stdin
By Author

• Adam Laurie
  • ANNOUNCE - RFIDIOt version 0.1t released (Wed Oct 08 2008 - 17:28:43 EEST)
• Aditya K Sood
  • Google Chrome OnbeforeUload and OnUnload Null Check Vulnerability. (Tue Oct 21 2008 - 06:42:02 EEST)
• admin@bugreport.ir
  • CMME Multiple Information disclosure vulnerabilities (Sat Oct 04 2008 - 11:17:24 EEST)
• admin@irist.ir
  • HostAdmin 3.* Remote File Include Vulnerabilities (Tue Oct 07 2008 - 08:04:22 EEST)
  • HostAdmin Cross-Site Scripting Vulnerabilities (Thu Oct 02 2008 - 19:20:25 EEST)
• admin@majorsecurity.de
  • Re: HostAdmin 3.* Remote File Include Vulnerabilities (Wed Oct 08 2008 - 01:52:49 EEST)
  • Re: [MajorSecurity Advisory #53]BLUEPAGE CMS - Cross Site Scripting and Session Fixation Issues (Thu Oct 02 2008 - 13:00:04 EEST)
• Adrian P
  • Universal Website Hijacking by Exploiting Firewall Content Filtering Features + SonicWALL firewalls 0day (Fri Oct 31 2008 - 04:31:03 EET)
• alighieri_m@libero.it
  • Re: MJGuest 6.8 GT Cross Site Scripting Vulnerability (Thu Oct 23 2008 - 12:38:55 EEST)
• Amit Klein
  • Re: Writeup by Amit Klein (Trusteer): Address Bar Spoofing for IE6 (Mon Oct 27 2008 - 19:01:49 EET)
  • Writeup by Amit Klein (Trusteer): Address Bar Spoofing for IE6 (Mon Oct 27 2008 - 18:14:20 EET)
• angel@ch4ng.cc
  • Webscene eCommerce (level) Remote Sql Injection (Tue Oct 14 2008 - 19:29:29 EEST)
• artful38@yahoo.com
  • Re: Motorola Timbuktu's Internet Locator Service real-time data exposed to public. (Tue Oct 07 2008 - 23:06:24 EEST)
• atomo64@gmail.com
  • phpMyID can act as a redirector and as headers injector (Tue Sep 30 2008 - 03:55:49 EEST)
• beenudel1986@gmail.com
  • phpWebSite links.php Sql Injection (Fri Oct 31 2008 - 06:20:52 EET)
  • spitfirephoto Pro pages.php Sql Injection (Fri Oct 31 2008 - 06:18:18 EET)
  • harlandscripts Mypage.php Sql Injection (Thu Oct 30 2008 - 06:26:34 EET)
• Berend-Jan Wever
  • Re: Advanced application-level OS fingerprinting (Thu Oct 30 2008 - 19:28:47 EET)
• Bernardo Damele A. G.
  • [Tool] sqlmap 0.6.1 released (Mon Oct 20 2008 - 17:45:16 EEST)
• Bernhard Mueller
  • SEC Consult SA-20081016-0 :: Remote command execution in Instant Expert Analysis (Thu Oct 16 2008 - 16:16:03 EEST)
• blapost@gmail.com
  • [tool] crapto1 released (Tue Oct 21 2008 - 20:17:14 EEST)
• brad.antoniewicz@foundstone.com
  • MetaGauge 1.0.0.17 Directory Traversal (Fri Oct 03 2008 - 23:02:11 EEST)
• Brett Moore
  • Insomnia : ISVA-081020.1 - Altiris Deployment Server Agent - Privilege Escalation (Tue Oct 21 2008 - 02:29:43 EEST)
• Cesar
  • Token Kidnapping Windows 2003 PoC exploit (Thu Oct 09 2008 - 00:33:39 EEST)
• ch0p83@gmail.com
  • flashchat severe bug (Fri Oct 17 2008 - 17:44:38 EEST)
• Chip Panarchy
  • MS08-067 - Where can I find an exploit for this? (Fri Oct 24 2008 - 08:06:31 EEST)
• Chris Clark
  • iSEC Partners Security Advisory - 2008-002-lenovornr - Lenovo Rescue and Recovery 4.20 (Sat Oct 11 2008 - 01:24:59 EEST)
• Cisco Systems Product Security Incident Response Team
  • Cisco Security Advisory: Multiple Vulnerabilities in Cisco PIX and Cisco ASA (Wed Oct 22 2008 - 18:45:17 EEST)
  • Cisco Security Advisory: Authentication Bypass in Cisco Unity (Wed Oct 08 2008 - 19:18:26 EEST)
• ClubHack
  • ClubHack2008 [India] - CFP Closing Soon (Mon Oct 27 2008 - 14:41:11 EET)
• cocoruder
  • CA BrightStor ARCServe BackUp Message Engine Remote Command Injection Vulnerability (Sat Oct 11 2008 - 03:43:41 EEST)
• CORE Security Technologies Advisories
  • CORE-2008-1010: VLC media player XSPF Memory Corruption (Wed Oct 15 2008 - 00:16:57 EEST)
• crimson.loyd@gmail.com
  • DebugDiag (CrashHangExt.dll 1.0) NULL Pointer Dereference (Thu Oct 30 2008 - 11:57:49 EET)
  • FastStone Image Viewer v3.6 (malformed bmp image) DoS Exploit (Sun Oct 05 2008 - 17:29:14 EEST)
  • AyeView v2.20 (malformed gif image) DoS Exploit (Sat Oct 04 2008 - 22:49:42 EEST)
• Cru3l.b0y
