Mail Index

• Thread Index

• Re: Remote SQL Injection
  • From: packet
• [security bulletin] HPSBMA02338 SSRT080024, SSRT080041 rev.2 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code, Denial of Service (DoS)
  • From: security-alert
• RSS-aggregator Multiple vulnerabilities
  • From: Sylvain
• Re: Rhythmbox Vulnerability
  • From: wargame89
• Endless loop in Soldner 33724
  • From: Luigi Auriemma
• [USN-617-2] Samba regression
  • From: Jamie Strandboge
• [SCANIT-2008-002] Wordtrans-web Remote Command Execution Vulnerability
  • From: Scanit Labs
• [SCANIT-2008-003] Wordtrans-web Remote Command Execution Vulnerability
  • From: Scanit Labs
• CFP 25C3 - The 25th Chaos Communication Congress 2008
  • From: fukami
• [SCANIT-2008-001] QNX phgrafx Privilege Escalation Vulnerability
  • From: Scanit Labs
• [ GLSA 200807-01 ] Python: Multiple integer overflows
  • From: Tobias Heinlein
• [security bulletin] HPSBMA02345 SSRT080039 rev.1 - HP System Management Homepage (SMH) for Linux and Windows, Remote Cross Site Scripting (XSS)
  • From: security-alert
• [ GLSA 200807-02 ] Motion: Execution of arbitrary code
  • From: Tobias Heinlein
• New Paper: More than 600 million users surf at high risk
  • From: Stefan Frei
• Vuln name: Ruby rb_ary_fill() DOS
  • From: snagg
• RE: New Paper: More than 600 million users surf at high risk
  • From: Larry Seltzer
• RE: New Paper: More than 600 million users surf at high risk
  • From: Larry Seltzer
• Deepsec Talks 2007 are online - registration for 2008 is open
  • From: DeepSec 2008
• Re: Collection of Vulnerabilities in Fully Patched Vim 7.1
  • From: Jan Minář
• [SECURITY] [DSA 1560-1] New sympa packages fix denial of service
  • From: Steve Kemp
• RE: New Paper: More than 600 million users surf at high risk
  • From: Paul Schmehl
• [USN-619-1] Firefox vulnerabilities
  • From: Jamie Strandboge
• [tool] ratproxy - passive web application security assessment tool
  • From: Michal Zalewski
• RE: New Paper: More than 600 million users surf at high risk
  • From: Nick FitzGerald
• ISEC 2008(Information Security Conference) Guide
  • From: isec
• Secunia Research: VLC Media Player WAV Processing Integer Overflow
  • From: Secunia Research
• Release of Pass-The-Hash Toolkit v1.4
  • From: Hernan Ochoa
• Re: New Paper: More than 600 million users surf at high risk
  • From: Rainer Duffner
• Re: New Paper: More than 600 million users surf at high risk
  • From: Rob Thompson
• rPSA-2008-0211-1 mercurial mercurial-hgk
  • From: rPath Update Announcements
• rPSA-2008-0212-1 tshark wireshark
  • From: rPath Update Announcements
• [ MDVSA-2008:125 ] - Updated PHP packages fix multiple vulnerabilities
  • From: security
• [ MDVSA-2008:126 ] - Updated PHP packages fix multiple vulnerabilities
  • From: security
• [ MDVSA-2008:127 ] - Updated PHP packages fix multiple vulnerabilities
  • From: security
• [ MDVSA-2008:128 ] - Updated PHP packages fix multiple vulnerabilities
  • From: security
• [SECURITY] [DSA 1601-1] New wordpress packages fix several vulnerabilities
  • From: Thijs Kinkhorst
• Local vulnerability in WeFi Client v3.2.1.4.1(Update)
  • From: XiaShing
• Unauthorized reading confirmation from Outlook
