stdin
By Subject

316 messages sorted by: [ author ] [ date ] [ thread ]

Starting: Tue Jul 01 2008 - 17:14:50 EEST
Ending: Thu Jul 31 2008 - 23:49:42 EEST

[ GLSA 200807-01 ] Python: Multiple integer overflows
- Tobias Heinlein (Tue Jul 01 2008 - 14:51:43 EEST)
[ GLSA 200807-02 ] Motion: Execution of arbitrary code
- Tobias Heinlein (Tue Jul 01 2008 - 14:59:36 EEST)
[ GLSA 200807-04 ] Poppler: User-assisted execution of arbitrary code
- Matthias Geerdsen (Tue Jul 08 2008 - 21:48:06 EEST)
[ GLSA 200807-05 ] OpenOffice.org: User-assisted execution of arbitrary code
- Pierre-Yves Rofes (Wed Jul 09 2008 - 23:49:07 EEST)
[ GLSA 200807-06 ] Apache: Denial of Service
- Robert Buchholz (Thu Jul 10 2008 - 01:00:06 EEST)
[ GLSA 200807-07 ] NX: User-assisted execution of arbitrary code
- Robert Buchholz (Thu Jul 10 2008 - 01:01:47 EEST)
[ GLSA 200807-08 ] BIND: Cache poisoning
- Matthias Geerdsen (Fri Jul 11 2008 - 21:13:17 EEST)
[ GLSA 200807-09 ] Mercurial: Directory traversal
- Tobias Heinlein (Wed Jul 16 2008 - 01:08:53 EEST)
[ GLSA 200807-10 ] Bacula: Information disclosure
- dan@langille.org (Mon Jul 21 2008 - 18:56:25 EEST)
- Pierre-Yves Rofes (Mon Jul 21 2008 - 21:08:18 EEST)
[ GLSA 200807-11 ] PeerCast: Buffer overflow
- Pierre-Yves Rofes (Mon Jul 21 2008 - 22:52:38 EEST)
[ GLSA 200807-12 ] BitchX: Multiple vulnerabilities
- Pierre-Yves Rofes (Tue Jul 22 2008 - 01:08:33 EEST)
[ GLSA 200807-13 ] VLC: Multiple vulnerabilities
- Pierre-Yves Rofes (Thu Jul 31 2008 - 21:26:24 EEST)
[ GLSA 200807-14 ] Linux Audit: Buffer overflow
- Pierre-Yves Rofes (Thu Jul 31 2008 - 21:36:48 EEST)
[ GLSA 200807-15 ] Pan: User-assisted execution of arbitrary code
- Pierre-Yves Rofes (Thu Jul 31 2008 - 21:44:08 EEST)
[ MDVSA-2008:125 ] - Updated PHP packages fix multiple vulnerabilities
- security@mandriva.com (Fri Jul 04 2008 - 02:51:00 EEST)
[ MDVSA-2008:126 ] - Updated PHP packages fix multiple vulnerabilities
- security@mandriva.com (Fri Jul 04 2008 - 02:55:00 EEST)
[ MDVSA-2008:127 ] - Updated PHP packages fix multiple vulnerabilities
- security@mandriva.com (Fri Jul 04 2008 - 02:59:00 EEST)
[ MDVSA-2008:128 ] - Updated PHP packages fix multiple vulnerabilities
- security@mandriva.com (Fri Jul 04 2008 - 03:05:00 EEST)
[ MDVSA-2008:129 ] - Updated PHP packages fix multiple vulnerabilities
- security@mandriva.com (Fri Jul 04 2008 - 06:16:00 EEST)
[ MDVSA-2008:130 ] - Updated PHP packages fix multiple vulnerabilities
- security@mandriva.com (Fri Jul 04 2008 - 06:20:00 EEST)
[ MDVSA-2008:131 ] - Updated phpMyAdmin packages fix multiple vulnerabilities
- security@mandriva.com (Fri Jul 04 2008 - 23:58:00 EEST)
[ MDVSA-2008:132 ] - Updated gnome-screensaver packages fix authentication vulnerability
- security@mandriva.com (Sat Jul 05 2008 - 01:26:00 EEST)
[ MDVSA-2008:133 ] - Updated sympa packages fix DoS vulnerability
- security@mandriva.com (Sat Jul 05 2008 - 01:46:00 EEST)
[ MDVSA-2008:134 ] - Updated squid packages fix DoS vulnerability
- security@mandriva.com (Sat Jul 05 2008 - 03:27:00 EEST)
[ MDVSA-2008:135 ] - Updated gnome-screensaver packages fix authentication vulnerability
- security@mandriva.com (Sat Jul 05 2008 - 06:17:00 EEST)
[ MDVSA-2008:136 ] - Updated Firefox packages fix vulnerabilities
- security@mandriva.com (Wed Jul 09 2008 - 00:30:00 EEST)
[ MDVSA-2008:137 ] - Updated OpenOffice.org fix vulnerability, and a few other bugs
- security@mandriva.com (Wed Jul 09 2008 - 03:23:00 EEST)
[ MDVSA-2008:138 ] - Updated OpenOffice.org packages fix vulnerability
- security@mandriva.com (Wed Jul 09 2008 - 08:02:01 EEST)
[ MDVSA-2008:138-1 ] - Updated OpenOffice.org packages fix vulnerability
- security@mandriva.com (Sat Jul 12 2008 - 03:17:00 EEST)
[ MDVSA-2008:139 ] - Updated BIND packages fix critical DNS vulnerability
- security@mandriva.com (Wed Jul 09 2008 - 23:49:00 EEST)
[ MDVSA-2008:140 ] - Updated ruby packages fix vulnerabilities
- security@mandriva.com (Thu Jul 10 2008 - 04:43:00 EEST)
[ MDVSA-2008:141 ] - Updated ruby packages fix vulnerabilities
- security@mandriva.com (Thu Jul 10 2008 - 04:58:00 EEST)
[ MDVSA-2008:142 ] - Updated ruby packages fix vulnerabilities