  • bcoos 1.0.13 Remote File Include Vulnerability (Mon Oct 27 2008 - 13:36:41 EET)
• dan.crowley@gmail.com
  • Advanced application-level OS fingerprinting (Wed Oct 29 2008 - 22:55:55 EET)
  • Application-level OS fingerprinting research - pre-release hashes (Fri Oct 17 2008 - 22:22:39 EEST)
• dann frazier
  • [SECURITY] [DSA 1655-1] New Linux 2.6.24 packages fix several vulnerabilities (Fri Oct 17 2008 - 03:19:48 EEST)
  • [SECURITY] [DSA 1653-1] New Linux 2.6.18 packages fix several vulnerabilities (Mon Oct 13 2008 - 23:25:41 EEST)
• Davide Dante Del Vecchio
  • Re: MS OWA 2003 Redirection Vulnerability - [MSRC7368br] (Sun Oct 19 2008 - 04:16:51 EEST)
• Davide Del Vecchio
  • Re: MS OWA 2003 Redirection Vulnerability - [MSRC 7368br] (Fri Oct 17 2008 - 22:07:58 EEST)
• DeepSec Conference Vienna
  • Last Call for DeepSec IDSC 2008 in Vienna (Mon Oct 20 2008 - 22:44:19 EEST)
• Devin Carraway
  • [SECURITY] [DSA 1646-2] New squid packages fix array bounds check (Sat Oct 11 2008 - 09:46:58 EEST)
  • [SECURITY] [DSA-1646-1] New squid packages fix array bounds check (Tue Oct 07 2008 - 09:12:02 EEST)
  • [SECURITY] [DSA-1644-1] New mplayer packages fix integer overflows (Sun Oct 05 2008 - 23:55:31 EEST)
• dh@layereddefense.com
  • Layered Defense Research Advisory: Juniper Netscreen Firewall Cross-Site-Scripting (XSS) event log injection (Thu Oct 02 2008 - 04:59:24 EEST)
• djmomo@live.com
  • Vivid Ads Shopping Cart (cid) Remote SQL Injection (Wed Oct 15 2008 - 07:05:48 EEST)
• drpepppperone@gmail.com
  • Telecom Italia Alice Pirelli routers backdoor discoverd to activate telnet/ftp/tftp from internal LAN/WLAN. (Tue Oct 14 2008 - 01:57:10 EEST)
• ds.adv.pub@gmail.com
  • VMware Emulation Flaw x64 Guest Privilege Escalation (1/2) (Sat Oct 04 2008 - 06:09:28 EEST)
• dvlabs
  • TPTI-08-07: Microsoft Windows Message Queuing Service Heap Overflow and Memory Disclosure Vulnerability (Wed Oct 15 2008 - 01:51:31 EEST)
• Ehsan_Hp200@hotmail.com
  • PHP-Nuke Module Current_Issue (summary&id) Remote SQL injection Vulnerability (Thu Oct 30 2008 - 15:54:42 EET)
  • PHP-Nuke Module Sectionsnew (printpage&artid) Remote SQL injection Vulnerability (Thu Oct 30 2008 - 16:07:15 EET)
  • IranMC ( detail.php?Kala ) Remote SQL injection Vulnerability (Thu Oct 30 2008 - 16:13:08 EET)
  • PHP-Nuke Module BookCatalog (category&catid) Remote SQL injection Vulnerability (Thu Oct 30 2008 - 16:22:48 EET)
  • PHP-Nuke Module League (team&tid) XSS Vulnerability (Tue Oct 28 2008 - 18:04:23 EET)
• Eygene Ryabinkin
  • Re: "Exploit creation - The random approach" or "Playing with random to build exploits" (Fri Oct 03 2008 - 18:43:24 EEST)
• Fabian Fingerle
  • Cross Site Scripting (XSS) Vulnerabilitiy in cpcommerce, CVE-2008-4121 (Mon Oct 20 2008 - 01:01:42 EEST)
• fabio
  • KVIrc version 3.4.0 Virgo remote format string proof of concept exploit. (Wed Oct 29 2008 - 19:44:42 EET)
• faghani@nsec.ir
  • BotNet on the Rise (Sun Oct 26 2008 - 16:02:36 EET)
• Florian Weimer
  • [SECURITY] [DSA 1660-1] New clamav packages fix denial of service (Sun Oct 26 2008 - 15:43:46 EET)
  • [SECURITY] [DSA 1659-1] New libspf2 packages fix potential remote code execution (Thu Oct 23 2008 - 23:00:50 EEST)
• FreeBSD Security Advisories
  • FreeBSD Security Advisory FreeBSD-SA-08:10.nd6 (Thu Oct 02 2008 - 03:39:19 EEST)
• g30rg3_x
  • Re: Doubt in MySQL Quick Admin <= 1.5.5 (COOKIE) Local File Inclusion Vulnerability POC posted on milworm (Fri Oct 17 2008 - 19:30:38 EEST)
  • WP Comment Remix 1.4.3 Multiple Vulnerabilities (Tue Oct 14 2008 - 07:37:16 EEST)
• Gadi Evron
  • [funsec] ICANN Terminates EstDomains' Registrar Accreditation (fwd) (Wed Oct 29 2008 - 10:28:46 EET)
• Ghost hacker
  • iPei cross site scripting Vulnerablity (Fri Oct 24 2008 - 01:31:27 EEST)
  • News Manager Remote SQL Injection Vulnerability (Thu Oct 09 2008 - 12:21:25 EEST)
  • Website Directory - XSS Exploit (Fri Oct 03 2008 - 16:01:50 EEST)
