Mail Index

• Thread Index

• [SECURITY] [DSA 1588-2] New Linux 2.6.18 packages fix several vulnerabilities
  • From: dann frazier
• VisualSentinel 0.7 Cross Agent Scripting Vulnerability
  • From: bugtraq
• LokiCMS Multiple Vulnerabilities through Authorization weakness
  • From: Alireza Hassani
• Re: VisualSentinel 0.7 Cross Agent Scripting Vulnerability
  • From: m . morcote
• SQL Injection leading to authorization bypass in Torrent Trader Classic v1.08 and earlier
  • From: Charles Vaughn
• [SECURITY] [DSA 1553-2] New ikiwiki packages fix regression
  • From: Thijs Kinkhorst
• rPSA-2008-0180-1 samba samba-client samba-server samba-swat
  • From: rPath Update Announcements
• ARP handler Inspection tool released
  • From: Andrea Di Pasquale
• BP Blog 6.0 (id) Remote Blind SQL Injection Vulnerability
  • From: sys-project
• Re: xt:Commerce possible DoS
  • From: decoder-bugtraq
• OtomiGenX v2.2 Ultimate Authentication bypass Vulnerability
  • From: hadihadi_zedehal_2006
• ComicShout 2.8 (news.php news_id) SQL Injection Vulnerability
  • From: sys-project
• [ECHO_ADV_96$2008] HiveMaker Professional <= 1.0.2 (cid) Sql Injection Vulnerability
  • From: erdc
• rPSA-2008-0181-1 openssl openssl-scripts
  • From: rPath Update Announcements
• DEFCON 16 Updates - Get involved!
  • From: The Dark Tangent
• Advisory: Xerox Workaround & planned patch
  • From: suzanne . hawley
• [SECURITY] CVE-2008-1947: Tomcat host-manager XSS vulnerability
  • From: Mark Thomas
• Windows Installer msiexec GUID Buffer Overflow
  • From: Patrick Webster
• [SECURITY] [DSA 1591-1] New libvorbis packages fix several vulnerabilities
  • From: Thijs Kinkhorst
• [security bulletin] HPSBST02312 SSRT071428 rev.1 - HP StorageWorks Storage Mirroring Software, Remote Execution of Arbitrary Code
  • From: security-alert
• Re: Windows Installer msiexec GUID Buffer Overflow
  • From: 0xjbrown41
• [ GLSA 200806-02 ] libxslt: Execution of arbitrary code
  • From: Tobias Heinlein
• RE: Windows Installer msiexec GUID Buffer Overflow
  • From: Thor (Hammer of God)
• [ GLSA 200806-01 ] mtr: Stack-based buffer overflow
  • From: Tobias Heinlein
• London DEFCON June meet - DC4420 - Thursday 5th June
  • From: Major Malfunction
• [NSG 03-06-2008] C6 Messenger Installation Url DownloaderActiveX Control Remote Download & Execute Exploit
  • From: ipsdix
• AccessMe Tool Release
  • From: Oliver Lavery
• [USN-614-1] Linux kernel vulnerabilities
  • From: Kees Cook
• AST-2008-008: Remote Crash Vulnerability in SIP channel driver when run in pedantic mode
  • From: Asterisk Security Team
• [ MDVSA-2008:109 ] - Updated kernel packages fix bugs
  • From: security
• QuickerSite Multiple Vulnerabilities
  • From: Admin
• iDefense Security Advisory 06.03.08: Sun Java System Active Server Pages File Creation Vulnerability
  • From: iDefense Labs
• [security bulletin] HPSBMA02326 SSRT071490 rev.1 - HP Instant Support HPISDataManager.dll Running on Windows, Remote Execution of Arbitrary Code
  • From: security-alert
• iDefense Security Advisory 06.03.08: Sun Java System Active Server Pages Information Disclosure Vulnerability
  • From: iDefense Labs
• CSIS-RI-0003: Multiple buffer overflow vulnerabilities in HP ActiveX
  • From: rand
• iDefense Security Advisory 06.03.08: Sun Java System Active Server Pages Multiple Command Injection Vulnerabilities
  • From: iDefense Labs
• IMF 2008 - Deadline Extension (2nd try)
  • From: Oliver Goebel
• iDefense Security Advisory 06.03.08: Sun Java System Active Server Pages Multiple Directory Traversal Vulnerabilities
  • From: iDefense Labs
• iDefense Security Advisory 06.03.08: Sun Java System Active Server Pages Authorization Bypass Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 06.03.08: Sun Java System Active Server Pages Buffer Overflow Vulnerability
  • From: iDefense Labs
• Akamai Technologies Security Advisory 2008-0001 (Download Manager)
  • From: Akamai Security Team
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco PIX and Cisco ASA
