Mail Index

• Thread Index

• [ MDVSA-2009:224 ] postfix
  • From: security
• Writeup by Amit Klein (Trusteer): "Google Chrome 3.0 (Beta) Math.random vulnerability"
  • From: Amit Klein
• Illustrating the Linux sock_sendpage() NULL pointer dereference on Power/Cell BE Architecture
  • From: Ramon de Carvalho Valle
• Vulnerable MSVC++ runtime distributed with OpenOffice.org 3.1.1 for Windows
  • From: Stefan Kanthak
• [SECURITY] [DSA 1875-1] New ikiwiki packages fix information disclosure
  • From: Moritz Muehlenhoff
• VMSA-2009-0011 VMware Studio 2.0 addresses a security issue in the public beta version of Studio 2.0
  • From: VMware Security team
• Norman Internet Update Deamon sends cleartext license key on update
  • From: Stefan Bauer
• Pwning Opera Unite with Inferno's Eleven
  • From: Inferno
• SEC Consult SA-20090901-0 :: File disclosure vulnerability in JSFTemplating, Mojarra Scales and GlassFish Application Server v3 Admin console
  • From: Johannes Greil
• Secunia Research: OpenOffice.org Word Document Table Parsing Integer Underflow
  • From: Secunia Research
• Secunia Research: OpenOffice.org Word Document Table Parsing Buffer Overflow
  • From: Secunia Research
• [BMSA-2009-06] Remote code execution in BKAV eOffice
  • From: Nam Nguyen
• [ MDVSA-2009:197 ] nss
  • From: security
• [SECURITY] [DSA 1876-1] New dnsmasq packages fix remote code execution
  • From: Florian Weimer
• Re: Norman Internet Update Deamon sends cleartext license key on update
  • From: Jeffrey Walton
• [USN-827-1] Dnsmasq vulnerabilities
  • From: Jamie Strandboge
• Re[2]: [Full-disclosure] Microsoft Internet Information Server ftpd zeroday
  • From: Vladimir '3APA3A' Dubrovin
• [USN-810-2] NSS regression
  • From: Kees Cook
• Re: [Full-disclosure] Microsoft Internet Information Server ftpd zeroday
  • From: Thierry Zoller
• Re[2]: [Full-disclosure] Microsoft Internet Information Server ftpd zeroday
  • From: Vladimir '3APA3A' Dubrovin
• [ADVISORY] NetCache URL DoS - Argentinian ISP
  • From: Arturo 'Buanzo' Busleiman
• Re: [Full-disclosure] Microsoft Internet Information Server ftpd zeroday
  • From: Guido Landi
• Re: [Full-disclosure] Microsoft Internet Information Server ftpd zeroday
  • From: Guido Landi
• International Hacking & Security Conference "POC2009" and Call for Paper
  • From: pocadm
• [SECURITY] [DSA 1877-1] New mysql-dfsg-5.0 packages fix arbitrary code execution
  • From: Sebastien Delafond
• [SECURITY] [DSA 1878-1] New devscripts packages fix remote code execution
  • From: Florian Weimer
• FRHACK OS v1 alpha1 released
  • From: Jerome Athias
• FRHACK ITSec Conf DVDs and Live Streams
  • From: Jerome Athias
• New Bug Found By Ostoure Sazan Sharif
  • From: ostoure . sazan
• AST-2009-006: IAX2 Call Number Resource Exhaustion
  • From: Asterisk Security Team
• Microsoft Internet Information Services 5.0/6.0 FTP SERVER DENIAL OF SERVICE ("Stack Exhaustion")
  • From: Kingcope
• DvBBS v2.0(PHP) boardrule.php Sql injection
  • From: info
• [SECURITY] [DSA 1879-1] New silc-client/silc-toolkit packages fix arbitrary code execution
  • From: Nico Golde
• Re: FRHACK OS v1 alpha1 released
  • From: Jerome Athias
• Re: [TZO-08-2009] Bitdefender generic bypass/evasion
  • From: noloader
• yTNEF/Evolution TNEF Attachment decoder plugin directory traversal & buffer overflow vulnerabilities
  • From: Akita Software Security
• [ GLSA 200909-01 ] Linux-PAM: Privilege escalation
  • From: Alex Legler
• [ GLSA 200909-02 ] libvorbis: User-assisted execution of arbitrary code
  • From: Alex Legler
• Secunia Research: VMWare VMnc Codec Mismatched Dimensions Buffer Overflow
  • From: Secunia Research
• [oCERT-2009-013] yTNEF/Evolution TNEF attachment decoder input sanitization errors
  • From: Andrea Barisani
• VMSA-2009-0012 VMware Movie Decoder, VMware Workstation, VMware Player, and VMware ACE resolve security issues.
