stdin
By Thread

• [SECURITY] [DSA 1982-1] New hybserv packages fix denial of service Steffen Joeris (Fri Jan 29 2010 - 19:25:45 EET)
• Re: [Webappsec] Paper: Weaning the Web off of Session Cookies Timothy D. Morgan (Sat Jan 30 2010 - 18:19:31 EET)
  • Re: [Webappsec] Paper: Weaning the Web off of Session Cookies Arian J. Evans (Sat Jan 30 2010 - 19:31:49 EET)
    • Re: [Webappsec] Paper: Weaning the Web off of Session Cookies Timothy D. Morgan (Sat Jan 30 2010 - 21:19:58 EET)
  • Re: [Webappsec] Paper: Weaning the Web off of Session Cookies Timothy D. Morgan (Sat Jan 30 2010 - 18:07:44 EET)
    • Re: [Webappsec] Paper: Weaning the Web off of Session Cookies Chris Travers (Mon Feb 01 2010 - 22:19:30 EET)
  • Re: [Webappsec] Paper: Weaning the Web off of Session Cookies Timothy D. Morgan (Fri Feb 05 2010 - 18:06:09 EET)
• iPhone certificate flaws cryptopath@gmail.com (Fri Jan 29 2010 - 21:54:01 EET)
  • [Suspected Spam]Hackito Ergo Sum 2010 - Call For Paper - HES2010 CFP Philippe Mailinglist (Wed Feb 03 2010 - 20:29:49 EET)
• Advisory: jBCrypt < 0.3 character encoding vulnerability Damien Miller (Mon Feb 01 2010 - 03:55:34 EET)
• [SECURITY] [DSA 1841-2] New git-core packages fix build failure Thijs Kinkhorst (Sun Jan 31 2010 - 15:35:24 EET)
• Cross-Site History Manipulation (XSHM) Alex Roichman (Sun Jan 31 2010 - 09:47:38 EET)
  • Re: Cross-Site History Manipulation (XSHM) Michal Zalewski (Mon Feb 01 2010 - 20:04:34 EET)
• {PRL} Xerox Workcenter 4150 Remote Buffer Overflow Francis Provencher (Fri Jan 29 2010 - 20:50:59 EET)
• Tavanmand Portal (fckeditor) Remote Arbitrary File Upload Vulnerability info@securitylab.ir (Sun Jan 31 2010 - 09:46:16 EET)
• eWebeditor ASP Version Multiple Vulnerabilities info@securitylab.ir (Sat Jan 30 2010 - 12:01:57 EET)
• [TKADV2010-001] Oracle Solaris UCODE_GET_VERSION IOCTL Kernel NULL Pointer Dereference Tobias Klein (Sun Jan 31 2010 - 14:06:44 EET)
• [SECURITY] [DSA 1983-1] New Wireshark packages fix several vulnerabilities Moritz Muehlenhoff (Sun Jan 31 2010 - 15:58:49 EET)
• VMSA-2010-0002 VMware vCenter update release addresses multiple security issues in Java JRE VMware Security Team (Sat Jan 30 2010 - 09:07:59 EET)
• iDefense Security Advisory 02.01.10: Real Networks RealPlayer Compressed GIF Handling Integer Overflow iDefense Labs (Mon Feb 01 2010 - 22:23:22 EET)
• iDefense Security Advisory 02.01.10: RealNetworks RealPlayer CMediumBlockAllocator Integer Overflow Vulnerability iDefense Labs (Mon Feb 01 2010 - 22:13:42 EET)
• XSS vulnerability in Drupal's MP3 Player contributed module (version 6.x-1.0-beta1) Martin Barbella (Mon Feb 01 2010 - 18:59:59 EET)
• [CORE-2010-0106] Cisco Secure Desktop XSS/JavaScript Injection Core Security Technologies Advisories (Mon Feb 01 2010 - 21:46:41 EET)
• [ MDVSA-2010:030 ] kernel security@mandriva.com (Mon Feb 01 2010 - 19:58:00 EET)
• Joomla (com_gambling) SQL Injection Vulnerabilities md.r00t.defacer@gmail.com (Mon Feb 01 2010 - 19:14:34 EET)
• Security Advisory for Bugzilla 3.0.10, 3.2.5, 3.4.4, and 3.5.2 mkanat@bugzilla.org (Mon Feb 01 2010 - 05:05:59 EET)
• iDefense Security Advisory 02.01.10: RealNetworks RealPlayer 11 HTTP Chunked Encoding Integer Overflow Vulnerability iDefense Labs (Mon Feb 01 2010 - 21:20:24 EET)
• [SECURITY] [DSA 1984-1] New libxerces2-java packages fix denial of service Giuseppe Iuculano (Sat Jan 30 2010 - 19:52:35 EET)
• [CORE-2009-1126] Corel Paint Shop Pro Photo X2 FPX Heap Overflow CORE Security Technologies Advisories (Mon Feb 01 2010 - 22:48:41 EET)
