Mail Index

• Thread Index

• Cisco Security Advisory: Denial of Service Vulnerability in Cisco TelePresence Codecs
  • From: Cisco Systems Product Security Incident Response Team
• [SECURITY] [DSA 2299-1] ca-certificates security update
  • From: Thijs Kinkhorst
• Full disclosure for SA45649, SQL Injection in LedgerSMB and SQL-Ledger
  • From: Chris Travers
• [SECURITY] [DSA 2200-1] nss security update
  • From: Moritz Muehlenhoff
• Mediagrafic (prodotto.asp?id) (records.asp?id_p) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• CWM (dettaglio-prodotto.asp?id) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• Dexanet Remote SQL injection Vulnerability
  • From: ehsan_hp200
• Sana Net (viewnews.php?id) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• XSS in Redirection wordpress plugin
  • From: advisory
• ZDI-11-277: Apple QuickTime 3g2 'mp4v' atom size Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [security bulletin] HPSBUX02700 SSRT100506 rev.1 - HP-UX running VEA, Remote Denial of Service (DoS), Execution of Arbitrary Code
  • From: security-alert
• Secunia Research: InduSoft ISSymbol ActiveX Control Buffer Overflow Vulnerabilities
  • From: Secunia Research
• Sana Net (viewpages.php?id) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• More on IPv6 RA-Guard evasion (IPv6 security)
  • From: Fernando Gont
• Re: [Full-disclosure] HP A-series switches are affected, too. [WAS: More on IPv6 RA-Guard evasion (IPv6 security)]
  • From: Dan Luedtke
• Re: [Full-disclosure] HP A-series switches are affected, too. [WAS: More on IPv6 RA-Guard evasion (IPv6 security)]
  • From: Fernando Gont
• Re: [Full-disclosure] HP A-series switches are affected, too. [WAS: More on IPv6 RA-Guard evasion (IPv6 security)]
  • From: Dan Luedtke
• Re: [Full-disclosure] HP A-series switches are affected, too. [WAS: More on IPv6 RA-Guard evasion (IPv6 security)]
  • From: Marc Heuse
• Re: [Full-disclosure] HP A-series switches are affected, too. [WAS: More on IPv6 RA-Guard evasion (IPv6 security)]
  • From: Fernando Gont
• Fulci (prodotto.php?id) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• Olonet (prodotto.php?idproduct) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• Studio Linea (prodotto.php?id) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• PMCMA: Post Memory Corruption Memory Analysis
  • From: Jonathan Brossard
• KnFTPd v1.0.0 Multiple Command Remote Buffer Overflow
  • From: liuqx
• ITTWeb Remote SQL injection Vulnerability
  • From: ehsan_hp200
• ph5gruppo (prodotto.php?id) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• [PT-2011-19] SQL injection vulnerability in Help Request System
  • From: noreply
• Vulnerabilities in BroadWin WebAccess Client 1.0.0.10
  • From: Luigi Auriemma
• Virtualismi (prodotto.php?id) Cross Site Scripting Vulnerabilities
  • From: ehsan_hp200
• Loop (ricetta.php?id) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• Manifattura Web (prodotto.php?id) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• XSS Ebuddy (responsible disclosure)
  • From: Rener Silva
• ZDI-11-278: Novell Cloud Manager Insufficient Framework User Validation Vulnerability
  • From: ZDI Disclosures
• ZDI-11-279: (0day) Witness Systems eQuality Unify Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [ MDVSA-2011:129 ] mozilla
  • From: security
• Editel (news-dettaglio.php?id) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• BvCom (dettaglio.php?idnews) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• WSTAFF Remote SQL injection Vulnerability
  • From: ehsan_hp200
• MaiNick (ricetta.php?id) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• Abarkam (detail.php?input) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• TTW (ricetta.php?id) Remote SQL injection Vulnerability
  • From: ehsan_hp200
• Pranian Group e107 Cross Site Scripting Vulnerabilities
  • From: ehsan_hp200
• Extended submission deadline for: The 6th International Conference for Internet Technology and Secured Transactions (ICITST-2011)!
