stdin
By Author

• a@bd.cd
  • Re: php 4.x php5.2.x all "show_source()" ,"highlight_file()" bypass‏ (Mon Jan 05 2009 - 18:14:23 EET)
• ACROS Security
  • ACROS Security: HTML Injection in BEA (Oracle) WebLogic Server Console (ASPR #2009-01-27-1) (Tue Jan 27 2009 - 13:48:58 EET)
• Adam Laurie
  • ANNOUNCE - RFIDIOt 0.1w released - January 2009 (Fri Jan 30 2009 - 15:32:40 EET)
  • ANNOUNCE: apache_1.3.41+ssl_1.60 released (Thu Jan 15 2009 - 14:56:14 EET)
  • ANNOUNCE: RFIDIOt ver 01.v released - Jan 2009 (Mon Jan 05 2009 - 16:53:49 EET)
• Aditya K Sood
  • Advisory: Google Chrome 1.0.154.43 ClickJacking Vulnerability. (Wed Jan 28 2009 - 21:54:52 EET)
  • Advisory: Oracle EBusiness Suite Sensitive Information Disclosure Vulnerability (Sun Jan 18 2009 - 15:42:59 EET)
  • Google Chrome FTP PASV IP Malicious Port Scanning Vulnerability. (Sun Jan 04 2009 - 18:30:24 EET)
• admin@bugreport.ir
  • NewsCMSlite Insecure Cookie Handling (Tue Jan 27 2009 - 09:00:53 EET)
  • phpList <= 2.10.8 Local File inclusion (Wed Jan 14 2009 - 10:50:17 EET)
• admin@elites0ft.com
  • OpenX 2.6.3 - Local File Inclusion (Tue Jan 27 2009 - 02:20:48 EET)
• ajannhwt@hotmail.com
  • Comersus Shopping Cart <= v6 Remote User Pass Exploit (Mon Jan 12 2009 - 14:47:41 EET)
• alberto.morenot@gmail.com
  • Microsoft Bluetooth Stack OBEX Directory Traversal (Tue Jan 20 2009 - 01:23:12 EET)
• Alexandr Polyakov
  • Oracle CPU Jan 2009 Advisories. (Wed Jan 14 2009 - 12:45:07 EET)
• alphanix00@gmail.com
  • dBpowerAMP Audio Player v2 ( .pls file) LoCaL BufferOverFlow Exploit (Thu Jan 29 2009 - 18:29:25 EET)
  • JetAudio Basic 7.0.3 BufferOverFlow PoC (Tue Jan 27 2009 - 08:21:33 EET)
  • EleCard MPEG PLAYER (.m3u file) Local Stack Overflow Exploit (Sun Jan 25 2009 - 16:14:21 EET)
  • Browse3d (.sfs file) Local Stack Overflow Exploit (Sun Jan 25 2009 - 16:15:18 EET)
  • MediaMonkey 3.0.6 (.m3u file) Local Buffer Overflow PoC (Sun Jan 25 2009 - 16:14:49 EET)
  • Nokia Multimedia Player (.AVI File) Null Dereference Pointer Exploit (Sun Jan 25 2009 - 16:15:55 EET)
  • Sagem router f@st 2404 remote reset poc (Fri Jan 16 2009 - 23:02:56 EET)
  • Excel Viewer OCX 3.1/3.2 Denial of Service PoC (Fri Jan 16 2009 - 23:01:17 EET)
  • VUPLAYER BufferOver flow POC (Tue Jan 06 2009 - 22:08:59 EET)
• Amon Ott
  • Announce: RSBAC 1.4.0 released (Fri Jan 16 2009 - 10:56:20 EET)
• Andrzej Targosz
  • CONFidence 2009, Final CfP (Wed Jan 28 2009 - 00:45:55 EET)
• arash.setayeshi@gmail.com
  • LDF Sql injection vulnerability (Sat Jan 24 2009 - 05:19:31 EET)
  • Lootan(kedor) Sql Injection vulnerability (Sat Jan 24 2009 - 05:12:08 EET)
  • Oblog XSS valnerability (Fri Jan 23 2009 - 21:02:26 EET)
• arashps0@gmail.com
  • BBSxp Xss vulnerability (Fri Jan 23 2009 - 17:08:23 EET)
• Asterisk Security Team
  • AST-2009-001: Information leak in IAX2 authentication (Thu Jan 08 2009 - 21:28:57 EET)
• b4DchiLd@msn.Com
  • PollPro 3.0 XSRF VuLn. (Sun Jan 04 2009 - 00:02:59 EET)
• Brian Dowling
  • WowWee Rovio - Insufficient Access Controls - Covert Audio/Video Snooping Possible (Wed Jan 14 2009 - 10:41:59 EET)
• Chris Evans
  • Problems with syscall filtering technologies on Linux (Fri Jan 23 2009 - 23:42:03 EET)
• Christopher Kruegel
  • CfP: 16th ACM Conference on Computer and Communications Security (CCS) 2009 (Wed Jan 21 2009 - 04:07:04 EET)
• Cisco Systems Product Security Incident Response Team
  • Cisco Security Advisory: Cisco Unified Communications Manager CAPF Denial of Service Vulnerability` (Wed Jan 21 2009 - 18:15:00 EET)
  • Cisco Security Advisory: Cisco Security Manager Vulnerability (Wed Jan 21 2009 - 18:00:00 EET)
  • Cisco Security Advisory: IronPort Encryption Appliance / PostX and PXE Encryption Vulnerabilities (Wed Jan 14 2009 - 19:15:00 EET)
  • Cisco Security Advisory: Cisco ONS Platform Crafted Packet Vulnerability (Wed Jan 14 2009 - 18:00:00 EET)
  • Cisco Security Response: Cisco IOS Cross-Site Scripting Vulnerabilities (Wed Jan 14 2009 - 18:00:00 EET)
