stdin
By Author

• a@a.com
  • Re: PHP Nuke v.8.0 (referer) SQL Injection (Fri May 29 2009 - 13:53:17 EEST)
• abb@scanit.be
  • Sun IDM Arbitrary Commands Execution Vulnerability (Tue May 12 2009 - 17:40:08 EEST)
• Aditya K Sood
  • Advisory - Gmail/Google Doc PDF Repurposing Integrated Attacks - Cookie Hijacking / Stealing (Mon May 11 2009 - 17:05:19 EEST)
  • [SecNiche WhitePaper ] - PDF Silent HTTP Form Repurposing Attacks (Sun May 03 2009 - 21:15:37 EEST)
• Alex Keller
  • speaker Bill Blunden on Rootkits... (Sat May 09 2009 - 06:15:22 EEST)
• Alex Legler
  • [ GLSA 200905-09 ] libsndfile: User-assisted execution of arbitrary code (Wed May 27 2009 - 21:37:21 EEST)
  • [ GLSA 200905-08 ] NTP: Remote execution of arbitrary code (Tue May 26 2009 - 19:06:20 EEST)
  • [ GLSA 200905-07 ] Pidgin: Multiple vulnerabilities (Tue May 26 2009 - 00:59:01 EEST)
  • [ GLSA 200905-05 ] FreeType: Multiple vulnerabilities (Sun May 24 2009 - 21:02:03 EEST)
  • [ GLSA 200905-04 ] GnuTLS: Multiple vulnerabilities (Sun May 24 2009 - 16:33:51 EEST)
  • [ GLSA 200905-03 ] IPSec Tools: Denial of Service (Sun May 24 2009 - 16:20:38 EEST)
• Andrea Barisani
  • [oCERT-2009-004] AjaxTerm session id collision (Mon May 11 2009 - 19:43:41 EEST)
• Andres Riancho
  • [TOOL] moth - vulnerable web application vmware (Fri May 08 2009 - 04:27:03 EEST)
• andrzej.targosz@gmail.com
  • CONFidence 2009 trainings (Tue May 05 2009 - 11:04:54 EEST)
• Ansgar Wiechers
  • Re: Insufficient Authentication vulnerability in Asus notebook (Fri May 15 2009 - 11:56:59 EEST)
  • Re: Insufficient Authentication vulnerability in Asus notebook (Thu May 14 2009 - 21:11:24 EEST)
• arulvadivel1@rediffmail.com
  • Re: POC & exploit for Apache mod_rewrite off-by-one (Tue May 19 2009 - 15:30:27 EEST)
• ascii
  • Re: FormMail 1.92 Multiple Vulnerabilities (Wed May 13 2009 - 14:05:24 EEST)
  • FormMail 1.92 Multiple Vulnerabilities (Tue May 12 2009 - 13:32:56 EEST)
• Ben Hawkes
  • DotNetNuke ErrorPage.aspx Cross-Site Scripting Vulnerability (Fri May 22 2009 - 04:10:36 EEST)
• Benjilenoob
  • Durzosploit v0.1 alpha (Fri May 01 2009 - 13:05:41 EEST)
• Bernhard Mueller
  • SEC Consult SA-20090525-4 :: SonicOS Format String Vulnerability (Tue May 26 2009 - 17:48:10 EEST)
  • SEC Consult SA-20090525-3 :: SonicWALL Global VPN Client Local Privilege Escalation Vulnerability (Tue May 26 2009 - 17:47:29 EEST)
  • SEC Consult SA-20090525-2 :: SonicWALL Global Security Client Local Privilege Escalation Vulnerability (Tue May 26 2009 - 17:46:23 EEST)
  • SEC Consult SA-20090525-1 :: Nortel Contact Center Manager Server Password Disclosure Vulnerability (Tue May 26 2009 - 17:45:06 EEST)
  • SEC Consult SA-20090525-0 :: Nortel Contact Center Manager Server Authentication Bypass Vulnerability (Tue May 26 2009 - 17:43:57 EEST)
• Bkis
  • [Bkis-09-2009] XSS vulnerability in 'Monitor_Bandwidth' - PRTG Traffic Grapher (Thu May 28 2009 - 06:59:51 EEST)
  • [Bkis-08-2009] Microchip MPLAB IDE Buffer Overflow Vulnerability (Mon May 11 2009 - 08:06:47 EEST)
• Bob Fiero
  • Re: Insufficient Authentication vulnerability in Asus notebook (Fri May 15 2009 - 04:41:44 EEST)
  • Re: Insufficient Authentication vulnerability in Asus notebook (Thu May 14 2009 - 18:11:51 EEST)
• bugdigger@yahoo.cn
  • xcon2009 is coming (Tue May 12 2009 - 09:06:17 EEST)
• c3rb3r@videotron.ca
  • Novell Groupwise fails to properly sanitize emails. (Thu May 28 2009 - 22:46:58 EEST)
• Carlos Augusto
  • BugCON '09 has swine influenza!! (Mon May 18 2009 - 09:59:43 EEST)
• Christopher Kruegel
  • Call For Papers – ACM CCS 2009 Workshops (Thu May 28 2009 - 03:03:30 EEST)
• Cisco Systems Product Security Incident Response Team
  • Cisco Security Advisory: CiscoWorks TFTP Directory Traversal Vulnerability (Wed May 20 2009 - 17:49:33 EEST)
• CORE Security Technologies Advisories
  • CORE-2009-0401 - StoneTrip S3DPlayers remote command injection (Thu May 28 2009 - 22:04:02 EEST)
  • CORE-2009-0109 - Multiple XSS in Sun Communications Express (Wed May 20 2009 - 21:01:57 EEST)
• Daniel Hazelton
  • Re: Insufficient Authentication vulnerability in Asus notebook (Thu May 14 2009 - 23:05:29 EEST)
• dann frazier
  • [SECURITY] [DSA 1800-1] New Linux 2.6.26 packages fix several vulnerabilities (Fri May 15 2009 - 22:17:51 EEST)