  • From: Augusto Paes de Barros
• [ MDVSA-2008:130 ] - Updated PHP packages fix multiple vulnerabilities
  • From: security
• [ MDVSA-2008:129 ] - Updated PHP packages fix multiple vulnerabilities
  • From: security
• F5 FirePass 1200 SNMP daemon DoS
  • From: nnposter
• Novell GroupWise Messenger Client (GWIM) Remote Stack Overflow
  • From: [ISR] - Infobyte Security Research
• [DSECRG-08-027] Multiple RFI-LFI in 1024 CMS 1.4.3, 1.4.4 RFC
  • From: Digital Security Research Group [DSecRG]
• [ MDVSA-2008:131 ] - Updated phpMyAdmin packages fix multiple vulnerabilities
  • From: security
• [ MDVSA-2008:132 ] - Updated gnome-screensaver packages fix authentication vulnerability
  • From: security
• [ MDVSA-2008:133 ] - Updated sympa packages fix DoS vulnerability
  • From: security
• [ MDVSA-2008:134 ] - Updated squid packages fix DoS vulnerability
  • From: security
• [ MDVSA-2008:135 ] - Updated gnome-screensaver packages fix authentication vulnerability
  • From: security
• [SECURITY] [DSA 1602-1] New pcre3 packages fix arbitrary code execution
  • From: Florian Weimer
• [oCERT-2008-007] libpoppler uninitialized pointer
  • From: Andrea Barisani
• Re: Multiple vulnerabilities in TietoEnator's Procapita school administration system, at least version
  • From: Juha-Matti Laurio
• [ GLSA 200807-03 ] PCRE: Buffer overflow
  • From: Robert Buchholz
• PHP-NUKE SQL Module's Name 4ndvddb
  • From: lovebug
• Pwnie Awards 2008
  • From: Alexander Sotirov
• Call for Papers for the MEITSEC 2008 is now open.
  • From: Meitsec2008 Conference
• Re: Local vulnerability in WeFi Client v3.2.1.4.1(Update)
  • From: galia
• [security bulletin] HPSBMA02348 SSRT080033 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code, Denial of Service (DoS)
  • From: security-alert
• [security bulletin] HPSBMA02349 SSRT080043 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Unauthorized Access to Data
  • From: security-alert
• [SECURITY] [DSA 1603-1] New bind9 packages fix cache poisoning
  • From: Florian Weimer
• [SECURITY] [DSA 1604-1] BIND 8 deprecation notice
  • From: Florian Weimer
• XSS in admin logs - vBulletin 3.7.2 and lower, vBulletin 3.6.10 PL2 and lower
  • From: Jessica Hope
• [SECURITY] [DSA 1605-1] DNS vulnerability impact on the libc stub resolver
  • From: Florian Weimer
• [ GLSA 200807-04 ] Poppler: User-assisted execution of arbitrary code
  • From: Matthias Geerdsen
• Cisco Security Advisory: Multiple Cisco Products Vulnerable to DNS Cache Poisoning Attacks
  • From: Cisco Systems Product Security Incident Response Team
• iDefense Security Advisory 07.08.08: Microsoft SQL Server Restore Integer Underflow Vulnerability
  • From: iDefense Labs
• [USN-622-1] Bind vulnerability
  • From: Kees Cook
• [ MDVSA-2008:136 ] - Updated Firefox packages fix vulnerabilities
  • From: security
• Minneapolis DC612 Meeting July 10th, 2008@6pm
  • From: David Bryan
• rPSA-2008-0216-1 firefox
  • From: rPath Update Announcements
• rPSA-2008-0217-1 vsftpd
  • From: rPath Update Announcements
• Re: [Full-disclosure] iDefense Security Advisory 07.08.08: Microsoft SQL Server Restore Integer Underflow Vulnerability
  • From: Cesar
