Mail Index

• Thread Index

• [USN-934-1] Netpbm vulnerability
  • From: Jamie Strandboge
• Secunia Research: Internet Download Manager FTP Buffer Overflow Vulnerability
  • From: Secunia Research
• SQL Injection in MS Access with backslash escaped input
  • From: gheibi
• RE: STP mitm attack idea
  • From: Williams, Dan
• EUSecWest Amsterdam 2010 Call For Papers (short deadline May 5 - conf June 16/17)
  • From: Dragos Ruiu
• BPstyle - Graphic studio SQL Injection Vulnerabilities
  • From: md . r00t . defacer
• [ MDVSA-2010:088 ] kernel
  • From: security
• A vulnerability in Kaspersky Antivirus
  • From: daniel lopez
• Cross-Site Scripting vulnerability in Mango
  • From: MustLive
• [SECURITY] [DSA 2040-1] New squidguard packages fix several vulnerabilities
  • From: Sebastien Delafond
• Puntal (index.php) Remote File Inclusion Vulnerabilities
  • From: eidelweiss
• [ MDVSA-2010:089 ] gnutls
  • From: security
• RE: Puntal (index.php) Remote File Inclusion Vulnerabilities
  • From: Tom Walsh - lists
• XSRF (CSRF) in Zikula Application Framework
  • From: advisory
• XSRF (CSRF) in eliteCMS
  • From: advisory
• Re: RE: Puntal (index.php) Remote File Inclusion Vulnerabilities
  • From: donald00
• XSS in Acuity CMS
  • From: advisory
• [SECURITY] [DSA-2041-1] New mediawiki packages fix cross-site request forgery
  • From: Raphael Geissert
• [ MDVSA-2010:090 ] samba
  • From: security
• XSS in ecoCMS
  • From: advisory
• XSS in eliteCMS
  • From: advisory
• Re: Puntal (index.php) Remote File Inclusion Vulnerabilities
  • From: Justin C. Klein Keane
• [CORE-2010-0428] Microsoft Office Visio DXF File Insertion Buffer Overflow
  • From: Core Security Technologies Advisories Team
• REC0N 2010 (MONTREAL) CFP Reminder & Preview
  • From: David Mirza Ahmad
• [ MDVSA-2010:091 ] openoffice.org
  • From: security
• Knowledgeroot (fckeditor) Remote Arbitrary File Upload Exploit
  • From: eidelweiss
• [security bulletin] HPSBMA02400 SSRT080144 rev.4 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code
  • From: security-alert
• SmartCMS v.2 SQL injection vulnerability
  • From: Maciej Gojny
• Vulnerabilities in t3m_cumulus_tagcloud for TYPO3
  • From: MustLive
• [security bulletin] HPSBMA02416 SSRT090008 rev.5 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code
  • From: security-alert
• [CORE-2010-0427] Windows SMTP Service DNS query Id vulnerabilities
  • From: Core Security Technologies Advisories
• [security bulletin] HPSBMA02483 SSRT090257 rev.3 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code
  • From: security-alert
• KHOBE - 8.0 earthquake for Windows desktop security software
  • From: www.matousec.com - Research
• [USN-936-1] dvipng vulnerability
  • From: Marc Deslauriers
• [USN-937-1] TeX Live vulnerabilities
  • From: Marc Deslauriers
• PCRE compile workspace overflow
  • From: Michael Santos
• Re: Knowledgeroot (fckeditor) Remote Arbitrary File Upload Exploit
  • From: Frank Habermann
• fetchmail security announcement fetchmail-SA-2010-02 (CVE-2010-1167)
  • From: ma+bt
• [SECURITY] [DSA 2042-1] New iscsitarget packages fix arbitrary code execution
  • From: Luciano Bello
• BaoFeng Storm M3U File Processing Buffer Overflow Vulnerability
  • From: lilf
• VMSA-2010-0008 VMware View 3.1.3 addresses an important cross-site scripting vulnerability
  • From: VMware Security team
• [security bulletin] HPSBMA02201 SSRT071328 rev.1 - HP LoadRunner Agent on Windows, Remote Unauthenticated Arbitrary Code Execution
  • From: security-alert
• [USN-919-1] Emacs vulnerability
  • From: Kees Cook
• ZDI-10-080: HP Mercury LoadRunner Agent Trusted Input Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• New web malwares attacking big hosting providers
  • From: angelo
• Vulnerability with Cisco ACE. A2 3.0 (probably all version)
  • From: Alexis Tremblay
• [ MDVSA-2010:092 ] cacti
  • From: security
• REZERVI (root) Remote Command Execution Vulnerability
  • From: eidelweiss
• Re: KHOBE - 8.0 earthquake for Windows desktop security software
  • From: noloader
• Re: New web malwares attacking big hosting providers
  • From: Davide Canali
• Injection of ECShop apps.
