stdin
By Subject

• 2WIRE Gateway Authentication Bypass & Password Reset
  • hkm (Wed Aug 12 2009 - 06:54:46 EEST)
• [ GLSA 200908-01 ] OpenSC: Multiple vulnerabilities
  • Tobias Heinlein (Sat Aug 01 2009 - 15:37:00 EEST)
• [ GLSA 200908-02 ] BIND: Denial of Service
  • Alex Legler (Sat Aug 01 2009 - 23:04:23 EEST)
• [ GLSA 200908-03 ] libTIFF: User-assisted execution of arbitrary code
  • Robert Buchholz (Fri Aug 07 2009 - 14:49:24 EEST)
• [ GLSA 200908-04 ] Adobe products: Multiple vulnerabilities
  • Robert Buchholz (Fri Aug 07 2009 - 15:01:32 EEST)
• [ GLSA 200908-05 ] Subversion: Remote execution of arbitrary code
  • Alex Legler (Wed Aug 19 2009 - 00:36:51 EEST)
• [ GLSA 200908-06 ] CDF: User-assisted execution of arbitrary code
  • Alex Legler (Wed Aug 19 2009 - 00:37:06 EEST)
• [ GLSA 200908-07 ] Perl Compress::Raw modules: Denial of Service
  • Alex Legler (Wed Aug 19 2009 - 00:37:23 EEST)
• [ GLSA 200908-08 ] ISC DHCP: dhcpd Denial of Service
  • Alex Legler (Wed Aug 19 2009 - 00:37:39 EEST)
• [ GLSA 200908-09 ] DokuWiki: Local file inclusion
  • Alex Legler (Wed Aug 19 2009 - 00:37:46 EEST)
• [ GLSA 200908-10 ] Dillo: User-assisted execution of arbitrary code
  • Alex Legler (Wed Aug 19 2009 - 00:37:51 EEST)
• [ MDVSA-2009:161-1 ] squid
  • security@mandriva.com (Sat Aug 08 2009 - 15:14:00 EEST)
• [ MDVSA-2009:185 ] firefox
  • security@mandriva.com (Sat Aug 01 2009 - 01:41:00 EEST)
• [ MDVSA-2009:186 ] firebird
  • security@mandriva.com (Sat Aug 01 2009 - 04:52:01 EEST)
• [ MDVSA-2009:187 ] nagios
  • security@mandriva.com (Sat Aug 01 2009 - 05:40:00 EEST)
• [ MDVSA-2009:188 ] php4-eaccelerator
  • security@mandriva.com (Sat Aug 01 2009 - 06:21:00 EEST)
• [ MDVSA-2009:189 ] apache-mod_auth_mysql
  • security@mandriva.com (Sat Aug 01 2009 - 17:29:00 EEST)
• [ MDVSA-2009:190 ] OpenEXR
  • security@mandriva.com (Mon Aug 03 2009 - 01:21:00 EEST)
• [ MDVSA-2009:191 ] OpenEXR
  • security@mandriva.com (Mon Aug 03 2009 - 01:31:00 EEST)
• [ MDVSA-2009:192 ] phpmyadmin
  • security@mandriva.com (Wed Aug 05 2009 - 17:07:00 EEST)
• [ MDVSA-2009:193 ] ruby
  • security@mandriva.com (Thu Aug 06 2009 - 02:10:00 EEST)
• [ MDVSA-2009:194 ] wireshark
  • security@mandriva.com (Thu Aug 06 2009 - 06:17:00 EEST)
• [ MDVSA-2009:195 ] apr
  • security@mandriva.com (Thu Aug 06 2009 - 17:55:00 EEST)
• [ MDVSA-2009:195-1 ] apr
  • security@mandriva.com (Thu Aug 06 2009 - 22:32:01 EEST)
• [ MDVSA-2009:196 ] samba
  • security@mandriva.com (Fri Aug 07 2009 - 19:45:01 EEST)
• [ MDVSA-2009:197 ] nss
  • security@mandriva.com (Sat Aug 08 2009 - 00:59:00 EEST)
• [ MDVSA-2009:198 ] firefox
  • security@mandriva.com (Sat Aug 08 2009 - 01:17:00 EEST)
• [ MDVSA-2009:199 ] subversion
  • security@mandriva.com (Sun Aug 09 2009 - 02:26:00 EEST)
• [ MDVSA-2009:200 ] libxml
  • security@mandriva.com (Wed Aug 12 2009 - 17:43:01 EEST)
• [ MDVSA-2009:201 ] fetchmail
  • security@mandriva.com (Wed Aug 12 2009 - 23:16:01 EEST)
• [ MDVSA-2009:202 ] memcached
  • security@mandriva.com (Fri Aug 14 2009 - 21:23:01 EEST)
• [ MDVSA-2009:203 ] curl
  • security@mandriva.com (Sat Aug 15 2009 - 19:03:00 EEST)
• [ MDVSA-2009:204 ] wxgtk
  • security@mandriva.com (Mon Aug 17 2009 - 03:13:00 EEST)
• [ MDVSA-2009:205 ] kernel
  • security@mandriva.com (Tue Aug 18 2009 - 03:21:00 EEST)
• [ MDVSA-2009:206 ] wget
  • security@mandriva.com (Wed Aug 19 2009 - 02:29:00 EEST)
• [ MDVSA-2009:207 ] perl-Compress-Raw-Bzip2
  • security@mandriva.com (Thu Aug 20 2009 - 01:09:01 EEST)
• [ MDVSA-2009:208 ] libgadu
  • security@mandriva.com (Thu Aug 20 2009 - 20:36:01 EEST)
• [ MDVSA-2009:209 ] java-1.6.0-openjdk
  • security@mandriva.com (Fri Aug 21 2009 - 03:54:01 EEST)
• [ MDVSA-2009:210 ] gnutls
  • security@mandriva.com (Fri Aug 21 2009 - 06:35:01 EEST)
• [ MDVSA-2009:211 ] expat
  • security@mandriva.com (Sun Aug 23 2009 - 20:37:02 EEST)
• [ MDVSA-2009:212 ] python