• RaakCms Multiple Vulnerabilities info@securitylab.ir (Sun Jan 31 2010 - 09:44:48 EET)
• [SECURITY] [DSA 1985-1] New sendmail packages fix SSL certificate verification weakness Giuseppe Iuculano (Sun Jan 31 2010 - 16:32:06 EET)
• [security bulletin] HPSBUX02464 SSRT090210 rev.1 - HP Enterprise Cluster Master Toolkit (ECMT) running on HP-UX, Local security-alert@hp.com (Tue Feb 02 2010 - 06:22:07 EET)
• Tinypug Multiple Vulnerabilities admin@bugreport.ir (Tue Feb 02 2010 - 12:25:02 EET)
• [SECURITY] [DSA 1987-1] New lighttpd packages fix denial of service Nico Golde (Tue Feb 02 2010 - 13:19:34 EET)
• Remote Vulnerability in AIX RPC.cmsd released by iDefense Rodrigo Rubira Branco (BSDaemon) (Tue Feb 02 2010 - 11:09:52 EET)
• 360 Security Guard breg device drivers Privilege Escalation Vulnerabilitie qiqiguaiguai@gmail.com (Tue Feb 02 2010 - 06:16:50 EET)
• OpenCart CSRF Vulnerability ben@visionsource.org (Tue Feb 02 2010 - 17:13:25 EET)
• [security bulletin] HPSBUX02479 SSRT090212 rev.1 - HP-UX running HP CIFS Server (Samba), Remote Unauthorized Access security-alert@hp.com (Tue Feb 02 2010 - 22:08:23 EET)
• [SECURITY] [DSA 1986-1] New moodle packages fix several vulnerabilities Steffen Joeris (Tue Feb 02 2010 - 21:16:23 EET)
• [security bulletin] HPSBOV02505 SSRT100023 rev.1 - HP OpenVMS RMS, Local Escalation of Privilege security-alert@hp.com (Wed Feb 03 2010 - 00:37:54 EET)
• AST-2010-001: T.38 Remote Crash Vulnerability Asterisk Security Team (Wed Feb 03 2010 - 00:40:17 EET)
• [SECURITY] [DSA-1988-1] New qt4-x11 packages fix several vulnerabilities Giuseppe Iuculano (Wed Feb 03 2010 - 00:44:05 EET)
• [SECURITY] [DSA-1989-1] New fuse packages fix denial of service Giuseppe Iuculano (Wed Feb 03 2010 - 00:57:09 EET)
• [ MDVSA-2010:031 ] wireshark security@mandriva.com (Wed Feb 03 2010 - 05:06:01 EET)
• [CSO10002] Attachment path traversal in Outlook Web Access Ricardo Martins - Chief Security Officers (Wed Feb 03 2010 - 14:10:47 EET)
• [Hellcode Research]: AOL 9.5 File Parsing Buffer Overflow Vulnerability karakorsankara@hotmail.com (Wed Feb 03 2010 - 17:04:39 EET)
• [DSECRG-09-011] HP StorageWorks 1_8 G2 Tape Autoloader - privilege escalation DOS Alexandr Polyakov (Wed Feb 03 2010 - 19:14:05 EET)
• CORE-2009-0625: Internet Explorer Dynamic OBJECT tag and URLMON sniffing vulnerabilities Core Security Technologies Advisories (Wed Feb 03 2010 - 23:08:05 EET)
• [security bulletin] HPSBMA02504 SSRT090220 rev.1 - HP System Management Homepage (SMH) for Linux and Windows, Remote Cross Site Scripting (XSS) security-alert@hp.com (Thu Feb 04 2010 - 00:18:53 EET)
• [SECURITY] [DSA-1990-2] New trac-git package fixes regression Stefan Fritsch (Thu Feb 04 2010 - 01:15:22 EET)
• [SECURITY] [DSA 1991-1] New squid/squid3 packages fix denial of service Steffen Joeris (Thu Feb 04 2010 - 10:46:27 EET)
• [SECURITY] [DSA-1990-1] New trac-git packages fix code execution Florian Weimer (Wed Feb 03 2010 - 23:15:11 EET)
• [MajorSecurity Advisory #64]Apple Safari 4.0.4 Denial of Service david@majorsecurity.info (Thu Feb 04 2010 - 12:30:22 EET)
• [ MDVSA-2010:032 ] rootcerts security@mandriva.com (Thu Feb 04 2010 - 18:01:00 EET)
• [SECURITY] [DSA 1992-1] New chrony packages fix denial of service Nico Golde (Thu Feb 04 2010 - 19:38:45 EET)
• CORELAN-10-008 - Multiple vulnerabilities found in evalmsi 2.1.03 Peter Van Eeckhoutte (Thu Feb 04 2010 - 23:59:38 EET)
