stdin
By Author

• 08253@maurickcollege.nl
  • Max's Guestbook (XSS) Remote Vulnerability (Wed Dec 10 2008 - 22:29:05 EET)
• 0in.email@gmail.com
  • Neostrada Livebox Remote Network Down PoC Exploit (Mon Dec 08 2008 - 21:12:51 EET)
• 0xjbrown41@gmail.com
  • Re: Re: Multiple XSRF in DD-WRT (Remote Root Command Execution) (Mon Dec 15 2008 - 20:47:15 EET)
  • Re: [USN-684-1] ClamAV vulnerability (Thu Dec 04 2008 - 04:31:41 EET)
  • Re: /bin/login gives root to group utmp (Mon Dec 01 2008 - 19:35:20 EET)
• admin@bugreport.ir
  • chicomas <=2.0.4 Multiple Vulnerabilities (Sat Dec 20 2008 - 09:25:49 EET)
  • CFAGCMS Remote File Inclusion (Sun Dec 14 2008 - 09:04:13 EET)
• admin@elites0ft.com
  • MagpieRSS XSS 0day (Mon Dec 29 2008 - 00:50:56 EET)
• Alexander Sotirov
  • MD5 Considered Harmful Today: Creating a rogue CA certificate (Tue Dec 30 2008 - 18:50:57 EET)
• Already-sended-information-to-security-focus@mailinator.com
  • Re: Google Chrome Browser (ChromeHTML://) remote parameter injection POC (Thu Dec 25 2008 - 12:03:19 EET)
• amir@salmani.ir
  • php python extension safe_mode bypass (Thu Dec 18 2008 - 03:52:47 EET)
• Andrzej Targosz
  • CONFidence 2009, CFP (Thu Dec 18 2008 - 21:43:26 EET)
• anonymous@anonym.an
  • hm? new vulnerabilities? wav windows media (Sun Dec 28 2008 - 06:34:51 EET)
• Antone Roundy
  • Re: MagpieRSS XSS 0day (Tue Dec 30 2008 - 00:24:46 EET)
• ascii
  • Moodle 1.9.3 Remote Code Execution (Fri Dec 12 2008 - 19:52:25 EET)
• Asterisk Security Team
  • AST-2008-012: Remote crash vulnerability in IAX2 (Thu Dec 11 2008 - 01:36:45 EET)
• Bernhard Mueller
  • SEC Consult SA-20081219-0 :: Fujitsu-Siemens WebTransactions remote command injection vulnerability (Fri Dec 19 2008 - 14:14:58 EET)
  • Microsoft SQL Server 2005 sp_replwritetovarbin memory overwrite (update to SEC Consult SA-20081209) (Wed Dec 10 2008 - 14:45:02 EET)
  • SEC Consult SA-20081109-0 :: Microsoft SQL Server 2000 sp_replwritetovarbin limited memory overwrite vulnerability (Tue Dec 09 2008 - 14:16:34 EET)
• Brett Moore
  • Insomnia : ISVA-081209.1 - IE Webdav Request Parsing Heap Corruption Vulnerability (Wed Dec 10 2008 - 01:32:12 EET)
• bruhns@recurity-labs.com
  • DoS attacks on MIME-capable software via complex MIME emails (Tue Dec 09 2008 - 00:52:17 EET)
• Carmelo Brancato
  • MSN messenger sends IP addresses Public and Private (Mon Dec 29 2008 - 15:55:14 EET)
• Chris Evans
  • Firefox cross-domain text theft (CESA-2008-011) (Thu Dec 18 2008 - 11:00:22 EET)
• ClubHack
  • ClubHack2008 presentations are now online (Fri Dec 26 2008 - 08:46:47 EET)
• contact.fingers@gmail.com
  • PGP Desktop 9.0.6 Denial Of Service - ZeroDay (Tue Dec 23 2008 - 15:11:28 EET)
• CORE Security Technologies Advisories
  • CORE-2008-1210: Qemu and KVM VNC server remote DoS (Mon Dec 22 2008 - 19:30:28 EET)
  • CORE-2008-0228: Microsoft Word Malformed FIB Arbitrary Free Vulnerability (Wed Dec 10 2008 - 17:25:32 EET)
  • CORE-2008-1127 - Vinagre show_error() format string vulnerability (Tue Dec 09 2008 - 21:49:36 EET)
• cxib@securityreason.com
  • SecurityReason: PHP 5.2.6 SAPI php_getuid() overload (Sat Dec 06 2008 - 21:40:48 EET)
• dan.crowley@gmail.com
  • Re: Re: Multiple XSRF in DD-WRT (Remote Root Command Execution) (Thu Dec 11 2008 - 21:42:58 EET)
  • Re: Multiple XSRF in DD-WRT (Remote Root Command Execution) (Thu Dec 11 2008 - 04:14:10 EET)
• dann frazier
  • [SECURITY] [DSA 1687-1] New Linux 2.6.18 packages fix several vulnerabilities (Mon Dec 15 2008 - 23:33:39 EET)
  • [SECURITY] [DSA 1681-1] New Linux 2.6.24 packages fix several vulnerabilities (Thu Dec 04 2008 - 19:59:11 EET)
  • [SECURITY] [DSA 1676-1] New flamethrower packages fix denial of service (Tue Dec 02 2008 - 00:49:35 EET)
• darkz.gsa@gmail.com
