stdin
By Author

• Adam Laurie
  • Announce: RFIDIOt-1.0a released - November 2009 (Mon Nov 30 2009 - 14:25:30 EET)
• admin@ekin0x.com
  • phpPollScript - 1.3 Remote File Include (Sun Dec 20 2009 - 13:43:25 EET)
  • WX Guest Book 1.1.208 (SQL/XSS) Multiple Remote Vulnerabilities (Sun Dec 13 2009 - 14:45:17 EET)
  • Loggix Project <= 9.4.5 Multiple Remote File Inclusion Vulnerabilities (Sun Dec 13 2009 - 14:44:46 EET)
• advisories@intern0t.net
  • [InterN0T] LiveZilla - XSS Vulnerability (Sun Dec 27 2009 - 18:19:50 EET)
  • [InterN0T] Google Analytics plugin for Wordpress - XSS Vulnerability (Fri Dec 04 2009 - 13:47:24 EET)
• Akita Software Security
  • FreeWebshop.org: multiple vulnerabilities (Tue Dec 29 2009 - 12:34:07 EET)
• Alessandro Tanasi
  • [tools] hostmap-0.2.1 released (Sat Dec 26 2009 - 21:57:28 EET)
• Alex Legler
  • [ GLSA 200912-02 ] Ruby on Rails: Multiple vulnerabilities (Sun Dec 20 2009 - 13:33:32 EET)
  • [ GLSA 200912-01 ] OpenSSL: Multiple vulnerabilities (Tue Dec 01 2009 - 23:32:14 EET)
  • [ GLSA 200911-06 ] PEAR Net_Traceroute: Command injection (Thu Nov 26 2009 - 21:16:19 EET)
• Alexander Klink
  • SQL-Ledger – several vulnerabilities (Mon Dec 21 2009 - 16:17:21 EET)
• Andrea Barisani
  • [Suspected Spam][oCERT-2009-019] Ganeti path sanitization errors (Thu Dec 17 2009 - 18:26:31 EET)
  • [oCERT-2009-017] PHP multiple issues (Mon Nov 30 2009 - 23:52:04 EET)
• Andrea Fabrizi
  • PhpShop Multiple Vulnerabilities (Sun Dec 06 2009 - 22:46:57 EET)
• Andrea Purificato
  • Re: [rejected] Oracle exploit for CTXSYS.DRVXTABC.CREATE_TABLES and others (Wed Dec 02 2009 - 12:21:30 EET)
  • Oracle exploit for CTXSYS.DRVXTABC.CREATE_TABLES and others (Sat Nov 28 2009 - 21:36:31 EET)
• Andrew Farmer
  • Re: [Full-disclosure] Remote Command Execution in dotDefender Site Management (Tue Dec 01 2009 - 19:00:57 EET)
• anonymous@anonymous.com
  • Re: Re: Re: Re: Back door trojan in acajoom-3.2.6 for joomla (Sat Dec 05 2009 - 17:08:50 EET)
• Asterisk Security Team
  • AST-2009-010: RTP Remote Crash Vulnerability (Mon Nov 30 2009 - 23:58:49 EET)
• Barkýn KILIÇ
  • Re: ** FreeBSD local r00t zeroday (Wed Dec 02 2009 - 18:44:29 EET)
• Barry Raveendran Greene
  • RE: TLS Renegotiation Vulnerability: Proof of Concept Code (Python) (Mon Dec 21 2009 - 22:16:16 EET)
• Blair
  • Trango Broadband Wireless Rogue SU Authentication Bug (Tue Dec 15 2009 - 13:00:19 EET)
• Bogdan Calin
  • Zen Cart local file disclosure vulnerability (Wed Dec 09 2009 - 16:25:39 EET)
• bugreport@itguard.info
  • Microsoft IIS 0Day Vulnerability in Parsing Files (semi-colon bug) (Wed Dec 23 2009 - 23:34:07 EET)
• c0dy@r00tDefaced.net
  • Theeta CMS (Cross Site Scripting,SQL Injection) Multiple Vulnerabilities (Tue Dec 01 2009 - 18:14:06 EET)
• Campus Party EU Spain
  • Campus Party Eu 2010 Security Challenge - Call For Participants (Thu Dec 17 2009 - 02:34:52 EET)
• Cisco Systems Product Security Incident Response Team
  • Cisco Security Advisory: Multiple Cisco WebEx WRF Player Vulnerabilities (Wed Dec 16 2009 - 18:55:47 EET)
• ClubHack
  • ClubHack2009 presentations are now online (Sat Dec 26 2009 - 10:20:21 EET)
• CORE Security Technologies Advisories
  • CORE-2009-1013: Multiple XSS and Injection Vulnerabilities in TestLink Test Management and Execution System (Thu Dec 10 2009 - 01:16:34 EET)
  • CORE-2009-0911: DAZ Studio Arbitrary Command Execution (Thu Dec 03 2009 - 22:07:53 EET)
• Crash - DcLabs
  • Tests about semicolon zero-day (BID 37460) (Tue Dec 29 2009 - 00:27:51 EET)
• crashbrz@gmail.com
  • Re: RE: Tests about semicolon zero-day (BID 37460) (Wed Dec 30 2009 - 14:59:55 EET)
• cxib@securityreason.com
  • Camino 1.6.10 Remote Array Overrun (Arbitrary code execution) (Fri Dec 11 2009 - 01:33:31 EET)
  • Flock 2.5.2 Remote Array Overrun (Arbitrary code execution) (Fri Dec 11 2009 - 01:32:49 EET)
  • PHP 5.3.1 open_basedir bypass (Fri Dec 04 2009 - 02:10:42 EET)
• Dawid Golunski
  • Invision Power Board <= 3.0.4 Local PHP File Inclusion and SQL Injection (Fri Dec 04 2009 - 05:16:48 EET)
• Dominick LaTrappe
  • VideoCache 1.9.2 vccleaner root vulnerability (Wed Dec 16 2009 - 14:37:51 EET)
