Mail Index

• Thread Index

• [ GLSA 201009-09 ] fence: Multiple symlink vulnerabilites
  • From: Stefan Behte
• VMSA-2010-0015 VMware ESX third party updates for Service Console
  • From: VMware Security team
• [SECURITY] [DSA-2115-1] New moodle packages fix several vulnerabilities
  • From: Florian Weimer
• [security bulletin] HPSBMA02558 SSRT100158 rev.3 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code
  • From: security-alert
• ZDI-10-182: IBM TSM FastBack Server FXCLI_OraBR_Exec_Command Remote Code Execution Vulnerabilities
  • From: ZDI Disclosures
• ZDI-10-179: IBM TSM FastBack Mount Service Arbitrary Overwrite Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• JE Guestbook 1.0 Joomla Component Multiple Remote Vulnerabilities
  • From: Salvatore Fresta aka Drosophila
• ZDI-10-185: IBM TSM FastBack Server _Eventlog Format String Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-187: IBM TSM FastBack Server _DAS_ReadBlockReply Remote Denial of Service Vulnerability
  • From: ZDI Disclosures
• ZDI-10-180: IBM TSM FastBack Server _SendToLog Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-184: IBM TSM FastBack Server USER_S_AddADGroup Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-186: IBM TSM FastBack _CalcHashValueWithLength Remote Denial of Service Vulnerability
  • From: ZDI Disclosures
• ZDI-10-181: IBM TSM FastBack Server ActivateLTScriptReply Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-183: IBM TSM FastBack Server FXCLI_checkIndexDBLocation Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [ MDVSA-2010:190 ] libtiff
  • From: security
• Re: XSS vulnerability in Pluck
  • From: security curmudgeon
• THOTCON 0x2 - Call For Papers is Open -> 10.01.10
  • From: THOTCON Announce
• [STANKOINFORMZASCHITA-10-01] Netbiter® webSCADA multiple vulnerabilities
  • From: info
• Re: XSRF (CSRF) in Zimplit
  • From: security curmudgeon
• Multiple vulnerabilities in WordPress 2 and 3
  • From: MustLive
• NetWin Surgemail XSS vulnerability
  • From: kerem . kocaer
• [ MDVSA-2010:191 ] mailman
  • From: security
• ZDI-10-189: Novell eDirectory Server Malformed Index Denial of Service Vulnerability
  • From: ZDI Disclosures
• [ MDVSA-2010:193 ] qt-creator
  • From: security
• Another new technique to bypass SEHOP. ( no 'xor pop pop ret' )
  • From: geinblues
• [ MDVSA-2010:194 ] git
  • From: security
• ZDI-10-190: Novell iManager getMultiPartParameters Arbitrary File Upload Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [ MDVSA-2010:192 ] apr-util
  • From: security
• [STANKOINFORMZASCHITA-10-02] ITS SCADA Authorization bypass
  • From: info
• [ MDVSA-2010:195 ] libesmtp
  • From: security
• OWASP ZAP
  • From: psiinon
• [SECURITY] [DSA-2117-1] New apr-util packages fix denial of service
  • From: Stefan Fritsch
• [IMF 2011] Call for Papers
  • From: Oliver Goebel
• SQL injection vulnerability in Elxis CMS
  • From: advisory
• XSS vulnerability in Docebo Announcements
  • From: advisory
• [SECURITY] [DSA-2116-1] New freetype packages integer overflow
  • From: Stefan Fritsch
• XSS vulnerability in Elxis CMS
  • From: advisory
• XSS vulnerability in Elxis CMS (contacts)
  • From: advisory
• XSS vulnerability in Elxis CMS polls module
  • From: advisory
• [ MDVSA-2010:196 ] dovecot
  • From: security
• Vulnerabilities in CMS WebManager-Pro
  • From: MustLive
• [security bulletin] HPSBTU02496 SSRT090245 rev.1 - HP Tru64 UNIX Running NTP, Denial of Service (DoS)
  • From: security-alert
• MITKRB5-SA-2010-006 [CVE-2010-1322] KDC uninitialized pointer crash in authorization data handling
