stdin
By Subject

• (edited) [DSECRG-09-044] SAP GUI 7.1 Insecure Methods
  • Alexandr Polyakov (Mon Sep 28 2009 - 11:49:24 EEST)
• 3rd party patch for XP for MS09-048?
  • Susan Bradley (Wed Sep 16 2009 - 22:48:56 EEST)
  • Rob Thompson (Wed Sep 16 2009 - 21:24:08 EEST)
  • Susan Bradley (Wed Sep 16 2009 - 19:00:24 EEST)
  • Tom Grace (Wed Sep 16 2009 - 18:57:39 EEST)
  • Elizabeth.a.greene@gmail.com (Wed Sep 16 2009 - 00:56:21 EEST)
  • Susan Bradley (Wed Sep 16 2009 - 00:55:28 EEST)
  • Matt Riddell (Wed Sep 16 2009 - 00:53:50 EEST)
  • Jeffrey Walton (Wed Sep 16 2009 - 00:52:25 EEST)
  • Eric C. Lukens (Wed Sep 16 2009 - 00:37:04 EEST)
  • Susan Bradley (Wed Sep 16 2009 - 00:29:51 EEST)
  • Susan Bradley (Wed Sep 16 2009 - 00:24:22 EEST)
  • Eric Kimminau (Wed Sep 16 2009 - 00:23:46 EEST)
  • Jeffrey Walton (Tue Sep 15 2009 - 23:49:55 EEST)
  • Aras \ (Tue Sep 15 2009 - 21:46:51 EEST)
• 4f: The File Format Fuzzing Framework
  • Krakow Labs (Wed Sep 09 2009 - 07:20:34 EEST)
• [ GLSA 200909-01 ] Linux-PAM: Privilege escalation
  • Alex Legler (Mon Sep 07 2009 - 03:57:29 EEST)
• [ GLSA 200909-02 ] libvorbis: User-assisted execution of arbitrary code
  • Alex Legler (Mon Sep 07 2009 - 03:57:43 EEST)
• [ GLSA 200909-03 ] Apache Portable Runtime, APR Utility Library: Execution of arbitrary code
  • Alex Legler (Wed Sep 09 2009 - 16:18:46 EEST)
• [ GLSA 200909-04 ] Clam AntiVirus: Multiple vulnerabilities
  • Alex Legler (Wed Sep 09 2009 - 16:19:18 EEST)
• [ GLSA 200909-05 ] Openswan: Denial of Service
  • Alex Legler (Wed Sep 09 2009 - 16:20:40 EEST)
• [ GLSA 200909-06 ] aMule: Parameter injection
  • Alex Legler (Wed Sep 09 2009 - 16:21:42 EEST)
• [ GLSA 200909-07 ] TkMan: Insecure temporary file usage
  • Alex Legler (Wed Sep 09 2009 - 16:22:15 EEST)
• [ GLSA 200909-08 ] C* music player: Insecure temporary file usage
  • Alex Legler (Wed Sep 09 2009 - 16:22:36 EEST)
• [ GLSA 200909-09 ] Screenie: Insecure temporary file usage
  • Alex Legler (Wed Sep 09 2009 - 16:22:54 EEST)
• [ GLSA 200909-10 ] LMBench: Insecure temporary file usage
  • Alex Legler (Wed Sep 09 2009 - 16:23:16 EEST)
• [ GLSA 200909-11 ] GCC-XML: Insecure temporary file usage
  • Alex Legler (Wed Sep 09 2009 - 16:23:36 EEST)
• [ GLSA 200909-12 ] HTMLDOC: User-assisted execution of arbitrary code
  • Alex Legler (Sat Sep 12 2009 - 19:28:36 EEST)
• [ GLSA 200909-13 ] irssi: Execution of arbitrary code
  • Alex Legler (Sat Sep 12 2009 - 19:29:10 EEST)
• [ GLSA 200909-14 ] Horde: Multiple vulnerabilities
  • Alex Legler (Sat Sep 12 2009 - 19:29:32 EEST)
• [ GLSA 200909-15 ] Lynx: Arbitrary command execution
  • Alex Legler (Sat Sep 12 2009 - 19:29:56 EEST)
• [ GLSA 200909-16 ] Wireshark: Denial of Service
  • Tobias Heinlein (Sun Sep 13 2009 - 22:15:57 EEST)
• [ GLSA 200909-17 ] ZNC: Directory traversal
  • Tobias Heinlein (Sun Sep 13 2009 - 22:18:08 EEST)
• [ GLSA 200909-18 ] nginx: Remote execution of arbitrary code
  • Alex Legler (Fri Sep 18 2009 - 22:45:41 EEST)
• [ GLSA 200909-19 ] Dnsmasq: Multiple vulnerabilities
  • Alex Legler (Sun Sep 20 2009 - 21:58:46 EEST)
• [ GLSA 200909-20 ] cURL: Certificate validation error
  • Alex Legler (Fri Sep 25 2009 - 21:23:01 EEST)
• [ MDVSA-2009:176 ] postgresql
  • security@mandriva.com (Wed Sep 30 2009 - 21:32:01 EEST)
• [ MDVSA-2009:177 ] postgresql
  • security@mandriva.com (Wed Sep 30 2009 - 22:18:01 EEST)
• [ MDVSA-2009:197 ] nss