• Re: Multiple vulnerabilities in XAMPP (advisory #7) MustLive (Thu Feb 04 2010 - 22:01:57 EET)
  • Re: Multiple vulnerabilities in XAMPP (advisory #7) MustLive (Sat Feb 06 2010 - 23:56:39 EET)
• CORELAN-10-009 : Ipswitch IMAIL 11.01 multiple vulnerabilities (reversible encryption + weak ACL) Security (Fri Feb 05 2010 - 00:40:31 EET)
• CORE-2010-0104 - LANDesk OS command injection CORE Security Technologies Advisories (Fri Feb 05 2010 - 01:00:15 EET)
• JAHx101 - Huski retail mulitple SQL injection vulnerabilities noreply@justanotherhacker.com (Fri Feb 05 2010 - 07:13:16 EET)
• JAHx102 - HuskiCMS local file inclusion noreply@justanotherhacker.com (Fri Feb 05 2010 - 07:14:05 EET)
• Secunia Research: libmikmod Module Parsing Vulnerabilities Secunia Research (Fri Feb 05 2010 - 13:40:57 EET)
• Recon Call for Papers - July 9-11 2010 Hugo Fortier (Fri Feb 05 2010 - 04:15:44 EET)
• Samba Remote Zero-Day Exploit Kingcope (Fri Feb 05 2010 - 07:12:03 EET)
  • Re: Samba Remote Zero-Day Exploit Kingcope (Fri Feb 05 2010 - 18:04:22 EET)
  • Re: Samba Remote Zero-Day Exploit paul.szabo@sydney.edu.au (Sat Feb 06 2010 - 00:43:58 EET)
    • Re: [Full-disclosure] Samba Remote Zero-Day Exploit Thierry Zoller (Sat Feb 06 2010 - 13:50:24 EET)
    • Re: Samba Remote Zero-Day Exploit Kingcope (Sat Feb 06 2010 - 01:38:07 EET)
      • Re: Samba Remote Zero-Day Exploit paul.szabo@sydney.edu.au (Sat Feb 06 2010 - 02:04:46 EET)
  • Re: Samba Remote Zero-Day Exploit paul.szabo@sydney.edu.au (Sat Feb 06 2010 - 23:48:07 EET)
    • RE: Samba Remote Zero-Day Exploit David Jacoby (Tue Feb 09 2010 - 17:44:59 EET)
  • Re: Samba Remote Zero-Day Exploit Stefan Kanthak (Sat Feb 06 2010 - 15:21:08 EET)
    • RE: Samba Remote Zero-Day Exploit Michael Wojcik (Mon Feb 08 2010 - 22:38:23 EET)
      • Re: Samba Remote Zero-Day Exploit Stefan Kanthak (Mon Feb 08 2010 - 23:33:28 EET)
      • RE: Samba Remote Zero-Day Exploit Michael Wojcik (Tue Feb 09 2010 - 16:20:16 EET)
    • Re: Samba Remote Zero-Day Exploit Dan Kaminsky (Sat Feb 06 2010 - 19:43:28 EET)
      • Re: Samba Remote Zero-Day Exploit Stefan Kanthak (Sun Feb 07 2010 - 00:26:22 EET)
      • Re: Samba Remote Zero-Day Exploit Dan Kaminsky (Sun Feb 07 2010 - 00:30:08 EET)
  • Re: Samba Remote Zero-Day Exploit paul.szabo@sydney.edu.au (Sat Feb 06 2010 - 00:03:54 EET)
    • Re: [Full-disclosure] Samba Remote Zero-Day Exploit Thierry Zoller (Sat Feb 06 2010 - 13:43:46 EET)
      • Re: [Full-disclosure] Samba Remote Zero-Day Exploit paul.szabo@sydney.edu.au (Sat Feb 06 2010 - 14:59:59 EET)
      • Re: [Full-disclosure] Samba Remote Zero-Day Exploit Krzysztof Halasa (Mon Feb 08 2010 - 23:57:15 EET)
• [ MDVSA-2010:033 ] squid security@mandriva.com (Fri Feb 05 2010 - 21:43:00 EET)
• CORELAN-10-010 - GeFest Web HomeServer v1.0 Remote Directory Traversal Vulnerability Security (Mon Feb 08 2010 - 15:24:12 EET)
• [Suspected Spam]Vulnerability in Tagcloud for DataLife Engine MustLive (Sun Feb 07 2010 - 16:53:47 EET)
• [DSECRG-09-065] TVUPlayer PlayerOcx.ocx ActiveX - Insecure method Alexandr Polyakov (Mon Feb 08 2010 - 09:52:34 EET)
• mongoose Space Character Remote File Disclosure Vulnerability info@securitylab.ir (Sun Feb 07 2010 - 21:28:09 EET)
• LDF (Default.asp) Sql Injection Vulnerability Arash.Setayeshi@gmail.com (Sat Feb 06 2010 - 18:49:26 EET)
• [MajorSecurity Advisory #65]Motorola Milestone Smartphone Denial of Service david@majorsecurity.info (Sun Feb 07 2010 - 15:14:42 EET)