  • security@mandriva.com (Sun Aug 23 2009 - 21:30:01 EEST)
  • security@mandriva.com (Sun Aug 23 2009 - 21:12:00 EEST)
• [ MDVSA-2009:213 ] wxgtk
  • security@mandriva.com (Sun Aug 23 2009 - 22:53:00 EEST)
  • security@mandriva.com (Sun Aug 23 2009 - 21:57:00 EEST)
• [ MDVSA-2009:214 ] python-celementtree
  • security@mandriva.com (Sun Aug 23 2009 - 23:37:00 EEST)
• [ MDVSA-2009:215 ] audacity
  • security@mandriva.com (Mon Aug 24 2009 - 00:22:00 EEST)
• [ MDVSA-2009:216 ] mozilla-thunderbird
  • security@mandriva.com (Mon Aug 24 2009 - 00:40:00 EEST)
• [ MDVSA-2009:217 ] mozilla-thunderbird
  • security@mandriva.com (Mon Aug 24 2009 - 01:13:00 EEST)
• [ MDVSA-2009:218 ] w3c-libwww
  • security@mandriva.com (Mon Aug 24 2009 - 18:37:00 EEST)
• [ MDVSA-2009:219 ] kompozer
  • security@mandriva.com (Mon Aug 24 2009 - 21:18:01 EEST)
• [ MDVSA-2009:220 ] davfs
  • security@mandriva.com (Mon Aug 24 2009 - 22:19:00 EEST)
• [ MDVSA-2009:221 ] libneon0.27
  • security@mandriva.com (Tue Aug 25 2009 - 02:23:01 EEST)
• [ MDVSA-2009:222 ] squirrelmail
  • security@mandriva.com (Fri Aug 28 2009 - 21:11:01 EEST)
• [ MDVSA-2009:223 ] xerces-c
  • security@mandriva.com (Sun Aug 30 2009 - 21:00:00 EEST)
• [ MDVSA-2009:224 ] postfix
  • security@mandriva.com (Mon Aug 31 2009 - 00:52:01 EEST)
• [Bkis-11-2009] ProShow Gold Buffer Overflow Vulnerabilities
  • Bkis (Thu Aug 20 2009 - 07:29:17 EEST)
• [BONSAI] SQL Injection in CS-Cart
  • Bonsai - Information Security (Tue Aug 04 2009 - 21:49:05 EEST)
• [CSS09-01] SlideShowPro Director File Disclosure Vulnerability
  • Scott Miles (Thu Aug 06 2009 - 19:23:15 EEST)
• [DSECRG-09-022] Adobe Coldfusion 8 Multiple Linked XSS Vulnerabilies
  • Mike Duncan (Mon Aug 17 2009 - 18:25:55 EEST)
  • research@dsecrg.com (Mon Aug 17 2009 - 17:44:20 EEST)
• [DSECRG-09-033] SAP Netweaver UDDI - XSS Security Vulnerability
  • Alexandr Polyakov (Wed Aug 12 2009 - 16:04:50 EEST)
• [DSECRG-09-051] Adobe JRun 4 Multiple XSS
  • research@dsecrg.com (Mon Aug 17 2009 - 17:46:45 EEST)
• [DSECRG-09-052] Adobe JRun 4 Directory Traversal Vulnerabilities
  • research@dsecrg.com (Mon Aug 17 2009 - 17:46:47 EEST)
• [IMF 2009] Call for Participation
  • Oliver Goebel (Thu Aug 13 2009 - 21:13:15 EEST)
• [IVIZ-08-009] Grub Legacy Security Model bypass exploiting wrong BIOS API usage
  • phcoder@gmail.com (Tue Aug 25 2009 - 18:27:34 EEST)
• [MORNINGSTAR-2009-01] Multiple security issues in Open Auto Classifieds version <= 1.5.9
  • Andrew Horton (Wed Aug 26 2009 - 21:14:18 EEST)
• [NGENUITY] - Spiceworks Multiple Vulnerabilities (XSS & CSRF)
  • Adam Baldwin (Sat Aug 08 2009 - 22:16:21 EEST)
• [NGENUITY] - Ticket Subject Persistent XSS in Kayako SupportSuite
  • Adam Baldwin (Sat Aug 08 2009 - 19:07:37 EEST)
• [PT-2008-09] Microsoft Windows MSMQ Privilege Escalation Vulnerability
  • Valery Marchuk (Wed Aug 12 2009 - 15:31:38 EEST)
• [PT-2009-05] CA Internet Security Suite Denial of Service Vulnerability
  • Valery Marchuk (Wed Aug 26 2009 - 12:56:56 EEST)
• [RT-SA-2009-005] Papoo CMS: Authenticated Arbitrary Code Execution
  • RedTeam Pentesting GmbH (Mon Aug 10 2009 - 15:32:56 EEST)
• [security bulletin] HPSBMA02445 SSRT090058 rev.1 - HP Serviceguard Manager, Remote Execution of Arbitrary Code, Denial of Service (DoS)
  • security-alert@hp.com (Mon Aug 03 2009 - 16:08:00 EEST)
• [security bulletin] HPSBMA02447 SSRT090062 rev.1 - Insight Control Suite For Linux (ICE-LX) Cross Site Request Forgery (CSRF) , Remote Execution of Arbitrary Code, Denial of Service (DoS), and Other Vulnerabilities
  • security-alert@hp.com (Thu Aug 13 2009 - 15:46:43 EEST)
• [security bulletin] HPSBMA02448 SSRT061231 rev.1 - HP Network Node Manager (NNM) Remote Console Running on Windows, Local Execution of Arbitrary Code, Denial of Service (DoS)
  • security-alert@hp.com (Tue Aug 18 2009 - 22:30:44 EEST)
• [security bulletin] HPSBOV02452 SSRT090161 rev.1 - HP TCP/IP Services for OpenVMS BIND Server Remote Denial of Service (DoS)
