stdin
By Author

• Aditya K Sood
  • In Response to Bid 34130 Invalid (Sat Apr 11 2009 - 12:29:26 EEST)
  • [SecNiche Whitepaper] Evading Web XSS Filters with Microsoft Word - WAPT Perspective (Wed Apr 01 2009 - 16:59:55 EEST)
  • Microsoft Internet Explorer 8 - Anti Spoofing is a Myth (Wed Apr 01 2009 - 16:59:28 EEST)
• admin@bugreport.ir
  • SASPCMS Multiple Vulnerabilities (Wed Apr 08 2009 - 15:13:24 EEST)
• ak@red-database-security.com
  • SQL Injection in package DBMS_AQADM_SYS (Thu Apr 16 2009 - 08:40:55 EEST)
  • Unprivileged DB users can see APEX password hashes (Thu Apr 16 2009 - 08:43:43 EEST)
  • SQL Injection in package DBMS_AQIN (Thu Apr 16 2009 - 08:40:06 EEST)
• Albert Sellarès
  • Remote iodinetd DoS vulnerability on Debian Lenny (Sun Apr 26 2009 - 20:00:41 EEST)
  • skpd: A tool to dump processes to executable ELF files (Wed Apr 15 2009 - 23:35:55 EEST)
• Alexander Sotirov
  • WOOT'09 call for papers (Fri Apr 24 2009 - 02:14:50 EEST)
• alphanix00@gmail.com
  • Exjune Guestbook v2 Remote Database Disclosure Exploit (Thu Apr 09 2009 - 00:47:30 EEST)
  • OTSTurntables 1.00.027 (.ofl file) Local universal SOF Exploit (Wed Apr 08 2009 - 20:34:39 EEST)
• Andrew Kuriger
  • Re: Windows Update (re-)installs outdated Flash ActiveX on Windows XP (Thu Apr 23 2009 - 01:59:06 EEST)
• Andrew L. Davis
  • Re: security tools list (Tue Apr 28 2009 - 21:34:06 EEST)
• Anonymous@gmail.com
  • Re: [NOBYTES.COM: #12] osCommerce 2.2rc2a - Information Disclosure (Tue Apr 14 2009 - 14:35:44 EEST)
• antonia.goodwin@procheckup.com
  • XSS with mod_perl perl_status utility (Wed Apr 15 2009 - 19:11:39 EEST)
• arvind doraiswamy
  • Re: Formshield Captcha - Older Version vulnerable to replay attacks (Tue Apr 28 2009 - 10:13:23 EEST)
  • Formshield Captcha - Older Version vulnerable to replay attacks (Fri Apr 24 2009 - 13:26:33 EEST)
• Asterisk Security Team
  • AST-2009-003: SIP responses expose valid usernames (Thu Apr 02 2009 - 21:59:45 EEST)
• Bernardo Damele A. G.
  • [Tool] sqlmap 0.7rc1 released (Wed Apr 22 2009 - 17:29:26 EEST)
• Bernhard Mueller
  • SEC Consult SA-20090415-1 :: Nortel Application Gateway 2000 Password Disclosure Vulnerability (Wed Apr 15 2009 - 17:03:49 EEST)
  • SEC Consult SA-20090415-0 :: Multiple Vulnerabilities in Novell Teaming (Wed Apr 15 2009 - 17:02:23 EEST)
• Bkis
  • [Bkis-07-2009] 010 Editor Multiple Buffer Overflow Vulnerabilities (Wed Apr 22 2009 - 08:25:07 EEST)
  • [Bkis-06-2009] GOM Player Subtitle Buffer Overflow Vulnerability (Wed Apr 08 2009 - 11:00:05 EEST)
• c1c4tr1z@voodoo-labs.org
  • net2ftp <= 0.97 Cross-Site Scripting/Request Forgery (Thu Apr 09 2009 - 00:13:10 EEST)
  • Amaya 11.1 XHTML Parser Buffer Overflow (Sat Apr 04 2009 - 08:11:59 EEST)
• Carlos Augusto
  • BugCON '09, Mexico: Call For Papers (Tue Apr 14 2009 - 01:10:01 EEST)
• Cesar
  • Opening Intranets to attack by using Internet Explorer [paper] (Tue Apr 07 2009 - 21:36:50 EEST)
• Cisco Systems Product Security Incident Response Team
  • Cisco Security Advisory: Multiple Vulnerabilities in Cisco ASA Adaptive Security Appliance and Cisco PIX Security Appliances (Wed Apr 08 2009 - 19:01:39 EEST)
• CORE Security Technologies Advisories
  • CORE-2009-0114 - HTTP Response Splitting vulnerability in Sun Delegated Administrator (Tue Apr 21 2009 - 21:46:09 EEST)
  • CORE-2009-0108: Multiple vulnerabilities in Sun Calendar Express Web Server (Tue Mar 31 2009 - 23:01:43 EEST)
• Corrado Leita
  • Reminder: RAID 2009 CFP (Thu Apr 09 2009 - 22:13:46 EEST)
• cxib@securityreason.com
  • PHP 5.2.9 curl safe_mode & open_basedir bypass (Fri Apr 10 2009 - 16:14:32 EEST)
• ddivulnalert@ddifrontline.com
  • DDIVRT-2009-24 Precidia Ether232 Memory Corruption (Mon Apr 27 2009 - 20:58:49 EEST)
• ddvulnalert@ddifronline.com
  • DDIVRT-2009-23 Apache ActiveMQ Numerous Cross Site Scripting Issues (Thu Apr 16 2009 - 18:00:10 EEST)
• Dennis Yurichev
  • CVE-2009-0991 PoC (Tue Apr 21 2009 - 00:53:02 EEST)
  • IBM DB2 (Thu Apr 02 2009 - 22:52:23 EEST)
• Devin Carraway