  • Re: Joomla: Session hijacking vulnerability, CVE-2008-4122 (Thu Dec 18 2008 - 13:40:40 EET)
• David E. Thiel
  • Re: Multiple XSRF in DD-WRT (Remote Root Command Execution) (Thu Dec 11 2008 - 19:57:03 EET)
  • Re: Multiple XSRF in DD-WRT (Remote Root Command Execution) (Thu Dec 11 2008 - 01:51:01 EET)
• DDI.VulnerabilityAlert@ddifrontline.com
  • DDIVRT-2008-18 Orb Denial of Service (Thu Dec 04 2008 - 16:51:15 EET)
• Devin Carraway
  • [SECURITY] [DSA 1684-1] New lcms packages fix multiple vulnerabilities (Wed Dec 10 2008 - 09:51:43 EET)
• Digital Security Research Group [DSecRG]
  • [DSECRG-08-041] Stored XSS Vulnerability in Xoops 2.3.x (Mon Dec 08 2008 - 14:21:47 EET)
  • [DSECRG-08-040] Multiple Local File Include Vulnerabilities in Xoops 2.3.x (Mon Dec 08 2008 - 14:18:39 EET)
• Dominik 'Rathann' Mierzejewski
  • Re: CONFidence 2009, CFP (Fri Dec 19 2008 - 11:32:34 EET)
• Ehsan_Hp200@Hotmail.com
  • EasySiteNetwork (joke.php?id) Remote SQL injection Vulnerability (Thu Dec 18 2008 - 08:22:35 EET)
• Eygene Ryabinkin
  • Re: SecurityReason: PHP 5.2.6 SAPI php_getuid() overload (Mon Dec 08 2008 - 15:47:36 EET)
  • Re: SecurityReason: PHP 5.2.6 SAPI php_getuid() overload (Mon Dec 08 2008 - 12:49:03 EET)
  • Re: SecurityReason : PHP 5.2.6 dba_replace() destroying file (Sat Dec 06 2008 - 19:48:05 EET)
  • Re: SecurityReason : PHP 5.2.6 dba_replace() destroying file (Sat Dec 06 2008 - 14:47:14 EET)
• Florian Weimer
  • [SECURITY] [DSA 1688-2] New courier-authlib packages fix regression (Tue Dec 23 2008 - 01:18:44 EET)
  • [SECURITY] [DSA 1690-1] New avahi packages fix denial of service (Mon Dec 22 2008 - 08:49:55 EET)
  • [SECURITY] [DSA 1678-2] New perl packages fix regression (Sun Dec 21 2008 - 12:04:41 EET)
  • [SECURITY] [DSA 1683-1] New streamripper packages fix potential code execution (Mon Dec 08 2008 - 20:58:30 EET)
  • [SECURITY] [DSA 1680-1] New clamav packages fix potential code execution (Thu Dec 04 2008 - 10:26:17 EET)
  • [SECURITY] [DSA 1679-1] New awstats packages fix cross-site scripting (Wed Dec 03 2008 - 13:05:53 EET)
• FreeBSD Security Advisories
  • FreeBSD Security Advisory FreeBSD-SA-08:12.ftpd (Tue Dec 23 2008 - 03:39:28 EET)
  • FreeBSD Security Advisory FreeBSD-SA-08:13.protosw (Tue Dec 23 2008 - 03:39:22 EET)
• frisk@f-prot.com
  • Re: [IVIZ-08-016] F-Secure f-prot Antivirus for Linux corrupted ELF header Security Bypass (Tue Dec 16 2008 - 19:34:48 EET)
• Gadi Evron
  • reliable IOS exploitation (Tue Dec 30 2008 - 00:08:06 EET)
  • ISOI 6, Dallas, TX - January 29, 30 (Wed Dec 10 2008 - 02:33:32 EET)
• gat3way@gat3way.eu
  • PHP safe_mode can be bypassed via proc_open() and custom environment. (Tue Dec 09 2008 - 09:52:55 EET)
• hackeriri@yahoo.com
  • Re: Moodle 1.9.3 Remote Code Execution (Tue Dec 16 2008 - 09:21:58 EET)
• hadihadi_zedehal_2006@yahoo.com
  • Joomla Component mdigg 2.2.8 Blind SQL Injection Exploit (Fri Dec 26 2008 - 21:40:33 EET)
• Hanno Böck
  • Joomla: Session hijacking vulnerability, CVE-2008-4122 (Tue Dec 16 2008 - 23:56:23 EET)
  • Re: Multiple XSRF in DD-WRT (Remote Root Command Execution) (Thu Dec 11 2008 - 01:42:59 EET)
• het_ebadi@yahoo.com
  • Re: Re: Wrong report: BID 32287, Pi3Web ISAPI DoS vulnerability (Sun Nov 30 2008 - 10:39:26 EET)
• Hugo Dias
  • CVE-2008-5079: multiple listen()s on same socket corrupts the vcc table (Fri Dec 05 2008 - 04:06:02 EET)
• iDefense Labs
  • iDefense Security Advisory 12.10.08: Microsoft Excel Malformed Object Memoy Corruption Vulnerability (Wed Dec 10 2008 - 21:55:11 EET)
  • iDefense Security Advisory 12.09.08: Microsoft Windows Graphics Device Interface Integer Overflow Vulnerability (Tue Dec 09 2008 - 22:50:39 EET)
  • iDefense Security Advisory 12.09.08: Microsoft Internet Explorer 5.01 EMBED tag Long File Name Extension Stack Buffer Overflow Vulnerability (iDefense Exclusive) (Tue Dec 09 2008 - 22:16:41 EET)