- security@mandriva.com (Thu Jul 10 2008 - 05:57:00 EEST)
[ MDVSA-2008:143 ] - Updated pidgin packages fix MSN protocol handler vulnerability
- security@mandriva.com (Fri Jul 11 2008 - 05:47:00 EEST)
[ MDVSA-2008:144 ] - Updated openldap packages fix slapd DoS vulnerability
- security@mandriva.com (Sat Jul 12 2008 - 09:15:00 EEST)
[ MDVSA-2008:145 ] - Updated bluez/bluez-utils packages fix SDP packet parsing vulnerability
- security@mandriva.com (Tue Jul 15 2008 - 07:48:00 EEST)
[ MDVSA-2008:146 ] - Updated poppler packages fix arbitrary code execution vulnerability
- security@mandriva.com (Wed Jul 16 2008 - 02:58:00 EEST)
[ MDVSA-2008:147 ] - Updated pcre packages fix vulnerability
- security@mandriva.com (Wed Jul 16 2008 - 09:57:00 EEST)
[ MDVSA-2008:148 ] - Updated Firefox packages fix vulnerabilities
- security@mandriva.com (Fri Jul 18 2008 - 03:51:00 EEST)
[ MDVSA-2008:149 ] - Updated mysql packages fix vulnerabilities
- security@mandriva.com (Sat Jul 19 2008 - 22:42:00 EEST)
[ MDVSA-2008:150 ] - Updated mysql packages fix vulnerabilities
- security@mandriva.com (Sun Jul 20 2008 - 02:06:00 EEST)
[ MDVSA-2008:151 ] - Updated libxslt packages fix buffer overflow vulnerability
- security@mandriva.com (Tue Jul 22 2008 - 04:49:00 EEST)
[ MDVSA-2008:152 ] - Updated wireshark packages fix denial of service vulnerability
- security@mandriva.com (Wed Jul 23 2008 - 02:07:01 EEST)
[ MDVSA-2008:153 ] - Updated emacs packages fix vulnerability
- security@mandriva.com (Thu Jul 24 2008 - 00:56:00 EEST)
[ MDVSA-2008:154 ] - Updated xemacs packages fix vulnerability
- security@mandriva.com (Thu Jul 24 2008 - 02:29:00 EEST)
[ MDVSA-2008:155 ] - Updated Thunderbird packages fix multiple vulnerabilities
- security@mandriva.com (Sat Jul 26 2008 - 01:24:00 EEST)
[ MDVSA-2008:155-1 ] - Updated Thunderbird packages fix multiple vulnerabilities
- security@mandriva.com (Sun Jul 27 2008 - 21:47:00 EEST)
[ MDVSA-2008:156 ] - Updated libpng packages fix vulnerability
- security@mandriva.com (Tue Jul 29 2008 - 02:52:00 EEST)
[ MDVSA-2008:157 ] - ffmpeg
- security@mandriva.com (Wed Jul 30 2008 - 00:15:00 EEST)
[ MDVSA-2008:158 ] silc-toolkit
- security@mandriva.com (Wed Jul 30 2008 - 21:50:00 EEST)
[ MDVSA-2008:159 ] licq
- security@mandriva.com (Thu Jul 31 2008 - 01:03:00 EEST)
[DSECRG-08-027] Multiple RFI-LFI in 1024 CMS 1.4.3, 1.4.4 RFC
- Digital Security Research Group [DSecRG] (Fri Jul 04 2008 - 18:44:26 EEST)
[DSECRG-08-028] File read in Velocity web-server
- Alexandr Polyakov (Wed Jul 16 2008 - 20:31:19 EEST)
[DSECRG-08-029] Local File Include in Dokeos E-Learning System 1.8.5
- Digital Security Research Group (Thu Jul 17 2008 - 09:56:46 EEST)
[DSECRG-08-030] Claroline 1.8.9 Multiple Security Vulnerabilities
- Digital Security Research Group [DSecRG] (Fri Jul 18 2008 - 17:55:35 EEST)
[DSECRG-08-031] Local File Include Vulnerability in Interact 2.4.1
- Digital Security Research Group [DSecRG] (Mon Jul 21 2008 - 16:55:18 EEST)
[DSECRG-08-032] Claroline 1.8.10 Multiple XSS Vulnerabilities
- Digital Security Research Group [DSecRG] (Tue Jul 22 2008 - 18:34:48 EEST)
[DSECRG-08-033] Local File Include Vulnerability in Pixelpost 1.7.1
- Digital Security Research Group [DSecRG] (Mon Jul 28 2008 - 11:30:28 EEST)
[DSECRG-08-034] Local File Include Vulnerability in Minishowcase v09b136
- Digital Security Research Group [DSecRG] (Tue Jul 29 2008 - 10:55:06 EEST)
[ECHO_ADV_100$2008] Comdev Web Blogger <= 4.1.3 (arcmonth) Sql Injection Vulnerability
- adv@e-rdc.org (Wed Jul 16 2008 - 12:05:35 EEST)
[Full-disclosure] [tool] SDT Cleaner 1.0
- Nahuel C. Riva (Thu Jul 24 2008 - 01:49:33 EEST)
[Full-disclosure] CAU-EX-2008-0002: Kaminsky DNS Cache Poisoning
- Tuc at T-B-O-H.NET (Fri Jul 25 2008 - 23:09:07 EEST)
[Full-disclosure] CAU-EX-2008-0002: Kaminsky DNS Cache Poisoning Flaw Exploit
- Ganbold (Fri Jul 25 2008 - 07:18:29 EEST)
[Full-disclosure] iDefense Security Advisory 07.08.08: Microsoft SQL Server Restore Integer Underflow Vulnerability
- Cesar (Wed Jul 09 2008 - 02:26:11 EEST)
[Full-disclosure] Vim: Insecure Temporary File Creation During Build: Arbitrary Code Execution