  • [SECURITY] [DSA 1783-1] New mysql-dfsg-5.0 packages fix multiple vulnerabilities (Wed Apr 29 2009 - 11:24:32 EEST)
• dh@layereddefense.com
  • Layered Defense Research Advisory: Format String Vulnerability: FortiClient Version 3 (Thu Apr 02 2009 - 05:25:25 EEST)
• Digital Security Research Group [DSecRG]
  • SAP Cfolders Multiple Stored XSS Vulnerabilies (Wed Apr 22 2009 - 02:46:05 EEST)
  • SAP Cfolders Multiple Linked XSS Vulnerabilities (Wed Apr 22 2009 - 02:47:01 EEST)
• dontcontactorspamme@aria-security.com
  • [Aria-Security.com] vBulletin multiple XSS (Sat Apr 04 2009 - 09:50:23 EEST)
• Dragos Ruiu
  • EUSecWest 2009 CFP (May 27/28, Deadline April 7 2009) (Thu Apr 02 2009 - 00:28:45 EEST)
• DSecRG
  • [DSECRG-09-020] Apache Geronimo - XSRF vulnerabilities (Thu Apr 16 2009 - 20:18:47 EEST)
  • [DSECRG-09-019] Apache Geronimo - XSS vulnerabilities.txt (Thu Apr 16 2009 - 20:17:28 EEST)
  • [DSECRG-09-018] Apache Geronimo - Directory Traversal vulnerabilities (Thu Apr 16 2009 - 20:13:13 EEST)
  • [DSECRG-09-037] abk-soft AbleSpace CMS 1.0 - Multiple security vulnerabilities (Tue Apr 14 2009 - 18:49:42 EEST)
  • [DSECRG-09-036] Chance-i Techno Vision Security System - Directory Traversal File Download (Fri Apr 10 2009 - 15:36:39 EEST)
  • [DSECRG-09-035] Chance-i DiViS DVR ActiveX - Heap Overflow (Fri Apr 10 2009 - 15:33:57 EEST)
• dvlabs
  • TPTI-09-01: VMWare VMnc Codec Invalid RFB Message Type Heap Overflow (Mon Apr 06 2009 - 23:43:55 EEST)
  • TPTI-09-02: VMWare VMnc Codec Open-DML Standard Index dwSize Heap Overflow (Mon Apr 06 2009 - 23:44:02 EEST)
• Elazar Broad
  • Autodesk IDrop ActiveX Control Heap Corruption Vulnerability (Thu Apr 02 2009 - 22:00:06 EEST)
• ew1zz@bs.com
  • Miniweb server Multiple Vulnerabilities (Thu Apr 16 2009 - 18:11:06 EEST)
• ew1zz@dontspammepls.com
  • Miniweb Buffer Overflow (Thu Apr 16 2009 - 18:44:45 EEST)
• ew1zz@hotmail.com
  • MonGoose 2.4 Directory Traversal Vulnerability (Tue Apr 14 2009 - 02:18:16 EEST)
• ewizz@balcansecurity.com
  • Zervit Webserver Buffer Overflow (Wed Apr 15 2009 - 00:22:26 EEST)
• Florian Weimer
  • [SECURITY] [DSA 1780-1] New libdbd-pg-perl packages fix potential code execution (Tue Apr 28 2009 - 21:34:37 EEST)
  • [SECURITY] [DSA 1772-1] New udev packages fix privilege escalation (Thu Apr 16 2009 - 13:30:59 EEST)
  • [SECURITY] [DSA 1771-1] New clamav packages fix several vulnerabilities (Wed Apr 15 2009 - 22:48:10 EEST)
  • [SECURITY] [DSA 1769-1] New openjdk-6 packages fix arbitrary code execution (Sat Apr 11 2009 - 17:38:24 EEST)
  • [SECURITY] [DSA 1768-1] New openafs packages potential code execution (Fri Apr 10 2009 - 17:51:13 EEST)
  • [SECURITY] [DSA 1754-1] New roundup packages fix privilege escalation (Thu Apr 09 2009 - 23:53:23 EEST)
• FreeBSD Security Advisories
  • FreeBSD Security Advisory FreeBSD-SA-09:08.openssl (Wed Apr 22 2009 - 17:19:08 EEST)
  • FreeBSD Security Advisory FreeBSD-SA-09:07.libc (Wed Apr 22 2009 - 17:19:12 EEST)
• gabriel@falandodeseguranca.com
  • Linksys WRT54GC - Admin Password Change (POC) (Sun Apr 19 2009 - 07:48:09 EEST)
• Gadi Evron
  • one shot remote root for linux? (Tue Apr 28 2009 - 17:07:29 EEST)
• Gerardo García Peña
  • Summer Camp Garrotxa 2009 event (Wed Apr 08 2009 - 08:36:22 EEST)
• Henri Lindberg - Smilehouse Oy
  • IBM BladeCenter Advanced Management Module Multiple vulnerabilities (Thu Apr 09 2009 - 13:38:52 EEST)
• iDefense Labs
  • iDefense Security Advisory 04.29.09: Symantec System Center Alert Management System Console Arbitrary Program Execution Design Error Vulnerability (Wed Apr 29 2009 - 19:34:45 EEST)
  • iDefense Security Advisory 04.28.09: TIBCO SmartSockets Stack Buffer Overflow Vulnerability (Tue Apr 28 2009 - 22:53:25 EEST)
  • iDefense Security Advisory 04.15.09: Microsoft WordPad Word97 Converter Stack Buffer Overflow Vulnerability (Wed Apr 15 2009 - 22:25:53 EEST)
  • iDefense Security Advisory 04.15.09: IBM AIX muxatmd Buffer Overflow Vulnerability (Wed Apr 15 2009 - 23:11:25 EEST)
  • iDefense Security Advisory 04.14.09: Microsoft Word 2000 WordPerfect 6.x Converter Stack Corruption Vulnerability (Tue Apr 14 2009 - 21:59:32 EEST)