  • Cisco Security Advisory: Cisco Global Site Selector Appliances DNS Vulnerability (Wed Jan 07 2009 - 18:00:00 EET)
• come2waraxe@yahoo.com
  • Re: Re: Google Chrome Browser (ChromeHTML://) remote parameter injection POC (Fri Jan 30 2009 - 19:58:54 EET)
  • [waraxe-2009-SA#070] - Multiple Vulnerabilities in MKPortal <= 1.2.1 (Thu Jan 15 2009 - 20:43:55 EET)
• Core Security Technologies Advisories
  • CORE-2008-1211: Amaya web editor XML and HTML parser vulnerabilities (Wed Jan 28 2009 - 20:24:41 EET)
  • CORE-2008-1128: Openfire multiple vulnerabilities (Thu Jan 08 2009 - 19:34:11 EET)
• crimson.loyd@gmail.com
  • OTSTurntables 1.00.027 (.ofl) Local Stack Overflow Exploit (Wed Jan 14 2009 - 19:14:39 EET)
  • Destiny Media Player 1.61 (.lst File) Local Stack Overflow Exploit (Sun Jan 04 2009 - 14:57:33 EET)
• dan.crowley@gmail.com
  • Re: Oblog XSS valnerability (Sat Jan 24 2009 - 21:57:22 EET)
• Dave English
  • Re: DoS attacks on MIME-capable software via complex MIME emails (Tue Jan 27 2009 - 17:22:25 EET)
• David Litchfield
  • Trigger Abuse of MDSYS.SDO_TOPO_DROP_FTBL in Oracle 10g R1 and R2 (Wed Jan 14 2009 - 01:52:02 EET)
• Devin Carraway
  • [SECURITY] [DSA 1715-1] New moin packages fix insufficient input sanitising (Thu Jan 29 2009 - 09:14:15 EET)
• Digital Security Research Group
  • Digital Security opens a site of its research center DSec Research Group (Wed Jan 21 2009 - 19:53:11 EET)
  • [DSECRG-09-004] AXIS 70U Network Document Server - Privilege Escalation and XSS (Wed Jan 21 2009 - 17:38:47 EET)
• DoZ@HackersCenter.com
  • Oracle Application Server 10g Cross Site Scripting Vulnerability (Thu Jan 29 2009 - 15:57:02 EET)
  • Oracle Forms Cross site Scripting in (iFcgi60.exe / f60servlet) (Thu Jan 29 2009 - 16:12:07 EET)
• Eduardo Vela
  • Oracle Containers For Java Directory Traversal (OC4J) Oracle Application Server 10g (10.1.3.1.0) Oracle HTTP Server (Tue Jan 20 2009 - 06:56:32 EET)
• Ehsan_Hp200@Hotmail.com
  • SolucionWeb (main.php?id_area) Remote SQL injection Vulnerability (Sun Jan 04 2009 - 22:17:21 EET)
• erik@psafe.nl
  • [IBM Datapower XS40] Denial of Service (Thu Jan 08 2009 - 12:14:51 EET)
• Eugene Teo
  • Re: Linux Kernel 2.6.18/2.6.24/2.6.20/2.6.22/2.6.21 denial of service exploit (Sun Jan 04 2009 - 03:12:21 EET)
• ew1zz@hotmail.com
  • PHP Buffer Overflow(popen) (Mon Jan 12 2009 - 15:36:37 EET)
• fakeperson7
  • PDFBuilderX 2.2 Arbitrary File Overwrite (Tue Jan 13 2009 - 13:41:43 EET)
• faze0r@aim.com
  • Re: php 4.x php5.2.x all "show_source()" ,"highlight_file()" bypass&#8207; (Mon Jan 05 2009 - 20:32:22 EET)
• Fernando Gont
  • [Suspected Spam]"Security Assessment of the Internet Protocol" & the IETF (Tue Jan 06 2009 - 03:43:03 EET)
• Florian Weimer
  • [SECURITY] [DSA 1708-1] New Git packages fix remote code execution (Mon Jan 19 2009 - 22:53:42 EET)
  • [SECURITY] [DSA 1703-1] New bind9 packages fix cryptographic weakness (Mon Jan 12 2009 - 23:27:18 EET)
  • [SECURITY] [DSA 1702-1] New ntp packages fix cryptographic weakness (Mon Jan 12 2009 - 22:34:15 EET)
  • [SECURITY] [DSA 1701-1] New OpenSSL packages fix cryptographic weakness (Mon Jan 12 2009 - 22:03:29 EET)
  • [SECURITY] [DSA 1699-1] New zaptel packages fix privilege escalation (Sun Jan 11 2009 - 14:01:27 EET)
  • [SECURITY] [DSA 1694-2] New xterm packages fix regression (Tue Jan 06 2009 - 13:40:11 EET)
  • [SECURITY] [DSA 1695-1] New Ruby packages fix denial of service (Fri Jan 02 2009 - 23:47:08 EET)
  • [SECURITY] [DSA 1694-1] New xterm packages fix remote code execution (Fri Jan 02 2009 - 21:07:44 EET)
• FreeBSD Security Advisories
  • FreeBSD Security Advisory FreeBSD-SA-09:04.bind (Wed Jan 14 2009 - 00:33:56 EET)
  • FreeBSD Security Advisory FreeBSD-SA-09:01.lukemftpd (Wed Jan 07 2009 - 23:36:19 EET)
  • FreeBSD Security Advisory FreeBSD-SA-09:02.openssl (Wed Jan 07 2009 - 23:37:17 EET)
• Heart
  • 53KF Web IM 2009 Cross-Site Scripting Vulnerabilities (Mon Jan 19 2009 - 05:26:25 EET)
• i9p@hotmail.fr
  • Linux Kernel 2.6.18/2.6.24/2.6.20/2.6.22/2.6.21 denial of service exploit (Thu Jan 01 2009 - 18:15:17 EET)