  • From: VMware Security team
• [SECURITY] [DSA 1881-1] New cyrus-imapd packages fix arbitrary code execution
  • From: Nico Golde
• Various Orion application application server example pages are vulnerable to XSS.
  • From: info
• Novell eDirectory 8.8 SP5 Dhost Http Server DoS
  • From: karakorsankara
• [scip_Advisory 4021] IBM Lotus Notes 8.5 RSS Widget Privilege Escalation
  • From: Marc Ruef
• Re: [Full-disclosure] Microsoft Internet Information Server ftpd zeroday
  • From: Thierry Zoller
• [ MDVSA-2009:225 ] qt4
  • From: security
• Regarding Microsoft srv2.sys SMB2.0 NEGOTIATE BSOD
  • From: Reversemode
• MS09-048 includes fixes for TCP/IP implementation issues reported more than a year ago
  • From: Juha-Matti Laurio
• ZDI-09-062: Microsoft Internet Explorer JScript arguments Invocation Memory Corruption Vulnerability
  • From: ZDI Disclosures
• [USN-828-1] PAM vulnerability
  • From: Kees Cook
• Open Beta - New Free AV Software
  • From: Alfred Huger
• Re: DoS vulnerability in Google Chrome
  • From: MustLive
• TCP/IP Orphaned Connections Vulnerability
  • From: Fabian Yamaguchi
• [Advisory] ChartDirector Critical File Access
  • From: DokFLeed
• Multiple RDP Connections BSOD DOS
  • From: Tim Medin
• SeacureIT Preview Conference 2009
  • From: Stefano Zanero
• [ GLSA 200909-03 ] Apache Portable Runtime, APR Utility Library: Execution of arbitrary code
  • From: Alex Legler
• [ GLSA 200909-04 ] Clam AntiVirus: Multiple vulnerabilities
  • From: Alex Legler
• 4f: The File Format Fuzzing Framework
  • From: Krakow Labs
• [ GLSA 200909-05 ] Openswan: Denial of Service
  • From: Alex Legler
• [ GLSA 200909-06 ] aMule: Parameter injection
  • From: Alex Legler
• Re: MS09-048 includes fixes for TCP/IP implementation issues reported more than a year ago
  • From: bob
• [ GLSA 200909-07 ] TkMan: Insecure temporary file usage
  • From: Alex Legler
• [ GLSA 200909-08 ] C* music player: Insecure temporary file usage
  • From: Alex Legler
• [ GLSA 200909-09 ] Screenie: Insecure temporary file usage
  • From: Alex Legler
• [ GLSA 200909-10 ] LMBench: Insecure temporary file usage
  • From: Alex Legler
• [ GLSA 200909-11 ] GCC-XML: Insecure temporary file usage
  • From: Alex Legler
• [SECURITY] [DSA 1882-1] New xapian-omega packages fix cross-site scripting
  • From: Nico Golde
• SMB SRV2.SYS Denial of Service PoC
  • From: igottabug
• CORE-2009-0820 - Dnsmasq Heap Overflow and Null-pointer Dereference on TFTP Server
  • From: CORE Security Technologies Advisories
• [ MDVSA-2009:226 ] aria2
  • From: security
• Re: Multiple RDP Connections BSOD DOS
  • From: Elvedin Trnjanin
• RE: MS09-048 includes fixes for TCP/IP implementation issues reported more than a year ago
  • From: Jim Duncan
• Re: Re: Multiple RDP Connections BSOD DOS
  • From: nobody
• Re: Multiple RDP Connections BSOD DOS
  • From: John Menerick
• RE: Re: Multiple RDP Connections BSOD DOS
  • From: Earnhart, Benjamin J
• Nullam Blog Multiple Remote Vulnerabilities
  • From: Salvatore Fresta aka Drosophila
• Re: Multiple RDP Connections BSOD DOS
  • From: Tim Medin
• [SECURITY] [DSA 1883-1] New nagios2 packages fix several cross-site scriptings
  • From: Steffen Joeris
• SecurityTubeCon CFP, Venue: Cyberspace!
