stdin
By Thread

• [USN-905-1] sudo vulnerabilities Jamie Strandboge (Fri Feb 26 2010 - 23:44:06 EET)
• Month of PHP Security 2010 - CALL FOR PAPERS Stefan Esser (Sat Feb 27 2010 - 14:14:05 EET)
• Re: Information disclosure vulnerability in Drupal's Realname User Reference Widget contributed module (version 6.x-1.0) mori@diasporan.net (Sun Feb 28 2010 - 01:34:44 EET)
• CONFidence 2010 /25-26 May/, CfP andrzej.targosz@proidea.org.pl (Sun Feb 28 2010 - 03:31:29 EET)
• ARISg5 (Version 5.0) Cross Site Scripting Vulnerability lament@ilhack.org (Fri Feb 26 2010 - 22:38:26 EET)
• Oracle Siebel 7.x CRM Cross Site Scripting Vulnerability lament@ilhack.org (Sun Feb 28 2010 - 21:27:12 EET)
• [SECURITY] [DSA 2004-1] New samba packages fix several vulnerabilities Moritz Muehlenhoff (Sun Feb 28 2010 - 23:55:00 EET)
• [SECURITY] [DSA 2004-1] New Linux 2.6.24 packages fix several vulnerabilities dann frazier (Mon Mar 01 2010 - 05:53:30 EET)
• Re: Easy FTP Server 1.7.0.2 Remote BoF Paul Makowski (Mon Mar 01 2010 - 11:25:25 EET)
• [ MDVSA-2010:051 ] mozilla-thunderbird security@mandriva.com (Mon Mar 01 2010 - 19:45:01 EET)
• ZDI-10-022: IBM Informix librpc.dll Multiple Remote Code Execution Vulnerabilities ZDI Disclosures (Tue Mar 02 2010 - 00:37:28 EET)
• 1024CMS Blind SQL Injection Vulnerability admin@bugreport.ir (Tue Mar 02 2010 - 09:46:34 EET)
• [ MDVSA-2010:052 ] sudo security@mandriva.com (Mon Mar 01 2010 - 23:59:01 EET)
• ZDI-10-023: Multiple Vendor librpc.dll Signedness Error Remote Code Execution Vulnerability ZDI Disclosures (Tue Mar 02 2010 - 00:42:21 EET)
• Eshbel Priority MarketGate module Cross Site Scripting Vulnerability lament@ilhack.org (Tue Mar 02 2010 - 02:35:31 EET)
• Sparta Systems TrackWise TeamAccess module Multiple Cross Site Scripting Vulnerabilities lament@ilhack.org (Tue Mar 02 2010 - 14:42:32 EET)
• [xss] i found a Cross Site Scripting Vulnerability about Discuz! 'uid' Parameter lis cker (Tue Mar 02 2010 - 02:56:37 EET)
• Todd Miller Sudo local root exploit discovered by Slouching Kingcope (Tue Mar 02 2010 - 01:08:44 EET)
  • Re: Todd Miller Sudo local root exploit discovered by Slouching andy@hotmail.com (Wed Mar 03 2010 - 14:03:32 EET)
    • Re: Todd Miller Sudo local root exploit discovered by Slouching Kingcope (Wed Mar 03 2010 - 15:18:23 EET)
    • Re: Todd Miller Sudo local root exploit discovered by Slouching Jann Horn (Wed Mar 03 2010 - 21:13:07 EET)
• iDefense Security Advisory 03.02.10: IBM Lotus Domino Web Access ActiveX Stack Buffer Overflow Vulnerability iDefense Labs (Tue Mar 02 2010 - 09:16:51 EET)
• [ MDVSA-2010:053 ] apache security@mandriva.com (Tue Mar 02 2010 - 22:27:01 EET)
• Luxology Modo 401 .LXO Integer Overflow CORE Security Technologies Advisories (Tue Mar 02 2010 - 22:05:43 EET)
• [SECURITY] [DSA 2006-1] New sudo packages fix several vulnerabilities Giuseppe Iuculano (Tue Mar 02 2010 - 22:36:52 EET)
• ZDI-10-024: Novell eDirectory SOAP Request Parsing Denial of Service Vulnerability ZDI Disclosures (Tue Mar 02 2010 - 22:55:23 EET)