  • [SECURITY] [DSA 1794-1] New Linux 2.6.18 packages fix several vulnerabilities (Thu May 07 2009 - 02:23:13 EEST)
  • [SECURITY] [DSA 1787-1] New Linux 2.6.24 packages fix several vulnerabilities (Sat May 02 2009 - 21:33:03 EEST)
• darkz.gsa@gmail.com
  • Vanilla v.1.1.7 Cross-Site Scripting (Wed May 27 2009 - 10:54:10 EEST)
  • PHP Nuke v.8.0 (referer) SQL Injection (Wed May 27 2009 - 10:14:46 EEST)
  • Claroline v.1.8.11 Cross-Site Scripting (Fri May 08 2009 - 09:47:17 EEST)
  • Coppermine Photo Gallery 1.4.21 Cross-Site Scripting (Mon May 04 2009 - 12:31:26 EEST)
• David Cantrell
  • Re: FormMail 1.92 Multiple Vulnerabilities (Wed May 13 2009 - 13:10:14 EEST)
• David Sánchez Martín
  • RE: Insufficient Authentication vulnerability in Acer notebooks (Mon May 11 2009 - 16:55:04 EEST)
• ddvulnalert@ddifronline.com
  • DDIVRT-2009-25 IPsession SQL Injection Vulnerability (Thu May 21 2009 - 18:14:22 EEST)
• Devin Carraway
  • [SECURITY] [DSA 1795-1] New ldns packages fix arbitrary code execution (Thu May 07 2009 - 09:18:29 EEST)
• Digital Security Research Group [DSecRG]
  • [DSECRG-09-038] Sun Glassfish Woodstock Project - Linked XSS Vulnerability (Tue May 05 2009 - 17:02:19 EEST)
  • [DSECRG-09-034] Sun Glassfish Enterprise Server - Multiple Linked XSS vulnerabilies (Tue May 05 2009 - 16:59:23 EEST)
• dpo5003@gmail.com
  • Re: Insufficient Authentication vulnerability in Acer notebooks (Tue May 12 2009 - 05:14:50 EEST)
• Dragos Ruiu
  • Re: Five days left to find the oldest data loss incident (Mon May 11 2009 - 19:39:47 EEST)
  • EUSecWest 2009 (May27/28) London Agenda and PacSec 2009 (Nov 4/5) Tokyo CFP deadline: June 1 2009 (Thu May 07 2009 - 01:26:12 EEST)
• Elazar Broad
  • Re: Five days left to find the oldest data loss incident (Tue May 12 2009 - 07:39:59 EEST)
• Felipe M. Aragon
  • Syhunt: A-A-S (Application Access Server) Multiple Security Vulnerabilities (Tue May 12 2009 - 04:05:42 EEST)
• Florian Weimer
  • [SECURITY] [DSA 1787-1] New quagga packages fix denial of service (Mon May 04 2009 - 23:19:03 EEST)
• Garrett M. Groff
  • Re: Insufficient Authentication vulnerability in Acer notebooks (Tue May 12 2009 - 17:17:41 EEST)
• hack.lu 2009 info
  • Call for Papers Hack.lu 2009 (Mon May 04 2009 - 10:54:52 EEST)
• iDefense Labs
  • iDefense Security Advisory 05.20.09: IBM AIX libc MALLOCDEBUG File Overwrite Vulnerability (Wed May 20 2009 - 21:37:10 EEST)
  • iDefense Security Advisory 05.14.09: Multiple Vendor Outside In Multiple Spreadsheet Buffer Overflow Vulnerabilities (Fri May 15 2009 - 23:25:08 EEST)
  • iDefense Security Advisory 05.14.09: Multiple Vendor Outside In Spreadsheet Buffer Overflow Vulnerability (Fri May 15 2009 - 23:19:32 EEST)
  • iDefense Security Advisory 05.14.09: Multiple Vendor Outside In Spreadsheet Integer Overflow Vulnerability (Fri May 15 2009 - 23:07:19 EEST)
  • iDefense Security Advisory 05.14.09: Multiple Vendor Outside In Multiple Integer Overflow Vulnerabilities (Fri May 15 2009 - 22:55:36 EEST)
  • iDefense Security Advisory 05.14.09: Apple Mac OS X xnu Kernel workqueue_additem/workqueue_removeitem Index Validation Vulnerability (Thu May 14 2009 - 18:40:45 EEST)
  • iDefense Security Advisory 05.12.09: Microsoft PowerPoint Notes Container Heap Corruption Vulnerability (Wed May 13 2009 - 02:02:29 EEST)
  • iDefense Security Advisory 05.12.09: Microsoft PowerPoint Build List Memory Corruption Vulnerability (Wed May 13 2009 - 01:41:24 EEST)
  • iDefense Security Advisory 05.12.09: Microsoft PowerPoint Integer Overflow Vulnerability (Wed May 13 2009 - 02:13:24 EEST)
  • iDefense Security Advisory 05.12.09: Microsoft PowerPoint PPT95 Import Multiple Stack Buffer Overflow Vulnerabilities (Wed May 13 2009 - 01:11:52 EEST)
  • iDefense Security Advisory 05.12.09: Microsoft PowerPoint 4.2 Conversion Filter Stack Overflow (Wed May 13 2009 - 00:41:57 EEST)
  • iDefense Security Advisory 05.12.09: Microsoft PowerPoint PPT95 Import Multiple Stack Buffer Overflow Vulnerabilities (Wed May 13 2009 - 01:26:09 EEST)
  • iDefense Security Advisory 05.12.09: Microsoft PowerPoint PPT 4.0 Importer Multiple Stack Buffer Overflow Vulnerabilities (Wed May 13 2009 - 00:58:01 EEST)
  • iDefense Security Advisory 05.12.09: Microsoft PowerPoint 4.2 Conversion Filter Heap Corruption Vulnerability (Wed May 13 2009 - 00:28:52 EEST)