  • From: Tom Yu
• [Suspected Spam]XSS in Squirrelmail plugin 'Virtual Keyboard' <= 0.9.1
  • From: Moritz Naumann
• [ MDVSA-2010:197 ] postgresql
  • From: security
• [ GLSA 201010-01 ] Libpng: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• [USN-1001-1] LVM2 vulnerability
  • From: Marc Deslauriers
• ZDI-10-191: Adobe Reader ICC Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [USN-999-1] Kerberos vulnerability
  • From: Kees Cook
• ZDI-10-193: Adobe Acrobat Reader Multimedia Playing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-192: Adobe Acrobat Reader ICC mluc Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ESA-2010-018: RSA Security Advisory: RSA, The Security Division of EMC, announces a fix for a potential security vulnerability in RSAR Authentication Client when storing secret key objects on an RSA SecurIDR 800 Authenticator
  • From: Security_Alert
• (CORE-2010-0701) Adobe Acrobat Reader Acrord32.dll Use After Free Vulnerability
  • From: CORE Security Technologies Advisories
• Adobe Reader 9.3.4 Multiple Memory Corruption - Security Advisory - SOS-10-003
  • From: Sense of Security
• HP Data Protector Manager v6.11 / NULL Pointer Dereference Remote Denial of Service Vulnerabilities
  • From: Pepelux
• Syhunt Advisory: Visual Synapse HTTP Server Directory Traversal Vulnerability
  • From: Felipe M. Aragon
• [USN-1003-1] OpenSSL vulnerabilities
  • From: Marc Deslauriers
• [USN-1002-1] PostgreSQL vulnerability
  • From: Marc Deslauriers
• IBWAS'10 CfP - Deadline Extension
  • From: Carlos Serrão
• [USN-1002-2] PostgreSQL vulnerability
  • From: Marc Deslauriers
• XSS in Oracle default fcgi-bin/echo
  • From: paul . szabo
• Directory Traversal Vulnerability in FilterFTP
  • From: advisory
• LFI / RCE vlunerability in Joomla Community Builder Enhenced (CBE) Component
  • From: Delf Tonder
• Directory Traversal Vulnerability in FTP Voyager
  • From: advisory
• XSS vulnerability in Expression CMS
  • From: advisory
• [ MDVSA-2010:198 ] kernel
  • From: security
• XSS vulnerability in Lantern CMS
  • From: advisory
• XSS vulnerability in Lantern CMS
  • From: advisory
• XSS vulnerability in Expression CMS
  • From: advisory
• FIrefox: Bug 602181 – password exposed in memory cache
  • From: Sim IJskes
• OverLook Cross-site Scripting Vulnerability
  • From: advisory
• Re: Multiple Cross Site Scripting (XSS) and SQL injection Vulnerabilities in XRMS, CVE-2008-3664
  • From: gopherit
• [TOOL RELEASE] Exploit Next Generation SQL Fingerprint v.
  • From: Nelson Brito
• [WARNING] A fake version of T50!!!
  • From: Nelson Brito
• [SECURITY] [DSA 2118-1] New subversion packages fix authentication bypass
  • From: Nico Golde
• Joomla! 1.5.20 <= Cross Site Scripting (XSS) Vulnerability
  • From: YGN Ethical Hacker Group
• JS Calendar 1.5.1 Joomla Component Multiple Remote Vulnerabilities
  • From: Salvatore Fresta aka Drosophila
• Vulnerabilities in AltConstructor
  • From: MustLive
• [SECURITY] [DSA-2115-2] New moodle packages fix several vulnerabilities
  • From: Florian Weimer
• Re: JE Guestbook 1.0 Joomla Component Multiple Remote Vulnerabilities
  • From: joomextensions
• [CORE-2010-0624] MS OpenType CFF Parsing Vulnerability
  • From: Core Security Technologies Advisories
• [ MDVSA-2010:199 ] subversion
  • From: security
• [ MDVSA-2010:199 ] subversion
  • From: security
• [SECURITY] [DSA 2116-1] New poppler packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• Collabtive Multiple Vulnerabilities
  • From: Advisory
• ubuntu 10.04 xterm heap overflow,can it be exploit ?