  • From: lis cker
• XSS vulnerability in Jaws
  • From: advisory
• [Wintercore Research] Consona Products - Multiple vulnerabilities
  • From: vulns
• pmwiki: persistent cross site scripting (XSS), CVE-2010-1481
  • From: Hanno Böck
• CMS Made Simple: backend cross site scripting (XSS), CVE-2010-1482
  • From: Hanno Böck
• rPSA-2010-0034-1 ntp ntp-utils
  • From: rPath Update Announcements
• rPSA-2010-0036-1 openssl openssl-scripts
  • From: rPath Update Announcements
• rPSA-2010-0037-1 kernel
  • From: rPath Update Announcements
• [ MDVSA-2010:093 ] mysql
  • From: security
• Vulnerabilities in Sebo - webstore
  • From: MustLive
• XSS vulnerability in EasyPublish CMS
  • From: advisory
• XSS vulnerability in Advanced Poll
  • From: advisory
• SA00001-2010
  • From: Zakar Miklós
• Family Connections 2.2.3 Multiple Remote Vulnerabilities
  • From: Salvatore Fresta aka Drosophila
• Turnkey Innovations SQL Injection Vulnerability
  • From: md . r00t . defacer
• Month of PHP Security - Summary - 1st May - 10th May
  • From: Stefan Esser
• 29o3 CMS (LibDir) Multiple Remote File Inclusion Vulnerability
  • From: eidelweiss
• XSS in Saurus CMS
  • From: advisory
• Re: [Full-disclosure] Month of PHP Security - Summary - 1st May - 10th May
  • From: Eren Türkay
• [SECURITY] [DSA 2044-1] New mplayer packages fix arbitrary code execution
  • From: Devin Carraway
• Re: Vulnerabilities in Sebo - webstore
  • From: MustLive
• Re: Vulnerabilities in Sebo - webstore
  • From: Salvatore Fresta aka Drosophila
• [ MDVSA-2010:090-1 ] samba
  • From: security
• [security bulletin] HPSBMA02528 SSRT100106 rev.1 - HP Performance Center Agent on Windows, Remote Unauthenticated Arbitrary Code Execution
  • From: security-alert
• {PRL} Microsoft Windows Outlook Express and Windows Mail Integer Overflow
  • From: Francis Provencher
• XSS in DynamiXgate Affiliate Store Builder
  • From: advisory
• Re: Vulnerabilities in Sebo - webstore
  • From: Salvatore Fresta aka Drosophila
• [SECURITY] [DSA 2043-1] New vlc packages fix arbitrary code execution
  • From: Devin Carraway
• [security bulletin] HPSBMA02527 SSRT010098 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code
  • From: security-alert
• [SECURITY] [DSA 2045-1] New libtheora packages fix arbitrary code execution
  • From: Sebastien Delafond
• [CORE-2010-0405] Adobe Director Invalid Read
  • From: Core Security Technologies Advisories Team
• Vulnerability in widget Cumulus for BlogEngine.NET
  • From: MustLive
• Multiple memory corruption vulnerabilities in Ghostscript
  • From: Dan Rosenberg
• ZDI-10-081: HP OpenView NNM ovet_demandpoll sel CGI Variable Format String Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• CFP for ekoparty 0x10 is now open! [ Buenos Aires, Argentina ]
  • From: ekoparty Security Conference
• ZDI-10-089: Adobe Shockwave Director PAMI Chunk Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-082: HP OpenView NNM netmon sel CGI Variable Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-083: HP OpenView NNM snmpviewer.exe CGI Multiple Variable Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-084: HP OpenView NNM getnnmdata.exe CGI Invalid MaxAge Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-085: HP OpenView NNM getnnmdata.exe CGI Invalid ICount Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-086: HP OpenView NNM getnnmdata.exe CGI Invalid Hostname Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-087: Adobe Shockwave Invalid Offset Memory Corruption Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-088: Adobe Shockwave Player 3D Parsing Memory Corruption Vulnerability