• groovydude@mywasteofbandwidth.com
  • Re: Token Kidnapping Windows 2003 PoC exploit (Thu Oct 09 2008 - 15:25:41 EEST)
• hadikiamarsi@hotmail.com
  • XSS in phpMyadmin (Mon Oct 27 2008 - 14:02:51 EET)
• ideaburner@yahoo.com
  • Re: Re: Token Kidnapping Windows 2003 PoC exploit (Sat Oct 11 2008 - 21:42:28 EEST)
• iDefense Labs
  • iDefense Security Advisory 10.31.08: OpenOffice EMF Record Parsing Multiple Integer Overflow Vulnerabilities (Fri Oct 31 2008 - 18:54:39 EET)
  • iDefense Security Advisory 10.31.08: Oracle WebLogic Apache Connector (Fri Oct 31 2008 - 20:19:27 EET)
  • iDefense Security Advisory 10.30.08: Adobe PageMaker Key Strings Stack Buffer Overflow (Thu Oct 30 2008 - 22:24:35 EET)
  • iDefense Security Advisory 10.14.08: Microsoft Host Integration Server 2006 Command Execution Vulnerability (Tue Oct 14 2008 - 22:22:42 EEST)
• illumina7i
  • Re: MS08-067 - Where can I find an exploit for this? (Thu Oct 30 2008 - 03:26:15 EET)
• ipsdix@gmail.com
  • Blaze Media Pro 8.02 SE vulnerability (Mon Oct 27 2008 - 20:28:39 EET)
• irancrash@gmail.com
  • Cpanel 11.x Local File Inclusion & Cross Site Scripting - Discovered By Khashayar Fereidani (Fri Oct 31 2008 - 15:03:55 EET)
• Isaias Calderon
  • Re: MS08-067 - Where can I find an exploit for this? (Thu Oct 30 2008 - 08:14:11 EET)
• Ivan Fratric
  • Internet Explorer 6 componentFromPoint() remote memory disclosure and remote code execution (Wed Oct 15 2008 - 16:42:42 EEST)
• Jamie Strandboge
  • [USN-661-1] Linux kernel regression (Thu Oct 30 2008 - 19:40:31 EET)
  • [USN-657-1] Amarok vulnerability (Tue Oct 21 2008 - 16:34:22 EEST)
  • [USN-656-1] CUPS vulnerabilities (Thu Oct 16 2008 - 00:53:16 EEST)
  • [USN-651-1] Ruby vulnerabilities (Fri Oct 10 2008 - 05:25:50 EEST)
  • [USN-650-1] cpio vulnerability (Fri Oct 03 2008 - 01:20:07 EEST)
• Jerome Athias
  • MSF eXploit Builder v2 Alpha Sources Released (Mon Oct 27 2008 - 00:53:46 EET)
  • HTTPBruteForcer released (Sat Oct 25 2008 - 17:43:48 EEST)
  • [Off-Topic] How I was busted. Story of a poor lonesome hacker (Mon Oct 20 2008 - 23:05:25 EEST)
• Jim Harrison
  • RE: Universal Website Hijacking by Exploiting Firewall Content Filtering Features + SonicWALL firewalls 0day (Fri Oct 31 2008 - 22:05:15 EET)
• Joanna Rutkowska
  • Paper: Adventures with a certain Xen vulnerability (Wed Oct 15 2008 - 16:39:21 EEST)
• Jose Luis
  • Re: vshop - Axcoto cart <= 0.1alpha / Local File Inclusion Vulnerability (Thu Oct 23 2008 - 12:33:24 EEST)
• Juha-Matti Laurio
  • Re: [Full-disclosure] [funsec] ICANN Terminates EstDomains' Registrar Accreditation (fwd) (Thu Oct 30 2008 - 00:56:07 EET)
  • Windows RPC MS08-067 FAQ document updated (Mon Oct 27 2008 - 17:41:23 EET)
  • Windows RPC MS08-067 FAQ document released (Sun Oct 26 2008 - 04:26:22 EET)
  • Lee has posted more detailed response to Fyodor's TCP/IP DoS post (Mon Oct 20 2008 - 15:47:32 EEST)
  • Re: Motorola Timbuktu's Internet Locator Service real-time data exposed to public. (Wed Oct 08 2008 - 23:58:41 EEST)
• kadfrox@gmail.com
  • Remote and Local File Inclusion Vulnerability <= 1.1 Rportal (Wed Oct 01 2008 - 22:24:23 EEST)
• Kees Cook
  • [USN-658-1] Moodle vulnerability (Fri Oct 24 2008 - 00:33:41 EEST)
  • [USN-655-1] exiv2 vulnerabilities (Wed Oct 15 2008 - 05:27:22 EEST)
  • [USN-654-1] libexif vulnerabilities (Wed Oct 15 2008 - 03:32:47 EEST)
  • [USN-652-1] LittleCMS vulnerability (Tue Oct 14 2008 - 20:24:07 EEST)
  • [USN-653-1] D-Bus vulnerabilities (Tue Oct 14 2008 - 20:24:46 EEST)
  • [USN-649-1] OpenSSH vulnerabilities (Thu Oct 02 2008 - 01:31:03 EEST)
  • [USN-648-1] nasm vulnerability (Tue Sep 30 2008 - 23:36:46 EEST)
• krzysztof.kozlowski@kozik.net.pl
  • Re: MyBB 1.4.2: Multiple Vulnerabilties (Mon Oct 27 2008 - 23:14:29 EET)
• L4teral
  • Typo <= 5.1.3 Multiple Vulnerabilities (Fri Oct 31 2008 - 20:21:35 EET)
• labs-no-reply@idefense.com
