stdin
By Author

• aanisimov@ptsecurity.com
  • [Positive Technologies SA:2009-20] A.CMS Multiple Vulnerabilities (Fri Mar 13 2009 - 20:00:05 EET)
  • [Positive Technologies SA:2009-14] BLOG CMS Cross-Site Scripting vulnerability (Fri Mar 13 2009 - 19:59:09 EET)
  • [Positive Technologies SA:2009-15] Living CMS Cross-Site Scripting vulnerability (Fri Mar 13 2009 - 19:57:42 EET)
  • [Positive Technologies SA:2009-13] TinX CMS 3.x SQL Injection Vulnerability (Fri Mar 06 2009 - 18:53:21 EET)
  • [Positive Technologies SA:2009-12] UMI.CMS Cross-Site Scripting vulnerability (Fri Mar 06 2009 - 16:45:48 EET)
• Adam Baldwin
  • Zabbix Multiple Frontend CSRF (Password reset & command execution) (Tue Mar 31 2009 - 02:13:14 EEST)
  • ExpressionEngine Persistent Cross-Site Scripting (Mon Mar 23 2009 - 01:28:52 EET)
  • NGENUITY-2009-005 OpenCart Order By Blind SQL Injection (Mon Mar 16 2009 - 06:44:43 EET)
• admin@bugreport.ir
  • PHPRunner SQL Injection (Tue Mar 17 2009 - 12:35:37 EET)
• Alex Legler
  • Re: Adobe Flash Player plug-in null pointer dereference and browser crash (Thu Mar 12 2009 - 15:17:23 EET)
• Alexandr Polyakov
  • [DSECRG-09-016] SAP SAPDB Multiple XSS (Tue Mar 31 2009 - 20:09:29 EEST)
• alexchf.fyp@gmail.com
  • Re: Vulnerability CVE-2008-3671 - MyReview's vulnerability in the access control system (Mon Mar 09 2009 - 09:50:03 EET)
• Andrea Barisani
  • [oCERT-2009-003] LittleCMS integer errors (Fri Mar 20 2009 - 20:02:40 EET)
• Anon@elhacker.net
  • flv2mpeg4: Malformed parameters Denial of Service (Mon Mar 09 2009 - 20:16:24 EET)
• ascii
  • Zabbix 1.6.2 Frontend Multiple Vulnerabilities (Tue Mar 03 2009 - 17:30:26 EET)
• Asterisk Security Team
  • AST-2009-002: Remote Crash Vulnerability in SIP channel driver (Tue Mar 10 2009 - 19:38:37 EET)
• Bernhard Mueller
  • SEC Consult SA-20090305-0 :: NextApp Echo XML Injection Vulnerability (Tue Mar 10 2009 - 11:58:46 EET)
  • SEC Consult SA-20090305-1 :: IBM Director CIM Server Remote Denial of Service Vulnerability (Tue Mar 10 2009 - 12:07:41 EET)
  • SEC Consult SA-20090305-2 :: IBM Director CIM Server Local Privilege Escalation Vulnerability (Tue Mar 10 2009 - 12:09:14 EET)
• Bkis
  • [Bkis-05-2009] PowerCHM Stack-based Buffer Overflow (Thu Mar 26 2009 - 07:27:29 EET)
  • [Bkis-03-2009] Multiple Vulnerabilities found in Rapidleech rev.36 (Sat Mar 14 2009 - 14:50:00 EET)
  • [Bkis-04-2009] GOM Encoder Heap-based Buffer Overflow (Mon Mar 16 2009 - 06:12:02 EET)
• Bugs NotHugs
  • Cisco ASA5520 Web VPN Host Header XSS (Tue Mar 31 2009 - 13:17:54 EEST)
  • Check Point Firewall-1 PKI Web Service HTTP Header Remote Overflow (Mon Mar 30 2009 - 11:16:17 EEST)
  • Novell Netstorage Multiple Vulnerabilities (Fri Mar 27 2009 - 02:50:24 EET)
  • Aurora Nutritive Analysis Module Multiple XSS (Fri Mar 27 2009 - 02:43:03 EET)
• Carsten Eilers
  • Multiple Vulnerabilities in iAntiVirus (Tue Mar 10 2009 - 17:13:10 EET)
• Chris Evans
  • LittleCMS vulnerabilities (OpenJDK, Firefox, GIMP, etc. impacted) (Fri Mar 20 2009 - 04:24:43 EET)
• Chris Weber
  • [tool release] Watcher v1.0.0 - passive Web-app security testing and compliance auditing (Sun Mar 29 2009 - 08:17:32 EEST)
• Christian Eibl
  • Moodle: Sensitive File Disclosure (Fri Mar 27 2009 - 16:30:20 EET)
• Cisco Systems Product Security Incident Response Team
  • Cisco Security Advisory: Cisco IOS cTCP Denial of Service Vulnerability (Wed Mar 25 2009 - 18:00:00 EET)
  • Cisco Security Advisory: Cisco IOS Software WebVPN and SSLVPN Vulnerabilities (Wed Mar 25 2009 - 18:00:00 EET)
  • Cisco Security Advisory: Cisco IOS Software Multiple Features Crafted TCP Sequence Vulnerability (Wed Mar 25 2009 - 18:00:00 EET)
  • Cisco Security Advisory: Cisco IOS Software Secure Copy Privilege Escalation Vulnerability (Wed Mar 25 2009 - 18:00:00 EET)
  • Cisco Security Advisory: Cisco IOS Software Mobile IP and Mobile IPv6 Vulnerabilities (Wed Mar 25 2009 - 18:00:00 EET)
