stdin
By Subject

• 3Com OfficeConnect Wireless Cable/DSL Router Authentication Bypass
  • luca.caretton@ikkisoft.com (Mon Feb 09 2009 - 17:55:55 EET)
• [ GLSA 200902-01 ] sudo: Privilege escalation
  • Tobias Heinlein (Sat Feb 07 2009 - 00:21:57 EET)
• [ GLSA 200902-02 ] OpenSSL: Certificate validation error
  • Robert Buchholz (Thu Feb 12 2009 - 23:09:30 EET)
• [ GLSA 200902-03 ] Valgrind: Untrusted search path
  • Robert Buchholz (Thu Feb 12 2009 - 23:10:28 EET)
• [ GLSA 200902-04 ] xterm: User-assisted arbitrary commands execution
  • Pierre-Yves Rofes (Thu Feb 12 2009 - 23:49:08 EET)
• [ GLSA 200902-05 ] KTorrent: Multiple vulnerabilitites
  • Pierre-Yves Rofes (Mon Feb 23 2009 - 23:41:42 EET)
• [ GLSA 200902-06 ] GNU Emacs, XEmacs: Multiple vulnerabilities
  • Pierre-Yves Rofes (Tue Feb 24 2009 - 00:02:23 EET)
• [ MDVA-2009:027 ] kernel
  • security@mandriva.com (Fri Feb 20 2009 - 10:10:00 EET)
• [ MDVSA-2009:026-1 ] phpMyAdmin
  • security@mandriva.com (Thu Feb 26 2009 - 19:27:00 EET)
• [ MDVSA-2009:031 ] avahi
  • security@mandriva.com (Sat Jan 31 2009 - 08:30:08 EET)
• [ MDVSA-2009:032 ] kernel
  • security@mandriva.com (Sat Jan 31 2009 - 08:30:19 EET)
• [ MDVSA-2009:033 ] sudo
  • security@mandriva.com (Wed Feb 04 2009 - 16:47:00 EET)
• [ MDVSA-2009:034 ] squid
  • security@mandriva.com (Tue Feb 10 2009 - 20:14:00 EET)
• [ MDVSA-2009:035 ] gstreamer0.10-plugins-good
  • security@mandriva.com (Wed Feb 11 2009 - 06:17:00 EET)
• [ MDVSA-2009:036 ] python
  • security@mandriva.com (Thu Feb 12 2009 - 19:57:01 EET)
• [ MDVSA-2009:037 ] bind
  • security@mandriva.com (Mon Feb 16 2009 - 15:55:01 EET)
• [ MDVSA-2009:038 ] blender
  • security@mandriva.com (Mon Feb 16 2009 - 18:46:00 EET)
• [ MDVSA-2009:039 ] gedit
  • security@mandriva.com (Mon Feb 16 2009 - 19:52:00 EET)
• [ MDVSA-2009:040 ] dia
  • security@mandriva.com (Tue Feb 17 2009 - 01:29:01 EET)
• [ MDVSA-2009:041 ] jhead
  • security@mandriva.com (Tue Feb 17 2009 - 20:23:00 EET)
• [ MDVSA-2009:042 ] samba
  • security@mandriva.com (Wed Feb 18 2009 - 21:48:01 EET)
• [ MDVSA-2009:043 ] gnumeric
  • security@mandriva.com (Fri Feb 20 2009 - 01:00:00 EET)
• [ MDVSA-2009:044 ] firefox
  • security@mandriva.com (Fri Feb 20 2009 - 12:00:00 EET)
• [ MDVSA-2009:045 ] php
  • security@mandriva.com (Fri Feb 20 2009 - 22:44:01 EET)
• [ MDVSA-2009:046 ] dia
  • security@mandriva.com (Fri Feb 20 2009 - 18:24:00 EET)
• [ MDVSA-2009:047 ] vim
  • security@mandriva.com (Fri Feb 20 2009 - 23:15:01 EET)
• [ MDVSA-2009:047-1 ] vim
  • security@mandriva.com (Tue Feb 24 2009 - 18:22:00 EET)
  • security@mandriva.com (Tue Feb 24 2009 - 18:17:00 EET)
• [ MDVSA-2009:048 ] epiphany
  • security@mandriva.com (Sat Feb 21 2009 - 01:20:00 EET)
• [ MDVSA-2009:048-1 ] epiphany
  • security@mandriva.com (Tue Feb 24 2009 - 16:24:00 EET)
• [ MDVSA-2009:048-2 ] epiphany
  • security@mandriva.com (Thu Feb 26 2009 - 02:25:00 EET)
• [ MDVSA-2009:049 ] pycrypto
  • security@mandriva.com (Sat Feb 21 2009 - 01:51:00 EET)
• [ MDVSA-2009:049-1 ] pycrypto
  • security@mandriva.com (Tue Feb 24 2009 - 02:04:01 EET)
• [ MDVSA-2009:050 ] python-pycrypto
  • security@mandriva.com (Sat Feb 21 2009 - 02:03:01 EET)
• [ MDVSA-2009:050-1 ] python-pycrypto
  • security@mandriva.com (Mon Feb 23 2009 - 21:56:00 EET)
• [ MDVSA-2009:051 ] libpng
  • security@mandriva.com (Mon Feb 23 2009 - 22:33:00 EET)
• [ MDVSA-2009:052 ] php-smarty
  • security@mandriva.com (Tue Feb 24 2009 - 21:54:00 EET)