- Jan Minář (Sat Jul 26 2008 - 15:33:24 EEST)
- Robert Buchholz (Fri Jul 25 2008 - 13:18:21 EEST)
- Steven M. Christey (Fri Jul 25 2008 - 18:57:28 EEST)
- Robert Buchholz (Fri Jul 25 2008 - 04:17:08 EEST)
- Jan Minář (Fri Jul 25 2008 - 05:16:00 EEST)
[ISecAuditors Security Advisories] SmbClientParser Perl module allows remote command execution
- ISecAuditors Security Advisories (Fri Jul 18 2008 - 14:46:24 EEST)
[NETRAGARD SECURITY ADVISORY][Apple Core Image Fun House <= 2.0 OS X -- Arbitrary Code Execution][NETRAGARD-20080711]
- Netragard Security Advisories (Fri Jul 11 2008 - 21:38:30 EEST)
[oCERT-2008-007] libpoppler uninitialized pointer
- Andrea Barisani (Mon Jul 07 2008 - 17:06:53 EEST)
[oCERT-2008-009] libxslt heap overflow
- Andrea Barisani (Thu Jul 31 2008 - 18:08:59 EEST)
[SCANIT-2008-001] QNX phgrafx Privilege Escalation Vulnerability
- Scanit Labs (Tue Jul 01 2008 - 07:25:12 EEST)
[SCANIT-2008-002] Wordtrans-web Remote Command Execution Vulnerability
- Scanit Labs (Tue Jul 01 2008 - 07:25:17 EEST)
[SCANIT-2008-003] Wordtrans-web Remote Command Execution Vulnerability
- Scanit Labs (Tue Jul 01 2008 - 07:25:21 EEST)
[security bulletin] HPSBMA02133 SSRT061201 rev.9 - HP Oracle for OpenView (OfO) Critical Patch Update
- security-alert@hp.com (Wed Jul 16 2008 - 15:00:29 EEST)
[security bulletin] HPSBMA02345 SSRT080039 rev.1 - HP System Management Homepage (SMH) for Linux and Windows, Remote Cross Site Scripting (XSS)
- security-alert@hp.com (Tue Jul 01 2008 - 15:38:41 EEST)
[security bulletin] HPSBMA02346 SSRT080097 rev.1 - HP Select Identity Active Directory Bidirectional LDAP Connector, Remote Unauthorized Access
- security-alert@hp.com (Wed Jul 16 2008 - 14:59:46 EEST)
[security bulletin] HPSBMA02346 SSRT080097 rev.3 - HP OpenView Select Identity Active Directory Bidirectional LDAP Connector, Remote Unauthorized Access
- security-alert@hp.com (Tue Jul 22 2008 - 17:24:41 EEST)
[security bulletin] HPSBMA02348 SSRT080033 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code, Denial of Service (DoS)
- security-alert@hp.com (Tue Jul 08 2008 - 18:44:47 EEST)
[security bulletin] HPSBMA02349 SSRT080043 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Unauthorized Access to Data
- security-alert@hp.com (Tue Jul 08 2008 - 18:45:29 EEST)
[security bulletin] HPSBMA02353 SSRT080066 rev.1 - HP OpenView Internet Services Running Probe Builder, Remote Denial of Service (DoS)
- security-alert@hp.com (Mon Jul 28 2008 - 18:20:35 EEST)
[security bulletin] HPSBUX02286 SSRT071466 rev.1 - HP-UX Running System Administration Manager (SAM), Unintended Remote Access
- security-alert@hp.com (Thu Jul 31 2008 - 15:51:29 EEST)
[security bulletin] HPSBUX02351 SSRT080058 rev.1 - HP-UX Running BIND, Remote DNS Cache Poisoning
- security-alert@hp.com (Thu Jul 17 2008 - 05:21:10 EEST)
[security bulletin] HPSBUX02351 SSRT080058 rev.2 - HP-UX Running BIND, Remote DNS Cache Poisoning
- security-alert@hp.com (Sat Jul 19 2008 - 14:29:00 EEST)
[SECURITY] [DSA 1540-3] New lighttpd packages fix regression
- Thijs Kinkhorst (Wed Jul 23 2008 - 21:59:43 EEST)
[SECURITY] [DSA 1544-2] New pdns-recursor packages fix predictable randomness
- Florian Weimer (Wed Jul 16 2008 - 22:09:37 EEST)
[SECURITY] [DSA 1560-1] New sympa packages fix denial of service
- Steve Kemp (Tue Jul 01 2008 - 23:25:39 EEST)
[SECURITY] [DSA 1569-3] New cacti packages fix regression
- Thijs Kinkhorst (Tue Jul 15 2008 - 22:05:33 EEST)
[SECURITY] [DSA 1601-1] New wordpress packages fix several vulnerabilities
- Thijs Kinkhorst (Fri Jul 04 2008 - 10:16:56 EEST)
[SECURITY] [DSA 1602-1] New pcre3 packages fix arbitrary code execution
- Florian Weimer (Sat Jul 05 2008 - 15:37:12 EEST)
[SECURITY] [DSA 1603-1] New bind9 packages fix cache poisoning
- Florian Weimer (Tue Jul 08 2008 - 20:03:12 EEST)
[SECURITY] [DSA 1604-1] BIND 8 deprecation notice
- Florian Weimer (Tue Jul 08 2008 - 20:03:55 EEST)
[SECURITY] [DSA 1605-1] DNS vulnerability impact on the libc stub resolver
- Florian Weimer (Tue Jul 08 2008 - 20:05:29 EEST)
[SECURITY] [DSA 1606-1] poppler packages fix execution of arbitrary code