• IrIsT.Ir@gmail.com
  • MataChat Cross-Site Scripting Vulnerabilities (Sat Apr 25 2009 - 08:58:40 EEST)
• Jamie Strandboge
  • [USN-765-1] Firefox and Xulrunner vulnerabilities (Tue Apr 28 2009 - 22:34:37 EEST)
  • [USN-764-1] Firefox and Xulrunner vulnerabilities (Thu Apr 23 2009 - 05:12:23 EEST)
  • [USN-762-1] APT vulnerabilities (Tue Apr 21 2009 - 00:39:54 EEST)
  • [USN-760-1] CUPS vulnerability (Fri Apr 17 2009 - 00:28:21 EEST)
  • [USN-756-1] ClamAV vulnerability (Mon Apr 13 2009 - 21:58:50 EEST)
  • [USN-754-1] ClamAV vulnerabilities (Tue Apr 07 2009 - 22:32:12 EEST)
• Jeremy Brown
  • Re: Addonics NAS Adapter (bts.cgi) Remote DoS Exploit (post-auth) (Tue Apr 21 2009 - 00:12:53 EEST)
• jplopezy@gmail.com
  • Trend Micro OfficeScan Client - DOS (Tue Apr 21 2009 - 17:55:04 EEST)
• Julien TINNES
  • Massive exploitation of instant messaging applications proved feasible (Wed Apr 01 2009 - 06:00:30 EEST)
• k g
  • Cyber Warfare Conference: Agenda (Thu Apr 02 2009 - 22:30:36 EEST)
• Kees Cook
  • [USN-758-1] udev vulnerabilities (Wed Apr 15 2009 - 20:07:41 EEST)
  • [USN-755-1] Kerberos vulnerabilities (Wed Apr 08 2009 - 02:34:59 EEST)
  • [USN-752-1] Linux kernel vulnerabilities (Tue Apr 07 2009 - 20:37:12 EEST)
• laurent.desaulniers@gmail.com
  • OSCommerce Session Fixation Vulnerability (Thu Apr 02 2009 - 02:35:34 EEST)
• LayerOne Call For Papers
  • LayerOne 2009 - Registration Open, Initial Speakers Announced (Tue Apr 07 2009 - 20:25:12 EEST)
• Marc Deslauriers
  • [USN-766-1] acpid vulnerability (Tue Apr 28 2009 - 00:25:44 EEST)
  • [USN-761-2] PHP vulnerabilities (Tue Apr 28 2009 - 00:24:55 EEST)
  • [USN-767-1] FreeType vulnerability (Tue Apr 28 2009 - 00:26:25 EEST)
  • [USN-763-1] xine-lib vulnerabilities (Tue Apr 21 2009 - 00:38:47 EEST)
  • [USN-761-1] PHP vulnerabilities (Tue Apr 21 2009 - 00:38:13 EEST)
  • [USN-759-1] poppler vulnerabilities (Fri Apr 17 2009 - 00:24:01 EEST)
  • [USN-757-1] Ghostscript vulnerabilities (Wed Apr 15 2009 - 17:39:15 EEST)
  • [USN-753-1] PostgreSQL vulnerability (Tue Apr 07 2009 - 18:43:17 EEST)
• Marco Mella
  • POC - Sun Java System Acccess Manager & Identity Manager Users Enumeration (Tue Apr 07 2009 - 15:51:00 EEST)
• marianiscc@hotmail.com
  • Re: PHP-Revista Multiple vulnerabilities (Mon Apr 13 2009 - 23:49:01 EEST)
• Mario Alejandro Vilas Jerez
  • Python winappdbg module v1.0 is out! (Tue Apr 21 2009 - 19:24:55 EEST)
• Mark Thomas
  • CVE-2009-1190: Spring Framework Remote Denial of Service Vulnerability (Fri Apr 24 2009 - 11:51:35 EEST)
  • [SECURITY] CVE-2008-5519: Apache Tomcat mod_jk information disclosure vulnerability (Tue Apr 07 2009 - 23:42:40 EEST)
• Mark-David McLaughlin (marmclau)
  • RE: Cisco ASA5520 Web VPN Host Header XSS (Fri Apr 24 2009 - 17:45:10 EEST)
• Matteo Beccati
  • [OPENX-SA-2009-002] OpenX 2.4.11, 2.6.5, 2.8.0 fix multiple vulnerabilities (Thu Apr 02 2009 - 01:33:16 EEST)
• Matthew Dempsky
  • Adgregate ShopAd widget validation is vulnerable to replay attack (Wed Apr 08 2009 - 03:42:27 EEST)
  • Re: Adgregate ShopAd widget validation is vulnerable to replay attack (Wed Apr 08 2009 - 04:56:50 EEST)
  • Re: Adgregate ShopAd widget validation is vulnerable to replay attack (Wed Apr 08 2009 - 10:21:53 EEST)
• mcyr2@csc.com
  • Addonics NAS Adapter (bts.cgi) Remote DoS Exploit (post-auth) (Mon Apr 20 2009 - 23:12:59 EEST)
  • HP Deskjet 6800 XSS in Web Interface (Sat Apr 11 2009 - 18:26:13 EEST)
• mefuentes61@hotmail.com
  • Re: Critical SQL Injection PHPNuke <= 7.8 - Your_Account module (Sun Apr 12 2009 - 20:50:55 EEST)
• Memisyazici, Aras
  • RE: SQL INJECTION (SHELL UPLOAD)--EZ-blog Beta2--> (Tue Apr 28 2009 - 02:56:59 EEST)
• Michael Wiegand
  • OpenVAS now beyond 10000 Network Vulnerability Tests (Thu Apr 09 2009 - 17:23:04 EEST)
• Michal Zalewski
  • Re: Microsoft Internet Explorer 8 - Anti Spoofing is a Myth (Wed Apr 01 2009 - 18:44:58 EEST)
• Mobile Security Lab
  • MSL-2009-001 - Samsung Missing Provisioning Authentication (Fri Apr 24 2009 - 18:45:52 EEST)