  • From: watercloud watercloud
• DDIVRT-2009-28 Sun Solaris 10 rpc.cmsd Buffer Overflow and Denial of Service (CVE-2010-3509)
  • From: ddivulnalert
• Secunia Research: Microsoft Excel Ghost Record Type Parsing Vulnerability
  • From: Secunia Research
• Internet Explorer Uninitialized Memory Corruption Vulnerability - CVE-2010-3331
  • From: Rodrigo Branco
• [SECURITY] [DSA 2120-1] New postgresql-8.3 packages fix privilege escalation
  • From: Florian Weimer
• IBWAS'10 CfTraining - Deadline Approaching
  • From: Carlos Serrão
• Secunia Research: Microsoft Excel Extra Out of Boundary Record Vulnerability
  • From: Secunia Research
• Secunia Research: Microsoft Excel Record Parsing Integer Overflow Vulnerability
  • From: Secunia Research
• Secunia Research: Microsoft Excel Lotus 1-2-3 File Parsing Vulnerability
  • From: Secunia Research
• XSS vulnerability in Ronny CMS
  • From: advisory
• XSS vulnerability in PluXml
  • From: advisory
• XSS vulnerability in Ronny CMS
  • From: advisory
• Re: ubuntu 10.04 xterm heap overflow,can it be exploit ?
  • From: Dan Rosenberg
• Directory Traversal Vulnerability in FreshFTP
  • From: advisory
• XSS vulnerability in PluXml
  • From: advisory
• [ MDVSA-2010:200 ] wireshark
  • From: security
• XSS vulnerability in PluXml
  • From: advisory
• XSS vulnerability in PluXml
  • From: advisory
• Directory Traversal Vulnerability in AnyConnect
  • From: advisory
• XSS vulnerability in Ronny CMS
  • From: advisory
• XSRF (CSRF) in Lara
  • From: advisory
• [ MDVSA-2010:202 ] krb5
  • From: security
• Directory Traversal Vulnerability in Robo-FTP
  • From: advisory
• RE: [Full-disclosure] XSS in Oracle default fcgi-bin/echo
  • From: Thor (Hammer of God)
• Re: XSS in Oracle default fcgi-bin/echo
  • From: paul . szabo
• [ MDVSA-2010:201 ] freetype2
  • From: security
• [ MDVSA-2010:203 ] automake
  • From: security
• [security bulletin] HPSBUX02351 SSRT080058 rev.5 - HP-UX Running BIND, Remote DNS Cache Poisoning
  • From: security-alert
• R7-0037: SAP BusinessObjects Axis2 Default Admin Password
  • From: HD Moore
• Re: ubuntu 10.04 xterm heap overflow,can it be exploit ?
