRT071455 rev.1 - HP Integrity Servers iLO-2 Management Processors (iLO-2 MP), Denial of Service (DoS)
  • From: security-alert
• licq remote DoS?
  • From: Milen Rangelov
• New tool released : Syslog Fuzzer
  • From: jaime . blasco
• Microsoft Windows DNS Stub Resolver Cache Poisoning (MS08-020)
  • From: Amit Klein
• [security bulletin] [security bulletin] HPSBST02318 SSRT080018 rev.1 - HP Storage Essentials Software, Remote Unauthorized Access to Data
  • From: security-alert
• [security bulletin] HPSBMA02242 SSRT061260 rev.3 - HP OpenView Network Node Manager (OV NNM) Running Shared Trace Service, Remote Arbitrary Code Execution
  • From: security-alert
• Re: Multiple vulnerabilities in HP OpenView NNM 7.53
  • From: Luigi Auriemma
• ZDI-08-020: Microsoft GDI WMF Parsing Heap Overflow Vulnerability
  • From: zdi-disclosures
• iDefense Security Advisory 04.08.08: Microsoft HxTocCtrl ActiveX Control Invalid Param Heap Corruption Vulnerability
  • From: iDefense Labs
• ZDI-08-021: Adobe Flash Player DeclareFunction2 Invalid Object Use Vulnerability
  • From: zdi-disclosures
• [SECURITY] [DSA 1541-1] New openldap2.3 packages fix denial of service
  • From: Moritz Muehlenhoff
• CAU-2008-0002: Microsoft Windows SharePoint Services Picture Source XSS
  • From: I)ruid
• SAP Netweaver 6.40-7.0 Cross-Site-Scripting
  • From: jaime . blasco
• Pu Arcade component for Joomla - SQL injection
  • From: netmantis . com
• [ GLSA 200804-07 ] PECL APC: Buffer Overflow
  • From: Robert Buchholz
• iDefense Security Advisory 04.08.08: Microsoft Windows Graphics Rendering Engine Integer Overflow Vulnerability
  • From: iDefense Labs
• [SECURITY] [DSA 1542-1] New libcairo packages fix arbitrary code execution
  • From: Devin Carraway
• [CVE-2007-5301] alsaplayer PoC - exploit
  • From: Albert Sellarès
• [SECURITY] [DSA 1543-1] New vlc packages fix several vulnerabilities
  • From: Devin Carraway
• [ MDVSA-2008:082 ] - Updated php-apc packages fix vulnerability
  • From: security
• [USN-599-1] Ghostscript vulnerability
  • From: Jamie Strandboge
• [SECURITY] [DSA 1544-1] New pdns-recursor packages fix cache poisoning vulnerability
  • From: Florian Weimer
• IOActive Security Advisory: Buffer overflow in Python zlib extension module
  • From: Justin Ferguson
• Re: Alkacon OpenCms sessions.jsp searchfilter XSS
  • From: a . westtermann
• paFileDB 3.1 Remote SQL Injection
  • From: noreply
• Re: licq remote DoS?
  • From: 3APA3A
• [ MDVSA-2008:083 ] - Updated audit packages fix vulnerability
  • From: security
• [ GLSA 200804-08 ] lighttpd: Multiple vulnerabilities
  • From: Tobias Heinlein
• Re: openMosix userspace library stack-based buffer overflow
  • From: nixpanic
• Re: Re: licq remote DoS?