• Moritz Muehlenhoff
  • [SECURITY] [DSA 1764-1] New tunapie packages fix several vulnerabilities (Wed Apr 08 2009 - 00:44:14 EEST)
  • [SECURITY] [DSA 1763-1] New openssl packages fix denial of service (Mon Apr 06 2009 - 19:25:35 EEST)
• mozilla@ids-guide.de
  • ERNW Security Advisory 01-2009: XSS in Blackberries Mobile Data Service Connection Service (Fri Apr 17 2009 - 15:21:57 EEST)
• Nam Nguyen
  • [BMSA 2009-04] Remote DoS in Internet Explorer (Sat Apr 11 2009 - 10:15:15 EEST)
• Nico Golde
  • [SECURITY] [DSA 1778-1] New mahara packages fix cross-site scripting (Wed Apr 22 2009 - 19:50:47 EEST)
  • [SECURITY] [DSA 1767-1] New multipath-tools packages fix denial of service (Thu Apr 09 2009 - 17:18:13 EEST)
  • [SECURITY] [DSA 1766-1] New krb5 packages fix several vulnerabilities (Thu Apr 09 2009 - 04:33:24 EEST)
  • [SECURITY] [DSA 1761-1] New moodle packages fix file disclosure (Fri Apr 03 2009 - 16:35:39 EEST)
• noreply-secresearch@fortinet.com
  • Microsoft Office Excel Remote Memory Corruption Vulnerability (Wed Apr 15 2009 - 04:30:54 EEST)
  • FGA-2009-003:EMC RepliStor Buffer Overflow Vulnerability (Thu Apr 09 2009 - 05:01:53 EEST)
• nospam@gmail.it
  • Symantec Fax Viewer Control v10 (DCCFAXVW.DLL) remote buffer overflow exploit (Wed Apr 29 2009 - 12:53:56 EEST)
  • Geeklog <= 1.5.2 savepreferences()/*blocks[] remote sql injection exploit (Thu Apr 16 2009 - 12:24:10 EEST)
  • ftpdmin v. 0.96 RNFR remote buffer overflow exploit (Sat Apr 11 2009 - 20:24:49 EEST)
  • Geeklog <=1.5.2 SEC_authenticate()/PHP_AUTH_USER sql injection exploit (Thu Apr 09 2009 - 13:22:57 EEST)
  • Geeklog <=1.5.2 'SESS_updateSessionTime()' vulnerability (Thu Apr 09 2009 - 13:35:10 EEST)
  • glFusion <= 1.1.2 COM_applyFilter()/cookies remote blind sql injection exploit (Fri Apr 03 2009 - 12:40:41 EEST)
• Oliver Goebel
  • [IMF 2009] 2nd Call for Papers - Submission Open (Fri Apr 17 2009 - 03:51:56 EEST)
• Patrick Webster
  • ContentKeeper - Remote command execution and privilege escalation (Thu Apr 02 2009 - 16:44:36 EEST)
  • Q2 Solutions ConnX - SQL Injection Vulnerability (Thu Apr 02 2009 - 16:14:56 EEST)
  • Asbru Web Content Management Vulnerabilities (Thu Apr 02 2009 - 15:18:46 EEST)
• Pete Herzog
  • OSSTMM 3 Sample Released (Mon Apr 06 2009 - 23:08:30 EEST)
• Philippe Mailinglist
  • Hacker Space Fest 2009 CFP: Call For Paper (Mon Apr 13 2009 - 14:15:38 EEST)
• Pierre-Yves Rofes
  • [ GLSA 200904-20 ] CUPS: Multiple vulnerabilities (Fri Apr 24 2009 - 00:55:36 EEST)
  • [ GLSA 200904-19 ] LittleCMS: Multiple vulnerabilities (Sun Apr 19 2009 - 18:43:29 EEST)
  • [ GLSA 200904-18 ] udev: Multiple vulnerabilities (Sat Apr 18 2009 - 22:10:15 EEST)
  • [ GLSA 200904-16 ] libsndfile: User-assisted execution of arbitrary code (Fri Apr 17 2009 - 22:03:02 EEST)
  • [ GLSA 200904-14 ] F-PROT Antivirus: Denial of Service (Tue Apr 14 2009 - 23:47:07 EEST)
  • [ GLSA 200904-13 ] Ventrilo: Denial of Service (Tue Apr 14 2009 - 23:32:39 EEST)
  • [ GLSA 200904-06 ] Eye of GNOME: Untrusted search path (Tue Apr 07 2009 - 00:56:18 EEST)
  • [ GLSA 200904-05 ] ntp: Certificate validation error (Sun Apr 05 2009 - 16:56:49 EEST)
  • [ GLSA 200904-01 ] Openfire: Multiple vulnerabilities (Thu Apr 02 2009 - 23:51:15 EEST)
• Positron Security
  • Positron Security Advisory #2009-001: Memcached and MemcacheDB ASLR Bypass Weakness (Tue Apr 28 2009 - 22:59:29 EEST)
• prabhup@athisayampark.com
  • Re: Layered Defense Research Advisory: Format String Vulnerability: FortiClient Version 3 (Fri Apr 10 2009 - 11:20:58 EEST)
• publists@enablesecurity.com
  • OpenX 2.6.4 multiple vulnerabilities (Wed Apr 01 2009 - 23:35:56 EEST)
• rembrandt
  • OpenBSD 4.3 up to OpenBSD-current: PF null pointer dereference - remote DoS (kernel panic) (Mon Apr 13 2009 - 20:39:15 EEST)
• reportback@readthepost.com
  • Sungard Banner System XSS (Mon Apr 20 2009 - 06:48:57 EEST)
• research@voodoo-labs.org
  • Phorum < 5.2.10 Cross-Site Scripting/Request Forgery (Thu Apr 16 2009 - 03:42:54 EEST)
• Robbie Gill