• [ MDVSA-2008:137 ] - Updated OpenOffice.org fix vulnerability, and a few other bugs
  • From: security
• [ MDVSA-2008:138 ] - Updated OpenOffice.org packages fix vulnerability
  • From: security
• Re: Unauthorized reading confirmation from Outlook
  • From: Alexander Klink
• Local information disclosure in WeFi Client v3.3.3.0
  • From: XiaShing
• Insomnia : ISVA-080709.1 - Microsoft SQL Server - Corrupt Backup File Heap Overflow
  • From: Brett Moore
• [SECURITY] [DSA 1606-1] poppler packages fix execution of arbitrary code
  • From: Steve Kemp
• rPSA-2008-0218-1 ruby
  • From: rPath Update Announcements
• Microsoft DNS patch KB951748 incompatible with Zonealarm
  • From: Pages-Web.com - Services internet
• [ GLSA 200807-05 ] OpenOffice.org: User-assisted execution of arbitrary code
  • From: Pierre-Yves Rofes
• [ MDVSA-2008:139 ] - Updated BIND packages fix critical DNS vulnerability
  • From: security
• Context IS Advisory - MS08-39 OWA XSS
  • From: Context IS - Disclosure
• [ MDVSA-2008:142 ] - Updated ruby packages fix vulnerabilities
  • From: security
• Nessus plugins for recent MS Bulletins
  • From: Chandrashekhar B
• Re: Microsoft DNS patch KB951748 incompatible with Zonealarm FIXED
  • From: davee1
• gapicms v9.0.2 (dirDepth) Remote File Inclusion Vulnerability
  • From: Ghost hacker
• [ GLSA 200807-07 ] NX: User-assisted execution of arbitrary code
  • From: Robert Buchholz
• phpuserbase 1.3 (menu) Remote File Inclusion Vulnerability
  • From: Ghost hacker
• rPSA-2008-0223-1 poppler
  • From: rPath Update Announcements
• London DEFCON July meet - DC4420 - Thursday 10th July (today!)
  • From: alien
• [ GLSA 200807-06 ] Apache: Denial of Service
  • From: Robert Buchholz
• [ MDVSA-2008:141 ] - Updated ruby packages fix vulnerabilities
  • From: security
• [ MDVSA-2008:140 ] - Updated ruby packages fix vulnerabilities
  • From: security
• iDefense Security Advisory 07.09.08: Novell eDirectory LDAP Search Request Heap Corruption Vulnerability
  • From: iDefense Labs
• Re: PR07-37: XSS on Apache HTTP Server 413 error pages via malformed HTTP method
  • From: mcalautt
• [ MDVSA-2008:143 ] - Updated pidgin packages fix MSN protocol handler vulnerability
  • From: security
• ZDI-08-041: Novell eDirectory dhost Integer Overflow Code Execution Vulnerability
  • From: zdi-disclosures
• [SECURITY] [DSA 1607-1] New iceweasel packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• [ GLSA 200807-08 ] BIND: Cache poisoning
  • From: Matthias Geerdsen
• [NETRAGARD SECURITY ADVISORY][Apple Core Image Fun House <= 2.0 OS X -- Arbitrary Code Execution][NETRAGARD-20080711]
  • From: Netragard Security Advisories
• RE: New Paper: More than 600 million users surf at high risk
  • From: Jeff Martin
• [ MDVSA-2008:138-1 ] - Updated OpenOffice.org packages fix vulnerability
  • From: security
• [ MDVSA-2008:144 ] - Updated openldap packages fix slapd DoS vulnerability
  • From: security
• Re: Microsoft DNS patch KB951748 incompatible with Zonealarm
  • From: jgable
• Re: Microsoft DNS patch KB951748 incompatible with Zonealarm
  • From: Steve Shockley
• Re: New Paper: More than 600 million users surf at high risk
  • From: Rob Thompson