- Steve Kemp (Wed Jul 09 2008 - 20:46:37 EEST)
[SECURITY] [DSA 1607-1] New iceweasel packages fix several vulnerabilities
- Moritz Muehlenhoff (Fri Jul 11 2008 - 19:11:41 EEST)
[SECURITY] [DSA 1608-1] New mysql-dfsg-5.0 packages fix authorization bypass
- Devin Carraway (Sun Jul 13 2008 - 07:55:16 EEST)
[SECURITY] [DSA 1609-1] New lighttpd packages fix multiple DOS issues
- Steve Kemp (Tue Jul 15 2008 - 20:39:09 EEST)
[SECURITY] [DSA 1610-1] New gaim packages fix execution of arbitrary code
- Steve Kemp (Tue Jul 15 2008 - 20:46:45 EEST)
[SECURITY] [DSA 1611-1] New afuse packages fix privilege escalation
- Thijs Kinkhorst (Wed Jul 16 2008 - 22:18:32 EEST)
[SECURITY] [DSA 1612-1] New ruby1.8 packages fix several vulnerabilities
- Moritz Muehlenhoff (Mon Jul 21 2008 - 20:29:08 EEST)
[SECURITY] [DSA 1613-1] new libgd2 packages fix multiple vulnerabilities
- Devin Carraway (Tue Jul 22 2008 - 10:01:19 EEST)
[SECURITY] [DSA 1614-1] New iceweasel packages fix several vulnerabilities
- Moritz Muehlenhoff (Wed Jul 23 2008 - 23:07:11 EEST)
[SECURITY] [DSA 1615-1] New xulrunner packages fix several vulnerabilities
- Moritz Muehlenhoff (Wed Jul 23 2008 - 23:33:58 EEST)
[SECURITY] [DSA 1616-1] new clamav packages fix denial of service
- Devin Carraway (Thu Jul 24 2008 - 10:36:24 EEST)
[SECURITY] [DSA 1616-2] New clamav packages fix denial of service
- Devin Carraway (Sat Jul 26 2008 - 07:49:24 EEST)
[SECURITY] [DSA 1617-1] New refpolicy packages fix incompatible policy
- Devin Carraway (Fri Jul 25 2008 - 09:29:36 EEST)
[SECURITY] [DSA 1618-1] New ruby1.9 packages fix several vulnerabilities
- Moritz Muehlenhoff (Sat Jul 26 2008 - 18:17:57 EEST)
[SECURITY] [DSA 1619-1] New python-dns packages fix DNS response spoofing
- Devin Carraway (Sun Jul 27 2008 - 12:36:54 EEST)
[SECURITY] [DSA 1620-1] New python2.5 packages fix several vulnerabilities
- Moritz Muehlenhoff (Sun Jul 27 2008 - 16:13:22 EEST)
[SECURITY] [DSA 1621-1] New icedove packages fix several vulnerabilities
- Moritz Muehlenhoff (Mon Jul 28 2008 - 00:38:47 EEST)
[SECURITY] [DSA 1622-1] New newsx packages fix arbitrary code execution
- Thijs Kinkhorst (Thu Jul 31 2008 - 11:56:14 EEST)
[SECURITY] [DSA 1623-1] New dnsmasq packages fix cache poisoning
- Moritz Muehlenhoff (Thu Jul 31 2008 - 19:45:20 EEST)
[SECURITY] [DSA 1624-1] New libxslt packages fix arbitrary code execution
- Moritz Muehlenhoff (Thu Jul 31 2008 - 23:19:20 EEST)
[tool] ratproxy - passive web application security assessment tool
- Michal Zalewski (Wed Jul 02 2008 - 03:02:02 EEST)
[USN-617-2] Samba regression
- Jamie Strandboge (Mon Jun 30 2008 - 23:50:18 EEST)
[USN-619-1] Firefox vulnerabilities
- Jamie Strandboge (Wed Jul 02 2008 - 15:45:38 EEST)
[USN-622-1] Bind vulnerability
- Kees Cook (Wed Jul 09 2008 - 00:19:56 EEST)
[USN-623-1] Firefox vulnerabilities
- Jamie Strandboge (Thu Jul 17 2008 - 18:10:04 EEST)
[USN-624-1] PCRE vulnerability
- Kees Cook (Tue Jul 15 2008 - 05:06:08 EEST)
[USN-626-1] Firefox and xulrunner vulnerabilities
- Jamie Strandboge (Tue Jul 29 2008 - 02:29:38 EEST)
[USN-627-1] Dnsmasq vulnerability
- Jamie Strandboge (Tue Jul 22 2008 - 19:37:02 EEST)
[USN-628-1] PHP vulnerabilities
- Jamie Strandboge (Wed Jul 23 2008 - 22:39:07 EEST)
[USN-629-1] Thunderbird vulnerabilities
- Jamie Strandboge (Fri Jul 25 2008 - 06:20:11 EEST)
[USN-630-1] ffmpeg vulnerability
- Kees Cook (Tue Jul 29 2008 - 01:17:30 EEST)
[USN-631-1] poppler vulnerability
- Kees Cook (Tue Jul 29 2008 - 01:18:05 EEST)
[White Paper] Abusing HTML 5 Structured Client-side Storage
- Alberto Trivero (Mon Jul 21 2008 - 03:59:13 EEST)
[~] Greetz : Me93fg & Mr.SaFa7
- Ghost hacker (Thu Jul 31 2008 - 16:15:52 EEST)
Arbitrary code execution in Netrw version 127, Vim 7.2b
- Jan Minář (Wed Jul 16 2008 - 14:53:29 EEST)
AST-2008-010: Asterisk IAX 'POKE' resource exhaustion
- Asterisk Security Team (Wed Jul 23 2008 - 02:15:49 EEST)
AST-2008-011: Traffic amplification in IAX2 firmware provisioning system
- Asterisk Security Team (Wed Jul 23 2008 - 02:16:07 EEST)
Buffer overflow
- Robert Buchholz (Mon Jul 07 2008 - 23:34:53 EEST)
Call for Papers for the MEITSEC 2008 is now open.
