stdin
By Subject

• "Exploit creation - The random approach" or "Playing with random to build exploits"
  • Stefano Zanero (Sat Sep 27 2008 - 01:02:03 EEST)
  • Nelson Brito (Sun Sep 21 2008 - 17:39:06 EEST)
• [ GLSA 200809-01 ] yelp: User-assisted execution of arbitrary code
  • Robert Buchholz (Thu Sep 04 2008 - 22:09:04 EEST)
• [ GLSA 200809-02 ] dnsmasq: Denial of Service and DNS spoofing
  • Robert Buchholz (Thu Sep 04 2008 - 22:28:23 EEST)
• [ GLSA 200809-03 ] RealPlayer: Buffer overflow
  • Robert Buchholz (Thu Sep 04 2008 - 22:52:03 EEST)
• [ GLSA 200809-04 ] MySQL: Privilege bypass
  • Robert Buchholz (Thu Sep 04 2008 - 22:52:52 EEST)
• [ GLSA 200809-05 ] Courier Authentication Library: SQL injection vulnerability
  • Pierre-Yves Rofes (Fri Sep 05 2008 - 23:56:31 EEST)
• [ GLSA 200809-06 ] VLC: Multiple vulnerabilities
  • Pierre-Yves Rofes (Sun Sep 07 2008 - 22:21:51 EEST)
• [ GLSA 200809-07 ] libTIFF: User-assisted execution of arbitrary code
  • Pierre-Yves Rofes (Mon Sep 08 2008 - 20:57:53 EEST)
• [ GLSA 200809-08 ] Amarok: Insecure temporary file creation
  • Pierre-Yves Rofes (Mon Sep 08 2008 - 21:08:57 EEST)
• [ GLSA 200809-09 ] Postfix: Denial of Service
  • Pierre-Yves Rofes (Fri Sep 19 2008 - 23:10:45 EEST)
• [ GLSA 200809-10 ] Mantis: Multiple vulnerabilities
  • Pierre-Yves Rofes (Sun Sep 21 2008 - 20:25:09 EEST)
• [ GLSA 200809-11 ] HAVP: Denial of Service
  • Pierre-Yves Rofes (Sun Sep 21 2008 - 20:31:33 EEST)
• [ GLSA 200809-12 ] Newsbeuter: User-assisted execution of arbitrary code
  • Pierre-Yves Rofes (Mon Sep 22 2008 - 23:07:04 EEST)
• [ GLSA 200809-13 ] R: Insecure temporary file creation
  • Pierre-Yves Rofes (Mon Sep 22 2008 - 23:15:42 EEST)
• [ GLSA 200809-14 ] BitlBee: Security bypass
  • Pierre-Yves Rofes (Wed Sep 24 2008 - 00:33:35 EEST)
• [ GLSA 200809-15 ] GNU ed: User-assisted execution of arbitrary code
  • Pierre-Yves Rofes (Wed Sep 24 2008 - 00:56:51 EEST)
• [ GLSA 200809-16 ] Git: User-assisted execution of arbitrary code
  • Pierre-Yves Rofes (Fri Sep 26 2008 - 00:09:41 EEST)
• [ GLSA 200809-17 ] Wireshark: Multiple Denials of Service
  • Pierre-Yves Rofes (Fri Sep 26 2008 - 00:15:47 EEST)
• [ GLSA 200809-18 ] ClamAV: Multiple Denials of Service
  • Pierre-Yves Rofes (Fri Sep 26 2008 - 00:23:08 EEST)
• [ MDVSA-2008:182 ] wordnet
  • security@mandriva.com (Tue Sep 02 2008 - 22:08:01 EEST)
• [ MDVSA-2008:182-1 ] wordnet
  • security@mandriva.com (Tue Sep 16 2008 - 01:48:00 EEST)
• [ MDVSA-2008:183 ] opensc
  • security@mandriva.com (Wed Sep 03 2008 - 00:14:00 EEST)
• [ MDVSA-2008:184 ] libtiff
  • security@mandriva.com (Wed Sep 03 2008 - 22:14:00 EEST)
• [ MDVSA-2008:185 ] python-django
  • security@mandriva.com (Wed Sep 03 2008 - 23:51:00 EEST)
• [ MDVSA-2008:186 ] python
  • security@mandriva.com (Fri Sep 05 2008 - 01:35:01 EEST)
• [ MDVSA-2008:188 ] tomcat5
  • security@mandriva.com (Sat Sep 06 2008 - 01:49:00 EEST)
• [ MDVSA-2008:189 ] clamav
  • security@mandriva.com (Wed Sep 10 2008 - 08:04:01 EEST)
• [ MDVSA-2008:189-1 ] clamav
  • security@mandriva.com (Wed Sep 17 2008 - 23:47:00 EEST)
• [ MDVSA-2008:190 ] postfix
  • security@mandriva.com (Wed Sep 10 2008 - 21:51:01 EEST)
• [ MDVSA-2008:191 ] rsh
  • security@mandriva.com (Fri Sep 12 2008 - 04:42:00 EEST)
• [ MDVSA-2008:192 ] libxml2
  • security@mandriva.com (Fri Sep 12 2008 - 05:10:00 EEST)
• [ MDVSA-2008:193 ] kolab-server
  • security@mandriva.com (Sat Sep 13 2008 - 22:11:00 EEST)
• [ MDVSA-2008:194 ] apache2
  • security@mandriva.com (Sun Sep 14 2008 - 00:39:01 EEST)
• [ MDVSA-2008:195 ] apache
  • security@mandriva.com (Sun Sep 14 2008 - 01:49:00 EEST)
• [ MDVSA-2008:196 ] mplayer
  • security@mandriva.com (Tue Sep 16 2008 - 01:24:00 EEST)
• [ MDVSA-2008:197 ] koffice
  • security@mandriva.com (Tue Sep 16 2008 - 02:12:00 EEST)
• [ MDVSA-2008:197-1 ] koffice
  • security@mandriva.com (Wed Sep 17 2008 - 10:30:00 EEST)
• [ MDVSA-2008:198 ] R-base
  • security@mandriva.com (Tue Sep 16 2008 - 23:57:01 EEST)
• [ MDVSA-2008:199 ] wireshark
  • security@mandriva.com (Fri Sep 19 2008 - 23:34:01 EEST)
• [ MDVSA-2008:200 ] ed
  • security@mandriva.com (Mon Sep 22 2008 - 23:34:01 EEST)
• [ MDVSA-2008:201 ] pan
  • security@mandriva.com (Tue Sep 23 2008 - 01:01:01 EEST)
• [ MDVSA-2008:202 ] phpMyAdmin
  • security@mandriva.com (Tue Sep 23 2008 - 21:50:00 EEST)
• [ MDVSA-2008:203 ] awstats
  • security@mandriva.com (Tue Sep 23 2008 - 22:52:00 EEST)
• [ MDVSA-2008:204 ] blender