  • Cisco Security Advisory: Cisco Unified Communications Manager IP Phone Personal Address Book Synchronizer Privilege Escalation Vulnerability (Wed Mar 11 2009 - 17:40:00 EET)
  • Cisco Security Advisory: Cisco 7600 Series Router Session Border Controller Denial of Service Vulnerability (Wed Mar 04 2009 - 18:30:00 EET)
• contact@onuryilmaz.info
  • Blogsa <= 1.0 Beta 3 XSS Vulnerability (Tue Mar 03 2009 - 00:28:20 EET)
• contact@vnbrain.net
  • Afian Document Manager Local File Inclusion (Sat Feb 28 2009 - 05:46:57 EET)
• CORE Security Technologies Advisories
  • CORE-2009-0122: HP OpenView Buffer Overflows (Mon Mar 23 2009 - 19:45:49 EET)
  • Foxit Reader Multiple Vulnerabilities (CORE-2009-0218) (Mon Mar 09 2009 - 21:40:33 EET)
• Corrado Leita
  • CFP RAID 2009 (Wed Mar 25 2009 - 22:58:24 EET)
• cxib@securityreason.com
  • libc:fts_*():multiple vendors, Denial-of-service (Thu Mar 05 2009 - 18:48:20 EET)
• dann frazier
  • [SECURITY] [DSA 1749-1] New Linux 2.6.26 packages fix several vulnerabilities (Fri Mar 20 2009 - 22:55:47 EET)
• danny@orionrobots.co.uk
  • Re: TikiWiki 2.2 XSS Vulnerability in URI (Fri Mar 13 2009 - 01:19:16 EET)
• ddivulnalert@ddifrontline.com
  • DDIVRT-2009-21 vBook Login Application Cross-site Scripting Vulnerability (Mon Mar 09 2009 - 16:45:01 EET)
  • DDIVRT-2009-22 SMART Board Whiteboard Directory Traversal Vulnerability (Mon Mar 09 2009 - 16:44:23 EET)
• DeepSec Conference
  • DeepSec 2009 - Call for Papers is open (Mon Mar 30 2009 - 21:34:24 EEST)
• dh@layereddefense.com
  • Layered Defense Research Advisory: Format String Vulnerablity in Symantec PcAnywhere v10-12.5 (Wed Mar 18 2009 - 06:38:52 EET)
• DSecRG
  • [DSECRG-09-030] PrecisionID Datamatrix ActiveX control - Arbitrary File overwriting (Tue Mar 31 2009 - 20:22:47 EEST)
  • [DSECRG-09-013] IBM WebSphere Application Server 7.0 Multiple XSS Vulnerabilities (Tue Mar 31 2009 - 20:00:09 EEST)
• Elazar Broad
  • Belkin BullDog Plus UPS-Service Buffer Overflow Vulnerability (Sun Mar 08 2009 - 05:06:46 EET)
• Elliot Kendall
  • Command Execution in Hannon Hill Cascade Server (Thu Mar 19 2009 - 21:07:56 EET)
• Eric C. Lukens
  • Re: Secunia Research: Adobe Reader JBIG2 Symbol Dictionary Buffer Overflow (Wed Mar 25 2009 - 21:20:40 EET)
• Eygene Ryabinkin
  • Re: Zabbix 1.6.2 Frontend Multiple Vulnerabilities (Mon Mar 09 2009 - 13:59:00 EET)
• Florian Weimer
  • Re: Secunia Research: Adobe Reader JBIG2 Symbol Dictionary Buffer Overflow (Wed Mar 25 2009 - 18:42:11 EET)
  • [SECURITY] [DSA 1752-1] New webcit packages fix potential remote code execution (Mon Mar 23 2009 - 20:14:05 EET)
  • [SECURITY] [DSA 1750-1] New libpng packages fix several vulnerabilities (Sun Mar 22 2009 - 19:16:04 EET)
  • [SECURITY] [DSA 1739-1] New mldonkey packages fix information disclosure (Fri Mar 13 2009 - 22:58:15 EET)
  • [SECURITY] [DSA 1735-1] New znc packages fix privilege escalation (Tue Mar 10 2009 - 22:23:49 EET)
  • [SECURITY] [DSA 1719-2] New GNUTLS packages fix regression (Sat Feb 28 2009 - 13:44:38 EET)
• FreeBSD Security Advisories
  • FreeBSD Security Advisory FreeBSD-SA-09:06.ktimer (Mon Mar 23 2009 - 02:09:12 EET)
• H D Moore
  • WarVOX 1.0.0 Released (Fri Mar 06 2009 - 08:51:31 EET)
• h1kari@toorcon.org
  • TOORCAMP 2009 CALL FOR PARTICIPATION (Wed Mar 11 2009 - 20:54:34 EET)
• Henri Lindberg
  • HP Laserjet multiple models web management CSRF vulnerability & insecure default configuration (Mon Mar 16 2009 - 23:06:21 EET)
• Henri Lindberg - Smilehouse Oy
  • Rittal CMC-TC Processing Unit II multiple vulnerabilities (Mon Mar 23 2009 - 13:37:50 EET)
• iDefense Labs
  • iDefense Security Advisory 03.26.09: Sun Java Runtime Environment (JRE) Pack200 Decompression Integer Overflow Vulnerability (Thu Mar 26 2009 - 23:16:54 EET)
  • iDefense Security Advisory 03.26.09: Sun Java Web Start (JWS ) PNG Decoding Integer Overflow Vulnerability (Thu Mar 26 2009 - 22:47:41 EET)
