stdin
By Author

• Adam Baldwin
  • [NGENUITY] - Spiceworks Multiple Vulnerabilities (XSS & CSRF) (Sat Aug 08 2009 - 22:16:21 EEST)
  • [NGENUITY] - Ticket Subject Persistent XSS in Kayako SupportSuite (Sat Aug 08 2009 - 19:07:37 EEST)
• advisories@intern0t.net
  • Re: DoS vulnerability in Google Chrome (Wed Aug 26 2009 - 11:41:18 EEST)
  • RE: DoS vulnerability in Google Chrome (Tue Aug 25 2009 - 10:03:00 EEST)
• Alex Legler
  • [ GLSA 200908-06 ] CDF: User-assisted execution of arbitrary code (Wed Aug 19 2009 - 00:37:06 EEST)
  • [ GLSA 200908-09 ] DokuWiki: Local file inclusion (Wed Aug 19 2009 - 00:37:46 EEST)
  • [ GLSA 200908-10 ] Dillo: User-assisted execution of arbitrary code (Wed Aug 19 2009 - 00:37:51 EEST)
  • [ GLSA 200908-08 ] ISC DHCP: dhcpd Denial of Service (Wed Aug 19 2009 - 00:37:39 EEST)
  • [ GLSA 200908-05 ] Subversion: Remote execution of arbitrary code (Wed Aug 19 2009 - 00:36:51 EEST)
  • [ GLSA 200908-07 ] Perl Compress::Raw modules: Denial of Service (Wed Aug 19 2009 - 00:37:23 EEST)
  • [ GLSA 200908-02 ] BIND: Denial of Service (Sat Aug 01 2009 - 23:04:23 EEST)
• Alexandr Polyakov
  • [DSECRG-09-033] SAP Netweaver UDDI - XSS Security Vulnerability (Wed Aug 12 2009 - 16:04:50 EEST)
• Amit Klein
  • Writeup by Amit Klein (Trusteer): "Google Chrome 3.0 (Beta) Math.random vulnerability" (Mon Aug 31 2009 - 14:25:54 EEST)
• Andrew Horton
  • [MORNINGSTAR-2009-01] Multiple security issues in Open Auto Classifieds version <= 1.5.9 (Wed Aug 26 2009 - 21:14:18 EEST)
• Andrzej Targosz
  • CONFidence 2009, November, CfP (Tue Aug 25 2009 - 00:46:13 EEST)
• ascii
  • Vtiger CRM 5.0.4 Multiple Vulnerabilities (Tue Aug 18 2009 - 11:49:13 EEST)
• Asterisk Security Team
  • AST-2009-005: Remote Crash Vulnerability in SIP channel driver (Tue Aug 11 2009 - 17:00:15 EEST)
  • AST-2009-004: Remote Crash Vulnerability in RTP stack (Mon Aug 03 2009 - 07:30:14 EEST)
• Bkis
  • [Bkis-11-2009] ProShow Gold Buffer Overflow Vulnerabilities (Thu Aug 20 2009 - 07:29:17 EEST)
• Bonsai - Information Security
  • [BONSAI] SQL Injection in CS-Cart (Tue Aug 04 2009 - 21:49:05 EEST)
• brad.antoniewicz@foundstone.com
  • ntop <= 3.3.10 Basic Authentication Null Pointer Denial of Service (Tue Aug 18 2009 - 20:13:05 EEST)
• Cisco Systems Product Security Incident Response Team
  • Cisco Security Advisory: Cisco Unified Communications Manager Denial of Service Vulnerabilities (Wed Aug 26 2009 - 19:00:00 EEST)
  • Cisco Security Advisory: Firewall Services Module Crafted ICMP Message Vulnerability (Wed Aug 19 2009 - 20:12:26 EEST)
  • Cisco Security Advisory: Cisco Security Advisory: Cisco IOS XR Software Border Gateway Protocol Vulnerability (Sat Jul 18 2009 - 19:25:00 EEST)
• ClubHack
  • ClubHack2009: Call for Papers/Speakers (Fri Aug 14 2009 - 22:02:42 EEST)
• contact.fingers@gmail.com
  • TheGreenBow VPN Client tgbvpn.sys DoS and Potential Local (Mon Aug 17 2009 - 19:08:41 EEST)
• contact@onuryilmaz.info
  • JibberBook GuestBook 2.3 Multiple Vulnerabilities (Wed Aug 12 2009 - 01:22:18 EEST)
• core collapse
  • ASUS Eee PC and other series: BIOS SMM privilege escalation vulnerabilities (Fri Aug 07 2009 - 22:08:04 EEST)
• CORE Security Technologies Advisories
  • CORE-2009-0727: Libpurple msn_slplink_process_msg() Arbitrary Write Vulnerability (Wed Aug 19 2009 - 00:52:29 EEST)
• dann frazier
  • [SECURITY] [DSA 1872-1] New Linux 2.6.18 packages fix several vulnerabilities (Mon Aug 24 2009 - 21:59:41 EEST)
  • [SECURITY] [DSA 1865-1] New Linux 2.6.18 packages fix several vulnerabilities (Sun Aug 16 2009 - 23:52:35 EEST)
  • [SECURITY] [DSA 1864-1] New Linux 2.6.24 packages fix privilege escalation (Sun Aug 16 2009 - 19:42:51 EEST)
  • [SECURITY] [DSA 1862-1] New Linux 2.6.26 packages fix privilege escalation (Fri Aug 14 2009 - 22:31:10 EEST)
• David Litchfield
  • Oracle 11g (11.1.0.6) Password Policy and Compliance (Tue Aug 25 2009 - 23:45:41 EEST)
  • Bypassing DBMS_ASSERT in certain situations (Tue Aug 25 2009 - 23:25:15 EEST)
  • Oracle PL/SQL Injection Flaw in REPCAT_RPC.VALIDATE_REMOTE_RC (Tue Aug 25 2009 - 23:18:58 EEST)
• DeepSec Conference