  • From: mrangelov
• EUSecWest CFP Closes April 14th (conf May 21/22 2008)
  • From: Dragos Ruiu
• [SECURITY] [DSA 1545-1] New rsync packages fix arbitrary code execution
  • From: Moritz Muehlenhoff
• [ GLSA 200804-09 ] am-utils: Insecure temporary file creation
  • From: Pierre-Yves Rofes
• [ GLSA 200804-10 ] Tomcat: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• w2b.ru multiple products SQL Injection
  • From: noreply
• [USN-600-1] rsync vulnerability
  • From: Kees Cook
• iDefense Security Advisory 04.09.08: EMC DiskXtender File System Manager Stack Buffer Overflow Vulnerability
  • From: iDefense Labs
• Borland InterBase 2007 "ibserver.exe" Buffer Overflow Vulnerability POC
  • From: Liu Zhen Hua
• [SECURITY] [DSA 1546-1] New gnumeric packages fix arbitrary code execution
  • From: Devin Carraway
• iDefense Security Advisory 04.09.08: EMC DiskXtender MediaStor Format String Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 04.09.08: EMC DiskXtender Authentication Bypass Vulnerability
  • From: iDefense Labs
• WiKID wClient-PHP <= 3.0-2 Multiple XSS Vulnerabilities
  • From: ascii
• [ GLSA 200804-12 ] gnome-screensaver: Privilege escalation
  • From: Raphael Marichez
• [ GLSA 200804-11 ] policyd-weight: Insecure temporary file creation
  • From: Robert Buchholz
• Directory traversal and multiple Denials of Service in HP OpenView NNM 7.53
  • From: Luigi Auriemma
• Trillian 3.1.9.0 DTD File Buffer Overflow
  • From: david130490
• IOActive Security Advisory: Incorrect input validation in PyString_FromStringAndSize() leads to multiple buffer overflows
  • From: Justin Ferguson
• [ MDVSA-2008:084 ] - Updated rsync packages fix vulnerability
  • From: security
• DEF CON 16 Retro Announcement! Back to Bang!
  • From: The Dark Tangent
• Re: WoltLab(R) Community Framework WCF 1.0.6
  • From: marc . deroche
• DEF CON 16 Retro Announcement! Back to Bang!
  • From: The Dark Tangent
• project announcement - oCERT - Open Source CERT
  • From: Andrea Barisani
• [oCERT-2008-003] libpng zero-length chunks incorrect handling
  • From: Andrea Barisani
• Secunia Research: Lotus Notes kvdocve.dll Path Processing Buffer Overflow
  • From: Secunia Research
• OneSecurityDay 2008 - Web application auditing challenge
  • From: bugtraq
• Secunia Research: activePDF DocConverter Folio Flat File Parsing Buffer Overflows
  • From: Secunia Research
• Secunia Research: Adobe Flash Player "Declare Function (V7)" Heap Overflow
  • From: Secunia Research
• Secunia Research: Lotus Notes htmsr.dll Buffer Overflows
  • From: Secunia Research
• Secunia Research: Symantec Mail Security Folio Flat File Parsing Buffer Overflows
  • From: Secunia Research
• Secunia Research: Lotus Notes Applix Graphics Parsing Vulnerabilities
  • From: Secunia Research
• DOINGSOFT-2008-03-10-001 - XSS issue in BOXiR2
  • From: Sebastien gioria
• Secunia Research: Lotus Notes Folio Flat File Parsing Buffer Overflows
  • From: Secunia Research
• Secunia Research: Autonomy Keyview Folio Flat File Parsing Buffer Overflows
  • From: Secunia Research
• Secunia Research: HP OpenView Network Node Manager OpenView5.exe Directory Traversal
  • From: Secunia Research
• Secunia Research: Autonomy Keyview EML Reader Buffer Overflows
  • From: Secunia Research
• Secunia Research: Symantec Mail Security Applix Graphics Parsing Vulnerabilities
  • From: Secunia Research
• Secunia Research: Lotus Notes EML Reader Buffer Overflows
  • From: Secunia Research
• Secunia Research: Autonomy Keyview Applix Graphics Parsing Vulnerabilities
  • From: Secunia Research
• Secunia Research: activePDF DocConverter Applix Graphics Parsing Vulnerabilities