  • iDefense Security Advisory 05.12.09: Microsoft PowerPoint 4.2 Conversion Filter Stack Buffer Overflow Vulnerability (Wed May 13 2009 - 00:13:17 EEST)
• Inferno@Securethoughts.com
  • Exploiting IE8 UTF-7 XSS Vulnerability using Local Redirection (Tue May 12 2009 - 07:53:55 EEST)
  • Universal XSS in all Google Services (Sat May 09 2009 - 05:03:15 EEST)
• info@securitylab.ir
  • ecshop 2.6.2 (Thu May 28 2009 - 18:00:03 EEST)
  • ChinaGames (CGAgent.dll) ActiveX Remote Code Execution Exploit (Sat May 23 2009 - 12:35:46 EEST)
  • LxBlog (Fri May 22 2009 - 12:07:19 EEST)
  • DMXReady Registration Manager Arbitrary File Upload Vulnerability (Wed May 20 2009 - 12:35:28 EEST)
  • Namad Cms Remote File Download (Tue May 19 2009 - 14:52:07 EEST)
  • maxcms2.0 creat new admin exploit (Wed May 13 2009 - 19:15:12 EEST)
• innate@gmx.de
  • about inactive account hijacking (Sat May 02 2009 - 12:05:55 EEST)
• ipsdix@gmail.com
  • Pinnacle Studio 12 "Hollywood FX Compressed Archive" (.hfz) directory traversal vulnerability poc (Wed May 13 2009 - 19:37:25 EEST)
• Jacobo Avariento Gimeno
  • Vpopmail/QmailAdmin User's Quota Multiple Integer Overflows (Fri May 08 2009 - 21:37:46 EEST)
• Jacques Copeau
  • Survey: "MIME/Content-Type-Sniffing" Issues in Image Uploads in Forum Scripts (Thu May 28 2009 - 11:04:40 EEST)
  • “Cross-Site Scripting” vulnerability in MyBB 1.4.5 (Sun May 03 2009 - 14:59:59 EEST)
• Jakob Lell
  • Multiple vulnerabilities in several ATEN IP KVM Switches (Tue May 26 2009 - 15:07:26 EEST)
• Jamie Strandboge
  • [USN-777-1] Ntp vulnerabilities (Wed May 20 2009 - 01:21:24 EEST)
  • [USN-770-1] ClamAV vulnerability (Tue May 05 2009 - 02:06:29 EEST)
• Jan van Niekerk
  • Backdoor in com_rsgallery2 gallery extension for joomla (Tue May 26 2009 - 09:03:32 EEST)
• Jared DeMott
  • Whitepaper (Fri May 29 2009 - 02:01:18 EEST)
• Jeremy Brown
  • Re: Insufficient Authentication vulnerability in Asus notebook (Thu May 14 2009 - 16:37:32 EEST)
• Jim Harrison
  • RE: Insufficient Authentication vulnerability in Asus notebook (Sun May 17 2009 - 19:10:15 EEST)
• Jim Parkhurst
  • Re: Addendum : [TZO-26-2009] Firefox (all?) Denial of Service through unclamped loop (SVG) (Wed May 27 2009 - 18:56:56 EEST)
• jmoss
  • BH USA CFP closing next Tuesday (Fri May 01 2009 - 02:34:37 EEST)
• Jonah Braun
  • Re: Backdoor in com_rsgallery2 gallery extension for joomla (Wed May 27 2009 - 01:08:56 EEST)
• Juha-Matti Laurio
  • Five days left to find the oldest data loss incident (Mon May 11 2009 - 17:29:23 EEST)
• Just1n T1mberlake
  • Re: Insufficient Authentication vulnerability in Asus notebook (Sun May 17 2009 - 01:05:58 EEST)
• Kees Cook
  • [USN-776-1] KVM vulnerabilities (Wed May 13 2009 - 01:29:42 EEST)
  • [USN-775-1] Quagga vulnerability (Wed May 13 2009 - 01:34:28 EEST)
• KF (lists)
  • Re: Insufficient Authentication vulnerability in Asus notebook (Thu May 14 2009 - 21:07:09 EEST)
• kgconference@gmail.com
  • Conference on Cyber Warfare: registration open! (Mon May 18 2009 - 16:14:24 EEST)
• LayerOne Call For Papers
  • LayerOne 2009 - Final Announcement (Mon May 04 2009 - 20:38:22 EEST)
• Luca.carettoni
  • HTTP Parameter Pollution (Tue May 19 2009 - 15:34:03 EEST)
• Marc Deslauriers
  • [USN-776-2] KVM regression (Wed May 13 2009 - 17:17:53 EEST)
  • [USN-774-1] MoinMoin vulnerability (Mon May 11 2009 - 18:21:34 EEST)
  • [USN-773-1] Pango vulnerability (Thu May 07 2009 - 21:27:51 EEST)
  • [USN-772-1] MPFR vulnerability (Thu May 07 2009 - 21:27:13 EEST)
  • [USN-771-1] libmodplug vulnerabilities (Thu May 07 2009 - 21:26:36 EEST)
  • [USN-769-1] libwmf vulnerability (Mon May 04 2009 - 17:46:45 EEST)
• Marc Schoenefeld
  • Hardening OSX against CVE-2008-5353 (Sun May 24 2009 - 20:58:10 EEST)
• Mario Alejandro Vilas Jerez
  • WinAppDbg module v1.1 is out! (Sat May 16 2009 - 05:54:26 EEST)
• mcyr2@csc.com
  • Addonics NAS Adapter FTP Remote Denial of Service (Fri May 01 2009 - 17:15:52 EEST)
• Michael Scheidell
  • Re: Insufficient Authentication vulnerability in Asus notebook (Thu May 14 2009 - 19:25:57 EEST)
• michael@mdempfle.de
  • Re: TinyWebGallery <= 1.7.6 LFI / Remote Code Execution Exploit (Mon May 11 2009 - 18:24:20 EEST)
• Michal Zalewski