  • DeepSec 2009 - Preliminary Schedule is online (Sat Aug 15 2009 - 16:38:45 EEST)
• dm@securityfocus.com
  • (Reposting truncated message) Re: ntop <= 3.3.10 Basic Authentication Null Pointer Denial of Service (Tue Aug 18 2009 - 22:11:29 EEST)
• dvlabs
  • TPTI-09-06: Microsoft Windows Workstation Service NetrGetJoinInformation Heap Corruption Vulnerability (Tue Aug 11 2009 - 21:04:07 EEST)
• elkekas@gmail.com
  • Re: Re: Re: Back door trojan in acajoom-3.2.6 for joomla (Thu Aug 13 2009 - 12:26:11 EEST)
• Eloy Paris
  • Re: Clear Text Storage of Password in CS-MARS v6.0.4 and Earlier (Fri Aug 21 2009 - 20:00:16 EEST)
• faghani@nsec.ir
  • Elkapax CMS Cross site scripting vulnerability (Thu Aug 13 2009 - 09:03:19 EEST)
  • Chavoosh CMS SQL Injection Vulnerability (Wed Aug 12 2009 - 13:15:43 EEST)
• Florian Weimer
  • [SECURITY] [DSA 1833-2] New dhcp3 packages fix arbitrary code execution (Tue Aug 25 2009 - 22:57:28 EEST)
  • [SECURITY] [DSA 1860-1] New Ruby packages fix several issues (Wed Aug 12 2009 - 22:49:54 EEST)
  • [SECURITY] [DSA 1855-1] New subversion packages fix arbitrary code execution (Sat Aug 08 2009 - 22:07:27 EEST)
  • [SECURITY] [DSA 1854-1] New APR packages fix arbitrary code execution (Sat Aug 08 2009 - 21:55:09 EEST)
  • [SECURITY] [DSA 1849-1] New xml-security-c packages fix signature forgery (Sun Aug 02 2009 - 16:48:02 EEST)
  • [SECURITY] [DSA 1848-1] New znc packages fix remote code execution (Sun Aug 02 2009 - 16:17:42 EEST)
• Francesco Bianchino
  • Radvision's Scopia Cross Site Scripting Vulnerabilities (Mon Aug 24 2009 - 12:46:59 EEST)
• gamr-14@hotmail.com
  • Infinity <= v2.X.X (Local File Disclosure/Auth Bypass) Vulnerabilities (Fri Aug 21 2009 - 19:49:27 EEST)
• Glenn Rossi
  • Re: Multiple vulnerabilities in several ATEN IP KVM Switches (Mon Aug 17 2009 - 18:56:13 EEST)
• gmcbr0 gmcbr0
  • Sql injection in OCS Inventory NG Server 1.2.1 (Tue Aug 11 2009 - 21:05:59 EEST)
• hadikiamarsi@hotmail.com
  • XSS in SqLiteManager (Mon Aug 10 2009 - 09:59:13 EEST)
• Henri Lindberg - Smilehouse Oy
  • Xerox WorkCentre multiple models Denial of Service (Tue Aug 25 2009 - 15:11:30 EEST)
• hever@hever.com.br
  • Cuteflow Version 2.10.3 "edituser.php" Security Bypass Vulnerability (Fri Aug 21 2009 - 21:17:35 EEST)
• hkm
  • 2WIRE Gateway Authentication Bypass & Password Reset (Wed Aug 12 2009 - 06:54:46 EEST)
• iDefense Labs
  • iDefense Security Advisory 08.25.09: Autonomy KeyView Excel File SST Parsing Integer Overflow Vulnerability (Tue Aug 25 2009 - 23:05:52 EEST)
  • iDefense Security Advisory 07.28.09: Multiple Vendor Microsoft ATL/MFC ActiveX Security Bypass Vulnerability (Thu Aug 20 2009 - 07:20:15 EEST)
  • iDefense Security Advisory 08.11.09: Multiple Vendor Microsoft ATL/MFC ActiveX Type Confusion Vulnerability (Thu Aug 20 2009 - 07:32:43 EEST)
  • iDefense Security Advisory 07.28.09: Multiple Vendor Microsoft ATL/MFC ActiveX Information Disclosure Vulnerability (Thu Aug 20 2009 - 07:24:35 EEST)
  • iDefense Security Advisory 08.11.09: Microsoft Office Web Components 2000 Buffer Overflow Vulnerability (Thu Aug 20 2009 - 00:02:45 EEST)
  • iDefense Security Advisory 08.07.09: Adobe Flash Player Invalid Loader Object Reference Vulnerability (Fri Aug 07 2009 - 20:49:03 EEST)
  • iDefense Security Advisory 08.06.09: Microsoft Internet Explorer HTML TIME 'ondatasetcomplete' Use After Free Vulnerability (Fri Aug 07 2009 - 00:06:00 EEST)
  • iDefense Security Advisory 08.06.09: Adobe Flash Player URL Parsing Heap Overflow Vulnerability (Thu Aug 06 2009 - 22:57:15 EEST)
  • iDefense Security Advisory 08.06.09: IBM AIX libC _LIB_INIT_DBG Arbitrary File Creation Vulnerability (Thu Aug 06 2009 - 22:38:13 EEST)
  • iDefense Security Advisory 08.06.09: Sun Java Runtime Environment (JRE) Pack200 Decompression Integer Overflow Vulnerability (Thu Aug 06 2009 - 22:19:26 EEST)
• Inferno
  • Bypassing OWASP ESAPI XSS Protection inside Javascript (Thu Aug 20 2009 - 11:18:00 EEST)
  • Hijacking Safari 4 Top Sites with Phish Bombs (Wed Aug 12 2009 - 03:27:16 EEST)
• itweb@itweb.fi
  • SQL Injection vulnerabilities in Subdreamer CMS (Thu Aug 20 2009 - 19:19:28 EEST)
• James C. Slora Jr.