• [security bulletin] HPSBMA02487 SSRT100024 rev.1 - HP Operations Agent Running on Solaris 10, Remote Unauthorized Access security-alert@hp.com (Mon Feb 08 2010 - 21:03:28 EET)
• [ MDVSA-2010:034 ] kernel security@mandriva.com (Mon Feb 08 2010 - 21:14:01 EET)
• [security bulletin] HPSBUX02503 SSRT100019 rev.1 - HP-UX Running Java, Remote Increase in Privilege, Denial of Service and Other security-alert@hp.com (Mon Feb 08 2010 - 22:54:00 EET)
• [CORE-2010-0121] Multiple Vulnerabilities with 8.3 Filename Pseudonyms in Web Servers CORE Security Technologies Advisories (Fri Feb 05 2010 - 23:15:35 EET)
• [Hacking Event] Night Da Hack 2010 : Call For Proposals m.mahdjoub@sysdream.com (Mon Feb 08 2010 - 15:25:33 EET)
• JDownloader Remote Code Execution Matthias -apoc- Hecker (Mon Feb 08 2010 - 11:11:13 EET)
• Hacktics Advisory Feb09: XSS in Oracle E-Business Suite Ofer Maor (Tue Feb 09 2010 - 14:55:14 EET)
• Aruba Advisory ID: AID-020810 TLS Protocol Session Renegotiation Security Vulnerability Robbie Gill (Tue Feb 09 2010 - 00:40:06 EET)
• ACM CCS 2010: Call for Workshop Proposals Christopher Kruegel (Tue Feb 09 2010 - 08:36:01 EET)
• #HITB - Special Report: HITB2009 CTF Weapons of Mass Destruction Hafez Kamal (Tue Feb 09 2010 - 19:03:03 EET)
• Secunia Research: Microsoft PowerPoint File Path Handling Buffer Overflow Secunia Research (Tue Feb 09 2010 - 21:02:13 EET)
• CORE-2009-0827: Microsoft Office Excel / Word OfficeArtSpgr Container Pointer Overwrite Vulnerability CORE Security Technologies Advisories (Tue Feb 09 2010 - 20:39:19 EET)
• TPTI-10-02: Microsoft Office PowerPoint Viewer TextCharsAtom Record Code Execution Vulnerability ZDI Disclosures (Tue Feb 09 2010 - 22:10:30 EET)
• ZDI-10-015: Microsoft Windows RLE Video Decompressor Remote Code Execution Vulnerability ZDI Disclosures (Tue Feb 09 2010 - 21:46:34 EET)
• ZDI-10-016: Microsoft Windows ShellExecute Improper Sanitization Code Execution Vulnerability ZDI Disclosures (Tue Feb 09 2010 - 22:00:37 EET)
• ZDI-10-017: Microsoft Office PowerPoint Viewer TextBytesAtom Record Remote Code Execution Vulnerability ZDI Disclosures (Tue Feb 09 2010 - 22:00:42 EET)
• Windows SMB NTLM Authentication Weak Nonce Vulnerability Hernan Ochoa (Wed Feb 10 2010 - 01:52:14 EET)
• stratsec Security Advisory SS-2010-003 - Microsoft SMB Client Pool Overflow stratsec Research (Wed Feb 10 2010 - 00:38:44 EET)
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco IronPort Encryption Appliance Cisco Systems Product Security Incident Response Team (Wed Feb 10 2010 - 18:00:00 EET)
• [USN-898-1] gnome-screensaver vulnerability Marc Deslauriers (Wed Feb 10 2010 - 17:37:59 EET)
• [security bulletin] HPSBMA02484 SSRT090076 rev.1 - HP Network Node Manager (NNM), Remote Execution of Arbitrary Commands security-alert@hp.com (Wed Feb 10 2010 - 17:47:09 EET)
• [USN-897-1] MySQL vulnerabilities Marc Deslauriers (Wed Feb 10 2010 - 17:05:57 EET)
• Trustwave's SpiderLabs Security Advisory TWSL2010-001 Trustwave Advisories (Wed Feb 10 2010 - 00:41:15 EET)
  • Re: [WEB SECURITY] Trustwave's SpiderLabs Security Advisory TWSL2010-001 Arian J. Evans (Wed Feb 10 2010 - 02:07:20 EET)
  • (resend) RE: [WEB SECURITY] Trustwave's SpiderLabs Security Advisory TWSL2010-001 Chris Weber (Fri Feb 12 2010 - 00:43:05 EET)
  • RE: Trustwave's SpiderLabs Security Advisory TWSL2010-001 David Byrne (Sat Feb 13 2010 - 04:50:22 EET)
  • RE: [WEB SECURITY] Trustwave's SpiderLabs Security Advisory TWSL2010-001 Ivan Buetler (Thu Feb 18 2010 - 17:33:40 EET)