• Re: Re: Microsoft DNS patch KB951748 incompatible with Zonealarm
  • From: nelsrob
• [SECURITY] [DSA 1608-1] New mysql-dfsg-5.0 packages fix authorization bypass
  • From: Devin Carraway
• Simple DNS Plus 5.0/4.1 < remote Denial of Service exploit
  • From: Rotem-BugSec
• Pluck Local File inclusion
  • From: admin
• FreeBSD Security Advisory FreeBSD-SA-08:06.bind
  • From: FreeBSD Security Advisories
• DeepSec 2008 - Last call for submissions
  • From: DeepSec Conference Vienna
• Re: PR07-37: XSS on Apache HTTP Server 413 error pages via malformed HTTP method
  • From: ProCheckUp Research
• Yuhhu Pubs Black Cat Remote SQL Injection Exploit
  • From: RM-x
• CFP now open for ClubHack2008 - India
  • From: ClubHack
• [USN-624-1] PCRE vulnerability
  • From: Kees Cook
• HPSBST02350 SSRT080102 rev.1 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS08-037 to MS08-040
  • From: security-alert
• [ MDVSA-2008:145 ] - Updated bluez/bluez-utils packages fix SDP packet parsing vulnerability
  • From: security
• [SECURITY] [DSA 1609-1] New lighttpd packages fix multiple DOS issues
  • From: Steve Kemp
• [SECURITY] [DSA 1610-1] New gaim packages fix execution of arbitrary code
  • From: Steve Kemp
• [SECURITY] [DSA 1569-3] New cacti packages fix regression
  • From: Thijs Kinkhorst
• [ GLSA 200807-09 ] Mercurial: Directory traversal
  • From: Tobias Heinlein
• [ MDVSA-2008:147 ] - Updated pcre packages fix vulnerability
  • From: security
• iDefense Security Advisory 07.15.08: Oracle Internet Directory Pre-Authentication LDAP DoS Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 07.15.08: Oracle Database DBMS_AQELM Package Buffer Overflow Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 07.15.08: Oracle Database Local Untrusted Library Path Vulnerability
  • From: iDefense Labs
• [ MDVSA-2008:146 ] - Updated poppler packages fix arbitrary code execution vulnerability
  • From: security
• [security bulletin] HPSBMA02346 SSRT080097 rev.1 - HP Select Identity Active Directory Bidirectional LDAP Connector, Remote Unauthorized Access
  • From: security-alert
• Oracle Application Server PLSQL injection flaw
  • From: David Litchfield
• Re: Re: Microsoft DNS patch KB951748 incompatible with Zonealarm
  • From: dwg5901
• Arbitrary code execution in Netrw version 127, Vim 7.2b
  • From: Jan Minář
• [security bulletin] HPSBMA02133 SSRT061201 rev.9 - HP Oracle for OpenView (OfO) Critical Patch Update
  • From: security-alert
• [ECHO_ADV_100$2008] Comdev Web Blogger <= 4.1.3 (arcmonth) Sql Injection Vulnerability
  • From: adv
• [DSECRG-08-028] File read in Velocity web-server
  • From: Alexandr Polyakov
• n.runs-SA-2008.002 - F-Prot Out-of-Bound Memory Access DoS (remote)
  • From: security
• [SECURITY] [DSA 1544-2] New pdns-recursor packages fix predictable randomness
  • From: Florian Weimer
• openPro 1.3.1 (LIBPATH) Remote RFI Vulnerability
  • From: Ghost hacker
• rPSA-2008-0035-1 httpd mod_ssl
  • From: rPath Update Announcements
• IETF Internet-Draft on TCP Port randomization
  • From: Fernando Gont
• [SECURITY] [DSA 1611-1] New afuse packages fix privilege escalation
  • From: Thijs Kinkhorst