• iDefense Labs
  • iDefense Security Advisory 01.13.09: Oracle Secure Backup Administration Server login.php Command Injection Vulnerability (Wed Jan 14 2009 - 01:36:10 EET)
  • iDefense Security Advisory 01.13.09: Oracle Secure Backup Administration Server login.php Command Injection Vulnerability (Wed Jan 14 2009 - 01:05:39 EET)
  • iDefense Security Advisory 01.13.09: Oracle Database 10g R2 Summary Advisor Arbitrary File Rewrite Vulnerability (Wed Jan 14 2009 - 00:36:18 EET)
  • iDefense Security Advisory 01.13.09: RIM BlackBerry Enterprise Server Attachment Service PDF Distiller Uninitialized Memory Vulnerability (Tue Jan 13 2009 - 23:34:46 EET)
  • iDefense Security Advisory 01.13.09: RIM BlackBerry Enterprise Server Attachment Service PDF Distiller 'bitmaps' Heap Overflow Vulnerability (Tue Jan 13 2009 - 23:00:35 EET)
  • iDefense Security Advisory 01.13.09: RIM BlackBerry Enterprise Server Attachment Service PDF Distiller 'symWidths' Heap Overflow Vulnerability (Tue Jan 13 2009 - 21:53:17 EET)
• Integrigy Alerts
  • RE: Oracle Database Buffer Overflow in SYS.KUPF$FILE_INT.GET_FULL_FILENAME (Oracle CPU April 2008 DB11) (Mon Jan 12 2009 - 18:29:04 EET)
• irancrash@gmail.com
  • PHP-Fusion Mod vArcade 1.8 Sql Injection Vulnerability (Thu Jan 08 2009 - 16:19:08 EET)
• Jamie Strandboge
  • [USN-716-1] MoinMoin vulnerabilities (Fri Jan 30 2009 - 06:29:57 EET)
  • [USN-709-1] tar vulnerability (Thu Jan 15 2009 - 23:55:53 EET)
  • [USN-706-1] Bind vulnerability (Fri Jan 09 2009 - 02:21:18 EET)
  • [USN-705-1] NTP vulnerability (Thu Jan 08 2009 - 20:39:57 EET)
  • [USN-704-1] OpenSSL vulnerability (Thu Jan 08 2009 - 00:24:22 EET)
  • [USN-701-1] Thunderbird vulnerabilities (Wed Jan 07 2009 - 01:25:58 EET)
  • [USN-701-2] Thunderbird vulnerabilities (Wed Jan 07 2009 - 01:33:14 EET)
• Jerome Athias
  • Re: [Suspected Spam]"Security Assessment of the Internet Protocol" & the IETF (Thu Jan 08 2009 - 00:21:08 EET)
  • MSFXDC Metasploit eXploits Development Contest (Sun Jan 04 2009 - 17:53:29 EET)
• joris@infogroep.be
  • Re: Linux Kernel 2.6.18/2.6.24/2.6.20/2.6.22/2.6.21 denial of service exploit (Sat Jan 03 2009 - 17:37:50 EET)
• joseph.giron13@gmail.com
  • Visuplay CMS SQL injection vulnerability (Mon Jan 12 2009 - 13:03:05 EET)
• Joxean Koret
  • Oracle TimesTen Remote Format String (Wed Jan 14 2009 - 22:53:05 EET)
  • Oracle Secure Backup 10g Remote Code Execution (Wed Jan 14 2009 - 22:51:47 EET)
  • Re: Team SHATTER Security Advisory: Oracle Database Buffer Overflow in SYS.KUPF$FILE_INT.GET_FULL_FILENAME (DB11) (Sat Jan 10 2009 - 20:26:32 EET)
• jplopezy@gmail.com
  • Re: Internet explorer 7.0 stack overflow (Thu Jan 29 2009 - 17:31:05 EET)
  • Internet explorer 7.0 stack overflow (Wed Jan 28 2009 - 02:31:09 EET)
• Juha-Matti Laurio
  • Re: [Full-disclosure] ZDI-09-007: Apple QuickTime Cinepak Codec MDAT Heap Corruption Vulnerability (Sat Jan 24 2009 - 13:42:50 EET)
• Jukka Zitting
  • [ANNOUNCE] Apache Jackrabbit 1.5.2 released (Tue Jan 20 2009 - 15:20:51 EET)
• Kees Cook
  • [USN-715-1] Linux kernel vulnerabilities (Fri Jan 30 2009 - 04:21:49 EET)
  • [USN-713-1] openjdk-6 vulnerabilities (Wed Jan 28 2009 - 00:37:30 EET)
  • [USN-700-2] Perl regression (Fri Jan 16 2009 - 00:49:03 EET)
  • [USN-703-1] xterm vulnerability (Tue Jan 06 2009 - 03:23:08 EET)
• kgconference@gmail.com
  • Call for Papers: Cyber Warfare (Wed Jan 14 2009 - 10:08:57 EET)
• l1un@hotmail.com
  • php 4.x php5.2.x all "show_source()" ,"highlight_file()" bypass&#8207; (Sun Jan 04 2009 - 21:39:08 EET)
• Laurent Butti
  • Cisco Unified IP Phone 7960G and 7940G (SIP) RTP Header Vulnerability (Wed Jan 14 2009 - 14:29:32 EET)
• LayerOne Call For Papers
  • LayerOne 2009 Call for Papers (Thu Jan 08 2009 - 20:46:39 EET)
• m.rajeshpawar@gmail.com
  • Re: XSS vulnerabilty in ASP.Net [with details] (Thu Jan 29 2009 - 23:49:18 EET)
• mad-vaittes@ida.ing.tu-bs.de
  • Leak of SNMP write password via SNMP read community in NETGEAR WG102 - Prosafe 802.11g Access Point (Fri Jan 09 2009 - 10:56:26 EET)