  • From: Vivek Ramachandran
• [ MDVSA-2009:226 ] freeradius
  • From: security
• T-HTB Manager Mutiple Blind SQL Injection
  • From: Salvatore Fresta aka Drosophila
• [USN-821-1] Firefox and Xulrunner vulnerabilities
  • From: Jamie Strandboge
• ZDI-09-064: Apple QuickTime FlashPix Sector Size Overflow Vulnerability
  • From: ZDI Disclosures
• ZDI-09-063: Apple QuickTime H.264 Nal Unit Length Heap Overflow Vulnerability
  • From: ZDI Disclosures
• ZDI-09-065: Mozilla Firefox TreeColumns Dangling Pointer Vulnerability
  • From: ZDI Disclosures
• [USN-829-1] Qt vulnerability
  • From: Jamie Strandboge
• [SECURITY] [DSA 1878-2] New devscripts packages fix regressions
  • From: Florian Weimer
• [ MDVSA-2009:229 ] cyrus-imapd
  • From: security
• Siemens Gigaset SE361 Wlan - Remote Reboot
  • From: crashbrz
• Regular Expression Denial of Service
  • From: Alex Roichman
• [ MDVSA-2009:230 ] pidgin
  • From: security
• Re: Regular Expression Denial of Service
  • From: Gadi Evron
• iphone email client does not validate ssl certificates
  • From: Bill Borskey
• [ MDVSA-2009:231 ] htmldoc
  • From: security
• ShmooCon 2010 CFP
  • From: Bruce Potter
• [ MDVSA-2009:228 ] libneon
  • From: security
• Re[2]: Regular Expression Denial of Service
  • From: Thierry Zoller
• [ MDVSA-2009:197-2 ] nss
  • From: security
• [ MDVSA-2009:232 ] libsamplerate
  • From: security
• Re: Regular Expression Denial of Service
  • From: Gadi Evron
• Re: Re[2]: Regular Expression Denial of Service
  • From: Jeffrey Walton
• vBulletin 3.8.2 Denial of Service Exploit
  • From: snip3r ir4Q
• nullcon Goa 2010 Call For Papers
  • From: nullcon nullcon
• [ GLSA 200909-12 ] HTMLDOC: User-assisted execution of arbitrary code
  • From: Alex Legler
• [ GLSA 200909-13 ] irssi: Execution of arbitrary code
  • From: Alex Legler
• [ GLSA 200909-14 ] Horde: Multiple vulnerabilities
  • From: Alex Legler
• [ GLSA 200909-15 ] Lynx: Arbitrary command execution
  • From: Alex Legler
• War FTP Daemon Remote Denial Of Service Vulnerability
  • From: Jarle Aase
• Re: [Full-disclosure] FreeBSD <= 6.1 kqueue() NULL pointer dereference
  • From: Przemyslaw Frasunek
• Re: Regular Expression Denial of Service
  • From: Pavel Kankovsky
• [ GLSA 200909-16 ] Wireshark: Denial of Service
  • From: Tobias Heinlein
• [ GLSA 200909-17 ] ZNC: Directory traversal
  • From: Tobias Heinlein
• Re: Regular Expression Denial of Service
  • From: Pavel Kankovsky
• [SECURITY] [DSA 1883-2] New nagios2 packages fix regression
  • From: Steffen Joeris
• [ECHO_ADV_111$2009] Joomla Hotel Booking System Component XSS/SQL Injection Multiple Vulnerability
  • From: adv
• [SECURITY] [DSA 1884-1] New nginx packages fix arbitrary code execution
  • From: Nico Golde
• [SECURITY] [DSA 1885-1] New xulrunner packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 1886-1] New iceweasel packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• [USN-831-1] OpenEXR vulnerabilities
  • From: Marc Deslauriers
• [USN-830-1] OpenSSL vulnerability
  • From: Marc Deslauriers
• [TKADV2009-007] Apple iPhone OS AudioCodecs Heap Buffer Overflow
  • From: Tobias Klein
• [ MDVSA-2009:233 ] kernel
  • From: security
• Local privilege escalation vulnerability in Protector Plus Antivirus (Proland Software)
  • From: ss_contacts
• [ MDVSA-2009:234-1 ] silc-toolkit
  • From: security
• [ MDVSA-2009:235 ] silc-toolkit
  • From: security
• [ MDVSA-2009:234 ] silc-toolkit
  • From: security
• [SECURITY] [DSA 1887-1] New rails packages fix cross-site scripting
  • From: Steffen Joeris
• 3rd party patch for XP for MS09-048?