  • IE7 Script (Tue Aug 11 2009 - 17:48:58 EEST)
• Jamie Strandboge
  • [USN-817-1] Thunderbird vulnerabilities (Fri Aug 21 2009 - 02:42:26 EEST)
  • [USN-809-1] GnuTLS vulnerabilities (Thu Aug 20 2009 - 02:55:26 EEST)
  • [USN-812-1] Subversion vulnerability (Sat Aug 08 2009 - 03:56:30 EEST)
  • [USN-813-2] Apache vulnerability (Sat Aug 08 2009 - 04:06:16 EEST)
  • [USN-813-1] apr vulnerability (Sat Aug 08 2009 - 03:57:13 EEST)
  • [USN-813-3] apr-util vulnerability (Sat Aug 08 2009 - 08:56:47 EEST)
  • [USN-811-1] Firefox and Xulrunner vulnerability (Wed Aug 05 2009 - 05:34:16 EEST)
  • [USN-810-2] NSPR update (Wed Aug 05 2009 - 01:00:59 EEST)
  • [USN-810-1] NSS vulnerabilities (Wed Aug 05 2009 - 00:23:07 EEST)
• Jeffrey Walton
  • Fwd: Follow-up: Heartland CEO on Data Breach: QSAs Let Us Down (Thu Aug 13 2009 - 16:58:31 EEST)
• jerome.athias@free.fr
  • Multiple Flaws in Huawei SmartAX MT880 [was: Multiple Flaws in Huawei D100] (Wed Aug 05 2009 - 18:31:57 EEST)
• katie.french@cgifederal.com
  • OpenCms (7.5.0) - Vulnerability: Cross-Site Scripting, Phishing Through Frames, Application Error (Thu Aug 06 2009 - 22:25:52 EEST)
• Kees Cook
  • [USN-818-1] curl vulnerability (Mon Aug 17 2009 - 21:42:06 EEST)
  • [USN-816-1] fetchmail vulnerability (Thu Aug 13 2009 - 01:56:28 EEST)
  • [USN-814-1] openjdk-6 vulnerabilities (Tue Aug 11 2009 - 08:54:45 EEST)
• Kiwicon <3
  • KIWICON ]|[ - 2009 Call For Papers (Thu Aug 13 2009 - 05:43:53 EEST)
• Kotas, Kevin J
  • CA20090818-02: Security Notice for CA Internet Security Suite (Tue Aug 18 2009 - 23:38:40 EEST)
  • CA20090818-01: Security Notice for CA Host-Based Intrusion Prevention System (Tue Aug 18 2009 - 23:38:47 EEST)
  • CA20090806-01: Security Notice for Data Transport Services (Fri Aug 07 2009 - 02:22:34 EEST)
  • CA20090806-02: Security Notice for Unicenter Asset Portfolio Management, Unicenter Desktop and Server Management, Unicenter Patch Management (Fri Aug 07 2009 - 02:22:21 EEST)
• labs@gdssecurity.com
  • Adobe Flex 3.3 SDK DOM-Based XSS (Wed Aug 19 2009 - 23:04:52 EEST)
• Leon Juranic
  • Safari buffer overflow (Tue Aug 18 2009 - 12:23:30 EEST)
• Lists
  • Piwigo SQL Injection Vulnerability - Security Advisory - SOS-09-007 (Mon Aug 17 2009 - 09:40:21 EEST)
  • Plume CMS Multiple SQL Injection Vulnerabilities - Security Advisory - SOS-09-006 (Wed Aug 12 2009 - 09:02:44 EEST)
• Luciano Bello
  • [SECURITY] [DSA 1858-1] New imagemagick packages fix several vulnerabilities (Mon Aug 10 2009 - 20:05:37 EEST)
• ma+bt@dt.e-technik.uni-dortmund.de
  • fetchmail security announcement fetchmail-SA-2009-01 (CVE-2009-2666) (Thu Aug 06 2009 - 03:12:57 EEST)
• Marc Deslauriers
  • [USN-826-1] Mono vulnerabilities (Wed Aug 26 2009 - 22:31:55 EEST)
  • [USN-825-1] libvorbis vulnerability (Mon Aug 24 2009 - 22:02:18 EEST)
  • [USN-824-1] PHP vulnerability (Mon Aug 24 2009 - 22:01:44 EEST)
  • [USN-823-1] KDE-Graphics vulnerabilities (Mon Aug 24 2009 - 22:01:12 EEST)
  • [USN-822-1] KDE-Libs vulnerabilities (Mon Aug 24 2009 - 22:00:38 EEST)
  • [USN-820-1] Pidgin vulnerability (Thu Aug 20 2009 - 16:32:39 EEST)
  • [USN-802-2] Apache regression (Wed Aug 19 2009 - 18:32:12 EEST)
  • [USN-815-1] libxml2 vulnerabilities (Tue Aug 11 2009 - 21:41:05 EEST)
• Matt Lewis
  • Subversion heap overflow (Fri Aug 07 2009 - 17:47:24 EEST)
• Mike Duncan