• Don HO
  • Notepad++ buffer overflow issue (Tue Dec 08 2009 - 22:22:09 EET)
• ds.adv.pub@gmail.com
  • Code to mitigate IIS semicolon zero-day (Mon Dec 28 2009 - 20:29:19 EET)
• dvlabs
  • TPTI-09-15: HP OpenView Data Protector Cell Manager Heap Overflow Vulnerability (Fri Dec 18 2009 - 00:41:10 EET)
  • TPTI-09-14: HP OpenView NNM ovwebsnmpsrv.exe OVwSelection Stack Overflow Vulnerability (Wed Dec 09 2009 - 20:25:58 EET)
  • TPTI-09-13: HP OpenView NNM snmpviewer.exe CGI Host Header Stack Overflow Vulnerability (Wed Dec 09 2009 - 20:24:50 EET)
  • TPTI-09-12: HP OpenView NNM ovalarm.exe CGI Accept-Language Stack Overflow Vulnerability (Wed Dec 09 2009 - 20:23:19 EET)
  • TPTI-09-11: HP OpenView NNM OvWebHelp.exe CGI Topic Heap Overflow Vulnerability (Wed Dec 09 2009 - 20:22:32 EET)
  • TPTI-09-10: HP OpenView NNM webappmon.exe CGI Host Header Buffer Overflow Vulnerability (Wed Dec 09 2009 - 20:21:41 EET)
  • TPTI-09-09: HP OpenView NNM ovsessionmgr.exe userid/passwd Heap Overflow Vulnerability (Wed Dec 09 2009 - 20:20:42 EET)
  • TPTI-09-08: HP OpenView NNM ovlogin.exe CGI userid/passwd Heap Overflow Vulnerability (Wed Dec 09 2009 - 20:18:05 EET)
• Ed Carp
  • Re: [Full-disclosure] ** FreeBSD local r00t zeroday (Tue Dec 01 2009 - 00:49:26 EET)
• edgard.chammas@beyond-security.org
  • ClarkConnect XSS vulnerability (Tue Dec 22 2009 - 01:49:01 EET)
• faghani@nsec.ir
  • Sheedravi CMS SQL Injection Vulnerability (Mon Dec 28 2009 - 09:32:58 EET)
  • Eshopbuilde CMS SQL Injection Vulnerability (Thu Nov 26 2009 - 23:02:32 EET)
• Florian Weimer
  • [SECURITY] [DSA-1964-1] New PostgreSQL packages fix several vulnerabilities (Thu Dec 31 2009 - 18:38:37 EET)
  • [SECURITY] [DSA 1963-1] New unbound packages fix DNSSEC validation (Wed Dec 23 2009 - 22:35:17 EET)
  • [SECURITY] [DSA 1961-1] New bind9 packages fix cache poisoning (Wed Dec 23 2009 - 09:07:33 EET)
• Frank Stuart
  • UPDATE: DISA Unix SRR root compromise / CVE-2009-4211 / VU#433821 (Wed Dec 09 2009 - 08:24:09 EET)
  • U.S. Defense Information Systems Agency (DISA) Unix Security Readiness Review (SRR) root compromise / VU#433821 (Thu Dec 03 2009 - 07:40:52 EET)
• FreeBSD Security Advisories
  • FreeBSD Security Advisory FreeBSD-SA-09:15.ssl [REVISED] (Thu Dec 03 2009 - 22:43:16 EET)
  • FreeBSD Security Advisory FreeBSD-SA-09:17.freebsd-update (Thu Dec 03 2009 - 11:30:48 EET)
  • FreeBSD Security Advisory FreeBSD-SA-09:16.rtld (Thu Dec 03 2009 - 11:30:43 EET)
  • FreeBSD Security Advisory FreeBSD-SA-09:15.ssl (Thu Dec 03 2009 - 11:30:38 EET)
• FreeBSD Security Officer
  • Upcoming FreeBSD Security Advisory (Tue Dec 01 2009 - 03:20:32 EET)
• Giuseppe Iuculano
  • [SECURITY] [DSA-1962-1] New kvm packages fix several vulnerabilities (Wed Dec 23 2009 - 13:54:01 EET)
  • [SECURITY] [DSA-1950-1] New webkit packages fix several vulnerabilities (Sat Dec 12 2009 - 12:10:15 EET)
  • [SECURITY] [DSA 1943-1] New openldap2.3/openldap packages fix SSL certificate verification weakness (Wed Dec 02 2009 - 23:45:40 EET)
• hadikiamarsi@hotmail.com
  • pragmaMx CMS Blind SQL/XPath Injection vulnerability (Mon Dec 21 2009 - 01:15:51 EET)
  • Rumba XML XSS vulnerability (Thu Dec 17 2009 - 14:02:16 EET)
  • Daloradius XSS Vulnerability (Tue Dec 15 2009 - 15:08:15 EET)
• Ian Bradshaw
  • RE: Millions of PDF invisibly embedded with your internal disk paths (Fri Dec 04 2009 - 17:27:29 EET)
• iDefense Labs
  • iDefense Security Advisory 12.08.09: Microsoft Windows Indeo32 Codec Parsing Heap Corruption Vulnerability (Wed Dec 09 2009 - 23:36:09 EET)
  • iDefense Security Advisory 12.08.09: Microsoft WordPad Word97 Converter Integer Overflow Vulnerability (Wed Dec 09 2009 - 23:32:51 EET)
  • iDefense Security Advisory 12.08.09: Microsoft Internet Explorer HTML Layout Engine Uninitialized Memory Vulnerability (Wed Dec 09 2009 - 23:26:46 EET)
• info@securitylab.ir
  • DBHCMS Web Content Management System v1.1.4 RFI Vulnerability (Mon Dec 28 2009 - 08:40:56 EET)
• irancrash@gmail.com
  • SMF (Simple Machine Forum) 1.1.11 XSS - Discovered by : Khashayar Fereidani (Fri Dec 18 2009 - 19:52:52 EET)
