Mail Index

• Thread Index

• [SECURITY] [DSA 1673-1] New wireshark packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 1674-1] New jailer packages fix denial of service
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 1675-1] New phpmyadmin packages fix cross site scripting
  • From: Thijs Kinkhorst
• [TKADV2008-013] VLC media player RealMedia Processing Integer Overflow Vulnerability
  • From: Tobias Klein
• /bin/login gives root to group utmp
  • From: Paul Szabo
• Re: Re: Wrong report: BID 32287, Pi3Web ISAPI DoS vulnerability
  • From: het_ebadi
• Re: Re: Wrong report: BID 32287, Pi3Web ISAPI DoS vulnerability
  • From: zimpel
• [BMSA 2008-09] Two buffer overflow vulnerabilities in Rumpus v6.0
  • From: Nam Nguyen
• [USN-681-1] ImageMagick vulnerability
  • From: Marc Deslauriers
• [USN-682-1] libvorbis vulnerabilities
  • From: Marc Deslauriers
• [SECURITY] [DSA 1676-1] New flamethrower packages fix denial of service
  • From: dann frazier
• Dates for SyScan'09
  • From: organiser@xxxxxxxxxx
• Cpanel fantastico Privilege Escalation "ModSec and PHP restriction Bypass"
  • From: l1un
• Re: /bin/login gives root to group utmp
  • From: 0xjbrown41
• [USN-683-1] Imlib2 vulnerability
  • From: Marc Deslauriers
• [ GLSA 200812-01 ] OptiPNG: User-assisted execution of arbitrary code
  • From: Robert Buchholz
• [ GLSA 200812-06 ] libxml2: Multiple vulnerabilities
  • From: Robert Buchholz
• [ GLSA 200812-05 ] libsamplerate: User-assisted execution of arbitrary code
  • From: Robert Buchholz
• [ GLSA 200812-03 ] IPsec-Tools: racoon Denial of Service
  • From: Robert Buchholz
• [ GLSA 200812-04 ] lighttpd: Multiple vulnerabilities
  • From: Robert Buchholz
• [ GLSA 200812-02 ] enscript: User-assisted execution of arbitrary code
  • From: Robert Buchholz
• [ GLSA 200812-07 ] Mantis: Multiple vulnerabilities
  • From: Robert Buchholz
• [SECURITY] [DSA 1677-1] New CUPS packages fix arbitrary code execution
  • From: Martin Schulze
• [HACKATTACK Advisory 20081203]Pro Clan Manager 0.4.2 - Session Fixation
  • From: office
• Re: Re: Re: Wrong report: BID 32287, Pi3Web ISAPI DoS vulnerability
  • From: zimpel
• VMSA-2008-0019 VMware Hosted products and patches for ESX and ESXi resolve a critical security issue and update bzip2
  • From: VMware Security team
• [USN-684-1] ClamAV vulnerability
  • From: Kees Cook
• [SECURITY] [DSA 1678-1] New perl packages fix privilege escalation
  • From: Steffen Joeris
• [SECURITY] [DSA 1679-1] New awstats packages fix cross-site scripting
  • From: Florian Weimer
• [SVRT-06-08] MULTI SECURITY VULNERABILITIES IN MVNFORUM
  • From: SVRT-Bkis
• [security bulletin] HPSBUX02389 SSRT080141 rev.1 - HP-UX, Local Denial of Service (DoS)
  • From: security-alert
• Re: [HACKATTACK Advisory 20081127]Social Impress CMS 1.1 - Session Fixation
  • From: rene . sato
• Re: VMSA-2008-0019 VMware Hosted products and patches for ESX and ESXi resolve a critical security issue and update bzip2
  • From: Steve Shockley
• [USN-685-1] Net-SNMP vulnerabilities
  • From: Kees Cook
• [USN-686-1] AWStats vulnerability
  • From: Kees Cook
• Re: [USN-684-1] ClamAV vulnerability
  • From: 0xjbrown41
• [ MDVSA-2008:236 ] vim
  • From: security
• Joomla Component GameQ
  • From: r3d . w0rm
• Advisory 06/2008: PHP ZipArchive::extractTo() Directory Traversal Vulnerability
