stdin
By Date

• VMSA-2009-0001 ESX patches address an issue loading corrupt virtual disks and update Service Console packages VMware Security Team (Sat Jan 31 2009 - 10:06:03 EET)
• [SECURITY] [DSA 1716-1] New vnc4 packages fix remote code execution Florian Weimer (Sat Jan 31 2009 - 23:26:15 EET)
• BruCON call for papers Filip Waeytens (Sat Jan 31 2009 - 13:47:41 EET)
• [ MDVSA-2009:031 ] avahi security@mandriva.com (Sat Jan 31 2009 - 08:30:08 EET)
• Secunia Research: Free Download Manager Torrent Parsing Buffer Overflows Secunia Research (Mon Feb 02 2009 - 13:37:03 EET)
• Secunia Research: Free Download Manager Remote Control Server Buffer Overflow Secunia Research (Mon Feb 02 2009 - 13:36:54 EET)
• [ MDVSA-2009:032 ] kernel security@mandriva.com (Sat Jan 31 2009 - 08:30:19 EET)
• [Wintercore Research WS02-0209] Kaspersky Products Klim5.sys local privilege escalation vulns@wintercore.com (Mon Feb 02 2009 - 18:47:20 EET)
• ZDI-09-010: Novell Netware Groupwise GWIA RCPT Command Buffer Overflow Vulnerability zdi-disclosures@3com.com (Mon Feb 02 2009 - 19:52:54 EET)
• Hex Workshop v6 "ColorMap files .cmap" Invalid Memory Reference crash POC xhakerman2006@yahoo.com (Tue Feb 03 2009 - 17:39:37 EET)
• Security Advisory for Bugzilla 3.2.1, 3.0.7, and 3.3.2 mkanat@bugzilla.org (Tue Feb 03 2009 - 12:37:04 EET)
• Web Hacking Incidents update for Feb 3rd Ofer Shezaf (Tue Feb 03 2009 - 17:43:30 EET)
• SMF 1.1.7 Persistent XSS (requires permision to edit censor) Eduardo Vela (Tue Feb 03 2009 - 10:56:37 EET)
• NaviCopa webserver 3.01 Multiple Vulnerabilities ew1zz@hotmail.com (Tue Feb 03 2009 - 02:59:00 EET)
• Nokia Multimedia Player v1.1 .m3u Heap Overflow PoC exploit 0in.email@gmail.com (Tue Feb 03 2009 - 15:10:59 EET)
• [security bulletin] HPSBUX02407 SSRT080107 rev.1 - HP-UX Running IPv6, Remote Denial of Service (DoS) and Unauthorized Access security-alert@hp.com (Tue Feb 03 2009 - 17:33:44 EET)
• Team SHATTER Security Advisory: Oracle Database Buffer Overflow in SYS.OLAPIMPL_T.ODCITABLESTART Shatter (Tue Feb 03 2009 - 19:57:56 EET)
• Call for papers and trainers - note extended deadline - SeacureIT 2009 Stefano Zanero (Tue Feb 03 2009 - 21:37:27 EET)
• Team SHATTER Security Advisory: SQL Injection in Oracle Enterprise Manager (TARGET Parameter) Shatter (Tue Feb 03 2009 - 19:55:11 EET)
• CORE-2008-1009 - VNC Multiple Integer Overflows CORE Security Technologies Advisories (Tue Feb 03 2009 - 22:11:46 EET)
• Euphonics Audio Player v1.0 (.pls) Local BOF POC darkb0x97@googlemail.com (Wed Feb 04 2009 - 01:16:17 EET)
• Squid Proxy Cache Denial of Service in request handling Amos Jeffries (Wed Feb 04 2009 - 13:53:04 EET)
• [security bulletin] HPSBUX02401 SSRT090005 rev.1 - HP-UX Running Apache Web Server Suite, Remote Denial of Service (DoS), Cross-site Scripting (XSS), Execution of Arbitrary Code, Cross-Site Request Forgery (CSRF) security-alert@hp.com (Wed Feb 04 2009 - 15:19:58 EET)
• [ MDVSA-2009:033 ] sudo security@mandriva.com (Wed Feb 04 2009 - 16:47:00 EET)
• QIP 2005 Denial of Service Vulnerability ss_contacts@hotmail.com (Wed Feb 04 2009 - 16:38:28 EET)
• DDIVRT-2008-19 HP JetDirect Web Administration Directory Traversal vulnerabilityresearch@ddifrontline.com (Wed Feb 04 2009 - 16:42:23 EET)
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco Wireless LAN Controllers Cisco Systems Product Security Incident Response Team (Wed Feb 04 2009 - 18:41:40 EET)
• rgboard v4 (07.07.27) Multiple Vulnerability make0day@gmail.com (Mon Feb 02 2009 - 06:24:18 EET)
• phpslash <= 0.8.1.1 Remote Code Execution Exploit gmdarkfig@gmail.com (Sun Feb 01 2009 - 12:38:05 EET)