• [ MDVSA-2009:053 ] squirrelmail
  • security@mandriva.com (Tue Feb 24 2009 - 23:05:00 EET)
• [ MDVSA-2009:054 ] nagios
  • security@mandriva.com (Wed Feb 25 2009 - 02:05:01 EET)
• [ MDVSA-2009:055 ] audacity
  • security@mandriva.com (Wed Feb 25 2009 - 21:14:00 EET)
• [ MDVSA-2009:056 ] net-snmp
  • security@mandriva.com (Thu Feb 26 2009 - 03:22:00 EET)
  • security@mandriva.com (Thu Feb 26 2009 - 03:35:00 EET)
• [ MDVSA-2009:057 ] valgrind
  • security@mandriva.com (Thu Feb 26 2009 - 17:40:00 EET)
• [ MDVSA-2009:058 ] wireshark
  • security@mandriva.com (Fri Feb 27 2009 - 03:46:00 EET)
• [BMSA-2009-02] XML injection in PyBlosxom
  • Nam Nguyen (Mon Feb 09 2009 - 04:34:02 EET)
• [BMSA-2009-03] Multiple vulnerabilities in OpenSite v2.1
  • Nam Nguyen (Wed Feb 25 2009 - 04:37:34 EET)
• [DSECRG-09-008] JOnAS(4.10.3) - Linked XSS Vulnerability
  • Digital Security Research Group (Wed Feb 25 2009 - 18:15:34 EET)
• [DSECRG-09-009] APC PowerChute Network Shutdown's Web Interface - XSS vulnerability
  • Alexandr Polyakov (Fri Feb 27 2009 - 11:59:13 EET)
  • Vladimir '3APA3A' Dubrovin (Fri Feb 27 2009 - 08:38:20 EET)
  • Ansgar Wiechers (Thu Feb 26 2009 - 23:15:50 EET)
  • Vladimir '3APA3A' Dubrovin (Thu Feb 26 2009 - 20:46:28 EET)
  • Digital Security Research Group (Thu Feb 26 2009 - 18:40:50 EET)
• [ECHO_ADV_102$2009] BusinessSpace <= 1.2 (id) Remote SQL Injection Vulnerability
  • adv@e-rdc.org (Tue Feb 10 2009 - 00:18:32 EET)
• [ECHO_ADV_103$2009] taifajobs <= 1.0 (jobid) Remote SQL Injection Vulnerability
  • adv@e-rdc.org (Mon Feb 23 2009 - 19:59:32 EET)
• [Full-disclosure] Joomla Component com_joomradio SQL Injection
  • Packet Storm (Thu Feb 19 2009 - 00:21:10 EET)
• [Full-disclosure] PHP filesystem attack vectors
  • Stefan Esser (Sun Feb 08 2009 - 15:12:43 EET)
• [oCERT-2009-002] OpenCORE insufficient bounds checking during MP3 decoding
  • Will Drewry (Sat Feb 07 2009 - 18:45:11 EET)
• [security bulletin] HPSBGN02410 SSRT080135 rev.1 - HP Virtual Rooms Client Running on Windows, Remote Execution of Arbitrary Code
  • security-alert@hp.com (Thu Feb 26 2009 - 15:34:46 EET)
• [security bulletin] HPSBMA02331 SSRT080000 rev.3 - HP-UX running WBEM Services, Remote Execution of Arbitrary Code, Gain Extended Privileges
  • security-alert@hp.com (Wed Feb 11 2009 - 16:20:22 EET)
• [security bulletin] HPSBMA02384 SSRT071465 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Unauthorized Access, Denial of Service (DoS)
  • security-alert@hp.com (Tue Feb 24 2009 - 23:30:08 EET)
• [security bulletin] HPSBMA02406 SSRT080100 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code
  • security-alert@hp.com (Fri Feb 06 2009 - 16:15:30 EET)
• [security bulletin] HPSBMA02406 SSRT080100 rev.2 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code, Unauthorized Access to Data
  • security-alert@hp.com (Tue Feb 17 2009 - 20:19:46 EET)
• [security bulletin] HPSBPI02398 SSRT080166 rev.1 - Certain HP LaserJet Printers, HP Color LaserJet Printers, and HP Digital Senders, Remote Unauthorized Access to Files
  • security-alert@hp.com (Fri Feb 06 2009 - 16:14:48 EET)
• [security bulletin] HPSBPI02398 SSRT080166 rev.2 - Certain HP LaserJet Printers, HP Color LaserJet Printers, and HP Digital Senders, Remote Unauthorized Access to Files
  • security-alert@hp.com (Sun Feb 15 2009 - 13:05:43 EET)