  • Re: [DSECRG-09-022] Adobe Coldfusion 8 Multiple Linked XSS Vulnerabilies (Mon Aug 17 2009 - 18:25:55 EEST)
• mikey27@hotmail.com
  • SAP Business One 2005 Remote Buffer Overflow Vulnerability. (Tue Aug 04 2009 - 18:22:01 EEST)
• Moritz Muehlenhoff
  • [SECURITY] [DSA 1875-1] New ikiwiki packages fix information disclosure (Mon Aug 31 2009 - 20:27:34 EEST)
  • [SECURITY] [DSA 1874-1] New nss packages fix several vulnerabilities (Wed Aug 26 2009 - 22:01:32 EEST)
  • [SECURITY] [DSA 1873-1] New xulrunner packages fix spoofing vulnerabilities (Wed Aug 26 2009 - 21:51:42 EEST)
• murderkey@gmail.com
  • Microsoft Wordpad Memory Exhaustion (msftedit) (Wed Aug 12 2009 - 20:45:59 EEST)
• MustLive
  • Cross-Site Scripting vulnerability in Mozilla, Firefox, SeaMonkey, Orca Browser and Maxthon (Fri Aug 28 2009 - 22:07:40 EEST)
  • Re: DoS vulnerability in Google Chrome (Tue Aug 25 2009 - 19:07:49 EEST)
  • DoS vulnerability in Google Chrome (Sun Aug 23 2009 - 18:21:23 EEST)
  • DoS vulnerabilities in Mozilla Firefox, Internet Explorer and Chrome (Fri Aug 21 2009 - 20:58:21 EEST)
  • Cross-Site Scripting vulnerabiliy in Firefox and Opera (Sat Aug 01 2009 - 21:45:44 EEST)
• Nick Freeman
  • WizzRSS Firefox Extension - Privileged Code Injection (Mon Aug 24 2009 - 07:49:50 EEST)
  • ScribeFire Firefox Extension - Privileged Code Injection (Mon Aug 24 2009 - 07:48:49 EEST)
  • Feed Sidebar Firefox Extension - Privileged Code Injection (Mon Aug 24 2009 - 07:23:28 EEST)
• Nico Golde
  • [SECURITY] [DSA 1870-1] New pidgin packages fix arbitrary code execution (Thu Aug 20 2009 - 01:29:43 EEST)
  • [SECURITY] [DSA 1869-1] New curl packages fix SSL certificate verification weakness (Thu Aug 20 2009 - 00:22:07 EEST)
  • [SECURITY] [DSA 1863-1] New zope2.10/zope2.9 packages fix arbitrary code execution (Sat Aug 15 2009 - 18:56:00 EEST)
  • [SECURITY] [DSA 1861-1] New libxml packages fix several issues (Thu Aug 13 2009 - 23:40:37 EEST)
  • [SECURITY] [DSA 1859-1] New libxml2 packages fix several issues (Mon Aug 10 2009 - 21:55:11 EEST)
  • [SECURITY] [DSA 1843-2] New squid3 packages fix regression (Sun Aug 09 2009 - 19:54:21 EEST)
  • [SECURITY] [DSA 1852-1] New fetchmail packages fix SSL certificate verification weakness (Fri Aug 07 2009 - 18:31:48 EEST)
  • [SECURITY] [DSA 1853-1] New memcached packages fix arbitrary code execution (Fri Aug 07 2009 - 18:33:32 EEST)
• Oliver Goebel
  • [IMF 2009] Call for Participation (Thu Aug 13 2009 - 21:13:15 EEST)
• ostoure.sazan@gmail.com
  • Easy Music Player 1.0.0.2 (wav) Universal Local Buffer Exploit (Sat Aug 15 2009 - 04:08:33 EEST)
  • new vulnerability founded by ostoure (Thu Aug 13 2009 - 23:36:02 EEST)
• Packet Storm
  • Packet Storm is back online. (Sat Aug 22 2009 - 08:11:14 EEST)
• palmprehacker@gmail.com
  • Palm Pre WebOS 1.0.4 Remote execution of arbitrary HTML code vulnerability (Tue Aug 04 2009 - 06:06:32 EEST)
• phcoder@gmail.com
  • Re: [IVIZ-08-009] Grub Legacy Security Model bypass exploiting wrong BIOS API usage (Tue Aug 25 2009 - 18:27:34 EEST)
• Przemyslaw Frasunek
  • FreeBSD <= 6.1 kqueue() NULL pointer dereference (Sat Aug 22 2009 - 20:06:23 EEST)
  • Re: Linux NULL pointer dereference due to incorrect proto_ops initializations (Fri Aug 14 2009 - 14:11:37 EEST)
• Ramon de Carvalho Valle
  • Illustrating the Linux sock_sendpage() NULL pointer dereference on Power/Cell BE Architecture (Mon Aug 31 2009 - 15:32:02 EEST)
• RedTeam Pentesting GmbH