  • From: ZDI Disclosures
• Palo Alto Network Vulnerability - Cross-Site Scripting (XSS)
  • From: jeromie
• [CAL-20100204-1]Adobe Shockwave Player Director File Parsing ATOM size infinite loop vulnerability
  • From: Code Audit Labs
• [CAL-20100204-2]Adobe Shockwave Player Director File Parsing integer overflow vulnerability
  • From: Code Audit Labs
• [CAL-20100204-3]Adobe Shockwave Player Director File Parsing RCSL Pointer Overwrite
  • From: Code Audit Labs
• iDefense Security Advisory 05.11.10: Abobe Shockwave Player Heap Memory Indexing Vulnerability
  • From: iDefense Labs
• Secunia Research: Adobe Shockwave Player 3D Parsing Memory Corruption
  • From: Secunia Research
• Secunia Research: Adobe Shockwave Player Signedness Error Vulnerability
  • From: Secunia Research
• PolyPager 1.0rc10 (fckeditor) File Upload Security Issue
  • From: eidelweiss
• Secunia Research: Adobe Shockwave Player Array Indexing Vulnerability
  • From: Secunia Research
• [ MDVSA-2010:094 ] tetex
  • From: security
• Secunia Research: Adobe Shockwave Player Integer Overflow Vulnerability
  • From: Secunia Research
• Secunia Research: Adobe Shockwave Player Asset Entry Parsing Vulnerability
  • From: Secunia Research
• Secunia Research: Adobe Shockwave Player Font Processing Buffer Overflow
  • From: Secunia Research
• VUPEN Security Research - Adobe Shockwave IML32 Multiple Code Execution Vulnerabilities (CVE-2010-0129)
  • From: VUPEN Security Research
• VUPEN Security Research - Adobe Shockwave 3D Two Remote Code Execution Vulnerabilities (CVE-2010-1284)
  • From: VUPEN Security Research
• VUPEN Security Research - Adobe Shockwave DIRAPI Multiple Code Execution Vulnerabilities (CVE-2010-1280)
  • From: VUPEN Security Research
• VUPEN Security Research - Adobe Shockwave 3D Blocks Field Code Execution Vulnerability (CVE-2010-1283)
  • From: VUPEN Security Research
• [security bulletin] HPSBMA02522 SSRT100086 rev.1 - HP Insight Control Server Migration for Windows, Remote Cross Site Scripting (XSS)
  • From: security-alert
• [security bulletin] HPSBMA02520 SSRT100071 rev.1 - HP Systems Insight Manager (SIM) for HP-UX, Linux, and Windows, Remote Unauthorized Access to Data
  • From: security-alert
• Secunia Research: TomatoCMS Script Insertion Vulnerabilities
  • From: Secunia Research
• Secunia Research: TomatoCMS "q" SQL Injection Vulnerability
  • From: Secunia Research
• Secunia Research: IrfanView PSD Image Parsing Sign-Extension Vulnerability
  • From: Secunia Research
• Secunia Research: IrfanView PSD RLE Decompression Buffer Overflow
  • From: Secunia Research
• Cisco Security Advisory: Multiple vulnerabilities in Cisco PGW Softswitch
  • From: Cisco Systems Product Security Incident Response Team
• Secunia Research: KDE KGet metalink "name" Directory Traversal Vulnerability
  • From: Secunia Research
• [security bulletin] HPSBPI02532 SSRT100111 rev.1 - HP MFP Digital Sending Software Running on Windows, Local Unauthorized Access
  • From: security-alert