  • security@mandriva.com (Tue Sep 01 2009 - 22:32:01 EEST)
• [ MDVSA-2009:197-2 ] nss
  • security@mandriva.com (Fri Sep 11 2009 - 22:06:00 EEST)
• [ MDVSA-2009:225 ] qt4
  • security@mandriva.com (Tue Sep 08 2009 - 19:20:01 EEST)
• [ MDVSA-2009:226 ] aria2
  • security@mandriva.com (Wed Sep 09 2009 - 20:36:00 EEST)
• [ MDVSA-2009:226 ] freeradius
  • security@mandriva.com (Thu Sep 10 2009 - 15:28:00 EEST)
• [ MDVSA-2009:228 ] libneon
  • security@mandriva.com (Fri Sep 11 2009 - 21:27:00 EEST)
• [ MDVSA-2009:229 ] cyrus-imapd
  • security@mandriva.com (Fri Sep 11 2009 - 16:31:00 EEST)
• [ MDVSA-2009:230 ] pidgin
  • security@mandriva.com (Fri Sep 11 2009 - 18:56:01 EEST)
• [ MDVSA-2009:231 ] htmldoc
  • security@mandriva.com (Fri Sep 11 2009 - 20:35:01 EEST)
• [ MDVSA-2009:232 ] libsamplerate
  • security@mandriva.com (Fri Sep 11 2009 - 23:19:00 EEST)
• [ MDVSA-2009:233 ] kernel
  • security@mandriva.com (Tue Sep 15 2009 - 02:07:00 EEST)
• [ MDVSA-2009:234 ] silc-toolkit
  • security@mandriva.com (Tue Sep 15 2009 - 19:12:00 EEST)
• [ MDVSA-2009:234-1 ] silc-toolkit
  • security@mandriva.com (Tue Sep 15 2009 - 19:26:00 EEST)
• [ MDVSA-2009:235 ] silc-toolkit
  • security@mandriva.com (Tue Sep 15 2009 - 19:33:00 EEST)
• [ MDVSA-2009:236 ] firefox
  • security@mandriva.com (Sun Sep 20 2009 - 17:58:01 EEST)
• [ MDVSA-2009:237 ] openssl
  • security@mandriva.com (Mon Sep 21 2009 - 21:17:01 EEST)
• [ MDVSA-2009:238 ] openssl
  • security@mandriva.com (Mon Sep 21 2009 - 22:37:00 EEST)
• [ MDVSA-2009:239 ] openssl
  • security@mandriva.com (Tue Sep 22 2009 - 15:02:01 EEST)
• [ MDVSA-2009:240 ] apache
  • security@mandriva.com (Tue Sep 22 2009 - 18:26:00 EEST)
• [ MDVSA-2009:241 ] squid
  • security@mandriva.com (Tue Sep 22 2009 - 20:10:00 EEST)
• [ MDVSA-2009:242 ] dovecot
  • security@mandriva.com (Tue Sep 22 2009 - 21:19:01 EEST)
• [ MDVSA-2009:242-1 ] dovecot
  • security@mandriva.com (Tue Sep 22 2009 - 22:02:00 EEST)
• [ MDVSA-2009:243 ] freetype2
  • security@mandriva.com (Wed Sep 23 2009 - 04:00:00 EEST)
• [ MDVSA-2009:243-1 ] freetype2
  • security@mandriva.com (Thu Sep 24 2009 - 03:21:00 EEST)
• [ MDVSA-2009:244 ] xfig
  • security@mandriva.com (Wed Sep 23 2009 - 19:55:00 EEST)
• [ MDVSA-2009:245 ] glib2.0
  • security@mandriva.com (Thu Sep 24 2009 - 16:49:00 EEST)
• [ MDVSA-2009:246 ] php
  • security@mandriva.com (Fri Sep 25 2009 - 21:35:01 EEST)
• [ MDVSA-2009:247 ] php
  • security@mandriva.com (Fri Sep 25 2009 - 22:25:00 EEST)
• [ MDVSA-2009:248 ] php
  • security@mandriva.com (Fri Sep 25 2009 - 22:45:00 EEST)
• [ MDVSA-2009:249 ] newt
  • security@mandriva.com (Sun Sep 27 2009 - 19:09:00 EEST)
• [Advisory] ChartDirector Critical File Access
  • DokFLeed (Wed Sep 09 2009 - 11:17:15 EEST)
• [ADVISORY] NetCache URL DoS - Argentinian ISP
  • Arturo 'Buanzo' Busleiman (Tue Sep 01 2009 - 01:53:30 EEST)
• [BMSA-2009-06] Remote code execution in BKAV eOffice
  • Nam Nguyen (Tue Sep 01 2009 - 19:51:52 EEST)
• [DSECRG-09-043] SAP GUI 7.1 Insecure Method
  • Alexandr Polyakov (Mon Sep 28 2009 - 11:42:48 EEST)
• [DSECRG-09-055] OSSIM 2.1 - Multiple security vulnerabilities
  • research@dsec.ru (Wed Sep 23 2009 - 15:53:39 EEST)
• [ECHO_ADV_111$2009] Joomla Hotel Booking System Component XSS/SQL Injection Multiple Vulnerability
  • adv@e-rdc.org (Mon Sep 14 2009 - 18:04:14 EEST)
• [Full-disclosure] 3rd party patch for XP for MS09-048?