  • iDefense Security Advisory 10.30.08: Novell eDirectory NCP Get Extension Information Request Memory Corruption Vulnerability (Thu Oct 30 2008 - 19:56:30 EET)
  • iDefense Security Advisory 10.14.08: Sun Java Web Proxy Server FTP Resource Handling Heap-Based Buffer Overflow (Wed Oct 15 2008 - 03:43:22 EEST)
  • iDefense Security Advisory 10.14.08: Microsoft Visual Basic for Applications - Multiple Vulnerabilities (Wed Oct 15 2008 - 02:12:29 EEST)
• Laurent Butti
  • Marvell Driver Malformed Association Request Vulnerability (Mon Oct 13 2008 - 14:29:40 EEST)
• lee.e.rian@census.gov
  • Re: PR08-24: Proxim Tsunami MP.11 2411 vulnerable to SNMP Injection (Fri Oct 10 2008 - 00:24:27 EEST)
• Liu Die Yu
  • Firefox Privacy Broken If Used to Open Web Page File (Tue Oct 07 2008 - 11:32:09 EEST)
• Lostmon@gmail.com
  • Re: iFoto, CSS-based GD2 photo gallery <= 1.0: Remote File Disclosure Vulnerability (Tue Oct 07 2008 - 21:52:48 EEST)
• luca.carettoni@ikkisoft.com
  • [LC-2008-04] Nokia Browser Array Sort Denial Of Service Vulnerability (Fri Oct 10 2008 - 19:04:01 EEST)
• Major Malfunction
  • London DEFCON meet - DC4420 - Thursday October 23rd (Mon Oct 20 2008 - 20:34:05 EEST)
• Mark Thomas
  • [SECURITY] CVE-2008-3271 - Apache Tomcat information disclosure (Fri Oct 10 2008 - 01:46:19 EEST)
• Martin Schulze
  • [SECURITY] [DSA 1661-1] New OpenOffice.org packages fix several vulnerabilities (Wed Oct 29 2008 - 20:16:58 EET)
• Martin Suess
  • MS OWA 2003 Redirection Vulnerability (Wed Oct 15 2008 - 12:18:24 EEST)
• martin.suess@csnc.ch
  • Re: Re: MS OWA 2003 Redirection Vulnerability (Wed Oct 15 2008 - 22:55:53 EEST)
• Matteo Beccati
  • [OPENX-SA-2008-002] OpenX 2.4.9 and 2.6.2 fix SQL injection vulnerability (Tue Oct 07 2008 - 19:58:45 EEST)
• Matthew Dempsky
  • Adobe Flash Player plug-in null pointer dereference and browser crash (Thu Oct 02 2008 - 03:46:09 EEST)
• MC Iglo
  • Windows Mobile 6 insecure password handling and too short WLAN-password (Wed Oct 08 2008 - 21:54:47 EEST)
• Michael Scheidell
  • Re: MySQL command-line client HTML injection vulnerability (Wed Oct 08 2008 - 23:26:52 EEST)
  • Re: Verizon FIOS (and DSL?) wireless access point insecure default WEP key (Tue Oct 07 2008 - 01:38:05 EEST)
• Micheal Cottingham
  • MyBB 1.4.2: Multiple Vulnerabilties (Mon Oct 27 2008 - 17:15:11 EET)
• Mike Benham
  • FireGPG Passphrase And Cleartext Vulnerability (Mon Oct 20 2008 - 08:33:21 EEST)
• Moritz Muehlenhoff
  • [SECURITY] [DSA 1656-1] New cupsys packages fix several vulnerabilities (Mon Oct 20 2008 - 20:21:43 EEST)
  • [SECURITY] [DSA 1652-1] New ruby1.9 packages fix several vulnerabilities (Sun Oct 12 2008 - 12:37:58 EEST)
  • [SECURITY] [DSA 1651-1] New ruby1.8 packages fix several vulnerabilities (Sun Oct 12 2008 - 12:36:52 EEST)
  • [SECURITY] [DSA 1650-1] New openldap2.3 packags fix denial of service (Sun Oct 12 2008 - 12:35:44 EEST)
  • [SECURITY] [DSA 1649-1] New iceweasel packages fix several vulnerabilities (Wed Oct 08 2008 - 23:15:55 EEST)
  • [SECURITY] [DSA 1643-1] New feta packages fix denial of service (Sun Oct 05 2008 - 14:08:24 EEST)
• Morning Wood
  • Re: [Full-disclosure] MS OWA 2003 Redirection Vulnerability - [MSRC7368br] (Sat Oct 18 2008 - 21:19:07 EEST)
• mrry.dmlo@gmail.com
  • Re: RE: MySQL command-line client HTML injection vulnerability (Fri Oct 03 2008 - 09:53:43 EEST)
• Nelson Brito
  • Re: "Exploit creation - The random approach" or "Playing with random to build exploits" (Fri Oct 03 2008 - 00:53:43 EEST)
• nnp
  • Tool update: VoIPER v0.07 (Wed Oct 29 2008 - 01:33:13 EET)
• noreply-secresearch@fortinet.com
  • FGA-2008-23:EMC NetWorker Denial of Service Vulnerability (Wed Oct 22 2008 - 08:31:42 EEST)
• office@hackattack.at
  • HACKATTACK Advisory 20081016]WEB//NEWS SQL Injection and Cookie Manipulation (Thu Oct 16 2008 - 14:48:13 EEST)
• okuno@mysql.com