• [security bulletin] HPSBUX02401 SSRT090005 rev.1 - HP-UX Running Apache Web Server Suite, Remote Denial of Service (DoS), Cross-site Scripting (XSS), Execution of Arbitrary Code, Cross-Site Request Forgery (CSRF)
  • security-alert@hp.com (Wed Feb 04 2009 - 15:19:58 EET)
• [security bulletin] HPSBUX02401 SSRT090005 rev.2 - HP-UX Running Apache Web Server Suite, Remote Denial of Service (DoS), Cross-site Scripting (XSS), Execution of Arbitrary Code, Cross-Site Request Forgery (CSRF)
  • security-alert@hp.com (Fri Feb 13 2009 - 16:01:38 EET)
• [security bulletin] HPSBUX02407 SSRT080107 rev.1 - HP-UX Running IPv6, Remote Denial of Service (DoS) and Unauthorized Access
  • security-alert@hp.com (Tue Feb 03 2009 - 17:33:44 EET)
• [security bulletin] HPSBUX02408 SSRT080182 rev.1 - HP-UX Running NFS, Local Denial of Service (DoS)
  • security-alert@hp.com (Fri Feb 06 2009 - 16:16:06 EET)
• [SECURITY] [DSA 1716-1] New vnc4 packages fix remote code execution
  • Florian Weimer (Sat Jan 31 2009 - 23:26:15 EET)
• [SECURITY] [DSA 1717-1] New devil packages fix buffer overflow
  • Devin Carraway (Thu Feb 05 2009 - 08:30:23 EET)
• [SECURITY] [DSA 1718-1] New boinc packages fix validation bypass
  • Moritz Muehlenhoff (Sun Feb 08 2009 - 23:31:08 EET)
• [SECURITY] [DSA 1719-1] New gnutls13 packages fix certificate validation
  • Florian Weimer (Tue Feb 10 2009 - 09:00:19 EET)
• [SECURITY] [DSA 1720-1] New TYPO3 packages fix several vulnerabilities
  • Nico Golde (Tue Feb 10 2009 - 22:52:40 EET)
• [SECURITY] [DSA 1721-1] New libpam-krb5 packages fix local privilege escalation
  • Moritz Muehlenhoff (Wed Feb 11 2009 - 22:58:04 EET)
• [SECURITY] [DSA 1722-1] New libpam-heimdal packages fix local privilege escalation
  • Moritz Muehlenhoff (Wed Feb 11 2009 - 23:04:35 EET)
• [SECURITY] [DSA 1724-1] New moodle packages fix several vulnerabilities
  • Martin Schulze (Fri Feb 13 2009 - 22:39:44 EET)
• [SECURITY] [DSA 1725-1] New websvn packages fix information leak
  • Thijs Kinkhorst (Sun Feb 15 2009 - 17:42:58 EET)
• [SECURITY] [DSA 1726-1] New python-crypto packages fix denial of service
  • Moritz Muehlenhoff (Wed Feb 25 2009 - 22:31:39 EET)
• [SECURITY] [DSA 1727-1] New proftpd-dfsg packages fix SQL injection vulnerabilites
  • Steffen Joeris (Thu Feb 26 2009 - 10:25:52 EET)
• [SECURITY] [DSA 1728-1] New dkim-milter packages fix denial of service
  • Florian Weimer (Fri Feb 27 2009 - 20:16:12 EET)
• [SECURITY] CVE-2008-4308: Tomcat information disclosure vulnerability
  • Mark Thomas (Thu Feb 26 2009 - 01:17:37 EET)
• [SVRT-02-09] FeedDemon (ver<=2.7) Buffer Overflow Vulnerability
  • SVRT-Bkis (Thu Feb 05 2009 - 10:15:45 EET)
• [Tool] sqlmap 0.6.4 released
  • Bernardo Damele A. G. (Wed Feb 04 2009 - 18:59:05 EET)
• [UPRSN] Ubuntu Privacy Remix 8.04r3 fixes security issues
  • Ubuntu Privacy Remix Team (Mon Feb 16 2009 - 18:48:05 EET)
• [USN-717-1] Firefox and Xulrunner vulnerabilities
  • Jamie Strandboge (Wed Feb 11 2009 - 03:41:21 EET)
• [USN-717-2] Firefox vulnerabilities
  • Jamie Strandboge (Wed Feb 11 2009 - 03:43:03 EET)
• [USN-717-3] Firefox vulnerabilities
  • Jamie Strandboge (Wed Feb 11 2009 - 03:49:31 EET)
• [USN-719-1] pam-krb5 vulnerabilities
  • Marc Deslauriers (Thu Feb 12 2009 - 21:18:14 EET)
• [USN-720-1] PHP vulnerabilities
  • Marc Deslauriers (Thu Feb 12 2009 - 21:18:54 EET)
• [USN-721-1] fglrx-installer vulnerability
  • Kees Cook (Tue Feb 17 2009 - 22:56:23 EET)
• [USN-722-1] sudo vulnerability
  • Kees Cook (Tue Feb 17 2009 - 23:32:55 EET)
• [USN-723-1] Git vulnerabilities