  • Mailing lists at Core Security Technologies (Wed Sep 23 2009 - 01:32:01 EEST)
  • Susan Bradley (Thu Sep 17 2009 - 20:16:33 EEST)
  • Susan Bradley (Thu Sep 17 2009 - 17:59:21 EEST)
  • John Morrison (Thu Sep 17 2009 - 18:29:03 EEST)
  • Aras \ (Thu Sep 17 2009 - 01:39:05 EEST)
  • Larry Seltzer (Thu Sep 17 2009 - 00:02:39 EEST)
  • Susan Bradley (Wed Sep 16 2009 - 20:16:02 EEST)
  • Thor (Hammer of God) (Wed Sep 16 2009 - 21:23:32 EEST)
  • Susan Bradley (Wed Sep 16 2009 - 21:25:54 EEST)
  • Thor (Hammer of God) (Wed Sep 16 2009 - 19:31:56 EEST)
  • Thor (Hammer of God) (Wed Sep 16 2009 - 18:15:23 EEST)
  • Larry Seltzer (Wed Sep 16 2009 - 18:21:02 EEST)
  • Thor (Hammer of God) (Wed Sep 16 2009 - 17:59:51 EEST)
• [Full-disclosure] FreeBSD <= 6.1 kqueue() NULL pointer dereference
  • Przemyslaw Frasunek (Sun Sep 13 2009 - 11:49:33 EEST)
• [Full-disclosure] Microsoft Internet Information Server ftpd zeroday
  • Thierry Zoller (Tue Sep 08 2009 - 13:46:40 EEST)
  • Guido Landi (Wed Sep 02 2009 - 11:33:47 EEST)
  • Guido Landi (Wed Sep 02 2009 - 12:14:21 EEST)
  • Vladimir '3APA3A' Dubrovin (Mon Aug 31 2009 - 20:04:18 EEST)
  • Thierry Zoller (Mon Aug 31 2009 - 19:21:12 EEST)
  • Vladimir '3APA3A' Dubrovin (Wed Sep 02 2009 - 12:00:16 EEST)
• [MajorSecurity Advisory #55]moziloCMS - Directory Traversal, Cross Site Scripting and Session Fixation Issues
  • david@majorsecurity.info (Tue Sep 22 2009 - 01:21:31 EEST)
• [MajorSecurity Advisory #57]PHP <=5.3 - preg_match() full path disclosure
  • David Vieira-Kurz (Mon Sep 28 2009 - 01:16:33 EEST)
• [MajorSecurity Advisory #59]PHP <=5.3 - mysqli_real_escape_string() full path disclosure
  • David Vieira-Kurz (Mon Sep 28 2009 - 09:42:04 EEST)
• [oCERT-2009-013] yTNEF/Evolution TNEF attachment decoder input sanitization errors
  • Andrea Barisani (Sat Sep 05 2009 - 14:47:33 EEST)
• [scip_Advisory 4020] Check Point Connectra R62 Login Script Injection Vulnerability
  • Stefan Friedli (Mon Sep 21 2009 - 18:05:31 EEST)
• [scip_Advisory 4021] IBM Lotus Notes 8.5 RSS Widget Privilege Escalation
  • Marc Ruef (Tue Sep 08 2009 - 13:26:26 EEST)
• [security bulletin] HPSBGN02441 SSRT090082 rev.1 - HP ProCurve Identity Driven Manager (IDM) Running on Microsoft IAS or NPS, Local Unauthorized Access
  • security-alert@hp.com (Mon Sep 21 2009 - 23:44:35 EEST)
• [security bulletin] HPSBMA02461 SSRT090187 rev.1 - HP Remote Graphics Software (RGS) Sender, Remote Unauthorized Access
  • security-alert@hp.com (Mon Sep 28 2009 - 21:47:35 EEST)
• [security bulletin] HPSBST02459 SSRT080134 rev.2 - HP StorageWorks Remote Management Interface (RMI) for MSL Tape Libraries and 1/8 G2 Tape Autoloaders, Denial of Service (DoS)
  • security-alert@hp.com (Fri Sep 18 2009 - 17:57:24 EEST)
• [security bulletin] HPSBUX02457 SSRT090174 rev.1 - HP-UX Running Role-Based Access Control (RBAC), Local Unauthorized Access
  • security-alert@hp.com (Tue Sep 22 2009 - 21:05:09 EEST)
• [security bulletin] HPSBUX02458 SSRT090104 rev.1 - HP-UX Running bootpd, Remote Denial of Service (DoS)
  • security-alert@hp.com (Wed Sep 16 2009 - 02:01:41 EEST)
• [SECURITY] [DSA 1876-1] New dnsmasq packages fix remote code execution
  • Florian Weimer (Tue Sep 01 2009 - 22:41:26 EEST)
• [SECURITY] [DSA 1877-1] New mysql-dfsg-5.0 packages fix arbitrary code execution
  • Sebastien Delafond (Wed Sep 02 2009 - 21:20:43 EEST)
• [SECURITY] [DSA 1878-1] New devscripts packages fix remote code execution