  • From: dickey
• [security bulletin] HPSBMA02590 SSRT100182 rev.1 - HP Systems Insight Manager (SIM) for HP-UX, Linux, and Windows, Remote Arbitrary File Download
  • From: security-alert
• USBsploit 0.3b
  • From: xpo xpo
• [security bulletin] HPSBPI02398 SSRT080166 rev.6 - Certain HP LaserJet Printers, HP Color LaserJet Printers, and HP Digital Senders, Remote Unauthorized Access to Files
  • From: security-alert
• VUPEN Security Research - Microsoft Office Word Bookmarks Invalid Pointer Vulnerability (CVE-2010-3216)
  • From: VUPEN Security Research
• VUPEN Security Research - Microsoft Office Word Document Array Indexing Vulnerability (CVE-2010-2750)
  • From: VUPEN Security Research
• VUPEN Security Research - Microsoft Office Excel Formula Substream Memory Corruption (CVE-2010-3234)
  • From: VUPEN Security Research
• VUPEN Security Research - Microsoft Office Excel RealTimeData Array Indexing Vulnerability (CVE-2010-3240)
  • From: VUPEN Security Research
• VUPEN Security Research - Microsoft Office Word Return Value Handling Vulnerability (CVE-2010-3215)
  • From: VUPEN Security Research
• VUPEN Security Research - Microsoft Office Word Document Invalid Pointer Vulnerability (CVE-2010-3217)
  • From: VUPEN Security Research
• VUPEN Security Research - Microsoft Office Excel Record Array Indexing Vulnerability (CVE-2010-3236)
  • From: VUPEN Security Research
• VUPEN Security Research - Microsoft Office Word Document Stack Overflow Vulnerability (CVE-2010-3214)
  • From: VUPEN Security Research
• VUPEN Security Research - Microsoft Office Excel Formula Record Dangling Pointer Vulnerability (CVE-2010-3235)
  • From: VUPEN Security Research
• VUPEN Security Research - Microsoft Office Word Document Heap Overflow Vulnerability (CVE-2010-3218)
  • From: VUPEN Security Research
• VUPEN Security Research - Microsoft Office Word BKF Objects Array Indexing Vulnerability (CVE-2010-3219)
  • From: VUPEN Security Research
• VUPEN Security Research - Microsoft Office Excel Extra PtgExtraArray Parsing Vulnerability (CVE-2010-3239)
  • From: VUPEN Security Research
• VUPEN Security Research - Microsoft Office Excel Formula Record Buffer Overflow Vulnerability (CVE-2010-3231)
  • From: VUPEN Security Research
• VUPEN Security Research - Microsoft Office Word LVL Structure Heap Overflow Vulnerability (CVE-2010-3220)
  • From: VUPEN Security Research
• VUPEN Security Research - Microsoft Office Word Short Sign Memory Corruption Vulnerability (CVE-2010-3221)
  • From: VUPEN Security Research
• VUPEN Security Research - Microsoft Office Excel Ghost Record Type Parsing Vulnerability (CVE-2010-3242)
  • From: VUPEN Security Research
• VUPEN Security Research - Microsoft Office Word Document Buffer Overflow Vulnerability (CVE-2010-2748)
  • From: VUPEN Security Research
• VUPEN Security Research - Microsoft Office Excel Out-of-Bounds Memory Write Vulnerability (CVE-2010-3241)
  • From: VUPEN Security Research
• VUPEN Security Research - Oracle Products HTTP Request Remote Buffer Overflow Vulnerability (CVE-2010-2390)
  • From: VUPEN Security Research
• Shmoocon 2011 Call for Papers
  • From: Bruce Potter
• VUPEN Security Research - Microsoft Office Excel Negative Future Function Vulnerability (CVE-2010-3238)
  • From: VUPEN Security Research
• [security bulletin] HPSBGN02589 SSRT100296 rev.1 - HP ProCurve Access Points, Access Controllers, and Mobility Controllers, Privilege Escalation
  • From: security-alert
• CORE-2010-0517 - Microsoft Office HtmlDlgHelper class memory corruption
  • From: CORE Security Technologies Advisories
• VUPEN Security Research - Microsoft Office Word Uninitialized Pointer Vulnerability (CVE-2010-2747)
  • From: VUPEN Security Research
• VUPEN Security Research - Microsoft Office Excel Merge Cell Record Invalid Pointer Vulnerability (CVE-2010-3237)
  • From: VUPEN Security Research
• [ MDVSA-2010:204 ] avahi
  • From: security
• [ MDVSA-2010:205 ] freeciv
  • From: security
• RE: [Full-disclosure] XSS in Oracle default fcgi-bin/echo
  • From: paul . szabo
• RE: [Full-disclosure] XSS in Oracle default fcgi-bin/echo
  • From: Thor (Hammer of God)
• RE: [Full-disclosure] XSS in Oracle default fcgi-bin/echo
  • From: paul . szabo
• H2HC 2009 Videos Available!