  • iDefense Security Advisory 12.04.08: Sun Java JRE TrueType Font Parsing Integer Overflow Vulnerability (Fri Dec 05 2008 - 00:35:06 EET)
  • iDefense Security Advisory 12.04.08: Sun Java JRE Pack200 Decompression Integer Overflow Vulnerability (Fri Dec 05 2008 - 00:00:47 EET)
  • iDefense Security Advisory 12.04.08: Sun Java Web Start GIF Decoding Memory Corruption Vulnerability (Thu Dec 04 2008 - 23:39:20 EET)
  • iDefense Security Advisory 12.04.08: Sun Java JRE TrueType Font Parsing Heap Overflow Vulnerability (Thu Dec 04 2008 - 21:41:13 EET)
• Ilia Alshanetsky
  • Re: SecurityReason : PHP 5.2.6 dba_replace() destroying file (Sat Dec 06 2008 - 17:00:14 EET)
• Integrigy Security
  • RE: [Full-disclosure] ZDI-08-088: Oracle E-Business Suite Self-Service Web Applications SQL Injection Vulnerability (Wed Dec 17 2008 - 01:01:00 EET)
• ISecAuditors Security Advisories
  • [ISecAuditors Security Advisories] PSI remote integer overflow DoS (Tue Dec 23 2008 - 13:19:14 EET)
  • [ISecAuditors Security Advisories] Multiple vulnerabilities in WiFi router COMTREND CT-536/HG-536+ (Mon Dec 22 2008 - 20:16:29 EET)
  • [ISecAuditors Security Advisories] Wordpress is vulnerable to an unauthorized upgrade and XSS (Mon Dec 22 2008 - 19:36:14 EET)
• iViZ Security Advisories
  • [IVIZ-08-016] F-Secure f-prot Antivirus for Linux corrupted ELF header Security Bypass (Wed Dec 10 2008 - 14:09:51 EET)
  • [IVIZ-08-015] Sophos Antivirus for Linux vulnerability (Wed Dec 10 2008 - 14:02:49 EET)
  • [IVIZ-08-014] AVG antivirus for Linux vulnerability (Wed Dec 10 2008 - 14:01:09 EET)
  • [IVIZ-08-013] Avast antivirus for Linux multiple vulnerabilities (Wed Dec 10 2008 - 13:57:26 EET)
  • [IVIZ-08-012] Bitdefender antivirus for Linux multiple vulnerabilities (Wed Dec 10 2008 - 13:51:28 EET)
  • [IVIZ-08-011] ClamAV lzh unpacking segmentation fault (Wed Dec 10 2008 - 13:48:40 EET)
• Jacobo Avariento Gimeno
  • POC for CVE-2008-5619 (roundcubemail PHP arbitrary code injection) (Mon Dec 22 2008 - 14:13:32 EET)
• Jamie Riden
  • Re: Moodle 1.9.3 Remote Code Execution (Mon Dec 15 2008 - 19:22:32 EET)
• Jamie Strandboge
  • [USN-677-2] OpenOffice.org Internationalization update (Tue Dec 23 2008 - 19:57:36 EET)
  • [USN-696-1] Avahi vulnerabilities (Fri Dec 19 2008 - 00:36:54 EET)
  • [USN-694-1] libvirt vulnerability (Thu Dec 18 2008 - 02:26:05 EET)
  • [USN-690-3] Firefox vulnerabilities (Thu Dec 18 2008 - 02:19:24 EET)
  • [USN-690-2] Firefox vulnerabilities (Thu Dec 18 2008 - 02:13:13 EET)
  • [USN-690-1] Firefox and xulrunner vulnerabilities (Thu Dec 18 2008 - 01:54:48 EET)
  • [USN-678-2] GnuTLS regression (Wed Dec 10 2008 - 03:00:46 EET)
• Jerome Athias
  • FRHACK Registration open (Christmas offer) (Wed Dec 24 2008 - 11:15:04 EET)
• jmoss
  • Black Hat: New Webinar, Japan audio now on-line. (Thu Dec 11 2008 - 02:57:41 EET)
• John Haywood
  • Re: php-nuke 8.0 module sections artid blind sql inj vuln. (Tue Dec 30 2008 - 20:01:35 EET)
• Kees Cook
  • [USN-700-1] Perl vulnerabilities (Wed Dec 24 2008 - 03:33:54 EET)
  • [USN-695-1] shadow vulnerability (Thu Dec 18 2008 - 03:22:19 EET)
  • [USN-693-1] LittleCMS vulnerability (Thu Dec 18 2008 - 02:12:50 EET)
  • [USN-692-1] Gadu vulnerability (Thu Dec 18 2008 - 02:12:13 EET)
  • [USN-689-1] Vinagre vulnerability (Wed Dec 10 2008 - 02:37:07 EET)
  • [USN-686-1] AWStats vulnerability (Thu Dec 04 2008 - 02:16:57 EET)
  • [USN-685-1] Net-SNMP vulnerabilities (Thu Dec 04 2008 - 00:41:30 EET)
  • [USN-684-1] ClamAV vulnerability (Wed Dec 03 2008 - 00:20:25 EET)
• l1un@hotmail.com
  • Cpanel fantastico Privilege Escalation "ModSec and PHP restriction Bypass" (Tue Dec 02 2008 - 03:07:03 EET)
• Laurent.gaffie@gmail.com
  • MS Windows Media Player * (.WAV) Remote Integrer Overflow (Thu Dec 25 2008 - 01:32:58 EET)