  • Marc Deslauriers (Wed Feb 18 2009 - 23:23:53 EET)
• [USN-724-1] Squid vulnerability
  • Jamie Strandboge (Thu Feb 26 2009 - 14:28:55 EET)
• [waraxe-2009-SA#072] - Multiple Vulnerabilities in RavenNuke 2.3.0
  • come2waraxe@yahoo.com (Mon Feb 16 2009 - 18:40:38 EET)
• [Wintercore Research WS02-0209] Kaspersky Products Klim5.sys local privilege escalation
  • vulns@wintercore.com (Mon Feb 02 2009 - 18:47:20 EET)
• ACM CCS '09: Call for Workshop Proposals
  • Christopher Kruegel (Thu Feb 12 2009 - 01:37:53 EET)
• ANNOUNCE: RFIDIOt-0.1x release - February 2009
  • Adam Laurie (Thu Feb 26 2009 - 16:23:01 EET)
• Another SQL injection in ProFTPd with mod_mysql (probably postgres as well)
  • Benjamin Milde (Wed Feb 25 2009 - 01:13:50 EET)
  • Edward Bjarte Fjellskål (Wed Feb 11 2009 - 18:07:41 EET)
  • Sergio Aguayo (Wed Feb 11 2009 - 06:32:25 EET)
  • Shino (Wed Feb 11 2009 - 01:50:13 EET)
  • gat3way@gat3way.eu (Wed Feb 11 2009 - 09:20:56 EET)
  • Daniel Mayer (Wed Feb 11 2009 - 00:12:17 EET)
  • gat3way@gat3way.eu (Tue Feb 10 2009 - 21:49:53 EET)
• Apache directory traversal on shared hosting environment.
  • Ben M. Thomas (Thu Feb 19 2009 - 19:42:19 EET)
  • dave@fortuity.biz (Thu Feb 19 2009 - 19:03:58 EET)
  • davec@hostgator.com (Thu Feb 19 2009 - 07:48:18 EET)
• Apple Safari 4 Beta feeds: URI NULL Pointer Dereference Denial of Service Vulnerability
  • Trancer (Wed Feb 25 2009 - 17:34:25 EET)
• BackTrack 4 Beta Released
  • Mati Aharoni (Wed Feb 11 2009 - 18:37:37 EET)
• BitDefender Internet Security XSS
  • rbedy@bitdefender.com (Fri Feb 27 2009 - 15:25:55 EET)
  • jplopezy@gmail.com (Thu Feb 26 2009 - 18:12:49 EET)
• BruCON call for papers
  • Filip Waeytens (Sat Jan 31 2009 - 13:47:41 EET)
• C4 SCADA Security Advisory - AREVA e-terrahabitat / e-terraplatform Multiple Vulnerabilities
  • Eyal Udassin (Thu Feb 05 2009 - 18:46:38 EET)
• Call for papers and trainers - note extended deadline - SeacureIT 2009
  • Stefano Zanero (Tue Feb 03 2009 - 21:37:27 EET)
• CamFrog Password Disclosure Vulnerability
  • zigmatn@gmail.com (Fri Feb 06 2009 - 22:23:44 EET)
• Cisco IOS XSS/CSRF Vulnerability
  • azask2@gmail.com (Wed Feb 04 2009 - 23:56:17 EET)
• Cisco Security Advisory: Cisco ACE Application Control Engine Device Manager and Application Networking Manager Vulnerabilities
  • Cisco Systems Product Security Incident Response Team (Wed Feb 25 2009 - 19:10:54 EET)
• Cisco Security Advisory: Cisco Unified MeetingPlace Web Conferencing Authentication Bypass Vulnerability
  • Cisco Systems Product Security Incident Response Team (Wed Feb 25 2009 - 18:00:00 EET)
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco Wireless LAN Controllers
  • Cisco Systems Product Security Incident Response Team (Wed Feb 04 2009 - 18:41:40 EET)
• Cisco Security Advisory: Multiple Vulnerabilities in the Cisco ACE Application Control Engine Module and Cisco ACE 4710 Application Control Engine
  • Cisco Systems Product Security Incident Response Team (Wed Feb 25 2009 - 18:15:00 EET)
• Cisco Unified MeetingPlace Web Conferencing Stored Cross Site Scripting Vulnerability
  • security.assurance@nab.com.au (Thu Feb 26 2009 - 01:33:48 EET)
• CORE-2008-1009 - VNC Multiple Integer Overflows
  • CORE Security Technologies Advisories (Tue Feb 03 2009 - 22:11:46 EET)
• Craft Silicon Banking@Home SQL Injection
  • Francesco Bianchino (Tue Feb 10 2009 - 21:54:56 EET)
• Cross-site scripting in Samizdat 0.6.1