  • From: Rodrigo Rubira Branco (BSDaemon)
• [USN-1004-1] Django vulnerability
  • From: Jamie Strandboge
• Re: [SquirrelMail-Security] XSS in Squirrelmail plugin 'Virtual Keyboard' <= 0.9.1
  • From: Moritz Naumann
• Re: [Full-disclosure] XSS in Oracle default fcgi-bin/echo
  • From: Riyaz Walikar
• Re: RE: [Full-disclosure] XSS in Oracle default fcgi-bin/echo
  • From: an
• rPSA-2010-0058-1 bzip2 bzip2-extras
  • From: rPath Update Announcements
• rPSA-2010-0059-1 kernel
  • From: rPath Update Announcements
• Re: [SquirrelMail-Security] XSS in Squirrelmail plugin 'Virtual Keyboard' <= 0.9.1
  • From: Paul Lesniewski
• rPSA-2010-0060-1 httpd mod_ssl
  • From: rPath Update Announcements
• rPSA-2010-0063-1 perl
  • From: rPath Update Announcements
• rPSA-2010-0064-1 libtiff
  • From: rPath Update Announcements
• rPSA-2010-0065-1 krb5 krb5-server krb5-services krb5-workstation
  • From: rPath Update Announcements
• rPSA-2010-0066-1 samba samba-client samba-server samba-swat
  • From: rPath Update Announcements
• Secunia Research: RealPlayer QCP Sample Chunk Parsing Buffer Overflow
  • From: Secunia Research
• Accounting Pro 2003 Insecure Library Loading Vulnerability
  • From: apa-iutcert
• Rafe 7 Insecure Library Loading Vulnerability
  • From: apa-iutcert
• Brilliant Accounting System (59) Insecure Library Loading Vulnerability
  • From: apa-iutcert
• Sahar Money Manager Insecure Library Loading Vulnerability
  • From: apa-iutcert
• Holoo Insecure Library Loading Vulnerability
  • From: apa-iutcert
• Xilisoft Video Converter Ultimate Insecure Library Loading Vulnerability
  • From: apa-iutcert
• Antivirus detection after malware execution
  • From: jason
• Re: RE: [Full-disclosure] XSS in Oracle default fcgi-bin/echo
  • From: paul . szabo
• H2HC Cancun - Registrations are open
  • From: Rodrigo Rubira Branco (BSDaemon)
• Security-Assessment.com Advisory: Oracle JRE - java.net.URLConnection class - Same-of-Origin (SOP) Policy Bypass
  • From: Roberto Suggi Liverani
• Re: [Full-disclosure] XSS in Oracle default fcgi-bin/echo
  • From: paul . szabo
• [USN-1005-1] poppler vulnerabilities
  • From: Marc Deslauriers
• [USN-1006-1] WebKit vulnerabilities
  • From: Marc Deslauriers
• The GNU C library dynamic linker expands $ORIGIN in setuid library search path
  • From: Tavis Ormandy
• Re: Insecure SMS authorization scheme at LiqPAY micro-payments of PrivatBank (Ukraine)
  • From: MustLive
• VSR Advisories: Linux RDS Protocol Local Privilege Escalation
  • From: VSR Advisories
• SQL injection in DeluxeBB
  • From: advisory
• [SECURITY] [DSA 2121-1] New TYPO3 packages fix several vulnerabilities
  • From: Florian Weimer
• Path disclosure in Tribiq CMS
  • From: advisory
• SQL Injection in 4site CMS
  • From: advisory
• XSS vulnerability in sNews
  • From: advisory
• XSS vulnerability in sNews
  • From: advisory
• Re: VSR Advisories: Linux RDS Protocol Local Privilege Escalation
  • From: Dan Rosenberg
• Re: [Full-disclosure] Security-Assessment.com Advisory: Oracle JRE - java.net.URLConnection class - Same-of-Origin (SOP) Policy Bypass
  • From: Dan Kaminsky
• [CORE-2010-0819] LibSMI smiGetNode Buffer Overflow When Long OID Is Given In Numerical Form