  • From: Secunia Research
• Secunia Research: Internet Explorer Data Stream Handling Vulnerability
  • From: Secunia Research
• S21SEC-041-en:Cezanne SW Cross-Site Scripting
  • From: S21sec labs
• S21SEC-042-en:Cezanne SW Cross-Site Scripting (login required)
  • From: S21sec labs
• S21SEC-043-en:Cezanne SW Blind SQL Injection
  • From: S21sec labs
• Fones Clinic Mart SQL
  • From: turkish-warriorr
• [USN-601-1] Squid vulnerability
  • From: Jamie Strandboge
• Troopers08 Security Conference, April 23/24 (Munich/Germany)
  • From: Enno Rey
• [ GLSA 200804-14 ] Opera: Multiple vulnerabilities
  • From: Robert Buchholz
• KwsPHP (Upload) Remote Code Execution Exploit
  • From: ajax
• [ GLSA 200804-15 ] libpng: Execution of arbitrary code
  • From: Robert Buchholz
• [ GLSA 200804-13 ] Asterisk: Multiple vulnerabilities
  • From: Robert Buchholz
• Dotclear 'ecrire/images.php' Arbitrary File Upload Vulnerability
  • From: Morgan ARMAND
• [ MDVSA-2008:085 ] - Updated python packages fix arbitrary code execution vulnerability
  • From: security
• BosNews v4.0 Remote add user admin
  • From: houssamix
• clamav: Endless loop / hang with crafter arj, CVE-2008-1387
  • From: Hanno Böck
• BosNews 2002-2006 Remote add user admin
  • From: houssamix
• Re: Secunia Research: Lotus Notes Folio Flat File Parsing Buffer Overflows
  • From: Luigi Auriemma
• [ MDVSA-2008:086 ] - Updated kernel packages fix vulnerability
  • From: security
• [SECURITY] [DSA 1540-2] New lighttpd packages fix denial of service
  • From: Steve Kemp
• Koobi CMS 4.2.4/4.2.5/4.3.0 Multiple Remote SQL Injection Vulnerabilities
  • From: sys-project
• WordPress 2.5 - Salt cracking vulnerability
  • From: J. Carlos Nieto
• Koobi Pro 6.25 poll Remote SQL Injection Vulnerability
  • From: Sabun
• remote file include
  • From: win32 . exe
• iDefense Security Advisory 04.14.08: ClamAV libclamav PE WWPack Heap Overflow Vulnerability
  • From: iDefense Labs
• remote file include
  • From: win32 . exe
• DIVX Player <= 6.7.0 Buffer Overflow PoC ( .SRT )
  • From: securfrog
• [ MDVSA-2008:086 ] - Updated kernel packages fix vulnerability
  • From: security
• Oracle - SQL Injection in package SDO_GEOM [DB06]
  • From: ak
• Carbon Communities forum Multiple Vulnerabilities.
  • From: admin
• BigAnt Server 2.2 PreAuth Remote SEH Overflow Exploit (0day)
  • From: admin
• VMSA-2008-0007 Moderate Updated Service Console packages pcre, net-snmp, and OpenPegasus
  • From: VMware Security team
• Oracle - SQL Injection in package SDO_IDX [DB07]
  • From: ak
• Oracle - SQL Injection Vulnerability in SDO_UTIL [DB05]
  • From: ak
• [INFIGO-2008-04-08]: ICQ 6 remote buffer overflow vulnerability
  • From: infocus
• Oracle - Hardcoded Password and Password Reset of OUTLN User [DB13]
  • From: ak
• Cisco Security Advisory: Cisco Network Admission Control Shared Secret Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• CA DSM gui_cm_ctrls ActiveX Control Vulnerability
  • From: Williams, James K
• iDefense Security Advisory 04.09.08: IBM DB2 Universal Database Administration Server File Creation Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 04.09.08: IBM DB2 Universal Database db2dasStartStopFMDaemon Buffer Overflow Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 04.15.08: Oracle Application Express Privilege Escalation Vulnerability
  • From: iDefense Labs
• Re: PHPSlideShow (toonchapter8.php) Cross-Site Scripting Vulnerability
  • From: contact
• Classifieds Caffe (index.php cat_id) Remote SQL Injection
  • From: sys-project
• ZDI-08-022: Apple Safari WebKit PCRE Handling Integer Overflow Vulnerability