  • Dmitry Borodaenko (Fri Feb 13 2009 - 14:43:46 EET)
• cryptsetup can't destroy last key of a LUKS partition under Ubuntu/Debian
  • Pierre Dinh-van (Fri Feb 13 2009 - 10:24:52 EET)
• dBpowerAMP Audio Player local buffer overflow exploit
  • maroc-anti-connexion@hotmail.com (Thu Feb 05 2009 - 19:43:37 EET)
• DDIVRT-2008-19 HP JetDirect Web Administration Directory Traversal
  • vulnerabilityresearch@ddifrontline.com (Wed Feb 04 2009 - 16:42:23 EET)
• DDIVRT-2009-20 NetMRI Login Application Cross-site Scripting Vulnerability
  • ddvulnalert@ddifronline.com (Wed Feb 18 2009 - 19:26:24 EET)
• Denial of Service using Partial GET Request in Mozilla Firefox 3.06
  • node@pesos.eu (Fri Feb 20 2009 - 14:31:39 EET)
  • Mike Duncan (Fri Feb 13 2009 - 19:02:39 EET)
  • XiaShing@gmail.com (Fri Feb 13 2009 - 00:04:33 EET)
  • XiaShing@gmail.com (Thu Feb 12 2009 - 23:20:17 EET)
  • Rolphin (Thu Feb 12 2009 - 21:12:12 EET)
  • XiaShing@gmail.com (Thu Feb 12 2009 - 10:14:40 EET)
• Directory traversal vulnerability in Geovision Digital Video Surveillance System (geohttpserver)
  • dejan.levaja@netsec.rs (Wed Feb 11 2009 - 17:49:45 EET)
• djbdns misformats some long response packets; patch and example attack
  • Matthew Dempsky (Fri Feb 27 2009 - 01:34:01 EET)
• DMXReady Blog Manager (SQL/XSS)
  • support@dmxready.com (Mon Feb 02 2009 - 18:31:22 EET)
• Drupal Local File Inclusion Vulnerability (Windows)
  • Bogdan Calin (Fri Feb 27 2009 - 11:17:07 EET)
• Enomaly ECP/Enomalism: Multiple vulnerabilities in enomalism2.sh (redux)
  • Sam Johnston (Sun Feb 15 2009 - 13:56:31 EET)
• Enomaly ECP/Enomalism: Silent update remote command execution vulnerability
  • lars@enomaly.com (Fri Feb 13 2009 - 23:25:05 EET)
  • sc0ttbeardsley@gmail.com (Fri Feb 13 2009 - 20:14:08 EET)
  • Sam Johnston (Fri Feb 13 2009 - 01:43:40 EET)
• Euphonics Audio Player v1.0 (.pls) Local BOF POC
  • darkb0x97@googlemail.com (Wed Feb 04 2009 - 01:16:17 EET)
• flatnux Flatnux-2009-01-27 Remote File Include
  • blabla-34 (Mon Feb 02 2009 - 05:20:52 EET)
• FreeBSD Security Advisory FreeBSD-SA-09:05.telnetd
  • FreeBSD Security Advisories (Tue Feb 17 2009 - 00:02:33 EET)
• Full Path Disclosure In Photolibrary 1.009
  • XiaShing@gmail.com (Wed Feb 11 2009 - 09:58:45 EET)
• Full Path Disclosure In Photolibrary 1.009(Update)
  • XiaShing@gmail.com (Thu Feb 12 2009 - 01:27:22 EET)
• gigCalendar 1.0 (banddetails.php) Joomla Component SQL Injection
  • Salvatore \ (Sat Feb 21 2009 - 20:14:49 EET)
• gigCalendar 1.0 (venuedetails.php) Joomla Component SQL Injection
  • Salvatore \ (Sat Feb 21 2009 - 20:09:30 EET)
• gigCalendar Joomla Component 1.0 SQL Injection
  • Salvatore \ (Sat Feb 21 2009 - 20:00:59 EET)
• Golabi CMS Remote File Inclusion Vulnerability
  • rezazahfaran@gmail.com (Thu Feb 26 2009 - 09:26:47 EET)
• hello bug in windows live messenger
  • rasod korad (Wed Feb 18 2009 - 20:56:13 EET)
• Hex Workshop <= v6 (.hex) File Local Code
  • xhakerman2008@hotmail.com (Fri Feb 27 2009 - 11:39:33 EET)
• Hex Workshop v6 "ColorMap files .cmap" Invalid Memory Reference crash POC
  • xhakerman2006@yahoo.com (Tue Feb 03 2009 - 17:39:37 EET)
• HP Quality Center vulnerability
  • Pavel Kankovsky (Wed Feb 25 2009 - 01:19:23 EET)
  • info@exposit.co.uk (Mon Feb 23 2009 - 12:47:08 EET)
• HTC Touch vCard over IP Denial of Service PoC Code
  • Mobile Security Lab (Fri Feb 27 2009 - 19:57:35 EET)
• iDefense Security Advisory 02.06.09: HP Network Node Manager Multiple Command Injection Vulnerabilities