  • From: Stefan Esser
• DDIVRT-2008-18 Orb Denial of Service
  • From: DDI . VulnerabilityAlert
• [SECURITY] [DSA 1680-1] New clamav packages fix potential code execution
  • From: Florian Weimer
• CVE-2008-2086: Java Web Start File Inclusion via System Properties Override
  • From: VSR Advisories
• [UPRSN] Ubuntu Privacy Remix 8.04r1 fixes security issues
  • From: Ubuntu Privacy Remix Team
• Re: XSS in Internet Explorer 6 and 7
  • From: MustLive
• [SECURITY] [DSA 1681-1] New Linux 2.6.24 packages fix several vulnerabilities
  • From: dann frazier
• iDefense Security Advisory 12.04.08: Sun Java JRE TrueType Font Parsing Heap Overflow Vulnerability
  • From: iDefense Labs
• Joomla Component mydyngallery
  • From: r3d . w0rm
• iDefense Security Advisory 12.04.08: Sun Java Web Start GIF Decoding Memory Corruption Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 12.04.08: Sun Java JRE Pack200 Decompression Integer Overflow Vulnerability
  • From: iDefense Labs
• Re: Joomla Component GameQ
  • From: packet
• [ MDVSA-2008:237 ] apache2
  • From: security
• [USN-687-1] nfs-utils vulnerability
  • From: Marc Deslauriers
• iDefense Security Advisory 12.04.08: Sun Java JRE TrueType Font Parsing Integer Overflow Vulnerability
  • From: iDefense Labs
• ZDI-08-077: Trillian AIM IMG Tag Parsing Stack Overflow Vulnerability
  • From: zdi-disclosures
• ZDI-08-078: Trillian IMG SRC ID Memory Corruption Vulnerability
  • From: zdi-disclosures
• ZDI-08-079: Trillian AIM Plugin Malformed XML Tag Heap Overflow Vulnerability
  • From: zdi-disclosures
• ZDI-08-080: Sun Java AWT Library Sandbox Violation Vulnerability
  • From: zdi-disclosures
• ZDI-08-081: Sun Java Web Start and Applet Multiple Sandbox Bypass Vulnerabilities
  • From: zdi-disclosures
• [ MDVSA-2008:238 ] libsamplerate
  • From: security
• CVE-2008-5079: multiple listen()s on same socket corrupts the vcc table
  • From: Hugo Dias
• RE: DDIVRT-DDIVRT-2008-15 iPhone Configuration Web Utility 1.0 for Windows Directory Traversal
  • From: VulnerabilityAlert
• Re: SecurityReason : PHP 5.2.6 dba_replace() destroying file
  • From: Eygene Ryabinkin
• Re: SecurityReason : PHP 5.2.6 dba_replace() destroying file
  • From: Ilia Alshanetsky
• [ MDVSA-2008:239 ] clamav
  • From: security
• Re: SecurityReason : PHP 5.2.6 dba_replace() destroying file
  • From: Eygene Ryabinkin
• [ GLSA 200812-08 ] Mgetty: Insecure temporary file usage
  • From: Pierre-Yves Rofes
• SecurityReason: PHP 5.2.6 SAPI php_getuid() overload
  • From: cxib
• [SECURITY] [DSA 1682-1] New squirrelmail packages fix cross site scripting
  • From: Thijs Kinkhorst
• Two XSS Flaws in PrestaShop 1.1.0.3
  • From: th3 . r00k . ieatpork
• XSS in PHPepperShop v 1.4
  • From: th3 . r00k . ieatpork
• RadAsm <=2.2.1.5 Local Command Execution
  • From: xhakerman2006
• Re: SecurityReason: PHP 5.2.6 SAPI php_getuid() overload
  • From: Eygene Ryabinkin
• Multiple Vendor Anti-Virus Software Malicious WebPage Detection Bypass
  • From: xhakerman2006
• [DSECRG-08-040] Multiple Local File Include Vulnerabilities in Xoops 2.3.x
  • From: Digital Security Research Group [DSecRG]
• [DSECRG-08-041] Stored XSS Vulnerability in Xoops 2.3.x
  • From: Digital Security Research Group [DSecRG]
• Re: SecurityReason: PHP 5.2.6 SAPI php_getuid() overload
  • From: Maksymilian Arciemowicz