  • security@mandriva.com (Wed Sep 24 2008 - 23:17:00 EEST)
• [ MDVSA-2008:205 ] mozilla-firefox
  • security@mandriva.com (Fri Sep 26 2008 - 02:36:01 EEST)
• [ MDVSA-2008:206 ] mozilla-thunderbird
  • security@mandriva.com (Sat Sep 27 2008 - 01:02:00 EEST)
• [ MDVSA-2008:207 ] openafs
  • security@mandriva.com (Tue Sep 30 2008 - 00:00:00 EEST)
• [ MDVSA-2008:208 ] pam_mount
  • security@mandriva.com (Tue Sep 30 2008 - 06:14:00 EEST)
• [AJECT] Softalk IMAP Server 8.5.1 DoS vulnerability
  • João Antunes (Tue Sep 02 2008 - 18:07:53 EEST)
• [AJECT] SurgeMail IMAP 3.9e vulnerability
  • João Antunes (Wed Sep 17 2008 - 15:52:37 EEST)
• [ECHO_ADV_101$2008] Attachmax Dolphin <= 2.1.0 Multiple Vulnerabilities
  • adv@e-rdc.org (Tue Sep 16 2008 - 23:29:09 EEST)
• [Full-disclosure] [IVIZ-08-010] McAfee SafeBoot Device Encryption Plain Text Password Disclosure (v4, Build 4750 and below)
  • Kenneth Ng (Fri Sep 26 2008 - 20:23:46 EEST)
• [MajorSecurity Advisory #53]BLUEPAGE CMS - Cross Site Scripting and Session Fixation Issues
  • admin@majorsecurity.de (Sun Sep 21 2008 - 23:54:33 EEST)
• [MajorSecurity Advisory #54]xt:Commerce - Cross Site Scripting and Session Fixation Issues
  • Philipp Hagemeister (Tue Sep 23 2008 - 17:04:32 EEST)
  • admin@majorsecurity.de (Mon Sep 22 2008 - 21:09:05 EEST)
  • admin@majorsecurity.de (Mon Sep 22 2008 - 04:05:18 EEST)
• [MajorSecurity Advisory #56]moziloWiki - Directory Traversal, XSS and SessionFixation Issues
  • admin@majorsecurity.de (Tue Sep 30 2008 - 03:09:33 EEST)
• [NOBYTES.COM: #12] osCommerce 2.2rc2a - Information Disclosure
  • John Cobb (Tue Sep 16 2008 - 23:43:38 EEST)
• [NOBYTES.COM: #13] Quick.Cart v3.1 Freeware - Cross Site Scripting
  • John Cobb (Wed Sep 17 2008 - 00:13:20 EEST)
• [NOBYTES.COM: #14] Quick.Cms.Lite v2.1 Freeware - Cross Site Scripting
  • John Cobb (Wed Sep 17 2008 - 00:15:16 EEST)
• [oCERT-2008-012] Horde, Popoon frameworks common input sanitization errors (XSS)
  • Will Drewry (Wed Sep 10 2008 - 20:00:05 EEST)
• [oCERT-2008-013] MPlayer Real demuxer heap overflow
  • Andrea Barisani (Mon Sep 29 2008 - 19:00:52 EEST)
• [oCERT-2008-014] WordNet stack and heap overflows
  • Rob Holland (Mon Sep 01 2008 - 18:43:57 EEST)
• [scip_Advisory 3808] D-Link DIR-100 long url filter evasion
  • Marc Ruef (Mon Sep 08 2008 - 11:13:44 EEST)
• [scip_Advisory 3809] Pro2col StingRay FTS login username cross site scripting
  • Marc Ruef (Fri Sep 12 2008 - 15:59:39 EEST)
• [security bulletin] HPSBMA02361 SSRT080119 rev.1 - HP OpenView Select Identity Connectors running on Windows, Local Information Disclosure
  • security-alert@hp.com (Fri Sep 05 2008 - 15:26:14 EEST)
• [security bulletin] HPSBMA02362 SSRT080044, SSRT080045 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Denial of Service (DoS)
  • security-alert@hp.com (Tue Sep 02 2008 - 18:07:13 EEST)
• [security bulletin] HPSBMA02369 SSRT080115 rev.1 - HP ProLiant Essentials Rapid Deployment Pack (RDP) Running Symantec Altiris Deployment Solution, Remote SQL Injection, Remote or Local Gain Extended Privileges, Local Denial of Service (DoS)
  • security-alert@hp.com (Wed Sep 17 2008 - 20:17:40 EEST)
• [security bulletin] HPSBMA02373 SSRT071467 rev.1 - HP Insight Diagnostics, Remote Unauthorized Access to Files
  • security-alert@hp.com (Mon Sep 29 2008 - 22:42:30 EEST)
• [security bulletin] HPSBOV02364 SSRT080078 rev.1 - HP OpenVMS SMGRTL Run Time Library, Local Authorized User, Gain Privileged Access
  • security-alert@hp.com (Thu Sep 11 2008 - 15:07:21 EEST)
• [security bulletin] HPSBOV02364 SSRT080078 rev.2 - HP OpenVMS SMGRTL Run Time Library, Local Authorized User, Gain Privileged Access
  • security-alert@hp.com (Thu Sep 18 2008 - 15:24:24 EEST)
• [security bulletin] HPSBOV02364 SSRT080078 rev.3 - HP OpenVMS SMGRTL Run Time Library, Local Authorized User, Gain Privileged Access
  • security-alert@hp.com (Thu Sep 25 2008 - 15:36:48 EEST)
• [security bulletin] HPSBST02372 SSRT080133 rev.1 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS08-052 to MS08-055
  • security-alert@hp.com (Thu Sep 25 2008 - 15:37:21 EEST)
• [security bulletin] HPSBUX02370 SSRT071459 rev.1 - HP-UX Running rpcbind, Remote Denial of Service (DoS)
  • security-alert@hp.com (Mon Sep 22 2008 - 19:31:08 EEST)
• [SECURITY] [DSA 1627-2] New opensc package fix incomplete check
  • Thijs Kinkhorst (Sun Aug 31 2008 - 13:37:11 EEST)
• [SECURITY] [DSA 1633-1] New slash packages fix multiple vulnerabilities
  • Florian Weimer (Mon Sep 01 2008 - 21:45:03 EEST)