• ISecAuditors Security Advisories
  • [ISecAuditors Security Advisories] PHP-Calendar <= v1.1 'configfile' Remote and Local File Inclusion vulnerability (Fri Dec 18 2009 - 14:18:04 EET)
  • [ISecAuditors Security Advisories] Simple PHP Blog <= 0.5.1 Local File Include vulnerability (Fri Dec 18 2009 - 14:14:03 EET)
  • [ISecAuditors Security Advisories] QuiXplorer <=2.4.1beta Remote Code Execution vulnerability (Thu Dec 17 2009 - 18:34:05 EET)
  • [ISecAuditors Security Advisories] Horde 3.3.5 "PHP_SELF" Cross-Site Scripting vulnerability (Thu Dec 17 2009 - 17:39:01 EET)
  • [ISecAuditors Security Advisories] Cisco ASA <= 8.x VPN SSL module Clientless URL-list control bypass (Thu Dec 17 2009 - 14:48:41 EET)
  • [ISecAuditors Security Advisories] WP-Forum <= 2.3 SQL Injection vulnerabilities (Wed Dec 16 2009 - 11:58:07 EET)
• Ivan Buetler
  • RE: TLS Renegotiation Vulnerability: Proof of Concept Code (Python) (Wed Dec 23 2009 - 09:20:36 EET)
• Jamie Strandboge
  • [USN-874-1] Firefox 3.5 and Xulrunner 1.9.1 vulnerabilities (Sat Dec 19 2009 - 00:33:42 EET)
  • [USN-873-1] Firefox 3.0 and Xulrunner 1.9 vulnerabilities (Sat Dec 19 2009 - 00:04:18 EET)
  • [USN-875-1] Red Hat Cluster Suite vulnerabilities (Fri Dec 18 2009 - 18:29:11 EET)
  • [USN-872-1] KDE 4 Runtime vulnerabilities (Fri Dec 11 2009 - 14:59:50 EET)
  • [USN-871-2] KDE 4 vulnerabilities (Fri Dec 11 2009 - 04:54:50 EET)
  • [USN-871-1] KDE vulnerability (Fri Dec 11 2009 - 04:29:40 EET)
  • [USN-870-1] PyGreSQL vulnerability (Fri Dec 11 2009 - 02:33:50 EET)
  • [USN-868-1] GRUB 2 vulnerability (Wed Dec 09 2009 - 02:47:32 EET)
  • [USN-867-1] Ntp vulnerability (Wed Dec 09 2009 - 00:29:02 EET)
  • [USN-863-1] QEMU vulnerability (Thu Dec 03 2009 - 22:01:04 EET)
• John Dos
  • Remote Command Execution in dotDefender Site Management (Mon Nov 30 2009 - 17:48:49 EET)
• jpecou@gmail.com
  • APC Switched Rack PDU XSS Vulnerability (Mon Dec 14 2009 - 23:19:04 EET)
• Juha-Matti Laurio
  • Same-origin policy bypass vulnerabilities in several VPN products reported (Wed Dec 02 2009 - 13:51:14 EET)
• k4mr4n_St@yahoo.com
  • Eureka Mail Client Remote Buffer Overflow Exploit XP SP3 English Egghunter Edition (Mon Nov 30 2009 - 11:04:58 EET)
• Kees Cook
  • [USN-869-1] Linux kernel vulnerabilities (Thu Dec 10 2009 - 03:09:03 EET)
• Kingcope
  • ** FreeBSD local r00t zeroday (Tue Dec 01 2009 - 00:12:20 EET)
• Kotas, Kevin J
  • CA20091208-01: Security Notice for CA Service Desk (Tue Dec 08 2009 - 21:40:19 EET)
• Luiz Eduardo
  • Call for Papers - you Sh0t the Sheriff 4 - Security Conference, Brazil (Wed Dec 02 2009 - 22:57:29 EET)
• Lukas Weichselbaum
  • SEC Consult SA-20091217-0 :: Authentication bypass and file manipulation in Sitecore Staging Module (Thu Dec 17 2009 - 14:17:56 EET)
• macaco-listo@hotmail.com
  • Re: Powered By Dvbbs Version 7.1.0 Sp1 By Pass (Fri Dec 18 2009 - 00:41:29 EET)
• Major Malfunction
  • DC4420 - London DEFCON - Christmas drinks - Wednesday 16th December (Mon Dec 14 2009 - 17:19:00 EET)
• Marc Deslauriers
  • [USN-866-1] gnome-screensaver vulnerability (Mon Dec 07 2009 - 23:23:17 EET)
  • [USN-865-1] Bind vulnerability (Mon Dec 07 2009 - 16:39:49 EET)
  • [USN-862-1] PHP vulnerabilities (Thu Nov 26 2009 - 22:37:54 EET)
• Mario Alejandro Vilas Jerez
  • WinAppDbg 1.3 is out! (Tue Dec 01 2009 - 05:47:55 EET)
• Martin Barbella
  • XSS Vulnerability in JpGraph 3.0.6 (Tue Dec 22 2009 - 22:34:42 EET)
• Maxim A. Kulakov
  • Kaspersky Lab Multiple Products Local Privilege Escalation Vulnerability (Wed Dec 16 2009 - 14:58:17 EET)
• Michael Gripenstedt
  • Security Contact for Netcool at IBM? (Tue Dec 08 2009 - 16:13:04 EET)
• Moritz Muehlenhoff
  • [SECURITY] [DSA 1956-1] New xulrunner packages fix several vulnerabilities (Wed Dec 16 2009 - 23:15:39 EET)
  • [SECURITY] [DSA 1947-1] New Shibboleth packages fix cross-site scripting (Tue Dec 08 2009 - 00:59:02 EET)
  • [SECURITY] [DSA 1942-1] New wireshark packages fix several vulnerabilities (Sun Nov 29 2009 - 20:47:59 EET)
• MustLive
  • Vulnerability in Joomulus for Joomla (Fri Dec 25 2009 - 20:14:13 EET)