  • From: Call for papers
• t2′11 Challenge to be released 2011-09-10 10:00 EEST
  • From: Tomi Tuominen
• [ MDVSA-2011:130 ] apache
  • From: security
• [ MDVSA-2011:131 ] libxml
  • From: security
• Multiple vulnerabilities in MantisBT
  • From: advisory
• [Announcement] ClubHack Mag Issue 20- September 2011 Released
  • From: abhijeet
• [SECURITY] [DSA 2298-2] apache2 regression fix
  • From: Stefan Fritsch
• [SECURITY] [DSA 2300-2] nss security update
  • From: Thijs Kinkhorst
• [SECURITY] [DSA 2301-1] rails security update
  • From: Luciano Bello
• [ MDVSA-2011:132 ] pidgin
  • From: security
• openvas 2.x race condition
  • From: Bugs NotHugs
• Windows server 2008 R1 local DoS
  • From: Aliz 'Randomdude'
• [slackware-security] mozilla-firefox (SSA:2011-249-01)
  • From: Slackware Security Team
• [slackware-security] seamonkey (SSA:2011-249-03)
  • From: Slackware Security Team
• [slackware-security] mozilla-thunderbird (SSA:2011-249-02)
  • From: Slackware Security Team
• Arbitrary File Upload in '1 Flash Gallery' Wordpress Plugin
  • From: supernothing
• Embarcadero ER/Studio XE2 Server Portal Tom Sawyer's Default GET Extension Factory ActiveX Control Remote Code Execution
  • From: nospam
• XSS in Zikula
  • From: advisory
• Cisco Security Advisory: Cisco Nexus 5000 and 3000 Series Switches Access Control List Bypass Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• OWASP AppSec USA 2011 - Two Weeks Away
  • From: Adam Baso
• [ MDVSA-2011:133 ] mozilla
  • From: security
• [SECURITY] [DSA 2302-1] bcfg2 security update
  • From: Nico Golde
• Multiple XSS vulnerabilities in LightNEasy 3.2.4
  • From: sschurtz
• [security bulletin] HPSBUX02702 SSRT100606 rev.1 - HP-UX Apache Web Server, Remote Denial of Service (DoS)
  • From: security-alert
• [SECURITY] [DSA 2303-1] linux-2.6 security update
  • From: dann frazier
• [security bulletin] HPSBUX02702 SSRT100606 rev.2 - HP-UX Apache Web Server, Remote Denial of Service (DoS)
  • From: security-alert
• 28C3: CFP for 28th Chaos Communication Congress
  • From: fukami
• Disassembling .NET Client Challenge
  • From: Ivan Buetler
• CVE-2011-2730: Spring Framework Information Disclosure
  • From: s2-security
• CVE-2011-2732: Spring Security header injection vulnerability
  • From: s2-security
• CVE-2011-2894: Spring Framework and Spring Security serialization-based remoting vulnerabilities
  • From: s2-security
• CVE-2011-2731: Spring Security privilege escalation when using RunAsManager
  • From: s2-security
• [ MDVSA-2011:134 ] rsyslog
  • From: security
• [slackware-security] httpd (SSA:2011-252-01)
  • From: Slackware Security Team
• APPLE-SA-2011-09-09-1 Security Update 2011-005
  • From: Apple Product Security
• [SECURITY] [DSA 2303-2] New linux-2.6 packages fix regression
  • From: dann frazier
• [SECURITY] [DSA 2306-1] ffmpeg security update
  • From: Giuseppe Iuculano
• [SECURITY] [DSA 2307-1] chromium-browser security update
  • From: Giuseppe Iuculano
• [SECURITY] [DSA 2304-1] squid3 security update
  • From: Nico Golde
• [Announcement] ClubHack Magazine - Call for Articles
  • From: abhijeet
• [NTMS 2012] Call for Papers, Istanbul- Turkey, 7 - 10 May 2012
  • From: mbadra
• Multiple XSS vulnerabilities in CMS Papoo Light Version
  • From: sschurtz
• ESA-2011-018: Domain administration privilege enforcement bypass in EMC Avamar
  • From: Security_Alert
• [SECURITY] [DSA 2308-1] mantis security update
  • From: Moritz Muehlenhoff
• Advisory for MS11-035 / ZDI-11-167
  • From: Luigi Auriemma
• XSS vulnerability in FortiMail Messaging Security Appliance
  • From: sschurtz
• Vulnerabilities in trading and SCADA softwares
  • From: Luigi Auriemma
• [security bulletin] HPSBMU02703 SSRT100242 rev.1 - HP Network Node Manager i (NNMi) for HP-UX, Linux, Solaris, and Windows, Remote Denial of Service (DoS), Unauthorized Disclosure of Information, Unauthorized Modification