  • Re: MySQL command-line client HTML injection vulnerability (Wed Oct 29 2008 - 02:57:22 EET)
• ozdemirtravel@gmail.com
  • &#304;ltaweb Al&#305;&#351;veri&#351; Sistemi (tr) Sql inj (Sat Oct 11 2008 - 11:08:54 EEST)
• packet@packetstormsecurity.org
  • Re: News Manager Remote SQL Injection Vulnerability (Fri Oct 10 2008 - 01:20:30 EEST)
• Paul Craig
  • Multiple Flash Authoring Heap Overflows - Malformed SWF Files (Thu Oct 16 2008 - 00:02:28 EEST)
• paul.wright@oracleforensics.com
  • CREATE ANY DIRECTORY to SYSDBA (Sat Oct 11 2008 - 12:39:46 EEST)
• Pepelux
  • txtshop - beta 1.0 / Local File Inclusion Vulnerability (Thu Oct 23 2008 - 12:32:12 EEST)
  • vshop - Axcoto cart <= 0.1alpha / Local File Inclusion Vulnerability (Thu Oct 23 2008 - 00:47:08 EEST)
  • phpcrs <= 2.06 / Local File Inclusion Vulnerability (this is the correct :) (Thu Oct 23 2008 - 00:44:55 EEST)
  • NewLife Blogger <= v3.0 / Insecure Cookie Handling & SQL Injection Vulnerability (Mon Oct 13 2008 - 02:55:59 EEST)
  • Yerba SACphp <= 6.3 / Local File Inclusion Exploit (Tue Oct 07 2008 - 02:12:02 EEST)
  • FOSS Gallery Public Version <= 1.0 / Arbitrary file upload Vulnerabilities (Sun Oct 05 2008 - 03:40:52 EEST)
  • FOSS Gallery Admin Version <= 1.0 / Remote Arbitrary Upload Vulnerability (Sun Oct 05 2008 - 03:30:48 EEST)
  • PHPWebExplorer <= 0.09b: Local File Inclusion Vulnerability (Sat Oct 04 2008 - 18:58:05 EEST)
  • iFoto, CSS-based GD2 photo gallery <= 1.0: Remote File Disclosure Vulnerability (Sun Oct 05 2008 - 01:59:40 EEST)
  • Printlog <= 0.4: Remote File Edition Vulnerability (Wed Oct 01 2008 - 04:02:45 EEST)
• Pete Finnigan
  • Advisory for Oracle CPU October 2008 - APEX Flows excessive privileges (Wed Oct 22 2008 - 15:36:36 EEST)
• pete@petefinnigan.com
  • Oracle Password Cracker written in PL/SQL (Wed Oct 01 2008 - 14:37:51 EEST)
• pocadm@gmail.com
  • Final notification about "POC2008" Conference (Fri Oct 31 2008 - 21:48:34 EET)
• Praburaajan
  • HITBSecConf2008 - Malaysia: Online registration closes on 24th Oct (Sun Oct 19 2008 - 02:09:43 EEST)
• ProCheckUp Research
  • SNMP Injection: Achieving Persistent HTML Injection via SNMP on Embedded Devices (Wed Oct 22 2008 - 20:07:40 EEST)
  • Re: PR08-24: Proxim Tsunami MP.11 2411 vulnerable to SNMP Injection (Fri Oct 10 2008 - 11:35:33 EEST)
  • PR07-31: Unauthenticated SQL Injection, XSS on Login Page and Username Enumeration on DPSnet Case Progress (Thu Oct 09 2008 - 12:35:35 EEST)
  • PR08-24: Proxim Tsunami MP.11 2411 vulnerable to SNMP Injection (Thu Oct 09 2008 - 16:02:44 EEST)
• Pruett, Mike
  • Re: MS Internet Explorer 7 Denial Of Service Exploit (Thu Oct 02 2008 - 01:28:54 EEST)
• publists@enablesecurity.com
  • [ENABLESECURITY] Apple's Mail.app stores your S/MIME encrypted emails in clear text (Mon Oct 06 2008 - 11:05:45 EEST)
• Quark IT - Hilton Travis
  • RE: RE: MySQL command-line client HTML injection vulnerability (Sat Oct 04 2008 - 08:47:13 EEST)
  • RE: MySQL command-line client HTML injection vulnerability (Wed Oct 01 2008 - 01:59:58 EEST)
• Raphael Geissert
  • XSS vulnerability in phpMyID (Thu Oct 02 2008 - 04:08:06 EEST)
• raven
  • Re: HTTPBruteForcer released (Sat Oct 25 2008 - 21:11:57 EEST)
• Reversemode
  • Exploit for MS08-066 - AFD.sys kernel memory overwrite. (Wed Oct 15 2008 - 16:03:11 EEST)
• RISE Security
  • [RISE-2008001] Sun Solstice AdminSuite sadmind adm_build_path() Buffer Overflow Vulnerability (Tue Oct 14 2008 - 17:43:29 EEST)
• Robert Buchholz
  • [ GLSA 200810-03 ] libspf2: DNS response buffer overflow (Thu Oct 30 2008 - 23:27:08 EET)
  • [ GLSA 200810-02 ] Portage: Untrusted search path local root vulnerability (Thu Oct 09 2008 - 20:36:48 EEST)
• Roberto Suggi
  • Opera Stored Cross Site Scripting Vulnerability (Wed Oct 22 2008 - 10:10:33 EEST)
• roeeh@il.ibm.com
  • Advisory: Graphviz Buffer Overflow Code Execution (Wed Oct 08 2008 - 21:51:19 EEST)
• rPath Update Announcements