  • Cross-Site Scripting vulnerabilities in Invision Power Board (Sun Dec 13 2009 - 21:55:33 EET)
  • Re: IPB v2.x up to 3.0.4 XSS vulnerability (Sun Dec 13 2009 - 16:55:01 EET)
• Nam Nguyen
  • [BMSA-2009-08] Multiple Vulnerabilities in PyForum (Tue Dec 15 2009 - 05:26:16 EET)
  • [BMSA-2009-07] Backdoor in PyForum (Mon Nov 30 2009 - 16:06:44 EET)
• Nelson Brito
  • RE: Tests about semicolon zero-day (BID 37460) (Tue Dec 29 2009 - 23:03:59 EET)
  • RE: Tests about semicolon zero-day (BID 37460) (Tue Dec 29 2009 - 19:14:46 EET)
• Nick FitzGerald
  • Re: Millions of PDF invisibly embedded with your internal disk paths (Fri Dec 04 2009 - 23:50:37 EET)
  • Re: Millions of PDF invisibly embedded with your internal disk paths (Fri Dec 04 2009 - 22:55:35 EET)
• Nico Golde
  • [SECURITY] [DSA 1948-1] New ntp packages fix denial of service (Tue Dec 08 2009 - 21:07:15 EET)
• Nicob
  • Zabbix Agent : Bypass of EnableRemoteCommands=0 (Sun Dec 13 2009 - 17:28:30 EET)
  • Zabbix Server : Multiple remote vulnerabilities (Sun Dec 13 2009 - 17:28:35 EET)
• noreply-secresearch@fortinet.securityfocus.com
  • Fortinet Advisory: Fortinet Discovers Microsoft Office Project Vulnerability (Wed Dec 09 2009 - 00:04:01 EET)
  • Fortinet Advisory: Fortinet Discovers Vulnerability in Indeo Codec (Wed Dec 09 2009 - 00:24:37 EET)
• nospam@gmail.it
  • Adobe Illustrator CS4 (V14.0.0) Encapsulated Postscript (.eps) Overlong DSC Comment Buffer Overflow Exploit (Thu Dec 03 2009 - 06:05:49 EET)
• Ofer Maor
  • Hacktics Advisory Dec09: Oracle eBusiness Suite - Multiple Vulnerabilities Allow Remote Takeover (Mon Dec 14 2009 - 15:57:32 EET)
• Packet Storm
  • Re: phpPollScript - 1.3 Remote File Include (Tue Dec 22 2009 - 01:57:26 EET)
  • Re: WX Guest Book 1.1.208 (SQL/XSS) Multiple Remote Vulnerabilities (Tue Dec 15 2009 - 03:35:00 EET)
  • Re: E-Store SQL Injection Vulnerability (Sat Dec 12 2009 - 06:06:41 EET)
• Patroklos Argyroudis
  • Monkey HTTPd improper input validation vulnerability (Mon Dec 14 2009 - 12:18:55 EET)
  • CVE-2009-3586: CoreHTTP web server off-by-one buffer overflow vulnerability (Mon Dec 07 2009 - 11:16:50 EET)
• Pavel Machek
  • Re: Millions of PDF invisibly embedded with your internal disk paths (Sun Dec 06 2009 - 21:56:46 EET)
  • Re: Millions of PDF invisibly embedded with your internal disk paths (Thu Dec 03 2009 - 11:01:53 EET)
• Protek Research Lab
  • {PRL} QuickHeal antivirus 2010 Local Privilege Escalation (Wed Dec 16 2009 - 18:55:33 EET)
• Raphael Geissert
  • [SECURITY] [DSA 1958-1] New libtool packages fix privilege escalation (Tue Dec 29 2009 - 19:27:07 EET)
  • [SECURITY] [DSA 1960-1] New acpid packages fix weak file permissions (Sat Dec 19 2009 - 21:52:34 EET)
  • [SECURITY] [DSA-1959-1] New ganeti packages fix arbitrary command execution (Sat Dec 19 2009 - 15:49:31 EET)
  • [SECURITY] [DSA 1949-1] New php-net-ping packages fix arbitrary code execution (Sat Dec 12 2009 - 10:52:41 EET)
• RedTeam Pentesting GmbH
  • TLS Renegotiation Vulnerability: Proof of Concept Code (Python) (Mon Dec 21 2009 - 15:03:47 EET)
• Reversemode
  • Exposing HMS HICP Protocol + Intellicom NetBiterConfig.exe Remote Buffer Overflow (Not patched) (Mon Dec 14 2009 - 22:34:43 EET)
• Robert BARABAS
  • Re: ** FreeBSD local r00t zeroday (Tue Dec 01 2009 - 22:01:13 EET)
• rPath Update Announcements
  • rPSA-2009-0161-1 hwdata kernel (Wed Dec 16 2009 - 21:20:28 EET)
• Ryan Steinmetz
  • Re: [Full-disclosure] ** FreeBSD local r00t zeroday (Tue Dec 01 2009 - 03:40:59 EET)
• Salvatore Fresta aka Drosophila
  • Family Connections <= 2.1.3 Multiple Remote Vulnerabilities (Wed Dec 16 2009 - 08:52:33 EET)
  • WSCreator 1.1 Blind SQL Injection (Tue Dec 15 2009 - 04:48:51 EET)
  • B2C Booking Centre Systems - SQL Injection Vulnerability (Fri Dec 11 2009 - 23:04:27 EET)
  • Miniweb 2.0 Full Path Disclosure (Sat Dec 12 2009 - 05:01:11 EET)
  • phpCollegeExchange 0.1.5c Multiple SQL Injection Vulnerabilities (Fri Dec 11 2009 - 17:21:57 EET)
  • Digital Scribe 1.4.1 Multiple SQL Injection Vulnerabilities (Fri Dec 11 2009 - 08:25:57 EET)
  • E-Store SQL Injection Vulnerability (Fri Dec 11 2009 - 06:50:54 EET)
