Mail Index

• Thread Index

• [USN-1011-3] Xulrunner vulnerability
  • From: Jamie Strandboge
• Secunia Research: Adobe Shockwave Player "pamm" Chunk Parsing Vulnerability
  • From: Secunia Research
• Secunia Research: Adobe Shockwave Player "DEMX" Chunk Parsing Vulnerability
  • From: Secunia Research
• Secunia Research: SonicWALL SSL-VPN End-Point ActiveX Control Buffer Overflow
  • From: Secunia Research
• [security bulletin] HPSBMA02602 SSRT100317 rev.1 - HP Insight Control Performance Management for Windows, Remote Cross Site Scripting (XSS), Privilege Escalation, Cross Site Request Forgery (CSRF)
  • From: security-alert
• [security bulletin] HPSBMA02605 SSRT100238 rev.1 - HP Insight Managed System Setup Wizard for Windows, Remote Arbitrary File Download
  • From: security-alert
• [security bulletin] HPSBMA02604 SSRT100320 rev.1 - HP Insight Recovery for Windows, Remote Cross Site Scripting (XSS), Arbitrary File Download
  • From: security-alert
• [security bulletin] HPSBMA02600 SSRT100239 rev.1 - HP Insight Control Performance Management for Windows, Remote Arbitrary File Download
  • From: security-alert
• [security bulletin] HPSBMA02606 SSRT100321 rev.1 - HP Insight Orchestration Software for Windows, Remote Arbitrary File Download, Unauthorized Access
  • From: security-alert
• [ MDVSA-2010:219 ] mozilla-thunderbird
  • From: security
• [security bulletin] HPSBMA02607 SSRT100214 rev.1 - HP Insight Control for Linux, Remote Cross Site Request Forgery (CSRF)
  • From: security-alert
• [security bulletin] HPSBMA02598 SSRT100314 rev.2 - HP Insight Control Virtual Machine Management for Windows, Remote Cross Site Scripting (XSS), Denial of Service (DoS), Cross Site Request Forgery (CSRF)
  • From: security-alert
• Audacity <= 1.3 Beta Multiple Local Vulnerabilities
  • From: Salvatore Fresta aka Drosophila
• H2HC 2010 - Final Speakers List Available
  • From: Rodrigo Rubira Branco (BSDaemon)
• [DEMO] Sample videos about IDS/IPS evasions...
  • From: Nelson Brito
• [ MDVSA-2010:218 ] php
  • From: security
• Revision: Audacity <= 1.3 Beta Multiple Local Vulnerabilities ===> Audacity <= 1.3 Beta DLL Hijacking Vulnerability
  • From: Salvatore Fresta aka Drosophila
• [ MDVSA-2010:214 ] kernel
  • From: security
• [ MDVSA-2010:215 ] python
  • From: security
• [ MDVSA-2010:216 ] python
  • From: security
• Adobe Shockwave Player Memory Corruption Vulnerability - CVE-2010-4086
  • From: Rodrigo Branco
• cforms WordPress Plugin Cross Site Scripting Vulnerability - CVE-2010-3977
  • From: Rodrigo Branco
• Adobe Shockwave Player Memory Corruption Vulnerability - CVE-2010-4088
  • From: Rodrigo Branco
• Adobe Shockwave Player Memory Corruption Vulnerability - CVE-2010-4087
  • From: Rodrigo Branco
• [ MDVSA-2010:217 ] dovecot
  • From: security
• Adobe Shockwave Player Memory Corruption Vulnerability - CVE-2010-4089
  • From: Rodrigo Branco
• XSS and SQL Injection vulnerabilities in CMS WebManager-Pro
  • From: MustLive
• 'WSN Links' SQL Injection Vulnerability (CVE-2010-4006)
  • From: Mark Stanislav
• Joomla 1.5.21 | Potential SQL Injection Flaws
  • From: YGN Ethical Hacker Group