    • RE: [WEB SECURITY] Trustwave's SpiderLabs Security Advisory TWSL2010-001 David Byrne (Fri Feb 19 2010 - 22:00:54 EET)
• [security bulletin] HPSBMA02486 SSRT090049 rev.1 - HP OpenView Network Node Manager (OV NNM) Java Runtime Environment (JRE) and Java Developer Kit (JDK), Remote Execution of Arbitrary Code and Other Vulnerabilities security-alert@hp.com (Wed Feb 10 2010 - 17:47:34 EET)
• [SECURITY] [DSA 1993-1] New otrs2 packages fix SQL injection Raphael Geissert (Thu Feb 11 2010 - 00:03:48 EET)
• [Onapsis Security Advisory 2010-004] SAP J2EE Authentication Phishing Vector Onapsis Research Labs (Thu Feb 11 2010 - 16:21:08 EET)
  • Re: [Onapsis Security Advisory 2010-004] SAP J2EE Authentication Phishing Vector david.durham@jo-annstores.com (Fri Feb 19 2010 - 17:06:05 EET)
• [Onapsis Security Advisory 2010-003] SAP WebDynpro Runtime XSS/CSS Injection Onapsis Research Labs (Thu Feb 11 2010 - 16:13:41 EET)
• [Onapsis Security Advisory 2010-002] SAP J2EE Engine MDB Path Traversal Onapsis Research Labs (Thu Feb 11 2010 - 16:23:12 EET)
• RE: Trustwave's SpiderLabs Security Advisory TWSL2010-001 David Byrne (Thu Feb 11 2010 - 21:44:32 EET)
• [USN-899-1] Tomcat vulnerabilities Marc Deslauriers (Thu Feb 11 2010 - 21:28:04 EET)
• [ MDVSA-2010:035 ] openoffice.org security@mandriva.com (Thu Feb 11 2010 - 17:24:00 EET)
• [SECURITY] [DSA 1994-1] New ajaxterm packages fix session hijacking Raphael Geissert (Thu Feb 11 2010 - 20:47:55 EET)
• [security bulletin] HPSBPI02507 SSRT100012 rev.2 - HP DreamScreen, Remote Disclosure of Information security-alert@hp.com (Thu Feb 11 2010 - 18:19:19 EET)
• [security bulletin] HPSBMA02488 SSRT100013 rev.1 - HP ProLiant Support Pack 8.30 for Windows, Remote Code Execution, Information Disclosure security-alert@hp.com (Thu Feb 11 2010 - 18:22:55 EET)
• SQL injection vulnerability in apemCMS Maciej Gojny (Thu Feb 11 2010 - 23:47:43 EET)
• ChemViewX v1.9.5 ActiveX Control Mutliple Stack Overflows Paul Craig (Fri Feb 12 2010 - 02:13:55 EET)
• iDefense Security Advisory 02.09.10: Microsoft PowerPoint OEPlaceholderAtom Use-After-Free Vulnerability iDefense Labs (Fri Feb 12 2010 - 02:54:45 EET)
• e-Sentinel Security Advisory - Ref: Session Hijacking iPhone Facebook Application ver 3.1.2 bill.robson@e-sentinel.com (Fri Feb 12 2010 - 02:52:15 EET)
• iDefense Security Advisory 02.09.10: Microsoft PowerPoint OEPlaceholderAtom Invalid Array Indexing Vulnerability iDefense Labs (Fri Feb 12 2010 - 05:43:52 EET)
• iDefense Security Advisory 02.09.10: Microsoft PowerPoint LinkedSlideAtom Heap Overflow Vulnerability iDefense Labs (Fri Feb 12 2010 - 05:09:23 EET)
• [security bulletin] HPSBMA02486 SSRT090049 rev.2 - HP OpenView Network Node Manager (OV NNM) Java Runtime Environment (JRE) and Java Developer Kit (JDK), Remote Execution of Arbitrary Code and Other Vulnerabilities security-alert@hp.com (Fri Feb 12 2010 - 20:49:55 EET)
• cmsmadesimple Multiple Security Issues : XSS+ LFI beenudel1986@gmail.com (Fri Feb 12 2010 - 19:03:41 EET)
• [ MDVSA-2010:036 ] webmin security@mandriva.com (Fri Feb 12 2010 - 23:19:00 EET)
• [SECURITY] [DSA-1996-1] New Linux 2.6.26 packages fix several vulnerabilities dann frazier (Sat Feb 13 2010 - 03:39:51 EET)
• [SECURITY] [DSA-1997-1] New mysql-dfsg-5.0 packages fix several vulnerabilities Giuseppe Iuculano (Sun Feb 14 2010 - 14:28:59 EET)
• Joomla (Jw_allVideos) Remote File Download Vulnerability info@securitylab.ir (Sun Feb 14 2010 - 15:13:32 EET)