• Major Malfunction
  • ANNOUNCE: DEFCON London - DC4420 - January meet - Thursday 15th Jan 2009 (Tue Jan 13 2009 - 20:21:49 EET)
• Marc Deslauriers
  • [USN-712-1] Vim vulnerabilities (Tue Jan 27 2009 - 14:53:00 EET)
  • [USN-711-1] KTorrent vulnerabilities (Mon Jan 26 2009 - 22:40:58 EET)
  • [USN-710-1] xine-lib vulnerabilities (Mon Jan 26 2009 - 22:40:28 EET)
  • [USN-708-1] HPLIP vulnerability (Tue Jan 13 2009 - 22:50:26 EET)
  • [USN-707-1] CUPS vulnerabilities (Mon Jan 12 2009 - 17:42:36 EET)
  • [USN-702-1] Samba vulnerability (Mon Jan 05 2009 - 22:16:46 EET)
• Mark Thomas
  • Re: [Full-disclosure] Oracle Containers For Java Directory Traversal (OC4J) Oracle Application Server 10g (10.1.3.1.0) Oracle HTTP Server (Wed Jan 21 2009 - 23:08:29 EET)
• maroc-anti-connexion@hotmail.com
  • Total video player 1.3.7 local buffer overflow universal exploit (Tue Jan 27 2009 - 17:02:39 EET)
  • Browser3D 3.5 (.sfs File) Local Stack Overflow Exploit (c) (Sat Jan 24 2009 - 02:57:03 EET)
  • VUPlayer 2.49 .ASX local universal BOF exploit (Thu Jan 22 2009 - 15:41:54 EET)
• Martin Suess
  • SAP NetWeaver XSS Vulnerability (Tue Jan 27 2009 - 10:57:08 EET)
• Matteo Beccati
  • [OPENX-SA-2009-001] OpenX 2.4.10 and 2.6.4 fix multiple vulnerabilities (Fri Jan 30 2009 - 11:27:20 EET)
• Matteo Ignaccolo
  • Plunet BusinessManager failure in access controls and multiple stored cross site scripting (Wed Jan 07 2009 - 19:58:40 EET)
  • Plunet BusinessManager failure in access controls and multiple stored cross site scripting (Wed Jan 07 2009 - 17:30:18 EET)
• Memisyazici, Aras
  • A tool to identify the MD5 certs on FF (Fri Jan 02 2009 - 01:19:01 EET)
• Michal Zalewski
  • Re: Advisory: Google Chrome 1.0.154.43 ClickJacking Vulnerability. (Thu Jan 29 2009 - 01:40:40 EET)
• Mobile Security Lab
  • SonyEricsson WAP Push Denial of Service (Mon Jan 26 2009 - 12:16:37 EET)
• Moritz Muehlenhoff
  • [SECURITY] [DSA 1714-1] New rt2570 packages fix arbitrary code execution (Wed Jan 28 2009 - 23:55:19 EET)
  • [SECURITY] [DSA 1713-1] New rt2500 packages fix arbitrary code execution (Wed Jan 28 2009 - 23:51:07 EET)
  • [SECURITY] [DSA 1712-1] New rt2400 packages fix arbitrary code execution (Wed Jan 28 2009 - 23:45:32 EET)
  • [SECURITY] [DSA 1706-1] New amarok packages fix arbitrary code execution (Thu Jan 15 2009 - 23:42:14 EET)
  • [SECURITY] [DSA 1700-1] New lasso packages fix validation bypass (Sun Jan 11 2009 - 23:48:23 EET)
• ms5ote@hotmail.fr
  • Re: apache 1.x <=> 2.x suphp (suPHP_ConfigPath) bypass safe mode exploit&#8206; (Thu Jan 01 2009 - 00:38:50 EET)
• Nam Nguyen
  • [BMSA-2009-01] Authentication bypass in Interspire Shopping Cart v4.0.1 and below (Mon Jan 12 2009 - 16:57:42 EET)
• Nico Golde
  • [SECURITY] [DSA 1704-2] Updated netatalk packages fix denial of service (Thu Jan 29 2009 - 23:53:18 EET)
  • [SECURITY] [DSA 1711-1] New TYPO3 packages fix remote code execution (Mon Jan 26 2009 - 22:54:10 EET)
  • [SECURITY] [DSA 1705-1] New netatalk packages fix arbitrary code execution (Thu Jan 15 2009 - 23:00:47 EET)
• noreply-secresearch@fortinet.com
  • Oracle Secure Backup NDMP_CONECT_CLIENT_AUTH Command Buffer Overflow Vulnerability (Thu Jan 15 2009 - 11:26:45 EET)
  • Oracle Secure Backup's observiced.exe Denial Of Service vulnerability (Thu Jan 15 2009 - 11:25:58 EET)
  • Oracle Secure Backup Multiple Denial Of Service vulnerabilities (Thu Jan 15 2009 - 11:24:48 EET)
• Ofer Shezaf
  • Web Hacking Incidents update for Jan 28th (Wed Jan 28 2009 - 12:26:39 EET)
  • Web Hacking Incidents update for Jan 19th (Mon Jan 19 2009 - 14:41:54 EET)
  • New WHID web hacking incidents (Tue Jan 06 2009 - 15:55:05 EET)
• office@hackattack.at
  • [HACKATTACK Advisory 25012009]ConPresso CMS 4.07 - Session Fixation, XFS, XSS (Sun Jan 25 2009 - 10:51:00 EET)
• Oliver Goebel
  • [IMF 2009] Call for Papers (Wed Jan 21 2009 - 23:21:24 EET)
• organiser@syscan.org