  • From: zdi-disclosures
• FreeBSD Security Advisory FreeBSD-SA-08:05.openssh
  • From: FreeBSD Security Advisories
• [ MDVSA-2008:087 ] - Updated policykit package fixes format string vulnerability
  • From: security
• [oCERT-2008-004] multiple speex implementations insufficient boundary checks
  • From: Andrea Barisani
• [SECURITY] [DSA 1547-1] New OpenOffice.org packages fix arbitrary code execution
  • From: Martin Schulze
• [ GLSA 200804-16 ] rsync: Execution of arbitrary code
  • From: Robert Buchholz
• [ GLSA 200804-17 ] Speex: User-assisted execution of arbitrary code
  • From: Robert Buchholz
• [ GLSA 200804-18 ] Poppler: User-assisted execution of arbitrary code
  • From: Robert Buchholz
• [security bulletin] HPSBMA02133 SSRT061201 rev.8 - HP Oracle for OpenView (OfO) Critical Patch Update
  • From: security-alert
• [security bulletin] HPSBST02329 SSRT080048 rev.1 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS08-018 to MS08-025
  • From: security-alert
• [security bulletin] HPSBMA02328 SSRT071293 rev.2 - HP OpenView Network Node Manager (OV NNM) Running Apache, Remote Cross Site Scripting (XSS), Denial of Service (DoS), Execute Arbitrary Code
  • From: security-alert
• Microsoft Works 7 WkImgSrv.dll crash POC
  • From: wsn1983
• Announcement - DeepSec Conference 2008, Nov 11-14 2008
  • From: DeepSec Conference
• [SECURITY] [DSA 1548-1] New xpdf packages fix arbitrary code exitution
  • From: Devin Carraway
• [USN-603-1] poppler vulnerability
  • From: Kees Cook
• [USN-603-2] KOffice vulnerability
  • From: Kees Cook
• Re: BigAnt Server 2.2 PreAuth Remote SEH Overflow Exploit (0day)
  • From: m . memelli
• [SECURITY] [DSA 1549-1] New clamav packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• Re: [Full-disclosure] Secunia Research: Lotus Notes Folio Flat File Parsing Buffer Overflows
  • From: Juha-Matti Laurio
• [SECURITY] [DSA 1550-1] New suphp packages fix local privilege escalation
  • From: Moritz Muehlenhoff
• iDefense Security Advisory 04.17.08: Multiple Vendor OpenOffice OLE DocumentSummaryInformation Heap Overflow Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 04.17.08: Multiple Vendor OpenOffice EMF EMR_BITBLT Record Integer Overflow Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 04.17.08: Multiple Vendor OpenOffice QPRO Multiple Heap Overflow Vulnerabilities
  • From: iDefense Labs
• iDefense Security Advisory 04.17.08: Multiple Vendor OpenOffice QPRO File Parsing Integer Underflow Vulnerability
  • From: iDefense Labs
• [ GLSA 200804-19 ] PHP Toolkit: Data disclosure and Denial of Service
  • From: Robert Buchholz
• [ MDVSA-2008:088 ] - Updated clamav packages fix multiple vulnerabilities
  • From: security
• [ MDVSA-2008:089 ] - Updated poppler packages fix vulnerability
  • From: security
• BitTorrent Clients and CSRF
  • From: th3 . r00k . nospam
• [ GLSA 200804-20 ] Sun JDK/JRE: Multiple vulnerabilities
  • From: Robert Buchholz
• 5th avenue Shopping Cart SQL Injection
  • From: noreply
• LightNEasy v.1.2.2 flat Multiple Vulnerabilities
  • From: darkz . gsa
• Wikepage Wiki v.2007-2 Cross-Site Scripting
  • From: darkz . gsa
• [ GLSA 200804-21 ] Adobe Flash Player: Multiple vulnerabilities
  • From: Robert Buchholz
• Team SHATTER Security Advisory: Multiple DoS in JAR files manipulation procedures
  • From: Team SHATTER
• Team SHATTER Security Advisory: IBM DB2 UDB Arbitrary file overwrite in SYSPROC.NNSTAT procedure
  • From: Team SHATTER
• [ GLSA 200804-22 ] PowerDNS Recursor: DNS Cache Poisoning
  • From: Robert Buchholz
• Team SHATTER Security Advisory: IBM DB2 UDB Arbitrary code execution in ADMIN_SP_C/ADMIN_SP_C2 procedures