  • rPSA-2008-0308-1 samba samba-client samba-server samba-swat (Thu Oct 30 2008 - 15:42:40 EET)
  • rPSA-2008-0307-1 nfs-client nfs-server nfs-utils (Thu Oct 30 2008 - 15:31:22 EET)
  • rPSA-2008-0309-1 lighttpd (Thu Oct 30 2008 - 15:55:07 EET)
  • rPSA-2008-0306-1 libxslt (Mon Oct 27 2008 - 19:53:27 EET)
  • rPSA-2008-0305-1 pcre (Mon Oct 27 2008 - 19:47:50 EET)
  • rPSA-2008-0294-1 postfix (Thu Oct 16 2008 - 20:16:00 EEST)
  • rPSA-2008-0295-1 rails (Thu Oct 16 2008 - 20:16:44 EEST)
• Salvador III Manaois
  • Re: MS08-067 - Where can I find an exploit for this? (Fri Oct 24 2008 - 19:27:06 EEST)
  • Re: MS08-067 - Where can I find an exploit for this? (Fri Oct 24 2008 - 19:50:19 EEST)
• Secunia Research
  • Secunia Research: Interact SQL Injection and Cross-Site Request Forgery (Fri Oct 31 2008 - 17:45:04 EET)
  • Secunia Research: Adobe PageMaker PMD File Processing Buffer Overflows (Wed Oct 29 2008 - 17:57:37 EET)
  • Secunia Research: Trend Micro OfficeScan CGI Parsing Buffer Overflows (Wed Oct 22 2008 - 14:54:10 EEST)
  • Secunia Research: GNU Enscript "setfilename" Special Escape Buffer Overflow (Wed Oct 22 2008 - 14:53:51 EEST)
  • Secunia Research: HP OpenView Products Shared Trace Service Denial of Service (Wed Oct 22 2008 - 15:10:26 EEST)
  • Secunia Research: HP SiteScope SNMP Trap Script Insertion Vulnerability (Mon Oct 20 2008 - 13:11:15 EEST)
  • Secunia Research: Trend Micro OfficeScan Directory Traversal Vulnerability (Fri Oct 03 2008 - 08:41:32 EEST)
• Security Objectives Corporation
  • SECOBJADV-2008-05: Symantec Veritas Storage Foundation Arbitrary File Read Vulnerability (Wed Oct 22 2008 - 19:41:37 EEST)
  • SECOBJADV-2008-04: Symantec Veritas Storage Foundation Memory Disclosure Vulnerability (Tue Oct 21 2008 - 18:29:14 EEST)
• security-alert@hp.com
  • [security bulletin] HPSBMA02373 SSRT071467 rev.2 - HP Insight Diagnostics Running on Linux and Windows, Remote Unauthorized Access to Files (Mon Oct 27 2008 - 13:59:57 EET)
  • [security bulletin] HPSBST02379 SSRT080143 rev.1 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS08-056 to MS08-066 (Thu Oct 23 2008 - 22:55:52 EEST)
  • [security bulletin] HPSBMA02349 SSRT080043 rev.2 - HP OpenView Network Node Manager (OV NNM), Remote Unauthorized Access to Data (Wed Oct 15 2008 - 21:28:14 EEST)
  • [security bulletin] HPSBMA02374 SSRT080046 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Denial of Service (DoS) (Thu Oct 09 2008 - 15:25:01 EEST)
  • [security bulletin] HPSBMA02362 SSRT080044, SSRT080045, SSRT080042 rev.2 - HP OpenView Network Node Manager (OV NNM), Remote Denial of Service (DoS), Execute Arbitrary Code (Thu Oct 09 2008 - 15:24:21 EEST)
  • [security bulletin] HPSBMA02376 SSRT080099 rev.1 - HP System Management Homepage (SMH) for Linux and Windows, Remote Cross Site Scripting (XSS) (Thu Oct 09 2008 - 15:25:35 EEST)
  • [security bulletin] HPSBUX02375 SSRT080122 rev.1 - HP-UX Running NFS/ONCplus, Remote Denial of Service (DoS) (Tue Oct 07 2008 - 15:28:56 EEST)
• security@mandriva.com
  • [ MDVSA-2008:121-1 ] freetype2 (Fri Oct 31 2008 - 21:23:00 EET)
  • [ MDVSA-2008:222 ] Eterm (Thu Oct 30 2008 - 03:01:00 EET)
  • [ MDVSA-2008:219 ] mplayer (Thu Oct 30 2008 - 01:22:00 EET)
  • [ MDVSA-2008:220 ] kernel (Thu Oct 30 2008 - 01:17:00 EET)
  • [ MDVSA-2008:221 ] aterm (Thu Oct 30 2008 - 02:15:00 EET)
  • [ MDVSA-2008:217 ] lynx (Tue Oct 28 2008 - 22:46:00 EET)
  • [ MDVSA-2008:218 ] lynx (Tue Oct 28 2008 - 23:08:00 EET)
  • [ MDVSA-2008:216 ] emacs (Tue Oct 28 2008 - 00:15:00 EET)
  • [ MDVSA-2008:215 ] wireshark (Mon Oct 27 2008 - 19:35:00 EET)
  • [ MDVSA-2008:208-1 ] pam_mount (Sun Oct 19 2008 - 02:49:00 EEST)
  • [ MDVSA-2008:214 ] mon (Thu Oct 16 2008 - 23:01:00 EEST)
  • [ MDVSA-2008:213 ] dbus (Wed Oct 15 2008 - 23:40:00 EEST)
  • [ MDVSA-2008:212 ] libxml2 (Wed Oct 15 2008 - 20:55:00 EEST)
  • [ MDVSA-2008:211 ] cups (Sat Oct 11 2008 - 11:41:00 EEST)