  • iDefense Security Advisory 03.26.09: Sun Java Runtine Environment (JRE) GIF Decoding Heap Corruption Vulnerability (Thu Mar 26 2009 - 22:22:17 EET)
  • iDefense Security Advisory 03.26.09: Sun Java Web Start (JWS ) GIF Decoding Heap Corruption Vulnerability (Thu Mar 26 2009 - 21:47:02 EET)
  • iDefense Security Advisory 03.26.09: Sun Java Runtine Environment (JRE) Type1 Font Parsing Integer Signedness Vulnerability (Thu Mar 26 2009 - 19:49:43 EET)
  • iDefense Security Advisory 03.24.09: Adobe Reader and Acrobat JBIG2 Encoded Stream Heap Overflow Vulnerability (Tue Mar 24 2009 - 21:47:56 EET)
  • Re: iDefense Security Advisory 03.17.09: Autonomy KeyView Word Perfect File Parsing Buffer Overflow Vulnerability (Wed Mar 18 2009 - 00:22:19 EET)
  • iDefense Security Advisory 03.17.09: Autonomy KeyView Word Perfect File Parsing Buffer Overflow Vulnerability (Tue Mar 17 2009 - 23:55:16 EET)
  • Re: iDefense COMRaider 'DeleteFile()' Method Arbitrary File Deletion Vulnerability (Wed Mar 04 2009 - 23:42:50 EET)
• iliz-z@yandex.rui
  • TikiWiki 2.2 XSS Vulnerability in URI (Thu Mar 12 2009 - 10:54:41 EET)
• ISecAuditors Security Advisories
  • [ISecAuditors Security Advisories] ModSecurity < 2.5.9 remote Denial of Service (DoS) (Thu Mar 19 2009 - 14:53:55 EET)
  • [ISecAuditors Security Advisories] WordPress MU HTTP Header XSS Vulnerability (Tue Mar 10 2009 - 22:26:46 EET)
  • [ISecAuditors Security Advisories] eXtplorer Remote Code Execution (Mon Mar 02 2009 - 22:54:03 EET)
• Jamie Strandboge
  • [USN-750-1] OpenSSL vulnerability (Tue Mar 31 2009 - 02:23:19 EEST)
  • [USN-745-1] Firefox and Xulrunner vulnerabilities (Sat Mar 28 2009 - 07:27:07 EET)
  • [USN-741-1] Thunderbird vulnerabilities (Fri Mar 20 2009 - 00:30:32 EET)
  • [USN-740-1] NSS vulnerability (Wed Mar 18 2009 - 00:11:30 EET)
  • [USN-738-1] GLib vulnerability (Tue Mar 17 2009 - 00:35:33 EET)
  • [USN-724-1] Squid vulnerability (Thu Feb 26 2009 - 14:28:55 EET)
  • [USN-730-1] libpng vulnerabilities (Fri Mar 06 2009 - 04:25:22 EET)
  • [USN-728-3] Firefox vulnerabilities (Fri Mar 06 2009 - 02:37:17 EET)
  • [USN-728-2] Firefox vulnerabilities (Fri Mar 06 2009 - 02:36:13 EET)
  • [USN-728-1] Firefox and Xulrunner vulnerabilities (Fri Mar 06 2009 - 02:35:49 EET)
• Jerome Athias
  • [CFP] FRHACK 2nd Call For Papers (Mon Mar 02 2009 - 08:20:49 EET)
• Jose Luis
  • NovaBoard <= 1.0.1 / XSS Vulnerability (Tue Mar 03 2009 - 23:26:33 EET)
• joseph.giron13@gmail.com
  • aspWebCalendar Free Edition bug (Tue Mar 31 2009 - 06:46:19 EEST)
• Julien Thomas
  • Re: Vulnerability CVE-2008-3671 - MyReview's vulnerability in the access control system (Mon Mar 09 2009 - 20:51:07 EET)
• k g
  • FINAL: Call for Papers on Cyber Warfare (Tue Mar 10 2009 - 13:26:55 EET)
• Kees Cook
  • [USN-748-1] OpenJDK vulnerabilities (Fri Mar 27 2009 - 00:01:35 EET)
  • [USN-729-1] Python Crypto vulnerability (Fri Mar 06 2009 - 01:38:36 EET)
• kowsik@gmail.com
  • Announcing Cap'r Mak'r (Mon Mar 02 2009 - 05:52:03 EET)
• Krakow Labs
  • POP Peeper 3.4.0.0 Date Remote Buffer Overflow Vulnerability (Thu Mar 12 2009 - 06:14:01 EET)
• larry@jlogica.com
  • Trellis Desk v1.0 XSS Vulnerability (Thu Mar 12 2009 - 01:25:41 EET)
• Major Malfunction
  • DEFCON London DC4420 March meeting - Thursday 19th March (Tue Mar 17 2009 - 19:17:46 EET)
• Marc Deslauriers
  • [USN-749-1] libsndfile vulnerability (Mon Mar 30 2009 - 21:28:13 EEST)
  • [USN-747-1] ICU vulnerability (Thu Mar 26 2009 - 21:28:21 EET)
  • [USN-746-1] xine-lib vulnerability (Thu Mar 26 2009 - 21:27:37 EET)
  • [USN-744-1] LittleCMS vulnerabilities (Mon Mar 23 2009 - 20:38:27 EET)
  • [USN-743-1] Ghostscript vulnerabilities (Mon Mar 23 2009 - 20:37:41 EET)
  • [USN-742-1] JasPer vulnerabilities (Thu Mar 19 2009 - 20:02:46 EET)
  • [USN-739-1] Amarok vulnerabilities (Tue Mar 17 2009 - 19:29:25 EET)
  • [USN-737-1] libsoup vulnerability (Mon Mar 16 2009 - 22:43:15 EET)
  • [USN-735-1] GStreamer Base Plugins vulnerability (Mon Mar 16 2009 - 22:41:20 EET)