  • From: Aras \"Russ\" Memisyazici
• Improper Authentication Mechanism in 3Com Wireless8760 Dual Radio 11a/b/g Poe Access Point
  • From: Yossi Yakubov
• Re: 3rd party patch for XP for MS09-048?
  • From: Jeffrey Walton
• Re: 3rd party patch for XP for MS09-048?
  • From: Eric Kimminau
• Re: 3rd party patch for XP for MS09-048?
  • From: Susan Bradley
• Re: 3rd party patch for XP for MS09-048?
  • From: Susan Bradley
• Re: 3rd party patch for XP for MS09-048?
  • From: Eric C. Lukens
• [SECURITY] [DSA 1888-1] New openssl packages deprecate MD2 hash signatures
  • From: Moritz Muehlenhoff
• Re: Improper Authentication Mechanism in 3Com Wireless8760 Dual Radio 11a/b/g Poe Access Point
  • From: Tom Neaves
• Re: 3rd party patch for XP for MS09-048?
  • From: Jeffrey Walton
• Re: 3rd party patch for XP for MS09-048?
  • From: Matt Riddell
• Re: 3rd party patch for XP for MS09-048?
  • From: Susan Bradley
• Re: Re: 3rd party patch for XP for MS09-048?
  • From: Elizabeth . a . greene
• [security bulletin] HPSBUX02458 SSRT090104 rev.1 - HP-UX Running bootpd, Remote Denial of Service (DoS)
  • From: security-alert
• RE: [Full-disclosure] 3rd party patch for XP for MS09-048?
  • From: Thor (Hammer of God)
• Exploiting Chrome and Opera's inbuilt ATOM/RSS reader with Script Execution and more
  • From: Inferno
• ANNOUNCE: RFIDIOt release - v0.z - 16th September, 2009
  • From: Adam Laurie
• RE: [Full-disclosure] 3rd party patch for XP for MS09-048?
  • From: Larry Seltzer
• RE: [Full-disclosure] 3rd party patch for XP for MS09-048?
  • From: Thor (Hammer of God)
• Re: 3rd party patch for XP for MS09-048?
  • From: Tom Grace
• Re: 3rd party patch for XP for MS09-048?
  • From: Susan Bradley
• RE: [Full-disclosure] 3rd party patch for XP for MS09-048?
  • From: Thor (Hammer of God)
• Iret #GP on pre-commit handling failure: the NetBSD case (CVE-2009-2793)
  • From: Julien TINNES
• Re: [Full-disclosure] 3rd party patch for XP for MS09-048?
  • From: Susan Bradley
• RE: [Full-disclosure] 3rd party patch for XP for MS09-048?
  • From: Thor (Hammer of God)
• Re: [Full-disclosure] 3rd party patch for XP for MS09-048?
  • From: Susan Bradley
• [SECURITY] [DSA 1889-1] New icu packages correct multibyte sequence parsing
  • From: Moritz Muehlenhoff
• Re: 3rd party patch for XP for MS09-048?
  • From: Rob Thompson
• [USN-832-1] FreeRADIUS vulnerability
  • From: Marc Deslauriers
• Re: 3rd party patch for XP for MS09-048?
  • From: Susan Bradley
• RE: [Full-disclosure] 3rd party patch for XP for MS09-048?
  • From: Larry Seltzer
• nginx internal DNS cache poisoning
  • From: Matthew Dempsky
• Re: nginx internal DNS cache poisoning
  • From: Maxim Dounin
• RE: [Full-disclosure] 3rd party patch for XP for MS09-048?
  • From: Aras \"Russ\" Memisyazici
• Quiksoft EasyMail 6.0.3.0 imap connect() ActiveX stack overflow exploit
  • From: Sebastian Wolfgarten
• SEC Consult SA-20090917-0 :: RADactive I-Load Multiple Vulnerabilities
  • From: Stefan Streichsbier
• Re: [Full-disclosure] 3rd party patch for XP for MS09-048?