  • iDefense Labs (Fri Feb 06 2009 - 22:18:50 EET)
• iDefense Security Advisory 02.06.09: HP Network Node Manager Multiple Information Disclosure Vulnerabilities
  • iDefense Labs (Fri Feb 06 2009 - 23:00:05 EET)
• iDefense Security Advisory 02.24.09: Adobe Flash Player Invalid Object Reference Vulnerability
  • iDefense Labs (Tue Feb 24 2009 - 20:33:11 EET)
• LCPlayer (.qt file) EOP change PoC (app crash)
  • darkb0x97@googlemail.com (Wed Feb 04 2009 - 21:08:03 EET)
• LFI in Drupal CMS
  • security@drupal.org (Wed Feb 18 2009 - 15:22:20 EET)
  • security@drupal.org (Thu Feb 12 2009 - 10:31:20 EET)
  • rasool.nasr@gmail.com (Sun Feb 08 2009 - 23:03:08 EET)
• Local vulnerability in suexec + FastCGI + PHP configurations
  • Martijn Vernooij (Thu Feb 12 2009 - 17:42:28 EET)
  • security.432@amxl.com (Wed Feb 11 2009 - 11:55:09 EET)
• London DEFCON DC4420 - February 2009 Meet - Thursday 12th
  • Major Malfunction (Mon Feb 09 2009 - 19:00:35 EET)
• metabbs 0.11 Change admin password vulnerability
  • make0day@gmail.com (Mon Feb 02 2009 - 06:27:44 EET)
• Microsoft SDL meets CWE/SANS Top25
  • Juha-Matti Laurio (Mon Feb 02 2009 - 18:19:37 EET)
• NaviCopa webserver 3.01 Multiple Vulnerabilities
  • ew1zz@hotmail.com (Tue Feb 03 2009 - 02:59:00 EET)
• New site about security conferences : www.security-briefings.com
  • John@TheTrainingCo.com (Thu Feb 26 2009 - 16:41:59 EET)
• Nokia Multimedia Player v1.1 .m3u Heap Overflow PoC exploit
  • 0in.email@gmail.com (Tue Feb 03 2009 - 15:10:59 EET)
• Nokia N95 browser "setAttributeNode" method crash
  • jplopezy@gmail.com (Fri Feb 13 2009 - 18:56:56 EET)
• Nokia N95-8 browser denial of service
  • Thierry Zoller (Thu Feb 05 2009 - 19:51:19 EET)
  • jplopezy@gmail.com (Thu Feb 05 2009 - 08:01:46 EET)
• Nokia N95-8 JPG crash
  • Dmitry Yu. Bolkhovityanov (Tue Feb 10 2009 - 05:47:49 EET)
  • jplopezy@gmail.com (Sat Feb 07 2009 - 20:24:47 EET)
• Nokia Phoenix Service Software 2008.04.007.32837 overflow POC
  • murderskill@gmail.com (Tue Feb 10 2009 - 18:52:52 EET)
• Novell-QuickFinder Server Xss & Java remote execution Code]
  • ivan.sanchez@nullcode.com.ar (Tue Feb 10 2009 - 20:43:24 EET)
• On the implementation of TCP urgent data (IETF Internet Draft)
  • Fernando Gont (Fri Feb 27 2009 - 20:51:30 EET)
• pam-krb5 security advisory (3.12 and earlier)
  • Tim Skirvin (Wed Feb 11 2009 - 23:15:06 EET)
  • Russ Allbery (Wed Feb 11 2009 - 22:04:09 EET)
• PHCDownload 1.1.0 Vulnerabilities
  • contact@vnbrain.net (Fri Feb 20 2009 - 19:10:00 EET)
• PHP filesystem attack vectors
  • cxib@securityreason.com (Tue Feb 10 2009 - 22:34:24 EET)
  • ascii (Sun Feb 08 2009 - 12:53:22 EET)
• phpslash <= 0.8.1.1 Remote Code Execution Exploit
  • gmdarkfig@gmail.com (Sun Feb 01 2009 - 12:38:05 EET)
• POP Peeper 3.4.0.0 UIDL Remote Buffer Overflow Vulnerability
  • Krakow Labs (Fri Feb 27 2009 - 23:10:23 EET)
• pPIM Multiple Vulnerabilities
  • Justin C. Klein Keane (Wed Feb 25 2009 - 00:55:21 EET)
• ProFTPd with mod_mysql Authentication Bypass Exploit
  • alphanix00@gmail.com (Wed Feb 11 2009 - 01:24:24 EET)
• QIP 2005 Denial of Service Vulnerability
  • ss_contacts@hotmail.com (Wed Feb 04 2009 - 16:38:28 EET)
• RainbowCrack 1.3 is released, the new generation of time-memory tradeoff hash cracker
  • shuanglei@live.com (Fri Feb 13 2009 - 08:50:16 EET)
• RealNetworks RealPlayer IVR File Processing Multiple Code Execute Vulnerabilities