  • Re: Joomla (Jw_allVideos) Remote File Download Vulnerability lafrancevi@gmail.com (Tue Feb 16 2010 - 22:16:23 EET)
    • Re: Re: Joomla (Jw_allVideos) Remote File Download Vulnerability info@securitylab.ir (Wed Feb 17 2010 - 09:19:59 EET)
• [ MDVSA-2010:037 ] fetchmail security@mandriva.com (Tue Feb 16 2010 - 14:13:00 EET)
• [USN-900-1] Ruby vulnerabilities Marc Deslauriers (Tue Feb 16 2010 - 16:47:07 EET)
• Information disclosure vulnerability in Drupal's Realname User Reference Widget contributed module (version 6.x-1.0) Martin Barbella (Tue Feb 16 2010 - 17:06:53 EET)
• Chrome Password Manager Cross Origin Weakness (CVE-2010-0556) VSR Advisories (Tue Feb 16 2010 - 17:09:14 EET)
• [USN-901-1] Squid vulnerabilities Marc Deslauriers (Tue Feb 16 2010 - 17:34:36 EET)
• Multiple Stored XSS in XOOPS 2.4.4 Admin Section beenudel1986@gmail.com (Sun Feb 14 2010 - 20:05:31 EET)
• Enomaly ECP: Multiple vulnerabilities in VMcasting protocol & implementation. sam.johnston@aos.net.au (Tue Feb 16 2010 - 03:05:44 EET)
  • Re: Enomaly ECP: Multiple vulnerabilities in VMcasting protocol & implementation. lars@enomaly.com (Wed Feb 17 2010 - 00:39:01 EET)
• VUPEN Security Research - OpenOffice Word Document Processing Heap Overflow Vulnerabilities VUPEN Security Research (Tue Feb 16 2010 - 11:24:30 EET)
• [ MDVSA-2010:038 ] maildrop security@mandriva.com (Tue Feb 16 2010 - 22:00:00 EET)
• MITKRB5-SA-2010-001 [CVE-2010-0283] krb5-1.7 KDC denial of service Tom Yu (Tue Feb 16 2010 - 21:19:35 EET)
• VMSA-2010-0003 ESX Service Console update for net-snmp VMware Security Team (Tue Feb 16 2010 - 20:48:48 EET)
• Pogodny CMS SQL vulnerabilities Maciej Gojny (Tue Feb 16 2010 - 12:03:18 EET)
• Insomnia : ISVA-100216.1 - Windows URL Handling Vulnerability Brett Moore (Tue Feb 16 2010 - 04:39:20 EET)
• IE address bar characters into a small feature info@securitylab.ir (Sat Feb 13 2010 - 00:13:10 EET)
• Huawei HG510 CSRF, Auth Bypass, DoS ivan.markovic@netsec.rs (Sun Feb 14 2010 - 13:54:39 EET)
• Trusteer Rapport Security Circumvention barkley@usa.net (Tue Feb 16 2010 - 12:57:59 EET)
  • RE: Trusteer Rapport Security Circumvention Amit Klein (Wed Feb 17 2010 - 10:46:13 EET)
• ZDI-10-018: IBM Cognos Server Backdoor Account Remote Code Execution Vulnerability ZDI Disclosures (Thu Feb 18 2010 - 17:55:21 EET)
• Cisco Security Advisory: Cisco Firewall Services Module Skinny Client Control Protocol Inspection Denial of Service Vulnerability Cisco Systems Product Security Incident Response Team (Wed Feb 17 2010 - 18:51:25 EET)
• Cross-Site Scriting on Portwise SSL VPN v4.6 research (Wed Feb 17 2010 - 19:07:18 EET)
• Secunia Research: Mozilla Firefox Memory Corruption Vulnerability Secunia Research (Thu Feb 18 2010 - 10:17:10 EET)
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances Cisco Systems Product Security Incident Response Team (Wed Feb 17 2010 - 18:33:35 EET)
• [ MDVSA-2010:040 ] gnome-screensaver security@mandriva.com (Wed Feb 17 2010 - 21:09:00 EET)
• [SECURITY] [DSA 1999-1] New xulrunner packages fix several vulnerabilities Moritz Muehlenhoff (Thu Feb 18 2010 - 22:04:53 EET)
• Circumventing Critical Security in Windows XP barkley@usa.net (Wed Feb 17 2010 - 16:04:12 EET)
  • Re: Circumventing Critical Security in Windows XP Ansgar Wiechers (Fri Feb 19 2010 - 10:50:42 EET)
  • Re: Circumventing Critical Security in Windows XP Jeroen (Sat Feb 20 2010 - 13:05:40 EET)
• [ MDVSA-2010:034-1 ] kernel security@mandriva.com (Thu Feb 18 2010 - 18:46:01 EET)