• [SECURITY] [DSA 1634-1] New wordnet packages fix arbitrary code execution
  • Thijs Kinkhorst (Mon Sep 01 2008 - 22:17:47 EEST)
• [SECURITY] [DSA 1634-2] New wordnet packages fix regression
  • Thijs Kinkhorst (Sat Sep 20 2008 - 16:26:57 EEST)
• [SECURITY] [DSA 1635-1] New freetype packages fix multiple vulnerabilities
  • Steve Kemp (Wed Sep 10 2008 - 22:45:14 EEST)
• [SECURITY] [DSA 1636-1] New Linux 2.6.24 packages fix several vulnerabilities
  • dann frazier (Thu Sep 11 2008 - 21:16:39 EEST)
• [SECURITY] [DSA 1637-1] New git-core packages fix buffer overflow
  • Devin Carraway (Mon Sep 15 2008 - 10:38:47 EEST)
• [SECURITY] [DSA 1638-1] New openssh packages fix denial of service
  • Florian Weimer (Tue Sep 16 2008 - 23:41:23 EEST)
• [SECURITY] [DSA 1639-1] New twiki packages execution of arbitrary code
  • Steve Kemp (Fri Sep 19 2008 - 22:25:13 EEST)
• [SECURITY] [DSA 1640-1] New python-django packages fix cross site request forgery
  • Thijs Kinkhorst (Sat Sep 20 2008 - 16:08:21 EEST)
• [SECURITY] [DSA 1641-1] New phpmyadmin packages fix several issues
  • Thijs Kinkhorst (Sat Sep 20 2008 - 16:14:33 EEST)
• [SECURITY] [DSA 1642-1] New horde3 packages fix cross site scripting
  • Thijs Kinkhorst (Sat Sep 20 2008 - 16:21:13 EEST)
• [SECURITY] [DSA-1619-2] New python-dns package fixes regression
  • Devin Carraway (Mon Sep 22 2008 - 09:12:09 EEST)
• [SECURITY] CVE-2008-2938 - Apache Tomcat information disclosure vulnerability - Updated
  • Mark Thomas (Wed Sep 10 2008 - 13:06:27 EEST)
• [Suspected Spam][CVE-2008-4042] Postfix Linux-only local denial of service - PoC
  • Albert Sellarès (Tue Sep 16 2008 - 23:20:15 EEST)
• [Suspected Spam]New IETF I-D-: Security Assessment of the Internet Protocol version 4
  • Fernando Gont (Mon Sep 01 2008 - 09:51:53 EEST)
• [TKADV2008-007] Linux Kernel SCTP-AUTH API Information Disclosure Vulnerability and NULL Pointer Dereferences
  • Tobias Klein (Fri Sep 12 2008 - 00:19:32 EEST)
• [Tool] Distack framework for attack detection and traffic analysis
  • Christoph Mayer (Wed Sep 03 2008 - 14:47:28 EEST)
• [Tool] sqlmap 0.6 released
  • Bernardo Damele A. G. (Mon Sep 01 2008 - 16:35:18 EEST)
• [USN-639-1] tiff vulnerability
  • Kees Cook (Tue Sep 02 2008 - 23:25:06 EEST)
• [USN-640-1] libxml2 vulnerability
  • Kees Cook (Thu Sep 04 2008 - 02:08:39 EEST)
• [USN-641-1] Racoon vulnerabilities
  • Kees Cook (Tue Sep 09 2008 - 03:31:49 EEST)
• [USN-642-1] Postfix vulnerabilities
  • Kees Cook (Thu Sep 11 2008 - 01:41:59 EEST)
• [USN-643-1] FreeType vulnerabilities
  • Kees Cook (Fri Sep 12 2008 - 01:27:09 EEST)
• [USN-644-1] libxml2 vulnerabilities
  • Kees Cook (Fri Sep 12 2008 - 01:28:31 EEST)
• [USN-645-1] Firefox and xulrunner vulnerabilities
  • Jamie Strandboge (Wed Sep 24 2008 - 13:26:58 EEST)
• [USN-645-2] Firefox vulnerabilities
  • Jamie Strandboge (Wed Sep 24 2008 - 15:30:20 EEST)
• [USN-645-3] Firefox and xulrunner regression
  • Jamie Strandboge (Thu Sep 25 2008 - 21:32:04 EEST)
• [USN-646-1] rdesktop vulnerabilities
  • Jamie Strandboge (Thu Sep 18 2008 - 22:53:05 EEST)
• [USN-647-1] Thunderbird vulnerabilities
  • Jamie Strandboge (Fri Sep 26 2008 - 05:34:25 EEST)
• [WEB SECURITY] PR08-20: Bypassing ASP .NET "ValidateRequest" for Script Injection Attacks
  • ProCheckUp Research (Mon Sep 08 2008 - 11:07:37 EEST)
• adnforum <= 1.0b / Insecure Cookie Handling Vulnerability
  • Pepelux (Thu Sep 25 2008 - 20:32:16 EEST)
• Advanced Electron Forum <= 1.0.6 Remote Code Execution
  • GulfTech Security Research (Sat Sep 20 2008 - 16:10:14 EEST)
• Advisory 04/2008: Joomla Weak Random Password Reset Token Vulnerability
  • Stefan Esser (Thu Sep 11 2008 - 15:18:01 EEST)
• Advisory 05/2008: Wordpress user_login Column SQL Truncation Vulnerability
  • Stefan Esser (Fri Sep 12 2008 - 02:39:16 EEST)
• Advisory : Google Chrome Carriage Return Null Object Memory Exhaustion Remote Dos.
  • LIUDIEYU dot COM (Wed Sep 24 2008 - 20:37:47 EEST)
  • Aditya K Sood (Wed Sep 24 2008 - 07:02:55 EEST)
• Advisory : Opera Window Object Suppressing Remote Denial of Service
  • Aditya K Sood (Sun Sep 28 2008 - 22:01:01 EEST)
• Advisory: Google Chrome Window Object Suppressing Remote Denial of Service.
  • ian@chromium.org (Tue Sep 30 2008 - 19:40:45 EEST)
  • redb0ne@hush.com (Tue Sep 30 2008 - 21:03:25 EEST)
  • Aditya K Sood (Sun Sep 28 2008 - 08:11:06 EEST)
• Advisory: Mozilla Firefox User Interface Null Pointer Dereference Dispatcher Crash and Remote Denial of Service.