- Meitsec2008 Conference (Tue Jul 08 2008 - 13:20:10 EEST)
CAU-EX-2008-0002: Kaminsky DNS Cache Poisoning Flaw Exploit
- I)ruid (Thu Jul 24 2008 - 02:34:26 EEST)
CFP 25C3 - The 25th Chaos Communication Congress 2008
- fukami (Tue Jul 01 2008 - 11:33:30 EEST)
CFP now open for ClubHack2008 - India
- ClubHack (Tue Jul 15 2008 - 13:17:29 EEST)
Cisco IOS shellcode explanation
- Andy Davis (Wed Jul 30 2008 - 12:03:51 EEST)
Cisco IOS shellcode explanation - additional
- Andy Davis (Wed Jul 30 2008 - 20:51:12 EEST)
Cisco Security Advisory: Multiple Cisco Products Vulnerable to DNS Cache Poisoning Attacks
- Cisco Systems Product Security Incident Response Team (Tue Jul 08 2008 - 21:36:40 EEST)
Citrix MetaFrame Privilege Escalation
- Wendel Guglielmetti Henrique (Wed Jul 30 2008 - 23:09:39 EEST)
Collection of Vulnerabilities in Fully Patched Vim 7.1
- Jan Minář (Tue Jul 01 2008 - 22:36:29 EEST)
communitycms-0.1 Remote File Includion
- n3tr00t3r@yahoo.com (Thu Jul 17 2008 - 18:46:47 EEST)
Context IS Advisory - MS08-39 OWA XSS
- Context IS - Disclosure (Thu Jul 10 2008 - 12:41:49 EEST)
Cross Site Scripting (XSS) in Owl <=0.95, CVE-2008-3100
- Fabian Fingerle (Tue Jul 29 2008 - 00:15:40 EEST)
DeepSec 2008 - Last call for submissions
- DeepSec Conference Vienna (Mon Jul 14 2008 - 13:13:20 EEST)
Deepsec Talks 2007 are online - registration for 2008 is open
- DeepSec 2008 (Tue Jul 01 2008 - 22:46:55 EEST)
Def_Blog 1.0.3 Multiple Remote SQL Injection Vulnerabilities
- tan_prathan@hotmail.com (Fri Jul 18 2008 - 04:30:27 EEST)
DEV WMS Multiple Vulnerabilities
- irancrash@gmail.com (Wed Jul 30 2008 - 21:34:06 EEST)
E-Mail header Injection in HiFriend
- Adrian Pastor (Tue Jul 29 2008 - 12:31:49 EEST)
- Peter Wiesen (Mon Jul 21 2008 - 21:01:18 EEST)
Easybookmarker 40tr Xss Vulnerability By Khashayar Fereidani
- irancrash@gmail.com (Sat Jul 19 2008 - 15:22:52 EEST)
Easydynamicpages 30tr Multipe Vulerabilities ( Xss / Sql Injection Exploit / File Disclosure Exploit )
- irancrash@gmail.com (Sat Jul 19 2008 - 15:13:24 EEST)
Easyecards 310a Multipe Vulerabilities ( Xss / Sql Injection Exploit / File Disclosure Exploit ) By Khashayar Fereidani
- irancrash@gmail.com (Sat Jul 19 2008 - 15:18:06 EEST)
EasyPublish 3.0tr Multiple Vulnerabilities ( Xss / Sql Injection Exploit / File Disclosure Exploit )
- irancrash@gmail.com (Sat Jul 19 2008 - 15:37:21 EEST)
ekoparty security trainings (2008) announcement
- ekoparty (Thu Jul 17 2008 - 07:17:42 EEST)
EMC Dantz Retrospect 7 backup Client PlainText Password Hash Disclosure Vulnerability
- zhliu@fortinet.com (Mon Jul 21 2008 - 16:45:55 EEST)
Endless loop in Soldner 33724
- Luigi Auriemma (Tue Jul 01 2008 - 03:52:44 EEST)
ezContents CMS Renote File inclusion
- security@soqor.net (Fri Jul 25 2008 - 13:04:14 EEST)
EZWebAlbum (dlfilename) Remote File Disclosure Vulnerability
- Ghost hacker (Sun Jul 20 2008 - 15:12:09 EEST)
F5 FirePass 1200 SNMP daemon DoS
- nnposter@disclosed.not (Fri Jul 04 2008 - 04:29:05 EEST)
FGA-2008-16: EMC Dantz Retrospect 7 backup Client 7.5.116 NULL-Pointer reference Denial of Service Vulnerability
- zhliu@fortinet.com (Mon Jul 21 2008 - 16:49:25 EEST)
FGA-2008-16: EMC Dantz Retrospect 7 backup Client 7.5.116 Remote Memory corruption Vulnerability
- zhliu@fortinet.com (Mon Jul 21 2008 - 16:44:11 EEST)
FGA-2008-16: EMC Dantz Retrospect 7 backup Server Authentication Module Weak Password Hash Arithmetic Vulnerability
- zhliu@fortinet.com (Tue Jul 22 2008 - 04:41:00 EEST)
Flip V3.0 final
- Cru3l.b0y@gmail.com (Mon Jul 21 2008 - 16:36:03 EEST)
FreeBSD Security Advisory FreeBSD-SA-08:06.bind
- FreeBSD Security Advisories (Sun Jul 13 2008 - 22:10:04 EEST)
gapicms v9.0.2 (dirDepth) Remote File Inclusion Vulnerability
- Ghost hacker (Thu Jul 10 2008 - 19:53:00 EEST)
Gregarius <= 0.5.4 SQL Injection
- GulfTech Security Research (Tue Jul 29 2008 - 11:36:23 EEST)
HIOX Browser Statistics 2.0 Remote File Inclusion Vulnerability
- Ghost hacker (Wed Jul 30 2008 - 15:35:35 EEST)
HIOX Random Ad 1.3 (hioxRandomAd.php hm) RFI Vulnerability
- Ghost hacker (Wed Jul 30 2008 - 15:08:38 EEST)
HIOX Star Rating System 1.0 Remote File Inclusion Vulnerability
- Ghost hacker (Wed Jul 30 2008 - 15:51:25 EEST)
how to request a cve id?
- Steven M. Christey (Sat Jul 26 2008 - 20:08:25 EEST)
- xpzhang (Fri Jul 25 2008 - 04:43:46 EEST)
HPSBMA02346 SSRT080097 rev.2 - HP Select Identity Active Directory Bidirectional LDAP Connector, Remote Unauthorized Access
- security-alert@hp.com (Thu Jul 17 2008 - 16:00:13 EEST)
HPSBST02350 SSRT080102 rev.1 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS08-037 to MS08-040
- security-alert@hp.com (Tue Jul 15 2008 - 12:41:45 EEST)
http://www.zerodayinitiative.com/advisories/ZDI-08-046
- zdi-disclosures@3com.com (Sat Jul 26 2008 - 00:27:06 EEST)
iDefense Security Advisory 07.08.08: Microsoft SQL Server Restore Integer Underflow Vulnerability
- iDefense Labs (Wed Jul 09 2008 - 00:18:29 EEST)
iDefense Security Advisory 07.09.08: Novell eDirectory LDAP Search Request Heap Corruption Vulnerability
- iDefense Labs (Thu Jul 10 2008 - 21:06:10 EEST)
iDefense Security Advisory 07.15.08: Oracle Database DBMS_AQELM Package Buffer Overflow Vulnerability
- iDefense Labs (Wed Jul 16 2008 - 01:11:30 EEST)
iDefense Security Advisory 07.15.08: Oracle Database Local Untrusted Library Path Vulnerability
- iDefense Labs (Wed Jul 16 2008 - 01:12:19 EEST)
iDefense Security Advisory 07.15.08: Oracle Internet Directory Pre-Authentication LDAP DoS Vulnerability
- iDefense Labs (Wed Jul 16 2008 - 01:10:42 EEST)
iDefense Security Advisory 07.28.08: Hewlett-Packard OVIS Probe Builder Arbitrary Process Termination Vulnerability
- iDefense Labs (Tue Jul 29 2008 - 02:30:08 EEST)
iDefense Security Advisory 07.30.08: SAP MaxDB dbmsrv Untrusted Execution Path Vulnerability
- iDefense Labs (Thu Jul 31 2008 - 20:38:11 EEST)
IETF Internet-Draft on TCP Port randomization
- Fernando Gont (Wed Jul 16 2008 - 22:23:28 EEST)
Insomnia : ISVA-080709.1 - Microsoft SQL Server - Corrupt Backup File Heap Overflow
- Brett Moore (Wed Jul 09 2008 - 08:13:45 EEST)
ISEC 2008(Information Security Conference) Guide
- isec@boannews.com (Wed Jul 02 2008 - 10:21:05 EEST)
JamRoom <= 3.3.8 Authentication Bypass
- GulfTech Security Research (Mon Jul 28 2008 - 18:43:40 EEST)
Lateral SQL Injection Revisited - No Special Privs Required
- David Litchfield (Sat Jul 19 2008 - 02:50:01 EEST)
- a.polyakov@dsec.ru (Fri Jul 18 2008 - 14:30:02 EEST)
- David Litchfield (Fri Jul 18 2008 - 17:03:16 EEST)
Local information disclosure in WeFi Client v3.3.3.0
- XiaShing@Gmail.Com (Wed Jul 09 2008 - 16:12:41 EEST)
Local vulnerability in WeFi Client v3.2.1.4.1(Update)
- galia@wefi.com (Tue Jul 08 2008 - 10:49:04 EEST)
- XiaShing@gmail.com (Fri Jul 04 2008 - 09:35:36 EEST)
London DEFCON July meet - DC4420 - Thursday 10th July (today!)