• [security bulletin] HPSBUX02351 SSRT080058 rev.1 - HP-UX Running BIND, Remote DNS Cache Poisoning
  • From: security-alert
• ekoparty security trainings (2008) announcement
  • From: ekoparty
• [DSECRG-08-029] Local File Include in Dokeos E-Learning System 1.8.5
  • From: Digital Security Research Group
• HPSBMA02346 SSRT080097 rev.2 - HP Select Identity Active Directory Bidirectional LDAP Connector, Remote Unauthorized Access
  • From: security-alert
• Oracle Portal XSS fixed by CPU July 2008
  • From: Andrea Purificato
• [USN-623-1] Firefox vulnerabilities
  • From: Jamie Strandboge
• communitycms-0.1 Remote File Includion
  • From: n3tr00t3r
• ZDI-08-044: Mozilla Firefox CSSValue Array Memory Corruption Vulnerability
  • From: zdi-disclosures
• ZDI-08-043: Sun Java Web Start vm args Stack Buffer Overflow
  • From: zdi-disclosures
• ZDI-08-042: Sun Java Web Start Sandbox Bypass Vulnerability
  • From: zdi-disclosures
• Security Vacation Guide
  • From: Pete Herzog
• Vim: Insecure Temporary File Creation During Build: Arbitrary Code Execution
  • From: Jan Minář
• Def_Blog 1.0.3 Multiple Remote SQL Injection Vulnerabilities
  • From: tan_prathan
• [ MDVSA-2008:148 ] - Updated Firefox packages fix vulnerabilities
  • From: security
• Lateral SQL Injection Revisited - No Special Privs Required
  • From: David Litchfield
• [ISecAuditors Security Advisories] SmbClientParser Perl module allows remote command execution
  • From: ISecAuditors Security Advisories
• Re: Vim: Insecure Temporary File Creation During Build: Arbitrary Code Execution
  • From: Nikolai Weibull
• [DSECRG-08-030] Claroline 1.8.9 Multiple Security Vulnerabilities
  • From: Digital Security Research Group [DSecRG]
• Windows Vista Power Management & Local Security Policy
  • From: Abe Getchell
• Re: Lateral SQL Injection Revisited - No Special Privs Required
  • From: a . polyakov
• [security bulletin] HPSBUX02351 SSRT080058 rev.2 - HP-UX Running BIND, Remote DNS Cache Poisoning
  • From: security-alert
• rPSA-2008-0231-1 bind bind-utils
  • From: rPath Update Announcements
• Oracle Database Local Untrusted Library Path Vulnerability
  • From: Joxean Koret
• RE: Lateral SQL Injection Revisited - No Special Privs Required
  • From: David Litchfield
• RE: Windows Vista Power Management & Local Security Policy
  • From: Jim Harrison
• RE: Windows Vista Power Management & Local Security Policy
  • From: Abe Getchell
• Easybookmarker 40tr Xss Vulnerability By Khashayar Fereidani
  • From: irancrash
• [ MDVSA-2008:149 ] - Updated mysql packages fix vulnerabilities
  • From: security
• Re: Oracle Database Local Untrusted Library Path Vulnerability
  • From: jmpascual
• EasyPublish 3.0tr Multiple Vulnerabilities ( Xss / Sql Injection Exploit / File Disclosure Exploit )
  • From: irancrash
• RE: Windows Vista Power Management & Local Security Policy
  • From: Thor (Hammer of God)
• Easyecards 310a Multipe Vulerabilities ( Xss / Sql Injection Exploit / File Disclosure Exploit ) By Khashayar Fereidani
  • From: irancrash
• [ MDVSA-2008:150 ] - Updated mysql packages fix vulnerabilities
  • From: security
• Maran PHP Blog Xss By Khashayar Fereidani
  • From: irancrash
• EMC Dantz Retrospect 7 backup Client PlainText Password Hash Disclosure Vulnerability