  • From: CORE Security Technologies Advisories
• Re: Security-Assessment.com Advisory: Oracle JRE - java.net.URLConnection class - Same-of-Origin (SOP) Policy Bypass
  • From: Mike Duncan
• Re: [Full-disclosure] Security-Assessment.com Advisory: Oracle JRE - java.net.URLConnection class - Same-of-Origin (SOP) Policy Bypass
  • From: Michal Zalewski
• Re: Security-Assessment.com Advisory: Oracle JRE - java.net.URLConnection class - Same-of-Origin (SOP) Policy Bypass
  • From: Michal Zalewski
• [USN-1007-1] NSS vulnerabilities
  • From: Jamie Strandboge
• Wiccle Web Builder CMS and iWiccle CMS Community Builder Multiple XSS Vulnerabilities
  • From: SecPod Research
• [USN-997-1] Firefox and Xulrunner vulnerabilities
  • From: Jamie Strandboge
• [ MDVSA-2010:208 ] pidgin
  • From: security
• [SecurityArchitect-009]: Microsoft Windows Mobile Double Free Vulnerability
  • From: karakorsankara
• [USN-998-1] Thunderbird vulnerabilities
  • From: Jamie Strandboge
• [ MDVSA-2010:207 ] glibc
  • From: security
• Re: Security-Assessment.com Advisory: Oracle JRE - java.net.URLConnection class - Same-of-Origin (SOP) Policy Bypass
  • From: Roberto Suggi Liverani
• Micro CMS Persistent XSS Vulnerability.
  • From: SecPod Research
• [security bulletin] HPSBMA02592 SSRT100300 rev.1 - HP Systems Insight Manager (SIM) for HP-UX, Linux, and Windows Running Adobe Flash, Remote Execution of Arbitrary Code, Denial of Service (DoS), Unauthorized Modification
  • From: security-alert
• Re: [Full-disclosure] Security-Assessment.com Advisory: Oracle JRE - java.net.URLConnection class - Same-of-Origin (SOP) Policy Bypass
  • From: Early Warning
• Pecio CMS XSS Vulnerability
  • From: SecPod Research
• SEC Consult SA-20101021-0 :: Multiple critical vulnerabilities in Sawmill log analysis software
  • From: Johannes Greil
• [security bulletin] HPSBMA02591 SSRT100299 rev.1 - HP Systems Insight Manager (SIM) for HP-UX, Linux, and Windows, Remote Cross Site Request Forgery (CSRF), Cross Site Scripting (XSS), Privilege Escalation
  • From: security-alert
• Java Multiple Issues
  • From: Early Warning
• [security bulletin] HPSBMA02596 SSRT100271 rev.1 - HP AssetCenter and HP AssetManager for AIX, HP-UX, Linux, Solaris and Windows , Remote Cross Site Scripting (XSS)
  • From: security-alert
• Re: Security-Assessment.com Advisory: Oracle JRE - java.net.URLConnection class - Same-of-Origin (SOP) Policy Bypass
  • From: Mike Duncan
• [USN-1008-1] libvirt vulnerabilities
  • From: Jamie Strandboge
• [USN-1008-2] Virtinst update
  • From: Jamie Strandboge
• [security bulletin] HPSBMA02593 SSRT100237 rev.1 - HP Virtual Connect Enterprise Manager (VCEM) for Windows, Remote Arbitrary File Download
  • From: security-alert
• [ MDVSA-2010:209 ] libsmi
  • From: security
• [SECURITY] [DSA 2122-1] New glibc packages fix local privilege escalation
  • From: Florian Weimer
• [USN-1008-3] libvirt update
  • From: Jamie Strandboge
• [ MDVSA-2010:212 ] glibc
  • From: security
• [ MDVSA-2010:210 ] firefox
  • From: security
• IPv6 security myths
  • From: Fernando Gont
• [ MDVSA-2010:211 ] mozilla-thunderbird
  • From: security
• The GNU C library dynamic linker will dlopen arbitrary DSOs during setuid loads.