• Secunia Research: Free Download Manager metalink "name" Directory Traversal
  • From: Secunia Research
• [USN-938-1] KDENetwork vulnerability
  • From: Jamie Strandboge
• Secunia Research: Free Download Manager Four Buffer Overflow Vulnerabilities
  • From: Secunia Research
• Secunia Research: KDE KGet Insecure File Operation Vulnerability
  • From: Secunia Research
• Secunia Research: aria2 metalink "name" Directory Traversal Vulnerability
  • From: Secunia Research
• [ MDVSA-2010:095 ] libxext
  • From: security
• XSS vulnerability in NPDS
  • From: advisory
• Blind SQL injection vulnerability in NPDS REvolution
  • From: advisory
• Joomla Component advertising (com_aardvertiser) File Inclusion Vulnerability
  • From: eidelweiss
• LinksAutomation Multiple Remote Vulnerabilities
  • From: md . r00t . defacer
• [SECURITY] [DSA-2046-1] New phpgroupware packages fix several vulnerabilities
  • From: Giuseppe Iuculano
• Vulnerability in tagcloud for Kasseler CMS
  • From: MustLive
• CfP: GameSec 2010 - Deadline extended to 31 May 2010
  • From: Albert Levi
• Re: [CORE-2010-0405] Adobe Director Invalid Read
  • From: Core Security Technologies Advisories
• Re: Secunia Research: KDE KGet Insecure File Operation Vulnerability
  • From: Vladimir '3APA3A' Dubrovin
• phpGroupWare SQL Injections and Local File Inclusion Vulnerabilities (CVE-2010-0403 and CVE-2010-0404)
  • From: VUPEN Web Security
• Mathematica on Linux /tmp/MathLink vulnerability
  • From: paul . szabo
• phpvidz Administrative Password Disclosure
  • From: mike
• Vulnerability in 3D user cloud for Joomla
  • From: MustLive
• XSS, SQL injection vulnerability in I-Vision CMS
  • From: Maciej Gojny
• Joomla component SimpleDownload Local File Inclusion
  • From: jerzy . patraszewski
• [oCERT-2010-001] multiple http client unexpected download filename vulnerability
  • From: Daniele Bianco
• CVE-2010-1454: SpringSource tc Server unauthenticated remote access to JMX interface
  • From: s2-security
• [ MDVSA-2010:096 ] tetex
  • From: security
• [SECURITY] [DSA 2047-1] New aria2 packages fix directory traversal
  • From: Thijs Kinkhorst
• DEF CON 18 CFP closing in two weeks
  • From: The Dark Tangent
• Call for Papers: EC2ND 2010
  • From: Konrad Rieck
• [security bulletin] HPSBMA02534 SSRT090180 rev.1 - HP System Management Homepage (SMH) for Linux and Windows, Remote Unauthorized Information Disclosure, Unauthorized Data Modification, Denial of Service (DoS)
  • From: security-alert
• Re: Vulnerability in 3D user cloud for Joomla
  • From: MustLive
• [security bulletin] HPSBGN02511 SSRT100022 rev.3 - Certain HP Small Form Factor, Microtower and Workstations PC's with Broadcom Integrated NIC Firmware, Remote Execution of Arbitrary Code
  • From: security-alert
• [SECURITY] [DSA 2038-2] New pidgin packages fix regression
  • From: Thijs Kinkhorst
• XSS vulnerability in JComments, Joomla
  • From: advisory
• [ MDVSA-2010:097 ] pidgin
  • From: security
• XSS vulnerability in NPDS REvolution
  • From: advisory
• DoS vulnerabilities in Firefox, Internet Explorer, Chrome, Opera and other browsers
  • From: MustLive
• Security Awareness for kids
  • From: Pete Herzog
• [security bulletin] HPSBOV02497 SSRT090245 rev.3 - HP TCP/IP Services for OpenVMS Running NTP, Remote Execution of Arbitrary Code, Denial of Service (DoS)