  • From: security-alert
• Seeker Advisory Sep11: Reflected Cross Site Scripting in Microsoft SharePoint Portal
  • From: Irene Abezgauz
• iDefense Security Advisory 09.13.11: Microsoft Excel Record Memory Corruption Vulnerability
  • From: labs-no-reply
• iDefense Security Advisory 09.13.11: Microsoft Excel Record Integer Signedness Vulnerability
  • From: labs-no-reply
• iDefense Security Advisory 09.13.11: Microsoft Excel Record Memory Corruption Vulnerability
  • From: labs-no-reply
• iDefense Security Advisory 09.13.11: Adobe Reader and Acrobat JPEG Processing Use After Free Vulnerability
  • From: labs-no-reply
• [SECURITY] [DSA 2309-1] openssl security update
  • From: Raphael Geissert
• Colasoft Capsa7.2.1 Malformed SNMP Packet Denial of Service
  • From: vuln
• Seeker Advisory Sep11: Insecure Redirect in Microsoft SharePoint Portal
  • From: Irene Abezgauz
• Multiple vulnerabilities in SiT! Support Incident Tracker
  • From: advisory
• Re: Vulnerabilities in trading and SCADA softwares
  • From: fergal . cassidy
• VUPEN Security Research - Adobe Acrobat and Reader TIFF BitsPerSample Heap Overflow Vulnerability
  • From: VUPEN Security Research
• VUPEN Security Research - Adobe Acrobat and Reader Picture Dimensions Heap Overflow Vulnerability
  • From: VUPEN Security Research
• VUPEN Security Research - Adobe Acrobat and Reader IFF Processing Heap Overflow Vulnerability
  • From: VUPEN Security Research
• VUPEN Security Research - Adobe Acrobat and Reader PCX Processing Heap Overflow Vulnerability
  • From: VUPEN Security Research
• VUPEN Security Research - Adobe Acrobat and Reader BMP Dimensions Heap Overflow Vulnerability
  • From: VUPEN Security Research
• VUPEN Security Research - Adobe Acrobat and Reader Picture Processing Stack Overflow Vulnerability
  • From: VUPEN Security Research
• Invitation to Register and Participate in the Entretiens Jacques Cartier (EJC) Colloquium on IT Security, Cyber Forensics and Combating Cybercrime
  • From: Serguei A. Mokhov \(on behalf of EJC2011SecForensics-11\)
• ESA-2011-029: Buffer overflow vulnerability in multiple EMC Ionix products
  • From: Security_Alert
• Cisco Security Advisory: CiscoWorks LAN Management Solution Remote Code Execution Vulnerabilities
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco Unified Service Monitor and Cisco Unified Operations Manager Remote Code Execution Vulnerabilities
  • From: Cisco Systems Product Security Incident Response Team
• Re: Vulnerabilities in trading and SCADA softwares
  • From: Jeffrey Walton
• CORE-2011-0506 - Multiples Vulnerabilities in ManageEngine ServiceDesk Plus
  • From: CORE Security Technologies Advisories
• Nortel Contact Recording Centralized Archive 6.5.1 EyrAPIConfiguration getSubKeys() Remote SQL Injection Exploit
  • From: nospam
• XEE vulnerabilities in SharePoint (MS11-074) and DotNetNuke
  • From: Nicolas Grégoire
• Microsoft's Binary Planting Clean-Up Mission
  • From: ACROS Security Lists
• [Onapsis Security Advisory 2011-014] SAP WebAS Remote Denial of Service
  • From: Onapsis Research Labs
• [Onapsis Security Advisory 2011-015] SAP WebAS webrfc Cross-Site Scripting
  • From: Onapsis Research Labs
• [Onapsis Security Advisory 2011-016] SAP WebAS Malicious SAP Shortcut Generation
  • From: Onapsis Research Labs
• RE: [Full-disclosure] Microsoft's Binary Planting Clean-Up Mission
  • From: Thor \(Hammer of God\)
• RE: [Full-disclosure] Microsoft's Binary Planting Clean-Up Mission
  • From: ACROS Security Lists
• RE: [Full-disclosure] Microsoft's Binary Planting Clean-Up Mission
  • From: ACROS Security Lists
• RE: [Full-disclosure] Microsoft's Binary Planting Clean-Up Mission
  • From: Thor \(Hammer of God\)
• RE: [Full-disclosure] Microsoft's Binary Planting Clean-Up Mission
  • From: ACROS Security Lists
• RE: [Full-disclosure] Microsoft's Binary Planting Clean-Up Mission