• metabbs 0.11 Change admin password vulnerability make0day@gmail.com (Mon Feb 02 2009 - 06:27:44 EET)
• flatnux Flatnux-2009-01-27 Remote File Include blabla-34 (Mon Feb 02 2009 - 05:20:52 EET)
• LCPlayer (.qt file) EOP change PoC (app crash) darkb0x97@googlemail.com (Wed Feb 04 2009 - 21:08:03 EET)
• StreamDown v6.4.3 Local Buffer Overflow PoC todor.donev@gmail.com (Mon Feb 02 2009 - 15:36:52 EET)
• Microsoft SDL meets CWE/SANS Top25 Juha-Matti Laurio (Mon Feb 02 2009 - 18:19:37 EET)
• [Tool] sqlmap 0.6.4 released Bernardo Damele A. G. (Wed Feb 04 2009 - 18:59:05 EET)
• Re: DMXReady Blog Manager (SQL/XSS) support@dmxready.com (Mon Feb 02 2009 - 18:31:22 EET)
• Cisco IOS XSS/CSRF Vulnerability azask2@gmail.com (Wed Feb 04 2009 - 23:56:17 EET)
• [SECURITY] [DSA 1717-1] New devil packages fix buffer overflow Devin Carraway (Thu Feb 05 2009 - 08:30:23 EET)
• [SVRT-02-09] FeedDemon (ver<=2.7) Buffer Overflow Vulnerability SVRT-Bkis (Thu Feb 05 2009 - 10:15:45 EET)
• Nokia N95-8 browser denial of service jplopezy@gmail.com (Thu Feb 05 2009 - 08:01:46 EET)
• Re: SMF 1.1.7 Persistent XSS (requires permision to edit censor) metallica48423@gmail.com (Thu Feb 05 2009 - 11:57:11 EET)
• C4 SCADA Security Advisory - AREVA e-terrahabitat / e-terraplatform Multiple Vulnerabilities Eyal Udassin (Thu Feb 05 2009 - 18:46:38 EET)
• dBpowerAMP Audio Player local buffer overflow exploit maroc-anti-connexion@hotmail.com (Thu Feb 05 2009 - 19:43:37 EET)
• Re: Nokia N95-8 browser denial of service Thierry Zoller (Thu Feb 05 2009 - 19:51:19 EET)
• SecurityFocus Microsoft Newsletter #430 sfa@securityfocus.com (Thu Feb 05 2009 - 01:53:03 EET)
• SecurityFocus Linux Newsletter #425 sfa@securityfocus.com (Thu Feb 05 2009 - 01:53:08 EET)
• Speaking line up confirmed! uCon Security Conference 2009 - Recife, Brazil uCon Security Conference (Thu Feb 05 2009 - 23:33:40 EET)
• SecurityFocus Newsletter #489 sfa@securityfocus.com (Thu Feb 05 2009 - 01:52:58 EET)
• SFX-SQLi: A new SQL injection technique for MSSQL (dumps a table in one request!) Daniel Kachakil (Fri Feb 06 2009 - 14:10:29 EET)
• [security bulletin] HPSBPI02398 SSRT080166 rev.1 - Certain HP LaserJet Printers, HP Color LaserJet Printers, and HP Digital Senders, Remote Unauthorized Access to Files security-alert@hp.com (Fri Feb 06 2009 - 16:14:48 EET)
• RealNetworks RealPlayer IVR File Processing Multiple Code Execute Vulnerabilities noreply-secresearch@fortinet.com (Fri Feb 06 2009 - 03:35:01 EET)
• [security bulletin] HPSBMA02406 SSRT080100 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code security-alert@hp.com (Fri Feb 06 2009 - 16:15:30 EET)
• [security bulletin] HPSBUX02408 SSRT080182 rev.1 - HP-UX Running NFS, Local Denial of Service (DoS) security-alert@hp.com (Fri Feb 06 2009 - 16:16:06 EET)
• Re: SFX-SQLi: A new SQL injection technique for MSSQL (dumps a table in one request!) Razi Shaban (Fri Feb 06 2009 - 18:50:25 EET)
• Vulnerable: Ilch CMS Gizmore (Fri Feb 06 2009 - 19:28:13 EET)
• iDefense Security Advisory 02.06.09: HP Network Node Manager Multiple Command Injection Vulnerabilities iDefense Labs (Fri Feb 06 2009 - 22:18:50 EET)
• CamFrog Password Disclosure Vulnerability zigmatn@gmail.com (Fri Feb 06 2009 - 22:23:44 EET)
• iDefense Security Advisory 02.06.09: HP Network Node Manager Multiple Information Disclosure Vulnerabilities iDefense Labs (Fri Feb 06 2009 - 23:00:05 EET)
• PHP filesystem attack vectors ascii (Sun Feb 08 2009 - 12:53:22 EET)
• [ GLSA 200902-01 ] sudo: Privilege escalation Tobias Heinlein (Sat Feb 07 2009 - 00:21:57 EET)
• [oCERT-2009-002] OpenCORE insufficient bounds checking during MP3 decoding Will Drewry (Sat Feb 07 2009 - 18:45:11 EET)