• lent@cooper.edu
  • Re: Moodle 1.9.3 Remote Code Execution (Mon Dec 15 2008 - 07:00:03 EET)
• Li Gen
  • Re: RadAsm <=2.2.1.5 Local Command Execution (Mon Dec 08 2008 - 18:07:57 EET)
• lovebug@hotmail.it
  • joomla com_lowcosthotels sql injection (Thu Dec 25 2008 - 13:44:32 EET)
• Maksymilian Arciemowicz
  • Re: SecurityReason: PHP 5.2.6 SAPI php_getuid() overload (Mon Dec 08 2008 - 15:14:36 EET)
• Marc Deslauriers
  • [USN-698-3] Nagios vulnerabilities (Tue Dec 23 2008 - 16:16:59 EET)
  • [USN-697-1] Imlib2 vulnerability (Mon Dec 22 2008 - 16:35:17 EET)
  • [USN-698-2] Nagios3 vulnerabilities (Mon Dec 22 2008 - 16:36:42 EET)
  • [USN-698-1] Nagios vulnerability (Mon Dec 22 2008 - 16:35:54 EET)
  • [USN-699-1] Blender vulnerabilities (Mon Dec 22 2008 - 16:34:43 EET)
  • [USN-691-1] Ruby vulnerability (Tue Dec 16 2008 - 17:18:46 EET)
  • [USN-687-1] nfs-utils vulnerability (Fri Dec 05 2008 - 00:29:05 EET)
  • [USN-683-1] Imlib2 vulnerability (Tue Dec 02 2008 - 18:24:02 EET)
  • [USN-682-1] libvorbis vulnerabilities (Mon Dec 01 2008 - 19:11:59 EET)
  • [USN-681-1] ImageMagick vulnerability (Mon Dec 01 2008 - 19:11:08 EET)
• marian.ventuneac@ul.ie
  • CVE-2008-0971 - Barracuda Networks products Multiple Cross-Site Scripting Vulnerabilities (Tue Dec 16 2008 - 23:29:33 EET)
  • CVE-2008-1094 - Barracuda Span Firewall SQL Injection Vulnerability (Tue Dec 16 2008 - 23:11:24 EET)
• Mark Thomas
  • [SECURITY] CVE-2008-2938 - Apache Tomcat information disclosure vulnerability - Update 2 (Thu Dec 18 2008 - 18:46:17 EET)
• Martin Schulze
  • [SECURITY] [DSA 1689-1] New proftpd-dfsg packages fix Cross-Site Request Forgery (Sun Dec 21 2008 - 16:24:42 EET)
  • [SECURITY] [DSA 1677-1] New CUPS packages fix arbitrary code execution (Tue Dec 02 2008 - 23:09:10 EET)
• martin@moodle.com
  • Re: Re: Moodle 1.9.3 Remote Code Execution (Tue Dec 16 2008 - 06:47:01 EET)
• Michael Scheidell
  • Castlecops security site closed for good (Thu Dec 25 2008 - 14:35:59 EET)
• Michael Wiegand
  • Network Security Scanner OpenVAS 2.0.0 Released (Wed Dec 17 2008 - 16:40:29 EET)
• Michal Zalewski
  • Browser Security Handbook (Thu Dec 11 2008 - 01:05:06 EET)
• mikael.albrecht@f-secure.com
  • Re: [IVIZ-08-016] F-Secure f-prot Antivirus for Linux corrupted ELF header Security Bypass (Mon Dec 22 2008 - 11:14:25 EET)
• Mobile Security Lab
  • HTC Touch vCard over IP Denial of Service (Fri Dec 19 2008 - 17:23:38 EET)
• Moritz Muehlenhoff
  • [SECURITY] [DSA 1686-1] New no-ip packages fix arbitrary code execution (Sun Dec 14 2008 - 22:23:27 EET)
  • [SECURITY] [DSA 1674-1] New jailer packages fix denial of service (Sun Nov 30 2008 - 10:33:23 EET)
  • [SECURITY] [DSA 1673-1] New wireshark packages fix several vulnerabilities (Sun Nov 30 2008 - 01:07:40 EET)
• Moritz Naumann
  • PHP APC vulnerable to local attacks (Fri Dec 19 2008 - 21:21:11 EET)
• MustLive
  • Re: XSS in Internet Explorer 6 and 7 (Thu Dec 04 2008 - 19:50:06 EET)
• Nam Nguyen
  • [BMSA 2008-09] Two buffer overflow vulnerabilities in Rumpus v6.0 (Mon Dec 01 2008 - 18:56:19 EET)
• nospam@mail.it
  • Re: Re: Google Chrome Browser (ChromeHTML://) remote parameter injection POC (Fri Dec 26 2008 - 02:21:51 EET)
  • Google Chrome Browser (ChromeHTML://) remote parameter injection POC (Tue Dec 23 2008 - 21:54:29 EET)
• office@hackattack.at
  • [HACKATTACK Advisory 20081203]Pro Clan Manager 0.4.2 - Session Fixation (Wed Dec 03 2008 - 14:40:59 EET)
• olga@russkoyepole.ru
  • Re: rPSA-2008-0341-1 dovecot (Tue Dec 23 2008 - 08:42:38 EET)
• organiser@syscan.org
  • Dates for SyScan'09 (Tue Dec 02 2008 - 14:16:44 EET)
• packet@packetstormsecurity.org
  • Re: Joomla Component GameQ (Fri Dec 05 2008 - 00:08:05 EET)
• Paul Szabo
  • /bin/login gives root to group utmp (Sun Nov 30 2008 - 21:51:11 EET)