  • Re: [Full-disclosure] [TZO-26-2009] Firefox (all?) Denial of Service through unclamped loop (SVG) (Wed May 27 2009 - 21:43:42 EEST)
• Michelangelo Sidagni
  • W3af ninja training class in NYC (Tue May 26 2009 - 23:43:16 EEST)
• Mike Vasquez
  • Re: Insufficient Authentication vulnerability in Asus notebook (Thu May 14 2009 - 18:02:38 EEST)
• Mike Wilson
  • RE: Insufficient Authentication vulnerability in Asus notebook (Thu May 14 2009 - 23:13:38 EEST)
  • RE: Insufficient Authentication vulnerability in Asus notebook (Thu May 14 2009 - 19:17:48 EEST)
• militan.c7@gmail.com
  • Security Advisory: Banks in Australia (Tue May 12 2009 - 16:13:33 EEST)
• Moritz Muehlenhoff
  • [SECURITY] [DSA 1806-1] New cscope packages fix arbitrary code execution (Sun May 24 2009 - 11:27:51 EEST)
  • [SECURITY] [DSA 1805-1] New pidgin packages fix several vulnerabilities (Fri May 22 2009 - 23:04:08 EEST)
  • [SECURITY] [DSA 1799-1] New qemu packages fix several vulnerabilities (Tue May 12 2009 - 00:13:09 EEST)
  • [SECURITY] [DSA 1797-1] New xulrunner packages fix several vulnerabilities (Sat May 09 2009 - 16:00:16 EEST)
  • [SECURITY] [DSA 1785-1] New wireshark packages fix several vulnerabilities (Fri May 01 2009 - 17:46:49 EEST)
• MustLive
  • Re: Insufficient Authentication vulnerability in Acer notebooks (Tue May 26 2009 - 23:54:54 EEST)
  • Re: Insufficient Authentication vulnerability in Acer notebooks (Fri May 15 2009 - 01:02:18 EEST)
  • Insufficient Authentication vulnerability in Asus notebook (Thu May 14 2009 - 16:23:53 EEST)
  • Insufficient Authentication vulnerability in Acer notebooks (Sun May 10 2009 - 16:22:32 EEST)
• Nam Nguyen
  • Re: Universal XSS in all Google Services (Tue May 12 2009 - 13:11:32 EEST)
• nameless
  • Re: Insufficient Authentication vulnerability in Asus notebook (Fri May 15 2009 - 00:09:20 EEST)
  • Re: Insufficient Authentication vulnerability in Asus notebook (Thu May 14 2009 - 19:42:43 EEST)
• naudefj@telkomsa.net
  • Re: FUD Forum < 2.7.1 PHP code injection vurnelability (Mon May 25 2009 - 12:33:57 EEST)
• Nick FitzGerald
  • Re: Symantec Fax Viewer Control v10 (DCCFAXVW.DLL) remote buffer overflow exploit (Fri May 01 2009 - 02:45:50 EEST)
• Nico Golde
  • [SECURITY] [DSA 1804-1] New ipsec-tools packages fix denial of service (Wed May 20 2009 - 17:06:43 EEST)
  • [SECURITY] [DSA 1796-1] New libwmf packages fix denial of service (Thu May 07 2009 - 19:21:33 EEST)
  • [SECURITY] [DSA 1784-1] New freetype packages fix arbitrary code execution (Thu Apr 30 2009 - 21:14:37 EEST)
• Niels Teusink
  • Grabit <= 1.7.2 beta 3 NZB file parsing stack overflow (Mon May 04 2009 - 00:27:56 EEST)
• Noah Meyerhans
  • [SECURITY] [DSA 1793-1] New kdegraphics packages fix multiple vulnerabilities (Wed May 06 2009 - 19:47:53 EEST)
  • [SECURITY] [DSA 1792-1] New drupal6 packages fix multiple vulnerabilities (Wed May 06 2009 - 18:54:22 EEST)
  • [SECURITY] [DSA 1790-1] New xpdf packages fix multiple vulnerabilities (Tue May 05 2009 - 23:05:20 EEST)
• nospam@gmail.it
  • COWON America jetCast 2.0.4.1109 (.mp3) local heap buffer overlow exploit (Tue May 26 2009 - 12:30:49 EEST)
  • Bitweaver <= 2.6 /boards/boards_rss.php / saveFeed() remote code execution exploit (Tue May 12 2009 - 04:44:40 EEST)
• Oliver Goebel
  • [IMF 2009] 3rd Call - Deadline Extended (Tue May 26 2009 - 22:03:21 EEST)
• Patrick Webster
  • SonicWALL SSL-VPN Appliance Format String Vulnerability (Fri May 29 2009 - 08:14:19 EEST)
• pen-test@comodo.com
  • Persistent XSS in Kayako Support Suite (Thu May 07 2009 - 00:34:59 EEST)
• Pierre-Yves Rofes
  • [ GLSA 200905-02 ] Cscope: User-assisted execution of arbitrary code (Sun May 24 2009 - 16:05:12 EEST)
  • [ GLSA 200905-06 ] acpid: Denial of Service (Sun May 24 2009 - 21:41:43 EEST)
• Piotr Bania
  • PAPER: Generic Unpacking of Self-modifying, Aggressive, Packed Binary Programs (Mon May 25 2009 - 19:18:32 EEST)
  • PAPER: Dynamic Data Flow Analysis via Virtual Code Integration (aka The SpiderPig case) (Mon May 18 2009 - 15:32:01 EEST)
• publists@enablesecurity.com
  • Armorlogic Profense Web Application Firewall 2.4 multiple vulnerabilities. (Wed May 20 2009 - 13:05:08 EEST)
• RedTeam Pentesting GmbH
  • [RT-SA-2009-001] IceWarp WebMail Server: Cross Site Scripting in Email View (Tue May 05 2009 - 15:43:48 EEST)