• secu_lab_ir@yahoo.com
  • EEGshop v1.2 (Sun Dec 13 2009 - 23:46:25 EET)
  • Xxasp v3.3.2 Sql injection (Mon Nov 30 2009 - 11:08:52 EET)
• Secunia Research
  • Secunia Research: AproxEngine Multiple Vulnerabilities (Tue Dec 29 2009 - 15:58:17 EET)
  • Secunia Research: Winamp Oktalyzer Parsing Integer Overflow Vulnerability (Thu Dec 17 2009 - 10:49:20 EET)
  • Secunia Research: Winamp Impulse Tracker Sample Parsing Buffer Overflow (Thu Dec 17 2009 - 10:49:34 EET)
  • Secunia Research: Winamp Ultratracker File Parsing Buffer Overflow (Thu Dec 17 2009 - 10:49:27 EET)
  • Secunia Research: Winamp Impulse Tracker Instrument Parsing Buffer Overflows (Thu Dec 17 2009 - 10:49:40 EET)
  • Secunia Research: Novell iPrint Client Date/Time Parsing Buffer Overflow (Tue Dec 08 2009 - 11:29:09 EET)
  • Secunia Research: Novell iPrint Client "target-frame" Parameter Buffer Overflow (Tue Dec 08 2009 - 11:25:32 EET)
  • Secunia Research: DevIL DICOM "GetUID()" Buffer Overflow Vulnerability (Fri Dec 04 2009 - 15:21:21 EET)
  • Secunia Research: Lateral Arts Photobox uploader ActiveX Control Buffer Overflow (Wed Dec 02 2009 - 13:53:35 EET)
  • Secunia Research: Roxio Creator Image Rendering Integer Overflow Vulnerability (Wed Dec 02 2009 - 14:27:18 EET)
• security-alert@hp.com
  • [security bulletin] HPSBUX02498 SSRT090264 rev.1 - HP-UX Running Apache, Remote Unauthorized Data Injection, Denial of (Tue Dec 22 2009 - 18:42:14 EET)
  • [security bulletin] HPSBMA02252 SSRT061258, SSRT061259 rev.1 - HP OpenView Storage Data Protector, Remote Arbitrary Code Execution (Thu Dec 17 2009 - 02:23:02 EET)
  • [security bulletin] HPSBMA02416 SSRT090008 rev.4 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code (Wed Dec 16 2009 - 15:55:57 EET)
  • [security bulletin] HPSBUX02482 SSRT090249 rev.2 - HP-UX Running OpenSSL, Remote Unauthorized Data Injection, Denial of Service (DoS) (Tue Dec 15 2009 - 00:29:12 EET)
  • [security bulletin] HPSBUX02409 SSRT080171 rev.3 - HP-UX Running VERITAS File System (VRTSvxfs) or VERITAS Oracle Disk (Mon Dec 14 2009 - 22:20:52 EET)
  • [security bulletin] HPSBMA02483 SSRT090257 rev.2 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code (Fri Dec 11 2009 - 17:25:12 EET)
  • [security bulletin] HPSBPI02472 SSRT090196 rev.2 - Certain HP Color LaserJet Printers, Remote Unauthorized Access to Data, Denial of Service (Fri Dec 11 2009 - 17:24:15 EET)
  • [security bulletin] HPSBMA02425 SSRT080091 rev.2 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code (Fri Dec 11 2009 - 17:23:29 EET)
  • [security bulletin] HPSBMA02424 SSRT080125 rev.2 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code (Fri Dec 11 2009 - 17:22:42 EET)
  • [security bulletin] HPSBMA02400 SSRT080144 rev.3 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code (Fri Dec 11 2009 - 17:21:22 EET)
  • [security bulletin] HPSBMA02477 SSRT090177 rev.3 - HP OpenView Network Node Manager (OV NNM), Remote Denial of Service (DoS) (Thu Dec 10 2009 - 16:08:28 EET)
  • [security bulletin] HPSBMA02483 SSRT090257 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code (Thu Dec 10 2009 - 16:07:54 EET)
  • [security bulletin] HPSBUX02480 SSRT090253 rev.1 - HP-UX Running VRTSweb, Remote Execution of Arbitrary Code, Increase of Privilege (Thu Dec 10 2009 - 01:21:27 EET)
  • [security bulletin] HPSBUX02495 SSRT090151 rev.1 - HP-UX Running sendmail, Remote Denial of Service (DoS) (Wed Dec 09 2009 - 03:10:03 EET)
  • [security bulletin] HPSBMA02481 SSRT090113 rev.1 - HP OpenView Data Protector Application Recovery Manager, Remote Denial (Tue Dec 08 2009 - 06:25:33 EET)
• security@mandriva.com
  • [ MDVSA-2009:346 ] kde (Tue Dec 29 2009 - 23:11:00 EET)
  • [ MDVSA-2009:345 ] acl (Tue Dec 29 2009 - 02:33:01 EET)
  • [ MDVSA-2009:146-1 ] imap (Mon Dec 28 2009 - 23:04:01 EET)
  • [ MDVSA-2009:189-1 ] apache-mod_auth_mysql (Mon Dec 28 2009 - 22:38:01 EET)
  • [ MDVSA-2009:344 ] perl-DBD-Pg (Mon Dec 28 2009 - 19:53:00 EET)
  • [ MDVSA-2009:244-1 ] xfig (Mon Dec 28 2009 - 18:45:01 EET)
  • [ MDVSA-2009:343 ] acpid (Sun Dec 27 2009 - 00:53:00 EET)