  • Philippe Devallois (Tue Sep 30 2008 - 10:46:08 EEST)
  • Aditya K Sood (Sun Sep 28 2008 - 21:27:35 EEST)
• Annutel - Annuaire Téléphonique v1.0 Sensetive Files (MDP)
  • sn0oPy.team@gmail.com (Fri Sep 19 2008 - 19:52:35 EEST)
• Aruba Mobility Controller Shared Default Certificate
  • nnposter@disclosed.not (Tue Sep 23 2008 - 06:51:58 EEST)
• Aruba Mobility Controller Shared Default Certificate - Response from Aruba Networks
  • Robbie (Rupinder) Gill (Tue Sep 23 2008 - 21:59:54 EEST)
• ASP News Remote Password Disclouse Vulnerability
  • Ghost hacker (Sat Sep 27 2008 - 17:56:49 EEST)
• Atheros Vendor Specific Information Element Overflow
  • Laurent Butti (Thu Sep 04 2008 - 11:34:03 EEST)
• Autodesk DWF Viewer Control / LiveUpdate Module remote code execution exploit
  • ipsdix@gmail.com (Tue Sep 30 2008 - 13:25:54 EEST)
• Avant Browser <= 11.7 Build 9 Integer Denial Of Service Exploit
  • Guns@0x90.com.ar (Fri Sep 12 2008 - 18:21:44 EEST)
• Baidu Hi IM client software DoS bug, div zero make client crash
  • Li Gen (Sun Sep 14 2008 - 13:59:58 EEST)
• Baidu Hi IM software parsing plaintext stack overflow
  • Li Gen (Sat Sep 13 2008 - 12:05:26 EEST)
• Blue Coat xss
  • Hugo van der Kooij (Tue Sep 23 2008 - 08:26:38 EEST)
  • jplopezy@gmail.com (Sun Sep 21 2008 - 15:37:14 EEST)
• C4 Security Advisory - ABB PCU400 4.4-4.6 Remote Buffer Overflow
  • Idan Ofrat (Thu Sep 25 2008 - 18:59:42 EEST)
• CA Service Desk Multiple Cross-Site Scripting Vulnerabilities
  • Williams, James K (Fri Sep 26 2008 - 05:10:35 EEST)
• Chrome(0.2.149.27) title(not the tag) Denial of Service(Freeze) exploit
  • Julien Stuby (Wed Sep 10 2008 - 15:45:46 EEST)
  • Mike Duncan (Tue Sep 09 2008 - 21:16:31 EEST)
  • Razi Shaban (Tue Sep 09 2008 - 19:40:00 EEST)
  • Rotem Kerner (Tue Sep 09 2008 - 11:08:54 EEST)
  • Razi Shaban (Tue Sep 09 2008 - 01:51:22 EEST)
  • gynvael@vexillium.org (Tue Sep 09 2008 - 01:49:52 EEST)
  • Wellington Wagner F. Sarmento (Tue Sep 09 2008 - 00:50:30 EEST)
  • Mike Duncan (Mon Sep 08 2008 - 20:43:36 EEST)
  • a@b.c (Mon Sep 08 2008 - 20:08:48 EEST)
  • Rotem Kerner (Mon Sep 08 2008 - 17:41:03 EEST)
• Cisco Secure ACS Denial Of Service Vulnerability
  • Cisco Systems Product Security Incident Response Team (Wed Sep 03 2008 - 20:00:00 EEST)
• Cisco Secure ACS EAP Parsing Vulnerability
  • Laurent Butti (Wed Sep 03 2008 - 18:04:16 EEST)
• Cisco Security Advisory: Cisco 10000, uBR10012, uBR7200 Series Devices IPC Vulnerability
  • Cisco Systems Product Security Incident Response Team (Wed Sep 24 2008 - 18:50:00 EEST)
• Cisco Security Advisory: Cisco IOS IPS Denial of Service Vulnerability
  • Cisco Systems Product Security Incident Response Team (Wed Sep 24 2008 - 18:50:00 EEST)
• Cisco Security Advisory: Cisco IOS MPLS Forwarding Infrastructure Denial of Service Vulnerability
  • Cisco Systems Product Security Incident Response Team (Wed Sep 24 2008 - 18:50:00 EEST)
• Cisco Security Advisory: Cisco IOS MPLS VPN May Leak Information
  • Cisco Systems Product Security Incident Response Team (Wed Sep 24 2008 - 18:50:00 EEST)
• Cisco Security Advisory: Cisco IOS NAT Skinny Call Control Protocol Vulnerability
  • Cisco Systems Product Security Incident Response Team (Wed Sep 24 2008 - 18:50:00 EEST)
• Cisco Security Advisory: Cisco IOS Software Firewall Application Inspection Control Vulnerability
  • Cisco Systems Product Security Incident Response Team (Wed Sep 24 2008 - 18:50:00 EEST)
• Cisco Security Advisory: Cisco IOS Software Layer 2 Tunneling Protocol (L2TP) Denial of Service Vulnerability
  • Cisco Systems Product Security Incident Response Team (Wed Sep 24 2008 - 18:50:00 EEST)
• Cisco Security Advisory: Cisco uBR10012 Series Devices SNMP Vulnerability
  • Cisco Systems Product Security Incident Response Team (Wed Sep 24 2008 - 18:50:00 EEST)
• Cisco Security Advisory: Cisco Unified Communications Manager Session Initiation Protocol Denial of Service Vulnerabilities
  • Cisco Systems Product Security Incident Response Team (Wed Sep 24 2008 - 18:50:00 EEST)
• Cisco Security Advisory: Multiple Cisco IOS Session Initiation Protocol Denial of Service Vulnerabilities
  • Cisco Systems Product Security Incident Response Team (Wed Sep 24 2008 - 18:50:00 EEST)
• Cisco Security Advisory: Multiple Multicast Vulnerabilities in Cisco IOS Software
  • Cisco Systems Product Security Incident Response Team (Wed Sep 24 2008 - 18:50:00 EEST)
• Cisco Security Advisory: Remote Access VPN and SIP Vulnerabilities in Cisco PIX and Cisco ASA
  • Cisco Systems Product Security Incident Response Team (Wed Sep 03 2008 - 20:15:00 EEST)
• Cisco Security Advisory: Vulnerability in Cisco IOS While Processing SSL Packet
  • Cisco Systems Product Security Incident Response Team (Wed Sep 24 2008 - 18:50:00 EEST)
• clamav: Crash with crafted chm, CVE-2008-1389
  • Hanno Böck (Thu Sep 04 2008 - 17:03:25 EEST)
• Clients format strings in the Unreal engine
  • Luigi Auriemma (Fri Sep 12 2008 - 02:36:52 EEST)
• community real-time BGP hijack notification service
  • Gadi Evron (Fri Sep 12 2008 - 15:00:38 EEST)
• CORE-2008-0126: iPhone Safari JavaScript alert Denial of Service
  • Core Security Technologies Advisories (Sat Sep 13 2008 - 00:45:36 EEST)