  • [USN-736-1] GStreamer Good Plugins vulnerabilities (Mon Mar 16 2009 - 22:40:32 EET)
  • [USN-733-1] evolution-data-server vulnerability (Mon Mar 16 2009 - 22:39:29 EET)
  • [USN-734-1] FFmpeg vulnerabilities (Tue Mar 17 2009 - 01:32:01 EET)
  • [USN-732-1] dash vulnerability (Tue Mar 10 2009 - 18:54:50 EET)
  • [USN-731-1] Apache vulnerabilities (Tue Mar 10 2009 - 18:54:06 EET)
  • [USN-726-2] curl regression (Wed Mar 04 2009 - 17:09:19 EET)
  • [USN-727-2] NetworkManager vulnerability (Tue Mar 03 2009 - 21:46:12 EET)
  • [USN-726-1] curl vulnerability (Tue Mar 03 2009 - 21:44:12 EET)
  • [USN-727-1] network-manager-applet vulnerabilities (Tue Mar 03 2009 - 21:45:21 EET)
• Mark Thomas
  • [SECURITY] CVE-2009-0781 XSS in Apache Tomcat examples web application (Fri Mar 06 2009 - 17:56:34 EET)
• maroc-anti-connexion@hotmail.com
  • rosoft media player local BOF exploit multi tagets (Sat Mar 14 2009 - 18:09:06 EET)
• Martin Huter
  • ICAP adaptation: missing data flow control to client side (Thu Mar 26 2009 - 17:13:32 EET)
• Matthew Dempsky
  • Re: Adobe Flash Player plug-in null pointer dereference and browser crash (Wed Mar 11 2009 - 19:30:49 EET)
  • Re: djbdns misformats some long response packets; patch and example attack (Thu Mar 05 2009 - 08:05:24 EET)
  • Re: djbdns misformats some long response packets; patch and example attack (Sat Feb 28 2009 - 20:41:46 EET)
• mcyr2@csc.com
  • Addonics NAS Adapter Post-Auth DoS (Tue Mar 10 2009 - 18:20:40 EET)
• Moritz Muehlenhoff
  • [SECURITY] [DSA 1758-1] New nss-ldapd packages fix information disclosure (Tue Mar 31 2009 - 00:47:00 EEST)
  • [SECURITY] [DSA 1755-1] New systemtap packages fix local privilege escalation (Wed Mar 25 2009 - 23:16:51 EET)
  • [SECURITY] [DSA 1753-1] End-of-life announcement for Iceweasel in oldstable (Tue Mar 24 2009 - 23:20:14 EET)
  • [SECURITY] [DSA 1751-1] New xulrunner packages fix several vulnerabilities (Sun Mar 22 2009 - 23:30:20 EET)
  • [SECURITY] [DSA 1741-1] New psi packages fix denial of service (Sat Mar 14 2009 - 13:47:18 EET)
• mr.faghani@gmail.com
  • Aryanic HighCMS and HighPortal multiple Vulnerabilities (Tue Mar 10 2009 - 15:19:10 EET)
  • YEKTA WEB Academic Web Tools CMS Multiple XSS (Sun Mar 01 2009 - 13:58:13 EET)
• MustLive
  • Re: Nokia N95-8 browser denial of service (Sun Mar 01 2009 - 01:23:08 EET)
• Nico Golde
  • [SECURITY] [DSA 1744-1] New weechat packages fix denial of service (Wed Mar 18 2009 - 13:55:04 EET)
  • [SECURITY] [DSA 1742-1] New libsnd packages fix arbitrary code execution (Mon Mar 16 2009 - 02:46:00 EET)
  • [SECURITY] [DSA 1738-1] New curl packages fix arbitrary file access (Wed Mar 11 2009 - 18:46:54 EET)
• Noah Meyerhans
  • [SECURITY] [DSA 1756-1] New xulrunner packages fix multiple vulnerabilities (Sun Mar 29 2009 - 21:03:00 EEST)
• nospam@gmail.it
  • glFusion <= 1.1.2 COM_applyFilter()/order sql injection exploit (Sun Mar 29 2009 - 07:37:13 EEST)
  • PHPizabi v0.848b C1 HFP1 proc.inc.php remote privilege escalation (php.ini independent) (Tue Mar 24 2009 - 09:04:28 EET)
  • Bs.Player <= 2.34 Build 980 (.bsl) local buffer overflow 0day exploit (seh) (Fri Mar 20 2009 - 04:01:44 EET)
  • CDex v1.70b2 (.ogg) local buffer overflow exploit poc (Wed Mar 18 2009 - 00:15:50 EET)
  • GeoVision LiveAudio ActiveX Control GetAudioPlayingTime() remote freed-memory access exploit (Fri Mar 13 2009 - 17:36:33 EET)
  • SupportSoft DNA Editor Module (dnaedit.dll v6.9.2205) remote code execution exploit (IE6/7) (Thu Mar 05 2009 - 13:04:41 EET)
• Ofer Shezaf
  • Weekly Web Hacking Incidents update for Feb 25th (Sun Mar 01 2009 - 09:54:34 EET)
• Paul Wouters
  • CVE-2009-0790: ISAKMP DPD Remote Vulnerability with Openswan & Strongswan IPsec (Mon Mar 30 2009 - 19:17:24 EEST)
  • Re: [ GLSA 200903-18 ] Openswan: Insecure temporary file creation (Mon Mar 09 2009 - 22:12:41 EET)
• Pierre-Yves Rofes
  • [ GLSA 200903-41 ] gedit: Untrusted search path (Tue Mar 31 2009 - 00:48:53 EEST)