• Re: SecurityReason: PHP 5.2.6 SAPI php_getuid() overload
  • From: Eygene Ryabinkin
• [SVRT-07-08] Vulnerability in Face Recognition Authentication Mechanism of Lenovo-Asus-Toshiba Laptops
  • From: SVRT-Bkis
• Re: RadAsm <=2.2.1.5 Local Command Execution
  • From: Li Gen
• [security bulletin] HPSBMA02391 SSRT071481 rev.1 - HP OpenView Reporter and HP Reporter Running on Windows, Remote Denial of Service (DoS)
  • From: security-alert
• Neostrada Livebox Remote Network Down PoC Exploit
  • From: 0in . email
• [SECURITY] [DSA 1683-1] New streamripper packages fix potential code execution
  • From: Florian Weimer
• [security bulletin] HPSBMA02390 SSRT071481 rev.1 - HP OpenView Performance Agent, HP Performance Agent, Remote Denial of Service (DoS)
  • From: security-alert
• DoS Vulnerability in Aruba Mobility Controller Caused by Malformed EAP Frame (Aruba Advisory ID: AID-12808)
  • From: Robbie (Rupinder) Gill
• ZDI-08-082: BMC PatrolAgent Version Logging Format String Vulnerability
  • From: zdi-disclosures
• Multiple XSRF in DD-WRT (Remote Root Command Execution)
  • From: th3 . r00k . ieatpork
• Re: [Full-disclosure] MS OWA 2003 Redirection Vulnerability - [MSRC 7368br]
  • From: Peter Watkins
• DoS attacks on MIME-capable software via complex MIME emails
  • From: bruhns
• [ MDVSA-2008:236-1 ] vim
  • From: security
• PHP safe_mode can be bypassed via proc_open() and custom environment.
  • From: gat3way
• SEC Consult SA-20081109-0 :: Microsoft SQL Server 2000 sp_replwritetovarbin limited memory overwrite vulnerability
  • From: Bernhard Mueller
• rPSA-2008-0332-1 kernel
  • From: rPath Update Announcements
• Re: DoS attacks on MIME-capable software via complex MIME emails
  • From: Vladimir '3APA3A' Dubrovin
• Multiple Vendor Anti-Virus Software Malicious WebPage Detection Bypass -Update-
  • From: xhakerman2006
• Secunia Research: Microsoft Word RTF Polyline/Polygon Integer Overflow
  • From: Secunia Research
• Secunia Research: Microsoft Excel NAME Record Array Indexing Vulnerability
  • From: Secunia Research
• CORE-2008-1127 - Vinagre show_error() format string vulnerability
  • From: CORE Security Technologies Advisories
• Secunia Research: Microsoft Hierarchical FlexGrid Control Integer Overflows
  • From: Secunia Research
• iDefense Security Advisory 12.09.08: Microsoft Internet Explorer 5.01 EMBED tag Long File Name Extension Stack Buffer Overflow Vulnerability (iDefense Exclusive)
  • From: iDefense Labs
• iDefense Security Advisory 12.09.08: Microsoft Windows Graphics Device Interface Integer Overflow Vulnerability
  • From: iDefense Labs
• ZDI-08-083: Microsoft Animation ActiveX Control Malformed AVI Parsing Code Execution Vulnerability
  • From: zdi-disclosures
• ZDI-08-084: Microsoft Office RTF Consecutive Drawing Object Parsing Heap Corruption Vulnerability
  • From: zdi-disclosures
• ZDI-08-085: Microsoft Office RTF Drawing Object Heap Overflow Vulnerability
  • From: zdi-disclosures
• ZDI-08-086: Microsoft Office Word Document Table Property Stack Overflow Vulnerability
  • From: zdi-disclosures
• ZDI-08-087: Microsoft Internet Explorer Webdav Request Parsing Heap Corruption Vulnerability
  • From: zdi-disclosures
• Insomnia : ISVA-081209.1 - IE Webdav Request Parsing Heap Corruption Vulnerability
  • From: Brett Moore
• ISOI 6, Dallas, TX - January 29, 30
  • From: Gadi Evron