• Crashing ZoneAlarm 8.0.020.000 by Checkpoint (Component : TrueVector)
  • quakerdoomer@fmguy.com (Fri Sep 26 2008 - 19:30:23 EEST)
• Critical Vulnerability in Apple Quicktime’s Ineo Code
  • NGSSoftware Insight Security Research (Mon Sep 15 2008 - 20:21:49 EEST)
• Cross Site Scripting (XSS) Vulnerabilitiy in flatpress 0.804, CVE-2008-4120
  • Fabian Fingerle (Thu Sep 25 2008 - 19:28:38 EEST)
• Cross Site Scripting (XSS) Vulnerabilitiy in fuzzylime (cms) >=3.02, CVE-2008-3098
  • Fabian Fingerle (Mon Sep 22 2008 - 21:28:12 EEST)
• Crux Gallery <= 1.32 / Insecure Cookie Handling Vulnerability
  • Pepelux (Fri Sep 26 2008 - 18:56:24 EEST)
• CS-Cart <= 1.3.5 SQL Injection
  • GulfTech Security Research (Tue Sep 02 2008 - 22:09:55 EEST)
• csphonebook 1.02 Remote XSS Vulnerabilitiy
  • Ghost hacker (Sat Sep 27 2008 - 18:06:44 EEST)
• cyask 3.x Local File Inclusion Vulnerability
  • xuanmumu@gmail.com (Thu Sep 18 2008 - 09:50:05 EEST)
• DATAC RealWin 2.0 SCADA Software - Remote PreaAuth Exploit
  • Reversemode (Fri Sep 26 2008 - 14:21:28 EEST)
• DeepSec 2008 - Conference Schedule
  • DeepSec Conference Vienna (Wed Sep 10 2008 - 13:51:31 EEST)
• DEFCON London - DC4420 - September meet this Thursday 11th
  • Major Malfunction (Mon Sep 08 2008 - 12:44:16 EEST)
• Directory traversal in the webadmin of Unreal Tournament 3 1.3
  • Luigi Auriemma (Sun Sep 21 2008 - 21:35:02 EEST)
• Drupal Ajax Checklist Module SQL Injection Vulnerability
  • Justin C. Klein Keane (Wed Sep 24 2008 - 22:16:51 EEST)
• Drupal Brilliant Gallery module SQL injection vulnerability
  • Justin C. Klein Keane (Wed Sep 24 2008 - 22:29:43 EEST)
• drupal: Session hijacking vulnerability, CVE-2008-3661
  • Hanno Böck (Sat Sep 20 2008 - 12:30:52 EEST)
• E-Php B2B Trading Marketplace(cid) Remote SQL Injection Vulnerability
  • packet@packetstormsecurity.org (Wed Sep 10 2008 - 19:38:48 EEST)
• Estonian Cyber Security Strategy document -- now available online
  • Gadi Evron (Fri Sep 26 2008 - 16:39:56 EEST)
• Exploit
  • Admin@irist.ir (Tue Sep 02 2008 - 10:18:29 EEST)
• Ezphotogallery 2.1 Multiple Vulnerabilities ( Xss/Login Bypass/Sql injection Exploit/File Disclosure)
  • irancrash@gmail.com (Thu Sep 11 2008 - 02:48:59 EEST)
• Failed assertion in the Unreal engine
  • Luigi Auriemma (Tue Sep 16 2008 - 21:10:02 EEST)
• FreeBSD Security Advisory FreeBSD-SA-08:07.amd64
  • FreeBSD Security Advisories (Wed Sep 03 2008 - 23:13:04 EEST)
• FreeBSD Security Advisory FreeBSD-SA-08:08.nmount
  • FreeBSD Security Advisories (Wed Sep 03 2008 - 23:13:13 EEST)
• FreeBSD Security Advisory FreeBSD-SA-08:09.icmp6
  • FreeBSD Security Advisories (Wed Sep 03 2008 - 23:13:20 EEST)
• FtitzBox
  • biglowbird@googlemail.com (Fri Sep 26 2008 - 23:03:03 EEST)
• Fwd: Returned post for bugtraq@securityfocus.com
  • Jose Luis (Thu Sep 25 2008 - 20:32:42 EEST)
• Google Chrome 0.2.149.27 'SaveAs' Function Buffer Overflow Vulnerability
  • Security Vulnerability Research Team (Fri Sep 05 2008 - 16:33:25 EEST)
• Google Chrome Auto download exploit ..
  • security@soqor.net (Sat Sep 06 2008 - 06:52:58 EEST)
• Google Chrome Automatic File Download
  • Juha-Matti Laurio (Thu Sep 04 2008 - 13:53:51 EEST)
  • James C. Slora Jr. (Thu Sep 04 2008 - 00:24:15 EEST)
  • Razi Shaban (Wed Sep 03 2008 - 21:03:37 EEST)
  • nerex@live.com (Wed Sep 03 2008 - 01:58:27 EEST)
• Google Chrome Browser (ver.0.2.149.27) Vulnerability
  • psy.echo@gmail.com (Wed Sep 03 2008 - 00:59:47 EEST)
• Google Docs (HTML code) Multiple Cross Site Scripting Vulnerabilities
  • alfredo.melloni@gmail.com (Thu Sep 25 2008 - 17:28:22 EEST)
• Has anyone implemented "double forward DNS"?
  • Steven Bakker (Fri Sep 05 2008 - 12:11:23 EEST)
  • Ansgar -59cobalt- Wiechers (Thu Sep 04 2008 - 16:34:16 EEST)
  • terry white (Wed Sep 03 2008 - 10:46:01 EEST)
  • Glynn Clements (Wed Sep 03 2008 - 03:25:46 EEST)
  • Jerry Franz (Wed Sep 03 2008 - 19:40:04 EEST)
  • Ansgar Wiechers (Wed Sep 03 2008 - 02:59:22 EEST)
  • The Fungi (Wed Sep 03 2008 - 06:42:32 EEST)
  • Duncan Simpson (Sat Aug 30 2008 - 03:05:51 EEST)
• Hi Two Points to consider
  • Aditya K Sood (Thu Sep 18 2008 - 18:22:57 EEST)
• HPSBUX02354 SSRT080113 rev.1 - HP-UX Running Netscape / Red Hat Directory Server, Remote Cross Site Scripting (XSS) or Remote Denial of Service (DoS)
  • security-alert@hp.com (Tue Sep 02 2008 - 15:14:04 EEST)
• hyBook Remote Password Disclouse Vulnerability
  • Ghost hacker (Sat Sep 27 2008 - 18:14:19 EEST)
• IAS Helper COM Component (iashlpr.dll) activex remote DOS
  • hamedata@gmail.com (Wed Sep 24 2008 - 15:42:25 EEST)
• iDefense Security Advisory 09.09.08: Apple QuickTime PICT Integer Overflow Vulnerability
  • iDefense Labs (Wed Sep 10 2008 - 03:38:46 EEST)
• iDefense Security Advisory 09.09.08: Microsoft Windows GDI+ Gradient Fill Heap Overflow Vulnerability
  • iDefense Labs (Wed Sep 10 2008 - 03:27:32 EEST)
• In search of examples of malicious source code
  • Gabriele Zanoni (Wed Sep 03 2008 - 10:45:12 EEST)
  • Steve.Coleman@jhuapl.edu (Tue Sep 02 2008 - 13:06:47 EEST)
• Insomnia : ISVA-080910.1 - MS Office OneNote URL Handling Vulnerability
  • Brett Moore (Wed Sep 10 2008 - 01:16:02 EEST)
• InstallShield Update Agent - Downloads and executes "Rule Scripts" insecurely.