  • SyScan'09 Call For Paper - Shanghai, Hong Kong, Singapore, Taipei (Mon Jan 12 2009 - 12:04:38 EET)
• Patrice CLEMENTE
  • CFP: COLSEC 2009 (Wed Jan 07 2009 - 18:11:26 EET)
• Paul Oxman (poxman)
  • RE: DoS code for Cisco VLAN Trunking Protocol Vulnerability (Wed Jan 14 2009 - 05:50:38 EET)
• Paul Szabo
  • /bin/login DoS remains after DSA-1709 (Sat Jan 24 2009 - 07:06:29 EET)
• Perforin
  • PerlSoft Guestbook v1.7b Bruteforcer + RCE! (Thu Jan 29 2009 - 19:18:12 EET)
• Pete Herzog
  • Top 5-ish Threats to Watch for in 2009 (Sat Jan 03 2009 - 21:17:17 EET)
• Pierre-Yves Rofes
  • [ GLSA 200901-15 ] Net-SNMP: Denial of Service (Thu Jan 22 2009 - 00:31:59 EET)
  • [ GLSA 200901-14 ] Scilab: Insecure temporary file usage (Thu Jan 22 2009 - 00:20:53 EET)
  • [ GLSA 200901-13 ] Pidgin: Multiple vulnerabilities (Wed Jan 21 2009 - 00:01:50 EET)
  • [ GLSA 200901-12 ] noip-updater: Execution of arbitrary code (Mon Jan 19 2009 - 00:18:54 EET)
  • [ GLSA 200901-11 ] Avahi: Denial of Service (Thu Jan 15 2009 - 01:05:35 EET)
  • [ GLSA 200901-10 ] GnuTLS: Certificate validation error (Thu Jan 15 2009 - 00:49:12 EET)
  • [ GLSA 200901-08 ] Online-Bookmarks: Multiple vulnerabilities (Tue Jan 13 2009 - 00:31:51 EET)
  • [ GLSA 200901-06 ] Tremulous: User-assisted execution of arbitrary code (Sun Jan 11 2009 - 20:41:56 EET)
  • [ GLSA 200901-05 ] Streamripper: Multiple vulnerabilities (Sun Jan 11 2009 - 16:10:28 EET)
• pouya.s3rver@gmail.com
  • Active Bids (Fri Jan 16 2009 - 11:34:41 EET)
  • DMXReady Blog Manager (SQL/XSS) (Fri Jan 16 2009 - 11:33:38 EET)
• Praburaajan
  • Videos from HITBSecConf2008 - Malaysia released! (Wed Jan 21 2009 - 00:13:16 EET)
• ProCheckUp Research
  • PR08-23: XSS on Novell GroupWise WebAccess (Fri Jan 30 2009 - 13:24:42 EET)
  • PR08-22: Persistent XSS on Novell GroupWise WebAccess (Fri Jan 30 2009 - 13:20:41 EET)
  • PR08-21: Cross-site Request Forgery (CSRF) on Novell GroupWise WebAccess allows email theft and other attacks (Fri Jan 30 2009 - 13:14:12 EET)
  • PR08-19: XSS on Cisco IOS HTTP Server (Wed Jan 14 2009 - 13:37:06 EET)
• r3d.w0rm@yahoo.com
  • Bugs Online v2.14 Sql Injection (Fri Jan 30 2009 - 12:15:47 EET)
  • PHP-Nuke 8.0 Downloads Blind Sql Injection (Fri Jan 23 2009 - 12:45:34 EET)
  • Asp-project Cookie Handling (Thu Jan 22 2009 - 15:25:08 EET)
  • PHP-Fusion Mod E-Cart Sql Injection (Wed Jan 07 2009 - 13:53:43 EET)
  • PHP-Fusion Mod Members Bewerb Sql Injection (Wed Jan 07 2009 - 13:49:55 EET)
• riklaunim@gmail.com
  • Re: FUD Forum < 2.7.1 PHP code injection vurnelability (Tue Jan 27 2009 - 06:42:45 EET)
• Robert Buchholz
  • [ GLSA 200901-09 ] Adobe Reader: User-assisted execution of arbitrary code (Tue Jan 13 2009 - 14:18:41 EET)
  • [ GLSA 200901-04 ] D-Bus: Denial of Service (Sun Jan 11 2009 - 02:42:12 EET)
  • [ GLSA 200901-03 ] pdnsd: Denial of Service and cache poisoning (Sun Jan 11 2009 - 02:41:31 EET)
  • [ GLSA 200901-02 ] JHead: Multiple vulnerabilities (Sun Jan 11 2009 - 02:40:01 EET)
  • [ GLSA 200901-01 ] NDISwrapper: Arbitrary remote code execution (Sun Jan 11 2009 - 02:38:26 EET)
• rPath Update Announcements
  • rPSA-2009-0021-1 sudo (Thu Jan 29 2009 - 21:29:29 EET)
  • rPSA-2009-0014-1 hplip (Tue Jan 20 2009 - 22:37:53 EET)
  • rPSA-2009-0008-1 openssl (Tue Jan 20 2009 - 22:31:22 EET)
  • rPSA-2009-0010-1 ntp ntp-utils (Tue Jan 20 2009 - 22:33:11 EET)
  • rPSA-2009-0009-1 bind bind-utils (Tue Jan 20 2009 - 22:32:23 EET)
  • rPSA-2009-0011-1 perl (Tue Jan 20 2009 - 22:34:07 EET)
  • rPSA-2009-0007-1 pam_krb5 (Tue Jan 13 2009 - 20:46:43 EET)
  • rPSA-2009-0005-1 git gitweb (Tue Jan 13 2009 - 20:44:47 EET)
  • rPSA-2009-0006-1 samba samba-client samba-server samba-swat (Tue Jan 13 2009 - 21:13:30 EET)
• Russell L. Smoak
  • Re: Remote Cisco IOS FTP exploit (Tue Jan 20 2009 - 16:08:06 EET)
• Salvatore \
  • Max.Blog <= 1.0.6 (offline_auth.php) Offline Authentication Bypass (Tue Jan 27 2009 - 23:13:59 EET)
  • Max.Blog <= 1.0.6 (submit_post.php) SQL Injection Vulnerability (Tue Jan 27 2009 - 22:47:56 EET)