• [USN-689-1] Vinagre vulnerability
  • From: Kees Cook
• [USN-678-2] GnuTLS regression
  • From: Jamie Strandboge
• [SECURITY] [DSA 1684-1] New lcms packages fix multiple vulnerabilities
  • From: Devin Carraway
• [IVIZ-08-011] ClamAV lzh unpacking segmentation fault
  • From: iViZ Security Advisories
• [IVIZ-08-012] Bitdefender antivirus for Linux multiple vulnerabilities
  • From: iViZ Security Advisories
• [IVIZ-08-013] Avast antivirus for Linux multiple vulnerabilities
  • From: iViZ Security Advisories
• [IVIZ-08-014] AVG antivirus for Linux vulnerability
  • From: iViZ Security Advisories
• [IVIZ-08-015] Sophos Antivirus for Linux vulnerability
  • From: iViZ Security Advisories
• [IVIZ-08-016] F-Secure f-prot Antivirus for Linux corrupted ELF header Security Bypass
  • From: iViZ Security Advisories
• Re: Multiple XSRF in DD-WRT (Remote Root Command Execution)
  • From: s . gottschall
• Microsoft SQL Server 2005 sp_replwritetovarbin memory overwrite (update to SEC Consult SA-20081209)
  • From: Bernhard Mueller
• CORE-2008-0228: Microsoft Word Malformed FIB Arbitrary Free Vulnerability
  • From: CORE Security Technologies Advisories
• [security bulletin] HPSBUX02393 SSRT080057 rev.1 - HP-UX Running DCE, Remote Denial of Service (DoS)
  • From: security-alert
• [ GLSA 200812-09 ] OpenSC: Insufficient protection of smart card PIN
  • From: Robert Buchholz
• [ GLSA 200812-10 ] Archive::Tar: Directory traversal vulnerability
  • From: Robert Buchholz
• Max's Guestbook (XSS) Remote Vulnerability
  • From: 08253
• iDefense Security Advisory 12.10.08: Microsoft Excel Malformed Object Memoy Corruption Vulnerability
  • From: iDefense Labs
• [ MDVSA-2008:240 ] vinagre
  • From: security
• CA ARCserve Backup LDBserver Vulnerability
  • From: Williams, James K
• [ GLSA 200812-11 ] CUPS: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• Browser Security Handbook
  • From: Michal Zalewski
• AST-2008-012: Remote crash vulnerability in IAX2
  • From: Asterisk Security Team
• Re: Multiple XSRF in DD-WRT (Remote Root Command Execution)
  • From: Hanno Böck
• Re: Multiple XSRF in DD-WRT (Remote Root Command Execution)
  • From: David E. Thiel
• Black Hat: New Webinar, Japan audio now on-line.
  • From: jmoss
• aspProductCatalog Sql Injection
  • From: r3d . w0rm
• Meta Cart Free Database Disclosure
  • From: r3d . w0rm
• facto Database Disclosure
  • From: r3d . w0rm
• Re: Multiple XSRF in DD-WRT (Remote Root Command Execution)
  • From: pUm
• Re[2]: Multiple XSRF in DD-WRT (Remote Root Command Execution)
  • From: Vladimir '3APA3A' Dubrovin
• Secunia Research: CA ARCserve Backup RPC "handle_t" Argument Vulnerability
  • From: Secunia Research
• Re: Multiple XSRF in DD-WRT (Remote Root Command Execution)
  • From: Sebastian Gottschall (DD-WRT)
• Re: Multiple XSRF in DD-WRT (Remote Root Command Execution)
  • From: Sebastian Gottschall (DD-WRT)
• Re: Multiple XSRF in DD-WRT (Remote Root Command Execution)
  • From: dan . crowley
• Aspect9: Internet Explorer 8.0 Beta 2 Anti-XSS Filter Vulnerabilities
  • From: Rafel Ivgi
• Re: Multiple XSRF in DD-WRT (Remote Root Command Execution)
  • From: David E. Thiel
• Re: Re: Multiple XSRF in DD-WRT (Remote Root Command Execution)
  • From: dan . crowley
• ASP-CMS v.1.0 Sql Injection/Database Disclosure
  • From: r3d . w0rm
• rPSA-2008-0336-1 tshark wireshark