• [ MDVSA-2010:039 ] netpbm security@mandriva.com (Wed Feb 17 2010 - 20:24:00 EET)
• [USN-895-1] Firefox 3.0 and Xulrunner 1.9 vulnerabilities Jamie Strandboge (Wed Feb 17 2010 - 23:59:21 EET)
• Pixel Portal Sql Injection Vulnerability info@securitylab.ir (Wed Feb 17 2010 - 14:08:34 EET)
• [ MDVSA-2010:041 ] pidgin security@mandriva.com (Thu Feb 18 2010 - 16:45:00 EET)
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco Security Agent Cisco Systems Product Security Incident Response Team (Wed Feb 17 2010 - 18:00:00 EET)
• [SECURITY] [DSA 1998-1] New kdelibs packages fix arbitrary code execution Moritz Muehlenhoff (Wed Feb 17 2010 - 20:25:18 EET)
• [ MDVSA-2010:034-2 ] kernel security@mandriva.com (Thu Feb 18 2010 - 21:31:01 EET)
• BugCon 2010 Call For Papers saintarmin@hotmail.com (Wed Feb 17 2010 - 21:53:06 EET)
• TLS/SSL Hardening & Compatibility Report 2010 Thierry Zoller (Thu Feb 18 2010 - 17:00:08 EET)
• [USN-896-1] Firefox 3.5 and Xulrunner 1.9.1 vulnerabilities Jamie Strandboge (Wed Feb 17 2010 - 23:59:56 EET)
• Kusaba X <= 0.9 XSS/CSRF vulnerabilities systemx00@gmail.com (Thu Feb 18 2010 - 00:48:14 EET)
• SphereCMS Blind SQL Injection Vulnerability admin@bugreport.ir (Wed Feb 17 2010 - 11:59:22 EET)
• [SECURITY] [DSA 2000-1] New ffmpeg packages fix several vulnerabilities Moritz Muehlenhoff (Thu Feb 18 2010 - 22:42:04 EET)
• [USN-890-5] XML-RPC for C and C++ vulnerabilities Jamie Strandboge (Fri Feb 19 2010 - 00:00:05 EET)
• AST-2010-002: Dialplan injection vulnerability Asterisk Security Team (Fri Feb 19 2010 - 01:46:21 EET)
• SQL injection vulnerability in Amelia CMS Maciej Gojny (Fri Feb 19 2010 - 15:14:01 EET)
• [SECURITY] [DSA-2001-1] New php5 packages fix multiple vulnerabilities Raphael Geissert (Fri Feb 19 2010 - 16:56:46 EET)
• [SECURITY] [DSA-2002-1] New polipo packages fix denial of service Stefan Fritsch (Fri Feb 19 2010 - 17:36:51 EET)
• [ MDVSA-2010:042 ] firefox security@mandriva.com (Fri Feb 19 2010 - 18:10:01 EET)
• SEC Consult SA-20100208-0 :: Backdoor and Vulnerabilities in Xerox WorkCentre Printers Web Interface SEC Consult Research (Mon Feb 22 2010 - 10:40:30 EET)
• CA20100222-01: Security Notice for CA Service Desk Kotas, Kevin J (Tue Feb 23 2010 - 01:24:46 EET)
• Secunia Research: Bournal ccrypt Information Disclosure Security Issue Secunia Research (Mon Feb 22 2010 - 18:11:27 EET)
• Secunia Research: Bournal Insecure Temporary Files Security Issue Secunia Research (Mon Feb 22 2010 - 18:11:36 EET)
• [ MDVSA-2010:044 ] mysql security@mandriva.com (Fri Feb 19 2010 - 23:46:00 EET)
• [USN-902-1] Pidgin vulnerabilities Marc Deslauriers (Mon Feb 22 2010 - 18:36:46 EET)
• Multiple Adobe Products - XML External Entity And XML Injection Vulnerabilities Roberto Suggi Liverani (Mon Feb 22 2010 - 00:59:54 EET)
• Hacktics Advisory Feb10: Persistent XSS in Microsoft SharePoint Portal Ofer Maor (Mon Feb 22 2010 - 14:00:41 EET)
• [SECURITY] [DSA 2003-1] New Linux 2.6.18 packages fix several vulnerabilities dann frazier (Tue Feb 23 2010 - 06:56:17 EET)
• Easy FTP Server 1.7.0.2 Remote BoF jonbutler88@googlemail.com (Sun Feb 21 2010 - 00:17:12 EET)
• jQuery Validate 1.6.0 Demo Code Advisory CodeScan Labs Advisories (Mon Feb 22 2010 - 00:02:50 EET)
• ZDI-10-019: Mozilla Firefox showModalDialog Cross-Domain Scripting Vulnerability ZDI Disclosures (Fri Feb 19 2010 - 21:22:31 EET)
• London DEFCON February meet - DC4420 - Wed 24th Feb 2010 Major Malfunction (Mon Feb 22 2010 - 16:56:05 EET)