  • From: John Morrison
• Re: [Full-disclosure] 3rd party patch for XP for MS09-048?
  • From: Susan Bradley
• Re: [Full-disclosure] 3rd party patch for XP for MS09-048?
  • From: Susan Bradley
• Peiter "Mudge" Zatko petition to be named U.S. Cybersecurity Chief
  • From: The Sp3ctacle
• Multiple Remote Command Execution vulnerabilities on Avaya Intuity Audix LX (plus some client-side bugs)
  • From: Adrian P
• [USN-833-1] KDE-Libs vulnerability
  • From: Jamie Strandboge
• [security bulletin] HPSBST02459 SSRT080134 rev.2 - HP StorageWorks Remote Management Interface (RMI) for MSL Tape Libraries and 1/8 G2 Tape Autoloaders, Denial of Service (DoS)
  • From: security-alert
• Advisory 01/2009: Horde_Form_Type_image Arbitrary File Overwrite Vulnerability
  • From: Stefan Esser
• [ GLSA 200909-18 ] nginx: Remote execution of arbitrary code
  • From: Alex Legler
• Advisory: Crypto backdoor in Qnap storage devices (CVE-2009-3200)
  • From: Marc Heuse
• [ GLSA 200909-19 ] Dnsmasq: Multiple vulnerabilities
  • From: Alex Legler
• Mambo 4.6.3 arbitrary file upload
  • From: Paweł Łaskarzewski
• Dawaween V 1.03 <<----SQL Injection Exploit
  • From: Dazz . band
• rubrique 'rubrique.php' SQL Injection Vulnerability
  • From: CrAzY_CrAcKeR
• [ MDVSA-2009:236 ] firefox
  • From: security
• [SECURITY] [DSA 1890-1] New wxwidgets packages fix arbitrary code execution
  • From: Steffen Joeris
• [scip_Advisory 4020] Check Point Connectra R62 Login Script Injection Vulnerability
  • From: Stefan Friedli
• [UPRSN] Ubuntu Privacy Remix 9.04r2 fixes security issues
  • From: Ubuntu Privacy Remix Team
• [USN-834-1] PostgreSQL vulnerabilities
  • From: Jamie Strandboge
• [ MDVSA-2009:237 ] openssl
  • From: security
• [Suspected Spam][USN-835-1] neon vulnerabilities
  • From: Kees Cook
• [ MDVSA-2009:238 ] openssl
  • From: security
• [security bulletin] HPSBGN02441 SSRT090082 rev.1 - HP ProCurve Identity Driven Manager (IDM) Running on Microsoft IAS or NPS, Local Unauthorized Access
  • From: security-alert
• ToorCon 11 Preliminary Lineup Announced!
  • From: h1kari
• [MajorSecurity Advisory #55]moziloCMS - Directory Traversal, Cross Site Scripting and Session Fixation Issues
  • From: david
• [SECURITY] [DSA 1891-1] New changetrack packages fix arbitrary code execution
  • From: Steffen Joeris
• [ MDVSA-2009:239 ] openssl
  • From: security
• [ MDVSA-2009:240 ] apache
  • From: security
• [ MDVSA-2009:241 ] squid
  • From: security
• [security bulletin] HPSBUX02457 SSRT090174 rev.1 - HP-UX Running Role-Based Access Control (RBAC), Local Unauthorized Access
  • From: security-alert
• [ MDVSA-2009:242-1 ] dovecot
  • From: security
• [ MDVSA-2009:242 ] dovecot
  • From: security
• Re: [Full-disclosure] 3rd party patch for XP for MS09-048?
  • From: Mailing lists at Core Security Technologies
• [ MDVSA-2009:243 ] freetype2
  • From: security
• [DSECRG-09-055] OSSIM 2.1 - Multiple security vulnerabilities
  • From: research
• nginx - low risk webdav destination bug
  • From: Kingcope
• [USN-836-1] WebKit vulnerabilities
  • From: Marc Deslauriers
• cour supreme 'index.php' SQL Injection & Local File Include Vulnerability
  • From: CrAzY_CrAcKeR
• Cisco Security Advisory: Cisco IOS Software Network Time Protocol Packet Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco IOS Software Crafted Encryption Packet Denial of Service Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco IOS Software Internet Key Exchange Resource Exhaustion Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco IOS Software H.323 Denial of Service Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco IOS Software Session Initiation Protocol Denial of Service Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco IOS Software Object-group Access Control List Bypass Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Avast aswMon2.sys kernel memory corruption and Local Privilege Escalation.