• [SECURITY] [DSA 1718-1] New boinc packages fix validation bypass Moritz Muehlenhoff (Sun Feb 08 2009 - 23:31:08 EET)
• Re: SFX-SQLi: A new SQL injection technique for MSSQL (dumps a table in one request!) Roman Medina-Heigl Hernandez (Sun Feb 08 2009 - 18:16:30 EET)
• [BMSA-2009-02] XML injection in PyBlosxom Nam Nguyen (Mon Feb 09 2009 - 04:34:02 EET)
• Re: [Full-disclosure] PHP filesystem attack vectors Stefan Esser (Sun Feb 08 2009 - 15:12:43 EET)
• Re: SFX-SQLi: A new SQL injection technique for MSSQL (dumps a table in one request!) Razi Shaban (Sun Feb 08 2009 - 18:29:05 EET)
• rooting your own phone: android security Pavel Machek (Sun Feb 08 2009 - 12:22:44 EET)
• LFI in Drupal CMS rasool.nasr@gmail.com (Sun Feb 08 2009 - 23:03:08 EET)
• Trend micro - IWSVA/IWSS - Authorization module password leak david.vorel@honeynet.cz (Mon Feb 09 2009 - 15:30:09 EET)
• Nokia N95-8 JPG crash jplopezy@gmail.com (Sat Feb 07 2009 - 20:24:47 EET)
• 3Com OfficeConnect Wireless Cable/DSL Router Authentication Bypass luca.caretton@ikkisoft.com (Mon Feb 09 2009 - 17:55:55 EET)
• ZeroShell <= 1.0beta11 Remote Code Execution Luca Carettoni (Mon Feb 09 2009 - 17:59:52 EET)
• Re: SFX-SQLi: A new SQL injection technique for MSSQL (dumps a table in one request!) Amit Klein (Mon Feb 09 2009 - 19:45:04 EET)
• London DEFCON DC4420 - February 2009 Meet - Thursday 12th Major Malfunction (Mon Feb 09 2009 - 19:00:35 EET)
• Re: Nokia N95-8 JPG crash Dmitry Yu. Bolkhovityanov (Tue Feb 10 2009 - 05:47:49 EET)
• Remote Authentication Bypass - Swann DVR4 SecuraNet (possibly DVR9 as well) tez@spilsby.net (Tue Feb 10 2009 - 15:34:03 EET)
• [ECHO_ADV_102$2009] BusinessSpace <= 1.2 (id) Remote SQL Injection Vulnerability adv@e-rdc.org (Tue Feb 10 2009 - 00:18:32 EET)
• [SECURITY] [DSA 1719-1] New gnutls13 packages fix certificate validation Florian Weimer (Tue Feb 10 2009 - 09:00:19 EET)
• Another SQL injection in ProFTPd with mod_mysql (probably postgres as well) gat3way@gat3way.eu (Tue Feb 10 2009 - 21:49:53 EET)
• Craft Silicon Banking@Home SQL Injection Francesco Bianchino (Tue Feb 10 2009 - 21:54:56 EET)
• Web Hacking Incidents update for Feb 10th Ofer Shezaf (Tue Feb 10 2009 - 18:19:34 EET)
• [Suspected Spam][Fwd: Re: Novell-QuickFinder Server Xss & Java remote execution Code] ivan.sanchez@nullcode.com.ar (Tue Feb 10 2009 - 20:43:24 EET)
• [ MDVSA-2009:034 ] squid security@mandriva.com (Tue Feb 10 2009 - 20:14:00 EET)
• Re: PHP filesystem attack vectors cxib@securityreason.com (Tue Feb 10 2009 - 22:34:24 EET)
• Nokia Phoenix Service Software 2008.04.007.32837 overflow POC murderskill@gmail.com (Tue Feb 10 2009 - 18:52:52 EET)
• [SECURITY] [DSA 1720-1] New TYPO3 packages fix several vulnerabilities Nico Golde (Tue Feb 10 2009 - 22:52:40 EET)
• Re: Another SQL injection in ProFTPd with mod_mysql (probably postgres as well) Daniel Mayer (Wed Feb 11 2009 - 00:12:17 EET)
• ZDI-09-012: Microsoft Internet Explorer Malformed CSS Memory Corruption ZDI Disclosures (Tue Feb 10 2009 - 22:57:58 EET)
• ZDI-09-011: Microsoft Internet Explorer CFunctionPointer Memory Corruption Vulnerability ZDI Disclosures (Tue Feb 10 2009 - 22:56:41 EET)
• [USN-717-1] Firefox and Xulrunner vulnerabilities Jamie Strandboge (Wed Feb 11 2009 - 03:41:21 EET)
• ProFTPd with mod_mysql Authentication Bypass Exploit alphanix00@gmail.com (Wed Feb 11 2009 - 01:24:24 EET)
• Re: Re: Another SQL injection in ProFTPd with mod_mysql (probably postgres as well) gat3way@gat3way.eu (Wed Feb 11 2009 - 09:20:56 EET)
• [ MDVSA-2009:035 ] gstreamer0.10-plugins-good security@mandriva.com (Wed Feb 11 2009 - 06:17:00 EET)
• [USN-717-3] Firefox vulnerabilities Jamie Strandboge (Wed Feb 11 2009 - 03:49:31 EET)