• Peter Watkins
  • Re: [Full-disclosure] MS OWA 2003 Redirection Vulnerability - [MSRC 7368br] (Mon Dec 08 2008 - 23:50:14 EET)
• philip.robertson@oovoo.com
  • Re: ooVoo 1.7.1.35 (URL Protocol) remote unicode buffer overflow poc (Tue Dec 16 2008 - 19:38:38 EET)
• phplist
  • phpList vulnerability (Mon Dec 15 2008 - 14:28:31 EET)
• Pierre-Yves Rofes
  • [ GLSA 200812-21 ] ClamAV: Multiple vulnerabilities (Wed Dec 24 2008 - 00:15:19 EET)
  • [ GLSA 200812-22 ] Ampache: Insecure temporary file usage (Wed Dec 24 2008 - 00:23:43 EET)
  • [ GLSA 200812-23 ] Imlib2: User-assisted execution of arbitrary code (Wed Dec 24 2008 - 00:40:26 EET)
  • [ GLSA 200812-20 ] phpCollab: Multiple vulnerabilities (Sun Dec 21 2008 - 21:25:46 EET)
  • [ GLSA 200812-19 ] PowerDNS: Multiple vulnerabilities (Fri Dec 19 2008 - 23:43:05 EET)
  • [ GLSA 200812-15 ] POV-Ray: User-assisted execution of arbitrary code (Sun Dec 14 2008 - 19:15:31 EET)
  • [ GLSA 200812-13 ] OpenOffice.org: Multiple vulnerabilities (Sat Dec 13 2008 - 01:01:11 EET)
  • [ GLSA 200812-11 ] CUPS: Multiple vulnerabilities (Thu Dec 11 2008 - 00:16:48 EET)
  • [ GLSA 200812-08 ] Mgetty: Insecure temporary file usage (Sat Dec 06 2008 - 19:53:43 EET)
• pUm
  • Re: Multiple XSRF in DD-WRT (Remote Root Command Execution) (Thu Dec 11 2008 - 10:57:05 EET)
• pyro@nospam.it
  • Megacubo 5.0.7 (mega://) remote eval() injection exploit (Tue Dec 30 2008 - 16:45:32 EET)
• r3d.w0rm@yahoo.com
  • Mavi Emlak Sql Injection (Thu Dec 25 2008 - 22:23:29 EET)
  • Madrese-Portal Sql Injection (Thu Dec 25 2008 - 22:22:03 EET)
  • PHP-Fusion Mod TI - Blog System Sql Injection (Thu Dec 25 2008 - 17:12:04 EET)
  • ASP-CMS v.1.0 Sql Injection/Database Disclosure (Thu Dec 11 2008 - 22:12:51 EET)
  • facto Database Disclosure (Thu Dec 11 2008 - 10:15:25 EET)
  • Meta Cart Free Database Disclosure (Thu Dec 11 2008 - 10:06:50 EET)
  • aspProductCatalog Sql Injection (Thu Dec 11 2008 - 08:21:42 EET)
  • Joomla Component mydyngallery (Thu Dec 04 2008 - 22:33:03 EET)
  • Joomla Component GameQ (Thu Dec 04 2008 - 17:20:16 EET)
• Rafel Ivgi
  • Aspect9: Internet Explorer 8.0 Beta 2 Anti-XSS Filter Vulnerabilities (Thu Dec 11 2008 - 18:27:43 EET)
• rene.sato@gmx.de
  • Re: [HACKATTACK Advisory 20081127]Social Impress CMS 1.1 - Session Fixation (Wed Dec 03 2008 - 19:47:38 EET)
• Robbie (Rupinder) Gill
  • DoS Vulnerability in Aruba Mobility Controller Caused by Malformed EAP Frame (Aruba Advisory ID: AID-12808) (Mon Dec 08 2008 - 21:20:58 EET)
• Robert Buchholz
  • [ GLSA 200812-18 ] JasPer: User-assisted execution of arbitrary code (Wed Dec 17 2008 - 00:06:16 EET)
  • [ GLSA 200812-10 ] Archive::Tar: Directory traversal vulnerability (Wed Dec 10 2008 - 18:53:21 EET)
  • [ GLSA 200812-09 ] OpenSC: Insufficient protection of smart card PIN (Wed Dec 10 2008 - 18:51:45 EET)
  • [ GLSA 200812-07 ] Mantis: Multiple vulnerabilities (Tue Dec 02 2008 - 19:55:03 EET)
  • [ GLSA 200812-02 ] enscript: User-assisted execution of arbitrary code (Tue Dec 02 2008 - 19:28:07 EET)
  • [ GLSA 200812-04 ] lighttpd: Multiple vulnerabilities (Tue Dec 02 2008 - 19:33:06 EET)
  • [ GLSA 200812-05 ] libsamplerate: User-assisted execution of arbitrary code (Tue Dec 02 2008 - 19:40:19 EET)
  • [ GLSA 200812-03 ] IPsec-Tools: racoon Denial of Service (Tue Dec 02 2008 - 19:30:56 EET)
  • [ GLSA 200812-06 ] libxml2: Multiple vulnerabilities (Tue Dec 02 2008 - 19:42:03 EET)
  • [ GLSA 200812-01 ] OptiPNG: User-assisted execution of arbitrary code (Tue Dec 02 2008 - 19:25:54 EET)
• rPath Update Announcements
  • rPSA-2008-0341-1 dovecot (Mon Dec 22 2008 - 21:20:06 EET)
  • rPSA-2008-0338-1 cups (Fri Dec 19 2008 - 23:07:47 EET)
  • rPSA-2008-0336-1 tshark wireshark (Fri Dec 12 2008 - 00:52:40 EET)