• [DSECRG-09-039] Symantec Antivirus 10.0 ActiveX - buffer Overflow. Alexandr Polyakov (Fri Feb 19 2010 - 20:00:52 EET)
• Official Portal 2007 Multiple Vulnerabilities info@securitylab.ir (Sun Feb 21 2010 - 10:44:45 EET)
• Request for feedback on TCP security (IETF effort) Fernando Gont (Sat Feb 20 2010 - 07:20:21 EET)
• [ MDVSA-2010:043 ] libtheora security@mandriva.com (Fri Feb 19 2010 - 21:24:00 EET)
• Chuck Norris Botnet and Broadband Routers Gadi Evron (Mon Feb 22 2010 - 16:22:49 EET)
  • Re: Chuck Norris Botnet and Broadband Routers Adrian P. (Wed Feb 24 2010 - 00:20:53 EET)
• [ MDVSA-2010:045 ] php security@mandriva.com (Tue Feb 23 2010 - 16:06:01 EET)
• [ MDVSA-2010:046 ] ncpfs security@mandriva.com (Tue Feb 23 2010 - 21:59:00 EET)
• [ MDVSA-2010:047 ] fuse security@mandriva.com (Tue Feb 23 2010 - 22:25:00 EET)
• VUPEN Security Research - Symantec Products "SYMLTCOM.dll" Buffer Overflow Vulnerability VUPEN Security Research (Wed Feb 24 2010 - 02:46:19 EET)
• CA20100223-01: Security Notice for CA eHealth Performance Manager Kotas, Kevin J (Tue Feb 23 2010 - 22:31:57 EET)
• [TKADV2010-003] avast! 4.8 and 5.0 aavmker4.sys Kernel Memory Corruption Tobias Klein (Tue Feb 23 2010 - 18:13:19 EET)
• Kojoney (SSH honeypot) remote DoS Nicob (Wed Feb 24 2010 - 00:59:06 EET)
• ZDI-10-020: EMC HomeBase SSL Service Arbitrary File Upload Remote Code Execution Vulnerability ZDI Disclosures (Wed Feb 24 2010 - 00:22:55 EET)
• ZDI-10-021: Novell NetStorage xsrvd Long Pathname Remote Code Execution Vulnerability ZDI Disclosures (Wed Feb 24 2010 - 01:00:00 EET)
• ESA-2010-003: EMC HomeBase Server Arbitrary File Upload Vulnerability Security_Alert@emc.com (Thu Feb 25 2010 - 00:12:53 EET)
• iDefense Security Advisory 02.23.10: Multiple Vendor NOS Microsystems getPlus Downloader Input Validation Vulnerability iDefense Labs (Wed Feb 24 2010 - 23:06:55 EET)
• Rbot Owner Reaction Command Execution Matthias -apoc- Hecker (Wed Feb 24 2010 - 16:56:59 EET)
• [USN-904-1] Squid vulnerability Marc Deslauriers (Wed Feb 24 2010 - 19:18:55 EET)
• SQL injection vulnerability in LiveChatNow Support TEAM (Wed Feb 24 2010 - 18:02:05 EET)
• NSOADV-2010-003: DATEV ActiveX Control remote command execution NSO Research (Thu Feb 25 2010 - 10:18:50 EET)
• Hacktics Advisory Feb10: XSS in IBM WebSphere Portal & Lotus WCM Ofer Maor (Thu Feb 25 2010 - 15:06:34 EET)
• Form-based HTTP Authentication Proof of Concept Timothy D. Morgan (Thu Feb 25 2010 - 18:31:31 EET)
• [ MDVSA-2010:048 ] roundcubemail security@mandriva.com (Thu Feb 25 2010 - 18:29:00 EET)
• SQL injection vulnerability in WebAdministrator Lite CMS Maciej Gojny (Thu Feb 25 2010 - 15:17:12 EET)
• SyScan'10 CALL FOR PAPERS thomas@syscan.org (Fri Feb 26 2010 - 10:21:08 EET)
• [ MDVSA-2010:049 ] sudo security@mandriva.com (Thu Feb 25 2010 - 23:48:00 EET)
• AST-2010-003: Invalid parsing of ACL rules can compromise security Asterisk Security Team (Fri Feb 26 2010 - 00:28:13 EET)
• getPlus insufficient domain name validation vulnerability Akita Software Security (Fri Feb 26 2010 - 15:24:32 EET)
• [ MDVSA-2010:050 ] apache-mod_security security@mandriva.com (Fri Feb 26 2010 - 15:25:00 EET)
• ARISg5 (version 5.0) cross site scripting vulnerability Yaniv Miron (Fri Feb 26 2010 - 03:30:58 EET)

Last message date: Sat Feb 27 2010 - 00:29:17 EET
Archived on: Sat Feb 27 2010 - 00:29:21 EET

This archive was generated by hypermail 2b28 : Sat Feb 27 2010 - 00:29:21 EET