• Local vulnerability in suexec + FastCGI + PHP configurations security.432@amxl.com (Wed Feb 11 2009 - 11:55:09 EET)
• Re: Another SQL injection in ProFTPd with mod_mysql (probably postgres as well) Shino (Wed Feb 11 2009 - 01:50:13 EET)
• Full Path Disclosure In Photolibrary 1.009 XiaShing@gmail.com (Wed Feb 11 2009 - 09:58:45 EET)
• [USN-717-2] Firefox vulnerabilities Jamie Strandboge (Wed Feb 11 2009 - 03:43:03 EET)
• [security bulletin] HPSBMA02331 SSRT080000 rev.3 - HP-UX running WBEM Services, Remote Execution of Arbitrary Code, Gain Extended Privileges security-alert@hp.com (Wed Feb 11 2009 - 16:20:22 EET)
• Web Hacking Incidents update for Feb 10th (Links corrected) Ofer Shezaf (Wed Feb 11 2009 - 07:18:37 EET)
• Directory traversal vulnerability in Geovision Digital Video Surveillance System (geohttpserver) dejan.levaja@netsec.rs (Wed Feb 11 2009 - 17:49:45 EET)
• Re: Another SQL injection in ProFTPd with mod_mysql (probably postgres as well) Sergio Aguayo (Wed Feb 11 2009 - 06:32:25 EET)
• [SECURITY] [DSA 1722-1] New libpam-heimdal packages fix local privilege escalation Moritz Muehlenhoff (Wed Feb 11 2009 - 23:04:35 EET)
• pam-krb5 security advisory (3.12 and earlier) Russ Allbery (Wed Feb 11 2009 - 22:04:09 EET)
• Re: pam-krb5 security advisory (3.12 and earlier) Tim Skirvin (Wed Feb 11 2009 - 23:15:06 EET)
• BackTrack 4 Beta Released Mati Aharoni (Wed Feb 11 2009 - 18:37:37 EET)
• Re: Another SQL injection in ProFTPd with mod_mysql (probably postgres as well) Edward Bjarte Fjellskål (Wed Feb 11 2009 - 18:07:41 EET)
• [SECURITY] [DSA 1721-1] New libpam-krb5 packages fix local privilege escalation Moritz Muehlenhoff (Wed Feb 11 2009 - 22:58:04 EET)
• SecurityFocus Linux Newsletter #426 sfa@securityfocus.com (Thu Feb 12 2009 - 00:07:34 EET)
• SecurityFocus Microsoft Newsletter #431 sfa@securityfocus.com (Thu Feb 12 2009 - 00:07:29 EET)
• SecurityFocus Newsletter #490 sfa@securityfocus.com (Thu Feb 12 2009 - 00:03:41 EET)
• Full Path Disclosure In Photolibrary 1.009(Update) XiaShing@gmail.com (Thu Feb 12 2009 - 01:27:22 EET)
• SEP(Symantec) Bug Sandeep Cheema (Thu Feb 12 2009 - 16:16:11 EET)
• Re: LFI in Drupal CMS security@drupal.org (Thu Feb 12 2009 - 10:31:20 EET)
• Denial of Service using Partial GET Request in Mozilla Firefox 3.06 XiaShing@gmail.com (Thu Feb 12 2009 - 10:14:40 EET)
• RE: SEP(Symantec) Bug James C. Slora Jr. (Thu Feb 12 2009 - 19:27:23 EET)
• [ MDVSA-2009:036 ] python security@mandriva.com (Thu Feb 12 2009 - 19:57:01 EET)
• [USN-719-1] pam-krb5 vulnerabilities Marc Deslauriers (Thu Feb 12 2009 - 21:18:14 EET)
• [USN-720-1] PHP vulnerabilities Marc Deslauriers (Thu Feb 12 2009 - 21:18:54 EET)
• Re: Denial of Service using Partial GET Request in Mozilla Firefox 3.06 Rolphin (Thu Feb 12 2009 - 21:12:12 EET)
• [ GLSA 200902-03 ] Valgrind: Untrusted search path Robert Buchholz (Thu Feb 12 2009 - 23:10:28 EET)
• [ GLSA 200902-02 ] OpenSSL: Certificate validation error Robert Buchholz (Thu Feb 12 2009 - 23:09:30 EET)
• Re: Denial of Service using Partial GET Request in Mozilla Firefox 3.06 XiaShing@gmail.com (Thu Feb 12 2009 - 23:20:17 EET)
• [ GLSA 200902-04 ] xterm: User-assisted arbitrary commands execution Pierre-Yves Rofes (Thu Feb 12 2009 - 23:49:08 EET)
• Re: RE: SEP(Symantec) Bug steve.fowler@oregonstate.edu (Fri Feb 13 2009 - 00:02:18 EET)
• Re: Re: Denial of Service using Partial GET Request in Mozilla Firefox 3.06 XiaShing@gmail.com (Fri Feb 13 2009 - 00:04:33 EET)
• [security bulletin] HPSBUX02401 SSRT090005 rev.2 - HP-UX Running Apache Web Server Suite, Remote Denial of Service (DoS), Cross-site Scripting (XSS), Execution of Arbitrary Code, Cross-Site Request Forgery (CSRF) security-alert@hp.com (Fri Feb 13 2009 - 16:01:38 EET)