  • Aruba Advisory ID: AID-42309 Management User Authentication Bypass Vulnerability When Using Public Key Based SSH Authentication (Fri Apr 24 2009 - 20:19:23 EEST)
• Robert Buchholz
  • [ GLSA 200904-17 ] Adobe Reader: User-assisted execution of arbitrary code (Sat Apr 18 2009 - 14:11:39 EEST)
  • [ GLSA 200904-15 ] mpg123: User-assisted execution of arbitrary code (Fri Apr 17 2009 - 01:02:51 EEST)
  • [ GLSA 200904-10 ] Avahi: Denial of Service (Thu Apr 09 2009 - 01:48:04 EEST)
  • [ GLSA 200904-09 ] MIT Kerberos 5: Multiple vulnerabilities (Thu Apr 09 2009 - 01:46:10 EEST)
  • [ GLSA 200904-11 ] Tor: Multiple vulnerabilities (Thu Apr 09 2009 - 01:48:56 EEST)
  • [ GLSA 200904-08 ] OpenSSL: Denial of Service (Tue Apr 07 2009 - 13:19:17 EEST)
  • [ GLSA 200904-07 ] Xpdf: Untrusted search path (Tue Apr 07 2009 - 13:18:22 EEST)
  • [ GLSA 200904-03 ] Gnumeric: Untrusted search path (Fri Apr 03 2009 - 16:48:30 EEST)
  • [ GLSA 200904-02 ] GLib: Execution of arbitrary code (Fri Apr 03 2009 - 16:47:56 EEST)
• rPath Update Announcements
  • rPSA-2009-0059-1 poppler (Fri Apr 17 2009 - 08:02:58 EEST)
  • rPSA-2009-0060-1 ghostscript (Fri Apr 17 2009 - 08:05:09 EEST)
  • rPSA-2009-0064-1 icu (Fri Apr 17 2009 - 08:11:47 EEST)
  • rPSA-2009-0063-1 udev (Fri Apr 17 2009 - 08:10:07 EEST)
  • rPSA-2009-0061-1 cups (Fri Apr 17 2009 - 08:06:43 EEST)
  • rPSA-2009-0062-1 tshark wireshark (Fri Apr 17 2009 - 08:09:06 EEST)
  • rPSA-2009-0058-1 krb5 krb5-server krb5-services krb5-test krb5-workstation (Wed Apr 08 2009 - 00:07:18 EEST)
  • rPSA-2009-0057-1 m2crypto openssl openssl-scripts (Fri Apr 03 2009 - 08:38:42 EEST)
• S. Praburaajan
  • HITBSecConf2009 - Malaysia: Call for Papers (Wed Apr 15 2009 - 07:03:14 EEST)
• sales@abk-soft.net
  • Re: [DSECRG-09-037] abk-soft AbleSpace CMS 1.0 - Multiple security vulnerabilities (Thu Apr 23 2009 - 17:58:10 EEST)
• Salvatore \
  • Pragyan CMS 2.6.4 Multiple SQL Injection Vulnerabilities (Fri Apr 24 2009 - 18:14:55 EEST)
  • Creasito e-commerce content manager Authentication Bypass (Mon Apr 20 2009 - 18:08:20 EEST)
  • Multi-lingual E-Commerce System 0.2 Multiple Remote Vulnerabilities (Sun Apr 19 2009 - 18:31:40 EEST)
  • Malleo 1.2.3 Local File Inclusion Vulnerability (Fri Apr 17 2009 - 21:18:37 EEST)
  • Tiny Blogr 1.0.0 rc4 Authentication Bypass (Fri Apr 17 2009 - 15:30:46 EEST)
  • Dynamic Flash Forum 1.0 Beta Multiple Remote Vulnerabilities (Fri Apr 10 2009 - 00:09:52 EEST)
  • Loggix Project 9.4.5 Blind SQL Injection (Fri Apr 10 2009 - 17:37:29 EEST)
  • PHP-agenda <= 2.2.5 Remote File Overwriting (Fri Apr 10 2009 - 16:20:54 EEST)
  • AdaptBB 1.0 Beta Multiple Remote Vulnerabilities (Thu Apr 09 2009 - 16:38:06 EEST)
  • Joomla Component com_bookjoomlas SQL Injection Vulnerability (Mon Apr 06 2009 - 12:13:44 EEST)
  • Family Connections 1.8.2 Blind SQL Injection (Correct Version) (Fri Apr 03 2009 - 16:35:01 EEST)
  • Family Connections <= 1.8.2 - Remote Shell Upload Exploit (Fri Apr 03 2009 - 19:13:15 EEST)
  • Family Connections 1.8.2 Arbitrary File Upload (Fri Apr 03 2009 - 19:07:51 EEST)
• SEC Consult Research
  • Proxy bypass vulnerability & plain text passwords in LevelOne AMG-2000 (Wed Apr 29 2009 - 12:18:11 EEST)
• Secunia Research
  • Secunia Research: HP OpenView Network Node Manager "ovalarmsrv" Integer Overflow (Tue Apr 28 2009 - 12:05:37 EEST)
  • Secunia Research: Xpdf JBIG2 Symbol Dictionary Buffer Overflow Vulnerability (Fri Apr 17 2009 - 10:40:40 EEST)
  • Secunia Research: CUPS pdftops JBIG2 Symbol Dictionary Buffer Overflow (Fri Apr 17 2009 - 11:26:02 EEST)
  • Secunia Research: Danske Bank e-Sec Control Module Error Logging Buffer Overflow (Thu Apr 16 2009 - 11:00:35 EEST)
  • Secunia Research: Oracle BEA WebLogic Server Plug-ins Certificate Buffer Overflow (Wed Apr 15 2009 - 12:57:34 EEST)
  • Secunia Research: DivX Web Player Stream Format Chunk Buffer Overflow (Wed Apr 15 2009 - 10:37:15 EEST)
  • Secunia Research: Oracle BEA WebLogic Server Plug-ins Integer Overflow (Wed Apr 15 2009 - 12:54:11 EEST)
  • Secunia Research: SAP GUI KWEdit ActiveX Control "SaveDocumentAs()" Insecure Method (Wed Apr 15 2009 - 10:54:51 EEST)