  • Florian Weimer (Wed Sep 02 2009 - 21:56:06 EEST)
• [SECURITY] [DSA 1878-2] New devscripts packages fix regressions
  • Florian Weimer (Fri Sep 11 2009 - 09:20:24 EEST)
• [SECURITY] [DSA 1879-1] New silc-client/silc-toolkit packages fix arbitrary code execution
  • Nico Golde (Fri Sep 04 2009 - 18:18:33 EEST)
• [SECURITY] [DSA 1881-1] New cyrus-imapd packages fix arbitrary code execution
  • Nico Golde (Mon Sep 07 2009 - 16:17:12 EEST)
• [SECURITY] [DSA 1882-1] New xapian-omega packages fix cross-site scripting
  • Nico Golde (Wed Sep 09 2009 - 16:30:17 EEST)
• [SECURITY] [DSA 1883-1] New nagios2 packages fix several cross-site scriptings
  • Steffen Joeris (Thu Sep 10 2009 - 07:00:22 EEST)
• [SECURITY] [DSA 1883-2] New nagios2 packages fix regression
  • Steffen Joeris (Mon Sep 14 2009 - 17:51:20 EEST)
• [SECURITY] [DSA 1884-1] New nginx packages fix arbitrary code execution
  • Nico Golde (Mon Sep 14 2009 - 18:53:38 EEST)
• [SECURITY] [DSA 1885-1] New xulrunner packages fix several vulnerabilities
  • Moritz Muehlenhoff (Mon Sep 14 2009 - 20:05:35 EEST)
• [SECURITY] [DSA 1886-1] New iceweasel packages fix several vulnerabilities
  • Moritz Muehlenhoff (Mon Sep 14 2009 - 20:16:50 EEST)
• [SECURITY] [DSA 1887-1] New rails packages fix cross-site scripting
  • Steffen Joeris (Tue Sep 15 2009 - 19:47:38 EEST)
• [SECURITY] [DSA 1888-1] New openssl packages deprecate MD2 hash signatures
  • Moritz Muehlenhoff (Wed Sep 16 2009 - 00:37:22 EEST)
• [SECURITY] [DSA 1889-1] New icu packages correct multibyte sequence parsing
  • Moritz Muehlenhoff (Wed Sep 16 2009 - 22:10:17 EEST)
• [SECURITY] [DSA 1890-1] New wxwidgets packages fix arbitrary code execution
  • Steffen Joeris (Sat Sep 19 2009 - 11:26:11 EEST)
• [SECURITY] [DSA 1891-1] New changetrack packages fix arbitrary code execution
  • Steffen Joeris (Tue Sep 22 2009 - 10:54:42 EEST)
• [SECURITY] [DSA 1892-1] New dovecot packages fix arbitrary code execution
  • Steffen Joeris (Wed Sep 23 2009 - 19:36:10 EEST)
• [SECURITY] [DSA 1893-1] New cyrus-imapd-2.2/kolab-cyrus-imapd packages fix arbitrary code execution
  • Steffen Joeris (Wed Sep 23 2009 - 19:36:12 EEST)
• [SECURITY] [DSA 1894-1] New newt packages fix arbitrary code execution
  • Steffen Joeris (Thu Sep 24 2009 - 15:30:05 EEST)
• [SECURITY] [DSA 1895-1] New xmltooling packages fix potential code execution
  • Florian Weimer (Thu Sep 24 2009 - 22:03:32 EEST)
• [SECURITY] [DSA 1896-1] New Shibboleth 1.x packages fix potential code execution
  • Florian Weimer (Mon Sep 28 2009 - 08:13:02 EEST)
• [SECURITY] [DSA 1897-1] New horde3 packages fix arbitrary code execution
  • Nico Golde (Mon Sep 28 2009 - 12:54:33 EEST)
• [Suspected Spam][USN-835-1] neon vulnerabilities
  • Kees Cook (Mon Sep 21 2009 - 22:46:31 EEST)
• [TKADV2009-007] Apple iPhone OS AudioCodecs Heap Buffer Overflow
  • Tobias Klein (Mon Sep 14 2009 - 21:25:22 EEST)
• [TZO-08-2009] Bitdefender generic bypass/evasion
  • noloader@gmail.com (Sat Sep 05 2009 - 20:19:12 EEST)
• [UPRSN] Ubuntu Privacy Remix 9.04r2 fixes security issues
  • Ubuntu Privacy Remix Team (Sat Sep 19 2009 - 20:25:27 EEST)
• [USN-810-2] NSS regression
  • Kees Cook (Wed Sep 02 2009 - 04:16:13 EEST)
• [USN-821-1] Firefox and Xulrunner vulnerabilities
  • Jamie Strandboge (Thu Sep 10 2009 - 19:46:17 EEST)
• [USN-827-1] Dnsmasq vulnerabilities
  • Jamie Strandboge (Wed Sep 02 2009 - 00:51:56 EEST)
• [USN-828-1] PAM vulnerability
  • Kees Cook (Wed Sep 09 2009 - 01:31:16 EEST)
• [USN-829-1] Qt vulnerability