• Nokia N95 browser "setAttributeNode" method crash jplopezy@gmail.com (Fri Feb 13 2009 - 18:56:56 EET)
• Enomaly ECP/Enomalism: Silent update remote command execution vulnerability Sam Johnston (Fri Feb 13 2009 - 01:43:40 EET)
• Security Assessment of the Transmission Control Protocol (TCP) Fernando Gont (Fri Feb 13 2009 - 00:38:35 EET)
• Re: SEP(Symantec) Bug Sandeep Cheema (Fri Feb 13 2009 - 07:54:23 EET)
• Cross-site scripting in Samizdat 0.6.1 Dmitry Borodaenko (Fri Feb 13 2009 - 14:43:46 EET)
• SEPKILL /im SMC.EXE /f Sandeep Cheema (Fri Feb 13 2009 - 14:48:08 EET)
• Re: SEPKILL /im SMC.EXE /f Sandeep Cheema (Fri Feb 13 2009 - 16:36:24 EET)
• RE: SEP(Symantec) Bug Jon Kloske (Fri Feb 13 2009 - 05:41:08 EET)
• Re: SEPKILL /im SMC.EXE /f Sandeep Cheema (Fri Feb 13 2009 - 15:33:20 EET)
• Re: SEPKILL /im SMC.EXE /f Sandeep Cheema (Fri Feb 13 2009 - 19:25:15 EET)
• Re: Enomaly ECP/Enomalism: Silent update remote command execution vulnerability sc0ttbeardsley@gmail.com (Fri Feb 13 2009 - 20:14:08 EET)
• Re: SEPKILL /im SMC.EXE /f Sandeep Cheema (Fri Feb 13 2009 - 21:48:29 EET)
• RE: SEPKILL /im SMC.EXE /f David Calabro (Fri Feb 13 2009 - 21:32:24 EET)
• ACM CCS '09: Call for Workshop Proposals Christopher Kruegel (Thu Feb 12 2009 - 01:37:53 EET)
• Re: Local vulnerability in suexec + FastCGI + PHP configurations Martijn Vernooij (Thu Feb 12 2009 - 17:42:28 EET)
• RainbowCrack 1.3 is released, the new generation of time-memory tradeoff hash cracker shuanglei@live.com (Fri Feb 13 2009 - 08:50:16 EET)
• cryptsetup can't destroy last key of a LUKS partition under Ubuntu/Debian Pierre Dinh-van (Fri Feb 13 2009 - 10:24:52 EET)
• Re: Denial of Service using Partial GET Request in Mozilla Firefox 3.06 Mike Duncan (Fri Feb 13 2009 - 19:02:39 EET)
• [SECURITY] [DSA 1724-1] New moodle packages fix several vulnerabilities Martin Schulze (Fri Feb 13 2009 - 22:39:44 EET)
• Re: Enomaly ECP/Enomalism: Silent update remote command execution vulnerability lars@enomaly.com (Fri Feb 13 2009 - 23:25:05 EET)
• Re: SEP(Symantec) Bug secure@symantec.com (Sat Feb 14 2009 - 00:58:29 EET)
• [security bulletin] HPSBPI02398 SSRT080166 rev.2 - Certain HP LaserJet Printers, HP Color LaserJet Printers, and HP Digital Senders, Remote Unauthorized Access to Files security-alert@hp.com (Sun Feb 15 2009 - 13:05:43 EET)
• Enomaly ECP/Enomalism: Multiple vulnerabilities in enomalism2.sh (redux) Sam Johnston (Sun Feb 15 2009 - 13:56:31 EET)
• [SECURITY] [DSA 1725-1] New websvn packages fix information leak Thijs Kinkhorst (Sun Feb 15 2009 - 17:42:58 EET)
• [UPRSN] Ubuntu Privacy Remix 8.04r3 fixes security issues Ubuntu Privacy Remix Team (Mon Feb 16 2009 - 18:48:05 EET)
• [waraxe-2009-SA#072] - Multiple Vulnerabilities in RavenNuke 2.3.0 come2waraxe@yahoo.com (Mon Feb 16 2009 - 18:40:38 EET)
• [ MDVSA-2009:037 ] bind security@mandriva.com (Mon Feb 16 2009 - 15:55:01 EET)
• RFI Bug Dr.linux@gmx.net (Mon Feb 16 2009 - 19:13:08 EET)
• [ MDVSA-2009:038 ] blender security@mandriva.com (Mon Feb 16 2009 - 18:46:00 EET)
• [ MDVSA-2009:039 ] gedit security@mandriva.com (Mon Feb 16 2009 - 19:52:00 EET)
• FreeBSD Security Advisory FreeBSD-SA-09:05.telnetd FreeBSD Security Advisories (Tue Feb 17 2009 - 00:02:33 EET)
• [ MDVSA-2009:040 ] dia security@mandriva.com (Tue Feb 17 2009 - 01:29:01 EET)
• Re: RFI Bug Francesco Laurita (Tue Feb 17 2009 - 11:44:49 EET)
• [security bulletin] HPSBMA02406 SSRT080100 rev.2 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code, Unauthorized Access to Data security-alert@hp.com (Tue Feb 17 2009 - 20:19:46 EET)