  • From: Tavis Ormandy
• Vulnerabilities in W-Agora
  • From: MustLive
• Re: MULTIPLE REMOTE SQL INJECTION VULNERABILITIES---MIM:InfiniX v1.2.003--->
  • From: robi
• [USN-1009-1] GNU C Library vulnerabilities
  • From: Kees Cook
• Aardvark Topsite XSS vulnerability
  • From: Yam Mesicka
• How Visual Studio Makes Your Applications Vulnerable to Binary Planting
  • From: ACROS Security Lists
• [USN-959-2] PAM vulnerability
  • From: Kees Cook
• [security bulletin] HPSBGN02333 SSRT080031 rev.2 - HP Software Update HPeDiag Running on Windows, Remote Disclosure of Information and Execution of Arbitrary Code
  • From: security-alert
• RE: RE: [Full-disclosure] Windows Vista/7 lpksetup dll hijack
  • From: Thor (Hammer of God)
• [security bulletin] HPSBMA02598 SSRT100314 rev.1 - HP Insight Control Virtual Machine Management for Windows, Remote Cross Site Scripting (XSS), Privilege Escalation, Cross Site Request Forgery (CSRF).
  • From: security-alert
• RE: [Full-disclosure] Windows Vista/7 lpksetup dll hijack
  • From: ACROS Security Lists
• [security bulletin] HPSBMA02597 SSRT100198 rev.1 - HP Version Control Repository Manager (VCRM) for Windows, Remote Cross Site Scripting (XSS)
  • From: security-alert
• Re: Web challenges from RootedCON'2010 CTF - Contest -> Solutions and Write-ups
  • From: Roman Medina-Heigl Hernandez
• Re: IPv6 security myths
  • From: Fernando Gont
• [security bulletin] HPSBMA02599 SSRT100235 rev.1 - HP Virtual Server Environment for Windows, Remote Arbitrary File Download
  • From: security-alert
• [security bulletin] HPSBMA02601 SSRT100316 rev.1 - HP Insight Control Server Migration for Windows, Remote Cross Site Scripting (XSS), Privilege Escalation, Unauthorized Access
  • From: security-alert
• RE: How Visual Studio Makes Your Applications Vulnerable to Binary Planting
  • From: Michael Wojcik
• [security bulletin] HPSBMA02603 SSRT100319 rev.1 - HP Insight Control Power Management for Windows, Remote Cross Site Scripting (XSS), Cross Site Request Forgery (CSRF)
  • From: security-alert
• RE: RE: [Full-disclosure] Windows Vista/7 lpksetup dll hijack
  • From: Jann Horn
• RE: RE: [Full-disclosure] Windows Vista/7 lpksetup dll hijack
  • From: Thor (Hammer of God)
• RE: [vonage.com #25400427] RE: How Visual Studio Makes Your Applications Vulnerable to Binary Planting
  • From: Mitja Kolsek
• SQL injection in BloofoxCMS registration plugin
  • From: advisory
• LFI in Novaboard
  • From: advisory
• XSRF (CSRF) in Zomplog
  • From: advisory
• ACDSee Photo Manager Insecure Library Loading Vulnerability
  • From: apa-iutcert
• Secunia Research: Winamp VP6 Content Parsing Buffer Overflow Vulnerability
  • From: Secunia Research
• rPSA-2010-0072-1 curl
  • From: rPath Update Announcements
• FlipAlbum Vista Pro Insecure Library Loading Vulnerability
  • From: apa-iutcert
• rPSA-2010-0075-1 sudo
  • From: rPath Update Announcements
• Internet Download Manager Insecure Library Loading Vulnerability
  • From: apa-iutcert
• [DSECRG-09-029] Oracle BI Publisher Enterprise 10 - Response Splitting
  • From: DSecRG
• Nessus Client Insecure Library Loading Vulnerability
  • From: apa-iutcert