• NSOADV-2010-004: McAfee LinuxShield remote/local code execution NSO Research (Tue Mar 02 2010 - 23:30:07 EET)
  • RE: NSOADV-2010-004: McAfee LinuxShield remote/local code execution Veal, Richard (Wed Mar 03 2010 - 10:14:31 EET)
    • Re: NSOADV-2010-004: McAfee LinuxShield remote/local code execution NSO Research (Wed Mar 03 2010 - 11:59:57 EET)
• Cisco Security Advisory: Cisco Unified Communications Manager Denial of Service Vulnerabilities Cisco Systems Product Security Incident Response Team (Wed Mar 03 2010 - 17:45:00 EET)
• [ GLSA 201003-01 ] sudo: Privilege escalation Alex Legler (Wed Mar 03 2010 - 18:30:31 EET)
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco Digital Media Manager Cisco Systems Product Security Incident Response Team (Wed Mar 03 2010 - 18:24:33 EET)
• Cisco Security Advisory: Cisco Digital Media Player Remote Display Unauthorized Content Injection Vulnerability Cisco Systems Product Security Incident Response Team (Wed Mar 03 2010 - 18:26:19 EET)
• CORRECTION: CORE-2009-0913 - Luxology Modo 401 .LXO Integer Overflow CORE Security Technologies Advisories (Wed Mar 03 2010 - 19:12:29 EET)
• [USN-906-1] CUPS vulnerabilities Marc Deslauriers (Wed Mar 03 2010 - 22:38:53 EET)
• [SECURITY] [DSA 2007-1] New cups packages fix arbitrary code execution Nico Golde (Thu Mar 04 2010 - 00:12:23 EET)
• IETF effort: Security Assesment of the Internet Protocol Fernando Gont (Thu Mar 04 2010 - 11:48:49 EET)
• NSOADV-2010-006: Authentium Command Free Scan ActiveX Control buffer overflow NSO Research (Thu Mar 04 2010 - 17:32:52 EET)
• VMSA-2010-0004 ESX Service Console and vMA third party updates VMware Security Team (Thu Mar 04 2010 - 08:47:03 EET)
• Apple Airport Wireless Products: Promiscuous FTP PORT Allowed in FTP Proxy Provides Security Bypass Sabahattin Gucukoglu (Thu Mar 04 2010 - 19:19:15 EET)
  • Re: Apple Airport Wireless Products: Promiscuous FTP PORT Allowed in FTP Proxy Provides Security Bypass drstrangep0rk@hushmail.com (Sat Mar 06 2010 - 04:12:44 EET)
    • Re: Apple Airport Wireless Products: Promiscuous FTP PORT Allowed in FTP Proxy Provides Security Bypass Sabahattin Gucukoglu (Tue Mar 09 2010 - 07:26:01 EET)
• Open redirection vulnerability in the Drupal API function drupal_goto (Drupal 6.15 and 5.21) Martin Barbella (Thu Mar 04 2010 - 17:06:07 EET)
• Unspecified EMC Documentum Remote Code Execution Vulnerability dr_ch1na@hushmail.com (Thu Mar 04 2010 - 18:16:36 EET)
• CA20100304-01: Security Notice for CA SiteMinder Williams, James K (Thu Mar 04 2010 - 19:51:28 EET)
• [xss] a xss on "ThreadID" parameter in BBSXP 2008 from china lis cker (Thu Mar 04 2010 - 06:47:56 EET)
• [ MDVSA-2010:054 ] pam_krb5 security@mandriva.com (Thu Mar 04 2010 - 18:25:00 EET)
• Juniper SA Series Cross Site Scripting Issue Security Lists NL (Fri Mar 05 2010 - 15:41:57 EET)
• iDefense Security Advisory 03.04.10: Autonomy KeyView OLE Document Integer Overflow Vulnerability iDefense Labs (Fri Mar 05 2010 - 02:30:06 EET)
• SQL injection vulnerability in Natychmiast CMS Maciej Gojny (Fri Mar 05 2010 - 13:03:05 EET)