  • From: rPath Update Announcements
• Nokia N70/N73 Bluetooth Stack OBEX Implementation Denial of Service
  • From: yangdn
• [SECURITY] [DSA 1685-1] New uw-imap packages fix multiple vulnerabilities
  • From: Steffen Joeris
• Moodle 1.9.3 Remote Code Execution
  • From: ascii
• [ GLSA 200812-12 ] Honeyd: Insecure temporary file creation
  • From: Tobias Heinlein
• [ GLSA 200812-13 ] OpenOffice.org: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• [ GLSA 200812-14 ] aview: Insecure temporary file usage
  • From: Tobias Heinlein
• [SECURITY] [DSA 1686-1] New no-ip packages fix arbitrary code execution
  • From: Moritz Muehlenhoff
• [ GLSA 200812-15 ] POV-Ray: User-assisted execution of arbitrary code
  • From: Pierre-Yves Rofes
• [ GLSA 200812-16 ] Dovecot: Multiple vulnerabilities
  • From: Tobias Heinlein
• CFAGCMS Remote File Inclusion
  • From: admin
• [TKADV2008-014] MPlayer TwinVQ Processing Stack Buffer Overflow Vulnerability
  • From: Tobias Klein
• Re: Moodle 1.9.3 Remote Code Execution
  • From: lent
• Multiple XSS Vulnerabilities in World Recipe 2.11
  • From: security
• phpList vulnerability
  • From: phplist
• Re: Moodle 1.9.3 Remote Code Execution
  • From: Jamie Riden
• TmaxSoft JEUS Alternate Data Streams Vulnerability
  • From: Simon Ryeo
• Re: Re: Multiple XSRF in DD-WRT (Remote Root Command Execution)
  • From: 0xjbrown41
• Fwd: TmaxSoft JEUS Alternate Data Streams Vulnerability
  • From: Simon Ryeo
• [ MDVSA-2008:242 ] wireshark
  • From: security
• [SECURITY] [DSA 1687-1] New Linux 2.6.18 packages fix several vulnerabilities
  • From: dann frazier
• [ MDVSA-2008:243 ] enscript
  • From: security
• Re: Re: Moodle 1.9.3 Remote Code Execution
  • From: martin
• Re: Moodle 1.9.3 Remote Code Execution
  • From: hackeriri
• [USN-691-1] Ruby vulnerability
  • From: Marc Deslauriers
• Re: ooVoo 1.7.1.35 (URL Protocol) remote unicode buffer overflow poc
  • From: philip . robertson
• [ GLSA 200812-17 ] Ruby: Multiple vulnerabilities
  • From: Tobias Heinlein
• ZDI-08-088: Oracle E-Business Suite Business Intelligence SQL Injection Vulnerability
  • From: zdi-disclosures
• CVE-2008-1094 - Barracuda Span Firewall SQL Injection Vulnerability
  • From: marian . ventuneac
• CVE-2008-0971 - Barracuda Networks products Multiple Cross-Site Scripting Vulnerabilities
  • From: marian . ventuneac
• [ GLSA 200812-18 ] JasPer: User-assisted execution of arbitrary code
  • From: Robert Buchholz
• Joomla: Session hijacking vulnerability, CVE-2008-4122
  • From: Hanno Böck
• Re: [IVIZ-08-016] F-Secure f-prot Antivirus for Linux corrupted ELF header Security Bypass
  • From: frisk
• RE: [Full-disclosure] ZDI-08-088: Oracle E-Business Suite Self-Service Web Applications SQL Injection Vulnerability
  • From: Integrigy Security
• n.runs-SA-2008.010 - Opera HTML parsing Code Execution
  • From: security
• Network Security Scanner OpenVAS 2.0.0 Released
  • From: Michael Wiegand
• [ MDVSA-2008:244 ] mozilla-firefox
  • From: security
• [USN-690-1] Firefox and xulrunner vulnerabilities
  • From: Jamie Strandboge
• [TKADV2008-015] Sun Solaris SIOCGTUNPARAM IOCTL Kernel NULL pointer dereference
  • From: Tobias Klein
• Firefox cross-domain text theft (CESA-2008-011)
  • From: Chris Evans
• Re: Joomla: Session hijacking vulnerability, CVE-2008-4122
  • From: darkz . gsa