  • From: Cisco Systems Product Security Incident Response Team
• VMSA-2008-0009 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Fusion, VMware Server, VMware VIX API, VMware ESX, VMware ESXi resolve critical security issues
  • From: VMware Security team
• ZDI-08-034: HP StorageWorks Storage Mirroring Authentication Processing Stack Overflow Vulnerability
  • From: zdi-disclosures
• ZDI-08-035: CA ETrust Secure Content Manager Gateway FTP PASV Stack Overflow Vulnerability
  • From: zdi-disclosures
• ZDI-08-036: CA ETrust Secure Content Manager Gateway FTP LIST Stack Overflow
  • From: zdi-disclosures
• TPTI-08-05: CA ETrust Secure Content Manager Gateway FTP LIST Stack Overflow Vulnerability
  • From: DVLabs
• iDefense Security Advisory 06.04.08: Skype File URI Security Bypass Code Execution Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 06.04.08: Kaspersky Internet Security IOCTL Stack Based Buffer Overflow Vulnerability
  • From: iDefense Labs
• Re: ZDI-08-034: HP StorageWorks Storage Mirroring Authentication Processing Stack Overflow Vulnerability
  • From: Luigi Auriemma
• CORE-2008-0425 - NASA BigView Stack Buffer Overflow
  • From: CORE Security Technologies Advisories
• CA Secure Content Manager HTTP Gateway Service FTP Request Vulnerabilities
  • From: Williams, James K
• AST-2008-009: AST-2008-007 Cryptographic keys generated by OpenSSL on Debian-based systems compromised
  • From: Asterisk Security Team
• e107 Plugin echat MENU Blind SQL Injection Vulnerability
  • From: hadihadi_zedehal_2006
• [security bulletin] HPSBST02312 SSRT071428 rev.2 - HP StorageWorks Storage Mirroring Software, Remote Execution of Arbitrary Code
  • From: security-alert
• Remote DoS vulnerability in Linksys WRH54G
  • From: dubingyao
• SMEweb 1.4b (SQL/XSS) Multiple Remote Vulnerabilities
  • From: tan_prathan
• Akamai Download Manager File Downloaded To Arbitrary Location Vulnerability
  • From: cocoruder
• AST-2008-009: (Corrected subject) Remote crash vulnerability in ooh323 channel driver
  • From: Asterisk Security Team
• iDefense Security Advisory 06.04.08: VMware Tools HGFS Local Privilege Escalation Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 06.04.08: VMware Multiple Products vmware-authd Untrusted Library Loading Vulnerability
  • From: iDefense Labs
• Re: iDefense Security Advisory 06.04.08: VMware Tools HGFS Local Privilege Escalation Vulnerability
  • From: iDefense Labs
• F5 FirePass Content Inspection Management XSS
  • From: nnposter
• WEBAlbum <= 2.0 Remote Stored Cross Site Scripting Vulnerability
  • From: tan_prathan
• [ MDVSA-2008:110 ] - Updated Firefox packages fix vulnerabilities
  • From: security
• Secunia Research: Akamai Red Swoosh Cross-Site Request Forgery
  • From: Secunia Research
• Akamai Technologies Security Advisory 2008-0003 (Akamai Client Software)
  • From: Akamai Security Team
• Vulnerability in Network General/Net Scout product
  • From: jgrove_2000
• rPSA-2008-0185-1 vsftpd
  • From: rPath Update Announcements
• SchoolCenter URL Handling Cross Site Scripting Vulnerability
  • From: DoZ
• Re: iDefense Security Advisory 06.04.08: VMware Tools HGFS Local Privilege Escalation Vulnerability
  • From: iDefense Labs
• [USN-615-1] Evolution vulnerabilities
  • From: Jamie Strandboge
• FreeSSHD 1.2.1 (Post Auth) Remote Seh Overflow Exploit
  • From: m . memelli
• [ GLSA 200806-03 ] Imlib 2: User-assisted execution of arbitrary code
  • From: Tobias Heinlein
• [SECURITY] [DSA 1592-1] New Linux 2.6.18 packages fix overflow conditions
  • From: dann frazier
• XSS - NEXTGEN GALLERY 0.96 WORDPRESS PLUGIN
  • From: Eduardo Jorge
• webTA by kronos - XSS
  • From: Alex Eden
• [SECURITY] [DSA 1592-2] New Linux 2.6.18 packages fix overflow conditions
  • From: dann frazier
• [SECURITY] [DSA 1593-1] New tomcat5.5 packages cross-site scripting
  • From: Moritz Muehlenhoff
• Further Correction to BID 29112 "Apache Server HTML Injection and UTF-7 XSS Vulnerability"
  • From: William A. Rowe, Jr.