  • [RT-SA-2009-003] IceWarp WebMail Server: SQL Injection in Groupware Component (Tue May 05 2009 - 15:47:51 EEST)
  • [RT-SA-2009-002] IceWarp WebMail Server: User-assisted Cross Site Scripting in RSS Feed Reader (Tue May 05 2009 - 15:46:27 EEST)
  • [RT-SA-2009-004] IceWarp WebMail Server: Client-Side Specification of "Forgot Password" eMail Content (Tue May 05 2009 - 15:49:16 EEST)
• rembrandt
  • multiple vendor - PF NULL pointer dereference (Fri May 01 2009 - 00:22:05 EEST)
• Robert Buchholz
  • [ GLSA 200905-01 ] Asterisk: Multiple vulnerabilities (Sat May 02 2009 - 20:54:49 EEST)
• robi@ecn.org
  • Re: MULTIPLE REMOTE SQL INJECTION VULNERABILITIES---MIM:InfiniX v1.2.003---> (Thu May 14 2009 - 12:39:23 EEST)
• roland.gruber.extern@unicreditgroup.eu
  • Serena Dimensions CM Desktop Client does not validate the server SSL certificate (Fri May 22 2009 - 10:57:09 EEST)
• romain
  • Re: [WEB SECURITY] [TOOL] moth - vulnerable web application vmware (Fri May 08 2009 - 06:41:14 EEST)
• rPath Update Announcements
  • rPSA-2009-0091-1 cyrus-sasl cyrus-sasl-server (Thu May 28 2009 - 00:56:26 EEST)
  • rPSA-2009-0095-1 tshark wireshark (Thu May 28 2009 - 01:36:56 EEST)
  • rPSA-2009-0092-1 ntp ntp-utils (Thu May 28 2009 - 01:03:53 EEST)
  • rPSA-2009-0084-1 kernel (Sat May 16 2009 - 05:39:42 EEST)
  • rPSA-2009-0086-1 postgresql postgresql-contrib postgresql-server (Tue May 19 2009 - 22:03:40 EEST)
• Secunia Research
  • Secunia Research: Sun Solaris "sadmind" Buffer Overflow Vulnerability (Sat May 23 2009 - 10:35:48 EEST)
  • Secunia Research: Sun Solaris "sadmind" Integer Overflow Vulnerability (Sat May 23 2009 - 10:37:13 EEST)
  • Secunia Research: Microsoft PowerPoint Atom Parsing Buffer Overflows (Tue May 12 2009 - 20:56:04 EEST)
  • Secunia Research: Garmin Communicator Plug-In Domain Locking Security Bypass (Thu May 07 2009 - 10:28:06 EEST)
  • Secunia Research: IBM Tivoli Storage Manager Remote Agent Service Buffer Overflows (Mon May 04 2009 - 15:13:27 EEST)
• security-alert@hp.com
  • [security bulletin] HPSBUX02429 SSRT090058 rev.1 - HP-UX Running Java, Remote Execution of Arbitrary Code and Other Vulnerabilities (Wed May 27 2009 - 16:42:21 EEST)
  • [security bulletin] HPSBPI02398 SSRT080166 rev.3 - Certain HP LaserJet Printers, HP Color LaserJet Printers, and HP Digital Senders, Remote Unauthorized Access to Files (Wed May 20 2009 - 19:57:25 EEST)
  • [security bulletin] HPSBMA02427 SSRT090069 rev.1 - HP Remote Graphics Software (RGS) Sender Running Easy Login, Remote Unauthorized Access (Fri May 15 2009 - 16:06:40 EEST)
  • [security bulletin] HPSBMA02426 SSRT090053 rev.1 - HP System Management Homepage (SMH) for Linux and Windows Running PHP and OpenSSL, Remote Cross Site Scripting (XSS), Unauthorized Access (Fri May 15 2009 - 16:03:15 EEST)
  • [security bulletin] HPSBMA02428 SSRT090048 rev.1 - HP System Management Homepage (SMH) for Linux and Windows, Remote Cross Site Scripting (XSS) (Mon May 18 2009 - 21:49:50 EEST)
  • [security bulletin] HPSBMA02417 SSRT090031 rev.1 - HP Data Protector Express and HP Data Protector Express Single Server Edition (SSE), Local Denial of Service (DoS), Execution of Arbitrary Code (Thu May 14 2009 - 16:26:10 EEST)
  • [security bulletin] HPSBMA02348 SSRT080033 rev.2 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code, Denial of Service (DoS) (Mon May 11 2009 - 21:41:00 EEST)
  • [security bulletin] HPSBMA02349 SSRT080043 rev.3 - HP OpenView Network Node Manager (OV NNM), Remote Unauthorized Access to Data (Mon May 11 2009 - 21:41:40 EEST)
  • [security bulletin] HPSBUX02366 SSRT080120 rev.2 - HPUX Running useradd(1M), Local Unauthorized Access (Fri May 08 2009 - 16:18:38 EEST)
  • [security bulletin] HPSBMA02419 SSRT090060 rev.1 - Insight Control Suite For Linux (ICE-LX) Multiple Remote Vulnerabilities In Nagios (Tue May 05 2009 - 23:51:02 EEST)
  • [security bulletin] HPSBMA02374 SSRT080046 rev.2 - HP OpenView Network Node Manager (OV NNM), Remote Denial of Service (DoS) (Mon May 04 2009 - 20:35:55 EEST)
  • [security bulletin] HPSBMA02425 SSRT080091 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code (Mon May 04 2009 - 20:33:45 EEST)
• security@intern0t.net
  • Re: [InterN0T] Achievo 1.3.4 - XSS Vulnerability (Fri May 29 2009 - 10:31:13 EEST)