• Call for Papers: EC2ND 2010 Konrad Rieck (Fri Mar 05 2010 - 18:43:36 EET)
• ncpfs, Multiple Vulnerabilities Dan Rosenberg (Fri Mar 05 2010 - 19:06:01 EET)
  • Re: ncpfs, Multiple Vulnerabilities dan.j.rosenberg@gmail.com (Fri Mar 05 2010 - 21:10:11 EET)
• [ MDVSA-2010:055 ] poppler security@mandriva.com (Fri Mar 05 2010 - 18:21:01 EET)
• [ MDVSA-2010:056 ] openoffice.org security@mandriva.com (Sat Mar 06 2010 - 00:11:00 EET)
• Apache mod_isapi Dangling Pointer Vulnerability - Security Advisory - SOS-10-002 Lists (Sat Mar 06 2010 - 01:18:00 EET)
• [xss] a xss on "action" parameter in BBSMAX lis cker (Sat Mar 06 2010 - 02:13:45 EET)
• phpinfo() XSS Vulnerability info@securitylab.ir (Sat Mar 06 2010 - 13:03:45 EET)
  • Re: phpinfo() XSS Vulnerability Salvatore Fresta aka Drosophila (Mon Mar 08 2010 - 23:29:50 EET)
• [XSS] i found a xss on "page" parameter in "eccredit.php" in Dvbbs < 8.3.0 lis cker (Sat Mar 06 2010 - 13:11:35 EET)
• "Writing JIT-Spray Shellcode for fun and profit" by DSecRG DSecRG (Sat Mar 06 2010 - 13:15:59 EET)
• [ MDVSA-2010:057 ] apache security@mandriva.com (Sun Mar 07 2010 - 00:26:01 EET)
• rPSA-2010-0011-1 gnome-ssh-askpass openssh openssh-client openssh-server rPath Update Announcements (Sun Mar 07 2010 - 15:57:34 EET)
• rPSA-2010-0012-1 postgresql postgresql-contrib postgresql-server rPath Update Announcements (Sun Mar 07 2010 - 15:59:24 EET)
• ZoneAlarm Security Circumvention Andrew Barkley (Mon Mar 08 2010 - 18:49:18 EET)
  • Re: ZoneAlarm Security Circumvention Ansgar Wiechers (Mon Mar 08 2010 - 23:56:17 EET)
• rPSA-2010-0014-1 mysql mysql-bench mysql-server rPath Update Announcements (Sun Mar 07 2010 - 16:13:52 EET)
• [USN-907-1] gnome-screensaver vulnerabilities Marc Deslauriers (Mon Mar 08 2010 - 16:29:55 EET)
• rPSA-2010-0013-1 gzip rPath Update Announcements (Sun Mar 07 2010 - 16:02:21 EET)
• SQL injection vulnerability in wILD CMS Maciej Gojny (Tue Mar 09 2010 - 17:42:30 EET)
• Croogo CMS 1.2 Cross Site Scripting Vulnerabilities Paulino Calderon (Tue Mar 09 2010 - 05:25:04 EET)
• IBM ENOVIA SmarTeam v5 Cross Site Scripting Vulnerability lament@ilhack.org (Tue Mar 09 2010 - 17:17:25 EET)
• [SECURITY] [DSA 2008-1] New typo3-src packages fix several vulnerabilities Moritz Muehlenhoff (Tue Mar 09 2010 - 01:16:23 EET)
• [security bulletin] HPSBMA02489 SSRT090065 rev.1 - HP Performance Insight , Remote Execution of Arbitrary Commands security-alert@hp.com (Tue Mar 09 2010 - 16:15:06 EET)
• ZDI-10-025: Microsoft Office Excel XLSX File Parsing Remote Code Execution Vulnerability ZDI Disclosures (Tue Mar 09 2010 - 20:35:07 EET)
• [xss] a xss on "threadid" parameter in BBSMAX lis cker (Wed Mar 10 2010 - 03:10:59 EET)
• iDefense Security Advisory 03.09.10: Microsoft Excel FNGROUPNAME Record Uninitialized Memory Vulnerability iDefense Labs (Wed Mar 10 2010 - 09:54:27 EET)
• ZDI-10-026: Hewlett-Packard OVPI helpmanager Servlet Remote Code Execution Vulnerability ZDI Disclosures (Tue Mar 09 2010 - 21:14:22 EET)