  • Secunia Research: Ghostscript jbig2dec JBIG2 Processing Buffer Overflow (Thu Apr 09 2009 - 17:07:33 EEST)
  • Secunia Research: IrfanView Formats Plug-in XPM Parsing Integer Overflow (Tue Apr 07 2009 - 14:52:20 EEST)
  • Secunia Research: UltraISO Image Parsing Buffer Overflow Vulnerabilities (Wed Apr 01 2009 - 11:38:08 EEST)
  • Secunia Research: UltraISO Image Name Parsing Format String Vulnerabilities (Wed Apr 01 2009 - 11:38:19 EEST)
• secure@symantec.com
  • Re: Symantec Fax Viewer Control v10 (DCCFAXVW.DLL) remote buffer overflow exploit (Thu Apr 30 2009 - 01:14:39 EEST)
• security-alert@hp.com
  • [security bulletin] HPSBMA02400 SSRT080144 rev.2 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code (Wed Apr 29 2009 - 21:57:38 EEST)
  • [security bulletin] HPSBUX02366 SSRT080120 rev.1 - HPUX Running useradd(1M), Local Unauthorized Access (Tue Apr 28 2009 - 15:58:04 EEST)
  • [security bulletin] HPSBMA02424 SSRT080125 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code (Mon Apr 27 2009 - 21:23:40 EEST)
  • [security bulletin] HPSBMA02422 SSRT080146 rev.1 - HP StorageWorks Storage Mirroring, Remote Execution of Arbitrary Code, Denial of Service (DoS), Unauthorized Access (Mon Apr 20 2009 - 21:25:31 EEST)
  • [security bulletin] HPSBMA02414 SSRT080185 rev.1 - HP Storage Essentials Running Secure NaviCLI, Remote Unauthorized Access, Gain Extended Privileges (Mon Apr 20 2009 - 21:24:29 EEST)
  • [security bulletin] HPSBMA02420 SSRT071458 rev.1 - HP ProCurve Manager and HP ProCurve Manager Plus, Remote Unauthorized Access to Data (Thu Apr 09 2009 - 17:59:41 EEST)
  • [security bulletin] HPSBMA02396 SSRT080175 rev.1 - HP OpenView Performance Agent and HP Performance Agent Running on Windows, Remote Execution of Arbitrary Code (Thu Apr 09 2009 - 15:55:14 EEST)
  • [security bulletin] HPSBUX02415 SSRT090023 rev.1 - HP-UX Running PAM Kerberos, Local Privilege Escalation, Unauthorized Access (Tue Apr 07 2009 - 16:04:26 EEST)
  • [security bulletin] HPSBMA02416 SSRT090008 rev.3 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code (Mon Apr 06 2009 - 23:31:15 EEST)
  • [security bulletin] HPSBUX02418 SSRT090002 rev.1 - HP-UX Running OpenSSL, Remote Unauthorized Access (Wed Apr 01 2009 - 16:15:34 EEST)
• security@f-prot.com
  • Re: [IVIZ-08-016] F-Secure f-prot Antivirus for Linux corrupted ELF header Security Bypass (Tue Apr 28 2009 - 15:30:33 EEST)
• security@intern0t.net
  • Re: [Aria-Security.com] vBulletin multiple XSS (Wed Apr 08 2009 - 17:07:19 EEST)
• security@mandriva.com
  • [ MDVSA-2009:101 ] xpdf (Wed Apr 29 2009 - 02:05:00 EEST)
  • [ MDVA-2009:057 ] usermode (Wed Apr 29 2009 - 03:47:00 EEST)
  • [ MDVSA-2009:099 ] openafs (Tue Apr 28 2009 - 02:14:01 EEST)
  • [ MDVSA-2009:098 ] krb5 (Mon Apr 27 2009 - 19:15:01 EEST)
  • [ MDVSA-2009:096-1 ] printer-drivers (Mon Apr 27 2009 - 20:53:00 EEST)
  • [ MDVSA-2009:097 ] clamav (Sat Apr 25 2009 - 01:43:00 EEST)
  • [ MDVSA-2009:097 ] clamav (Sat Apr 25 2009 - 00:55:00 EEST)
  • [ MDVSA-2009:096 ] printer-drivers (Fri Apr 24 2009 - 22:36:00 EEST)
  • [ MDVSA-2009:095 ] ghostscript (Fri Apr 24 2009 - 21:49:01 EEST)
  • [ MDVSA-2009:094 ] mysql (Wed Apr 22 2009 - 19:39:00 EEST)
  • [ MDVSA-2009:093 ] mpg123 (Wed Apr 22 2009 - 11:06:00 EEST)
  • [ MDVSA-2009:092 ] ntp (Mon Apr 13 2009 - 22:17:01 EEST)
  • [ MDVSA-2009:091 ] mod_perl (Sun Apr 12 2009 - 15:23:00 EEST)
  • [ MDVSA-2009:090 ] php (Fri Apr 10 2009 - 19:12:01 EEST)
  • [ MDVSA-2009:089 ] opensc (Fri Apr 10 2009 - 05:13:00 EEST)
  • [ MDVSA-2009:088 ] wireshark (Thu Apr 09 2009 - 21:36:00 EEST)
  • [ MDVSA-2009:087 ] openssl (Sat Apr 04 2009 - 01:39:01 EEST)
  • [ MDVSA-2009:086 ] gstreamer-plugins (Sat Apr 04 2009 - 03:27:00 EEST)
  • [ MDVSA-2009:085 ] gstreamer0.10-plugins-base (Thu Apr 02 2009 - 18:30:01 EEST)
  • [ MDVSA-2009:083 ] mozilla-thunderbird (Wed Apr 01 2009 - 15:40:01 EEST)
  • [ MDVSA-2009:084 ] firefox (Wed Apr 01 2009 - 16:39:00 EEST)
• security@procheckup.com