- alien (Thu Jul 10 2008 - 10:59:15 EEST)
Maran PHP Blog Xss By Khashayar Fereidani
- irancrash@gmail.com (Sat Jul 19 2008 - 20:29:52 EEST)
Memory corruption and NULL pointer in Unreal Tournament III 1.2
- Luigi Auriemma (Wed Jul 30 2008 - 02:37:27 EEST)
Microsoft DNS patch KB951748 incompatible with Zonealarm
- dwg5901@fhda.edu (Wed Jul 16 2008 - 00:05:41 EEST)
- nelsrob@mts.net (Sun Jul 13 2008 - 02:54:05 EEST)
- Steve Shockley (Sat Jul 12 2008 - 21:32:53 EEST)
- jgable@zonelabs.com (Sat Jul 12 2008 - 00:36:49 EEST)
- Pages-Web.com - Services internet (Wed Jul 09 2008 - 21:24:04 EEST)
Microsoft DNS patch KB951748 incompatible with Zonealarm FIXED
- davee1@sbcglobal.net (Thu Jul 10 2008 - 06:00:37 EEST)
Minneapolis DC612 Meeting July 10th, 2008@6pm
- David Bryan (Tue Jul 08 2008 - 22:28:30 EEST)
MJGuest 6.8 GT Cross Site Scripting Vulnerability
- irancrash@gmail.com (Tue Jul 29 2008 - 23:33:41 EEST)
Multiple Cross-Site Scripting Vulnerabilities in Web Wiz Rich Text Editor version 4.02
- supportrup@gmail.com (Sun Jul 27 2008 - 13:03:26 EEST)
Multiple vulnerabilities in TietoEnator's Procapita school administration system, at least version
- Juha-Matti Laurio (Sun Jul 06 2008 - 23:10:46 EEST)
MyBlog <=0.9.8 Multiple Vulnerabilities
- admin@bugreport.ir (Sun Jul 20 2008 - 15:26:18 EEST)
n.runs-SA-2008.002 - F-Prot Out-of-Bound Memory Access DoS (remote)
- security@nruns.com (Wed Jul 16 2008 - 19:32:35 EEST)
n.runs-SA-2008.004 - AVG Anti-Virus Divide by Zero - DoS (remote)
- security@nruns.com (Tue Jul 29 2008 - 13:03:25 EEST)
Nessus plugins for recent MS Bulletins
- Chandrashekhar B (Thu Jul 10 2008 - 13:48:35 EEST)
New Paper: More than 600 million users surf at high risk
- Rob Thompson (Sat Jul 12 2008 - 22:21:15 EEST)
- Jeff Martin (Fri Jul 11 2008 - 22:16:13 EEST)
- Rob Thompson (Tue Jul 01 2008 - 23:02:38 EEST)
- Rainer Duffner (Wed Jul 02 2008 - 18:44:53 EEST)
- Nick FitzGerald (Wed Jul 02 2008 - 03:27:14 EEST)
- Paul Schmehl (Tue Jul 01 2008 - 23:39:11 EEST)
- Larry Seltzer (Tue Jul 01 2008 - 22:31:32 EEST)
- Larry Seltzer (Tue Jul 01 2008 - 22:26:07 EEST)
- Stefan Frei (Tue Jul 01 2008 - 18:39:51 EEST)
Novell GroupWise Messenger Client (GWIM) Remote Stack Overflow
- [ISR] - Infobyte Security Research (Fri Jul 04 2008 - 19:09:25 EEST)
NULL pointer in Unreal Tournament 2004 v3369
- Luigi Auriemma (Wed Jul 30 2008 - 02:36:07 EEST)
NULL pointer in ZDaemon 1.08.07
- Luigi Auriemma (Tue Jul 22 2008 - 02:02:21 EEST)
openPro 1.3.1 (LIBPATH) Remote RFI Vulnerability
- Ghost hacker (Wed Jul 16 2008 - 23:10:38 EEST)
Oracle Application Server PLSQL injection flaw
- David Litchfield (Tue Jul 15 2008 - 23:24:06 EEST)
Oracle Database Local Untrusted Library Path Vulnerability
- jmpascual (Sun Jul 20 2008 - 01:10:56 EEST)
- Joxean Koret (Sat Jul 19 2008 - 18:08:40 EEST)
Oracle Portal XSS fixed by CPU July 2008
- Andrea Purificato (Thu Jul 17 2008 - 01:26:59 EEST)
Outpost Security Suite Pro ver. 2009 Multiple vulnerabilities
- jplopezy@gmail.com (Tue Jul 22 2008 - 20:21:26 EEST)
PHP-NUKE SQL Module's Name 4ndvddb
- lovebug@hotmail.it (Mon Jul 07 2008 - 22:24:55 EEST)
PhpJobScheduler 3.1 Remote File Inclusion Vulnerability
- Ghost hacker (Tue Jul 29 2008 - 09:29:52 EEST)
phpuserbase 1.3 (menu) Remote File Inclusion Vulnerability
- Ghost hacker (Thu Jul 10 2008 - 19:57:47 EEST)
Pligg <= 9.9.0 Multiple Vulnerabilities
- GulfTech Security Research (Thu Jul 31 2008 - 00:49:08 EEST)
Pluck Local File inclusion
- admin@bugreport.ir (Sun Jul 13 2008 - 15:29:18 EEST)
plugin Rss Remote File Inclusion Vulnerability
- Ghost hacker (Tue Jul 29 2008 - 08:04:50 EEST)
PR07-37: XSS on Apache HTTP Server 413 error pages via malformed HTTP method
- ProCheckUp Research (Mon Jul 14 2008 - 15:13:35 EEST)
- mcalautt@gmail.com (Thu Jul 10 2008 - 19:53:20 EEST)
PR08-13: Persistent Cross-site Scripting (XSS) on Moodle via blog entry title