• Call for Papers -YSTS V - Security Conference, Brazil
  • From: Luiz Eduardo
• Call for Papers: The International Conference on Cyber Conflict, Estonia
  • From: k g
• [SECURITY] [DSA 2123-1] New NSS packages fix cryptographic weaknesses
  • From: Florian Weimer
• [SECURITY] [DSA 2124-1] New Xulrunner packages fix several vulnerabilities
  • From: Florian Weimer
• Security-Assessment.com Advisory: BroadWorks Call Detail Record Disclosure Vulnerability
  • From: Nick Freeman
• Stored XSS (Cross Site Scripting) vulnerability in MemHT Portal
  • From: advisory
• XSS vulnerability in Kandidat CMS
  • From: advisory
• Stored XSS vulnerability in Webmedia Explorer
  • From: advisory
• XSS vulnerability in Kandidat CMS
  • From: advisory
• XSS vulnerability in MemHT Portal
  • From: advisory
• XSS vulnerability in MemHT Portal
  • From: advisory
• XSS vulnerability in Kandidat CMS
  • From: advisory
• [Onapsis Security Advisory 2010-009] Oracle Virtual Server Agent Remote Command Execution
  • From: Onapsis Research Labs
• [ MDVSA-2010:202-1 ] krb5
  • From: security
• [Onapsis Security Advisory 2010-010] Oracle Virtual Server Agent Local Privilege Escalation
  • From: Onapsis Research Labs
• [Onapsis Security Advisory 2010-008] Oracle Virtual Server Agent Arbitrary File Access
  • From: Onapsis Research Labs
• CVE-2010-3863: Apache Shiro information disclosure vulnerability
  • From: Les Hazlewood
• Re: [WEB SECURITY] [TOOL] DotDotPwn v2.1 - The Directory Traversal Fuzzer
  • From: neza0x
• Zen Cart 1.3.9h Local File Inclusion Vulnerability
  • From: Salvatore Fresta aka Drosophila
• Security Advisory for Bugzilla 3.2.8, 3.4.8, 3.6.2, and 3.7.3
  • From: Max Kanat-Alexander
• Adsoft Remote Sql Injection Vulnerability
  • From: md . r00t . defacer
• BBcode XSS in MiniBB
  • From: advisory
• SQL injection in SweetRice CMS
  • From: advisory
• RFI in JAF CMS
  • From: advisory
• Shell create & command execution in JAF CMS
  • From: advisory
• XSS in SweetRice CMS
  • From: advisory
• Reset admin password in SweetRice CMS
  • From: advisory
• SQL injection in MiniBB
  • From: advisory
• XSS in Textpattern CMS
  • From: advisory
• LFI in eoCMS
  • From: advisory
• Path disclosure in eoCMS
  • From: advisory
• SQL injection in eoCMS
  • From: advisory
• LFI in eoCMS
  • From: advisory
• BBcode XSS in eoCMS
  • From: advisory
• [ MDVSA-2010:220 ] pam
  • From: security
• Re: [WEB SECURITY] [TOOL] DotDotPwn v2.1 - The Directory Traversal Fuzzer
  • From: Arturo 'Buanzo' Busleiman
• [USN-1012-1] CUPS vulnerability
  • From: Marc Deslauriers
• [USN-1013-1] FreeType vulnerabilities
  • From: Marc Deslauriers
• [USN-1014-1] Pidgin vulnerabilities
  • From: Marc Deslauriers
• ASPR #2010-11-05-01: Remote Binary Planting in Adobe Flash Player
  • From: ACROS Security Lists
• Common consumer routers password disclosure
  • From: danieljcrteixeira
• [FG-VD-10-020]Adobe Flash Player Remote Memory corruption Vulnerability
  • From: xpzhang
• Re: [Full-disclosure] Joomla 1.5.21 | Potential SQL Injection Flaws
  • From: YGN Ethical Hacker Group
• Angel LMS Exploit
  • From: Wesley Kerfoot
• Wargame Qualifications - Win a car !!!