  • From: security-alert
• Stored XSS vulnerability in NPDS REvolution
  • From: advisory
• Re: XSS vulnerability in NPDS
  • From: developpeur
• [security bulletin] HPSBMA02535 SSRT100029 rev.1 - HP Performance Manager, Remote Unauthorized Access, Cross Site Scripting (XSS), Denial of Service (DoS)
  • From: security-alert
• MITKRB5-SA-2010-005 [CVE-2010-1321] GSS-API lib null pointer deref
  • From: Tom Yu
• Re: DoS vulnerabilities in Firefox, Internet Explorer, Chrome, Opera and other browsers
  • From: Susan Bradley
• [ MDVSA-2010:099 ] wireshark
  • From: security
• [Suspected Spam][USN-939-1] X.org vulnerabilities
  • From: Kees Cook
• [ MDVSA-2010:098 ] kdenetwork4
  • From: security
• [security bulletin] HPSBUX02523 SSRT100036 rev.1 - HP-UX Running ONCPlus, Remote Denial of Service (DoS), Increase in Privilege
  • From: security-alert
• Metasploit Framework 3.4.0 Released
  • From: HD Moore
• Caucho Technology Resin digest.php Cross Site Scripting Vulnerability
  • From: xuanmumu
• The New ISO Hacking Standard
  • From: Pete Herzog
• [ MDVSA-2010:100 ] krb5
  • From: security
• Secunia Research: Orbit Downloader metalink "name" Directory Traversal
  • From: Secunia Research
• [ MDVSA-2010:101 ] mysql
  • From: security
• Linux Mint 8 mintUpdate Insecure Temporary File Creation
  • From: L4teral
• [ MDVSA-2010:102 ] ghostscript
  • From: security
• [Suspected Spam][USN-940-1] Kerberos vulnerabilities
  • From: Kees Cook
• Re: DoS vulnerabilities in Firefox, Internet Explorer, Chrome, Opera and other browsers
  • From: MustLive
• [Kil13r-SA-20100513] Adobe Flash Player 10.0 Denial Of Service Vulnerability
  • From: unknown user
• Smart Douran CMS Remote File Download
  • From: info
• Re: DoS vulnerabilities in Firefox, Internet Explorer, Chrome, Opera and other browsers
  • From: Susan Bradley
• [HITB-Announce] HITBSecConf2010 - Malaysia Call for Papers
  • From: Hafez Kamal
• [USN-941-1] MoinMoin vulnerability
  • From: Marc Deslauriers
• RE: STP mitm attack idea
  • From: Guillermo Marro Bruno
• XSS bug in US Robotics firmware USR5463-v0_06.bin
  • From: sh4v
• [ MDVSA-2010:082-1 ] clamav
  • From: security
• Re: The New ISO Hacking Standard
  • From: Simon Kilvington
• Multiple vulnerabilities within 3Com* iMC (Intelligent Management Center)
  • From: research
• XSS vulnerability in LiSK CMS
  • From: advisory
• Vulnerability in widget Flash Tag Cloud for Blogsa and other ASP.NET engines
  • From: MustLive
• XSRF (CSRF) in ocPortal
  • From: advisory
• [ MDVSA-2010:104 ] dovecot
  • From: security
• Cacti Multiple Parameter Cross Site Scripting Vulnerabilities
  • From: VUPEN Web Security
• Re: The New ISO Hacking Standard
  • From: Pete Herzog
• PHP-Calendar "description" and "lastaction" Cross Site Scripting Vulnerabilities
  • From: VUPEN Web Security
• [USN-942-1] PostgreSQL vulnerabilities
  • From: Jamie Strandboge
• Mastering Trust in Security Assessments
  • From: Pete Herzog
• XSS vulnerability in LiSK CMS
  • From: advisory
• [ MDVSA-2010:103 ] postgresql
  • From: security
• Month of PHP Security - Summary - 11st May - 21th
  • From: Stefan Esser
• Microsoft Outlook Web Access (OWA) v8.2.254.0 "id" parameter Information Disclosure Vulnerability
  • From: praveen_recker
• OSSTMM 3 based Home Security Vacation Guide v.2!