  • security-alert@hp.com (Fri Aug 07 2009 - 16:02:34 EEST)
• [security bulletin] HPSBTU02453 SSRT091037 rev.1 - HP Tru64 UNIX BIND Server, Denial of Service (DoS)
  • security-alert@hp.com (Fri Aug 07 2009 - 16:03:04 EEST)
• [security bulletin] HPSBTU02453 SSRT091037 rev.2 - HP Tru64 UNIX or HP Tru64 Internet Express Running BIND Server, Denial of Service (DoS)
  • security-alert@hp.com (Tue Aug 25 2009 - 20:51:44 EEST)
• [security bulletin] HPSBTU02454 SSRT080172 rev.1 - HP Internet Express for Tru64 UNIX Running Samba, Remote Information Disclosure
  • security-alert@hp.com (Wed Aug 12 2009 - 00:06:12 EEST)
• [security bulletin] HPSBUX02181 SSRT061289 rev.4 - HP-UX Running IPFilter, Remote Denial of Service (DoS)
  • security-alert@hp.com (Mon Aug 03 2009 - 21:06:00 EEST)
• [security bulletin] HPSBUX02437 SSRT090038 rev.2 - HP-UX Running XNTP, Remote Execution of Arbitrary Code
  • security-alert@hp.com (Wed Aug 12 2009 - 15:41:26 EEST)
• [security bulletin] HPSBUX02450 SSRT090141 rev1 - HP-UX ttrace(2), Local Denial of Service (DoS)
  • security-alert@hp.com (Tue Aug 11 2009 - 16:23:56 EEST)
• [security bulletin] HPSBUX02451 SSRT090137 rev.1 - HP-UX Running BIND, Remote Denial of Service (DoS)
  • security-alert@hp.com (Fri Aug 07 2009 - 16:02:06 EEST)
• [SECURITY] [DSA 1833-2] New dhcp3 packages fix arbitrary code execution
  • Florian Weimer (Tue Aug 25 2009 - 22:57:28 EEST)
• [SECURITY] [DSA 1843-2] New squid3 packages fix regression
  • Nico Golde (Sun Aug 09 2009 - 19:54:21 EEST)
• [SECURITY] [DSA 1848-1] New znc packages fix remote code execution
  • Florian Weimer (Sun Aug 02 2009 - 16:17:42 EEST)
• [SECURITY] [DSA 1849-1] New xml-security-c packages fix signature forgery
  • Florian Weimer (Sun Aug 02 2009 - 16:48:02 EEST)
• [SECURITY] [DSA 1850-1] New libmodplug packages fix arbitrary code execution
  • Steffen Joeris (Tue Aug 04 2009 - 11:57:58 EEST)
• [SECURITY] [DSA 1851-1] New gst-plugins-bad0.10 packages fix arbitrary code execution
  • Steffen Joeris (Thu Aug 06 2009 - 11:28:57 EEST)
• [SECURITY] [DSA 1852-1] New fetchmail packages fix SSL certificate verification weakness
  • Nico Golde (Fri Aug 07 2009 - 18:31:48 EEST)
• [SECURITY] [DSA 1853-1] New memcached packages fix arbitrary code execution
  • Nico Golde (Fri Aug 07 2009 - 18:33:32 EEST)
• [SECURITY] [DSA 1854-1] New APR packages fix arbitrary code execution
  • Florian Weimer (Sat Aug 08 2009 - 21:55:09 EEST)
• [SECURITY] [DSA 1855-1] New subversion packages fix arbitrary code execution
  • Florian Weimer (Sat Aug 08 2009 - 22:07:27 EEST)
• [SECURITY] [DSA 1856-1] New mantis packages fix information leak
  • Thijs Kinkhorst (Sat Aug 08 2009 - 22:34:12 EEST)
• [SECURITY] [DSA 1857-1] New camlimages packages fix arbitrary code execution
  • Steffen Joeris (Mon Aug 10 2009 - 03:55:14 EEST)
• [SECURITY] [DSA 1858-1] New imagemagick packages fix several vulnerabilities
  • Luciano Bello (Mon Aug 10 2009 - 20:05:37 EEST)
• [SECURITY] [DSA 1859-1] New libxml2 packages fix several issues
  • Nico Golde (Mon Aug 10 2009 - 21:55:11 EEST)
• [SECURITY] [DSA 1860-1] New Ruby packages fix several issues
  • Florian Weimer (Wed Aug 12 2009 - 22:49:54 EEST)
• [SECURITY] [DSA 1861-1] New libxml packages fix several issues
  • Nico Golde (Thu Aug 13 2009 - 23:40:37 EEST)
• [SECURITY] [DSA 1862-1] New Linux 2.6.26 packages fix privilege escalation
  • dann frazier (Fri Aug 14 2009 - 22:31:10 EEST)
• [SECURITY] [DSA 1863-1] New zope2.10/zope2.9 packages fix arbitrary code execution
  • Nico Golde (Sat Aug 15 2009 - 18:56:00 EEST)
• [SECURITY] [DSA 1864-1] New Linux 2.6.24 packages fix privilege escalation
  • dann frazier (Sun Aug 16 2009 - 19:42:51 EEST)
• [SECURITY] [DSA 1865-1] New Linux 2.6.18 packages fix several vulnerabilities
  • dann frazier (Sun Aug 16 2009 - 23:52:35 EEST)
• [SECURITY] [DSA 1866-1] New kdegraphics packages fix several vulnerabilities