  • From: Team SHATTER
• ANNOUNCE: RFIDIOt-0.1s release (now available for Windows)
  • From: Adam Laurie
• [SECURITY] [DSA 1551-1] New python2.4 packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 1552-1] New mplayer packages fix arbitrary code execution
  • From: Moritz Muehlenhoff
• Token Kidnapping (Microsoft Security Advisory 951306) presentation available
  • From: Cesar
• Deciphering the Simple Machines Forum audio Captcha
  • From: Michael . Brooks . SPAM
• SyScan'08 Singapore - Call for Paper
  • From: organiser@xxxxxxxxxx
• Deciphering the PHP-Nuke Capthca
  • From: Michael . Brooks . SPAM
• [ MDVSA-2008:090 ] - Updated OpenOffice.org packages fix vulnerabilities
  • From: security
• Acidcat CMS Multiple Vulnerabilities
  • From: admin
• [SECURITY] [DSA 1553-1] New ikiwiki packages fix cross-site request forgery
  • From: Florian Weimer
• IRM Security Advisory : RedDot CMS SQL injection vulnerability
  • From: Mark Crowther
• Powered by gCards v1.46 SQL
  • From: turkish-warriorr
• Re: Re: Smf 1.1.4 Remote File Inclusion Vulnerabilities
  • From: douchbag
• ANNOUNCE: Security Implications of Windows Access Tokens Whitepaper
  • From: luke . jennings
• [ GLSA 200804-23 ] CUPS: Integer overflow vulnerability
  • From: Matthias Geerdsen
• Xoops All Version -Articles- Article.PHP (ID) Blind SQL Injection ExpL0it
  • From: crazy_kinq
• [ GLSA 200804-24 ] DBmail: Data disclosure
  • From: Matthias Geerdsen
• Sea-Surfing on the Motorola Surfboard
  • From: th3 . r00k . nospam
• Re: Powered by gCards v1.46 SQL
  • From: packet
• [USN-602-1] Firefox vulnerabilities
  • From: Jamie Strandboge
• Correcting CVEs (was Re: [Full-disclosure] Cross site scripting issues in s9y (CVE-2008-1386, CVE-2008-1387))
  • From: Hanno Böck
• [USN-604-1] Gnumeric vulnerability
  • From: Kees Cook
• Cross site scripting issues in s9y (CVE-2008-1386, CVE-2008-1387)
  • From: Hanno Böck
• Safari 3.1.1 Multiple Vulnerabilities for windows
  • From: jplopezy
• Firefox 3.0 beta 5 crash
  • From: jplopezy
• Re: Firefox 3.0 beta 5 crash
  • From: Gianluca Borello
• [SECURITY] [DSA 1554-1] New roundup packages fix cross-site scripting vulnerability
  • From: Noah Meyerhans
• Default key algorithm in Thomson and BT Home Hub routers
  • From: Adrian Pastor
• Re: Default key algorithm in Thomson and BT Home Hub routers
  • From: ap
• AST-2008-006 - 3-way handshake in IAX2 incomplete
  • From: Security Officer
• Horde Webmail XSS [Aria-Security]
  • From: noreply
• LayerOne 2008 - Final Pre-Con Update
  • From: Layer One
• NetClassifieds Sql Injection
  • From: noreply
• Zune software - arbitrary file overwrite
  • From: info
• [SECURITY] [DSA 1555-1] New iceweasel packages fix arbitrary code execution
  • From: Moritz Muehlenhoff
• [ GLSA 200804-25 ] VLC: User-assisted execution of arbitrary code
  • From: Robert Buchholz
• [ GLSA 200804-26 ] Openfire: Denial of Service
  • From: Robert Buchholz
• Re: NetClassifieds Sql Injection
  • From: laurent . gaffie
• PR07-43: Cross-domain redirect on RSA Authentication Agent
  • From: ProCheckUp Research
• PR07-44: XSS on RSA Authentication Agent login page
  • From: ProCheckUp Research
• [W01-0408] Realtek HD Audio Codec Drivers (Vista) - Local Privilege Escalation
  • From: vulns
• xine-lib NES Sound Format Demuxer Buffer Overflow
  • From: laurent . gaffie
• Re: xine-lib NES Sound Format Demuxer Buffer Overflow
  • From: Guido Landi
• [ GLSA 200804-28 ] JRockit: Multiple vulnerabilities
  • From: Tobias Heinlein
• Trillian 3.1 basic nick crash
  • From: jplopezy
• DDIVRT-2008-11 BadBlue uninst.exe DoS
  • From: vulnerabilityresearch