  • [ MDVSA-2009:342 ] acpid (Sat Dec 26 2009 - 23:56:00 EET)
  • [ MDVSA-2009:341 ] dstat (Sat Dec 26 2009 - 18:18:00 EET)
  • [ MDVSA-2009:340 ] jpgraph (Sat Dec 26 2009 - 17:30:01 EET)
  • [ MDVSA-2009:339 ] firefox (Tue Dec 22 2009 - 21:01:00 EET)
  • [ MDVSA-2009:338 ] firefox (Tue Dec 22 2009 - 20:26:01 EET)
  • [ MDVSA-2009:337 ] proftpd (Tue Dec 22 2009 - 16:55:01 EET)
  • [ MDVSA-2009:336 ] koffice (Fri Dec 18 2009 - 02:28:01 EET)
  • [ MDVSA-2009:335 ] ffmpeg (Thu Dec 17 2009 - 21:06:01 EET)
  • [ MDVSA-2009:334 ] poppler (Thu Dec 17 2009 - 02:51:01 EET)
  • [ MDVSA-2009:333 ] postgresql (Tue Dec 15 2009 - 20:27:01 EET)
  • [ MDVSA-2009:259-1 ] snort (Fri Dec 11 2009 - 21:21:00 EET)
  • [ MDVSA-2009:296-1 ] gimp (Fri Dec 11 2009 - 19:27:00 EET)
  • [ MDVSA-2009:332 ] gimp (Fri Dec 11 2009 - 15:51:01 EET)
  • [ MDVSA-2009:331 ] kdegraphics (Thu Dec 10 2009 - 20:06:00 EET)
  • [ MDVSA-2009:330 ] kdelibs (Thu Dec 10 2009 - 19:55:01 EET)
  • [ MDVSA-2009:329 ] kernel (Thu Dec 10 2009 - 03:22:00 EET)
  • [ MDVSA-2009:030-1 ] amarok (Tue Dec 08 2009 - 23:39:01 EET)
  • [ MDVSA-2009:328 ] ntp (Wed Dec 09 2009 - 04:26:00 EET)
  • [ MDVSA-2009:059-1 ] xchat (Tue Dec 08 2009 - 22:09:00 EET)
  • [ MDVSA-2009:276-1 ] python-django (Wed Dec 09 2009 - 00:07:01 EET)
  • [ MDVSA-2009:046-1 ] dia (Tue Dec 08 2009 - 22:39:02 EET)
  • [ MDVSA-2009:038-1 ] blender (Tue Dec 08 2009 - 23:25:02 EET)
  • [ MDVSA-2009:093-1 ] mpg123 (Tue Dec 08 2009 - 21:39:00 EET)
  • [ MDVSA-2009:091-1 ] mod_perl (Tue Dec 08 2009 - 21:56:00 EET)
  • [ MDVSA-2009:126-1 ] eggdrop (Tue Dec 08 2009 - 20:14:00 EET)
  • [ MDVSA-2009:099-1 ] openafs (Tue Dec 08 2009 - 20:44:01 EET)
  • [ MDVSA-2009:098-1 ] krb5 (Tue Dec 08 2009 - 21:03:00 EET)
  • [ MDVSA-2009:133-1 ] irssi (Tue Dec 08 2009 - 20:03:01 EET)
  • [ MDVSA-2009:327 ] clamav (Tue Dec 08 2009 - 18:45:01 EET)
  • [ MDVSA-2009:191-1 ] OpenEXR (Tue Dec 08 2009 - 19:25:01 EET)
  • [ MDVSA-2009:251-1 ] postgresql8.2 (Tue Dec 08 2009 - 16:59:00 EET)
  • [ MDVSA-2009:282-1 ] cups (Tue Dec 08 2009 - 03:06:00 EET)
  • [ MDVSA-2009:326 ] mysql (Mon Dec 07 2009 - 23:21:00 EET)
  • [ MDVSA-2009:325 ] ruby (Mon Dec 07 2009 - 23:05:00 EET)
  • [ MDVSA-2009:199-1 ] subversion (Mon Dec 07 2009 - 22:03:00 EET)
  • [ MDVSA-2009:256-1 ] dbus (Sat Dec 05 2009 - 18:43:00 EET)
  • [ MDVSA-2009:243-2 ] freetype2 (Sat Dec 05 2009 - 18:11:01 EET)
  • [ MDVSA-2009:324 ] php (Mon Dec 07 2009 - 19:41:01 EET)
  • [ MDVSA-2009:254-1 ] graphviz (Sat Dec 05 2009 - 18:54:00 EET)
  • [ MDVSA-2009:252-1 ] perl-IO-Socket-SSL (Sat Dec 05 2009 - 20:14:01 EET)
  • [ MDVSA-2008:233-1 ] libcdaudio (Mon Dec 07 2009 - 17:04:01 EET)
  • [ MDVSA-2009:229-1 ] cyrus-imapd (Sat Dec 05 2009 - 17:51:00 EET)
  • [ MDVSA-2009:322 ] mono (Mon Dec 07 2009 - 16:13:01 EET)
  • [ MDVSA-2009:323 ] apache (Mon Dec 07 2009 - 18:51:01 EET)
  • [ MDVSA-2009:234-2 ] silc-toolkit (Sat Dec 05 2009 - 18:02:00 EET)
  • [ MDVSA-2009:232-1 ] libsamplerate (Sat Dec 05 2009 - 17:40:01 EET)
  • [ MDVSA-2009:317 ] netpbm (Sat Dec 05 2009 - 19:29:00 EET)
  • [ MDVSA-2009:219-1 ] kompozer (Sun Dec 06 2009 - 23:19:00 EET)
  • [ MDVSA-2009:260-1 ] imagemagick (Sat Dec 05 2009 - 19:03:01 EET)
  • [ MDVSA-2009:215-1 ] audacity (Sun Dec 06 2009 - 21:49:00 EET)
  • [ MDVSA-2009:272-1 ] libmikmod (Sat Dec 05 2009 - 19:55:00 EET)
  • [ MDVSA-2009:321 ] pidgin (Sun Dec 06 2009 - 21:33:01 EET)
  • [ MDVSA-2009:284-1 ] gd (Sat Dec 05 2009 - 20:26:00 EET)
  • [ MDVSA-2009:320 ] samba (Sun Dec 06 2009 - 21:19:01 EET)
  • [ MDVSA-2009:231-1 ] htmldoc (Mon Dec 07 2009 - 15:43:00 EET)
  • [ MDVSA-2009:307-1 ] libtool (Sun Dec 06 2009 - 20:40:00 EET)
  • [ MDVSA-2009:316 ] expat (Sat Dec 05 2009 - 17:23:01 EET)
  • [ MDVSA-2009:319 ] xine-lib (Sat Dec 05 2009 - 22:39:00 EET)
  • [ MDVSA-2009:318 ] xmlsec1 (Sat Dec 05 2009 - 19:38:01 EET)
  • [ MDVSA-2009:249-1 ] newt (Sat Dec 05 2009 - 18:29:01 EET)
  • [ MDVSA-2009:297-1 ] ffmpeg (Sat Dec 05 2009 - 22:00:00 EET)
  • [ MDVSA-2009:128-1 ] libmodplug (Fri Dec 04 2009 - 00:11:01 EET)
  • [ MDVSA-2009:201-1 ] fetchmail (Fri Dec 04 2009 - 05:11:00 EET)
  • [ MDVSA-2009:314 ] apr (Fri Dec 04 2009 - 04:16:00 EET)