  • Steffen Joeris (Wed Aug 19 2009 - 15:32:52 EEST)
• [SECURITY] [DSA 1867-1] New kdelibs packages fix several vulnerabilities
  • Steffen Joeris (Wed Aug 19 2009 - 15:33:02 EEST)
• [SECURITY] [DSA 1868-1] New kde4libs packages fix several vulnerabilities
  • Steffen Joeris (Wed Aug 19 2009 - 15:33:14 EEST)
• [SECURITY] [DSA 1869-1] New curl packages fix SSL certificate verification weakness
  • Nico Golde (Thu Aug 20 2009 - 00:22:07 EEST)
• [SECURITY] [DSA 1870-1] New pidgin packages fix arbitrary code execution
  • Nico Golde (Thu Aug 20 2009 - 01:29:43 EEST)
• [SECURITY] [DSA 1871-1] New wordpress packages fix several vulnerabilities
  • Steffen Joeris (Sun Aug 23 2009 - 06:41:14 EEST)
• [SECURITY] [DSA 1871-2] New wordpress packages fix regression
  • Steffen Joeris (Thu Aug 27 2009 - 04:39:01 EEST)
• [SECURITY] [DSA 1872-1] New Linux 2.6.18 packages fix several vulnerabilities
  • dann frazier (Mon Aug 24 2009 - 21:59:41 EEST)
• [SECURITY] [DSA 1873-1] New xulrunner packages fix spoofing vulnerabilities
  • Moritz Muehlenhoff (Wed Aug 26 2009 - 21:51:42 EEST)
• [SECURITY] [DSA 1874-1] New nss packages fix several vulnerabilities
  • Moritz Muehlenhoff (Wed Aug 26 2009 - 22:01:32 EEST)
• [SECURITY] [DSA 1875-1] New ikiwiki packages fix information disclosure
  • Moritz Muehlenhoff (Mon Aug 31 2009 - 20:27:34 EEST)
• [USN-802-2] Apache regression
  • Marc Deslauriers (Wed Aug 19 2009 - 18:32:12 EEST)
• [USN-809-1] GnuTLS vulnerabilities
  • Jamie Strandboge (Thu Aug 20 2009 - 02:55:26 EEST)
• [USN-810-1] NSS vulnerabilities
  • Jamie Strandboge (Wed Aug 05 2009 - 00:23:07 EEST)
• [USN-810-2] NSPR update
  • Jamie Strandboge (Wed Aug 05 2009 - 01:00:59 EEST)
• [USN-811-1] Firefox and Xulrunner vulnerability
  • Jamie Strandboge (Wed Aug 05 2009 - 05:34:16 EEST)
• [USN-812-1] Subversion vulnerability
  • Jamie Strandboge (Sat Aug 08 2009 - 03:56:30 EEST)
• [USN-813-1] apr vulnerability
  • Jamie Strandboge (Sat Aug 08 2009 - 03:57:13 EEST)
• [USN-813-2] Apache vulnerability
  • Jamie Strandboge (Sat Aug 08 2009 - 04:06:16 EEST)
• [USN-813-3] apr-util vulnerability
  • Jamie Strandboge (Sat Aug 08 2009 - 08:56:47 EEST)
• [USN-814-1] openjdk-6 vulnerabilities
  • Kees Cook (Tue Aug 11 2009 - 08:54:45 EEST)
• [USN-815-1] libxml2 vulnerabilities
  • Marc Deslauriers (Tue Aug 11 2009 - 21:41:05 EEST)
• [USN-816-1] fetchmail vulnerability
  • Kees Cook (Thu Aug 13 2009 - 01:56:28 EEST)
• [USN-817-1] Thunderbird vulnerabilities
  • Jamie Strandboge (Fri Aug 21 2009 - 02:42:26 EEST)
• [USN-818-1] curl vulnerability
  • Kees Cook (Mon Aug 17 2009 - 21:42:06 EEST)
• [USN-820-1] Pidgin vulnerability
  • Marc Deslauriers (Thu Aug 20 2009 - 16:32:39 EEST)
• [USN-822-1] KDE-Libs vulnerabilities
  • Marc Deslauriers (Mon Aug 24 2009 - 22:00:38 EEST)
• [USN-823-1] KDE-Graphics vulnerabilities
  • Marc Deslauriers (Mon Aug 24 2009 - 22:01:12 EEST)
• [USN-824-1] PHP vulnerability
  • Marc Deslauriers (Mon Aug 24 2009 - 22:01:44 EEST)
• [USN-825-1] libvorbis vulnerability
  • Marc Deslauriers (Mon Aug 24 2009 - 22:02:18 EEST)
• [USN-826-1] Mono vulnerabilities
  • Marc Deslauriers (Wed Aug 26 2009 - 22:31:55 EEST)
• Adobe Flex 3.3 SDK DOM-Based XSS
  • labs@gdssecurity.com (Wed Aug 19 2009 - 23:04:52 EEST)
• Advisory: Adobe Flash Player and AIR AVM2 intf_count Integer Overflow Remote Code Execution (CVE-2009-1869)
  • Roee Hay (Sun Aug 02 2009 - 05:13:12 EEST)
• AiO ( All into One) Flash Mixer 3 (.afp File) Crash Vulnerability Exploit
  • the_3dit0r@yahoo.com (Mon Aug 24 2009 - 12:17:15 EEST)
• AST-2009-004: Remote Crash Vulnerability in RTP stack
  • Asterisk Security Team (Mon Aug 03 2009 - 07:30:14 EEST)
• AST-2009-005: Remote Crash Vulnerability in SIP channel driver
  • Asterisk Security Team (Tue Aug 11 2009 - 17:00:15 EEST)
• ASUS Eee PC and other series: BIOS SMM privilege escalation vulnerabilities