  • [RT-SA-2009-005] Papoo CMS: Authenticated Arbitrary Code Execution (Mon Aug 10 2009 - 15:32:56 EEST)
• research@dsecrg.com
  • [DSECRG-09-051] Adobe JRun 4 Multiple XSS (Mon Aug 17 2009 - 17:46:45 EEST)
  • [DSECRG-09-052] Adobe JRun 4 Directory Traversal Vulnerabilities (Mon Aug 17 2009 - 17:46:47 EEST)
  • [DSECRG-09-022] Adobe Coldfusion 8 Multiple Linked XSS Vulnerabilies (Mon Aug 17 2009 - 17:44:20 EEST)
• Robert Buchholz
  • [ GLSA 200908-04 ] Adobe products: Multiple vulnerabilities (Fri Aug 07 2009 - 15:01:32 EEST)
  • [ GLSA 200908-03 ] libTIFF: User-assisted execution of arbitrary code (Fri Aug 07 2009 - 14:49:24 EEST)
• Roberto Suggi Liverani
  • Update Scanner - Firefox Extension - Chrome Privileged Code Injection (Mon Aug 24 2009 - 15:27:16 EEST)
  • CoolPreviews - Firefox Extension - Chrome Privileged Code Injection (Mon Aug 24 2009 - 15:25:56 EEST)
• Roee Hay
  • Advisory: Adobe Flash Player and AIR AVM2 intf_count Integer Overflow Remote Code Execution (CVE-2009-1869) (Sun Aug 02 2009 - 05:13:12 EEST)
• rPath Update Announcements
  • rPSA-2009-0123-1 apr-util (Mon Aug 24 2009 - 22:38:00 EEST)
  • rPSA-2009-0124-1 curl (Mon Aug 24 2009 - 22:48:27 EEST)
  • rPSA-2009-0122-1 idle python (Mon Aug 24 2009 - 22:36:53 EEST)
  • rPSA-2009-0121-1 kernel open-vm-tools (Wed Aug 19 2009 - 01:10:31 EEST)
  • rPSA-2009-0119-1 apr apr-util (Wed Aug 19 2009 - 01:06:40 EEST)
  • rPSA-2009-0118-1 mod_dav_svn subversion (Wed Aug 19 2009 - 01:05:28 EEST)
• ryan.wessels@kohler.com
  • Clear Text Storage of Password in CS-MARS v6.0.4 and Earlier (Fri Aug 21 2009 - 18:24:18 EEST)
• s.leberre@sysdream.com
  • Local Kernel Buffer Overflow vulnerability in Avast! (Mon Aug 24 2009 - 15:09:01 EEST)
• saik0pod@gmail.com
  • Re: common dns misconfiguration can lead to "same site" scripting (Mon Aug 17 2009 - 23:38:53 EEST)
• Salvatore Fresta aka Drosophila
  • Discloser 0.0.4-rc2 SQL Injection Vulnerability (Mon Aug 03 2009 - 12:27:02 EEST)
  • Blink Blog System Authentication Bypass (Mon Aug 03 2009 - 20:28:04 EEST)
• Schmidt, Chris
  • RE: Bypassing OWASP ESAPI XSS Protection inside Javascript (Thu Aug 20 2009 - 18:28:03 EEST)
• Scott Miles
  • [CSS09-01] SlideShowPro Director File Disclosure Vulnerability (Thu Aug 06 2009 - 19:23:15 EEST)
• secse@sislab.no
  • CFP: International workshop on Secure Software Engineering (Fri Aug 07 2009 - 14:06:45 EEST)
• security curmudgeon
  • Re: Elkapax CMS Cross site scripting vulnerability (Wed Aug 19 2009 - 08:09:30 EEST)
• Security Research Publications
  • Windows 7 Firewire Attacks - and Defense Techniques (Thu Aug 13 2009 - 15:13:36 EEST)
• security-alert@hp.com
  • [security bulletin] HPSBTU02453 SSRT091037 rev.2 - HP Tru64 UNIX or HP Tru64 Internet Express Running BIND Server, Denial of Service (DoS) (Tue Aug 25 2009 - 20:51:44 EEST)
  • [security bulletin] HPSBMA02448 SSRT061231 rev.1 - HP Network Node Manager (NNM) Remote Console Running on Windows, Local Execution of Arbitrary Code, Denial of Service (DoS) (Tue Aug 18 2009 - 22:30:44 EEST)
  • [security bulletin] HPSBMA02447 SSRT090062 rev.1 - Insight Control Suite For Linux (ICE-LX) Cross Site Request Forgery (CSRF) , Remote Execution of Arbitrary Code, Denial of Service (DoS), and Other Vulnerabilities (Thu Aug 13 2009 - 15:46:43 EEST)
  • [security bulletin] HPSBUX02437 SSRT090038 rev.2 - HP-UX Running XNTP, Remote Execution of Arbitrary Code (Wed Aug 12 2009 - 15:41:26 EEST)