• [web-app] Tornado Knowledge Retrieval System <= 4.2 Remote XSS Vulnerability
  • From: unohope
• [oCERT-2008-006] multiple SNMP implementations HMAC authentication spoofing
  • From: Andrea Barisani
• [web-app] ErfurtWiki <= R1.02b (css) Local File Inclusion Vulnerability
  • From: unohope
• [web-app] DCFM Blog 0.9.4 (comments) Remote SQL Injection Vulnerability
  • From: unohope
• [web-app] yBlog 0.2.2.2 Multiple Remote Vulnerabilities
  • From: unohope
• [web-app] Insanely Simple Blog 0.5 (index) Remote SQL Injection Vulnerabilities
  • From: unohope
• Secunia Research: Apple QuickTime PICT Image Parsing Buffer Overflow
  • From: Secunia Research
• [security bulletin] HPSBMA02338 SSRT080024, SSRT080041 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code, Denial of Service (DoS)
  • From: security-alert
• iDefense Security Advisory 06.10.08: Multiple Vendor OpenOffice rtl_allocateMemory() Integer Overflow Vulnerability
  • From: iDefense Labs
• Cisco Security Advisory: SNMP Version 3 Authentication Vulnerabilities
  • From: Cisco Systems Product Security Incident Response Team
• iDefense Security Advisory 06.10.08: Multiple Vendor FreeType2 PFB Integer Overflow Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 06.10.08: Multiple Vendor FreeType2 Multiple Heap Overflow Vulnerabilities
  • From: iDefense Labs
• XSS - Glassfish Web Admin Interface (Sun Java System Application Server 9.1_01 (build b09d-fcs) )
  • From: Eduardo Jorge
• ZDI-08-037: Apple QuickTime Indeo Video Buffer Overflow Vulnerability
  • From: zdi-disclosures
• iDefense Security Advisory 06.10.08: Multiple Vendor FreeType2 PFB Memory Corruption Vulnerability
  • From: iDefense Labs
• ZDI-08-038: QuickTime SMIL qtnext Redirect File Execution
  • From: zdi-disclosures
• [ MDVSA-2008:111 ] - Updated Evolution packages fix vulnerabilities
  • From: security
• Many bugs on CMS system Piugame
  • From: Psymera
• ZDI-08-039: Microsoft Internet Explorer DOM Ojbect substringData() Heap Overflow Vulnerability
  • From: zdi-disclosures
• ZDI-08-040: Microsoft DirectX SAMI File Format Name Parsing Stack Overflow Vulnerability
  • From: zdi-disclosures
• [security bulletin] HPSBUX02342 SSRT080063 rev.1 - HP-UX Running Apache or Tomcat with PHP, Remote Execution of Arbitrary Code
  • From: security-alert
• TYPO3 Security Bulletin TYPO3-20080611-1: Multiple vulnerabilities in TYPO3 Core
  • From: lars
• PHPEasyData 1.5.4 Multiple Vulnerabilities
  • From: Sylvain
• Secunia Research: uTorrent / BitTorrent Web UI HTTP "Range" Header DoS
  • From: Secunia Research
• CORE-2008-0125: CitectSCADA ODBC service vulnerability
  • From: CORE Security Technologies Advisories
• Flat Calendar v1.1 Remote Permission Bypass Vulnerability
  • From: none
• phpRaider <= v1.0.6,7 Maybe Other Versions Remote File include Vulnerable
  • From: none
• [security bulletin] HPSBMA02340 SSRT080024, SSRT080041 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code, Denial of Service (DoS)
  • From: security-alert
• [SECURITY] [DSA 1594-1] New imlib2 packages fix arbitrary code execution
  • From: Moritz Muehlenhoff
• iDefense Security Advisory 06.11.08: Multiple Vendor X Server Render Extension AllocateGlyph() Integer Overflow Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 06.11.08: Multiple Vendor X Server Render Extension ProcRenderCreateCursor() Integer Overflow Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 06.11.08: Multiple Vendor X Server Render Extension Gradient Creation Integer Overflow Vulnerability
  • From: iDefense Labs