  • core collapse (Fri Aug 07 2009 - 22:08:04 EEST)
• Authentication Bypass of Snom Phone Web Interface
  • Walter Sprenger (Thu Aug 13 2009 - 00:46:27 EEST)
• Back door trojan in acajoom-3.2.6 for joomla
  • elkekas@gmail.com (Thu Aug 13 2009 - 12:26:11 EEST)
• Blink Blog System Authentication Bypass
  • Salvatore Fresta aka Drosophila (Mon Aug 03 2009 - 20:28:04 EEST)
• Bypassing DBMS_ASSERT in certain situations
  • David Litchfield (Tue Aug 25 2009 - 23:25:15 EEST)
• Bypassing OWASP ESAPI XSS Protection inside Javascript
  • Schmidt, Chris (Thu Aug 20 2009 - 18:28:03 EEST)
  • Inferno (Thu Aug 20 2009 - 11:18:00 EEST)
• CA20090806-01: Security Notice for Data Transport Services
  • Kotas, Kevin J (Fri Aug 07 2009 - 02:22:34 EEST)
• CA20090806-02: Security Notice for Unicenter Asset Portfolio Management, Unicenter Desktop and Server Management, Unicenter Patch Management
  • Kotas, Kevin J (Fri Aug 07 2009 - 02:22:21 EEST)
• CA20090818-01: Security Notice for CA Host-Based Intrusion Prevention System
  • Kotas, Kevin J (Tue Aug 18 2009 - 23:38:47 EEST)
• CA20090818-02: Security Notice for CA Internet Security Suite
  • Kotas, Kevin J (Tue Aug 18 2009 - 23:38:40 EEST)
• CFP: International workshop on Secure Software Engineering
  • secse@sislab.no (Fri Aug 07 2009 - 14:06:45 EEST)
• Chavoosh CMS SQL Injection Vulnerability
  • faghani@nsec.ir (Wed Aug 12 2009 - 13:15:43 EEST)
• Chris Paget Defcon RFID Presentation Slides Now Online
  • Timothy (Thor) Mullen (Thu Aug 13 2009 - 04:25:48 EEST)
• Cisco Security Advisory: Cisco Security Advisory: Cisco IOS XR Software Border Gateway Protocol Vulnerability
  • Cisco Systems Product Security Incident Response Team (Sat Jul 18 2009 - 19:25:00 EEST)
• Cisco Security Advisory: Cisco Unified Communications Manager Denial of Service Vulnerabilities
  • Cisco Systems Product Security Incident Response Team (Wed Aug 26 2009 - 19:00:00 EEST)
• Cisco Security Advisory: Firewall Services Module Crafted ICMP Message Vulnerability
  • Cisco Systems Product Security Incident Response Team (Wed Aug 19 2009 - 20:12:26 EEST)
• Clear Text Storage of Password in CS-MARS v6.0.4 and Earlier
  • Eloy Paris (Fri Aug 21 2009 - 20:00:16 EEST)
  • ryan.wessels@kohler.com (Fri Aug 21 2009 - 18:24:18 EEST)
• ClubHack2009: Call for Papers/Speakers
  • ClubHack (Fri Aug 14 2009 - 22:02:42 EEST)
• common dns misconfiguration can lead to "same site" scripting
  • saik0pod@gmail.com (Mon Aug 17 2009 - 23:38:53 EEST)
• CONFidence 2009, November, CfP
  • Andrzej Targosz (Tue Aug 25 2009 - 00:46:13 EEST)
• CoolPreviews - Firefox Extension - Chrome Privileged Code Injection
  • Roberto Suggi Liverani (Mon Aug 24 2009 - 15:25:56 EEST)
• CORE-2009-0727: Libpurple msn_slplink_process_msg() Arbitrary Write Vulnerability
  • CORE Security Technologies Advisories (Wed Aug 19 2009 - 00:52:29 EEST)
• Cross-Site Scripting vulnerability in Mozilla, Firefox, SeaMonkey, Orca Browser and Maxthon
  • MustLive (Fri Aug 28 2009 - 22:07:40 EEST)
• Cross-Site Scripting vulnerabiliy in Firefox and Opera
  • MustLive (Sat Aug 01 2009 - 21:45:44 EEST)
• Cuteflow Version 2.10.3 "edituser.php" Security Bypass Vulnerability
  • hever@hever.com.br (Fri Aug 21 2009 - 21:17:35 EEST)
• DeepSec 2009 - Preliminary Schedule is online
  • DeepSec Conference (Sat Aug 15 2009 - 16:38:45 EEST)
• Discloser 0.0.4-rc2 SQL Injection Vulnerability
  • Salvatore Fresta aka Drosophila (Mon Aug 03 2009 - 12:27:02 EEST)
• DoS vulnerabilities in Mozilla Firefox, Internet Explorer and Chrome
  • MustLive (Fri Aug 21 2009 - 20:58:21 EEST)
• DoS vulnerability in Google Chrome
  • advisories@intern0t.net (Wed Aug 26 2009 - 11:41:18 EEST)
  • MustLive (Tue Aug 25 2009 - 19:07:49 EEST)
  • advisories@intern0t.net (Tue Aug 25 2009 - 10:03:00 EEST)
  • MustLive (Sun Aug 23 2009 - 18:21:23 EEST)
• DUgallery 3.0 / Remote Admin Bug
  • spymeta@yahoo.com (Sun Aug 16 2009 - 21:39:20 EEST)