  • From: zhliu
• FGA-2008-16: EMC Dantz Retrospect 7 backup Client 7.5.116 Remote Memory corruption Vulnerability
  • From: zhliu
• Vulnerability CVE-2008-3671 - MyReview's vulnerability in the access control system
  • From: Julien Thomas
• Easydynamicpages 30tr Multipe Vulerabilities ( Xss / Sql Injection Exploit / File Disclosure Exploit )
  • From: irancrash
• EZWebAlbum (dlfilename) Remote File Disclosure Vulnerability
  • From: Ghost hacker
• RE: Windows Vista Power Management & Local Security Policy
  • From: Abe Getchell
• MyBlog <=0.9.8 Multiple Vulnerabilities
  • From: admin
• RE: Windows Vista Power Management & Local Security Policy
  • From: Jim Harrison
• RE: Windows Vista Power Management & Local Security Policy
  • From: Abe Getchell
• Vim: Improper Implementation of shellescape()/Arbitrary Code Execution
  • From: Jan Minář
• FGA-2008-16: EMC Dantz Retrospect 7 backup Client 7.5.116 NULL-Pointer reference Denial of Service Vulnerability
  • From: zhliu
• [DSECRG-08-031] Local File Include Vulnerability in Interact 2.4.1
  • From: Digital Security Research Group [DSecRG]
• Re: Pwnie Awards 2008
  • From: David Litchfield
• Flip V3.0 final
  • From: Cru3l . b0y
• Re: SchoolCenter URL Handling Cross Site Scripting Vulnerability
  • From: Tester
• [White Paper] Abusing HTML 5 Structured Client-side Storage
  • From: Alberto Trivero
• [SECURITY] [DSA 1612-1] New ruby1.8 packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• E-Mail header Injection in HiFriend
  • From: Peter Wiesen
• [ GLSA 200807-10 ] Bacula: Information disclosure
  • From: Pierre-Yves Rofes
• [ GLSA 200807-11 ] PeerCast: Buffer overflow
  • From: Pierre-Yves Rofes
• Re: [ GLSA 200807-10 ] Bacula: Information disclosure
  • From: dan
• NULL pointer in ZDaemon 1.08.07
  • From: Luigi Auriemma
• [ MDVSA-2008:151 ] - Updated libxslt packages fix buffer overflow vulnerability
  • From: security
• [ GLSA 200807-12 ] BitchX: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• [security bulletin] HPSBMA02346 SSRT080097 rev.3 - HP OpenView Select Identity Active Directory Bidirectional LDAP Connector, Remote Unauthorized Access
  • From: security-alert
• FGA-2008-16: EMC Dantz Retrospect 7 backup Server Authentication Module Weak Password Hash Arithmetic Vulnerability
  • From: zhliu
• Vulnerability: SocialEngine (SocialEngine.net) high risk security flaw
  • From: Tim Loshak
• [SECURITY] [DSA 1613-1] new libgd2 packages fix multiple vulnerabilities
  • From: Devin Carraway
• [DSECRG-08-032] Claroline 1.8.10 Multiple XSS Vulnerabilities
  • From: Digital Security Research Group [DSecRG]
• PR08-13: Persistent Cross-site Scripting (XSS) on Moodle via blog entry title
  • From: ProCheckUp Research
• PR08-15: Several Webroot Disclosures on Moodle
  • From: ProCheckUp Research
• PR08-16: CSRF (Cross-site Request Forgery) on Moodle edit profile page
  • From: ProCheckUp Research
• [USN-627-1] Dnsmasq vulnerability
  • From: Jamie Strandboge
• Outpost Security Suite Pro ver. 2009 Multiple vulnerabilities
  • From: jplopezy
• RE: Windows Vista Power Management & Local Security Policy
  • From: James C. Slora Jr.