  • Juniper Advisory (Fri Apr 24 2009 - 19:33:28 EEST)
• sfa@securityfocus.com
  • SecurityFocus Microsoft Newsletter #441 (Sat Apr 25 2009 - 00:18:24 EEST)
  • SecurityFocus Linux Newsletter #436 (Sat Apr 25 2009 - 00:18:29 EEST)
  • SecurityFocus Newsletter #500 (Sat Apr 25 2009 - 00:18:18 EEST)
  • SecurityFocus Linux Newsletter #435 (Fri Apr 17 2009 - 20:02:46 EEST)
  • SecurityFocus Microsoft Newsletter #440 (Fri Apr 17 2009 - 20:02:41 EEST)
  • SecurityFocus Newsletter #499 (Fri Apr 17 2009 - 20:02:36 EEST)
  • SecurityFocus Microsoft Newsletter #439 (Fri Apr 10 2009 - 01:39:54 EEST)
  • SecurityFocus Newsletter #498 (Fri Apr 10 2009 - 01:39:50 EEST)
  • SecurityFocus Linux Newsletter #433 (Mon Apr 06 2009 - 18:52:05 EEST)
  • SecurityFocus Microsoft Newsletter #438 (Mon Apr 06 2009 - 18:51:45 EEST)
  • SecurityFocus Newsletter #497 (Mon Apr 06 2009 - 18:51:41 EEST)
• Stefan Kanthak
  • Windows Update (re-)installs outdated Flash ActiveX on Windows XP (Mon Apr 20 2009 - 19:17:24 EEST)
• Steffen Joeris
  • [SECURITY] [DSA 1782-1] New mplayer packages fix arbitrary code execution (Wed Apr 29 2009 - 10:01:08 EEST)
  • [SECURITY] [DSA 1781-1] New ffmpeg-debian packages fix arbitrary code execution (Wed Apr 29 2009 - 10:00:35 EEST)
  • [SECURITY] [DSA 1775-1] New php-json-ext packages fix denial of service (Mon Apr 20 2009 - 12:28:51 EEST)
  • [SECURITY] [DSA 1774-1] New ejabberd packages fix cross-site scripting (Fri Apr 17 2009 - 10:12:42 EEST)
  • [SECURITY] [DSA 1773-1] New cups packages fix arbitrary code execution (Fri Apr 17 2009 - 05:53:46 EEST)
  • [SECURITY] [DSA 1770-1] New imp4 packages fix cross-site scripting (Mon Apr 13 2009 - 18:10:07 EEST)
  • [SECURITY] [DSA 1765-1] New horde3 packages fix several vulnerabilities (Wed Apr 08 2009 - 16:22:34 EEST)
  • [SECURITY] [DSA 1762-1] New icu packages fix cross site scripting (Thu Apr 02 2009 - 16:41:03 EEST)
• Steve Shockley
  • Re: ZDI-09-018: Symantec Client Security Alert Originator Service Stack Overflow Vulnerability (Wed Apr 29 2009 - 23:54:00 EEST)
• Tavis Ormandy
  • Re: [Bkis-07-2009] 010 Editor Multiple Buffer Overflow Vulnerabilities (Wed Apr 22 2009 - 12:31:25 EEST)
• tech107@gmail.com
  • Re: OSCommerce Session Fixation Vulnerability (Tue Apr 14 2009 - 14:23:55 EEST)
• Thierry Zoller
  • [TZO-17-2009]Trendmicro multiple bypass/evasions (Wed Apr 29 2009 - 17:06:16 EEST)
  • [TZO-16-2009] Nod32 CAB bypass/evasion (Wed Apr 29 2009 - 17:02:24 EEST)
  • Addendum: [TZO-17-2009]Trendmicro multiple bypass/evasions (Wed Apr 29 2009 - 17:20:12 EEST)
  • Errata: [TZO-13-2009] Avira Antivir generic CAB evasion / bypass (Tue Apr 28 2009 - 17:28:22 EEST)
  • [TZO-14-2009] Comodo Antivirus RAR evasion (Mon Apr 27 2009 - 17:41:57 EEST)
  • [TZO-15-2009] Aladdin eSafe generic bypass - Forced release (Mon Apr 27 2009 - 17:49:22 EEST)
  • [TZO-13-2009] Avira Antivir generic CAB evasion / bypass (Mon Apr 27 2009 - 17:39:32 EEST)
  • [TZO-12-2009] SUN / Oracle JVM Remote code execution (Wed Apr 22 2009 - 16:34:03 EEST)
  • Re: Trend Micro OfficeScan Client - DOS (Tue Apr 21 2009 - 19:13:11 EEST)
  • Addendum :[TZO-09-2009] Avast bypass / evasion (Limited details) (Mon Apr 20 2009 - 19:40:43 EEST)
  • [TZO-11-2009] Fortinet bypass / evasion (Limited details) (Fri Apr 17 2009 - 17:42:34 EEST)
  • [TZO-09-2009] NOD32 (Eset) bypass / evasion (Limited details) (Fri Apr 17 2009 - 17:33:50 EEST)
  • [TZO-09-2009] Avast bypass / evasion (Limited details) (Fri Apr 17 2009 - 17:23:25 EEST)
  • [TZO-08-2009] Bitdefender generic bypass/evasion (Fri Apr 17 2009 - 17:08:49 EEST)
  • [TZO-07-2009] F-PROT ZIP Method evasion (Thu Apr 02 2009 - 18:25:37 EEST)
  • [TZO-06-2009] IBM Proventia - Generic bypass (Limited disclosure - see details) (Thu Apr 02 2009 - 18:10:48 EEST)
  • [TZO-05-2009] Clamav 0.94 and below - Evasion /bypass (Thu Apr 02 2009 - 17:27:54 EEST)
• Thijs Kinkhorst
  • [SECURITY] [DSA 1779-1] New apt packages fix several vulnerabilities (Sun Apr 26 2009 - 18:36:06 EEST)
  • [SECURITY] [DSA 1776-1] New slurm-llnl packages fix privilege escalation (Tue Apr 21 2009 - 13:02:31 EEST)