• Easy Music Player 1.0.0.2 (wav) Universal Local Buffer Exploit
  • ostoure.sazan@gmail.com (Sat Aug 15 2009 - 04:08:33 EEST)
• EesySec Personal Firewall Remote Buffer Overflow Exploit
  • the_3dit0r@yahoo.com (Tue Aug 25 2009 - 17:20:40 EEST)
• Elkapax CMS Cross site scripting vulnerability
  • security curmudgeon (Wed Aug 19 2009 - 08:09:30 EEST)
  • faghani@nsec.ir (Thu Aug 13 2009 - 09:03:19 EEST)
• Feed Sidebar Firefox Extension - Privileged Code Injection
  • Nick Freeman (Mon Aug 24 2009 - 07:23:28 EEST)
• fetchmail security announcement fetchmail-SA-2009-01 (CVE-2009-2666)
  • ma+bt@dt.e-technik.uni-dortmund.de (Thu Aug 06 2009 - 03:12:57 EEST)
• FLIP Flash Album Deluxe 1.8.407.1 (.fft File) Crash Vulnerability Exploit
  • the_3dit0r@yahoo.com (Mon Aug 24 2009 - 12:31:13 EEST)
• FreeBSD <= 6.1 kqueue() NULL pointer dereference
  • Przemyslaw Frasunek (Sat Aug 22 2009 - 20:06:23 EEST)
• Fwd: Follow-up: Heartland CEO on Data Breach: QSAs Let Us Down
  • Jeffrey Walton (Thu Aug 13 2009 - 16:58:31 EEST)
• H4RDW4RE presentations updated
  • Thor (Hammer of God) (Wed Aug 26 2009 - 17:21:02 EEST)
  • Thor (Hammer of God) (Wed Aug 26 2009 - 00:07:01 EEST)
• Hijacking Safari 4 Top Sites with Phish Bombs
  • Inferno (Wed Aug 12 2009 - 03:27:16 EEST)
• HyperVM File Permissions Local Vulnerability
  • XiaShing@gmail.com (Tue Aug 25 2009 - 18:46:39 EEST)
• ICQ 6.5 HTML-injection vulnerability
  • ss_contacts@hotmail.com (Fri Aug 14 2009 - 13:42:46 EEST)
• iDefense Security Advisory 07.28.09: Multiple Vendor Microsoft ATL/MFC ActiveX Information Disclosure Vulnerability
  • iDefense Labs (Thu Aug 20 2009 - 07:24:35 EEST)
• iDefense Security Advisory 07.28.09: Multiple Vendor Microsoft ATL/MFC ActiveX Security Bypass Vulnerability
  • iDefense Labs (Thu Aug 20 2009 - 07:20:15 EEST)
• iDefense Security Advisory 08.06.09: Adobe Flash Player URL Parsing Heap Overflow Vulnerability
  • iDefense Labs (Thu Aug 06 2009 - 22:57:15 EEST)
• iDefense Security Advisory 08.06.09: IBM AIX libC _LIB_INIT_DBG Arbitrary File Creation Vulnerability
  • iDefense Labs (Thu Aug 06 2009 - 22:38:13 EEST)
• iDefense Security Advisory 08.06.09: Microsoft Internet Explorer HTML TIME 'ondatasetcomplete' Use After Free Vulnerability
  • iDefense Labs (Fri Aug 07 2009 - 00:06:00 EEST)
• iDefense Security Advisory 08.06.09: Sun Java Runtime Environment (JRE) Pack200 Decompression Integer Overflow Vulnerability
  • iDefense Labs (Thu Aug 06 2009 - 22:19:26 EEST)
• iDefense Security Advisory 08.07.09: Adobe Flash Player Invalid Loader Object Reference Vulnerability
  • iDefense Labs (Fri Aug 07 2009 - 20:49:03 EEST)
• iDefense Security Advisory 08.11.09: Microsoft Office Web Components 2000 Buffer Overflow Vulnerability
  • iDefense Labs (Thu Aug 20 2009 - 00:02:45 EEST)
• iDefense Security Advisory 08.11.09: Multiple Vendor Microsoft ATL/MFC ActiveX Type Confusion Vulnerability
  • iDefense Labs (Thu Aug 20 2009 - 07:32:43 EEST)
• iDefense Security Advisory 08.25.09: Autonomy KeyView Excel File SST Parsing Integer Overflow Vulnerability
  • iDefense Labs (Tue Aug 25 2009 - 23:05:52 EEST)
• IE7 Script
  • James C. Slora Jr. (Tue Aug 11 2009 - 17:48:58 EEST)
• Illustrating the Linux sock_sendpage() NULL pointer dereference on Power/Cell BE Architecture
  • Ramon de Carvalho Valle (Mon Aug 31 2009 - 15:32:02 EEST)
• Infinity <= v2.X.X (Local File Disclosure/Auth Bypass) Vulnerabilities
  • gamr-14@hotmail.com (Fri Aug 21 2009 - 19:49:27 EEST)
• JibberBook GuestBook 2.3 Multiple Vulnerabilities
  • contact@onuryilmaz.info (Wed Aug 12 2009 - 01:22:18 EEST)
• KIWICON ]|[ - 2009 Call For Papers
  • Kiwicon <3 (Thu Aug 13 2009 - 05:43:53 EEST)
• Linux NULL pointer dereference due to incorrect proto_ops initializations
  • Przemyslaw Frasunek (Fri Aug 14 2009 - 14:11:37 EEST)
  • Tavis Ormandy (Thu Aug 13 2009 - 21:57:53 EEST)
• Local Kernel Buffer Overflow vulnerability in Avast!