• RE: Windows Vista Power Management & Local Security Policy
  • From: Jim Harrison
• [ MDVSA-2008:152 ] - Updated wireshark packages fix denial of service vulnerability
  • From: security
• AST-2008-011: Traffic amplification in IAX2 firmware provisioning system
  • From: Asterisk Security Team
• RE: Windows Vista Power Management & Local Security Policy
  • From: Abe Getchell
• AST-2008-010: Asterisk IAX 'POKE' resource exhaustion
  • From: Asterisk Security Team
• RE: Windows Vista Power Management & Local Security Policy
  • From: Good Securitypractice
• [SECURITY] [DSA 1540-3] New lighttpd packages fix regression
  • From: Thijs Kinkhorst
• Vim: Flawed Fix of Arbitrary Code Execution Vulnerability in filetype.vim
  • From: Jan Minář
• [USN-628-1] PHP vulnerabilities
  • From: Jamie Strandboge
• [SECURITY] [DSA 1614-1] New iceweasel packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 1615-1] New xulrunner packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• Re: Wordpress Malicious File Execution Vulnerability
  • From: otto
• [ MDVSA-2008:153 ] - Updated emacs packages fix vulnerability
  • From: security
• [SECURITY] [DSA 1616-1] new clamav packages fix denial of service
  • From: Devin Carraway
• [ MDVSA-2008:154 ] - Updated xemacs packages fix vulnerability
  • From: security
• [Full-disclosure] [tool] SDT Cleaner 1.0
  • From: Nahuel C. Riva
• CAU-EX-2008-0002: Kaminsky DNS Cache Poisoning Flaw Exploit
  • From: I)ruid
• Re: [Full-disclosure] Vim: Insecure Temporary File Creation During Build: Arbitrary Code Execution
  • From: Jan Minář
• [USN-629-1] Thunderbird vulnerabilities
  • From: Jamie Strandboge
• Re: [Full-disclosure] Vim: Insecure Temporary File Creation During Build: Arbitrary Code Execution
  • From: Robert Buchholz
• [SECURITY] [DSA 1617-1] New refpolicy packages fix incompatible policy
  • From: Devin Carraway
• Secunia Research: RealPlayer SWF Frame Handling Buffer Overflow
  • From: Secunia Research
• XRMS 1.99.2 (RFI/XSS/IG) Multiple Remote Vulnerabilities
  • From: azzcoder
• ezContents CMS Renote File inclusion
  • From: security
• Re: [Full-disclosure] Vim: Insecure Temporary File Creation During Build: Arbitrary Code Execution
  • From: Steven M. Christey
• SECOBJADV-2008-02: Cygwin Installation and Update Process can be Subverted Vulnerability
  • From: advisories
• Re: [Full-disclosure] CAU-EX-2008-0002: Kaminsky DNS Cache Poisoning Flaw Exploit
  • From: Ganbold
• Re: [Full-disclosure] Vim: Insecure Temporary File Creation During Build: Arbitrary Code Execution
  • From: Robert Buchholz
• Re: [bugtraq] Re: [Full-disclosure] CAU-EX-2008-0002: Kaminsky DNS Cache Poisoning
  • From: Tuc at T-B-O-H.NET
• ZDI-08-045: Apple Safari StyleSheet ownerNode Heap Corruption Vulnerability
  • From: zdi-disclosures
• http://www.zerodayinitiative.com/advisories/ZDI-08-046
  • From: zdi-disclosures
• ZDI-08-047: RealNetworks RealPlayer rmoc3260 ActiveX Control Memory Corruption Vulnerability
  • From: zdi-disclosures
• [SECURITY] [DSA 1616-2] New clamav packages fix denial of service
  • From: Devin Carraway
• [ MDVSA-2008:155 ] - Updated Thunderbird packages fix multiple vulnerabilities
  • From: security
• [SECURITY] [DSA 1618-1] New ruby1.9 packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• Re: [Full-disclosure] Vim: Insecure Temporary File Creation During Build: Arbitrary Code Execution
  • From: Jan Minář
• [SECURITY] [DSA 1619-1] New python-dns packages fix DNS response spoofing
  • From: Devin Carraway
• [SECURITY] [DSA 1620-1] New python2.5 packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• how to request a cve id?
  • From: xpzhang
• [ MDVSA-2008:155-1 ] - Updated Thunderbird packages fix multiple vulnerabilities
  • From: security
• [SECURITY] [DSA 1621-1] New icedove packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• Security Bypass Vulnerabilities AXESSTEL
  • From: Bboyhacks
• [DSECRG-08-033] Local File Include Vulnerability in Pixelpost 1.7.1
  • From: Digital Security Research Group [DSecRG]
• Tool release: [evilgrade] - Using DNS cache poisoning to exploit poor update implementations
  • From: [ISR] - Infobyte Security Research
• [security bulletin] HPSBMA02353 SSRT080066 rev.1 - HP OpenView Internet Services Running Probe Builder, Remote Denial of Service (DoS)
  • From: security-alert
• JamRoom <= 3.3.8 Authentication Bypass
  • From: GulfTech Security Research
• RE: Windows Vista Power Management & Local Security Policy
  • From: Greg
• Re: how to request a cve id?