  • Re: Re: [InterN0T] AMember 3.1.7 - Multiple Vulnerabilities (Fri May 29 2009 - 00:27:00 EEST)
  • [InterN0T] Achievo 1.3.4 - XSS Vulnerability (Thu May 28 2009 - 23:52:12 EEST)
  • [InterN0T] AdPeeps 8.5d1 - XSS and HTML Injection Vulnerabilities (Wed May 27 2009 - 22:16:54 EEST)
  • [InterN0T] AMember 3.1.7 - Multiple Vulnerabilities (Sun May 24 2009 - 19:35:15 EEST)
• security@mandriva.com
  • [ MDVSA-2009:123 ] opensc (Wed May 27 2009 - 22:12:00 EEST)
  • [ MDVSA-2009:122 ] squirrelmail (Sat May 23 2009 - 13:24:00 EEST)
  • [ MDVSA-2009:121 ] lcms (Fri May 22 2009 - 00:23:00 EEST)
  • [ MDVSA-2009:120 ] openssl (Thu May 21 2009 - 19:11:01 EEST)
  • [ MDVSA-2009:119 ] kernel (Tue May 19 2009 - 22:55:00 EEST)
  • [ MDVSA-2009:113 ] cyrus-sasl (Mon May 18 2009 - 15:08:01 EEST)
  • [ MDVSA-2009:114 ] ipsec-tools (Mon May 18 2009 - 16:36:00 EEST)
  • [ MDVSA-2009:115 ] phpMyAdmin (Mon May 18 2009 - 17:47:00 EEST)
  • [ MDVSA-2009:116 ] gnutls (Mon May 18 2009 - 18:17:00 EEST)
  • [ MDVSA-2009:118 ] kernel (Tue May 19 2009 - 21:58:00 EEST)
  • [ MDVSA-2009:117 ] ntp (Tue May 19 2009 - 17:50:00 EEST)
  • [ MDVSA-2009:112 ] ipsec-tools (Thu May 14 2009 - 00:44:01 EEST)
  • [ MDVSA-2009:110 ] squirrelmail (Wed May 13 2009 - 02:10:00 EEST)
  • [ MDVSA-2009:111-1 ] firefox (Wed May 13 2009 - 16:18:00 EEST)
  • [ MDVSA-2009:111 ] firefox (Wed May 13 2009 - 05:17:01 EEST)
  • [ MDVSA-2009:109 ] quagga (Sun May 10 2009 - 18:32:00 EEST)
  • [ MDVSA-2009:108 ] zsh (Thu May 07 2009 - 16:06:01 EEST)
  • [ MDVSA-2009:107 ] acpid (Thu May 07 2009 - 01:51:01 EEST)
  • [ MDVSA-2009:106 ] libwmf (Wed May 06 2009 - 01:02:00 EEST)
  • [ MDVSA-2009:105 ] memcached (Mon May 04 2009 - 16:05:00 EEST)
  • [ MDVSA-2009:102 ] apache (Fri May 01 2009 - 16:37:01 EEST)
  • [ MDVSA-2009:104 ] udev (Fri May 01 2009 - 06:09:00 EEST)
  • [ MDVSA-2009:103 ] udev (Fri May 01 2009 - 06:01:00 EEST)
• security@nruns.com
  • n.runs-SA-2009.001 - OS X CFNetwork advisory (Fri May 15 2009 - 11:47:14 EEST)
• sfa@securityfocus.com
  • SecurityFocus Microsoft Newsletter #444 (Fri May 29 2009 - 02:14:10 EEST)
  • SecurityFocus Newsletter #503 (Fri May 29 2009 - 02:14:04 EEST)
  • SecurityFocus Linux Newsletter #439 (Fri May 29 2009 - 02:14:15 EEST)
  • SecurityFocus Newsletter #502 (Fri May 08 2009 - 02:01:52 EEST)
  • SecurityFocus Linux Newsletter #438 (Fri May 08 2009 - 02:02:00 EEST)
  • SecurityFocus Microsoft Newsletter #443 (Fri May 08 2009 - 02:01:56 EEST)
  • SecurityFocus Linux Newsletter #437 (Fri May 01 2009 - 01:20:25 EEST)
  • SecurityFocus Microsoft Newsletter #442 (Fri May 01 2009 - 01:20:20 EEST)
  • SecurityFocus Newsletter #501 (Fri May 01 2009 - 01:20:16 EEST)
• Shakacon
  • Shakacon Security Conference - Trainers and Speakers Finalized (Wed May 20 2009 - 01:39:31 EEST)
• SmOk3
  • Arcade Trade Script XSS (Mon May 25 2009 - 22:03:33 EEST)
• srublev@ptsecurity.ru
  • (whitepaper) Microsoft WPAD Technology Weaknesses [PTResearch Team] (Fri May 29 2009 - 18:59:19 EEST)
• Stefan Frei
  • New Browser Security Paper: Why Silent Updates Boost Security (Wed May 06 2009 - 00:46:23 EEST)
• Steffen Joeris
  • [SECURITY] [DSA 1798-1] New pango1.0 packages fix arbitrary code execution (Sun May 10 2009 - 12:29:15 EEST)
  • [SECURITY] [DSA 1791-1] New moin packages fix cross-site scripting (Wed May 06 2009 - 14:41:28 EEST)
  • [SECURITY] [DSA 1786-1] New acpid packages fix denial of service (Sat May 02 2009 - 04:52:49 EEST)
• Stephen Mullins
  • Re: The security tools list, new version with more than 200 new tools! (Tue May 12 2009 - 20:52:09 EEST)
• Steve Friedl
  • New paper: Understanding Microsoft's KB971492 IIS WebDAV Vuln (Wed May 27 2009 - 22:51:50 EEST)
• Steve Quan
  • RE: Insufficient Authentication vulnerability in Asus notebook (Thu May 14 2009 - 23:36:49 EEST)
• Steve Shockley
  • Re: [security bulletin] HPSBMA02426 SSRT090053 rev.1 - HP System Management Homepage (SMH) for Linux and Windows Running PHP and OpenSSL, Remote Cross Site Scripting (XSS), Unauthorized Access (Wed May 20 2009 - 22:46:10 EEST)
• support@adpeeps.com
  • Re: [InterN0T] AdPeeps 8.5d1 - XSS and HTML Injection Vulnerabilities (Fri May 29 2009 - 02:05:40 EEST)
• Susan Bradley
  • Re: Insufficient Authentication vulnerability in Acer notebooks (Thu May 28 2009 - 23:41:53 EEST)