  • From: Pete Herzog
• PR10-03: Authenticated Cross-Site Scripting (XSS) within the Apache Axis2 administration console
  • From: research
• HP-UX, IBM AIX, SGI IRIX Remote Vulnerability - CVE-2010-1039
  • From: Rodrigo Branco
• XSS vulnerability in gpEasy CMS
  • From: advisory
• SQL injection vulnerability in LiSK CMS
  • From: advisory
• SQL injection vulnerability in LiSK CMS
  • From: advisory
• XSRF (CSRF) in NPDS REvolution
  • From: advisory
• Re: Microsoft Outlook Web Access (OWA) v8.2.254.0 "id" parameter Information Disclosure Vulnerability
  • From: Jabłoński, Paweł
• [Bkis-01-2010] Multiple Vulnerabilities in BigAce - Bkis
  • From: Bkis
• [SECURITY] [DSA 2049-1] New barnowl packages fix arbitrary code execution
  • From: Steffen Joeris
• [SECURITY] [DSA 2048-1] New dvipng packages fix arbitrary code execution
  • From: Sebastien Delafond
• [ MDVSA-2010:105 ] openoffice.org
  • From: security
• Re: IBM Lotus 6.x names.nsf Cross Site Scripting Vulnerability
  • From: security curmudgeon
• [SECURITY] [DSA 2050-1] New kdegraphics packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• CompleteFTP Server v 4.x "PORT" command Remote DOS exploit
  • From: eidelweiss
• Denial of Dervice vulnerability in Helix Mobile Server (RealNetworks) (14.0.0.348) with long string to PluginDirectory in rmserver.cfg file
  • From: praveen_recker
• [SECURITY] [DSA 2051-1] New postgresql-8.3 packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• [ MDVSA-2010:106 ] aria2
  • From: security
• Secunia Research: Ziproxy Two Integer Overflow Vulnerabilities
  • From: Secunia Research
• [SECURITY] [DSA 2052-1] New krb5 packages fix denial of service
  • From: Sebastien Delafond
• [SECURITY] [DSA 2052-1] New krb5 packages fix denial of service
  • From: Thijs Kinkhorst
• Scientific Atlanta DPC2100 WebSTAR Cable Modem vulnerabilities
  • From: Dan Rosenberg
• [SECURITY] [DSA 2053-1] New Linux 2.6.26 packages fix several issues
  • From: dann frazier
• Webby Webserver v1.01 - Buffer overflow vulnerability with overwritten structured exception handler (SEH)
  • From: michael . messner
• Sun Solaris 10 libc/*convert (*cvt) buffer overflow
  • From: cxib
• Ghostscript 8.64 executes random code at startup
  • From: ne01026
• Sun Solaris 10 filesystem rm(1),find(1),etc, Denial-of-service
  • From: cxib
• Sun Solaris 10 ftpd Cross-site request forgery
  • From: cxib
• Hustoj is HUST ACM OnlineJudge "fckeditor" file upload security issue
  • From: eidelweiss
• Vulnerabilities in DS-Syndicate for Joomla
  • From: MustLive
• [Bkis-01-2010] Multiple Vulnerabilities in BigAce - Bkis
  • From: Bkis
• Kingsoft WebShield KAVSafe.sys <= 2010.4.14.609(2010.5.23) Kernel Mode Local Privilege Escalation Vulnerability
  • From: yicong2010
• JV2 Folder Gallery 3.1.1 (popup_slideshow.php) Multiple Vulnerability
  • From: eidelweiss
• New vulnerabilities in plugin DS-Syndicate for Joomla