  • From: Steven M. Christey
• Multiple Cross-Site Scripting Vulnerabilities in Web Wiz Rich Text Editor version 4.02
  • From: supportrup
• ViArt <= 3.5 SQL Injection
  • From: GulfTech Security Research
• Cross Site Scripting (XSS) in Owl <=0.95, CVE-2008-3100
  • From: Fabian Fingerle
• iDefense Security Advisory 07.28.08: Hewlett-Packard OVIS Probe Builder Arbitrary Process Termination Vulnerability
  • From: iDefense Labs
• [ MDVSA-2008:156 ] - Updated libpng packages fix vulnerability
  • From: security
• [USN-626-1] Firefox and xulrunner vulnerabilities
  • From: Jamie Strandboge
• rPSA-2008-0236-1 httpd mod_ssl
  • From: rPath Update Announcements
• PhpJobScheduler 3.1 Remote File Inclusion Vulnerability
  • From: Ghost hacker
• rPSA-2008-0237-1 tshark wireshark
  • From: rPath Update Announcements
• rPSA-2008-0238-1 firefox
  • From: rPath Update Announcements
• [USN-631-1] poppler vulnerability
  • From: Kees Cook
• plugin Rss Remote File Inclusion Vulnerability
  • From: Ghost hacker
• [DSECRG-08-034] Local File Include Vulnerability in Minishowcase v09b136
  • From: Digital Security Research Group [DSecRG]
• Gregarius <= 0.5.4 SQL Injection
  • From: GulfTech Security Research
• n.runs-SA-2008.004 - AVG Anti-Virus Divide by Zero - DoS (remote)
  • From: security
• VMSA-2008-00011 Updated ESX service console packages for Samba and vmnix
  • From: VMware Security team
• rPSA-2008-0235-1 fetchmail fetchmailconf
  • From: rPath Update Announcements
• [USN-630-1] ffmpeg vulnerability
  • From: Kees Cook
• Remote Cisco IOS FTP exploit
  • From: Andy Davis
• Re: E-Mail header Injection in HiFriend
  • From: Adrian Pastor
• [ MDVSA-2008:157 ] - ffmpeg
  • From: security
• shoutbox Remote Database Dawnload Exploit
  • From: Ghost hacker
• Cisco IOS shellcode explanation
  • From: Andy Davis
• HIOX Star Rating System 1.0 Remote File Inclusion Vulnerability
  • From: Ghost hacker
• Memory corruption and NULL pointer in Unreal Tournament III 1.2
  • From: Luigi Auriemma
• RE: Remote Cisco IOS FTP exploit
  • From: Paul Oxman (poxman)
• HIOX Random Ad 1.3 (hioxRandomAd.php hm) RFI Vulnerability
  • From: Ghost hacker
• HIOX Browser Statistics 2.0 Remote File Inclusion Vulnerability
  • From: Ghost hacker
• NULL pointer in Unreal Tournament 2004 v3369
  • From: Luigi Auriemma
• MJGuest 6.8 GT Cross Site Scripting Vulnerability
  • From: irancrash
• RealNetworks RealPlayer ActiveX Illegal Resource Reference Vulnerability
  • From: cocoruder
• Tool: PorkBind Nameserver Security Scanner
  • From: super
• Cisco IOS shellcode explanation - additional
  • From: Andy Davis
• [ MDVSA-2008:158 ] silc-toolkit
  • From: security
• DEV WMS Multiple Vulnerabilities
  • From: irancrash
• Citrix MetaFrame Privilege Escalation
  • From: Wendel Guglielmetti Henrique