  • [security bulletin] HPSBTU02454 SSRT080172 rev.1 - HP Internet Express for Tru64 UNIX Running Samba, Remote Information Disclosure (Wed Aug 12 2009 - 00:06:12 EEST)
  • [security bulletin] HPSBUX02450 SSRT090141 rev1 - HP-UX ttrace(2), Local Denial of Service (DoS) (Tue Aug 11 2009 - 16:23:56 EEST)
  • [security bulletin] HPSBTU02453 SSRT091037 rev.1 - HP Tru64 UNIX BIND Server, Denial of Service (DoS) (Fri Aug 07 2009 - 16:03:04 EEST)
  • [security bulletin] HPSBOV02452 SSRT090161 rev.1 - HP TCP/IP Services for OpenVMS BIND Server Remote Denial of Service (DoS) (Fri Aug 07 2009 - 16:02:34 EEST)
  • [security bulletin] HPSBUX02451 SSRT090137 rev.1 - HP-UX Running BIND, Remote Denial of Service (DoS) (Fri Aug 07 2009 - 16:02:06 EEST)
  • [security bulletin] HPSBUX02181 SSRT061289 rev.4 - HP-UX Running IPFilter, Remote Denial of Service (DoS) (Mon Aug 03 2009 - 21:06:00 EEST)
  • [security bulletin] HPSBMA02445 SSRT090058 rev.1 - HP Serviceguard Manager, Remote Execution of Arbitrary Code, Denial of Service (DoS) (Mon Aug 03 2009 - 16:08:00 EEST)
• security@mandriva.com
  • [ MDVSA-2009:224 ] postfix (Mon Aug 31 2009 - 00:52:01 EEST)
  • [ MDVSA-2009:223 ] xerces-c (Sun Aug 30 2009 - 21:00:00 EEST)
  • [ MDVSA-2009:222 ] squirrelmail (Fri Aug 28 2009 - 21:11:01 EEST)
  • [ MDVSA-2009:221 ] libneon0.27 (Tue Aug 25 2009 - 02:23:01 EEST)
  • [ MDVSA-2009:220 ] davfs (Mon Aug 24 2009 - 22:19:00 EEST)
  • [ MDVSA-2009:219 ] kompozer (Mon Aug 24 2009 - 21:18:01 EEST)
  • [ MDVSA-2009:218 ] w3c-libwww (Mon Aug 24 2009 - 18:37:00 EEST)
  • [ MDVSA-2009:217 ] mozilla-thunderbird (Mon Aug 24 2009 - 01:13:00 EEST)
  • [ MDVSA-2009:216 ] mozilla-thunderbird (Mon Aug 24 2009 - 00:40:00 EEST)
  • [ MDVSA-2009:215 ] audacity (Mon Aug 24 2009 - 00:22:00 EEST)
  • [ MDVSA-2009:214 ] python-celementtree (Sun Aug 23 2009 - 23:37:00 EEST)
  • [ MDVSA-2009:213 ] wxgtk (Sun Aug 23 2009 - 22:53:00 EEST)
  • [ MDVSA-2009:213 ] wxgtk (Sun Aug 23 2009 - 21:57:00 EEST)
  • [ MDVSA-2009:212 ] python (Sun Aug 23 2009 - 21:30:01 EEST)
  • [ MDVSA-2009:212 ] python (Sun Aug 23 2009 - 21:12:00 EEST)
  • [ MDVSA-2009:211 ] expat (Sun Aug 23 2009 - 20:37:02 EEST)
  • [ MDVSA-2009:210 ] gnutls (Fri Aug 21 2009 - 06:35:01 EEST)
  • [ MDVSA-2009:209 ] java-1.6.0-openjdk (Fri Aug 21 2009 - 03:54:01 EEST)
  • [ MDVSA-2009:208 ] libgadu (Thu Aug 20 2009 - 20:36:01 EEST)
  • [ MDVSA-2009:207 ] perl-Compress-Raw-Bzip2 (Thu Aug 20 2009 - 01:09:01 EEST)
  • [ MDVSA-2009:206 ] wget (Wed Aug 19 2009 - 02:29:00 EEST)
  • [ MDVSA-2009:205 ] kernel (Tue Aug 18 2009 - 03:21:00 EEST)
  • [ MDVSA-2009:204 ] wxgtk (Mon Aug 17 2009 - 03:13:00 EEST)
  • [ MDVSA-2009:203 ] curl (Sat Aug 15 2009 - 19:03:00 EEST)
  • [ MDVSA-2009:202 ] memcached (Fri Aug 14 2009 - 21:23:01 EEST)
  • [ MDVSA-2009:201 ] fetchmail (Wed Aug 12 2009 - 23:16:01 EEST)
  • [ MDVSA-2009:200 ] libxml (Wed Aug 12 2009 - 17:43:01 EEST)
  • [ MDVSA-2009:197 ] nss (Sat Aug 08 2009 - 00:59:00 EEST)
  • [ MDVSA-2009:199 ] subversion (Sun Aug 09 2009 - 02:26:00 EEST)
  • [ MDVSA-2009:198 ] firefox (Sat Aug 08 2009 - 01:17:00 EEST)
  • [ MDVSA-2009:161-1 ] squid (Sat Aug 08 2009 - 15:14:00 EEST)
  • [ MDVSA-2009:196 ] samba (Fri Aug 07 2009 - 19:45:01 EEST)
  • [ MDVSA-2009:195-1 ] apr (Thu Aug 06 2009 - 22:32:01 EEST)
  • [ MDVSA-2009:195 ] apr (Thu Aug 06 2009 - 17:55:00 EEST)