• [USN-692-1] Gadu vulnerability
  • From: Kees Cook
• [USN-693-1] LittleCMS vulnerability
  • From: Kees Cook
• [USN-690-2] Firefox vulnerabilities
  • From: Jamie Strandboge
• [SECURITY] CVE-2008-2938 - Apache Tomcat information disclosure vulnerability - Update 2
  • From: Mark Thomas
• [USN-690-3] Firefox vulnerabilities
  • From: Jamie Strandboge
• [USN-694-1] libvirt vulnerability
  • From: Jamie Strandboge
• [USN-695-1] shadow vulnerability
  • From: Kees Cook
• EasySiteNetwork (joke.php?id) Remote SQL injection Vulnerability
  • From: Ehsan_Hp200
• php python extension safe_mode bypass
  • From: amir
• [ MDVSA-2008:245 ] firefox
  • From: security
• CONFidence 2009, CFP
  • From: Andrzej Targosz
• [USN-696-1] Avahi vulnerabilities
  • From: Jamie Strandboge
• Re: CONFidence 2009, CFP
  • From: Dominik 'Rathann' Mierzejewski
• SEC Consult SA-20081219-0 :: Fujitsu-Siemens WebTransactions remote command injection vulnerability
  • From: Bernhard Mueller
• [security bulletin] HPSBST02394 SSRT080183 rev.1 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS08-070 to MS08-077
  • From: security-alert
• HTC Touch vCard over IP Denial of Service
  • From: Mobile Security Lab
• PHP APC vulnerable to local attacks
  • From: Moritz Naumann
• rPSA-2008-0338-1 cups
  • From: rPath Update Announcements
• [ GLSA 200812-19 ] PowerDNS: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• [SECURITY] [DSA 1688-1] New courier-authlib packages fix SQL injection
  • From: Steffen Joeris
• chicomas <=2.0.4 Multiple Vulnerabilities
  • From: admin
• Re: chicomas <=2.0.4 Multiple Vulnerabilities
  • From: security curmudgeon
• [SECURITY] [DSA 1678-2] New perl packages fix regression
  • From: Florian Weimer
• [USN-699-1] Blender vulnerabilities
  • From: Marc Deslauriers
• [USN-698-1] Nagios vulnerability
  • From: Marc Deslauriers
• Secunia Research: Trend Micro HouseCall "notifyOnLoadNative()" Vulnerability
  • From: Secunia Research
• [USN-698-2] Nagios3 vulnerabilities
  • From: Marc Deslauriers
• POC for CVE-2008-5619 (roundcubemail PHP arbitrary code injection)
  • From: Jacobo Avariento Gimeno
• [UPRSN] Ubuntu Privacy Remix 8.04r2 introduces "noexec"-mounting by default
  • From: Ubuntu Privacy Remix Team
• [SECURITY] [DSA 1691-1] New moodle packages fix several vulnerabilities
  • From: Thijs Kinkhorst
• FreeSSHd Multiple Remote Stack Overflow Vulnerabilities
  • From: writ3r-dont-want-bugtraq-spam-
• Secunia Research: Trend Micro HouseCall ActiveX Control Arbitrary Code Execution
  • From: Secunia Research
• CoolPlayer 2.19 (Skin File) Local Buffer Overflow Exploit
  • From: writ3r-dont-want-bugtraq-spam-
• [USN-697-1] Imlib2 vulnerability
  • From: Marc Deslauriers
• Re: [IVIZ-08-016] F-Secure f-prot Antivirus for Linux corrupted ELF header Security Bypass
  • From: mikael . albrecht
• CORE-2008-1210: Qemu and KVM VNC server remote DoS
  • From: CORE Security Technologies Advisories
• [SECURITY] [DSA 1689-1] New proftpd-dfsg packages fix Cross-Site Request Forgery
  • From: Martin Schulze
• [ISecAuditors Security Advisories] Wordpress is vulnerable to an unauthorized upgrade and XSS
  • From: ISecAuditors Security Advisories
• [SECURITY] [DSA 1690-1] New avahi packages fix denial of service
  • From: Florian Weimer
• [ISecAuditors Security Advisories] Multiple vulnerabilities in WiFi router COMTREND CT-536/HG-536+