  • Jamie Strandboge (Fri Sep 11 2009 - 01:42:18 EEST)
• [USN-830-1] OpenSSL vulnerability
  • Marc Deslauriers (Mon Sep 14 2009 - 21:07:43 EEST)
• [USN-831-1] OpenEXR vulnerabilities
  • Marc Deslauriers (Mon Sep 14 2009 - 21:08:11 EEST)
• [USN-832-1] FreeRADIUS vulnerability
  • Marc Deslauriers (Wed Sep 16 2009 - 22:23:34 EEST)
• [USN-833-1] KDE-Libs vulnerability
  • Jamie Strandboge (Fri Sep 18 2009 - 03:53:21 EEST)
• [USN-834-1] PostgreSQL vulnerabilities
  • Jamie Strandboge (Mon Sep 21 2009 - 18:24:37 EEST)
• [USN-836-1] WebKit vulnerabilities
  • Marc Deslauriers (Wed Sep 23 2009 - 16:29:59 EEST)
• [USN-837-1] Newt vulnerability
  • Marc Deslauriers (Thu Sep 24 2009 - 16:40:17 EEST)
• [USN-838-1] Dovecot vulnerabilities
  • Marc Deslauriers (Mon Sep 28 2009 - 16:24:01 EEST)
• Adobe Photoshop Elements 8.0 Active File Monitor Service Bad Security Descriptor Local Elevation Of Privileges
  • nospam@gmail.it (Tue Sep 29 2009 - 19:38:22 EEST)
• Advisory 01/2009: Horde_Form_Type_image Arbitrary File Overwrite Vulnerability
  • Stefan Esser (Fri Sep 18 2009 - 17:46:29 EEST)
• Advisory: Crypto backdoor in Qnap storage devices (CVE-2009-3200)
  • Marc Heuse (Fri Sep 18 2009 - 20:36:49 EEST)
• ANNOUNCE: RFIDIOt release - v0.z - 16th September, 2009
  • Adam Laurie (Wed Sep 16 2009 - 02:04:27 EEST)
• AST-2009-006: IAX2 Call Number Resource Exhaustion
  • Asterisk Security Team (Fri Sep 04 2009 - 01:47:35 EEST)
• Avast aswMon2.sys kernel memory corruption and Local Privilege Escalation.
  • contact.fingers@gmail.com (Wed Sep 23 2009 - 19:24:30 EEST)
• Black Hat DC Call for Papers is now OPEN
  • Jeff Moss (Thu Sep 24 2009 - 02:29:04 EEST)
• C4 SCADA Security Advisory - OSISoft PI Server Authentication Weakness
  • Eyal Udassin (Wed Sep 30 2009 - 18:24:38 EEST)
• Call for Participation - ACM Conference on Computer and Communications Security (CCS)
  • Christopher Kruegel (Thu Sep 24 2009 - 22:22:50 EEST)
• Cisco ACE XML Gateway <= 6.0 Internal IP disclosure
  • nitrĜus (Fri Sep 25 2009 - 07:00:12 EEST)
• Cisco Security Advisory: Cisco IOS Software Crafted Encryption Packet Denial of Service Vulnerability
  • Cisco Systems Product Security Incident Response Team (Wed Sep 23 2009 - 19:15:00 EEST)
• Cisco Security Advisory: Cisco IOS Software H.323 Denial of Service Vulnerability
  • Cisco Systems Product Security Incident Response Team (Wed Sep 23 2009 - 19:15:00 EEST)
• Cisco Security Advisory: Cisco IOS Software Internet Key Exchange Resource Exhaustion Vulnerability
  • Cisco Systems Product Security Incident Response Team (Wed Sep 23 2009 - 19:15:00 EEST)
• Cisco Security Advisory: Cisco IOS Software Network Time Protocol Packet Vulnerability
  • Cisco Systems Product Security Incident Response Team (Wed Sep 23 2009 - 19:15:00 EEST)
• Cisco Security Advisory: Cisco IOS Software Object-group Access Control List Bypass Vulnerability
  • Cisco Systems Product Security Incident Response Team (Wed Sep 23 2009 - 19:15:00 EEST)
• Cisco Security Advisory: Cisco IOS Software Session Initiation Protocol Denial of Service Vulnerability
  • Cisco Systems Product Security Incident Response Team (Wed Sep 23 2009 - 19:15:00 EEST)
• Cisco Security Advisory: Cisco IOS Software Zone-Based Policy Firewall Vulnerability
  • Cisco Systems Product Security Incident Response Team (Wed Sep 23 2009 - 19:15:00 EEST)
• Cisco Security Advisory: Cisco Unified Communications Manager Express Vulnerability