  • [ MDVSA-2009:194 ] wireshark (Thu Aug 06 2009 - 06:17:00 EEST)
  • [ MDVSA-2009:193 ] ruby (Thu Aug 06 2009 - 02:10:00 EEST)
  • [ MDVSA-2009:192 ] phpmyadmin (Wed Aug 05 2009 - 17:07:00 EEST)
  • [ MDVSA-2009:191 ] OpenEXR (Mon Aug 03 2009 - 01:31:00 EEST)
  • [ MDVSA-2009:190 ] OpenEXR (Mon Aug 03 2009 - 01:21:00 EEST)
  • [ MDVSA-2009:189 ] apache-mod_auth_mysql (Sat Aug 01 2009 - 17:29:00 EEST)
  • [ MDVSA-2009:188 ] php4-eaccelerator (Sat Aug 01 2009 - 06:21:00 EEST)
  • [ MDVSA-2009:187 ] nagios (Sat Aug 01 2009 - 05:40:00 EEST)
  • [ MDVSA-2009:186 ] firebird (Sat Aug 01 2009 - 04:52:01 EEST)
  • [ MDVSA-2009:185 ] firefox (Sat Aug 01 2009 - 01:41:00 EEST)
• sfa@securityfocus.com
  • SecurityFocus Newsletter #510 (Wed Aug 19 2009 - 20:30:42 EEST)
  • SecurityFocus Linux Newsletter #446 (Wed Aug 19 2009 - 20:30:50 EEST)
  • SecurityFocus Microsoft Newsletter #451 (Wed Aug 19 2009 - 20:30:46 EEST)
  • SecurityFocus Microsoft Newsletter #450 (Thu Aug 13 2009 - 02:19:16 EEST)
  • SecurityFocus Newsletter #509 (Thu Aug 13 2009 - 02:19:10 EEST)
  • SecurityFocus Linux Newsletter #445 (Thu Aug 13 2009 - 02:19:21 EEST)
• Shatter
  • Team SHATTER Security Advisory: Buffer Overflow in Resource Manager of Oracle Database - Plan name parameter (Fri Aug 28 2009 - 18:20:40 EEST)
  • Team SHATTER Security Advisory: Multiple SQL Injection vulnerabilities in Oracle Enterprise Manager (Tue Aug 04 2009 - 02:31:16 EEST)
• spymeta@yahoo.com
  • DUgallery 3.0 / Remote Admin Bug (Sun Aug 16 2009 - 21:39:20 EEST)
• ss_contacts@hotmail.com
  • ICQ 6.5 HTML-injection vulnerability (Fri Aug 14 2009 - 13:42:46 EEST)
• starchang@aten.com.tw
  • Re: Multiple vulnerabilities in several ATEN IP KVM Switches (Wed Aug 12 2009 - 13:34:18 EEST)
• Stefan Kanthak
  • Vulnerable MSVC++ runtime distributed with OpenOffice.org 3.1.1 for Windows (Mon Aug 31 2009 - 19:42:53 EEST)
• Steffen Joeris
  • [SECURITY] [DSA 1871-2] New wordpress packages fix regression (Thu Aug 27 2009 - 04:39:01 EEST)
  • [SECURITY] [DSA 1871-1] New wordpress packages fix several vulnerabilities (Sun Aug 23 2009 - 06:41:14 EEST)
  • [SECURITY] [DSA 1866-1] New kdegraphics packages fix several vulnerabilities (Wed Aug 19 2009 - 15:32:52 EEST)
  • [SECURITY] [DSA 1867-1] New kdelibs packages fix several vulnerabilities (Wed Aug 19 2009 - 15:33:02 EEST)
  • [SECURITY] [DSA 1868-1] New kde4libs packages fix several vulnerabilities (Wed Aug 19 2009 - 15:33:14 EEST)
  • [SECURITY] [DSA 1857-1] New camlimages packages fix arbitrary code execution (Mon Aug 10 2009 - 03:55:14 EEST)
  • [SECURITY] [DSA 1851-1] New gst-plugins-bad0.10 packages fix arbitrary code execution (Thu Aug 06 2009 - 11:28:57 EEST)
  • [SECURITY] [DSA 1850-1] New libmodplug packages fix arbitrary code execution (Tue Aug 04 2009 - 11:57:58 EEST)
• Tavis Ormandy
  • Linux NULL pointer dereference due to incorrect proto_ops initializations (Thu Aug 13 2009 - 21:57:53 EEST)
• the_3dit0r@yahoo.com
  • EesySec Personal Firewall Remote Buffer Overflow Exploit (Tue Aug 25 2009 - 17:20:40 EEST)
  • FLIP Flash Album Deluxe 1.8.407.1 (.fft File) Crash Vulnerability Exploit (Mon Aug 24 2009 - 12:31:13 EEST)
  • AiO ( All into One) Flash Mixer 3 (.afp File) Crash Vulnerability Exploit (Mon Aug 24 2009 - 12:17:15 EEST)
  • WM Downloader (.Smi/ .Ram/ .pls/ .smil/ .wax/ .wpl File) Local Buffer Overflow Exploit (Sun Aug 23 2009 - 22:51:05 EEST)