  • From: MustLive
• rPSA-2010-0039-1 openssl openssl-scripts
  • From: rPath Update Announcements
• Re: Microsoft Outlook Web Access (OWA) v8.2.254.0 "id" parameter Information Disclosure Vulnerability
  • From: info
• London DEFCON May meet - DC4420 - Wed 26th May 2010
  • From: Major Malfunction
• Kingsoft WebShield KAVSafe.sys <= 2010.4.14.609(2010.5.23) Kernel Mode Local Privilege Escalation Vulnerability
  • From: yicong2010
• OSSTMM 3 STAR Released!
  • From: Pete Herzog
• Arbitrary UNC file read in IE 8
  • From: Tim Starling
• SQL injection vulnerability in Zabbix <= 1.8.1
  • From: David Guimaraes
• XSS vulnerability in razorCMS
  • From: advisory
• XSS vulnerability in GetSimple CMS
  • From: advisory
• XSS vulnerability in RuubikCMS
  • From: advisory
• SQL injection vulnerability in 360 Web Manager
  • From: advisory
• XSS vulnerability in 360 Web Manager
  • From: advisory
• SQL injection vulnerability in 360 Web Manager
  • From: advisory
• Flock web browser v2.5.6 (Remote Memory Corrupt) Crash Exploit
  • From: g1xsystem
• [ MDVSA-2010:107 ] mysql
  • From: security
• [Suspected Spam][USN-944-1] GNU C Library vulnerabilities
  • From: Kees Cook
• Re: Ghostscript 8.64 executes random code at startup
  • From: paul . szabo
• Re: Sun Solaris 10 filesystem rm(1),find(1),etc, Denial-of-service
  • From: Casper . Dik
• CfP: GameSec 2010 - 5 days left to the deadline
  • From: Albert Levi
• Re: Ghostscript 8.64 executes random code at startup
  • From: Krzysztof Żelechowski
• Cyberoam SSL VPN Client - Plain-text Storage of Username and Password
  • From: Wasim Halani
• Re: Ghostscript 8.64 executes random code at startup
  • From: paul . szabo
• [ MDVSA-2010:108 ] kolab-horde-framework
  • From: security
• ESA-2010-007: EMC Avamar Denial Of Service Vulnerability
  • From: Security_Alert
• [security bulletin] HPSBGN02315 SSRT071487 rev.1 - HP TestDirector for Quality Center running on AIX, Linux and Solaris, Remote Unauthorized Access
  • From: security-alert
• [ MDVSA-2010:108 ] kolab-horde-framework
  • From: security
• [security bulletin] HPSBMA02442 SSRT090108 rev.1 - HP Business Availability Center Running Apache, Remote Cross Site Scripting (XSS), Cross Site Request Forgery (CSRF), Denial of Service (DoS)
  • From: security-alert
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco Network Building Mediator
  • From: Cisco Systems Product Security Incident Response Team
• [ MDVSA-2010:108 ] kolab-horde-framework
  • From: security
• Static analysis tool exposition (SATE) 2010 Call for participation
  • From: Vadim Okun
• Re: SQL injection vulnerability in 360 Web Manager
  • From: Packet Storm
• Re: Ghostscript 8.64 executes random code at startup
  • From: paul . szabo
• FreeBSD Security Advisory FreeBSD-SA-10:04.jail
  • From: FreeBSD Security Advisories
• FreeBSD Security Advisory FreeBSD-SA-10:05.opie