  • rPSA-2008-0332-1 kernel (Tue Dec 09 2008 - 18:21:52 EET)
• s.gottschall@dd-wrt.com
  • Re: Multiple XSRF in DD-WRT (Remote Root Command Execution) (Wed Dec 10 2008 - 14:22:56 EET)
• Sebastian Gottschall (DD-WRT)
  • Re: Multiple XSRF in DD-WRT (Remote Root Command Execution) (Thu Dec 11 2008 - 15:14:58 EET)
  • Re: Multiple XSRF in DD-WRT (Remote Root Command Execution) (Thu Dec 11 2008 - 15:07:43 EET)
• Secunia Research
  • Secunia Research: Trend Micro HouseCall ActiveX Control Arbitrary Code Execution (Mon Dec 22 2008 - 18:07:31 EET)
  • Secunia Research: Trend Micro HouseCall "notifyOnLoadNative()" Vulnerability (Sun Dec 21 2008 - 10:47:09 EET)
  • Secunia Research: CA ARCserve Backup RPC "handle_t" Argument Vulnerability (Thu Dec 11 2008 - 13:10:59 EET)
  • Secunia Research: Microsoft Hierarchical FlexGrid Control Integer Overflows (Tue Dec 09 2008 - 22:17:03 EET)
  • Secunia Research: Microsoft Excel NAME Record Array Indexing Vulnerability (Tue Dec 09 2008 - 21:06:04 EET)
  • Secunia Research: Microsoft Word RTF Polyline/Polygon Integer Overflow (Tue Dec 09 2008 - 20:38:46 EET)
• security curmudgeon
  • Re: chicomas <=2.0.4 Multiple Vulnerabilities (Sat Dec 20 2008 - 22:55:01 EET)
• security-alert@hp.com
  • [security bulletin] HPSBST02397 SSRT080187 rev.1 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS08-078 (Tue Dec 23 2008 - 02:03:42 EET)
  • [security bulletin] HPSBST02394 SSRT080183 rev.1 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS08-070 to MS08-077 (Fri Dec 19 2008 - 15:50:03 EET)
  • [security bulletin] HPSBUX02393 SSRT080057 rev.1 - HP-UX Running DCE, Remote Denial of Service (DoS) (Wed Dec 10 2008 - 18:36:07 EET)
  • [security bulletin] HPSBMA02390 SSRT071481 rev.1 - HP OpenView Performance Agent, HP Performance Agent, Remote Denial of Service (DoS) (Mon Dec 08 2008 - 21:22:27 EET)
  • [security bulletin] HPSBMA02391 SSRT071481 rev.1 - HP OpenView Reporter and HP Reporter Running on Windows, Remote Denial of Service (DoS) (Mon Dec 08 2008 - 21:23:19 EET)
  • [security bulletin] HPSBUX02389 SSRT080141 rev.1 - HP-UX, Local Denial of Service (DoS) (Wed Dec 03 2008 - 16:41:40 EET)
• security@armorize.com
  • Multiple XSS Vulnerabilities in World Recipe 2.11 (Mon Dec 15 2008 - 10:34:46 EET)
• security@mandriva.com
  • [ MDVSA-2008:246 ] kernel (Mon Dec 29 2008 - 18:45:01 EET)
  • [ MDVA-2008:241 ] mailscanner (Mon Dec 22 2008 - 22:07:00 EET)
  • [ MDVSA-2008:245 ] firefox (Thu Dec 18 2008 - 06:55:00 EET)
  • [ MDVSA-2008:244 ] mozilla-firefox (Thu Dec 18 2008 - 01:18:00 EET)
  • [ MDVSA-2008:243 ] enscript (Tue Dec 16 2008 - 01:31:00 EET)
  • [ MDVSA-2008:242 ] wireshark (Mon Dec 15 2008 - 23:35:00 EET)
  • [ MDVSA-2008:240 ] vinagre (Wed Dec 10 2008 - 23:01:00 EET)
  • [ MDVSA-2008:236-1 ] vim (Tue Dec 09 2008 - 04:38:00 EET)
  • [ MDVSA-2008:239 ] clamav (Sat Dec 06 2008 - 04:42:00 EET)
  • [ MDVSA-2008:238 ] libsamplerate (Fri Dec 05 2008 - 03:34:00 EET)
  • [ MDVSA-2008:237 ] apache2 (Fri Dec 05 2008 - 00:15:00 EET)
  • [ MDVSA-2008:236 ] vim (Thu Dec 04 2008 - 06:16:00 EET)
• security@nruns.com
  • n.runs-SA-2008.010 - Opera HTML parsing Code Execution (Wed Dec 17 2008 - 17:06:27 EET)
• sfa@securityfocus.com
  • SecurityFocus Linux Newsletter #420 (Wed Dec 31 2008 - 20:53:08 EET)
  • SecurityFocus Newsletter #484 (Wed Dec 31 2008 - 20:53:00 EET)
  • SecurityFocus Microsoft Newsletter #425 (Wed Dec 31 2008 - 20:53:04 EET)
  • SecurityFocus Microsoft Newsletter #424 (Sat Dec 27 2008 - 22:03:22 EET)
  • SecurityFocus Linux Newsletter #419 (Sat Dec 27 2008 - 22:03:17 EET)
  • SecurityFocus Newsletter #483 (Sat Dec 27 2008 - 22:03:11 EET)
  • SecurityFocus Linux Newsletter #419 (Fri Dec 19 2008 - 01:51:35 EET)
  • SecurityFocus Microsoft Newsletter #424 (Fri Dec 19 2008 - 01:51:28 EET)