  • s.leberre@sysdream.com (Mon Aug 24 2009 - 15:09:01 EEST)
• Microsoft Wordpad Memory Exhaustion (msftedit)
  • murderkey@gmail.com (Wed Aug 12 2009 - 20:45:59 EEST)
• Multiple Flaws in Huawei D100
  • wojwar@yahoo.com (Tue Aug 04 2009 - 23:12:05 EEST)
• Multiple Flaws in Huawei SmartAX MT880 [was: Multiple Flaws in Huawei D100]
  • jerome.athias@free.fr (Wed Aug 05 2009 - 18:31:57 EEST)
• Multiple vulnerabilities in several ATEN IP KVM Switches
  • Glenn Rossi (Mon Aug 17 2009 - 18:56:13 EEST)
  • starchang@aten.com.tw (Wed Aug 12 2009 - 13:34:18 EEST)
• new vulnerability founded by ostoure
  • ostoure.sazan@gmail.com (Thu Aug 13 2009 - 23:36:02 EEST)
• ntop <= 3.3.10 Basic Authentication Null Pointer Denial of Service
  • dm@securityfocus.com (Tue Aug 18 2009 - 22:11:29 EEST)
  • brad.antoniewicz@foundstone.com (Tue Aug 18 2009 - 20:13:05 EEST)
• OpenCms (7.5.0) - Vulnerability: Cross-Site Scripting, Phishing Through Frames, Application Error
  • katie.french@cgifederal.com (Thu Aug 06 2009 - 22:25:52 EEST)
• Oracle 11g (11.1.0.6) Password Policy and Compliance
  • David Litchfield (Tue Aug 25 2009 - 23:45:41 EEST)
• Oracle PL/SQL Injection Flaw in REPCAT_RPC.VALIDATE_REMOTE_RC
  • David Litchfield (Tue Aug 25 2009 - 23:18:58 EEST)
• Packet Storm is back online.
  • Packet Storm (Sat Aug 22 2009 - 08:11:14 EEST)
• Palm Pre WebOS 1.0.4 Remote execution of arbitrary HTML code vulnerability
  • palmprehacker@gmail.com (Tue Aug 04 2009 - 06:06:32 EEST)
• Piwigo SQL Injection Vulnerability - Security Advisory - SOS-09-007
  • Lists (Mon Aug 17 2009 - 09:40:21 EEST)
• Plume CMS Multiple SQL Injection Vulnerabilities - Security Advisory - SOS-09-006
  • Lists (Wed Aug 12 2009 - 09:02:44 EEST)
• Radvision's Scopia Cross Site Scripting Vulnerabilities
  • Francesco Bianchino (Mon Aug 24 2009 - 12:46:59 EEST)
• rPSA-2009-0118-1 mod_dav_svn subversion
  • rPath Update Announcements (Wed Aug 19 2009 - 01:05:28 EEST)
• rPSA-2009-0119-1 apr apr-util
  • rPath Update Announcements (Wed Aug 19 2009 - 01:06:40 EEST)
• rPSA-2009-0121-1 kernel open-vm-tools
  • rPath Update Announcements (Wed Aug 19 2009 - 01:10:31 EEST)
• rPSA-2009-0122-1 idle python
  • rPath Update Announcements (Mon Aug 24 2009 - 22:36:53 EEST)
• rPSA-2009-0123-1 apr-util
  • rPath Update Announcements (Mon Aug 24 2009 - 22:38:00 EEST)
• rPSA-2009-0124-1 curl
  • rPath Update Announcements (Mon Aug 24 2009 - 22:48:27 EEST)
• Safari buffer overflow
  • Leon Juranic (Tue Aug 18 2009 - 12:23:30 EEST)
• SAP Business One 2005 Remote Buffer Overflow Vulnerability.
  • mikey27@hotmail.com (Tue Aug 04 2009 - 18:22:01 EEST)
• ScribeFire Firefox Extension - Privileged Code Injection
  • Nick Freeman (Mon Aug 24 2009 - 07:48:49 EEST)
• SecurityFocus Linux Newsletter #445
  • sfa@securityfocus.com (Thu Aug 13 2009 - 02:19:21 EEST)
• SecurityFocus Linux Newsletter #446
  • sfa@securityfocus.com (Wed Aug 19 2009 - 20:30:50 EEST)
• SecurityFocus Microsoft Newsletter #450
  • sfa@securityfocus.com (Thu Aug 13 2009 - 02:19:16 EEST)
• SecurityFocus Microsoft Newsletter #451
  • sfa@securityfocus.com (Wed Aug 19 2009 - 20:30:46 EEST)
• SecurityFocus Newsletter #509
  • sfa@securityfocus.com (Thu Aug 13 2009 - 02:19:10 EEST)
• SecurityFocus Newsletter #510
  • sfa@securityfocus.com (Wed Aug 19 2009 - 20:30:42 EEST)
• Sql injection in OCS Inventory NG Server 1.2.1
  • gmcbr0 gmcbr0 (Tue Aug 11 2009 - 21:05:59 EEST)
• SQL Injection vulnerabilities in Subdreamer CMS
  • ziad@subdreamer.com (Sat Aug 22 2009 - 11:37:56 EEST)
  • itweb@itweb.fi (Thu Aug 20 2009 - 19:19:28 EEST)
• Static analysis tool exposition (SATE) 2009 - call for participation
  • Vadim Okun (Thu Aug 13 2009 - 00:35:11 EEST)
• Subversion heap overflow
  • Matt Lewis (Fri Aug 07 2009 - 17:47:24 EEST)
• t2?09 Challenge - Free Tickets Available
  • Tomi Tuominen (Thu Aug 20 2009 - 15:14:37 EEST)