  • [ MDVSA-2009:224-1 ] postfix (Fri Dec 04 2009 - 21:53:00 EET)
  • [ MDVSA-2009:130-1 ] gstreamer0.10-plugins-good (Fri Dec 04 2009 - 00:33:00 EET)
  • [ MDVSA-2009:200-1 ] libxml (Fri Dec 04 2009 - 05:00:00 EET)
  • [ MDVSA-2009:213-1 ] wxgtk (Fri Dec 04 2009 - 15:54:01 EET)
  • [ MDVSA-2009:292-1 ] wireshark (Fri Dec 04 2009 - 00:00:00 EET)
  • [ MDVSA-2009:218-1 ] w3c-libwww (Fri Dec 04 2009 - 19:07:00 EET)
  • [ MDVSA-2009:206-1 ] wget (Fri Dec 04 2009 - 15:35:00 EET)
  • [ MDVSA-2009:223-1 ] xerces-c (Fri Dec 04 2009 - 20:00:00 EET)
  • [ MDVSA-2009:312 ] dhcp (Fri Dec 04 2009 - 02:52:00 EET)
  • [ MDVSA-2009:211-1 ] expat (Fri Dec 04 2009 - 16:31:00 EET)
  • [ MDVSA-2009:315 ] libneon (Fri Dec 04 2009 - 19:37:00 EET)
  • [ MDVSA-2009:212-1 ] python (Fri Dec 04 2009 - 18:24:01 EET)
  • [ MDVSA-2009:157-1 ] perl-Compress-Raw-Zlib (Fri Dec 04 2009 - 03:07:00 EET)
  • [ MDVSA-2009:142-1 ] jasper (Fri Dec 04 2009 - 01:17:01 EET)
  • [ MDVSA-2009:311 ] ghostscript (Fri Dec 04 2009 - 02:18:00 EET)
  • [ MDVSA-2009:287-1 ] xpdf (Fri Dec 04 2009 - 04:37:00 EET)
  • [ MDVSA-2009:158-3 ] pango (Fri Dec 04 2009 - 03:18:00 EET)
  • [ MDVSA-2009:208-1 ] libgadu (Fri Dec 04 2009 - 16:13:00 EET)
  • [ MDVSA-2009:203-1 ] curl (Fri Dec 04 2009 - 05:22:00 EET)
  • [ MDVSA-2009:169-1 ] libtiff (Fri Dec 04 2009 - 02:40:00 EET)
  • [ MDVSA-2009:290-1 ] firefox (Thu Dec 03 2009 - 23:23:01 EET)
  • [ MDVSA-2009:313-1 ] bind (Fri Dec 04 2009 - 03:44:00 EET)
  • [ MDVSA-2009:132-1 ] libsndfile (Fri Dec 04 2009 - 00:46:01 EET)
  • [ MDVSA-2009:308 ] gnutls (Thu Dec 03 2009 - 21:29:01 EET)
  • [ MDVSA-2009:310 ] openssl (Thu Dec 03 2009 - 22:11:00 EET)
  • [ MDVSA-2009:113-1 ] cyrus-sasl (Thu Dec 03 2009 - 20:25:01 EET)
  • [ MDVSA-2009:309 ] ntp (Thu Dec 03 2009 - 21:48:01 EET)
  • [ MDVSA-2009:108-1 ] zsh (Thu Dec 03 2009 - 20:00:01 EET)
  • [ MDVSA-2009:106-1 ] libwmf (Thu Dec 03 2009 - 19:39:01 EET)
  • [ MDVSA-2009:103-1 ] udev (Thu Dec 03 2009 - 19:05:00 EET)
  • [ MDVSA-2009:112-1 ] ipsec-tools (Thu Dec 03 2009 - 20:14:00 EET)
  • [ MDVSA-2009:107-1 ] acpid (Thu Dec 03 2009 - 19:46:00 EET)
  • [ MDVSA-2009:197-3 ] nss (Thu Dec 03 2009 - 17:29:00 EET)
  • [ MDVSA-2009:217-3 ] mozilla-thunderbird (Thu Dec 03 2009 - 17:07:01 EET)
  • [ MDVSA-2009:121-1 ] lcms (Thu Dec 03 2009 - 00:41:00 EET)
  • [ MDVSA-2009:305 ] php (Sun Nov 29 2009 - 19:28:00 EET)
  • [ MDVSA-2009:304 ] bind (Thu Nov 26 2009 - 21:42:00 EET)
  • [ MDVSA-2009:304 ] php (Sun Nov 29 2009 - 18:54:01 EET)
  • [ MDVSA-2009:306 ] dovecot (Sun Nov 29 2009 - 20:16:00 EET)
• smf2.review@gmail.com
  • 40 vulnerabilities in SMF 1.1.10/SMF 2.0RC2 by elhacker.net (Simple Audit) (Wed Dec 02 2009 - 05:37:26 EET)
• Socket_0x03@teraexe.com
  • Remote Buffer Overflow Exploit (TFTP Daemon Version 1.9) by Socket_0x03 (Thu Dec 24 2009 - 11:01:20 EET)
  • Remote Buffer Overflow Exploit (TFTP Daemon Version 1.9) by Socket_0x03 (Tue Dec 22 2009 - 04:18:37 EET)
• Stefan Esser
  • Advisory 02/2009: PHPIDS Unserialize() Vulnerability (Wed Dec 09 2009 - 12:11:12 EET)
  • Advisory 03/2009: Piwik Cookie unserialize() Vulnerability (Wed Dec 09 2009 - 12:12:12 EET)
• Stefan Friedli
  • [scip-Advisory 4063] PasswordManager Pro 6.1 Script Injection Vulnerability (Tue Dec 15 2009 - 11:26:02 EET)
• Stefan Fritsch
  • [SECURITY] [DSA-1953-2] New expat packages fix regression (Thu Dec 31 2009 - 16:15:48 EET)
  • [SECURITY] [DSA-1953-1] New expat packages fix denial of service (Tue Dec 15 2009 - 22:23:03 EET)
• Stefan Kanthak
  • Windows packages for BIND9 contain vulnerable MSVC runtime components (Sat Nov 28 2009 - 20:51:49 EET)
• Steffen Joeris
  • [SECURITY] [DSA 1957-1] New aria2 packages fix arbitrary code execution (Mon Dec 28 2009 - 11:58:08 EET)
  • [SECURITY] [DSA 1955-1] New network-manager/network-manager-applet packages fix information disclosure (Wed Dec 16 2009 - 19:27:35 EET)
  • [SECURITY] [DSA 1954-1] New cacti packages fix insufficient input sanitising (Wed Dec 16 2009 - 13:47:37 EET)
  • [SECURITY] [DSA 1952-1] New asterisk packages fix several vulnerabilities (Tue Dec 15 2009 - 15:06:23 EET)