• [ GLSA 200804-27 ] SILC: Multiple vulnerabilities
  • From: Tobias Heinlein
• A New Class of Vulnerability in Oracle: Lateral SQL Injection
  • From: David Litchfield
• HPSBGN02333 SSRT080031 rev.1 - HP Software Update HPeDiag Running on Windows, Remote Disclosure of Information and Execution of Arbitrary Code
  • From: security-alert
• [SECURITY] [DSA 1557-1] New phpmyadmin packages fix several vulnerabilities
  • From: Thijs Kinkhorst
• [SECURITY] [DSA 1556-1] New perl packages fix denial of service
  • From: Florian Weimer
• [SECURITY] [DSA 1534-2] New iceape packages fix regression
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 1558-1] New xulrunner packages fix arbitrary code execution
  • From: Moritz Muehlenhoff
• [ MDVSA-2008:091 ] - Updated wireshark packages fix denial of service vulnerabilities
  • From: security
• Lotus expeditor rcplauncher uri handler vulnerability
  • From: Thomas Pollet
• R.I.P. rgod
  • From: ipsdix
• [ GLSA 200804-29 ] Comix: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• Re: Firefox 3.0 beta 5 crash
  • From: Mauro Faccenda
• Curious vulnerability in Excel 2007
  • From: jplopezy
• Re: Curious vulnerability in Excel 2007
  • From: jplopezy
• GroupWise 7 attached bugs
  • From: jplopezy
• Wordpress 2.5 Cookie Integrity Protection Vulnerability
  • From: Steven J. Murdoch
• Re: Firefox 3.0 beta 5 crash (Slightly unrelated)
  • From: Skratz0r
• rPSA-2008-0149-1 idle python
  • From: rPath Update Announcements
• IMF 2008 - 2nd Call for Papers
  • From: Oliver Goebel
• Re: Simple Machines Forum "SMF Shoutbox" Mod Persistent XSS
  • From: pobore
• Re: R.I.P. rgod
  • From: blacklight
• [SECURITY] [DSA 1556-2] New perl packages fix denial of service
  • From: Florian Weimer
• [SECURITY] [DSA 1560-1] New kronolith2 packages fix cross site scripting
  • From: Thijs Kinkhorst
• GroupWise 7.0 mailto: scheme buffer overflow
  • From: jplopezy
• bug report
  • From: hadikiamarsi
• [SECURITY] [DSA 1561-1] New ldm packages fix information disclosure
  • From: Thijs Kinkhorst
• London DEFCON meet - Thursday 1st May - DC4420
  • From: Major Malfunction
• Minibb 2.2a XSS Vulnerability
  • From: irancrash
• Microsoft SWI blog inaccuracies
  • From: Amit Klein
• [SECURITY] [DSA 1562-1] New iceape packages fix arbitrary code execution
  • From: Moritz Muehlenhoff
• [ECHO_ADV_88$2008] Prozilla Hosting Index (directory.php cat_id) Blind Sql Injection Vulnerability
  • From: erdc
• [ECHO_ADV_89$2008] Softbiz Web Host Directory Script (search_result.php host_id) Blind Sql Injection Vulnerability
  • From: erdc
• CORE-2008-0320 - Insufficient argument validation of hooked SSDT functions on multiple Antivirus and Firewalls
  • From: CORE Security Technologies Advisories
• Re: h2desk helpdesk path disclosure vulnerability
  • From: john
• [ GLSA 200804-30 ] KDE start_kdeinit: Multiple vulnerabilities
  • From: Matthias Geerdsen
• SugarCRM Community Edition Local File Disclosure Vulnerability
  • From: roberto . suggi
• rPSA-2008-0151-1 libpng
  • From: rPath Update Announcements
• Re: Yourfreeworld Styleish Text Ads Script
  • From: rohit
• XSS Attack
  • From: hadikiamarsi
• Re: R.I.P. rgod
  • From: Christian Kujau
• [ MDVSA-2008:092 ] - Updated gstreamer-plugins-good packages fix vulnerabilities
  • From: security
• [ MDVSA-2008:093 ] - Updated vorbis-tools packages fix vulnerabilities
  • From: security
• [security bulletin] HPSBMA02331 SSRT080000 rev.1 - HP-UX running WBEM Services, Remote Execution of Arbitrary Code, Gain Extended Privileges
  • From: security-alert
• Critical Vulnerability in SNMPc
  • From: NGSSoftware Insight Security Research