  • Cisco Systems Product Security Incident Response Team (Wed Sep 23 2009 - 19:15:00 EEST)
• Cisco Security Advisory: Cisco Unified Communications Manager Session Initiation Protocol Denial of Service Vulnerability
  • Cisco Systems Product Security Incident Response Team (Wed Sep 23 2009 - 19:15:00 EEST)
• COMPENG 2010 - Extended Submission Deadline
  • Federico Maggi (Fri Sep 25 2009 - 12:38:32 EEST)
• CORE-2009-0820 - Dnsmasq Heap Overflow and Null-pointer Dereference on TFTP Server
  • CORE Security Technologies Advisories (Wed Sep 09 2009 - 19:41:50 EEST)
• cour supreme 'index.php' SQL Injection & Local File Include Vulnerability
  • CrAzY_CrAcKeR@hotmail.com (Wed Sep 23 2009 - 07:13:36 EEST)
• Cross-Site Scripting vulnerability in E107
  • MustLive (Thu Sep 24 2009 - 20:18:04 EEST)
• Cross-Site Scripting vulnerability in eCaptcha
  • MustLive (Mon Sep 28 2009 - 23:45:14 EEST)
• Dawaween V 1.03 <<----SQL Injection Exploit
  • Dazz.band@hotmail.com (Mon Sep 21 2009 - 09:17:31 EEST)
• DoS vulnerability in Google Chrome
  • MustLive (Tue Sep 08 2009 - 23:58:07 EEST)
• DvBBS v2.0(PHP) boardrule.php Sql injection
  • info@securitylab.ir (Fri Sep 04 2009 - 13:07:49 EEST)
• Engeman - SQL Injection Vulnerability (vendor url erratum)
  • crashbrz@gmail.com (Thu Sep 24 2009 - 14:43:44 EEST)
• Exploiting Chrome and Opera's inbuilt ATOM/RSS reader with Script Execution and more
  • Inferno (Wed Sep 16 2009 - 07:11:21 EEST)
• FlatPress 0.804-0.812.1 Local File Inclusion to Remote Command Execution
  • Giuseppe Fuggiano (Tue Sep 29 2009 - 22:36:37 EEST)
• FRHACK ITSec Conf DVDs and Live Streams
  • Jerome Athias (Thu Sep 03 2009 - 13:56:48 EEST)
• FRHACK OS v1 alpha1 released
  • Jerome Athias (Fri Sep 04 2009 - 13:44:37 EEST)
  • Jerome Athias (Thu Sep 03 2009 - 13:30:29 EEST)
• Improper Authentication Mechanism in 3Com Wireless8760 Dual Radio 11a/b/g Poe Access Point
  • Tom Neaves (Wed Sep 16 2009 - 00:49:21 EEST)
  • Yossi Yakubov (Tue Sep 15 2009 - 22:27:31 EEST)
• International Hacking & Security Conference "POC2009" and Call for Paper
  • pocadm@gmail.com (Wed Sep 02 2009 - 17:45:18 EEST)
• iphone email client does not validate ssl certificates
  • Steve Shockley (Tue Sep 29 2009 - 04:27:34 EEST)
  • Pavel Machek (Sat Sep 26 2009 - 12:54:08 EEST)
  • Bill Borskey (Fri Sep 11 2009 - 20:33:33 EEST)
• Local privilege escalation vulnerability in Protector Plus Antivirus (Proland Software)
  • ss_contacts@hotmail.com (Tue Sep 15 2009 - 12:55:13 EEST)
• Local privilege escalation vulnerability in Trustport security software
  • ss_contacts@hotmail.com (Mon Sep 28 2009 - 17:13:22 EEST)
• Mambo 4.6.3 arbitrary file upload
  • Pawe³ £askarzewski (Sat Sep 19 2009 - 02:22:18 EEST)
• MD5 hash extension attack breaks API authentication of Flickr and others
  • Juliano Rizzo (Wed Sep 30 2009 - 06:22:37 EEST)
• Microsoft Internet Information Services 5.0/6.0 FTP SERVER DENIAL OF SERVICE ("Stack Exhaustion")
  • Kingcope (Fri Sep 04 2009 - 00:53:52 EEST)
• MS09-048 includes fixes for TCP/IP implementation issues reported more than a year ago
  • Jim Duncan (Wed Sep 09 2009 - 22:33:52 EEST)
  • bob@home.com (Wed Sep 09 2009 - 18:19:25 EEST)
  • Juha-Matti Laurio (Tue Sep 08 2009 - 22:30:11 EEST)
• Multiple RDP Connections BSOD DOS
  • Tim Medin (Thu Sep 10 2009 - 03:34:03 EEST)
  • Earnhart, Benjamin J (Thu Sep 10 2009 - 00:15:45 EEST)
  • John Menerick (Thu Sep 10 2009 - 00:16:12 EEST)
  • nobody@nowhere.com (Wed Sep 09 2009 - 23:28:35 EEST)