  • Max.Blog <= 1.0.6 (show_post.php) SQL Injection Vulnerability (Tue Jan 27 2009 - 17:27:06 EET)
• Sam Johnston
  • CVE-2008-4990 Enomaly ECP/Enomalism: Insecure temporary file creation vulnerabilities (Fri Jan 30 2009 - 15:57:09 EET)
• scott.switzer@openx.org
  • Re: Secunia Research: OpenX Multiple Vulnerabilities (Thu Jan 29 2009 - 01:34:50 EET)
• Secunia Research
  • Secunia Research: OpenX Multiple Vulnerabilities (Tue Jan 27 2009 - 17:13:19 EET)
  • Secunia Research: AXIS Camera Control "image_pan_tilt" Property Buffer Overflow (Fri Jan 23 2009 - 10:59:20 EET)
  • Secunia Research: OpenSG Radiance RGBE Buffer Overflow Vulnerability (Tue Jan 20 2009 - 17:42:20 EET)
  • Secunia Research: Trend Micro Network Security Component Vulnerabilities (Tue Jan 20 2009 - 16:06:41 EET)
  • Secunia Research: EasyHDR Pro Radiance RGBE Buffer Overflow (Tue Jan 20 2009 - 17:37:45 EET)
  • Secunia Research: DevIL "iGetHdrHeader()" Buffer Overflow Vulnerabilities (Tue Jan 13 2009 - 11:22:32 EET)
  • Secunia Research: TSC2 Help Desk CTab ActiveX Control Buffer Overflow (Wed Jan 07 2009 - 14:52:47 EET)
  • Secunia Research: HP OpenView Network Node Manager Multiple Vulnerabilities (Wed Jan 07 2009 - 13:43:23 EET)
• security curmudgeon
  • Re: munky-bliki lfi (Sun Jan 25 2009 - 12:27:09 EET)
  • Re: ZDI-09-007: Apple QuickTime Cinepak Codec MDAT Heap Corruption Vulnerability (Sat Jan 24 2009 - 12:36:13 EET)
  • Re: Remote Cisco IOS FTP exploit (Tue Jan 20 2009 - 12:33:26 EET)
  • Re: iDefense Security Advisory 01.13.09: Oracle Secure Backup Administration Server login.php Command Injection Vulnerability (Thu Jan 15 2009 - 08:46:51 EET)
  • Re: Assurent VR - Oracle BEA WebLogic Server Apache Connector Buffer Overflow (Thu Jan 15 2009 - 03:01:06 EET)
  • Re: Team SHATTER Security Advisory: Oracle Database Buffer Overflow in SYS.KUPF$FILE_INT.GET_FULL_FILENAME (DB11) (Sat Jan 10 2009 - 13:11:41 EET)
• security-alert@hp.com
  • [security bulletin] HPSBMP02404 SSRT090014 rev.1 - MPE/iX Running BIND/iX, Remote DNS Cache Poisoning (Thu Jan 29 2009 - 16:14:36 EET)
  • [security bulletin] HPSBMA02403 SSRT090007 rev.1 - HP Select Access Running on HP-UX, Linux, Solaris, and Windows, Remote Cross Site Scripting (XSS) (Thu Jan 29 2009 - 16:03:10 EET)
  • [security bulletin] HPSBMA02400 SSRT080144 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code (Tue Jan 20 2009 - 17:06:28 EET)
  • [security bulletin] HPSBMA02392 SSRT071481 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Denial of Service (DoS) (Mon Jan 12 2009 - 20:17:50 EET)
• security@mandriva.com
  • [ MDVSA-2009:030 ] amarok (Tue Jan 27 2009 - 18:11:00 EET)
  • [ MDVSA-2009:027 ] cups (Sat Jan 24 2009 - 20:45:00 EET)
  • [ MDVSA-2009:026 ] phpMyAdmin (Fri Jan 23 2009 - 20:47:00 EET)
  • [ MDVSA-2009:025 ] pidgin (Fri Jan 23 2009 - 03:02:00 EET)
  • [ MDVSA-2009:021 ] php (Thu Jan 22 2009 - 01:03:00 EET)
  • [ MDVSA-2009:023 ] php (Thu Jan 22 2009 - 02:03:00 EET)
  • [ MDVSA-2009:022 ] php (Thu Jan 22 2009 - 01:34:00 EET)
  • [ MDVSA-2009:020 ] xine-lib (Thu Jan 22 2009 - 00:37:00 EET)
  • [ MDVSA-2009:024 ] php4 (Thu Jan 22 2009 - 03:21:00 EET)
  • [ MDVSA-2009:019 ] imlib2 (Mon Jan 19 2009 - 21:26:00 EET)
  • [ MDVSA-2009:018 ] tomcat5 (Sat Jan 17 2009 - 08:50:01 EET)
  • [ MDVSA-2009:017 ] kdebase (Fri Jan 16 2009 - 23:04:00 EET)
  • [ MDVSA-2009:016 ] xen (Fri Jan 16 2009 - 20:16:00 EET)
  • [ MDVSA-2009:013 ] mplayer (Fri Jan 16 2009 - 05:47:00 EET)
  • [ MDVSA-2009:015 ] ffmpeg (Fri Jan 16 2009 - 06:53:00 EET)
  • [ MDVSA-2009:014 ] mplayer (Fri Jan 16 2009 - 06:18:00 EET)
  • [ MDVSA-2009:012 ] mozilla-thunderbird (Fri Jan 16 2009 - 00:07:00 EET)
  • [ MDVSA-2009:011 ] virtualbox (Thu Jan 15 2009 - 04:29:00 EET)
  • [ MDVSA-2009:010 ] qemu (Wed Jan 14 2009 - 09:13:01 EET)
  • [ MDVSA-2009:009 ] kvm (Wed Jan 14 2009 - 07:57:01 EET)
  • [ MDVSA-2009:008 ] qemu (Wed Jan 14 2009 - 07:47:01 EET)
  • [ MDVSA-2009:007 ] ntp (Wed Jan 14 2009 - 03:49:01 EET)
  • [ MDVSA-2009:006 ] openoffice.org (Tue Jan 13 2009 - 18:53:01 EET)