  • [SECURITY] [DSA 1777-1] New git-core packages fix privilege escalation (Tue Apr 21 2009 - 13:22:59 EEST)
• Tobias Heinlein
  • [ GLSA 200904-12 ] Wicd: Information disclosure (Fri Apr 10 2009 - 16:57:05 EEST)
  • [ GLSA 200904-04 ] WeeChat: Denial of Service (Sat Apr 04 2009 - 20:22:54 EEST)
• Tobias Klein
  • [TKADV2009-005] xine-lib Quicktime STTS Atom Integer Overflow (Sat Apr 04 2009 - 13:43:01 EEST)
• Tom Yu
  • MITKRB5-SA-2009-002: ASN.1 decoder frees uninitialized pointer [CVE-2009-0846] (Tue Apr 07 2009 - 21:11:57 EEST)
  • MITKRB5-SA-2009-001: multiple vulnerabilities in SPNEGO, ASN.1 decoder [CVE-2009-0844 CVE-2009-0845 CVE-2009-0847] (Tue Apr 07 2009 - 21:11:37 EEST)
• Tomi Tuominen
  • T2'09: Call for Papers 2009 (Helsinki / Finland) (Mon Apr 27 2009 - 14:48:15 EEST)
• Valery Marchuk
  • [Suspected Spam][Positive Technologies SA 2009-01] PGP Desktop Pgpdisk.sys And Pgpwded.sys Multiple Vulnerabilities (Mon Apr 13 2009 - 18:38:47 EEST)
• Vladimir '3APA3A' Dubrovin
  • Re: Windows Update (re-)installs outdated Flash ActiveX on Windows XP (Wed Apr 22 2009 - 22:00:00 EEST)
• VMware Security Team
  • VMSA-2009-0006 VMware Hosted products and patches for ESX and ESXi resolve a critical security vulnerability (Fri Apr 10 2009 - 19:22:40 EEST)
  • VMSA-2009-0005 VMware Hosted products, VI Client and patches for ESX and ESXi resolve multiple security issues (Sat Apr 04 2009 - 08:22:07 EEST)
  • VMSA-2009-0004 ESX Service Console updates for openssl, bind, and vim (Wed Apr 01 2009 - 05:57:48 EEST)
• vpandey@gmail.com
  • Re: In Response to Bid 34130 Invalid (Sun Apr 12 2009 - 01:25:23 EEST)
  • Bid 34130 Invalid (Fri Apr 10 2009 - 19:36:08 EEST)
• XiaShing@gmail.com
  • Cross-site Scripting vulnerability in Stronghold/2.3 Apache/1.2.6 C2NetUS/2007 (Sat Apr 18 2009 - 13:24:32 EEST)
  • Remote access vulnerability using File Thingie v2.5.4 (Thu Apr 02 2009 - 12:09:03 EEST)
• y3nh4ck3r@gmail.com
  • MULTIPLE REMOTE VULNERABILITIES--Leap CMS 0.1.4--> (Thu Apr 30 2009 - 17:53:58 EEST)
  • SQL INJECTION (SQLi) VULNERABILITY--ProjectCMS v1.0 Beta Final--> (Wed Apr 29 2009 - 17:38:33 EEST)
  • MULTIPLE REMOTE SQL INJECTION VULNERABILITIES---MIM:InfiniX v1.2.003---> (Tue Apr 28 2009 - 17:14:49 EEST)
  • SQL INJECTION (SHELL UPLOAD)--EZ-blog Beta2--> (Mon Apr 27 2009 - 04:03:27 EEST)
  • REMOTE SQL INJECTION (SQLi) VULNERABILITY--Photo-Rigma.BiZ v30--> (Fri Apr 24 2009 - 18:30:25 EEST)
  • FOWLCMS 1.1--Multiple Remote Vulnerabilities--> (Thu Apr 23 2009 - 02:20:47 EEST)
  • MixedCMS 1.0--Multiple Remote Vulnerabilities--> (Tue Apr 21 2009 - 19:29:50 EEST)
  • Multiple Remote Vulnerabilities--SQLi-(INSECURE-COOKIE-HANDLING)-LFI--> (Mon Apr 20 2009 - 17:53:51 EEST)
  • WysGui CMS 1.2 BETA(Insecure Cookie Handling)--Blind-sql-injection-exploit--> (Mon Apr 20 2009 - 08:03:51 EEST)
  • CLAN TIGER CMS 1.1.1 (AUTH BYPASS) SQL-INJECTION (Fri Apr 17 2009 - 22:23:09 EEST)
  • CLAN TIGER CMS--AUTH BYPASS LOGIN FORM (SQL INJECTION)--> (Fri Apr 17 2009 - 21:36:54 EEST)
  • CLAN TIGER CMS--MULTIPLE COOKIES HANDLING VULNERABILITIES--> (Fri Apr 17 2009 - 21:35:44 EEST)
  • CLAN TIGER CMS--(module custompage.php) BLIND SQL INJECTION--> (Fri Apr 17 2009 - 21:38:45 EEST)
  • webSPELL 4.2.0c--XSS (BYPASS BBCODE) COOKIES STEALING VULNERABILITY-- (Thu Apr 16 2009 - 17:43:25 EEST)
• Ying
  • Security tools list: First Version (Thu Apr 30 2009 - 09:47:46 EEST)
  • security tools list (Tue Apr 28 2009 - 13:13:13 EEST)
• ZDI Disclosures
  • ZDI-09-018: Symantec Client Security Alert Originator Service Stack Overflow Vulnerability (Tue Apr 28 2009 - 23:39:12 EEST)
  • ZDI-09-017: Oracle Applications Server 10g Format String Vulnerability (Tue Apr 14 2009 - 23:25:36 EEST)
  • ZDI-09-016: Novell Client/NetIdentity Agent Remote Arbitrary Pointer Dereference Code Execution Vulnerability (Mon Apr 06 2009 - 23:51:00 EEST)

Last message date: Thu Apr 30 2009 - 18:13:14 EEST
Archived on: Thu Apr 30 2009 - 18:13:14 EEST

This archive was generated by hypermail 2b28 : Thu Apr 30 2009 - 18:13:14 EEST