• [ MDVSA-2009:041 ] jhead security@mandriva.com (Tue Feb 17 2009 - 20:23:00 EET)
• [USN-721-1] fglrx-installer vulnerability Kees Cook (Tue Feb 17 2009 - 22:56:23 EET)
• [USN-722-1] sudo vulnerability Kees Cook (Tue Feb 17 2009 - 23:32:55 EET)
• Re: SyScan'09 Call For Paper - Shanghai, Hong Kong, Singapore, Taipei organiser@syscan.org (Wed Feb 18 2009 - 10:05:27 EET)
• Re: LFI in Drupal CMS security@drupal.org (Wed Feb 18 2009 - 15:22:20 EET)
• DDIVRT-2009-20 NetMRI Login Application Cross-site Scripting Vulnerability ddvulnalert@ddifronline.com (Wed Feb 18 2009 - 19:26:24 EET)
• RE: hello bug in windows live messenger rasod korad (Wed Feb 18 2009 - 20:56:13 EET)
• [ MDVSA-2009:042 ] samba security@mandriva.com (Wed Feb 18 2009 - 21:48:01 EET)
• [USN-723-1] Git vulnerabilities Marc Deslauriers (Wed Feb 18 2009 - 23:23:53 EET)
• Re: [Full-disclosure] Joomla Component com_joomradio SQL Injection Packet Storm (Thu Feb 19 2009 - 00:21:10 EET)
• Weekly Web Hacking Incidents update for Feb 19th Ofer Shezaf (Thu Feb 19 2009 - 05:02:03 EET)
• Apache directory traversal on shared hosting environment. davec@hostgator.com (Thu Feb 19 2009 - 07:48:18 EET)
• Re: SEPKILL /im SMC.EXE /f Sandeep Cheema (Thu Feb 19 2009 - 09:20:20 EET)
• Re: Apache directory traversal on shared hosting environment. dave@fortuity.biz (Thu Feb 19 2009 - 19:03:58 EET)
• Re: Apache directory traversal on shared hosting environment. Ben M. Thomas (Thu Feb 19 2009 - 19:42:19 EET)
• SecurityFocus Microsoft Newsletter #432 sfa@securityfocus.com (Fri Feb 20 2009 - 01:40:45 EET)
• SecurityFocus Linux Newsletter #427 sfa@securityfocus.com (Fri Feb 20 2009 - 01:43:08 EET)
• SecurityFocus Newsletter #491 sfa@securityfocus.com (Fri Feb 20 2009 - 01:40:41 EET)
• [ MDVA-2009:027 ] kernel security@mandriva.com (Fri Feb 20 2009 - 10:10:00 EET)
• Re: Team SHATTER Security Advisory: Oracle Database Buffer Overflow in SYS.OLAPIMPL_T.ODCITABLESTART security curmudgeon (Fri Feb 20 2009 - 05:21:14 EET)
• [ MDVSA-2009:043 ] gnumeric security@mandriva.com (Fri Feb 20 2009 - 01:00:00 EET)
• [ MDVSA-2009:046 ] dia security@mandriva.com (Fri Feb 20 2009 - 18:24:00 EET)
• [ MDVSA-2009:044 ] firefox security@mandriva.com (Fri Feb 20 2009 - 12:00:00 EET)
• Re: Re: Denial of Service using Partial GET Request in Mozilla Firefox 3.06 node@pesos.eu (Fri Feb 20 2009 - 14:31:39 EET)
• PHCDownload 1.1.0 Vulnerabilities contact@vnbrain.net (Fri Feb 20 2009 - 19:10:00 EET)
• Re: SEPKILL /im SMC.EXE /f Sandeep Cheema (Fri Feb 20 2009 - 07:31:53 EET)
• Re: SEPKILL /im SMC.EXE /f Sandeep Cheema (Fri Feb 20 2009 - 07:42:55 EET)
• [ MDVSA-2009:047 ] vim security@mandriva.com (Fri Feb 20 2009 - 23:15:01 EET)
• [ MDVSA-2009:045 ] php security@mandriva.com (Fri Feb 20 2009 - 22:44:01 EET)
• [ MDVSA-2009:048 ] epiphany security@mandriva.com (Sat Feb 21 2009 - 01:20:00 EET)
• [ MDVSA-2009:049 ] pycrypto security@mandriva.com (Sat Feb 21 2009 - 01:51:00 EET)
• [ MDVSA-2009:050 ] python-pycrypto security@mandriva.com (Sat Feb 21 2009 - 02:03:01 EET)
• gigCalendar Joomla Component 1.0 SQL Injection Salvatore \ (Sat Feb 21 2009 - 20:00:59 EET)
• gigCalendar 1.0 (banddetails.php) Joomla Component SQL Injection Salvatore \ (Sat Feb 21 2009 - 20:14:49 EET)
• XSS Attack using SMS to Optus/Huawei E960 HSDPA Router rizki.wicaksono@gmail.com (Mon Feb 23 2009 - 06:42:51 EET)
• gigCalendar 1.0 (venuedetails.php) Joomla Component SQL Injection Salvatore \ (Sat Feb 21 2009 - 20:09:30 EET)
• HP Quality Center vulnerability info@exposit.co.uk (Mon Feb 23 2009 - 12:47:08 EET)
• [ECHO_ADV_103$2009] taifajobs <= 1.0 (jobid) Remote SQL Injection Vulnerability adv@e-rdc.org (Mon Feb 23 2009 - 19:59:32 EET)