  • Brian Dowling (Tue Sep 16 2008 - 19:09:13 EEST)
• International Hacking & Security Conference "POC2008"
  • pocadm@gmail.com (Tue Sep 30 2008 - 18:41:43 EEST)
• Internet Information Service (adsiis.dll) activex remote DOS
  • hamedata@gmail.com (Wed Sep 24 2008 - 15:44:04 EEST)
• Internet Information Service remote set password
  • hamedata@gmail.com (Wed Sep 24 2008 - 15:40:07 EEST)
• Linksys/Cisco WRT350N 1.0.3.7 Insecure Samba Static Configuration
  • Teh Kotak (Fri Sep 26 2008 - 15:37:09 EEST)
• Login Password Sample Remote Password Disclouse Vulnerability
  • Ghost hacker (Sat Sep 27 2008 - 18:57:14 EEST)
• LooYu Web IM 2008 Cross-Site Scripting Vulnerabilities
  • xsp (Fri Sep 19 2008 - 09:52:35 EEST)
• MapCal - The Mapping Calendar (v. 0.1) Remote SQL Injection
  • Guns@0x90.com.ar (Sun Sep 21 2008 - 06:00:40 EEST)
• Marvell Driver EAPoL-Key Length Overflow
  • Laurent Butti (Thu Sep 04 2008 - 11:37:46 EEST)
• Marvell Driver Null SSID Association Request Vulnerability
  • Laurent Butti (Thu Sep 04 2008 - 11:46:01 EEST)
• menalto gallery: Session hijacking vulnerability, CVE-2008-3102
  • Hanno Böck (Tue Sep 23 2008 - 02:06:45 EEST)
• menalto gallery: Session hijacking vulnerability, CVE-2008-3102)
  • Hanno Böck (Wed Sep 24 2008 - 00:37:16 EEST)
• menalto gallery: Session hijacking vulnerability, CVE-2008-3662
  • Hanno Böck (Thu Sep 18 2008 - 14:00:09 EEST)
• Microsoft Internet Explorer DoS in Rendering Malicious PNG Files.
  • Aditya K Sood (Wed Sep 17 2008 - 15:58:51 EEST)
• Microsoft Windows WRITE_ANDX SMB command handling Kernel DoS
  • j.v.vallejo@gmail.com (Mon Sep 15 2008 - 02:12:51 EEST)
• minb Remote Code Execution Exploit
  • r3d.w0rm@yahoo.com (Thu Sep 11 2008 - 14:32:16 EEST)
• Miranda IM Client Password Disclosure Vulnerability.
  • Aditya K Sood (Wed Sep 17 2008 - 15:37:27 EEST)
• MS Internet Explorer 7 Denial Of Service Exploit
  • Jan van Niekerk (Tue Sep 30 2008 - 08:37:12 EEST)
  • UniquE@UniquE-Key.ORG (Mon Sep 29 2008 - 22:59:55 EEST)
• Multiple Cross Site Scripting (XSS) and SQL injection Vulnerabilities in XRMS, CVE-2008-3664
  • Fabian Fingerle (Thu Sep 04 2008 - 03:04:48 EEST)
• Multiple Cross Site Scripting (XSS) Vulnerabilities in vtigerCRM 5.0.4, CVE-2008-3101
  • Fabian Fingerle (Mon Sep 01 2008 - 12:24:01 EEST)
• Multiple MicroWorld products insecure directory permissions
  • Edi Strosar (Fri Sep 05 2008 - 00:09:10 EEST)
• multiple vendor ftpd - Cross-site request forgery
  • cxib@securityreason.com (Fri Sep 26 2008 - 18:20:18 EEST)
• Multiple Vulnerabilities: LedgerSMB < 1.2.15
  • Chris Travers (Wed Sep 10 2008 - 04:02:19 EEST)
• MyFWB 1.0 Remote SQL Injection
  • Guns@0x90.com.ar (Sat Sep 20 2008 - 19:10:13 EEST)
• MySQL command-line client HTML injection vulnerability
  • Thomas Henlich (Tue Sep 30 2008 - 11:29:38 EEST)
• Nooms 1.1
  • irancrash@gmail.com (Thu Sep 11 2008 - 15:24:24 EEST)
• Novell ZENWorks for Desktops Version 6.5 Remote (Heap-Based) PoC
  • Satan_HackerS@Yahoo.com (Sat Sep 27 2008 - 15:21:35 EEST)
• OpenWiki<--v0.78 Cross-Site Scripting
  • DJeep@OpenWiki.com (Fri Sep 12 2008 - 08:45:54 EEST)
• Oracle 10g Dynamic Monitoring Services XSS /servlet/Spy
  • dstinbox@gmail.com (Fri Sep 05 2008 - 19:43:12 EEST)
• other google chrome crash
  • jplopezy@gmail.com (Fri Sep 05 2008 - 02:09:48 EEST)
• ParsaWeb CMS SQL Injection
  • admin@bugreport.ir (Sun Sep 28 2008 - 15:31:03 EEST)
• PHP Calendar Script Remote XSS (Permanent) Vulnerabilities
  • tan_prathan@hotmail.com (Sun Sep 28 2008 - 09:26:27 EEST)
• php create_function commond injection vulnerability
  • Steven M. Christey (Mon Sep 29 2008 - 20:14:13 EEST)
  • mnapier@slis.indiana.edu (Mon Sep 29 2008 - 19:14:05 EEST)
  • bzhbfzj3001@sneakemail.com (Mon Sep 29 2008 - 10:54:47 EEST)
  • lmfao@hotmail.com (Thu Sep 25 2008 - 18:53:02 EEST)
  • root@80sec.com (Thu Sep 25 2008 - 05:30:32 EEST)
• PHP pro bid v 6.04 SQL injection
  • Jan van Niekerk (Fri Sep 19 2008 - 12:14:40 EEST)
• phpAdultSite CMS flaws
  • SmOk3 (Sun Sep 07 2008 - 20:20:20 EEST)
• PhpWebGallery 1.3.4 Multiple Vulnerabilities (XSS/LFI)
  • irancrash@gmail.com (Thu Sep 11 2008 - 11:55:19 EEST)
• PhsBlog v0.2 Bypass Sql injection Filtering Exploit
  • irancrash@gmail.com (Thu Sep 11 2008 - 13:23:18 EEST)
• Pidgin IM Client Password Disclosure Vulnerability.