• Orbit Downloader Insecure Library Loading Vulnerability
  • From: apa-iutcert
• SQL injection in Energine
  • From: advisory
• rPSA-2010-0073-1 lftp
  • From: rPath Update Announcements
• XSS vulnerability in BlogBird platform
  • From: advisory
• LFI in DZCP
  • From: advisory
• Authentication bypass in phpLiterAdmin
  • From: advisory
• [security bulletin] HPSBMI02582 SSRT100269 rev.1 - Palm webOS Camera Application, Unauthorized Write Access
  • From: security-alert
• [DSECRG-09-032] Oracle Application Server - Linked XSS vulnerability
  • From: DSecRG
• Cisco Security Advisory: CiscoWorks Common Services Arbitrary Code Execution Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Stored XSS vulnerability in Zomplog
  • From: advisory
• rPSA-2010-0070-1 cpio tar
  • From: rPath Update Announcements
• AlstraSoft E-Friends 4.96 Multiple Remote Vulnerabilities
  • From: Salvatore Fresta aka Drosophila
• XSS vulnerability in Zomplog
  • From: advisory
• [security bulletin] HPSBMI02580 SSRT100254 rev.1 - Palm webOS, Code execution vulnerability in Palm webOS service API
  • From: security-alert
• SQL injection in DBHcms
  • From: advisory
• WinMerge Insecure Library Loading Vulnerability
  • From: apa-iutcert
• XSS vulnerability in Zomplog
  • From: advisory
• Breaking The SetDllDirectory Protection Against Binary Planting
  • From: ACROS Security Lists
• Information disclosure in BloofoxCMS
  • From: advisory
• Information disclosure in BloofoxCMS
  • From: advisory
• CVE-2010-3700: Spring Security bypass of security constraints
  • From: s2-security
• USBsploit 0.4b - added: Auto[run|play] USB infection & PDF
  • From: xpo xpo
• "Back with another one of those block rockin' beats"
  • From: Henri Lindberg
• [security bulletin] HPSBST02595 SSRT1000303 rev.1 - HP Storage Essentials Using LDAP, Remote Unauthenticated Access
  • From: security-alert
• [security bulletin] HPSBST02595 SSRT1000303 rev.1 - HP Storage Essentials Using LDAP, Remote Unauthenticated Access
  • From: security-alert
• [security bulletin] HPSBMI02573 SSRT100227 rev.1 - Palm webOS, webOS Doc Viewer, Execution of Arbitrary Code
  • From: security-alert
• [security bulletin] HPSBMA02533 SSRT080049 rev.1 - HP LoadRunner Web Tours 9.10 Remote Denial of Service
  • From: security-alert
• Secunia PSI Insecure Library Loading Vulnerability
  • From: apa-iutcert
• MyCart 2.0 Multiple Remote Vulnerabilities
  • From: Salvatore Fresta aka Drosophila
• Re: Nessus Client Insecure Library Loading Vulnerability
  • From: Renaud Deraison
• Path disclosure in MyBB
  • From: advisory
• rPSA-2010-0071-1 automake
  • From: rPath Update Announcements
• rPSA-2010-0074-1 ImageMagick
  • From: rPath Update Announcements
• XSS vulnerability in BlogBird platform
  • From: advisory
• XSS in NinkoBB
  • From: advisory
• [USN-1011-1] Firefox vulnerability
  • From: Jamie Strandboge
• Re: Secunia PSI Insecure Library Loading Vulnerability
  • From: Jakob Balle
• [ MDVSA-2010:213 ] xulrunner
  • From: security
• nSense-2010-002: Teamspeak 2 Windows client
  • From: Henri Lindberg
• [USN-1011-2] Thunderbird vulnerability
  • From: Jamie Strandboge