  • From: ACROS Security Lists
• CFP for first independent international Security Conference in Russia - ZeroNights (by Defcon-Russia)
  • From: Alexandr Polyakov
• [DSECRG-11-033] SAP Crystal Report Server pubDBLogon - Linked ХSS vulnerability (by ERPScan)
  • From: Alexandr Polyakov
• [DSECRG-11-032] SAP NetWeaver ipcpricing - information disclose (by ERPScan)
  • From: Alexandr Polyakov
• Re: [Full-disclosure] Microsoft's Binary Planting Clean-Up Mission
  • From: Jeffrey Walton
• [ MDVSA-2011:133-1 ] mozilla
  • From: security
• [ MDVSA-2011:132-1 ] pidgin
  • From: security
• [ MDVSA-2011:134-1 ] rsyslog
  • From: security
• [ MDVSA-2011:130-1 ] apache
  • From: security
• [SECURITY] [DSA 2305-1] vsftpd security update
  • From: Nico Golde
• Cisco TelePresence Multiple Vulnerabilities - SOS-11-010
  • From: Lists
• VUPEN Security Research - Microsoft Office Excel Formula Record Heap Corruption Vulnerability
  • From: VUPEN Security Research
• [security bulletin] HPSBMU02705 SSRT100622 rev.1 - HP Business Service Automation (BSA) Essentials, Remote Execution of Arbitrary Code
  • From: security-alert
• NETGEAR Wireless Cable Modem Gateway Auth Bypass and CSRF - SOS-11-011
  • From: Lists
• Advisory: Opera Mobile Cache Poisoning XAS
  • From: Roee Hay
• Advisory: Dolphin Browser HD Cross-Application Scripting
  • From: Roee Hay
• NGS00099 Patch Notification: Vulnerable SUID script in (nomachine) NX Server for Linux
  • From: Research@NGSSecure
• Multiple vulnerabilities in Help Desk Software
  • From: advisory
• Trusteer Rapport and anti-keylogging
  • From: mu-b
• IPv6 security presentation at Hack.lu 2011
  • From: Fernando Gont
• Re: NGS00099 Patch Notification: Vulnerable SUID script in (nomachine) NX Server for Linux
  • From: Tavis Ormandy
• [security bulletin] HPSBOV02497 SSRT090245 rev.4 - HP TCP/IP Services for OpenVMS Running NTP, Remote Execution of Arbitrary Code, Denial of Service (DoS)
  • From: security-alert
• [ MDVSA-2011:135 ] iproute2
  • From: security
• Vulnerabilities in Sunway ForceControl 6.1 sp3 (SCADA)
  • From: Luigi Auriemma
• [SECURITY] [DSA 2310-1] linux-2.6 security update
  • From: dann frazier
• secureURL.php design flaws
  • From: Boldizsar Bencsath
• TLS/SSL Compatibility Report 2011
  • From: Thierry Zoller
• XSS Vulnerabilities in TWiki < 5.1.0
  • From: Netsparker Advisories
• Security issue is_a function in PHP 5.3.7+
  • From: cipri
• TWSL2011-014: Vulnerability in Pantech Web Browser SSL Implementation
  • From: Trustwave Advisories
• TWSL2011-013: Multiple Vulnerabilities in IceWarp Mail Server
  • From: Trustwave Advisories
• Hackito Ergo Sum 2012 dates
  • From: Philippe Langlois
• PunBB 1.3.6 bug
  • From: Amir
• Serendipity freetag plugin 'serendipity[tagview]' Cross-Site Scripting vulnerability
  • From: sschurtz
• Advanced Electron Forums (AEF) 1.0.9 <= Cross Site Request Forgery (CSRF) Vulnerability
  • From: YGN Ethical Hacker Group
• AdaptCMS 2.0.1 Multiple security vulnerabilities
  • From: sschurtz
• [CVE-2011-3645] Multiple vulnerability in Newgen's Omnidocs
  • From: sohil_garg
• [SECURITY] CVE-2011-1184 Apache Tomcat - Multiple weaknesses in HTTP DIGEST authentication
  • From: Mark Thomas
• Vulnerability found in Flynax Classifieds products
  • From: Nasel Pentest
• Re: PunBB 1.3.6 bug
  • From: Henri Salo
• [security bulletin] HPSBUX02702 SSRT100606 rev.4 - HP-UX Apache Web Server, Remote Denial of Service (DoS)
  • From: security-alert
• openEngine 2.0 'id' Blind SQL Injection vulnerability
  • From: sschurtz
• NGS00109 Patch Notification: ImpressPages CMS Remote code execution
  • From: Research@NGSSecure
• Secunia Research: Novell GroupWise Internet Agent "TZNAME" Parsing Vulnerability
  • From: Secunia Research
• Secunia Research: Novell GroupWise Internet Agent HTTP Interface Buffer Overflow
  • From: Secunia Research