• Xigla Multiple Products - Multiple Vulnerabilities
  • From: Admin
• iDefense Security Advisory 06.11.08: Multiple Vendor X Server Record and Security Extensions Multiple Memory Corruption Vulnerabilities
  • From: iDefense Labs
• iDefense Security Advisory 06.11.08: Multiple Vendor X Server MIT-SHM Extension Information Disclosure Vulnerability
  • From: iDefense Labs
• rPSA-2008-0189-1 kernel xen
  • From: rPath Update Announcements
• [SECURITY] [DSA 1595-1] New xorg-server packages fix several vulnerabilities
  • From: Thijs Kinkhorst
• ASPPortal Free Version (Topic_Id) Remote SQL Injection Vulnerability
  • From: sys-project
• SNMPv3 Authentication Bypass - CVE-2008-0960
  • From: inode
• DEFCON Switzerland looking for DEFCON visitors
  • From: DEF CON Switzerland
• Pooya Site Builder (PSB) SQL Injection Vulnerabilities
  • From: Admin
• [ MDVSA-2008:112 ] - Updated kernel packages fix security issues
  • From: security
• [SECURITY] [DSA 1596-1] New typo3 packages fix several vulnerabilities
  • From: Thijs Kinkhorst
• [SECURITY] [DSA 1597-1] New mt-daapd packages fix several vulnerabilities
  • From: Devin Carraway
• [USN-616-1] X.org vulnerabilities
  • From: Kees Cook
• AS/400 Vulnerabilities
  • From: Jon Kibler
• Exploit for vBulletin "obscure" XSS (3.7.1 & 3.6.10)
  • From: Jessica Hope
• Securify bulletin: Microsoft Active Directory Denial-of-service
  • From: Securify Bulletins
• [USN-612-9] openssl-blacklist update
  • From: Jamie Strandboge
• [USN-612-10] OpenVPN regression
  • From: Jamie Strandboge
• RE: AS/400 Vulnerabilities
  • From: Michael Wojcik
• RE: Securify bulletin: Microsoft Active Directory Denial-of-service
  • From: Michael Wojcik
• Technical Details of Security Issues Regarding Safari for Windows
  • From: LIUDIEYU dot COM
• [ MDVSA-2008:114 ] - Updated util-linux-ng packages fix log injection issue
  • From: security
• [ MDVSA-2008:113 ] - Updated kernel packages fix security issue
  • From: security
• Re: AS/400 Vulnerabilities
  • From: security curmudgeon
• Collection of Vulnerabilities in Fully Patched Vim 7.1
  • From: Jan Minář
• Re: Collection of Vulnerabilities in Fully Patched Vim 7.1
  • From: Bram Moolenaar
• GSC Privilege Escalation Exploit
  • From: Moose
• [ GLSA 200806-04 ] rdesktop: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• Re: AS/400 Vulnerabilities
  • From: Marco Ivaldi
• Muitiple XSS - Glassfish Web Interface (Sun Java System Application Server 9.1_01 (build b09d-fcs) )
  • From: Eduardo Jorge
• E-SMART CART (productsofcat.asp) Remote SQL Injection Vulnerability
  • From: sys-project
• DUC NO-IP Local Password Information Disclosure Vulnerability
  • From: glafkos
• Denial of Service in S.T.A.L.K.E.R. 1.0006
  • From: Luigi Auriemma
• PHP JOBWEBSITE PRO (JobSearch3.php) SQL Injection Vulnerability
  • From: sys-project
• [ECHO_ADV_97$2008] Pre News Manager <= 1.0 (index.php id) Sql Injection Vulnerability
  • From: erdc
• [ECHO_ADV_98$2008] Pre Ads Portal <= 2.0 Sql Injection Vulnerability
  • From: erdc
• Returnil Virtual System 2008 - Password Disclosure Issue
  • From: mikuvoli
• VistaReseller Panel BETA Xss Vulnerability
  • From: irancrash
• [DSECRG-08-026] LFI in Open Azimyt CMS 0.22
  • From: Digital Security Research Group
• [ MDVSA-2008:115 ] - Updated x11-server packages fix several vulnerabilities
  • From: security
• [ MDVSA-2008:116 ] - Updated x11-server packages fix several vulnerabilities
  • From: security
• NULL pointer in the HTTP/XML-RPC service of Crysis 1.21
  • From: Luigi Auriemma
• Hacking Coffee Makers.