  • [ MDVSA-2009:005 ] xterm (Mon Jan 12 2009 - 05:27:00 EET)
  • [ MDVSA-2009:002 ] bind (Sat Jan 10 2009 - 10:42:00 EET)
  • [ MDVSA-2009:004 ] pam_mount (Sat Jan 10 2009 - 06:54:00 EET)
  • [ MDVSA-2009:003 ] python (Sat Jan 10 2009 - 03:20:01 EET)
• security@soqor.net
  • WB News v2.0.X Remote File include .. (Sun Jan 25 2009 - 05:13:47 EET)
  • Cybershade CMS Remote File include vulnerability (Tue Jan 20 2009 - 05:42:01 EET)
• sfa@securityfocus.com
  • SecurityFocus Linux Newsletter #424 (Thu Jan 29 2009 - 23:18:00 EET)
  • SecurityFocus Microsoft Newsletter #429 (Thu Jan 29 2009 - 23:17:54 EET)
  • SecurityFocus Newsletter #488 (Thu Jan 29 2009 - 23:17:50 EET)
  • SecurityFocus Newsletter #487 (Wed Jan 21 2009 - 00:59:29 EET)
  • SecurityFocus Microsoft Newsletter #428 (Wed Jan 21 2009 - 00:59:35 EET)
  • SecurityFocus Linux Newsletter #423 (Wed Jan 21 2009 - 00:59:41 EET)
  • SecurityFocus Newsletter #486 (Thu Jan 15 2009 - 19:21:30 EET)
  • SecurityFocus Microsoft Newsletter #427 (Thu Jan 15 2009 - 19:21:37 EET)
  • SecurityFocus Linux Newsletter #422 (Thu Jan 15 2009 - 19:21:47 EET)
  • SecurityFocus Microsoft Newsletter #426 (Wed Jan 07 2009 - 20:52:22 EET)
  • SecurityFocus Linux Newsletter #421 (Wed Jan 07 2009 - 20:52:28 EET)
  • SecurityFocus Newsletter #485 (Wed Jan 07 2009 - 20:52:16 EET)
• Shakacon
  • ShakaCon 2009 Call for Papers and Trainers (Fri Jan 09 2009 - 10:54:48 EET)
• Shaochun Wang
  • Re: Linux Kernel 2.6.18/2.6.24/2.6.20/2.6.22/2.6.21 denial of service exploit (Fri Jan 09 2009 - 10:52:08 EET)
• showrun.lee@gmail.com
  • DoS code for Cisco VLAN Trunking Protocol Vulnerability (Wed Jan 14 2009 - 07:07:03 EET)
• Simon Richter
  • Re: Leak of SNMP write password via SNMP read community in NETGEAR WG102 - Prosafe 802.11g Access Point (Fri Jan 09 2009 - 22:56:10 EET)
  • Re: Leak of SNMP write password via SNMP read community in NETGEAR WG102 - Prosafe 802.11g Access Point (Fri Jan 09 2009 - 18:52:08 EET)
• Slack Traq
  • Re: php 4.x php5.2.x all "show_source()" ,"highlight_file()" bypass&#8207; (Tue Jan 06 2009 - 14:36:13 EET)
• SmoKe
  • Hack Aethra SV 1042 Adsl/Voip Router (Mon Jan 12 2009 - 13:30:15 EET)
• sohrab_behroozian@yahoo.com
  • FBI XSS Vulnerability (Sat Jan 17 2009 - 10:06:40 EET)
• springsec@gmail.com
  • Ralinktech wireless cards drivers vulnerability (Sun Jan 18 2009 - 13:12:03 EET)
• Stefano Zanero
  • Re: Plunet BusinessManager failure in access controls and multiple stored cross site scripting (Fri Jan 09 2009 - 12:09:34 EET)
  • Call for papers and trainers - SeacureIT 2009 (Mon Jan 05 2009 - 00:12:05 EET)
• Steffen Joeris
  • [SECURITY] [DSA 1710-1] New ganglia-monitor-core packages fix remote code execution (Sun Jan 25 2009 - 22:26:55 EET)
  • [SECURITY] [DSA 1707-1] New iceweasel packages fix several vulnerabilities (Fri Jan 16 2009 - 00:03:27 EET)
  • [SECURITY] [DSA 1704-1] New xulrunner packages fix several vulnerabilities (Wed Jan 14 2009 - 22:28:56 EET)
  • [SECURITY] [DSA 1697-1] New iceape packages fix several vulnerabilities (Wed Jan 07 2009 - 23:41:42 EET)
  • [SECURITY] [DSA 1696-1] New icedove packages fix several vulnerabilities (Wed Jan 07 2009 - 23:32:09 EET)
• Steve Shockley
  • Re: Leak of SNMP write password via SNMP read community in NETGEAR WG102 - Prosafe 802.11g Access Point (Fri Jan 09 2009 - 22:25:44 EET)
• storms0uth@hotmail.com
  • VUplayer (.wax file) local buffer overflow crash exploit (Sat Jan 24 2009 - 00:47:36 EET)
• swhite@securestate.com
  • MoinMoin Wiki Engine XSS Vulnerability (Tue Jan 20 2009 - 18:25:32 EET)
• terrordactylspam@gmail.com
  • Re: [IBM Datapower XS40] Denial of Service (Thu Jan 08 2009 - 20:22:00 EET)
• thadeum@gmail.com
  • Benchmarking attacks and major security weakness on all recent Windows versions up to Windows 200 (Sat Jan 24 2009 - 13:32:11 EET)
• Thierry Zoller
  • [TZO-2009-2] Avira Antivir - Priviledge escalation (Thu Jan 15 2009 - 19:43:00 EET)
  • Errata: [TZO-2009-1] Avira Antivir - RAR - Division by Zero & Null Pointer Dereference (Thu Jan 15 2009 - 17:13:07 EET)