  • From: ISecAuditors Security Advisories
• rPSA-2008-0341-1 dovecot
  • From: rPath Update Announcements
• [ GLSA 200812-20 ] phpCollab: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• [ MDVA-2008:241 ] mailscanner
  • From: security
• [security bulletin] HPSBST02397 SSRT080187 rev.1 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS08-078
  • From: security-alert
• Re: rPSA-2008-0341-1 dovecot
  • From: olga
• [USN-677-2] OpenOffice.org Internationalization update
  • From: Jamie Strandboge
• [ISecAuditors Security Advisories] PSI remote integer overflow DoS
  • From: ISecAuditors Security Advisories
• FreeBSD Security Advisory FreeBSD-SA-08:13.protosw
  • From: FreeBSD Security Advisories
• DDIVRT-2008-16 Citrix Broadcast Server 6.0 login.asp SQL Injection --- Update for BID 32832
  • From: VulnerabilityResearch
• [USN-700-1] Perl vulnerabilities
  • From: Kees Cook
• [SECURITY] [DSA 1688-2] New courier-authlib packages fix regression
  • From: Florian Weimer
• [USN-698-3] Nagios vulnerabilities
  • From: Marc Deslauriers
• [ GLSA 200812-23 ] Imlib2: User-assisted execution of arbitrary code
  • From: Pierre-Yves Rofes
• FRHACK Registration open (Christmas offer)
  • From: Jerome Athias
• Personal Sticky Threads v1.0.3c vbulletin Add-on problem
  • From: xl4nothing
• [ GLSA 200812-22 ] Ampache: Insecure temporary file usage
  • From: Pierre-Yves Rofes
• FreeBSD Security Advisory FreeBSD-SA-08:12.ftpd
  • From: FreeBSD Security Advisories
• [ GLSA 200812-24 ] VLC: Multiple vulnerabilities
  • From: Tobias Heinlein
• [ GLSA 200812-21 ] ClamAV: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• PGP Desktop 9.0.6 Denial Of Service - ZeroDay
  • From: contact . fingers
• Google Chrome Browser (ChromeHTML://) remote parameter injection POC
  • From: nospam
• MS Windows Media Player * (.WAV) Remote Integrer Overflow
  • From: Laurent . gaffie
• Re: Google Chrome Browser (ChromeHTML://) remote parameter injection POC
  • From: Already-sended-information-to-security-focus
• joomla com_lowcosthotels sql injection
  • From: lovebug
• Castlecops security site closed for good
  • From: Michael Scheidell
• PHP-Fusion Mod TI - Blog System Sql Injection
  • From: r3d . w0rm
• ClubHack2008 presentations are now online
  • From: ClubHack
• Joomla Component mdigg 2.2.8 Blind SQL Injection Exploit
  • From: hadihadi_zedehal_2006
• [SECURITY] [DSA 1692-1] New php-xajax packages fix cross-site scripting
  • From: Steffen Joeris
• hm? new vulnerabilities? wav windows media
  • From: anonymous
• MSN messenger sends IP addresses Public and Private
  • From: Carmelo Brancato
• ViArt Shopping Cart v3.5 Multiple Remote Vulnerabilities
  • From: XiaShing
• Madrese-Portal Sql Injection
  • From: r3d . w0rm
• MagpieRSS XSS 0day
  • From: admin
• [SECURITY] [DSA 1693-1] New phppgadmin packages fix several vulnerabilities
  • From: Thijs Kinkhorst
• [ MDVSA-2008:246 ] kernel
  • From: security
• Mavi Emlak Sql Injection
  • From: r3d . w0rm
• Re: Re: Google Chrome Browser (ChromeHTML://) remote parameter injection POC
  • From: nospam
• Re: MagpieRSS XSS 0day
  • From: Antone Roundy
• Megacubo 5.0.7 (mega://) remote eval() injection exploit
  • From: pyro
• reliable IOS exploitation
  • From: Gadi Evron
• php-nuke 8.0 module sections artid blind sql inj vuln.
  • From: the . dumenci