• Thijs Kinkhorst
  • [SECURITY] [DSA 1856-1] New mantis packages fix information leak (Sat Aug 08 2009 - 22:34:12 EEST)
• Thor (Hammer of God)
  • RE: H4RDW4RE presentations updated (Wed Aug 26 2009 - 17:21:02 EEST)
  • H4RDW4RE presentations updated (Wed Aug 26 2009 - 00:07:01 EEST)
• Timothy (Thor) Mullen
  • Chris Paget Defcon RFID Presentation Slides Now Online (Thu Aug 13 2009 - 04:25:48 EEST)
• Tobias Heinlein
  • [ GLSA 200908-01 ] OpenSC: Multiple vulnerabilities (Sat Aug 01 2009 - 15:37:00 EEST)
• Tomi Tuominen
  • t2?09 Challenge - Free Tickets Available (Thu Aug 20 2009 - 15:14:37 EEST)
• Vadim Okun
  • Static analysis tool exposition (SATE) 2009 - call for participation (Thu Aug 13 2009 - 00:35:11 EEST)
• Valery Marchuk
  • [PT-2009-05] CA Internet Security Suite Denial of Service Vulnerability (Wed Aug 26 2009 - 12:56:56 EEST)
  • [PT-2008-09] Microsoft Windows MSMQ Privilege Escalation Vulnerability (Wed Aug 12 2009 - 15:31:38 EEST)
• VMware Security team
  • VMSA-2009-0010 VMware Hosted products update libpng and Apache HTTP Server (Fri Aug 21 2009 - 09:38:49 EEST)
• Walter Sprenger
  • Authentication Bypass of Snom Phone Web Interface (Thu Aug 13 2009 - 00:46:27 EEST)
• wojwar@yahoo.com
  • Re: Multiple Flaws in Huawei D100 (Tue Aug 04 2009 - 23:12:05 EEST)
• XiaShing@gmail.com
  • HyperVM File Permissions Local Vulnerability (Tue Aug 25 2009 - 18:46:39 EEST)
• ZDI Disclosures
  • ZDI-09-059: Oracle Secure Backup Administration Server Multiple Command Injection Vulnerabilities (Wed Aug 19 2009 - 01:58:26 EEST)
  • ZDI-09-058: Oracle Secure Backup Administration Server Authentication Bypass Vulnerability (Wed Aug 19 2009 - 01:52:57 EEST)
  • ZDI-09-054: Microsoft Office OWC10.Spreadsheet ActiveX msDataSourceObject() Heap Corruption Vulnerability (Tue Aug 11 2009 - 23:24:24 EEST)
  • ZDI-09-055: Microsoft Office OWC10 ActiveX Control Loading and Unloading Heap Corruption Vulnerability (Tue Aug 11 2009 - 23:25:11 EEST)
  • ZDI-09-056: Microsoft Office OWC10.Spreadsheet ActiveX BorderAround() Heap Corruption Vulnerability (Tue Aug 11 2009 - 23:25:48 EEST)
  • ZDI-09-053: Microsoft Windows WINS Service Heap Overflow Vulnerability (Tue Aug 11 2009 - 23:23:39 EEST)
  • ZDI-09-057: Microsoft Remote Desktop Client Arbitrary Code Execution Vulnerability (Tue Aug 11 2009 - 23:26:28 EEST)
  • ZDI-09-052: CA Unicenter Software Delivery dtscore.dll Stack Overflow Vulnerability (Fri Aug 07 2009 - 23:54:31 EEST)
  • ZDI-09-051: EMC Replication Manager Client Control Service Remove Code Execution Vulnerability (Fri Aug 07 2009 - 23:53:17 EEST)
  • ZDI-09-050: Sun Java Web Start JPEG Header Parsing Integer Overflow Vulnerability (Wed Aug 05 2009 - 20:46:24 EEST)
  • ZDI-09-049: Sun Java Pack200 Decoding Inner Class Count Integer Overflow Vulnerability (Wed Aug 05 2009 - 20:45:51 EEST)
  • ZDI-09-048: Microsoft Internet Explorer CSS Behavior Memory Corruption Vulnerability (Wed Aug 05 2009 - 20:45:11 EEST)
  • ZDI-09-047: Microsoft Internet Explorer getElementsByTagName Memory Corruption Vulnerability (Wed Aug 05 2009 - 20:44:36 EEST)
• ziad@subdreamer.com
  • Re: SQL Injection vulnerabilities in Subdreamer CMS (Sat Aug 22 2009 - 11:37:56 EEST)

Last message date: Mon Aug 31 2009 - 23:11:30 EEST
Archived on: Mon Aug 31 2009 - 23:11:32 EEST

This archive was generated by hypermail 2b28 : Mon Aug 31 2009 - 23:11:32 EEST