  • noreply-secresearch@fortinet.com (Fri Feb 06 2009 - 03:35:01 EET)
• Remote Authentication Bypass - Swann DVR4 SecuraNet (possibly DVR9 as well)
  • tez@spilsby.net (Tue Feb 10 2009 - 15:34:03 EET)
• RFI Bug
  • Francesco Laurita (Tue Feb 17 2009 - 11:44:49 EET)
  • Dr.linux@gmx.net (Mon Feb 16 2009 - 19:13:08 EET)
• rgboard v4 (07.07.27) Multiple Vulnerability
  • make0day@gmail.com (Mon Feb 02 2009 - 06:24:18 EET)
• rooting your own phone: android security
  • Pavel Machek (Sun Feb 08 2009 - 12:22:44 EET)
• Secunia Research: Free Download Manager Remote Control Server Buffer Overflow
  • Secunia Research (Mon Feb 02 2009 - 13:36:54 EET)
• Secunia Research: Free Download Manager Torrent Parsing Buffer Overflows
  • Secunia Research (Mon Feb 02 2009 - 13:37:03 EET)
• Secunia Research: ksquirrel-libs Radiance RGBE Buffer Overflows
  • Secunia Research (Wed Feb 25 2009 - 17:16:23 EET)
• Secunia Research: Orbit Downloader Long URL Parsing Buffer Overflow
  • Secunia Research (Wed Feb 25 2009 - 11:55:59 EET)
• Secunia Research: SHOUTcast DNAS Relay Server Buffer Overflow
  • Secunia Research (Wed Feb 25 2009 - 17:12:07 EET)
• Security Advisory for Bugzilla 3.2.1, 3.0.7, and 3.3.2
  • mkanat@bugzilla.org (Tue Feb 03 2009 - 12:37:04 EET)
• Security Assessment of the Transmission Control Protocol (TCP)
  • Fernando Gont (Fri Feb 13 2009 - 00:38:35 EET)
• SecurityFocus Linux Newsletter #425
  • sfa@securityfocus.com (Thu Feb 05 2009 - 01:53:08 EET)
• SecurityFocus Linux Newsletter #426
  • sfa@securityfocus.com (Thu Feb 12 2009 - 00:07:34 EET)
• SecurityFocus Linux Newsletter #427
  • sfa@securityfocus.com (Fri Feb 20 2009 - 01:43:08 EET)
• SecurityFocus Linux Newsletter #428
  • sfa@securityfocus.com (Thu Feb 26 2009 - 23:10:53 EET)
• SecurityFocus Microsoft Newsletter #430
  • sfa@securityfocus.com (Thu Feb 05 2009 - 01:53:03 EET)
• SecurityFocus Microsoft Newsletter #431
  • sfa@securityfocus.com (Thu Feb 12 2009 - 00:07:29 EET)
• SecurityFocus Microsoft Newsletter #432
  • sfa@securityfocus.com (Fri Feb 20 2009 - 01:40:45 EET)
• SecurityFocus Microsoft Newsletter #433
  • sfa@securityfocus.com (Thu Feb 26 2009 - 23:10:45 EET)
• SecurityFocus Newsletter #489
  • sfa@securityfocus.com (Thu Feb 05 2009 - 01:52:58 EET)
• SecurityFocus Newsletter #490
  • sfa@securityfocus.com (Thu Feb 12 2009 - 00:03:41 EET)
• SecurityFocus Newsletter #491
  • sfa@securityfocus.com (Fri Feb 20 2009 - 01:40:41 EET)
• SecurityFocus Newsletter #492
  • sfa@securityfocus.com (Thu Feb 26 2009 - 23:10:36 EET)
• SEP(Symantec) Bug
  • secure@symantec.com (Sat Feb 14 2009 - 00:58:29 EET)
  • Jon Kloske (Fri Feb 13 2009 - 05:41:08 EET)
  • Sandeep Cheema (Fri Feb 13 2009 - 07:54:23 EET)
  • steve.fowler@oregonstate.edu (Fri Feb 13 2009 - 00:02:18 EET)
  • James C. Slora Jr. (Thu Feb 12 2009 - 19:27:23 EET)
  • Sandeep Cheema (Thu Feb 12 2009 - 16:16:11 EET)
• SEPKILL /im SMC.EXE /f
  • Sandeep Cheema (Fri Feb 20 2009 - 07:42:55 EET)
  • Sandeep Cheema (Fri Feb 20 2009 - 07:31:53 EET)
  • Sandeep Cheema (Thu Feb 19 2009 - 09:20:20 EET)
  • David Calabro (Fri Feb 13 2009 - 21:32:24 EET)
  • Sandeep Cheema (Fri Feb 13 2009 - 21:48:29 EET)
  • Sandeep Cheema (Fri Feb 13 2009 - 19:25:15 EET)
  • Sandeep Cheema (Fri Feb 13 2009 - 15:33:20 EET)
  • Sandeep Cheema (Fri Feb 13 2009 - 16:36:24 EET)
  • Sandeep Cheema (Fri Feb 13 2009 - 14:48:08 EET)
• SFX-SQLi: A new SQL injection technique for MSSQL (dumps a table in one request!)