  • Elvedin Trnjanin (Wed Sep 09 2009 - 20:56:28 EEST)
  • Tim Medin (Tue Sep 08 2009 - 21:35:41 EEST)
• Multiple Remote Command Execution vulnerabilities on Avaya Intuity Audix LX (plus some client-side bugs)
  • Adrian P (Fri Sep 18 2009 - 11:10:07 EEST)
• Multiple Vulnerabilities
  • Jerome Athias (Sat Sep 26 2009 - 10:52:37 EEST)
  • Dr_IDE (Fri Sep 25 2009 - 20:24:18 EEST)
• New Bug Found By Ostoure Sazan Sharif
  • ostoure.sazan@gmail.com (Thu Sep 03 2009 - 22:31:12 EEST)
• nginx - low risk webdav destination bug
  • Kingcope (Wed Sep 23 2009 - 12:12:13 EEST)
• nginx internal DNS cache poisoning
  • Maxim Dounin (Thu Sep 17 2009 - 16:47:13 EEST)
  • Matthew Dempsky (Thu Sep 17 2009 - 02:15:14 EEST)
• Norman Internet Update Deamon sends cleartext license key on update
  • Jeffrey Walton (Wed Sep 02 2009 - 00:18:57 EEST)
  • Stefan Bauer (Tue Sep 01 2009 - 10:00:42 EEST)
• Novell eDirectory 8.8 SP5 Dhost Http Server DoS
  • karakorsankara@hotmail.com (Tue Sep 08 2009 - 12:09:41 EEST)
• Nullam Blog Multiple Remote Vulnerabilities
  • Salvatore Fresta aka Drosophila (Thu Sep 10 2009 - 01:50:56 EEST)
• nullcon Goa 2010 Call For Papers
  • nullcon nullcon (Sat Sep 12 2009 - 09:51:06 EEST)
• Open Beta - New Free AV Software
  • Alfred Huger (Wed Sep 09 2009 - 08:04:28 EEST)
• Peiter "Mudge" Zatko petition to be named U.S. Cybersecurity Chief
  • The Sp3ctacle (Thu Sep 17 2009 - 21:01:40 EEST)
• Pwning Opera Unite with Inferno's Eleven
  • Inferno (Tue Sep 01 2009 - 09:52:13 EEST)
• Quiksoft EasyMail 6.0.3.0 imap connect() ActiveX stack overflow exploit
  • Sebastian Wolfgarten (Thu Sep 17 2009 - 12:35:24 EEST)
• Regarding Microsoft srv2.sys SMB2.0 NEGOTIATE BSOD
  • Reversemode (Tue Sep 08 2009 - 19:23:31 EEST)
• Regular Expression Denial of Service
  • hackerwebzine@gmail.com (Mon Sep 28 2009 - 16:19:06 EEST)
  • Pavel Kankovsky (Sun Sep 13 2009 - 22:35:09 EEST)
  • Pavel Kankovsky (Sun Sep 13 2009 - 21:32:37 EEST)
  • Jeffrey Walton (Sat Sep 12 2009 - 00:35:56 EEST)
  • Gadi Evron (Sat Sep 12 2009 - 00:10:08 EEST)
  • Thierry Zoller (Fri Sep 11 2009 - 20:06:09 EEST)
  • Gadi Evron (Fri Sep 11 2009 - 19:21:24 EEST)
  • Alex Roichman (Thu Sep 10 2009 - 17:23:15 EEST)
• rubrique 'rubrique.php' SQL Injection Vulnerability
  • CrAzY_CrAcKeR@hotmail.com (Sat Sep 19 2009 - 11:56:49 EEST)
• SeacureIT Preview Conference 2009
  • Stefano Zanero (Wed Sep 09 2009 - 14:10:39 EEST)
• SEC Consult SA-20090901-0 :: File disclosure vulnerability in JSFTemplating, Mojarra Scales and GlassFish Application Server v3 Admin console
  • Johannes Greil (Tue Sep 01 2009 - 14:41:32 EEST)
• SEC Consult SA-20090917-0 :: RADactive I-Load Multiple Vulnerabilities
  • Stefan Streichsbier (Thu Sep 17 2009 - 19:05:03 EEST)
• Secunia Research: OpenOffice.org Word Document Table Parsing Buffer Overflow
  • Secunia Research (Tue Sep 01 2009 - 11:04:21 EEST)
• Secunia Research: OpenOffice.org Word Document Table Parsing Integer Underflow
  • Secunia Research (Tue Sep 01 2009 - 11:04:10 EEST)
• Secunia Research: VMWare VMnc Codec Mismatched Dimensions Buffer Overflow
  • Secunia Research (Mon Sep 07 2009 - 10:45:27 EEST)
• SecurityFocus Linux Newsletter #447
  • sfa@securityfocus.com (Fri Sep 25 2009 - 20:19:29 EEST)
• SecurityFocus Microsoft Newsletter #452
  • sfa@securityfocus.com (Fri Sep 25 2009 - 20:19:25 EEST)
• SecurityFocus Newsletter #511
  • sfa@securityfocus.com (Fri Sep 25 2009 - 20:21:27 EEST)
• SecurityTubeCon CFP, Venue: Cyberspace!