  • [ GLSA 200903-40 ] Analog: Denial of Service (Mon Mar 30 2009 - 00:40:57 EEST)
  • [ GLSA 200903-39 ] pam_krb5: Privilege escalation (Thu Mar 26 2009 - 00:45:17 EET)
  • [ GLSA 200903-38 ] Squid: Multiple Denial of Service vulnerabilities (Tue Mar 24 2009 - 23:42:45 EET)
  • [ GLSA 200903-37 ] Ghostscript: User-assisted execution of arbitrary code (Tue Mar 24 2009 - 00:34:00 EET)
  • [ GLSA 200903-36 ] MLDonkey: Information disclosure (Tue Mar 24 2009 - 00:11:38 EET)
  • [ GLSA 200903-35 ] Muttprint: Insecure temporary file usage (Mon Mar 23 2009 - 23:56:40 EET)
  • [ GLSA 200903-33 ] FFmpeg: Multiple vulnerabilities (Fri Mar 20 2009 - 00:59:58 EET)
  • [ GLSA 200903-32 ] phpMyAdmin: Multiple vulnerabilities (Thu Mar 19 2009 - 00:30:32 EET)
  • [ GLSA 200903-31 ] libcdaudio: User-assisted execution of arbitrary code (Tue Mar 17 2009 - 23:10:05 EET)
  • [ GLSA 200903-29 ] BlueZ: Arbitrary code execution (Mon Mar 16 2009 - 23:36:12 EET)
  • [ GLSA 200903-28 ] libpng: Multiple vulnerabilities (Sun Mar 15 2009 - 20:42:50 EET)
  • [ GLSA 200903-27 ] ProFTPD: Multiple vulnerabilities (Fri Mar 13 2009 - 00:29:21 EET)
  • [ GLSA 200903-25 ] Courier Authentication Library: SQL Injection vulnerability (Wed Mar 11 2009 - 21:33:55 EET)
  • [ GLSA 200903-23 ] Adobe Flash Player: Multiple vulnerabilities (Wed Mar 11 2009 - 00:27:02 EET)
  • [ GLSA 200903-24 ] Shadow: Privilege escalation (Wed Mar 11 2009 - 00:34:59 EET)
  • [ GLSA 200903-10 ] Irrlicht: User-assisted execution of arbitrary code (Sat Mar 07 2009 - 23:31:03 EET)
  • [ GLSA 200903-01 ] Vinagre: User-assisted execution of arbitrary code (Fri Mar 06 2009 - 23:59:44 EET)
• Positron Security
  • Positron Security Advisory #2009-000: Multiple Vulnerabilities in MapServer v5.2.1 and v4.10.3 (Mon Mar 30 2009 - 20:43:54 EEST)
• r_haudenschilt@hotmail.com
  • Re: Family Connections 1.8.1 Multiple Remote Vulnerabilities (Tue Mar 31 2009 - 05:18:08 EEST)
• rahimeh.khodadadi@gmail.com
  • reporting CVE (Mon Mar 16 2009 - 15:12:25 EET)
• rizki.wicaksono@gmail.com
  • CPANEL File Manager XSS Vulnerability (Tue Mar 17 2009 - 06:53:27 EET)
• Robert Buchholz
  • [ GLSA 200903-26 ] TMSNC: Execution of arbitrary code (Thu Mar 12 2009 - 15:58:21 EET)
  • [ GLSA 200903-22 ] Ganglia: Execution of arbitrary code (Tue Mar 10 2009 - 16:27:40 EET)
  • Re: [ GLSA 200903-18 ] Openswan: Insecure temporary file creation (Tue Mar 10 2009 - 12:47:14 EET)
  • [ GLSA 200903-20 ] WebSVN: Multiple vulnerabilities (Mon Mar 09 2009 - 16:02:04 EET)
  • [ GLSA 200903-19 ] Xerces-C++: Denial of Service (Mon Mar 09 2009 - 16:01:23 EET)
  • [ GLSA 200903-18 ] Openswan: Insecure temporary file creation (Mon Mar 09 2009 - 16:00:47 EET)
  • [ GLSA 200903-17 ] Real VNC: User-assisted execution of arbitrary code (Mon Mar 09 2009 - 15:58:19 EET)
  • [ GLSA 200903-16 ] Epiphany: Untrusted search path (Mon Mar 09 2009 - 15:57:37 EET)
  • [ GLSA 200903-15 ] git: Multiple vulnerabilties (Mon Mar 09 2009 - 15:56:27 EET)
  • [ GLSA 200903-14 ] BIND: Incorrect signature verification (Mon Mar 09 2009 - 15:10:06 EET)
  • [ GLSA 200903-13 ] MPFR: Denial of Service (Mon Mar 09 2009 - 15:07:38 EET)
  • [ GLSA 200903-12 ] OptiPNG: User-assisted execution of arbitrary code (Mon Mar 09 2009 - 15:06:55 EET)
  • [ GLSA 200903-11 ] PyCrypto: Execution of arbitrary code (Mon Mar 09 2009 - 15:05:47 EET)
  • [ GLSA 200903-09 ] OpenTTD: Execution of arbitrary code (Sat Mar 07 2009 - 18:29:53 EET)
  • [ GLSA 200903-08 ] gEDA: Insecure temporary file creation (Sat Mar 07 2009 - 18:27:52 EET)
  • [ GLSA 200903-07 ] Samba: Data disclosure (Sat Mar 07 2009 - 18:26:15 EET)
  • [ GLSA 200903-06 ] nfs-utils: Access restriction bypass (Sat Mar 07 2009 - 18:24:44 EET)
  • [ GLSA 200903-05 ] PDFjam: Multiple vulnerabilities (Sat Mar 07 2009 - 18:22:51 EET)
• robert@webappsec.org
  • Paper: Socket Capable Browser Plugins Result In Transparent Proxy Abuse (Tue Mar 10 2009 - 19:05:31 EET)
• Roberto Muņoz Fernandez