  • Amit Klein (Mon Feb 09 2009 - 19:45:04 EET)
  • Razi Shaban (Sun Feb 08 2009 - 18:29:05 EET)
  • Roman Medina-Heigl Hernandez (Sun Feb 08 2009 - 18:16:30 EET)
  • Razi Shaban (Fri Feb 06 2009 - 18:50:25 EET)
  • Daniel Kachakil (Fri Feb 06 2009 - 14:10:29 EET)
• SMF 1.1.7 Persistent XSS (requires permision to edit censor)
  • metallica48423@gmail.com (Thu Feb 05 2009 - 11:57:11 EET)
  • Eduardo Vela (Tue Feb 03 2009 - 10:56:37 EET)
• Sopcast SopCore Control (sopocx.ocx 3.0.3.501) SetExternalPlayer() user assisted remote code execution poc
  • nospam@gmail.it (Thu Feb 26 2009 - 07:56:19 EET)
• Speaking line up confirmed! uCon Security Conference 2009 - Recife, Brazil
  • uCon Security Conference (Thu Feb 05 2009 - 23:33:40 EET)
• Squid Proxy Cache Denial of Service in request handling
  • Amos Jeffries (Wed Feb 04 2009 - 13:53:04 EET)
• StreamDown v6.4.3 Local Buffer Overflow PoC
  • todor.donev@gmail.com (Mon Feb 02 2009 - 15:36:52 EET)
• SyScan'09 Call For Paper - Shanghai, Hong Kong, Singapore, Taipei
  • organiser@syscan.org (Wed Feb 18 2009 - 10:05:27 EET)
• Team SHATTER Security Advisory: Oracle Database Buffer Overflow in SYS.OLAPIMPL_T.ODCITABLESTART
  • security curmudgeon (Fri Feb 20 2009 - 05:21:14 EET)
  • Shatter (Tue Feb 03 2009 - 19:57:56 EET)
• Team SHATTER Security Advisory: SQL Injection in Oracle Enterprise Manager (TARGET Parameter)
  • Shatter (Tue Feb 03 2009 - 19:55:11 EET)
• Trend micro - IWSVA/IWSS - Authorization module password leak
  • david.vorel@honeynet.cz (Mon Feb 09 2009 - 15:30:09 EET)
• VMSA-2009-0001 ESX patches address an issue loading corrupt virtual disks and update Service Console packages
  • VMware Security Team (Sat Jan 31 2009 - 10:06:03 EET)
• VMSA-2009-0002 VirtualCenter Update 4 updates Tomcat to 5.5.27
  • VMware Security team (Tue Feb 24 2009 - 07:53:17 EET)
• VMSA-2009-0003 ESX 2.5.5 patch 12 updates service console package ed
  • VMware Security team (Fri Feb 27 2009 - 06:10:43 EET)
• Vulnerable: Ilch CMS
  • Gizmore (Fri Feb 06 2009 - 19:28:13 EET)
• Web Hacking Incidents update for Feb 10th
  • Ofer Shezaf (Tue Feb 10 2009 - 18:19:34 EET)
• Web Hacking Incidents update for Feb 10th (Links corrected)
  • Ofer Shezaf (Wed Feb 11 2009 - 07:18:37 EET)
• Web Hacking Incidents update for Feb 3rd
  • Ofer Shezaf (Tue Feb 03 2009 - 17:43:30 EET)
• Weekly Web Hacking Incidents update for Feb 19th
  • Ofer Shezaf (Thu Feb 19 2009 - 05:02:03 EET)
• XSS Attack using SMS to Optus/Huawei E960 HSDPA Router
  • rizki.wicaksono@gmail.com (Mon Feb 23 2009 - 06:42:51 EET)
• ZDI-09-010: Novell Netware Groupwise GWIA RCPT Command Buffer Overflow Vulnerability
  • zdi-disclosures@3com.com (Mon Feb 02 2009 - 19:52:54 EET)
• ZDI-09-011: Microsoft Internet Explorer CFunctionPointer Memory Corruption Vulnerability
  • ZDI Disclosures (Tue Feb 10 2009 - 22:56:41 EET)
• ZDI-09-012: Microsoft Internet Explorer Malformed CSS Memory Corruption
  • ZDI Disclosures (Tue Feb 10 2009 - 22:57:58 EET)
• ZeroShell <= 1.0beta11 Remote Code Execution
  • Luca Carettoni (Mon Feb 09 2009 - 17:59:52 EET)

Last message date: Sat Feb 28 2009 - 00:00:46 EET
Archived on: Sat Feb 28 2009 - 00:00:48 EET

This archive was generated by hypermail 2b28 : Sat Feb 28 2009 - 00:00:48 EET