• Secunia Research: Employee Timeclock Software SQL Injection Vulnerabilities Secunia Research (Wed Mar 10 2010 - 15:00:38 EET)
• CORE-2009-0813: Windows Movie Maker and Microsoft Producer IsValidWMToolsStream() Heap Overflow CORE Security Technologies Advisories (Tue Mar 09 2010 - 23:33:43 EET)
• CORE-2009-1103: Microsoft Office Excel DbOrParamQry Record Parsing Vulnerability CORE Security Technologies Advisories (Tue Mar 09 2010 - 23:35:52 EET)
• [ MDVSA-2010:058 ] php security@mandriva.com (Tue Mar 09 2010 - 21:50:00 EET)
• Secunia Research: Employee Timeclock Software "mysqldump" Password Disclosure Secunia Research (Wed Mar 10 2010 - 15:00:44 EET)
• VUPEN Security Research - Microsoft Office Excel Record Processing Code Execution Vulnerability VUPEN Security Research (Wed Mar 10 2010 - 13:01:40 EET)
• Vulnerabilities in Hydra Engine MustLive (Tue Mar 09 2010 - 23:54:08 EET)
• iDefense Security Advisory 03.09.10: Microsoft Excel Sheet Object Type Confusion Vulnerability iDefense Labs (Wed Mar 10 2010 - 09:20:18 EET)
• iDefense Security Advisory 03.09.10: Microsoft Excel MDXTUPLE Record Heap Overflow Vulnerability iDefense Labs (Wed Mar 10 2010 - 10:45:14 EET)
• Secunia Research: Employee Timeclock Software Backup Information Disclosure Secunia Research (Wed Mar 10 2010 - 15:00:30 EET)
• iDefense Security Advisory 03.09.10: Microsoft Excel MDXSET Record Heap Overflow Vulnerability iDefense Labs (Wed Mar 10 2010 - 10:21:31 EET)
• [ MDVSA-2010:059 ] virtualbox security@mandriva.com (Wed Mar 10 2010 - 21:16:01 EET)
• Secunia Research: XnView DICOM Parsing Integer Overflow Vulnerability Secunia Research (Wed Mar 10 2010 - 18:07:12 EET)
• [USN-908-1] Apache vulnerabilities Marc Deslauriers (Wed Mar 10 2010 - 21:41:48 EET)
• [SECURITY] [DSA 2009-1] New tdiary packages fix cross-site scripting Steffen Joeris (Tue Mar 09 2010 - 23:57:06 EET)
• [SECURITY] [DSA-2010-1] New kvm packages fix several vulnerabilities dann frazier (Wed Mar 10 2010 - 20:18:55 EET)
• CVE-2010-0624: Heap-based buffer overflow in GNU Tar and GNU Cpio Jakob Lell (Wed Mar 10 2010 - 13:59:55 EET)
• Friendly-Tech FriendlyTR69 CPE Remote Management V2.8.9 SQL Injection Vulnerability lament@ilhack.org (Wed Mar 10 2010 - 02:52:17 EET)
• [USN-909-1] dpkg vulnerability Kees Cook (Thu Mar 11 2010 - 09:06:46 EET)
• Skype URI Handler Input Validation Paul Craig (Thu Mar 11 2010 - 00:23:57 EET)
• [ MDVSA-2010:060 ] squid security@mandriva.com (Thu Mar 11 2010 - 00:05:00 EET)
• [SECURITY] [DSA 2011-1] New dpkg packages fix path traversal Nico Golde (Wed Mar 10 2010 - 22:48:44 EET)
• Multiple vulnerabilities in SUPERAntiSpyware and Super Ad Blocker Luka Milkovic (Wed Mar 10 2010 - 23:15:26 EET)
• Vulnerabilities in Abton MustLive (Wed Mar 10 2010 - 23:57:52 EET)
• [USN-911-1] MoinMoin vulnerabilities Jamie Strandboge (Fri Mar 12 2010 - 04:01:12 EET)
• [SECURITY] [DSA 2014-1] New moin packages fix several vulnerabilities Giuseppe Iuculano (Fri Mar 12 2010 - 12:51:08 EET)