• [ MDVSA-2009:050-1 ] python-pycrypto security@mandriva.com (Mon Feb 23 2009 - 21:56:00 EET)
• [ GLSA 200902-05 ] KTorrent: Multiple vulnerabilitites Pierre-Yves Rofes (Mon Feb 23 2009 - 23:41:42 EET)
• [ MDVSA-2009:051 ] libpng security@mandriva.com (Mon Feb 23 2009 - 22:33:00 EET)
• [ GLSA 200902-06 ] GNU Emacs, XEmacs: Multiple vulnerabilities Pierre-Yves Rofes (Tue Feb 24 2009 - 00:02:23 EET)
• [ MDVSA-2009:049-1 ] pycrypto security@mandriva.com (Tue Feb 24 2009 - 02:04:01 EET)
• VMSA-2009-0002 VirtualCenter Update 4 updates Tomcat to 5.5.27 VMware Security team (Tue Feb 24 2009 - 07:53:17 EET)
• [ MDVSA-2009:048-1 ] epiphany security@mandriva.com (Tue Feb 24 2009 - 16:24:00 EET)
• [ MDVSA-2009:047-1 ] vim security@mandriva.com (Tue Feb 24 2009 - 18:17:00 EET)
• [ MDVSA-2009:047-1 ] vim security@mandriva.com (Tue Feb 24 2009 - 18:22:00 EET)
• iDefense Security Advisory 02.24.09: Adobe Flash Player Invalid Object Reference Vulnerability iDefense Labs (Tue Feb 24 2009 - 20:33:11 EET)
• [ MDVSA-2009:052 ] php-smarty security@mandriva.com (Tue Feb 24 2009 - 21:54:00 EET)
• [ MDVSA-2009:053 ] squirrelmail security@mandriva.com (Tue Feb 24 2009 - 23:05:00 EET)
• Re: Another SQL injection in ProFTPd with mod_mysql (probably postgres as well) Benjamin Milde (Wed Feb 25 2009 - 01:13:50 EET)
• Re: HP Quality Center vulnerability Pavel Kankovsky (Wed Feb 25 2009 - 01:19:23 EET)
• [ MDVSA-2009:054 ] nagios security@mandriva.com (Wed Feb 25 2009 - 02:05:01 EET)
• Secunia Research: Orbit Downloader Long URL Parsing Buffer Overflow Secunia Research (Wed Feb 25 2009 - 11:55:59 EET)
• pPIM Multiple Vulnerabilities Justin C. Klein Keane (Wed Feb 25 2009 - 00:55:21 EET)
• [security bulletin] HPSBMA02384 SSRT071465 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Unauthorized Access, Denial of Service (DoS) security-alert@hp.com (Tue Feb 24 2009 - 23:30:08 EET)
• [BMSA-2009-03] Multiple vulnerabilities in OpenSite v2.1 Nam Nguyen (Wed Feb 25 2009 - 04:37:34 EET)
• Apple Safari 4 Beta feeds: URI NULL Pointer Dereference Denial of Service Vulnerability Trancer (Wed Feb 25 2009 - 17:34:25 EET)
• [DSECRG-09-008] JOnAS(4.10.3) - Linked XSS Vulnerability Digital Security Research Group (Wed Feb 25 2009 - 18:15:34 EET)
• Secunia Research: SHOUTcast DNAS Relay Server Buffer Overflow Secunia Research (Wed Feb 25 2009 - 17:12:07 EET)
• Cisco Security Advisory: Cisco ACE Application Control Engine Device Manager and Application Networking Manager Vulnerabilities Cisco Systems Product Security Incident Response Team (Wed Feb 25 2009 - 19:10:54 EET)
• Cisco Security Advisory: Multiple Vulnerabilities in the Cisco ACE Application Control Engine Module and Cisco ACE 4710 Application Control Engine Cisco Systems Product Security Incident Response Team (Wed Feb 25 2009 - 18:15:00 EET)
• Secunia Research: ksquirrel-libs Radiance RGBE Buffer Overflows Secunia Research (Wed Feb 25 2009 - 17:16:23 EET)
• Cisco Security Advisory: Cisco Unified MeetingPlace Web Conferencing Authentication Bypass Vulnerability Cisco Systems Product Security Incident Response Team (Wed Feb 25 2009 - 18:00:00 EET)
• [ MDVSA-2009:055 ] audacity security@mandriva.com (Wed Feb 25 2009 - 21:14:00 EET)
• [SECURITY] [DSA 1726-1] New python-crypto packages fix denial of service Moritz Muehlenhoff (Wed Feb 25 2009 - 22:31:39 EET)
• Cisco Unified MeetingPlace Web Conferencing Stored Cross Site Scripting Vulnerability security.assurance@nab.com.au (Thu Feb 26 2009 - 01:33:48 EET)
• Sopcast SopCore Control (sopocx.ocx 3.0.3.501) SetExternalPlayer() user assisted remote code execution poc nospam@gmail.it (Thu Feb 26 2009 - 07:56:19 EET)