- ProCheckUp Research (Tue Jul 22 2008 - 18:46:23 EEST)
PR08-15: Several Webroot Disclosures on Moodle
- ProCheckUp Research (Tue Jul 22 2008 - 18:48:39 EEST)
PR08-16: CSRF (Cross-site Request Forgery) on Moodle edit profile page
- ProCheckUp Research (Tue Jul 22 2008 - 18:59:48 EEST)
Pwnie Awards 2008
- David Litchfield (Mon Jul 21 2008 - 17:58:44 EEST)
- Alexander Sotirov (Tue Jul 08 2008 - 11:37:51 EEST)
RealNetworks RealPlayer ActiveX Illegal Resource Reference Vulnerability
- cocoruder (Wed Jul 30 2008 - 05:43:10 EEST)
Release of Pass-The-Hash Toolkit v1.4
- Hernan Ochoa (Wed Jul 02 2008 - 21:41:21 EEST)
Remote Cisco IOS FTP exploit
- Paul Oxman (poxman) (Wed Jul 30 2008 - 09:31:29 EEST)
- Andy Davis (Tue Jul 29 2008 - 13:31:11 EEST)
Rhythmbox Vulnerability
- wargame89@yahoo.it (Mon Jun 30 2008 - 22:40:55 EEST)
rPSA-2008-0035-1 httpd mod_ssl
- rPath Update Announcements (Wed Jul 16 2008 - 23:43:10 EEST)
rPSA-2008-0211-1 mercurial mercurial-hgk
- rPath Update Announcements (Thu Jul 03 2008 - 15:57:26 EEST)
rPSA-2008-0212-1 tshark wireshark
- rPath Update Announcements (Thu Jul 03 2008 - 16:05:45 EEST)
rPSA-2008-0216-1 firefox
- rPath Update Announcements (Wed Jul 09 2008 - 01:12:52 EEST)
rPSA-2008-0217-1 vsftpd
- rPath Update Announcements (Wed Jul 09 2008 - 01:15:49 EEST)
rPSA-2008-0218-1 ruby
- rPath Update Announcements (Wed Jul 09 2008 - 01:52:16 EEST)
rPSA-2008-0223-1 poppler
- rPath Update Announcements (Thu Jul 10 2008 - 01:18:44 EEST)
rPSA-2008-0231-1 bind bind-utils
- rPath Update Announcements (Sat Jul 19 2008 - 17:31:24 EEST)
rPSA-2008-0235-1 fetchmail fetchmailconf
- rPath Update Announcements (Tue Jul 29 2008 - 04:06:18 EEST)
rPSA-2008-0236-1 httpd mod_ssl
- rPath Update Announcements (Tue Jul 29 2008 - 04:11:43 EEST)
rPSA-2008-0237-1 tshark wireshark
- rPath Update Announcements (Tue Jul 29 2008 - 04:18:53 EEST)
rPSA-2008-0238-1 firefox
- rPath Update Announcements (Tue Jul 29 2008 - 04:24:50 EEST)
SchoolCenter URL Handling Cross Site Scripting Vulnerability
- Tester@yahoo.com (Sun Jul 20 2008 - 06:14:38 EEST)
SECOBJADV-2008-02: Cygwin Installation and Update Process can be Subverted Vulnerability
- advisories@host.security-objectives.com (Fri Jul 25 2008 - 19:57:49 EEST)
Secunia Research: Blue Coat K9 Web Protection "Referer" Header Buffer Overflow
- Secunia Research (Thu Jul 31 2008 - 17:32:25 EEST)
Secunia Research: Blue Coat K9 Web Protection Response Handling Buffer Overflows
- Secunia Research (Thu Jul 31 2008 - 17:32:28 EEST)
Secunia Research: RealPlayer SWF Frame Handling Buffer Overflow
- Secunia Research (Fri Jul 25 2008 - 18:01:50 EEST)
Secunia Research: VLC Media Player WAV Processing Integer Overflow
- Secunia Research (Wed Jul 02 2008 - 17:53:29 EEST)
Security Bypass Vulnerabilities AXESSTEL
- Bboyhacks@gmail.com (Mon Jul 28 2008 - 03:24:17 EEST)
Security Vacation Guide
- Pete Herzog (Fri Jul 18 2008 - 00:36:30 EEST)
SecurityFocus Linux Newsletter #396
- sfa@securityfocus.com (Fri Jul 04 2008 - 03:04:11 EEST)
SecurityFocus Linux Newsletter #397
- Kim Mansour (Wed Jul 09 2008 - 19:00:20 EEST)
SecurityFocus Linux Newsletter #398
- sfa@securityfocus.com (Fri Jul 18 2008 - 00:48:49 EEST)
SecurityFocus Linux Newsletter #400
- sfa@securityfocus.com (Thu Jul 31 2008 - 23:41:36 EEST)
SecurityFocus Microsoft Newsletter #401
- sfa@securityfocus.com (Fri Jul 04 2008 - 03:04:06 EEST)
SecurityFocus Microsoft Newsletter #402
- Kim Mansour (Wed Jul 09 2008 - 19:01:56 EEST)
SecurityFocus Microsoft Newsletter #403
- sfa@securityfocus.com (Fri Jul 18 2008 - 00:48:45 EEST)
SecurityFocus Microsoft Newsletter #405
- sfa@securityfocus.com (Thu Jul 31 2008 - 23:41:24 EEST)
SecurityFocus Newsletter #460
- sfa@securityfocus.com (Fri Jul 04 2008 - 03:04:01 EEST)
SecurityFocus Newsletter #461
- Kim Mansour (Wed Jul 09 2008 - 19:03:13 EEST)
SecurityFocus Newsletter #462
- sfa@securityfocus.com (Fri Jul 18 2008 - 00:48:41 EEST)