  • From: contact . fingers
• [SECURITY] [DSA 1893-1] New cyrus-imapd-2.2/kolab-cyrus-imapd packages fix arbitrary code execution
  • From: Steffen Joeris
• Cisco Security Advisory: Cisco IOS Software Zone-Based Policy Firewall Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• [ MDVSA-2009:244 ] xfig
  • From: security
• [SECURITY] [DSA 1892-1] New dovecot packages fix arbitrary code execution
  • From: Steffen Joeris
• Cisco Security Advisory: Cisco Unified Communications Manager Session Initiation Protocol Denial of Service Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco Unified Communications Manager Express Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• ZDI-09-066: Adobe RoboHelp Server Arbitrary File Upload and Execute Vulnerability
  • From: ZDI Disclosures
• [ MDVSA-2009:243-1 ] freetype2
  • From: security
• [SECURITY] [DSA 1894-1] New newt packages fix arbitrary code execution
  • From: Steffen Joeris
• [ MDVSA-2009:245 ] glib2.0
  • From: security
• [USN-837-1] Newt vulnerability
  • From: Marc Deslauriers
• Black Hat DC Call for Papers is now OPEN
  • From: Jeff Moss
• Engeman - SQL Injection Vulnerability (vendor url erratum)
  • From: crashbrz
• Cross-Site Scripting vulnerability in E107
  • From: MustLive
• Call for Participation - ACM Conference on Computer and Communications Security (CCS)
  • From: Christopher Kruegel
• [SECURITY] [DSA 1895-1] New xmltooling packages fix potential code execution
  • From: Florian Weimer
• COMPENG 2010 - Extended Submission Deadline
  • From: Federico Maggi
• Cisco ACE XML Gateway <= 6.0 Internal IP disclosure
  • From: nitrØus
• Multiple Vulnerabilities
  • From: Dr_IDE
• [ GLSA 200909-20 ] cURL: Certificate validation error
  • From: Alex Legler
• [ MDVSA-2009:246 ] php
  • From: security
• [ MDVSA-2009:247 ] php
  • From: security
• [ MDVSA-2009:248 ] php
  • From: security
• Re: iphone email client does not validate ssl certificates
  • From: Pavel Machek
• [MajorSecurity Advisory #59]PHP <=5.3 - mysqli_real_escape_string() full path disclosure
  • From: David Vieira-Kurz
• (edited) [DSECRG-09-044] SAP GUI 7.1 Insecure Methods
  • From: Alexandr Polyakov
• [SECURITY] [DSA 1897-1] New horde3 packages fix arbitrary code execution
  • From: Nico Golde
• Re: Regular Expression Denial of Service
  • From: hackerwebzine
• [MajorSecurity Advisory #57]PHP <=5.3 - preg_match() full path disclosure
  • From: David Vieira-Kurz
• [USN-838-1] Dovecot vulnerabilities
  • From: Marc Deslauriers
• [ MDVSA-2009:249 ] newt
  • From: security
• Local privilege escalation vulnerability in Trustport security software
  • From: ss_contacts
• [DSECRG-09-043] SAP GUI 7.1 Insecure Method
  • From: Alexandr Polyakov
• Vulnerabilities in E107
  • From: MustLive
• [SECURITY] [DSA 1896-1] New Shibboleth 1.x packages fix potential code execution
  • From: Florian Weimer
• Multiple Vulnerabilities
  • From: Jerome Athias
• [security bulletin] HPSBMA02461 SSRT090187 rev.1 - HP Remote Graphics Software (RGS) Sender, Remote Unauthorized Access
  • From: security-alert
• Cross-Site Scripting vulnerability in eCaptcha
  • From: MustLive
• WinRAR v3.80 - ZIP Filename Spoofing
  • From: chr1x
• Re: iphone email client does not validate ssl certificates
  • From: Steve Shockley
• Adobe Photoshop Elements 8.0 Active File Monitor Service Bad Security Descriptor Local Elevation Of Privileges
  • From: nospam
• FlatPress 0.804-0.812.1 Local File Inclusion to Remote Command Execution
  • From: Giuseppe Fuggiano