  • [ MDVSA-2008:210-1 ] mono (Sat Oct 11 2008 - 20:50:00 EEST)
  • [ MDVSA-2008:209 ] pam_krb5 (Sat Oct 04 2008 - 02:25:00 EEST)
  • [ MDVSA-2008:210 ] mono (Sat Oct 04 2008 - 03:17:00 EEST)
• security@nruns.com
  • n.runs-SA-2008.009 - Eaton MGE OPS Network Shutdown Module - authentication bypass vulnerability and remote code execution (Mon Oct 27 2008 - 17:53:48 EET)
  • n.runs-SA-2008.008 - Internet Explorer HTML Object Memory Corruption and Remote Code Execution (Tue Oct 21 2008 - 18:09:24 EEST)
• Security_Alert@emc.com
  • Re: FGA-2008-23:EMC NetWorker Denial of Service Vulnerability (Wed Oct 22 2008 - 18:38:36 EEST)
• sfa@securityfocus.com
  • SecurityFocus Newsletter #477 (Thu Oct 30 2008 - 17:35:57 EET)
  • SecurityFocus Linux Newsletter #413 (Thu Oct 30 2008 - 17:36:08 EET)
  • SecurityFocus Microsoft Newsletter #418 (Thu Oct 30 2008 - 17:36:02 EET)
  • SecurityFocus Newsletter #476 (Thu Oct 23 2008 - 23:10:27 EEST)
  • SecurityFocus Linux Newsletter #412 (Thu Oct 23 2008 - 23:10:39 EEST)
  • SecurityFocus Microsoft Newsletter #417 (Thu Oct 23 2008 - 23:10:32 EEST)
  • SecurityFocus Linux Newsletter #411 (Fri Oct 17 2008 - 01:05:48 EEST)
  • SecurityFocus Microsoft Newsletter #416 (Fri Oct 17 2008 - 01:05:43 EEST)
  • SecurityFocus Newsletter #475 (Fri Oct 17 2008 - 01:05:38 EEST)
  • SecurityFocus Microsoft Newsletter #415 (Thu Oct 09 2008 - 19:30:13 EEST)
  • SecurityFocus Newsletter #474 (Thu Oct 09 2008 - 19:30:08 EEST)
  • SecurityFocus Linux Newsletter #410 (Thu Oct 09 2008 - 19:30:19 EEST)
  • SecurityFocus Newsletter #473 (Thu Oct 02 2008 - 19:10:07 EEST)
  • SecurityFocus Microsoft Newsletter #414 (Thu Oct 02 2008 - 19:10:11 EEST)
  • SecurityFocus Linux Newsletter #409 (Thu Oct 02 2008 - 19:10:16 EEST)
• sflist@digitaloffense.net
  • Uninformed Journal Release Announcement: Volume 10 (Mon Oct 13 2008 - 18:28:40 EEST)
• shulman@imperva.com
  • CVE-2008-4000: Oracle PeopleTools Authentication Weakness (Sun Oct 19 2008 - 09:28:26 EEST)
  • CVE-2008-2625: Oracle DBMS Proxy Authentication Vulnerability (Sun Oct 19 2008 - 09:26:11 EEST)
• sipherr@gmail.com
  • Re: Universal Website Hijacking by Exploiting Firewall Content Filtering Features + SonicWALL firewalls 0day (Fri Oct 31 2008 - 19:15:14 EET)
  • Re: Universal Website Hijacking by Exploiting Firewall Content Filtering Features + SonicWALL firewalls 0day (Fri Oct 31 2008 - 19:11:40 EET)
• Stefano Di Paola
  • Re: MS OWA 2003 Redirection Vulnerability (Wed Oct 15 2008 - 20:51:39 EEST)
• stephen_fewer@harmonysecurity.com
  • [Paper] Reflective Dll Injection (Fri Oct 31 2008 - 19:54:15 EET)
• Steve Kemp
  • [SECURITY] [DSA 1657-1] New qemu packages fix denial of service (Mon Oct 20 2008 - 23:29:57 EEST)
  • [SECURITY] [DSA 1654-1] New libxml2 packages fix execution of arbitrary code (Tue Oct 14 2008 - 21:04:50 EEST)
  • [SECURITY] [DSA-1645-1] New lighttpd packages fix various problems (Mon Oct 06 2008 - 20:29:51 EEST)
• The Anarcat
  • Re: HTTPBruteForcer released (Sat Oct 25 2008 - 22:45:50 EEST)
• The OpenVAS Team
  • 2008 OpenVAS Contest (Fri Oct 31 2008 - 01:34:21 EET)
• The-0utl4w@Aria-Security.com
  • Aria-Security.com: Saba 2.0 Cross Site Scripting [PASSIVE] (Wed Oct 29 2008 - 07:09:37 EET)
• therese.vanryne@motorola.com
  • Re: Motorola Timbuktu's Internet Locator Service real-time data exposed to public. (Thu Oct 09 2008 - 19:04:02 EEST)
• Thijs Kinkhorst
  • [SECURITY] [DSA 1658-1] New dbus packages fix denial of service (Wed Oct 22 2008 - 22:50:25 EEST)
  • [SECURITY] [DSA 1648-1] New mon packages fix insecure temporary files (Wed Oct 08 2008 - 22:34:19 EEST)
  • [SECURITY] [DSA 1647-1] New php5 packages fix several vulnerabilities (Tue Oct 07 2008 - 09:52:54 EEST)
• Thomas Dickey
  • Re: [ MDVSA-2008:217 ] lynx (Wed Oct 29 2008 - 01:33:15 EET)
• Tobias Heinlein
  • [ GLSA 200810-01 ] WordNet: Execution of arbitrary code (Tue Oct 07 2008 - 21:13:38 EEST)