  • From: Ivan Buetler
• nSense-2010-003: Cisco Unified Communications Manager
  • From: Henri Lindberg
• [ MDVSA-2010:221 ] openoffice.org
  • From: security
• CFP: DIMVA 2011 - Detection of Intrusions and Malware & Vulnerability Assessment
  • From: Konrad Rieck
• Vulnerabilities in PHPShop
  • From: MustLive
• some ooold Juniper bugs (was: [Full-disclosure] ZDI-10-231: Juniper Secure Access Series meeting_testjava.cgi XSS Vulnerability)
  • From: Michal Zalewski
• Spree e-commerce JSON Hijacking Vulnerabilities - CVE-2010-3978
  • From: Rodrigo Branco
• Seo Panel 2.1.0 - Critical File Disclosure
  • From: advisories
• Malware Collections and Feed Exchange
  • From: Rodrigo Rubira Branco (BSDaemon)
• [ MDVSA-2010:155-1 ] mysql
  • From: security
• Re: Seo Panel 2.1.0 - Critical File Disclosure
  • From: Zach C
• DIMVA 2011 Call for Workshops Proposals
  • From: Lorenzo Cavallaro
• Hackito Ergo Sum 2011 - Call For Paper - HES2011 CFP
  • From: Philippe Langlois
• [CORE-2010-0825] Apple OS X ATSServer CFF CharStrings INDEX Sign Mismatch
  • From: CORE Security Technologies Advisories
• D-Link DIR-300 authentication bypass
  • From: Karol Celiński
• JQuarks4s Joomla Component 1.0.0 Blind SQL Injection Vulnerability
  • From: Salvatore Fresta aka Drosophila
• IBM OmniFind - several vulnerabilities
  • From: Fatih Kilic
• [USN-1008-4] libvirt regression
  • From: Jamie Strandboge
• Secunia Research: Microsoft PowerPoint PP7X32.DLL Record Parsing Vulnerability
  • From: Secunia Research
• [ MDVSA-2010:223 ] mysql
  • From: security
• [ MDVSA-2010:222 ] mysql
  • From: security
• Re: D-Link DIR-300 authentication bypass
  • From: Karol Celiński
• Secunia Research: Microsoft Office Drawing Shape Container Parsing Vulnerability
  • From: Secunia Research
• [ MDVSA-2010:225 ] libmbfl
  • From: security
• iDefense Security Advisory 11.09.10: Microsoft Word RTF File Parsing Stack Buffer Overflow Vulnerability
  • From: labs-no-reply
• ASPR #2010-11-10-1: Remote Binary Planting in Microsoft PowerPoint 2010
  • From: ACROS Security Lists
• [ MDVSA-2010:224 ] php
  • From: security
• [ MDVSA-2010:225-1 ] libmbfl
  • From: security
• ASPR #2010-11-10-3: Remote Binary Planting in Microsoft Excel 2010
  • From: ACROS Security Lists
• Kernel 0-day
  • From: Dan Rosenberg
• ASPR #2010-11-10-2: Remote Binary Planting in Microsoft Word 2010
  • From: ACROS Security Lists
• [USN-1015-1] libvpx vulnerability
  • From: Jamie Strandboge
• Babylon Cross-Application Scripting Code Execution
  • From: Roee Hay
• [ MDVSA-2010:226 ] dhcp
  • From: security
• eBlog 1.7 Multiple SQL Injection Vulnerabilities
  • From: Salvatore Fresta aka Drosophila
• Re: Kernel 0-day
  • From: James Lay
• Vulnerability in Google AJAX Search
  • From: MustLive
• Apple Directory Services Memory Corruption - CVE-2010-1840
  • From: Rodrigo Branco
• Secunia Research: QuickTime Sorenson Video 3 Array-Indexing Vulnerability
  • From: Secunia Research
• [USN-1017-1] MySQL vulnerabilities
  • From: Marc Deslauriers
• Additional information on the Microsoft Office 2010 binary planting bugs
  • From: ACROS Security Lists
• CORE-2010-1018 - Landesk OS command injection
  • From: CORE Security Technologies Advisories
• [TEHTRI-Security] CVE-2010-1752: Update your MacOSX
  • From: Laurent OUDOT at TEHTRI-Security
• FreeBSD Security Advisory FreeBSD-SA-10:09.pseudofs
  • From: FreeBSD Security Advisories
• iDefense Security Advisory 11.11.10: Apple Mobile OfficeImport Framework Excel Parsing Memory Corruption Vulnerability
  • From: labs-no-reply
• [HITB-Announce] HITB Magazine #5 Call for Articles
  • From: Hafez Kamal
• [USN-1016-1] libxml2 vulnerability
  • From: Jamie Strandboge
• [ MDVSA-2010:227 ] proftpd
  • From: security
• Re: D-Link DIR-300 authentication bypass
  • From: mfardiles
• [ MDVSA-2010:228 ] xpdf
  • From: security
• [ MDVSA-2010:229 ] kdegraphics
  • From: security
• [ MDVSA-2010:231 ] poppler
  • From: security
• [ MDVSA-2010:230 ] poppler
  • From: security