  • Re: [Full-disclosure] Zabbix 1.6.2 Frontend Multiple Vulnerabilities (Fri Mar 06 2009 - 01:42:48 EET)
• rPath Update Announcements
  • rPSA-2009-0050-1 ghostscript (Thu Mar 19 2009 - 21:52:09 EET)
  • rPSA-2009-0045-1 glib (Fri Mar 13 2009 - 01:08:49 EET)
  • rPSA-2009-0046-1 libpng (Fri Mar 13 2009 - 01:07:00 EET)
  • rPSA-2009-0040-1 tshark wireshark (Fri Mar 13 2009 - 01:00:28 EET)
  • rPSA-2009-0041-1 dhclient dhcp libdhcp4client (Fri Mar 13 2009 - 01:02:09 EET)
  • rPSA-2009-0042-1 curl (Fri Mar 13 2009 - 01:04:21 EET)
  • rPSA-2009-0035-1 php php-cgi php-imap php-mcrypt php-mysql php-mysqli php-pgsql php-soap php-xsl php5 php5-cgi php5-imap php5-mcrypt php5-mysql php5-mysqli php5-pear php5-pgsql php5-soap php5-xsl (Mon Mar 02 2009 - 22:45:26 EET)
• Salvatore \
  • webEdition 6.0.0.4 Local File Inclusion (Tue Mar 31 2009 - 16:22:49 EEST)
  • Community CMS 0.5 Multiple SQL Injection Vulnerabilities (Mon Mar 30 2009 - 22:55:45 EEST)
  • Family Connections 1.8.1 Multiple Remote Vulnerabilities (Mon Mar 30 2009 - 20:45:51 EEST)
  • phpCommunity 2 2.1.8 Multiple Vulnerabilities (SQL Injection / Directory Traversal / XSS) (Sat Mar 07 2009 - 19:25:19 EET)
  • nForum 1.5 Multiple SQL Injection (Fri Mar 06 2009 - 22:42:37 EET)
  • Wili-CMS 0.4.0 Multiple Vulnerabilities (Remote/Local File Inclusion - Authentication Bypass) (Fri Mar 06 2009 - 14:05:06 EET)
  • CelerBB 0.0.2 Multiple Vulnerabilities (Thu Mar 05 2009 - 16:37:49 EET)
  • BlindBlog 1.3.1 Multiple Vulnerabilities (SQL Inj - Auth Bypass - LFI) (Tue Mar 03 2009 - 16:32:27 EET)
  • WARNING - CORRECT: BlindBlog 1.3.1 Multiple Vulnerabilities (SQL Inj - Auth Bypass - LFI) (Tue Mar 03 2009 - 17:24:55 EET)
  • RitsBlog 0.4.2 (Authentication Bypass) SQL Injection Vulnerability / XSS Persistent Vulnerability (Mon Mar 02 2009 - 23:52:02 EET)
  • EZ-Blog Beta 1 Multiple SQL Injection (Mon Mar 02 2009 - 00:15:23 EET)
  • BlogMan 0.45 Multiple Vulnerabilities (Sun Mar 01 2009 - 17:47:38 EET)
• secresearch@fortinet.com
  • Apple iTunes DAAP Messages Handling Denial of Service Vulnerability  (Fri Mar 13 2009 - 03:59:57 EET)
• Secunia Research
  • Secunia Research: Adobe Reader JBIG2 Symbol Dictionary Buffer Overflow (Wed Mar 25 2009 - 11:22:05 EET)
  • Secunia Research: Foxit Reader JBIG2 Symbol Dictionary Processing Vulnerability (Mon Mar 09 2009 - 14:27:51 EET)
  • Secunia Research: libsndfile CAF Processing Integer Overflow Vulnerability (Tue Mar 03 2009 - 14:06:47 EET)
  • Secunia Research: Winamp CAF Processing Integer Overflow Vulnerability (Tue Mar 03 2009 - 14:08:46 EET)
• security-alert@hp.com
  • [security bulletin] HPSBMA02416 SSRT090008 rev.2 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code (Tue Mar 31 2009 - 20:02:12 EEST)
  • [security bulletin] HPSBUX02409 SSRT080171 rev.1 - HP-UX Running VERITAS File System (VRTSvxfs) or VERITAS Oracle Disk Manager (VRTSodm), Local Escalation of Privilege (Tue Mar 24 2009 - 20:16:11 EET)
  • [security bulletin] HPSBMA02416 SSRT090008 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code (Tue Mar 24 2009 - 14:36:54 EET)
  • [security bulletin] HPSBMA02338 SSRT080024, SSRT080041 rev.3 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code, Denial of Service (DoS) (Fri Mar 20 2009 - 15:20:19 EET)
  • [security bulletin] HPSBMA02413 SSRT080040 rev.1 - HP WMI Mapper for Windows Server 2003 and Windows Server 2008 for Itanium-based Servers, Remote Unauthorized Access to Data, Local Unauthorized Access (Thu Mar 12 2009 - 20:28:31 EET)
  • [security bulletin] HPSBMA02412 SSRT080040 rev.1 - WMI Mapper for HP Systems Insight Manager Running on Windows, Remote Unauthorized Access to Data, Local Unauthorized Access (Wed Mar 11 2009 - 17:20:07 EET)
  • [security bulletin] HPSBUX02411 SSRT080111 rev.1 - HP-UX Running Java, Remote Execution of Arbitrary Code and Other Vulnerabilities (Wed Mar 11 2009 - 17:20:52 EET)