• Tobias Klein
  • [TKADV2008-010] VLC media player TiVo ty Processing Stack Overflow Vulnerability (Mon Oct 20 2008 - 22:18:36 EEST)
• Tom Kelly
  • Re: Blue Coat xss (Thu Oct 02 2008 - 22:56:59 EEST)
• Trancer
  • OpenNMS Multiple Vulnerabilities (Sun Oct 05 2008 - 19:44:51 EEST)
• varun.srivastav@gmail.com
  • Re: Java Web start vulnerability (Fri Oct 31 2008 - 20:20:37 EET)
  • Java Web start vulnerability (Sat Oct 25 2008 - 11:18:16 EEST)
• vinodsharma.mimit@gmail.com
  • Doubt in MySQL Quick Admin <= 1.5.5 (COOKIE) Local File Inclusion Vulnerability POC posted on milworm (Fri Oct 17 2008 - 08:04:12 EEST)
• Vladimir '3APA3A' Dubrovin
  • Re[2]: PR08-24: Proxim Tsunami MP.11 2411 vulnerable to SNMP Injection (Fri Oct 10 2008 - 09:28:43 EEST)
  • Re: PR08-24: Proxim Tsunami MP.11 2411 vulnerable to SNMP Injection (Thu Oct 09 2008 - 21:20:45 EEST)
  • Re: AyeView v2.20 (malformed gif image) DoS Exploit (Mon Oct 06 2008 - 22:27:53 EEST)
  • Re: White Wolf Labs #080922-1: Exploitation Through ActiveSync 4.x (Thu Oct 02 2008 - 17:09:36 EEST)
• VMware Security Team
  • VMSA-2008-0017 Updated ESX packages for libxml2, ucd-snmp, libtiff (Fri Oct 31 2008 - 09:12:34 EET)
  • VMSA-2008-0016 VMware Hosted products, VirtualCenter Update 3 and patches for ESX and ESXi resolve multiple security issues (Sat Oct 04 2008 - 04:43:22 EEST)
• vulns@wintercore.com
  • [W02-1008] GearSoftware Powered Products Local Privilege Escalation (Microsoft Windows Kernel IopfCompleteRequest Integer Overflow) (Wed Oct 08 2008 - 00:02:46 EEST)
  • Motorola Timbuktu's Internet Locator Service real-time data exposed to public. (Mon Oct 06 2008 - 15:31:51 EEST)
• Williams, James K
  • CA ARCserve Backup Multiple Vulnerabilities (Fri Oct 10 2008 - 00:57:05 EEST)
• Wouter Coekaerts
  • Re: Quassel IRC: connection hijacking (Wed Oct 29 2008 - 01:35:02 EET)
  • Quassel IRC: connection hijacking (Wed Oct 29 2008 - 01:26:57 EET)
• writ3r@gmail.com
  • freeSSHd (stf - rename) Buffer Overflow Vulnerability (Thu Oct 23 2008 - 02:55:27 EEST)
  • GoodTech SSH Remote Buffer Overflow Exploit (Thu Oct 23 2008 - 02:52:20 EEST)
• WSN1983@GMAIL.COM
  • U-Mail Webmail 'edit.php' Arbitrary File Write Vulnerability (Fri Oct 31 2008 - 06:32:43 EET)
• xsp
  • FC2 BLOG Cross-Site Scripting Vulnerabilities (Thu Oct 09 2008 - 04:35:29 EEST)
• xuanmumu@gmail.com
  • SiteEngine 5.x Multiple Remote Vulnerabilities (Thu Oct 23 2008 - 05:45:00 EEST)
• zdi-disclosures@3com.com
  • ZDI-08-071: IBM Tivoli Storage Manager Express for Microsoft SQL Heap Overflow Vulnerability (Thu Oct 30 2008 - 21:16:43 EET)
  • ZDI-08-070: SonicWALL Content-Filtering Universal Script Injection Vulnerability (Thu Oct 30 2008 - 21:16:25 EET)
  • ZDI-08-069: Microsoft Internet Explorer componentFromPoint Memory Corruption Vulnerability (Wed Oct 15 2008 - 00:46:55 EEST)
  • ZDI-08-068: Microsoft Office Excel BIFF File Format Parsing Stack Overflow Vulnerability (Wed Oct 15 2008 - 00:46:51 EEST)
  • ZDI-08-067: Apple CUPS 1.3.7 (HP-GL/2 filter) Remote Code Execution Vulnerability (Fri Oct 10 2008 - 05:21:04 EEST)
  • ZDI-08-066: Novell eDirectory Core Protocol Opcode 0x24 Heap Overflow Vulnerability (Thu Oct 09 2008 - 00:33:44 EEST)
  • ZDI-08-065: Novell eDirectory Core Protocol Opcode 0x0F Heap Overflow Vulnerability (Thu Oct 09 2008 - 00:33:21 EEST)
  • ZDI-08-064: Novell eDirectory dhost.exe Accept Language Header Heap Overflow Vulnerability (Thu Oct 09 2008 - 00:32:55 EEST)
  • ZDI-08-063: Novell eDirectory dhost.exe Content-Length Header Heap Overflow Vulnerability (Thu Oct 09 2008 - 00:32:29 EEST)
• zibree@gmail.com
  • A video can crash ANY iphone/ipod and a few libraries. (Tue Oct 28 2008 - 20:17:11 EET)

Last message date: Fri Oct 31 2008 - 22:30:11 EET
Archived on: Fri Oct 31 2008 - 22:30:11 EET

This archive was generated by hypermail 2b28 : Fri Oct 31 2008 - 22:30:11 EET