  • [TZO-2009-1] Avira Antivir - RAR - Division by Zero & Null Pointer Dereference (Wed Jan 14 2009 - 19:15:49 EET)
• Thijs Kinkhorst
  • [SECURITY] [DSA 1709-1] New shadow packages fix privilege escalation (Wed Jan 21 2009 - 12:03:41 EET)
  • [SECURITY] [DSA 1693-2] New phppgadmin packages fix regression (Wed Jan 21 2009 - 12:21:28 EET)
  • [SECURITY] [DSA 1698-1] New gforge packages fix SQL injection (Fri Jan 09 2009 - 10:02:46 EET)
• Tobias Heinlein
  • [ GLSA 200901-07 ] MPlayer: Multiple vulnerabilities (Mon Jan 12 2009 - 21:46:24 EET)
• Tobias Klein
  • [TKADV2009-004] FFmpeg Type Conversion Vulnerability (Wed Jan 28 2009 - 23:07:30 EET)
  • [TKADV2009-003] GStreamer Heap Overflow and Array Index out of Bounds Vulnerabilities (Thu Jan 22 2009 - 23:19:30 EET)
  • [TKADV2009-002] Amarok Integer Overflow and Unchecked Allocation Vulnerabilities (Sun Jan 11 2009 - 19:47:57 EET)
  • [TKADV2009-001] Sun Solaris aio_suspend() Kernel Integer Overflow Vulnerability (Sun Jan 11 2009 - 18:49:13 EET)
• usman
  • Motorola Wimax Modem CPEi300 Multiple Vulnerabilities (Thu Jan 29 2009 - 20:40:43 EET)
• vds_s@yahoo.com
  • Joomla component beamospetition 1.0.12 Sql Injection (Wed Jan 21 2009 - 19:16:21 EET)
• Vladimir '3APA3A' Dubrovin
  • Re[2]: Internet explorer 7.0 stack overflow (Thu Jan 29 2009 - 23:58:03 EET)
• vuln_research@princeofnigeria.org
  • Syslserve 1.058 Denial of Service Vulnerability (Fri Jan 16 2009 - 01:54:33 EET)
  • Windows NTP Time Server Syslog Monitor 1.0.000 Denial of Service Vulnerability (Thu Jan 15 2009 - 02:20:49 EET)
  • TFTPUtil GUI TFTP Server Denial of Service Vulnerability (Thu Jan 15 2009 - 02:16:07 EET)
  • TFTPUtil GUI TFTP Directory Traversal (Thu Jan 15 2009 - 02:04:35 EET)
  • Walusoft TFTPServer2000 Version 3.6.1 Directory Traversal (Mon Jan 05 2009 - 19:22:08 EET)
• vulns@wintercore.com
  • [Wintercore Research ] Fujitsu SystemcastWizard Lite PXEService Remote Buffer Overflow. (Mon Jan 19 2009 - 15:01:02 EET)
• Will Drewry
  • [oCERT-2008-016] Multiple OpenSSL signature verification API misuses (Wed Jan 07 2009 - 16:56:49 EET)
• William A. Rowe, Jr.
  • Java Runtime UTF-8 Decoder Smuggling Vector (Fri Jan 09 2009 - 18:23:04 EET)
• Williams, James K
  • CA20090126-01: CA Anti-Virus Engine Detection Evasion Multiple Vulnerabilities (Tue Jan 27 2009 - 17:08:01 EET)
  • CA20090123-01: Cohesion Tomcat Multiple Vulnerabilities (Updated - v1.1) (Tue Jan 27 2009 - 02:26:13 EET)
  • CA20090123-01: Cohesion Tomcat Multiple Vulnerabilities (Sat Jan 24 2009 - 20:36:56 EET)
  • CA20090107-01: CA Service Metric Analysis and CA Service Level Management smmsnmpd Arbitrary Command Execution Vulnerability (Wed Jan 07 2009 - 23:51:18 EET)
• zdi-disclosures@3com.com
  • ZDI-09-009: EMC AutoStart Backbone Engine Trusted Pointer Code Execution Vulnerability (Fri Jan 23 2009 - 22:08:32 EET)
  • ZDI-09-007: Apple QuickTime Cinepak Codec MDAT Heap Corruption Vulnerability (Thu Jan 22 2009 - 00:28:34 EET)
  • ZDI-09-005: Apple QuickTime VR Track Header Atom Heap Corruption Vulnerability (Thu Jan 22 2009 - 00:26:12 EET)
  • ZDI-09-008: Apple QuickTime STSD JPEG Atom Heap Corruption Vulnerability (Thu Jan 22 2009 - 00:29:28 EET)
  • ZDI-09-006: Apple QuickTime AVI Header nBlockAlign Heap Corruption Vulnerability (Thu Jan 22 2009 - 00:27:48 EET)
  • ZDI-09-004: Oracle TimesTen evtdump Remote Format String Vulnerability (Wed Jan 14 2009 - 22:30:01 EET)
  • ZDI-09-003: Oracle Secure Backup exec_qr() Command Injection Vulnerability (Wed Jan 14 2009 - 22:29:40 EET)
  • ZDI-09-002: Microsoft SMB NT Trans2 Request Parsing Remote Code Execution Vulnerability (Tue Jan 13 2009 - 22:04:00 EET)
  • ZDI-09-001: Microsoft SMB NT Trans Request Parsing Remote Code Execution Vulnerability (Tue Jan 13 2009 - 22:03:55 EET)

Last message date: Fri Jan 30 2009 - 22:50:34 EET
Archived on: Fri Jan 30 2009 - 22:50:34 EET

This archive was generated by hypermail 2b28 : Fri Jan 30 2009 - 22:50:34 EET