  • Re: Insufficient Authentication vulnerability in Acer notebooks (Wed May 20 2009 - 03:42:30 EEST)
  • Re: Insufficient Authentication vulnerability in Asus notebook (Fri May 15 2009 - 09:38:00 EEST)
  • Re: Insufficient Authentication vulnerability in Asus notebook (Thu May 14 2009 - 22:39:29 EEST)
  • Re: Insufficient Authentication vulnerability in Asus notebook (Thu May 14 2009 - 22:35:33 EEST)
  • Re: Insufficient Authentication vulnerability in Asus notebook (Thu May 14 2009 - 17:16:58 EEST)
• swhite@securestate.com
  • Novell GroupWise Web Access Multiple XSS (Thu May 21 2009 - 19:18:44 EEST)
• Tavis Ormandy
  • Re: [TZO-27-2009] Firefox Denial of Service (Keygen) (Thu May 28 2009 - 14:01:07 EEST)
• Thierry Zoller
  • [TZO-28-2009] - Avira Antivir generic RAR,CAB,ZIP (Fri May 29 2009 - 14:25:10 EEST)
  • Re[2]: [TZO-27-2009] Firefox Denial of Service (Keygen) (Thu May 28 2009 - 20:48:21 EEST)
  • [TZO-27-2009] Firefox Denial of Service (Keygen) (Thu May 28 2009 - 04:14:38 EEST)
  • Re[2]: [Full-disclosure] [TZO-26-2009] Firefox (all?) Denial of Service through unclamped loop (SVG) (Wed May 27 2009 - 22:03:07 EEST)
  • Re[2]: [Full-disclosure] Addendum : [TZO-26-2009] Firefox (all?) Denial of Service through unclamped loop (SVG) (Wed May 27 2009 - 21:38:18 EEST)
  • Addendum : [TZO-26-2009] Firefox (all?) Denial of Service through unclamped loop (SVG) (Tue May 26 2009 - 21:13:21 EEST)
  • [TZO-26-2009] Firefox (all?) Denial of Service through unclamped loop (SVG) (Tue May 26 2009 - 15:20:52 EEST)
  • [TZO-25-2009] Panda generic evasion (TAR) (Fri May 22 2009 - 16:57:35 EEST)
  • [TZO-24-2009] Panda generic evasion (CAB) (Fri May 22 2009 - 16:55:40 EEST)
  • Fwd: [Full-disclosure] IIS6 + webdav and unicode rides again in 2009 (Sat May 16 2009 - 02:22:46 EEST)
  • [TZO-22-2009] Bitdefender generic evasion of heuristics (for PDF) (Mon May 18 2009 - 18:37:23 EEST)
  • [TZO-23-2009] Avira antivir generic evasion of heuristics (for PDF) (Mon May 18 2009 - 18:38:46 EEST)
  • [TZO-21-2009] Fprot CAB bypass / evasion (Sat May 09 2009 - 15:07:52 EEST)
  • Changes : [TZO-17-2009]Trendmicro multiple bypass/evasions (Sat May 09 2009 - 13:24:24 EEST)
  • [TZO-20-2009] AVG ZIP evasion / bypass (Sat May 09 2009 - 15:05:35 EEST)
  • Update: [TZO-15-2009] Aladdin eSafe generic bypass - Forced release (Thu May 07 2009 - 11:55:12 EEST)
  • [TZO-18-2009] Mcafee multiple evasions/bypasses (RAR, ZIP) (Fri May 01 2009 - 22:10:53 EEST)
• Thijs Kinkhorst
  • [SECURITY] [DSA 1802-2] New squirrelmail packages correct incomplete fix (Thu May 21 2009 - 21:50:30 EEST)
  • [SECURITY] [DSA 1803-1] New nsd packages fix denial of service (Wed May 20 2009 - 17:43:39 EEST)
  • [SECURITY] [DSA 1802-1] New squirrelmail packages fix several vulnerabilities (Tue May 19 2009 - 20:17:37 EEST)
  • [SECURITY] [DSA 1801-1] New ntp packages fix several vulnerabilities (Tue May 19 2009 - 16:55:33 EEST)
  • [SECURITY] [DSA 1789-1] New php5 packages fix several vulnerabilities (Mon May 04 2009 - 23:57:57 EEST)
• Thomas Sader
  • eggdrop/windrop remote crash vulnerability (Fri May 15 2009 - 06:54:08 EEST)
• TK147@TheArchitect.com
  • Re: [InterN0T] AMember 3.1.7 - Multiple Vulnerabilities (Thu May 28 2009 - 19:19:56 EEST)
• Tobias Klein
  • [TKADV2009-006] libsndfile/Winamp VOC Processing Heap Buffer Overflow (Sat May 16 2009 - 11:21:27 EEST)
• Tomas Kuliavas
  • Re: MULTIPLE REMOTE SQL INJECTION VULNERABILITIES---MIM:InfiniX v1.2.003---> (Thu May 14 2009 - 19:42:29 EEST)
• travesti@travesti.in
  • TinyWebGallery <= 1.7.6 LFI / Remote Code Execution Exploit (Sun May 10 2009 - 04:42:20 EEST)
• Ulises2k
  • Re: Security tools list: First Version (Thu Apr 30 2009 - 18:05:08 EEST)
• Vladimir '3APA3A' Dubrovin
  • Re[2]: Addendum : [TZO-26-2009] Firefox (all?) Denial of Service through unclamped loop (SVG) (Wed May 27 2009 - 21:59:18 EEST)
• VMware Security team
  • VMSA-2009-0007 VMware Hosted products and ESX and ESXi patches resolve security issues (Fri May 29 2009 - 07:09:52 EEST)
• vuln_research@princeofnigeria.org
  • NetDecision TFTP Server 4.2 TFTP Directory Traversal (Sun May 17 2009 - 19:45:35 EEST)
• VUPEN Security Research
  • Novell GroupWise Internet Agent Remote Buffer Overflow Vulnerabilities (Fri May 22 2009 - 05:17:36 EEST)