• [SECURITY] [DSA 2038-3] New pidgin packages fix regression
  • From: Thijs Kinkhorst
• vBulletin 4.0.8 - Persistent XSS via Profile Customization
  • From: advisories
• TWSL2010-006: Multiple Vulnerabilities in Camtron CMNC-200 IP Camera
  • From: Trustwave Advisories
• Re: D-Link DIR-300 authentication bypass
  • From: asmo
• Saved XSS vulnerability in Internet Explorer
  • From: MustLive
• Packet Storm - New Site
  • From: bugtraq
• Eclipse IDE | Help Server Local Cross Site Scripting (XSS) Vulnerability
  • From: YGN Ethical Hacker Group
• VMSA-2010-0016 VMware ESXi and ESX third party updates for Service Console and Likewise components
  • From: VMware Security team
• [ MDVSA-2010:235 ] freetype2
  • From: security
• [security bulletin] HPSBPI02575 SSRT090255 rev.1 - HP LaserJet MFP Printers, HP Color LaserJet MFP Printers, Certain HP LaserJet Printers, Remote Unauthorized Access to Files
  • From: security-alert
• [ MDVSA-2010:234 ] cups
  • From: security
• LFI and XSS vulnerability in openEngine
  • From: SecPod Research
• Quick update on Google Chrome's Math.random() predictability by Amit Klein, Trusteer
  • From: Amit Klein
• [ GLSA 201011-01 ] GNU C library: Multiple vulnerabilities
  • From: Tobias Heinlein
• [ MDVSA-2010:236 ] freetype2
  • From: security
• [ MDVSA-2010:233 ] cups
  • From: security
• [ MDVSA-2010:237 ] perl-CGI
  • From: security
• [ MDVSA-2010:232 ] cups
  • From: security
• Path disclosure in IceBB
  • From: advisory
• Information disclosure in IceBB
  • From: advisory
• BBcode XSS in CLANSPHERE
  • From: advisory
• Path disclosure in CLANSPHERE
  • From: advisory
• Cisco Unified Videoconferencing multiple vulnerabilities - CVE-2010-3037 CVE-2010-3038
  • From: Florent Daigniere
• XSS in CLANSPHERE
  • From: advisory
• SQL Injection in CLANSPHERE
  • From: advisory
• SQL injection in CompactCMS
  • From: advisory
• Cisco Security Response: Multiple Vulnerabilities in Cisco Unified Videoconferencing Products
  • From: Cisco Systems Product Security Incident Response Team
• Information disclosure in IceBB
  • From: advisory
• SQL injection in IceBB
  • From: advisory
• nullcon Goa dwitiya (2.0) Call For Papers Closing on 30th November
  • From: nullcon
• AWCM v2.2 Auth Bypass Vulnerabilities
  • From: eidelweiss
• [ MDVSA-2010:238 ] openssl
  • From: security
• Re: Kernel 0-day
  • From: Felipe Martins
• Multiple vulnerabilities in chCounter <= 3.1.3
  • From: Soporte CERT
• XSS in CompactCMS
  • From: advisory
• XSS in CompactCMS
  • From: advisory
• [HITB-Announce] HITB2011AMS -- Call For Papers now Open
  • From: Hafez Kamal
• VUPEN Security Research - Apple Safari Selections Handling Use-after-free Vulnerability (VUPEN-SR-2010-246)
  • From: VUPEN Security Research
• H2CSO (Hackers to CSO) debate second edition - Free Live Streaming
  • From: Rodrigo Rubira Branco (BSDaemon)
• Re: Kernel 0-day
  • From: Dan Rosenberg
• Re: Saved XSS vulnerability in Internet Explorer
  • From: ecco
• VUPEN Security Research - Apple Safari Scrollbar Handling Use-after-free Vulnerability (VUPEN-SR-2010-245)
  • From: VUPEN Security Research
• Vtiger CRM 5.2.0 Multiple Vulnerabilities
  • From: ascii
• [eVuln.com] Cookie Auth Bypass in Hot Links SQL
  • From: bt
• [eVuln.com] URL and Title XSS in AxsLinks
  • From: bt
• RE: Saved XSS vulnerability in Internet Explorer
  • From: Hans Wolters
• Re: D-Link DIR-300 authentication bypass
  • From: Karol Celiński
• Re: Saved XSS vulnerability in Internet Explorer
  • From: MustLive
• [ MDVSA-2010:239 ] php
  • From: security
• [USN-1018-1] OpenSSL vulnerability
  • From: Steve Beattie
• New vulnerabilities in CMS SiteLogic
  • From: MustLive
• vBulletin 4.0.8 PL1 - XSS Filter Bypass within Profile Customization
  • From: advisories
• Apple Safari for Windows (4.0.2-4.0.5, 5.0-5.0.2) Math.random() predictability
  • From: Amit Klein
• 'Free Simple Software' SQL Injection Vulnerability (CVE-2010-4298)
  • From: Mark Stanislav
• H2HC Cancun - Free Entrance!