  • SecurityFocus Newsletter #483 (Fri Dec 19 2008 - 01:51:23 EET)
  • SecurityFocus Linux Newsletter #418 (Fri Dec 12 2008 - 19:34:19 EET)
  • SecurityFocus Microsoft Newsletter #423 (Fri Dec 12 2008 - 19:34:13 EET)
  • SecurityFocus Newsletter #482 (Fri Dec 12 2008 - 19:34:08 EET)
  • SecurityFocus Linux Newsletter #417 (Fri Dec 05 2008 - 08:17:10 EET)
  • SecurityFocus Microsoft Newsletter #422 (Fri Dec 05 2008 - 08:17:05 EET)
  • SecurityFocus Newsletter #481 (Fri Dec 05 2008 - 08:16:59 EET)
• Simon Ryeo
  • Fwd: TmaxSoft JEUS Alternate Data Streams Vulnerability (Sun Dec 14 2008 - 06:12:06 EET)
  • TmaxSoft JEUS Alternate Data Streams Vulnerability (Fri Dec 12 2008 - 19:51:37 EET)
• Stefan Esser
  • Advisory 06/2008: PHP ZipArchive::extractTo() Directory Traversal Vulnerability (Thu Dec 04 2008 - 09:39:36 EET)
• Steffen Joeris
  • [SECURITY] [DSA 1692-1] New php-xajax packages fix cross-site scripting (Sat Dec 27 2008 - 11:49:06 EET)
  • [SECURITY] [DSA 1688-1] New courier-authlib packages fix SQL injection (Sat Dec 20 2008 - 17:21:38 EET)
  • [SECURITY] [DSA 1685-1] New uw-imap packages fix multiple vulnerabilities (Fri Dec 12 2008 - 08:36:28 EET)
  • [SECURITY] [DSA 1678-1] New perl packages fix privilege escalation (Wed Dec 03 2008 - 08:15:24 EET)
• Steve Shockley
  • Re: VMSA-2008-0019 VMware Hosted products and patches for ESX and ESXi resolve a critical security issue and update bzip2 (Wed Dec 03 2008 - 20:42:11 EET)
• SVRT-Bkis
  • [SVRT-07-08] Vulnerability in Face Recognition Authentication Mechanism of Lenovo-Asus-Toshiba Laptops (Mon Dec 08 2008 - 06:39:48 EET)
  • [SVRT-06-08] MULTI SECURITY VULNERABILITIES IN MVNFORUM (Wed Dec 03 2008 - 15:02:19 EET)
• th3.r00k.ieatpork@gmail.pork.com
  • Multiple XSRF in DD-WRT (Remote Root Command Execution) (Mon Dec 08 2008 - 23:35:28 EET)
  • XSS in PHPepperShop v 1.4 (Mon Dec 08 2008 - 05:48:39 EET)
  • Two XSS Flaws in PrestaShop 1.1.0.3 (Mon Dec 08 2008 - 05:32:37 EET)
• the.dumenci@gmail.com
  • php-nuke 8.0 module sections artid blind sql inj vuln. (Tue Dec 30 2008 - 16:31:59 EET)
• Thijs Kinkhorst
  • [SECURITY] [DSA 1693-1] New phppgadmin packages fix several vulnerabilities (Sat Dec 27 2008 - 13:54:26 EET)
  • [SECURITY] [DSA 1691-1] New moodle packages fix several vulnerabilities (Mon Dec 22 2008 - 10:27:17 EET)
  • [SECURITY] [DSA 1682-1] New squirrelmail packages fix cross site scripting (Sun Dec 07 2008 - 18:22:55 EET)
  • [SECURITY] [DSA 1675-1] New phpmyadmin packages fix cross site scripting (Sun Nov 30 2008 - 14:53:28 EET)
• Tobias Heinlein
  • [ GLSA 200812-24 ] VLC: Multiple vulnerabilities (Wed Dec 24 2008 - 02:35:03 EET)
  • [ GLSA 200812-17 ] Ruby: Multiple vulnerabilities (Tue Dec 16 2008 - 22:37:02 EET)
  • [ GLSA 200812-16 ] Dovecot: Multiple vulnerabilities (Mon Dec 15 2008 - 15:45:23 EET)
  • [ GLSA 200812-14 ] aview: Insecure temporary file usage (Sun Dec 14 2008 - 02:38:30 EET)
  • [ GLSA 200812-12 ] Honeyd: Insecure temporary file creation (Fri Dec 12 2008 - 22:50:27 EET)
• Tobias Klein
  • [TKADV2008-015] Sun Solaris SIOCGTUNPARAM IOCTL Kernel NULL pointer dereference (Thu Dec 18 2008 - 13:22:26 EET)
  • [TKADV2008-014] MPlayer TwinVQ Processing Stack Buffer Overflow Vulnerability (Sun Dec 14 2008 - 18:32:40 EET)
  • [TKADV2008-013] VLC media player RealMedia Processing Integer Overflow Vulnerability (Sun Nov 30 2008 - 16:54:47 EET)
• Ubuntu Privacy Remix Team
  • [UPRSN] Ubuntu Privacy Remix 8.04r2 introduces "noexec"-mounting by default (Mon Dec 22 2008 - 11:55:49 EET)
  • [UPRSN] Ubuntu Privacy Remix 8.04r1 fixes security issues (Thu Dec 04 2008 - 16:46:55 EET)
• uCon Security Conference
  • CFP uCon Security Conference 2009 - Recife, Brazil (Wed Dec 31 2008 - 05:21:01 EET)
• v8i@hotmail.com
  • apache 1.x <=> 2.x suphp (suPHP_ConfigPath) bypass safe mode exploit&#8206; (Tue Dec 30 2008 - 20:31:05 EET)