SecurityFocus Newsletter #464
- sfa@securityfocus.com (Thu Jul 31 2008 - 23:41:32 EEST)
shoutbox Remote Database Dawnload Exploit
- Ghost hacker (Wed Jul 30 2008 - 10:41:24 EEST)
Simple DNS Plus 5.0/4.1 < remote Denial of Service exploit
- Rotem-BugSec (Sun Jul 13 2008 - 12:02:57 EEST)
Tool release: [evilgrade] - Using DNS cache poisoning to exploit poor update implementations
- [ISR] - Infobyte Security Research (Mon Jul 28 2008 - 13:21:09 EEST)
Tool: PorkBind Nameserver Security Scanner
- super@innu.org (Wed Jul 30 2008 - 19:34:54 EEST)
Unauthorized reading confirmation from Outlook
- Alexander Klink (Wed Jul 09 2008 - 11:37:51 EEST)
- Augusto Paes de Barros (Thu Jul 03 2008 - 23:48:17 EEST)
ViArt <= 3.5 SQL Injection
- GulfTech Security Research (Mon Jul 28 2008 - 21:38:57 EEST)
Vim: Flawed Fix of Arbitrary Code Execution Vulnerability in filetype.vim
- Jan Minář (Wed Jul 23 2008 - 21:29:01 EEST)
Vim: Improper Implementation of shellescape()/Arbitrary Code Execution
- Jan Minář (Mon Jul 21 2008 - 15:07:53 EEST)
Vim: Insecure Temporary File Creation During Build: Arbitrary Code Execution
- Nikolai Weibull (Fri Jul 18 2008 - 10:38:28 EEST)
- Jan Minář (Fri Jul 18 2008 - 01:54:18 EEST)
VMSA-2008-00011 Updated ESX service console packages for Samba and vmnix
- VMware Security team (Tue Jul 29 2008 - 04:22:48 EEST)
Vuln name: Ruby rb_ary_fill() DOS
- snagg@securenetwork.it (Mon Jun 30 2008 - 23:46:27 EEST)
Vulnerability CVE-2008-3671 - MyReview's vulnerability in the access control system
- Julien Thomas (Sun Jul 20 2008 - 02:09:56 EEST)
Vulnerability: SocialEngine (SocialEngine.net) high risk security flaw
- Tim Loshak (Tue Jul 22 2008 - 13:20:56 EEST)
Windows Vista Power Management & Local Security Policy
- Greg (Mon Jul 28 2008 - 00:26:02 EEST)
- Good Securitypractice (Wed Jul 23 2008 - 20:16:06 EEST)
- Abe Getchell (Wed Jul 23 2008 - 01:37:07 EEST)
- Jim Harrison (Tue Jul 22 2008 - 22:46:43 EEST)
- James C. Slora Jr. (Tue Jul 22 2008 - 18:15:22 EEST)
- Abe Getchell (Mon Jul 21 2008 - 01:04:19 EEST)
- Jim Harrison (Sun Jul 20 2008 - 23:33:19 EEST)
- Abe Getchell (Sun Jul 20 2008 - 22:32:03 EEST)
- Thor (Hammer of God) (Sun Jul 20 2008 - 01:19:46 EEST)
- Abe Getchell (Sat Jul 19 2008 - 10:33:12 EEST)
- Jim Harrison (Sat Jul 19 2008 - 08:36:09 EEST)
- Abe Getchell (Fri Jul 18 2008 - 05:39:23 EEST)
Wordpress Malicious File Execution Vulnerability
- otto@ottodestruct.com (Wed Jul 23 2008 - 22:44:51 EEST)
XRMS 1.99.2 (RFI/XSS/IG) Multiple Remote Vulnerabilities
- azzcoder@hotmail.com (Fri Jul 25 2008 - 18:13:03 EEST)
XSS in admin logs - vBulletin 3.7.2 and lower, vBulletin 3.6.10 PL2 and lower
- Jessica Hope (Tue Jul 08 2008 - 19:59:06 EEST)
Yuhhu Pubs Black Cat Remote SQL Injection Exploit
- RM-x@msn.com (Mon Jul 14 2008 - 18:09:08 EEST)
ZDI-08-041: Novell eDirectory dhost Integer Overflow Code Execution Vulnerability
- zdi-disclosures@3com.com (Thu Jul 10 2008 - 20:20:04 EEST)
ZDI-08-042: Sun Java Web Start Sandbox Bypass Vulnerability
- zdi-disclosures@3com.com (Thu Jul 17 2008 - 22:17:22 EEST)
ZDI-08-043: Sun Java Web Start vm args Stack Buffer Overflow
- zdi-disclosures@3com.com (Thu Jul 17 2008 - 22:17:41 EEST)
ZDI-08-044: Mozilla Firefox CSSValue Array Memory Corruption Vulnerability
- zdi-disclosures@3com.com (Thu Jul 17 2008 - 22:17:58 EEST)
ZDI-08-045: Apple Safari StyleSheet ownerNode Heap Corruption Vulnerability
- zdi-disclosures@3com.com (Sat Jul 26 2008 - 00:26:30 EEST)
ZDI-08-047: RealNetworks RealPlayer rmoc3260 ActiveX Control Memory Corruption Vulnerability
- zdi-disclosures@3com.com (Sat Jul 26 2008 - 00:27:27 EEST)

Last message date: Thu Jul 31 2008 - 23:49:42 EEST
Archived on: Thu Jul 31 2008 - 23:49:42 EEST

316 messages sorted by: [ author ] [ date ] [ thread ]

This archive was generated by hypermail 2b28 : Thu Jul 31 2008 - 23:49:42 EEST

stdinBy Subject

stdin
By Subject