  • From: Rodrigo Rubira Branco (BSDaemon)
• [eVuln.com] report.cgi SQL inj in Hot Links SQL (CGI version)
  • From: bt
• [eVuln.com] url XSS in Hot Links Lite
  • From: bt
• NGS00015 Patch Notification: ImageIO Memory Corruption
  • From: Research@NGSSecure
• [SECURITY] CVE-2010-4172: Apache Tomcat Manager application XSS vulnerability
  • From: Mark Thomas
• ESA-2010-019: RSA, The Security Division of EMC, is reissuing this advisory regarding a potential cross-site scripting vulnerability that has been identified in RSAR Adaptive Authentication (On Premise) versions 2.x and 5.7.x. Patch 105162
  • From: Security_Alert
• Juniper VPN client rdesktop clickhack
  • From: niekt0
• Microsoft Visual Studio vulnerability
  • From: jabea
• [eVuln.com] sitename XSS in Hot Links Lite
  • From: bt
• ZyXEL P-660R-T1 V2 XSS
  • From: Usman Saeed
• [SECURITY] [DSA-2125-1] New openssl packages fix buffer overflow
  • From: Stefan Fritsch
• The Unbearable Lightness Of Non-Fixing: A Short Study in Security Reactiveness And Proactiveness
  • From: ACROS Security Lists
• Mozilla Firefox 3.6.12 Denial of Service Vulnerability
  • From: info
• [eVuln.com] Multiple XSS in MCG GuestBook
  • From: bt
• [eVuln.com] email XSS in SimpLISTic
  • From: bt
• Re: Mozilla Firefox 3.6.12 Denial of Service Vulnerability
  • From: Michal Zalewski
• [ MDVSA-2010:240 ] mono
  • From: security
• [ MDVSA-2010:241 ] gnucash
  • From: security
• [USN-1021-1] Apache vulnerabilities
  • From: Marc Deslauriers
• [security bulletin] HPSBUX02579 SSRT100203 rev.1 - HP-UX Apache Running Tomcat Servlet Engine, Remote Information Disclosure, Unauthorized
  • From: security-alert
• XSS vulnerability in Wolf CMS
  • From: advisory
• [USN-1022-1] APR-util vulnerability
  • From: Marc Deslauriers
• [eVuln.com] SQL injections in FreeTicket
  • From: bt
• XSS vulnerability in Wolf CMS
  • From: advisory
• TSSA-2010-01 Ghostscript library Ins_MINDEX() integer overflow and heap corruption
  • From: Advisories Toucan-System
• XSRF (CSRF) in Frog CMS
  • From: advisory
• XSS vulnerability in Frog CMS
  • From: advisory
• XSS vulnerability in Frog CMS
  • From: advisory
• XSS vulnerability in Wolf CMS
  • From: advisory
• CVE-2010-2408 | Persistent Log Out Redirection Vulnerability in Oracle I-Recruitment OA.jsp
  • From: 0kn0ck
• Re: [DCA-00015] YOPS Web Server Remote Command Execution
  • From: zed
• NoScript (2.0.5.1 < less ) - Bypass "Reflective XSS" through Union SQL Poisoning Trick (SQLXSSI)
  • From: 0kn0ck
• [Suspected Spam]Vulnerabilities in Register Plus for WordPress
  • From: MustLive
• Re: NoScript (2.0.5.1 < less ) - Bypass "Reflective XSS" through Union SQL Poisoning Trick (SQLXSSI)
  • From: g . maone
• [eVuln.com] SQL injection Auth Bypass in Easy Banner Free
  • From: bt
• [eVuln.com] URL XSS in Easy Banner Free
  • From: bt
• Re: [Full-disclosure] Simple kernel attack using socketpair. easy, 100% reproductiblle, works under guest. no way to protect :(
  • From: Dan Rosenberg
• XSRF (CSRF) in Wolf CMS
  • From: advisory
• XSS vulnerability in Frog CMS
  • From: advisory
• AOL Instant Messenger Insecure Library Loading Vulnerability
  • From: apa-iutcert
• Google Desktop Insecure Library Loading Vulnerability
  • From: apa-iutcert
• jQuery Lightweight Rich Text Editor (lwrte) Plugin uploader.php Arbitrary File Upload
  • From: underground stockholm
• SQL injection and Path Disclosure Auth Bypass in 4images 1.7.X
  • From: u6q
• [SECURITY] [DSA-2127-1] New wireshark packages fix denial of service
  • From: Stefan Fritsch
• [ MDVSA-2010:242 ] wireshark
  • From: security
• Vulnerabilities in Joomla
  • From: MustLive
• n.runs-SA-2010.003 - Hewlett Packard LaserJet MFP devices - Directory Traversal in PJL interface
  • From: security
• [ MDVSA-2010:243 ] libxml2
  • From: security