  • Vivek Ramachandran (Thu Sep 10 2009 - 07:45:03 EEST)
• ShmooCon 2010 CFP
  • Bruce Potter (Fri Sep 11 2009 - 21:19:09 EEST)
• Siemens Gigaset SE361 Wlan - Remote Reboot
  • crashbrz@gmail.com (Fri Sep 11 2009 - 18:23:24 EEST)
• SMB SRV2.SYS Denial of Service PoC
  • igottabug@sogetthis.com (Wed Sep 09 2009 - 07:18:21 EEST)
• T-HTB Manager Mutiple Blind SQL Injection
  • Salvatore Fresta aka Drosophila (Thu Sep 10 2009 - 18:56:44 EEST)
• TCP/IP Orphaned Connections Vulnerability
  • Fabian Yamaguchi (Wed Sep 09 2009 - 16:28:20 EEST)
• the NetBSD case (CVE-2009-2793)
  • Julien TINNES (Wed Sep 16 2009 - 19:58:17 EEST)
• ToorCon 11 Preliminary Lineup Announced!
  • h1kari@toorcon.org (Tue Sep 22 2009 - 00:35:24 EEST)
• Various Orion application application server example pages are vulnerable to XSS.
  • info@procheckup.com (Mon Sep 07 2009 - 17:32:28 EEST)
• vBulletin 3.8.2 Denial of Service Exploit
  • snip3r ir4Q (Sat Sep 12 2009 - 02:52:23 EEST)
• VMSA-2009-0011 VMware Studio 2.0 addresses a security issue in the public beta version of Studio 2.0
  • VMware Security team (Tue Sep 01 2009 - 08:32:24 EEST)
• VMSA-2009-0012 VMware Movie Decoder, VMware Workstation, VMware Player, and VMware ACE resolve security issues.
  • VMware Security team (Sat Sep 05 2009 - 03:40:13 EEST)
• Vulnerabilities in E107
  • MustLive (Sat Sep 26 2009 - 18:51:06 EEST)
• War FTP Daemon Remote Denial Of Service Vulnerability
  • Jarle Aase (Sat Sep 12 2009 - 19:45:05 EEST)
• WinRAR v3.80 - ZIP Filename Spoofing
  • chr1x (Tue Sep 29 2009 - 07:36:28 EEST)
• yTNEF/Evolution TNEF Attachment decoder plugin directory traversal & buffer overflow vulnerabilities
  • Akita Software Security (Sun Sep 06 2009 - 13:49:24 EEST)
• ZDI-09-062: Microsoft Internet Explorer JScript arguments Invocation Memory Corruption Vulnerability
  • ZDI Disclosures (Tue Sep 08 2009 - 22:45:19 EEST)
• ZDI-09-063: Apple QuickTime H.264 Nal Unit Length Heap Overflow Vulnerability
  • ZDI Disclosures (Thu Sep 10 2009 - 23:40:35 EEST)
• ZDI-09-064: Apple QuickTime FlashPix Sector Size Overflow Vulnerability
  • ZDI Disclosures (Thu Sep 10 2009 - 23:41:13 EEST)
• ZDI-09-065: Mozilla Firefox TreeColumns Dangling Pointer Vulnerability
  • ZDI Disclosures (Thu Sep 10 2009 - 23:42:01 EEST)
• ZDI-09-066: Adobe RoboHelp Server Arbitrary File Upload and Execute Vulnerability
  • ZDI Disclosures (Wed Sep 23 2009 - 22:46:00 EEST)

Last message date: Wed Sep 30 2009 - 22:57:50 EEST
Archived on: Wed Sep 30 2009 - 22:57:51 EEST

This archive was generated by hypermail 2b28 : Wed Sep 30 2009 - 22:57:51 EEST