  • Quark IT - Hilton Travis (Fri Sep 19 2008 - 06:20:07 EEST)
  • John Bailey (Fri Sep 19 2008 - 18:32:17 EEST)
  • Memisyazici, Aras (Fri Sep 19 2008 - 07:32:23 EEST)
  • Steve Shockley (Fri Sep 19 2008 - 05:15:37 EEST)
  • John Bailey (Fri Sep 19 2008 - 00:44:07 EEST)
  • Memisyazici, Aras (Thu Sep 18 2008 - 22:16:18 EEST)
  • Siim Põder (Thu Sep 18 2008 - 14:29:51 EEST)
  • Quark IT - Hilton Travis (Thu Sep 18 2008 - 07:40:45 EEST)
  • Aditya K Sood (Thu Sep 18 2008 - 18:04:07 EEST)
  • Aditya K Sood (Wed Sep 17 2008 - 15:41:08 EEST)
• Plesk 8.6.0 authentication flaw allows to gain virtual user priviledges
  • Felix Buenemann (Sun Aug 31 2008 - 13:50:38 EEST)
• Postfix Linux-only local denial of service
  • Wietse Venema (Tue Sep 02 2008 - 15:53:52 EEST)
• Remote File Inclusion Vulnerability
  • Pepelux (Tue Sep 30 2008 - 19:20:46 EEST)
• RES: Google Chrome Automatic File Download
  • Nick FitzGerald (Sat Sep 06 2008 - 09:06:11 EEST)
  • DIOGO LEAL CHAGAS (Wed Sep 03 2008 - 20:28:19 EEST)
• Risky Chrome (The perfect cleartext password offering )
  • quakerdoomer@fmguy.com (Fri Sep 05 2008 - 08:59:02 EEST)
• RPG.Board <= 0.0.8Beta2 Remote SQL Injection
  • Guns@0x90.com.ar (Fri Sep 26 2008 - 18:16:24 EEST)
• rPSA-2008-0264-1 ruby
  • rPath Update Announcements (Sun Aug 31 2008 - 16:20:14 EEST)
• rPSA-2008-0268-1 libtiff
  • rPath Update Announcements (Fri Sep 05 2008 - 06:52:55 EEST)
• rPSA-2008-0276-1 mercurial mercurial-hgk
  • rPath Update Announcements (Wed Sep 17 2008 - 21:31:37 EEST)
• rPSA-2008-0278-1 tshark wireshark
  • rPath Update Announcements (Wed Sep 17 2008 - 19:07:23 EEST)
• rPSA-2008-0286-1 mono
  • rPath Update Announcements (Tue Sep 30 2008 - 05:06:25 EEST)
• RUXCON 2008 Final Call For Papers
  • cfp@ruxcon.org.au (Tue Sep 02 2008 - 08:14:33 EEST)
• Sagem Router F@ST 2404 Remote Denial Of Service Exploit
  • Vladimir '3APA3A' Dubrovin (Tue Sep 09 2008 - 01:22:53 EEST)
  • zigma@underz0ne.net (Mon Sep 08 2008 - 16:35:51 EEST)
• Sama XSS Bug
  • Lagon666@Yahoo.com (Thu Sep 18 2008 - 09:44:16 EEST)
• Secunia Research: Novell iPrint Client nipplib.dll "IppCreateServerRef()" Buffer Overflow
  • Secunia Research (Wed Sep 03 2008 - 11:42:26 EEST)
• Secunia Research: Trend Micro OfficeScan "cgiRecvFile.exe" Buffer Overflow
  • Secunia Research (Fri Sep 12 2008 - 10:24:10 EEST)
• SECURITY ADVISORY - Level Platforms, Inc. Service Center Install Data HTTP Vulnerability
  • prenaud@levelplatforms.com (Mon Sep 08 2008 - 15:03:24 EEST)
• Security flaw in Airtel DSL modems
  • shr@birmiwal.net (Tue Sep 16 2008 - 11:49:52 EEST)
• SecurityFocus Linux Newsletter #405
  • sfa@securityfocus.com (Fri Sep 05 2008 - 00:40:18 EEST)
• SecurityFocus Linux Newsletter #406
  • sfa@securityfocus.com (Fri Sep 12 2008 - 01:41:33 EEST)
• SecurityFocus Linux Newsletter #407
  • sfa@securityfocus.com (Thu Sep 18 2008 - 01:22:41 EEST)
• SecurityFocus Linux Newsletter #408
  • sfa@securityfocus.com (Fri Sep 26 2008 - 01:00:45 EEST)
• SecurityFocus Microsoft Newsletter #410
  • sfa@securityfocus.com (Fri Sep 05 2008 - 00:40:13 EEST)
• SecurityFocus Microsoft Newsletter #411
  • sfa@securityfocus.com (Fri Sep 12 2008 - 01:41:29 EEST)
• SecurityFocus Microsoft Newsletter #412
  • sfa@securityfocus.com (Thu Sep 18 2008 - 01:22:36 EEST)
• SecurityFocus Microsoft Newsletter #413
  • sfa@securityfocus.com (Fri Sep 26 2008 - 01:00:40 EEST)
• SecurityFocus Newsletter #469
  • sfa@securityfocus.com (Fri Sep 05 2008 - 00:40:09 EEST)
• SecurityFocus Newsletter #470
  • sfa@securityfocus.com (Fri Sep 12 2008 - 01:41:25 EEST)
• SecurityFocus Newsletter #471
  • sfa@securityfocus.com (Thu Sep 18 2008 - 01:22:29 EEST)
• SecurityFocus Newsletter #472
  • sfa@securityfocus.com (Fri Sep 26 2008 - 01:00:35 EEST)
• Server termination in the Unreal engine 3
  • Luigi Auriemma (Fri Sep 12 2008 - 02:36:30 EEST)
• ShmooCon 2009 CFP
  • Bruce Potter (Wed Sep 17 2008 - 16:15:24 EEST)
• shoutbox Remote Password Disclouse Vulnerability
  • Ghost hacker (Sat Sep 27 2008 - 18:11:12 EEST)
• Skype IM Client Password Disclosure Vulnerability.