• WebAppSec
  • New WebApp security paper: Anti-fraud Image Solutions (Fri May 01 2009 - 05:50:26 EEST)
• Will Drewry
  • [oCERT-2009-006] Android improper package verification when using shared uids (Sat May 23 2009 - 00:29:53 EEST)
  • [oCERT-2009-001] Pango integer overflow in heap allocation size calculations (Thu May 07 2009 - 20:42:27 EEST)
• Williams, James K
  • CA20090126-01: CA Anti-Virus Engine Detection Evasion Multiple Vulnerabilities [Updated] (Tue May 12 2009 - 17:19:35 EEST)
  • CA20090429-01: CA ARCserve Backup Apache HTTP Server Multiple Vulnerabilities (Thu Apr 30 2009 - 22:49:30 EEST)
• y3nh4ck3r@gmail.com
  • MULTIPLE REMOTE VULNERABILITIES --Small Pirates v-2.1--> (Thu May 28 2009 - 01:10:42 EEST)
  • MULTIPLE SQL INJECTION VULNERABILITIES --Joomla Component 'Boy Scout Advancement' <= v-0.3 (com_bsadv)--> (Mon May 25 2009 - 04:26:59 EEST)
  • MULTIPLE REMOTE VULNERABILITIES --MiniTwitter<=v0.3-Beta--> (Sat May 23 2009 - 01:50:26 EEST)
  • MULTIPLE SQL INJECTION VULNERABILITIES --Flash Quiz Beta 2--> (Thu May 21 2009 - 19:45:09 EEST)
  • (GET vars 'x' & 'y') ADMIN FUNCTION EXECUTION--Jorp v-1.3.05.09--> (Wed May 20 2009 - 20:15:51 EEST)
  • MULTIPLE REMOTE VULNERABILITIES --my-Gesuad 0.9.14--> (Fri May 15 2009 - 22:28:41 EEST)
  • MULTIPLE REMOTE VULNERABILITIES --my-colex 1.4.2--> (Fri May 15 2009 - 22:28:04 EEST)
  • INSECURE COOKIE HANDLING VULNERABILITIES --Dog Pedigree Online Database v1.0.1-Beta--> (Tue May 19 2009 - 19:47:23 EEST)
  • (GET var 'id') BLIND SQL INJECTION EXPLOIT --Dog Pedigree Online Database v1.0.1-Beta --> (Tue May 19 2009 - 19:48:00 EEST)
  • Re: Re: MULTIPLE REMOTE SQL INJECTION VULNERABILITIES---MIM:InfiniX v1.2.003---> (Thu May 14 2009 - 20:16:54 EEST)
  • MULTIPLE CODE INJECTION VULNERABILITIES --TUENTI--SPAIN--> (Thu May 14 2009 - 19:47:57 EEST)
  • MULTIPLE SQL INJECTION VULNERABILITIES --Shutter v-0.1.1--> (Thu May 14 2009 - 19:49:09 EEST)
  • (GET var 'member') BLIND SQL INJECTION EXPLOIT --FAMILY CONNECTIONS <= v1.9 --> (Wed May 13 2009 - 19:30:37 EEST)
  • User options changer (SQLi) EXPLOIT --Bigace CMS -stable release- 2.5--> (Tue May 12 2009 - 20:01:40 EEST)
  • (POST var 'rating') BLIND SQL INJECTION--microTopic v1 Initial Release--> (Mon May 11 2009 - 20:16:28 EEST)
  • BLIND SQL INJECTION exploit (GET var 'AlbumID')--RTWebalbum 1.0.462--> (Fri May 08 2009 - 19:39:42 EEST)
  • SQL INJECTION VULNERABILITIES--ST-Gallery version 0.1 alpha--> (Thu May 07 2009 - 18:13:50 EEST)
  • BLIND SQL INJECTION EXPLOIT--TemaTres 1.0.3--> (Tue May 05 2009 - 20:15:52 EEST)
  • MULTIPLE REMOTE VULNERABILITIES--TemaTres 1.0.3--> (Tue May 05 2009 - 20:07:02 EEST)
  • MULTPLE REMOTE VULNERABILITIES --ProjectCMS v-1.1 Beta--> (Mon May 04 2009 - 20:17:46 EEST)
  • USER OPTIONS CHANGER EXPLOIT --MiniTwitter v0.2-Beta+-> (Fri May 01 2009 - 17:24:53 EEST)
  • MULTIPLE SQL INJECTION VULNERABILITIES --MiniTwitter v0.2-Beta--> (Fri May 01 2009 - 17:26:14 EEST)
  • BLIND SQL INJECTION--Leap CMS 0.1.4--> (Thu Apr 30 2009 - 19:47:53 EEST)
• Ying
  • Re: The security tools list, new version with more than 200 new tools! (Wed May 13 2009 - 15:58:17 EEST)
  • Re: The security tools list, new version with more than 200 new tools! (Tue May 12 2009 - 21:28:19 EEST)
  • The security tools list, new version with more than 200 new tools! (Tue May 12 2009 - 16:02:16 EEST)
• ZDI Disclosures
  • ZDI-09-021: Apple QuickTime PICT Unspecified Tag Heap Overflow Vulnerability (Thu May 28 2009 - 01:40:32 EEST)
  • ZDI-09-022: Apple Safari Malformed SVGList Parsing Code Execution Vulnerability (Tue May 19 2009 - 22:07:05 EEST)
  • ZDI-09-023: Apple OS X ATSServer Compact Font Format Parsing Memory Corruption Vulnerability (Tue May 19 2009 - 22:08:27 EEST)
  • ZDI-09-020: Microsoft Office PowerPoint Notes Container Heap Overflow Vulnerability (Tue May 12 2009 - 22:21:59 EEST)
  • ZDI-09-019: Microsoft Office PowerPoint OutlineTextRefAtom Parsing Memory Corruption Vulnerability (Tue May 12 2009 - 22:21:54 EEST)
• Øystein Larsen
  • Re: Insufficient Authentication vulnerability in Acer notebooks (Tue May 12 2009 - 10:20:00 EEST)

Last message date: Fri May 29 2009 - 22:18:47 EEST
Archived on: Fri May 29 2009 - 22:18:50 EEST

This archive was generated by hypermail 2b28 : Fri May 29 2009 - 22:18:50 EEST