  • [SECURITY] [DSA 1952-2] End-of-life announcement for asterisk in oldstable (Tue Dec 15 2009 - 15:06:34 EET)
  • [SECURITY] [DSA 1951-1] New firefox-sage packages fix insufficient input sanitizing (Tue Dec 15 2009 - 13:55:16 EET)
  • [SECURITY] [DSA 1946-1] New belpic packages fix cryptographic weakness (Fri Dec 04 2009 - 23:02:22 EET)
  • [SECURITY] [DSA 1945-1] New gforge packages fix denial of service (Thu Dec 03 2009 - 14:46:30 EET)
  • [SECURITY] [DSA 1944-1] New request-tracker packages fix session hijack vulnerability (Thu Dec 03 2009 - 13:04:51 EET)
• tcphttp
  • Mozilla Firefox JavaScript Prompt Spoofing Weakness (Sat Dec 05 2009 - 14:05:40 EET)
• Thierry Zoller
  • Re: TLS / SSLv3 vulnerability explained (New ways to leverage the vulnerability) (Fri Dec 11 2009 - 15:27:10 EET)
  • TLS / SSLv3 vulnerability explained (New ways to leverage the vulnerability) (Mon Nov 30 2009 - 16:15:42 EET)
• Thor (Hammer of God)
  • FW: [Full-disclosure] File Access Vulnerability in Easy File Sharing Web Server (Wed Dec 16 2009 - 04:35:38 EET)
  • File Access Vulnerability in Easy File Sharing Web Server (Wed Dec 16 2009 - 02:16:51 EET)
  • RE: Millions of PDF invisibly embedded with your internal disk paths (Wed Dec 09 2009 - 23:51:16 EET)
  • RE: Millions of PDF invisibly embedded with your internal disk paths (Fri Dec 04 2009 - 00:26:45 EET)
• Tom Yu
  • MITKRB5-SA-2009-003 [CVE-2009-3295] KDC denial of service in cross-realm referral processing (Mon Dec 28 2009 - 21:05:25 EET)
• tomer@applicure.com
  • Applicure Technologies response (Tue Dec 08 2009 - 19:30:27 EET)
• Troy Bollinger
  • Re: Security Contact for Netcool at IBM? (Tue Dec 08 2009 - 18:26:12 EET)
• VMware Security Team
  • VMSA-2009-0017 VMware vCenter, ESX patch and vCenter Lab Manager releases address cross-site scripting issues (Tue Dec 15 2009 - 20:33:49 EET)
• VUPEN Security Research
  • VUPEN Security Research - Winamp PNG and JPEG Data Integer Overflow Vulnerabilities (Thu Dec 17 2009 - 17:53:44 EET)
• Xacker
  • IPB v2.x up to 3.0.4 XSS vulnerability (Wed Dec 09 2009 - 09:50:13 EET)
• ZDI Disclosures
  • ZDI-09-099: Hewlett-Packard OpenView Data Protector Backup Client Service Buffer Overflow Vulnerability (Fri Dec 18 2009 - 00:25:04 EET)
  • ZDI-09-098: Symantec Multiple Products VRTSweb.exe Remote Code Execution Vulnerability (Wed Dec 09 2009 - 21:24:30 EET)
  • ZDI-09-088: Microsoft Internet Explorer IFrame Attributes Circular Reference Dangling Pointer Vulnerability (Tue Dec 08 2009 - 21:42:42 EET)
  • ZDI-09-095: Hewlett-Packard OpenView NNM Snmp.exe Oid Variable Buffer Overflow Vulnerability (Wed Dec 09 2009 - 19:39:17 EET)
  • ZDI-09-097: Hewlett-Packard OpenView NNM nnmRptConfig.exe Template Variable strcat Overflow Vulnerability (Wed Dec 09 2009 - 19:39:12 EET)
  • ZDI-09-096: Hewlett-Packard OpenView NNM nnmRptConfig.exe Template Variable vsprintf Overflow Vulnerability (Wed Dec 09 2009 - 19:39:22 EET)
  • ZDI-09-094: Hewlett-Packard OpenView NNM Multiple Command Injection Vulnerabilities (Wed Dec 09 2009 - 19:39:07 EET)
  • ZDI-09-090: Microsoft Windows Intel Indeo Codec Parsing Stack Overflow Vulnerability (Tue Dec 08 2009 - 21:42:52 EET)
  • ZDI-09-092: Adobe Flash Player JPEG Parsing Heap Overflow Vulnerability (Wed Dec 09 2009 - 18:41:50 EET)
  • ZDI-09-093: Adobe Flash Player ActionScript Exception Handler Integer Overflow Vulnerability (Wed Dec 09 2009 - 18:41:55 EET)
  • ZDI-09-091: Hewlett-Packard Application Recovery Manager MSG_PROTOCOL Stack Overflow Vulnerability (Wed Dec 09 2009 - 01:07:20 EET)
  • ZDI-09-087: Microsoft Internet Explorer CSS Race Condition Code Execution Vulnerability (Tue Dec 08 2009 - 21:42:37 EET)
  • ZDI-09-086: Microsoft Internet Explorer XHTML DOM Manipulation Memory Corruption Vulnerability (Tue Dec 08 2009 - 21:42:32 EET)
  • ZDI-09-089: Microsoft Windows Intel Indeo Codec Parsing Heap Overflow Vulnerability (Tue Dec 08 2009 - 21:42:47 EET)

Last message date: Thu Dec 31 2009 - 19:57:52 EET
Archived on: Thu Dec 31 2009 - 19:57:53 EET

This archive was generated by hypermail 2b28 : Thu Dec 31 2009 - 19:57:53 EET