  • [security bulletin] HPSBUX02401 SSRT090005 rev.3 - HP-UX Running Apache Web Server Suite, Remote Denial of Service (DoS), Cross-site Scripting (XSS), Execution of Arbitrary Code, Cross-Site Request Forgery (CSRF) (Mon Mar 02 2009 - 15:34:19 EET)
• security.432@amxl.com
  • Re: Re: Local vulnerability in suexec + FastCGI + PHP configurations (Mon Mar 02 2009 - 23:38:21 EET)
• security.assurance@nab.com.au
  • Sitecore .NET 5.3.x - web service information disclosure (Wed Mar 18 2009 - 00:38:05 EET)
• security@mandriva.com
  • [ MDVSA-2009:082 ] krb5 (Mon Mar 30 2009 - 18:11:01 EEST)
  • [ MDVSA-2009:081 ] libsoup (Sat Mar 28 2009 - 00:13:01 EET)
  • [ MDVSA-2009:080 ] glib2.0 (Thu Mar 26 2009 - 23:50:00 EET)
  • [ MDVSA-2009:079 ] postgresql (Mon Mar 23 2009 - 19:54:00 EET)
  • [ MDVSA-2009:078 ] evolution-data-server (Mon Mar 23 2009 - 19:37:00 EET)
  • [ MDVSA-2009:077 ] pam (Sat Mar 21 2009 - 21:25:01 EET)
  • [ MDVSA-2009:060-1 ] nfs-utils (Thu Mar 19 2009 - 23:35:00 EET)
  • [ MDVSA-2009:076 ] avahi (Sat Mar 14 2009 - 04:02:00 EET)
  • [ MDVSA-2009:075 ] firefox (Fri Mar 13 2009 - 22:50:01 EET)
  • [ MDVSA-2009:074 ] libneon0.27 (Thu Mar 12 2009 - 00:31:01 EET)
  • [ MDVSA-2009:073 ] sarg (Wed Mar 11 2009 - 23:45:01 EET)
  • [ MDVSA-2009:072 ] perl-MDK-Common (Wed Mar 11 2009 - 21:29:00 EET)
  • [ MDVSA-2009:071 ] kernel (Tue Mar 10 2009 - 21:03:01 EET)
  • [ MDVSA-2009:070 ] openoffice.org (Tue Mar 10 2009 - 17:17:00 EET)
  • [ MDVSA-2009:068-1 ] poppler (Sat Mar 07 2009 - 05:07:00 EET)
  • [ MDVSA-2009:069 ] curl (Sat Mar 07 2009 - 02:48:00 EET)
  • [ MDVSA-2009:068 ] poppler (Fri Mar 06 2009 - 23:26:00 EET)
  • [ MDVSA-2009:067 ] libsndfile (Fri Mar 06 2009 - 01:36:00 EET)
  • [ MDVSA-2009:066 ] php (Thu Mar 05 2009 - 23:18:00 EET)
  • [ MDVSA-2009:065 ] php4 (Thu Mar 05 2009 - 22:56:00 EET)
  • [ MDVSA-2009:064 ] imap (Tue Mar 03 2009 - 17:49:00 EET)
  • [ MDVSA-2009:063 ] eog (Tue Mar 03 2009 - 01:39:00 EET)
  • [ MDVSA-2009:062 ] shadow-utils (Tue Mar 03 2009 - 00:00:01 EET)
• sfa@securityfocus.com
  • SecurityFocus Linux Newsletter #432 (Thu Mar 26 2009 - 19:10:02 EET)
  • SecurityFocus Microsoft Newsletter #437 (Thu Mar 26 2009 - 19:09:47 EET)
  • SecurityFocus Newsletter #496 (Thu Mar 26 2009 - 19:09:43 EET)
  • SecurityFocus Linux Newsletter #431 (Thu Mar 19 2009 - 00:15:06 EET)
  • SecurityFocus Microsoft Newsletter #436 (Thu Mar 19 2009 - 00:15:02 EET)
  • SecurityFocus Newsletter #495 (Thu Mar 19 2009 - 00:14:58 EET)
  • SecurityFocus Newsletter #494 (Thu Mar 12 2009 - 00:40:25 EET)
  • SecurityFocus Linux Newsletter #430 (Thu Mar 12 2009 - 00:40:34 EET)
  • SecurityFocus Microsoft Newsletter #435 (Thu Mar 12 2009 - 00:40:29 EET)
  • SecurityFocus Linux Newsletter #429 (Thu Mar 05 2009 - 20:12:08 EET)
  • SecurityFocus Microsoft Newsletter #434 (Thu Mar 05 2009 - 20:12:04 EET)
  • SecurityFocus Newsletter #493 (Thu Mar 05 2009 - 20:12:01 EET)
• sosoblood@hotmail.com
  • Re: Sun Java System Communications Express [HTML Injection] (Wed Mar 11 2009 - 22:07:02 EET)
  • Sun Java System Communications Express [HTML Injection] (Tue Mar 10 2009 - 23:16:51 EET)
• Steffen Joeris
  • [SECURITY] [DSA 1760-1] New openswan packages fix denial of service (Tue Mar 31 2009 - 02:49:43 EEST)
  • [SECURITY] [DSA 1759-1] New strongswan packages fix denial of service (Tue Mar 31 2009 - 02:49:22 EEST)
  • [SECURITY] [DSA 1757-1] New auth2db packages fix SQL injection (Mon Mar 30 2009 - 13:09:41 EEST)
  • [SECURITY] [DSA 1745-2] New lcms packages fix regression (Wed Mar 25 2009 - 13:32:18 EET)
  • [SECURITY] [DSA 1747-1] New glib2.0 packages fix arbitrary code execution (Fri Mar 20 2009 - 16:11:16 EET)
  • [SECURITY] [DSA 1746-1] New ghostscript packages fix arbitrary code execution (Fri Mar 20 2009 - 11:32:00 EET)
  • [SECURITY] [DSA 1748-1] New libsoup packages fix arbitrary code execution (Fri Mar 20 2009 - 16:15:01 EET)
  • [SECURITY] [DSA 1745-1] New lcms packages fix arbitrary code execution (Fri Mar 20 2009 - 11:16:54 EET)