  • From: FreeBSD Security Advisories
• FreeBSD Security Advisory FreeBSD-SA-10:06.nfsclient
  • From: FreeBSD Security Advisories
• Cross Site URL Hijacking by using Error Object in Mozilla Firefox
  • From: subs
• EUSecWest 2010 MiniCFP (conf Jun 16/17) and PacSec 2010 CFP (conf Nov 10/11, deadline July 30)
  • From: Dragos Ruiu
• [ MDVSA-2010:110 ] clamav
  • From: security
• [ MDVSA-2010:109 ] gtk+2.0
  • From: security
• Re: DoS vulnerabilities in Firefox, Internet Explorer, Chrome, Opera and other browsers
  • From: MustLive
• clearsite Remote File Include Vulnerability
  • From: admin
• [USN-945-1] ClamAV vulnerabilities
  • From: Jamie Strandboge
• VMSA-2010-0009 ESXi ntp and ESX Service Console third party updates
  • From: VMware Security team
• [Suspected Spam]DoS vulnerabilities in Firefox, Internet Explorer, Chrome and Opera
  • From: MustLive
• SQL injection in OSCommerce Add-On Visitor Web Stats
  • From: Christopher Schramm
• Re: Ghostscript 8.64 executes random code at startup
  • From: paul . szabo
• Administrivia: Real domain names in PoC/exploit examples
  • From: dm
• CVE-2010-2020: FreeBSD kernel NFS client local vulnerabilities
  • From: Patroklos Argyroudis
• Re: Administrivia: Real domain names in PoC/exploit examples
  • From: Nate Eldredge
• Re: Administrivia: Real domain names in PoC/exploit examples
  • From: dm
• Re: DoS vulnerabilities in Firefox, Internet Explorer, Chrome, Opera and other browsers
  • From: John Smith
• Re[2]: DoS vulnerabilities in Firefox, Internet Explorer, Chrome, Opera and other browsers
  • From: Vladimir '3APA3A' Dubrovin
• Re: [Suspected Spam]DoS vulnerabilities in Firefox, Internet Explorer, Chrome and Opera
  • From: Susan Bradley
• SQL injection vulnerability in ImpressPages CMS
  • From: advisory
• SQL injection vulnerability in ImpressPages CMS
  • From: advisory
• Re: Re[2]: DoS vulnerabilities in Firefox, Internet Explorer, Chrome, Opera and other browsers
  • From: John Smith
• Groone's Simple Contact Form (abspath) Remote File Inclusion Vulnerability
  • From: g1xsystem
• SQL injection vulnerability in ImpressPages CMS
  • From: advisory
• Re[4]: DoS vulnerabilities in Firefox, Internet Explorer, Chrome, Opera and other browsers
  • From: Vladimir '3APA3A' Dubrovin
• Nginx 0.8.35 Space Character Remote Source Disclosure
  • From: info
• [security bulletin] HPSBUX02523 SSRT100036 rev.2 - HP-UX Running ONCplus rpc.pcnfsd, Remote Denial of Service (DoS), Increase in Privilege
  • From: security-alert
• [Suspected Spam]Vulnerability in ArtDesign CMS
  • From: MustLive
• DM Database Server Memory Corruption Vulnerability
  • From: wsn1983
• IS-2010-001 - Netgear WG602v4 Saved Pass Stack Overflow
  • From: Cristofaro Mune
• GR Board v1.8.6.1 stab (page.php?theme) Remote File Inclusion Vulnerability
  • From: g1xsystem
• Re: Ghostscript 8.64 executes random code at startup
  • From: paul . szabo