• Team SHATTER Security Advisory: Buffer Overflow in Resource Manager of Oracle Database - Plan name parameter
  • Shatter (Fri Aug 28 2009 - 18:20:40 EEST)
• Team SHATTER Security Advisory: Multiple SQL Injection vulnerabilities in Oracle Enterprise Manager
  • Shatter (Tue Aug 04 2009 - 02:31:16 EEST)
• TheGreenBow VPN Client tgbvpn.sys DoS and Potential Local
  • contact.fingers@gmail.com (Mon Aug 17 2009 - 19:08:41 EEST)
• TPTI-09-06: Microsoft Windows Workstation Service NetrGetJoinInformation Heap Corruption Vulnerability
  • dvlabs (Tue Aug 11 2009 - 21:04:07 EEST)
• Update Scanner - Firefox Extension - Chrome Privileged Code Injection
  • Roberto Suggi Liverani (Mon Aug 24 2009 - 15:27:16 EEST)
• VMSA-2009-0010 VMware Hosted products update libpng and Apache HTTP Server
  • VMware Security team (Fri Aug 21 2009 - 09:38:49 EEST)
• Vtiger CRM 5.0.4 Multiple Vulnerabilities
  • ascii (Tue Aug 18 2009 - 11:49:13 EEST)
• Vulnerable MSVC++ runtime distributed with OpenOffice.org 3.1.1 for Windows
  • Stefan Kanthak (Mon Aug 31 2009 - 19:42:53 EEST)
• Windows 7 Firewire Attacks - and Defense Techniques
  • Security Research Publications (Thu Aug 13 2009 - 15:13:36 EEST)
• WizzRSS Firefox Extension - Privileged Code Injection
  • Nick Freeman (Mon Aug 24 2009 - 07:49:50 EEST)
• WM Downloader (.Smi/ .Ram/ .pls/ .smil/ .wax/ .wpl File) Local Buffer Overflow Exploit
  • the_3dit0r@yahoo.com (Sun Aug 23 2009 - 22:51:05 EEST)
• Writeup by Amit Klein (Trusteer): "Google Chrome 3.0 (Beta) Math.random vulnerability"
  • Amit Klein (Mon Aug 31 2009 - 14:25:54 EEST)
• Xerox WorkCentre multiple models Denial of Service
  • Henri Lindberg - Smilehouse Oy (Tue Aug 25 2009 - 15:11:30 EEST)
• XSS in SqLiteManager
  • hadikiamarsi@hotmail.com (Mon Aug 10 2009 - 09:59:13 EEST)
• ZDI-09-047: Microsoft Internet Explorer getElementsByTagName Memory Corruption Vulnerability
  • ZDI Disclosures (Wed Aug 05 2009 - 20:44:36 EEST)
• ZDI-09-048: Microsoft Internet Explorer CSS Behavior Memory Corruption Vulnerability
  • ZDI Disclosures (Wed Aug 05 2009 - 20:45:11 EEST)
• ZDI-09-049: Sun Java Pack200 Decoding Inner Class Count Integer Overflow Vulnerability
  • ZDI Disclosures (Wed Aug 05 2009 - 20:45:51 EEST)
• ZDI-09-050: Sun Java Web Start JPEG Header Parsing Integer Overflow Vulnerability
  • ZDI Disclosures (Wed Aug 05 2009 - 20:46:24 EEST)
• ZDI-09-051: EMC Replication Manager Client Control Service Remove Code Execution Vulnerability
  • ZDI Disclosures (Fri Aug 07 2009 - 23:53:17 EEST)
• ZDI-09-052: CA Unicenter Software Delivery dtscore.dll Stack Overflow Vulnerability
  • ZDI Disclosures (Fri Aug 07 2009 - 23:54:31 EEST)
• ZDI-09-053: Microsoft Windows WINS Service Heap Overflow Vulnerability
  • ZDI Disclosures (Tue Aug 11 2009 - 23:23:39 EEST)
• ZDI-09-054: Microsoft Office OWC10.Spreadsheet ActiveX msDataSourceObject() Heap Corruption Vulnerability
  • ZDI Disclosures (Tue Aug 11 2009 - 23:24:24 EEST)
• ZDI-09-055: Microsoft Office OWC10 ActiveX Control Loading and Unloading Heap Corruption Vulnerability
  • ZDI Disclosures (Tue Aug 11 2009 - 23:25:11 EEST)
• ZDI-09-056: Microsoft Office OWC10.Spreadsheet ActiveX BorderAround() Heap Corruption Vulnerability
  • ZDI Disclosures (Tue Aug 11 2009 - 23:25:48 EEST)
• ZDI-09-057: Microsoft Remote Desktop Client Arbitrary Code Execution Vulnerability
  • ZDI Disclosures (Tue Aug 11 2009 - 23:26:28 EEST)
• ZDI-09-058: Oracle Secure Backup Administration Server Authentication Bypass Vulnerability
  • ZDI Disclosures (Wed Aug 19 2009 - 01:52:57 EEST)
• ZDI-09-059: Oracle Secure Backup Administration Server Multiple Command Injection Vulnerabilities
  • ZDI Disclosures (Wed Aug 19 2009 - 01:58:26 EEST)

Last message date: Mon Aug 31 2009 - 23:11:30 EEST
Archived on: Mon Aug 31 2009 - 23:11:32 EEST

This archive was generated by hypermail 2b28 : Mon Aug 31 2009 - 23:11:32 EEST