• Vladimir '3APA3A' Dubrovin
  • Re[2]: Multiple XSRF in DD-WRT (Remote Root Command Execution) (Thu Dec 11 2008 - 11:55:26 EET)
  • Re: DoS attacks on MIME-capable software via complex MIME emails (Tue Dec 09 2008 - 18:53:27 EET)
• VMware Security team
  • VMSA-2008-0019 VMware Hosted products and patches for ESX and ESXi resolve a critical security issue and update bzip2 (Wed Dec 03 2008 - 07:24:01 EET)
• VSR Advisories
  • CVE-2008-2086: Java Web Start File Inclusion via System Properties Override (Thu Dec 04 2008 - 06:13:54 EET)
• VulnerabilityAlert@ddifrontline.com
  • RE: DDIVRT-DDIVRT-2008-15 iPhone Configuration Web Utility 1.0 for Windows Directory Traversal (Fri Dec 05 2008 - 18:17:59 EET)
• VulnerabilityResearch@ddifrontline.com
  • DDIVRT-2008-16 Citrix Broadcast Server 6.0 login.asp SQL Injection --- Update for BID 32832 (Tue Dec 23 2008 - 17:01:32 EET)
• Williams, James K
  • CA ARCserve Backup LDBserver Vulnerability (Wed Dec 10 2008 - 23:04:37 EET)
• writ3r-dont-want-bugtraq-spam-@gmail.com
  • CoolPlayer 2.19 (Skin File) Local Buffer Overflow Exploit (Mon Dec 22 2008 - 09:39:55 EET)
  • FreeSSHd Multiple Remote Stack Overflow Vulnerabilities (Mon Dec 22 2008 - 09:42:59 EET)
• xhakerman2006@yahoo.com
  • Multiple Vendor Anti-Virus Software Malicious WebPage Detection Bypass -Update- (Tue Dec 09 2008 - 18:34:48 EET)
  • Multiple Vendor Anti-Virus Software Malicious WebPage Detection Bypass (Mon Dec 08 2008 - 08:26:16 EET)
  • RadAsm <=2.2.1.5 Local Command Execution (Mon Dec 08 2008 - 07:54:45 EET)
• XiaShing@gmail.com
  • ViArt Shopping Cart v3.5 Multiple Remote Vulnerabilities (Mon Dec 29 2008 - 07:58:07 EET)
• xl4nothing@gmail.com
  • Personal Sticky Threads v1.0.3c vbulletin Add-on problem (Tue Dec 23 2008 - 20:52:12 EET)
• yangdn@nipc.org.cn
  • Nokia N70/N73 Bluetooth Stack OBEX Implementation Denial of Service (Fri Dec 12 2008 - 05:12:13 EET)
• zdi-disclosures@3com.com
  • ZDI-08-088: Oracle E-Business Suite Business Intelligence SQL Injection Vulnerability (Tue Dec 16 2008 - 21:14:14 EET)
  • ZDI-08-087: Microsoft Internet Explorer Webdav Request Parsing Heap Corruption Vulnerability (Tue Dec 09 2008 - 23:10:54 EET)
  • ZDI-08-086: Microsoft Office Word Document Table Property Stack Overflow Vulnerability (Tue Dec 09 2008 - 23:10:15 EET)
  • ZDI-08-085: Microsoft Office RTF Drawing Object Heap Overflow Vulnerability (Tue Dec 09 2008 - 23:09:35 EET)
  • ZDI-08-084: Microsoft Office RTF Consecutive Drawing Object Parsing Heap Corruption Vulnerability (Tue Dec 09 2008 - 23:08:20 EET)
  • ZDI-08-083: Microsoft Animation ActiveX Control Malformed AVI Parsing Code Execution Vulnerability (Tue Dec 09 2008 - 23:07:25 EET)
  • ZDI-08-082: BMC PatrolAgent Version Logging Format String Vulnerability (Mon Dec 08 2008 - 21:38:32 EET)
  • ZDI-08-081: Sun Java Web Start and Applet Multiple Sandbox Bypass Vulnerabilities (Fri Dec 05 2008 - 02:19:04 EET)
  • ZDI-08-080: Sun Java AWT Library Sandbox Violation Vulnerability (Fri Dec 05 2008 - 02:18:45 EET)
  • ZDI-08-079: Trillian AIM Plugin Malformed XML Tag Heap Overflow Vulnerability (Fri Dec 05 2008 - 02:18:26 EET)
  • ZDI-08-078: Trillian IMG SRC ID Memory Corruption Vulnerability (Fri Dec 05 2008 - 02:18:08 EET)
  • ZDI-08-077: Trillian AIM IMG Tag Parsing Stack Overflow Vulnerability (Fri Dec 05 2008 - 02:17:48 EET)
• zimpel@t-online.de
  • Re: Re: Re: Wrong report: BID 32287, Pi3Web ISAPI DoS vulnerability (Wed Dec 03 2008 - 09:48:44 EET)
  • Re: Re: Wrong report: BID 32287, Pi3Web ISAPI DoS vulnerability (Mon Dec 01 2008 - 10:43:27 EET)

Last message date: Wed Dec 31 2008 - 21:58:33 EET
Archived on: Wed Dec 31 2008 - 21:58:34 EET

This archive was generated by hypermail 2b28 : Wed Dec 31 2008 - 21:58:34 EET