  • Aditya K Sood (Wed Sep 17 2008 - 15:32:38 EEST)
• SQL Injection in EasyRealtorPRO 2008
  • SmOk3 (Thu Sep 25 2008 - 22:31:25 EEST)
• SQL Smuggling
  • Gary Oleary-Steele (Thu Sep 11 2008 - 12:04:39 EEST)
  • Tim (Wed Sep 10 2008 - 02:34:23 EEST)
  • Marco Ivaldi (Wed Sep 10 2008 - 14:03:24 EEST)
  • douglen@hotmail.com (Tue Sep 09 2008 - 14:22:20 EEST)
• sqlvdir.dll ActiveX Remote Buffer Overflow Exploit
  • beenudel1986@gmail.com (Thu Sep 11 2008 - 13:21:06 EEST)
• Squirrelmail: Session hijacking vulnerability, CVE-2008-3663
  • Hanno Böck (Tue Sep 23 2008 - 02:09:55 EEST)
• Stash v1.0.3 Admin bypass / Remote File Disclosure
  • r3d.w0rm@yahoo.com (Tue Sep 09 2008 - 09:41:38 EEST)
• Sun M-class hardware denial of service
  • Bob Beck (Tue Sep 30 2008 - 18:23:13 EEST)
  • Theo de Raadt (Sun Sep 28 2008 - 17:14:16 EEST)
  • Brett Lymn (Mon Sep 29 2008 - 05:57:29 EEST)
  • Brett Lymn (Mon Sep 29 2008 - 05:42:22 EEST)
  • Brett Lymn (Mon Sep 29 2008 - 05:23:48 EEST)
  • Brett Lymn (Mon Sep 29 2008 - 05:01:39 EEST)
  • Theo de Raadt (Mon Sep 29 2008 - 05:53:10 EEST)
  • Theo de Raadt (Mon Sep 29 2008 - 05:36:17 EEST)
  • Brett Lymn (Mon Sep 29 2008 - 04:34:21 EEST)
  • Theo de Raadt (Mon Sep 29 2008 - 04:53:11 EEST)
  • Theo de Raadt (Mon Sep 29 2008 - 05:14:35 EEST)
  • Florian Weimer (Mon Sep 29 2008 - 22:02:30 EEST)
  • Theo de Raadt (Mon Sep 29 2008 - 21:55:26 EEST)
  • Florian Weimer (Mon Sep 29 2008 - 21:48:43 EEST)
  • Curtis Maloney (Thu Sep 11 2008 - 09:07:36 EEST)
  • Brett Lymn (Thu Sep 11 2008 - 05:16:47 EEST)
  • terry white (Wed Sep 10 2008 - 00:23:57 EEST)
  • Florian Weimer (Wed Sep 10 2008 - 22:01:05 EEST)
  • Bob Beck (Wed Sep 10 2008 - 01:09:01 EEST)
  • Micheal Patterson (Wed Sep 10 2008 - 17:07:00 EEST)
  • Michael Wojcik (Wed Sep 10 2008 - 15:41:02 EEST)
  • Theo de Raadt (Wed Sep 10 2008 - 00:27:40 EEST)
  • B 650 (Wed Sep 10 2008 - 00:04:14 EEST)
  • Theo de Raadt (Tue Sep 09 2008 - 22:42:30 EEST)
  • B 650 (Tue Sep 09 2008 - 22:29:43 EEST)
  • Theo de Raadt (Tue Sep 09 2008 - 09:58:25 EEST)
• T2´08 Challenge - Free Tickets Available
  • Tomi Tuominen (Sun Aug 31 2008 - 13:32:28 EEST)
• Team SHATTER Security Advisory: IBM DB2 UDB - Buffer overrun in XMLQUERY and XMLEXISTS
  • Shatter (Tue Sep 16 2008 - 22:49:23 EEST)
• Team SHATTER Security Advisory: Security Vulnerability in CLR stored procedure deployment from IBM Database Add-Ins for Visual Studio
  • Shatter (Tue Sep 16 2008 - 22:43:46 EEST)
• The Gemini Portal <= 4.7 / Insecure Cookie Handling Vulnerability
  • Pepelux (Fri Sep 26 2008 - 18:18:44 EEST)
• ToorCon X Lineup & Training Seminars Posted & Pre-Registration Ending
  • h1kari@toorcon.org (Tue Sep 02 2008 - 04:09:00 EEST)
• TPTI-08-06: Landesk QIP Server Service Heal Packet Buffer Overflow
  • dvlabs (Tue Sep 16 2008 - 00:32:56 EEST)
• TransLucid 1.75 (fckeditor) Remote Arbitrary File Upload
  • admin@bugreport.ir (Wed Sep 03 2008 - 13:31:32 EEST)
• Verizon FIOS (and DSL?) wireless access point insecure default WEP key
  • Larry Seltzer (Mon Sep 29 2008 - 18:41:29 EEST)
  • Paul (Mon Sep 29 2008 - 01:02:48 EEST)
• vi can run arbitrary commands via 'tags' file
  • Eli the Bearded (Thu Sep 18 2008 - 23:57:57 EEST)
• VMSA-2008-0015 Updated ESXi and ESX 3.5 packages address critical security issue in openwsman
  • VMware Security Team (Fri Sep 19 2008 - 08:21:21 EEST)
• WASC Announcement: 2007 Web Application Security Statistics Published
  • statistics@webappsec.org (Mon Sep 08 2008 - 19:27:08 EEST)
• White Wolf Labs #080922-1: Exploitation Through ActiveSync 4.x
  • Seth Fogie (Tue Sep 30 2008 - 17:08:05 EEST)
• Windows GDI+ GIF memory corruption
  • Ivan Fratric (Wed Sep 10 2008 - 12:07:31 EEST)
• WordPress MU < 2.6 wpmu-blogs.php Crose Site Scrpting vulnerability
  • Juan Galiana (Tue Sep 30 2008 - 00:35:26 EEST)
• XCon 2008 Call for Paper
  • Sowhat (Fri Sep 05 2008 - 11:41:21 EEST)
  • Sowhat (Fri Sep 05 2008 - 11:40:19 EEST)
  • Sowhat (Fri Sep 05 2008 - 10:48:40 EEST)
• xoops-1.3.10 shell command execute vulnerability ( causing snoopy class )
  • geinblues@gmail.com (Sun Sep 07 2008 - 15:13:26 EEST)
• Xss In Datalife Engine CMS 7.2
  • hadikiamarsi@hotmail.com (Tue Sep 23 2008 - 08:14:45 EEST)
• xss in hackmeeting.org
  • wiky (Sat Sep 27 2008 - 03:32:09 EEST)
• ZDI-08-055: Microsoft Windows GDI+ BMP Parsing Code Execution Vulnerability
  • zdi-disclosures@3com.com (Tue Sep 09 2008 - 22:41:29 EEST)
• ZDI-08-056: Microsoft Windows GDI+ GIF Parsing Code Execution Vulnerability
  • zdi-disclosures@3com.com (Tue Sep 09 2008 - 22:41:36 EEST)
• ZDI-08-057: Apple QuickTime IV32 Codec Parsing Stack Overflow Vulnerability
  • zdi-disclosures@3com.com (Wed Sep 10 2008 - 00:56:07 EEST)
• ZDI-08-058: Apple QuickTime Panorama PDAT Atom Parsing Buffer Overflow Vulnerability
  • zdi-disclosures@3com.com (Wed Sep 10 2008 - 00:56:49 EEST)
• ZDI-08-059: Apple QuickTime STSZ Atom Parsing Heap Corruption Vulnerability
  • zdi-disclosures@3com.com (Wed Sep 10 2008 - 00:57:34 EEST)
• ZDI-08-060: Apple QuickTime AVC1 Atom Parsing Heap Overflow Vulnerability
  • zdi-disclosures@3com.com (Wed Sep 10 2008 - 00:58:19 EEST)
• ZDI-08-061: Apple QuickTime Player H.264 Parsing Heap Corruption Vulnerability
  • zdi-disclosures@3com.com (Wed Sep 10 2008 - 00:59:17 EEST)
• ZDI-08-062: Apple QuickTime MDAT Frame Parsing Memory Corruption Vulnerability
  • zdi-disclosures@3com.com (Wed Sep 10 2008 - 00:59:52 EEST)
• Zen Cart <= 1.3.8a SQL Injection
  • Ian Wilson (Fri Sep 05 2008 - 02:22:04 EEST)
  • GulfTech Security Research (Thu Sep 04 2008 - 21:30:23 EEST)
• ZoneAlarm Security Suite buffer overflow
  • jplopezy@gmail.com (Thu Sep 11 2008 - 09:36:07 EEST)

Last message date: Tue Sep 30 2008 - 22:49:06 EEST
Archived on: Tue Sep 30 2008 - 22:49:08 EEST

This archive was generated by hypermail 2b28 : Tue Sep 30 2008 - 22:49:08 EEST