  • From: Craig Wright
• Server freezed in Skulltag 0.97d2-RC2
  • From: Luigi Auriemma
• fetchmail security announcement fetchmail-SA-2007-02 (CVE-2007-4565)
  • From: ma+bt
• fetchmail security announcement fetchmail-SA-2008-01 (CVE-2008-2711)
  • From: ma+bt
• [ GLSA 200806-05 ] cbrPager: User-assisted execution of arbitrary code
  • From: Pierre-Yves Rofes
• iPhoneDbg Toolkit
  • From: Nicolas A. Economou
• [ GLSA 200806-06 ] Evolution: User-assisted execution of arbitrary code
  • From: Pierre-Yves Rofes
• S21SEC-044-en:OpenDocMan Cross Site Scripting (XSS)
  • From: S21sec labs
• [security bulletin] HPSBST02344 SSRT080087 rev.1 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS08-030 to MS08-036
  • From: security-alert
• [USN-617-1] Samba vulnerabilities
  • From: Jamie Strandboge
• Announcement && CFP: ISOI 5, Tallinn Estonia
  • From: Gadi Evron
• Secunia Research: TorrentTrader Multiple SQL Injection Vulnerabilities
  • From: Secunia Research
• CA ARCserve Backup Discovery Service Denial of Service Vulnerability
  • From: Williams, James K
• A more detailed description of the Jura F90 vulnerability.
  • From: Craig Wright
• Cisco Security Advisory: Cisco Intrusion Prevention System Jumbo Frame Denial of Service
  • From: Cisco Systems Product Security Incident Response Team
• RE: A more detailed description of the Jura F90 vulnerability.
  • From: Thor (Hammer of God)
• [USN-612-11] openssl-blacklist update
  • From: Jamie Strandboge
• Academic Web Tools CMS <= 1.4.2.8 Multiple Vulnerabilities
  • From: Admin
• eLineStudio Site Composer (ESC) <=2.6 Multiple Vulnerabilities
  • From: Admin
• vBulletin 3.7.1 PL1 and lower, vBulletin 3.6.10 PL1: XSS in modcp index
  • From: Jessica Hope
• CSW Security Advisory 0002: Oral B SmartMonitor Information Disclosure Vulnerability and DoS
  • From: craigswright
• RE: A more detailed description of the Jura F90 vulnerability.
  • From: Thor (Hammer of God)
• RE: A more detailed description of the Jura F90 vulnerability.
  • From: Craig Wright
• [ GLSA 200806-07 ] X.Org X server: Multiple vulnerabilities
  • From: Matthias Geerdsen
• An Apology.
  • From: cwrigh20
• Re: RFI ====> vBulletin v3.6.5
  • From: hh-ua
• [ MDVSA-2008:117 ] - Updated fetchmail packages fix DoS vulnerability
  • From: security
• Secunia Research: XnView, NConvert, and GFL SDK Sun TAAC Buffer Overflow
  • From: Secunia Research
• [SECURITY] [DSA 1598-1] New libtk-img packages fix arbitrary code execution
  • From: Thijs Kinkhorst
• BackTrack 3 Final has been released
  • From: Max Moser
• Diigo Toolbar - Global XSS and Information Leakage in SSL URLs
  • From: Ferruh Mavituna
• [ MDVSA-2008:118 ] - Updated net-snmp/ucd-snmp packages fix vulnerabilities
  • From: security
• [ MDVSA-2008:119 ] - Updated exiv2 packages fix vulnerability
  • From: security
• rPSA-2008-0200-1 xorg-server
  • From: rPath Update Announcements
• rPSA-2008-0201-1 xorg-x11 xorg-x11-fonts xorg-x11-tools xorg-x11-xfs
  • From: rPath Update Announcements
• [ MDVSA-2008:120 ] - Updated nasm packages fix vulnerability
  • From: security
• Benja CMS 0.1 (Upload/XSS) Multiple Remote Vulnerabilities
  • From: tan_prathan
• n.runs-SA-2008.001 - Jscape Secure FTP Applet
  • From: security
• Trust Testing and Metrics
  • From: Pete Herzog
• Firefox 3.0 security bug: Extensions can STILL hide themselves
  • From: azurIt
• Double Denial of Service in Call of Duty 4 1.6