  • [SECURITY] [DSA 1743-1] New libtk-img packages fix arbitrary code execution (Tue Mar 17 2009 - 10:52:05 EET)
  • [SECURITY] [DSA 1740-1] New yaws packages fix denial of service (Sat Mar 14 2009 - 06:07:11 EET)
  • [SECURITY] [DSA 1737-1] New wesnoth packages fix several vulnerabilities (Wed Mar 11 2009 - 17:16:56 EET)
  • [SECURITY] [DSA 1736-1] New mahara packages fix cross-site scripting (Tue Mar 10 2009 - 22:33:38 EET)
  • [SECURITY] [DSA 1733-1] New vim packages fix multiple vulnerabilities (Tue Mar 03 2009 - 10:35:06 EET)
  • [SECURITY] [DSA 1732-1] New squid3 packages fix denial of service (Tue Mar 03 2009 - 10:23:22 EET)
  • [SECURITY] [DSA 1731-1] New ndiswrapper packages fix arbitrary code execution vulnerability (Mon Mar 02 2009 - 23:09:55 EET)
  • [SECURITY] [DSA 1730-1] New proftpd-dfsg packages fix SQL injection vulnerabilites (Mon Mar 02 2009 - 22:56:21 EET)
  • [SECURITY] [DSA 1729-1] New gst-plugins-bad0.10 packages fix multiple vulnerabilities (Mon Mar 02 2009 - 22:38:00 EET)
• Steven M. Christey
  • iDefense COMRaider, ActiveX controls, and browser configuration (Thu Mar 05 2009 - 20:41:00 EET)
• swhite@securestate.com
  • Infopop UBB.Threads Admin Credentials via SQL Injection (Fri Mar 13 2009 - 20:43:42 EET)
• The Dark Tangent
  • DEFCON CTF Submissions are in, DC-16 video online! (Fri Mar 06 2009 - 05:13:46 EET)
• tiha@taifaweb.net
  • Re: [ECHO_ADV_103$2009] taifajobs <= 1.0 (jobid) Remote SQL Injection Vulnerability (Tue Mar 31 2009 - 11:07:13 EEST)
• Tobias Heinlein
  • [ GLSA 200903-34 ] Amarok: User-assisted execution of arbitrary code (Fri Mar 20 2009 - 22:22:13 EET)
  • [ GLSA 200903-30 ] Opera: Multiple vulnerabilities (Tue Mar 17 2009 - 01:54:09 EET)
  • [ GLSA 200903-21 ] cURL: Arbitrary file access (Mon Mar 09 2009 - 20:58:39 EET)
  • [ GLSA 200903-04 ] DevIL: User-assisted execution of arbitrary code (Sat Mar 07 2009 - 00:38:29 EET)
  • [ GLSA 200903-03 ] Audacity: User-assisted execution of arbitrary code (Sat Mar 07 2009 - 00:37:05 EET)
  • [ GLSA 200903-02 ] ZNC: Privilege escalation (Sat Mar 07 2009 - 00:35:27 EET)
• uCon Security Conference
  • Slides from uCon Security Conference 2009 available online (Thu Mar 19 2009 - 22:51:35 EET)
• Valery Marchuk
  • [Positive Technologies SA 2009-09] Trend Micro Internet Security Pro 2009 tmactmon.sys Priviliege Escalation Vulnerabilities (Tue Mar 31 2009 - 14:49:10 EEST)
  • [Suspected Spam][PT-2009-11] SlySoft Multiple Products ElbyCDIO.sys Denial of Service (Thu Mar 12 2009 - 19:11:16 EET)
• Vladimir '3APA3A' Dubrovin
  • Re[2]: Secunia Research: Adobe Reader JBIG2 Symbol Dictionary Buffer Overflow (Wed Mar 25 2009 - 21:55:32 EET)
  • Re: iDefense COMRaider, ActiveX controls, and browser configuration (Fri Mar 06 2009 - 15:19:19 EET)
• vuln@e-rdc.org
  • [ECHO_ADV_108$2009] JobHut <= 1.2 (pk) Remote Sql Injection Vulnerability (Tue Mar 31 2009 - 02:14:14 EEST)
  • [ECHO_ADV_105$2009] chaozzDB <= 1.2 Critical File Disclosure Vulnerability (Tue Mar 17 2009 - 18:06:32 EET)
  • [ECHO_ADV_107$2009] FubarForum <= 1.6 Critical File Disclosure Vulnerability (Tue Mar 17 2009 - 18:09:58 EET)
  • [ECHO_ADV_106$2009] FireAnt <= 1.3 Critical File Disclosure Vulnerability (Tue Mar 17 2009 - 18:08:20 EET)
  • [ECHO_ADV_104$2009] WeBid <= 0.7.3 RC9 Multiple Remote File Inclution Vulnerabilities (Tue Mar 10 2009 - 20:10:49 EET)
• Will Drewry
  • [oCERT-2008-015] glib and glib-predecessor heap overflows (Thu Mar 12 2009 - 18:07:54 EET)
• ZDI Disclosures
  • ZDI-09-015: Mozilla Firefox XUL _moveToEdgeShift() Memory Corruption Vulnerability (Tue Mar 31 2009 - 01:41:16 EEST)
  • ZDI-09-014: Adobe Acrobat getIcon() Stack Overflow Vulnerability (Tue Mar 24 2009 - 18:51:37 EET)
  • ZDI-09-013: Mozilla Firefox XUL Linked Clones Double Free Vulnerability (Thu Mar 05 2009 - 20:01:53 EET)

Last message date: Tue Mar 31 2009 - 21:44:54 EEST
Archived on: Tue Mar 31 2009 - 21:44:55 EEST

This archive was generated by hypermail 2b28 : Tue Mar 31 2009 - 21:44:55 EEST