• iDefense Security Advisory 09.26.11: Novell GroupWise iCal TZNAME Heap Overflow Vulnerability
  • From: labs-no-reply
• [SECURITY] [DSA 2311-1] openjdk-6 security update
  • From: Florian Weimer
• European Security Services GPS v1.0 - Multiple Vulnerabilities
  • From: research@xxxxxxxxxxxxxxxxxxxxx
• Barracuda Backup v2.0 - Multiple Web Vulnerabilities
  • From: research@xxxxxxxxxxxxxxxxxxxxx
• VUPEN Security Research - Novell GroupWise "TZNAME" Remote Buffer Overflow Vulnerability
  • From: VUPEN Security Research
• VUPEN Security Research - Novell GroupWise "BYWEEKNO" Remote Memory Corruption Vulnerability
  • From: VUPEN Security Research
• VUPEN Security Research - Novell GroupWise "integerList" Remote Buffer Overflow Vulnerability
  • From: VUPEN Security Research
• FreeBSD Security Advisory FreeBSD-SA-11:03.bind
  • From: FreeBSD Security Advisories
• FreeBSD Security Advisory FreeBSD-SA-11:04.compress
  • From: FreeBSD Security Advisories
• FreeBSD Security Advisory FreeBSD-SA-11:05.unix
  • From: FreeBSD Security Advisories
• VUPEN Security Research - Novell GroupWise "RRULE" Remote Buffer Overflow Vulnerability
  • From: VUPEN Security Research
• Vulnerabilities in PcVue 10 (SCADA)
  • From: Luigi Auriemma
• Multiple vulnerabilities in Traq
  • From: advisory
• Vulnerabilities in EViews 7.2
  • From: Luigi Auriemma
• Integer overflow in Sterling Trader 7.0.2
  • From: Luigi Auriemma
• iDefense Security Advisory 09.26.11: Novell GroupWise iCal RRULE Weekday Recurrence Heap Overflow Vulnerability
  • From: labs-no-reply
• iDefense Security Advisory 09.26.11: Novell GroupWise iCal Date Invalid Array Indexing Vulnerability
  • From: labs-no-reply
• Cisco Security Advisory: Cisco 10000 Series Denial of Service Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco IOS Software Data-Link Switching Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco IOS Software IPv6 Denial of Service Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco IOS Software IPv6 over MPLS Vulnerabilities
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco IOS Software Network Address Translation Vulnerabilities
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco IOS Software Session Initiation Protocol Denial of Service Vulnerabilities
  • From: Cisco Systems Product Security Incident Response Team
• iDefense Security Advisory 09.26.11: Novell GroupWise iCal RRULE ByWeekNo Memory Corruption Vulnerability
  • From: labs-no-reply
• Cisco Security Advisory: Cisco Unified Communications Manager Session Initiation Protocol Memory Leak Vulnerabilities
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Jabber Extensible Communications Platform and Cisco Unified Presence XML Denial of Service Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• [ MDVSA-2011:137 ] openssl
  • From: security
• Cisco Security Advisory: Cisco IOS Software IPS and Zone-Based Firewall Vulnerabilities
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco IOS Software Smart Install Remote Code Execution Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco IOS Software IP Service Level Agreement Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• [ MDVSA-2011:136 ] openssl
  • From: security
• [security bulletin] HPSBUX02707 SSRT100626 rev.1 - HP-UX Apache Web Server, Remote Denial of Service (DoS)
  • From: security-alert
• [ MDVSA-2011:138 ] wireshark
  • From: security
• Joomla! 1.7.0 | Multiple Cross Site Scripting (XSS) Vulnerabilities
  • From: YGN Ethical Hacker Group
• Bitweaver 2.8.1 Multiple Cross-site Scripting Vulnerabilities
  • From: sschurtz
• Arbitrary memory corruption in NCSS 07.1.21
  • From: Luigi Auriemma
• [SECURITY] [DSA 2312-1] iceape security update
  • From: Moritz Muehlenhoff
• DeepSec 2011 Conference - Final Schedule Published
  • From: DeepSec Conference
• [SECURITY] [DSA 2313-1] iceweasel security update
  • From: Moritz Muehlenhoff