  • From: Luigi Auriemma
• Re: Summary of AS/400 Vulnerability Information
  • From: Jon Kibler
• [ MDVSA-2008:121 ] - Updated freetype2 packages fix vulnerabilities
  • From: security
• NULL pointer in World in Conflict 1.008
  • From: Luigi Auriemma
• [ GLSA 200806-08 ] OpenSSL: Denial of Service
  • From: Robert Buchholz
• [ GLSA 200806-09 ] libvorbis: Multiple vulnerabilities
  • From: Robert Buchholz
• [ GLSA 200806-10 ] FreeType: User-assisted execution of arbitrary code
  • From: Robert Buchholz
• fetchmail REVISED security announcement fetchmail-SA-2008-01 (CVE-2008-2711)
  • From: ma+bt
• [ MDVSA-2008:122 ] - Updated clamav packages fix vulnerability
  • From: security
• [ GLSA 200806-11 ] IBM JDK/JRE: Multiple vulnerabilities
  • From: Tobias Heinlein
• RSS-aggregator (display) Remote File Inclusion Vulnerability
  • From: Ghost hacker
• [BMSA 2008-07] Format string vulnerability in 5th street
  • From: Nam Nguyen
• IdeBox (include) Remote File Inclusion Vulnerability
  • From: Ghost hacker
• ERRATA - n.runs-SA-2008.001 - Jscape Secure FTP Applet
  • From: security
• mcGuestbook 1.2 (lang) Remote File Inclusion Vulnerability
  • From: Ghost hacker
• Cisco Security Advisory: Cisco Unified Communications Manager Denial of Service and Authentication Bypass Vulnerabilities
  • From: Cisco Systems Product Security Incident Response Team
• [ECHO_ADV_99$2008] Relative Real Estate Systems <= 3.0 (listing_id) Sql Injection Vulnerability
  • From: adv
• [ MDVSA-2008:123 ] - Updated imlib2 packages fix vulnerabilities
  • From: security
• Re: IdeBox (include) Remote File Inclusion Vulnerability
  • From: Vladimir '3APA3A' Dubrovin
• Multiple vulnerabilities in TietoEnator's Procapita school administration system, at least version "842 Procapita 840SP1"
  • From: pelzi
• The Rat CMS (SQL/XSS) Multiple Remote Vulnerabilities
  • From: tan_prathan
• Pidgin 2.4.1 Vulnerability
  • From: jplopezy
• Evolution Vulnerability
  • From: jplopezy
• Rhythmbox Vulnerability
  • From: jplopezy
• [USN-620-1] OpenSSL vulnerabilities
  • From: Jamie Strandboge
• rPSA-2008-0206-1 ruby
  • From: rPath Update Announcements
• [SECURITY] [DSA 1599-1] New dbus packages fix privilege escalation
  • From: Moritz Muehlenhoff
• WellyBlog Open Source Blog Portal Cross Site Scripting Vulnerabilitiy
  • From: the_3dit0r
• [USN-621-1] Ruby vulnerabilities
  • From: Jamie Strandboge
• [ MDVSA-2008:124 ] - Updated xine-lib packages fix vulnerability in Speex decoder
  • From: security
• New Release of 'Unhide' (20080519)
  • From: yago jesus
• rPSA-2008-0207-1 kernel
  • From: rPath Update Announcements
• [security bulletin] HPSBUX02342 SSRT080063 rev.2 - HP-UX Running Apache with PHP, Remote Execution of Arbitrary Code
  • From: security-alert
• BA-Con 2008 CFP - Buenos Aires, Sept. 30 / Oct. 1 (closes July 11 2008)
  • From: Dragos Ruiu
• [security bulletin] HPSBUX02341 SSRT080075 rev.1 - HP-UX running HP CIFS Server (Samba), Remote Execution of Arbitrary Code
  • From: security-alert
• [Tool] PktAnon packet trace anonymization tool released
  • From: Christoph Mayer
• Remote SQL Injection
  • From: saidmoftakhar
• Re: Double Denial of Service in Call of Duty 4 1.6
  • From: Luigi Auriemma
• Multiple vulnerabilities in S.T.A.L.K.E.R. 1.0006
  • From: Luigi Auriemma
• Endless loop in Halo 1.07
  • From: Luigi Auriemma
• Security and Hacking Papers - Updated!
  • From: ork