• Golabi CMS Remote File Inclusion Vulnerability rezazahfaran@gmail.com (Thu Feb 26 2009 - 09:26:47 EET)
• [SECURITY] [DSA 1727-1] New proftpd-dfsg packages fix SQL injection vulnerabilites Steffen Joeris (Thu Feb 26 2009 - 10:25:52 EET)
• [USN-724-1] Squid vulnerability Jamie Strandboge (Thu Feb 26 2009 - 14:28:55 EET)
• [DSECRG-09-009] APC PowerChute Network Shutdown's Web Interface - XSS vulnerability Digital Security Research Group (Thu Feb 26 2009 - 18:40:50 EET)
• [SECURITY] CVE-2008-4308: Tomcat information disclosure vulnerability Mark Thomas (Thu Feb 26 2009 - 01:17:37 EET)
• [security bulletin] HPSBGN02410 SSRT080135 rev.1 - HP Virtual Rooms Client Running on Windows, Remote Execution of Arbitrary Code security-alert@hp.com (Thu Feb 26 2009 - 15:34:46 EET)
• [ MDVSA-2009:057 ] valgrind security@mandriva.com (Thu Feb 26 2009 - 17:40:00 EET)
• [ MDVSA-2009:048-2 ] epiphany security@mandriva.com (Thu Feb 26 2009 - 02:25:00 EET)
• [ MDVSA-2009:026-1 ] phpMyAdmin security@mandriva.com (Thu Feb 26 2009 - 19:27:00 EET)
• Re: [DSECRG-09-009] APC PowerChute Network Shutdown's Web Interface - XSS vulnerability Vladimir '3APA3A' Dubrovin (Thu Feb 26 2009 - 20:46:28 EET)
• [ MDVSA-2009:056 ] net-snmp security@mandriva.com (Thu Feb 26 2009 - 03:35:00 EET)
• BitDefender Internet Security XSS jplopezy@gmail.com (Thu Feb 26 2009 - 18:12:49 EET)
• [ MDVSA-2009:056 ] net-snmp security@mandriva.com (Thu Feb 26 2009 - 03:22:00 EET)
• SecurityFocus Newsletter #492 sfa@securityfocus.com (Thu Feb 26 2009 - 23:10:36 EET)
• SecurityFocus Linux Newsletter #428 sfa@securityfocus.com (Thu Feb 26 2009 - 23:10:53 EET)
• Re: New site about security conferences : www.security-briefings.com John@TheTrainingCo.com (Thu Feb 26 2009 - 16:41:59 EET)
• ANNOUNCE: RFIDIOt-0.1x release - February 2009 Adam Laurie (Thu Feb 26 2009 - 16:23:01 EET)
• Re: [DSECRG-09-009] APC PowerChute Network Shutdown's Web Interface - XSS vulnerability Ansgar Wiechers (Thu Feb 26 2009 - 23:15:50 EET)
• SecurityFocus Microsoft Newsletter #433 sfa@securityfocus.com (Thu Feb 26 2009 - 23:10:45 EET)
• Re[2]: [DSECRG-09-009] APC PowerChute Network Shutdown's Web Interface - XSS vulnerability Vladimir '3APA3A' Dubrovin (Fri Feb 27 2009 - 08:38:20 EET)
• VMSA-2009-0003 ESX 2.5.5 patch 12 updates service console package ed VMware Security team (Fri Feb 27 2009 - 06:10:43 EET)
• Re: BitDefender Internet Security XSS rbedy@bitdefender.com (Fri Feb 27 2009 - 15:25:55 EET)
• Re[2]: [DSECRG-09-009] APC PowerChute Network Shutdown's Web Interface - XSS vulnerability Alexandr Polyakov (Fri Feb 27 2009 - 11:59:13 EET)
• djbdns misformats some long response packets; patch and example attack Matthew Dempsky (Fri Feb 27 2009 - 01:34:01 EET)
• [ MDVSA-2009:058 ] wireshark security@mandriva.com (Fri Feb 27 2009 - 03:46:00 EET)
• Drupal Local File Inclusion Vulnerability (Windows) Bogdan Calin (Fri Feb 27 2009 - 11:17:07 EET)
• Hex Workshop <= v6 (.hex) File Local Code xhakerman2008@hotmail.com (Fri Feb 27 2009 - 11:39:33 EET)
• HTC Touch vCard over IP Denial of Service PoC Code Mobile Security Lab (Fri Feb 27 2009 - 19:57:35 EET)
• [SECURITY] [DSA 1728-1] New dkim-milter packages fix denial of service Florian Weimer (Fri Feb 27 2009 - 20:16:12 EET)
• On the implementation of TCP urgent data (IETF Internet Draft) Fernando Gont (Fri Feb 27 2009 - 20:51:30 EET)
• POP Peeper 3.4.0.0 UIDL Remote Buffer Overflow Vulnerability Krakow Labs (Fri Feb 27 2009 - 23:10:23 EET)

Last message date: Sat Feb 28 2009 - 00:00:46 EET
Archived on: Sat Feb 28 2009 - 00:00:48 EET

This archive was generated by hypermail 2b28 : Sat Feb 28 2009 - 00:00:48 EET