• [SECURITY] [DSA 2013-1] New egroupware packages fix several vulnerabilities Moritz Muehlenhoff (Fri Mar 12 2010 - 00:30:09 EET)
• [XSS] I found a xss in phpmyadmin 3.3.0 when we create new database in interface! lis cker (Fri Mar 12 2010 - 14:43:32 EET)
• [ MDVSA-2010:061 ] ncpfs security@mandriva.com (Thu Mar 11 2010 - 22:05:00 EET)
• iDefense Security Advisory 03.11.10: Multiple Vendor WebKit HTML Element Use After Free Vulnerability iDefense Labs (Fri Mar 12 2010 - 02:01:42 EET)
• [SECURITY] [DSA 2012-1] New Linux 2.6.26 packages fix several issues dann frazier (Thu Mar 11 2010 - 20:47:18 EET)
• ZDI-10-028: Skype URI Processing Arbitrary XML File Deletion Vulnerability ZDI Disclosures (Thu Mar 11 2010 - 19:57:26 EET)
• ZDI-10-027: Skype Protocol Handler datapath Argument Injection Remote Code Execution Vulnerability ZDI Disclosures (Thu Mar 11 2010 - 19:57:30 EET)
• VUPEN Security Research - Apple Safari ColorSync Profile Integer Overflow Vulnerability VUPEN Security Research (Fri Mar 12 2010 - 19:52:35 EET)
• Vulnerability in phpAdsNew, OpenAds and OpenX MustLive (Sun Mar 14 2010 - 23:36:43 EET)
• SyScan'10 CFP thomas@syscan.org (Mon Mar 15 2010 - 14:27:23 EET)
• [Tool] sqlmap 0.8 released Bernardo Damele A. G. (Mon Mar 15 2010 - 05:08:58 EET)
• Ananta Gazelle SQL Injection Vulnerability admin@bugreport.ir (Sat Mar 13 2010 - 11:40:58 EET)
• Sun Java System Communication Express CSRF via HPP edgard.chammas@beyond-security.org (Sat Mar 13 2010 - 02:10:38 EET)
• [HITB-Announce] HITBSecConf2010 - Dubai Agenda Released Hafez Kamal (Sun Mar 14 2010 - 10:31:35 EET)
• [SECURITY] [DSA 2016-1] New drupal6 packages fix several vulnerabilities Giuseppe Iuculano (Sat Mar 13 2010 - 17:58:42 EET)
• Pars CMS SQL Injection Vulnerability faghani@nsec.ir (Mon Mar 15 2010 - 14:01:07 EET)
• Zigurrat CMS SQL Injection Vulnerability faghani@nsec.ir (Mon Mar 15 2010 - 14:02:03 EET)
• ...because you can't get enough of clickjacking Michal Zalewski (Sat Mar 13 2010 - 08:28:01 EET)
• CVE-2010-0188 Exploit Code villys777@gmail.com (Sat Mar 13 2010 - 01:55:42 EET)
• PlumberCon 10 - Call for Papers astera (Mon Mar 15 2010 - 17:23:49 EET)
• Vulnerability httpdx v1.5.3 Mehdi Mahdjoub - Sysdream IT Security Services (Mon Mar 15 2010 - 17:28:53 EET)
• ZoneAlarm 9 (ForceField) Security Disclosure Andrew Barkley (Mon Mar 15 2010 - 17:06:21 EET)
• New vulnerabilities in Abton MustLive (Fri Mar 12 2010 - 18:59:36 EET)
• Multiple DOM-Based XSS in Dojo Toolkit SDK labs@gdssecurity.com (Mon Mar 15 2010 - 17:24:42 EET)
• ZDI-10-029: Apple WebKit innerHTML element Substitution Remote Code Execution Vulnerability ZDI Disclosures (Mon Mar 15 2010 - 18:51:37 EET)
• QuickZip 0day detailed write-up Security (Mon Mar 15 2010 - 20:24:23 EET)
• rPSA-2010-0022-1 sendmail sendmail-cf rPath Update Announcements (Tue Mar 16 2010 - 03:29:50 EET)
• SugarCRM Stored XSS vulnerability Jeromie Jackson (Tue Mar 16 2010 - 17:07:25 EET)
• ZDI-10-031: Apple Webkit Blink Event Dangling Pointer Remote Code Execution Vulnerability ZDI Disclosures (Tue Mar 16 2010 - 18:24:05 EET)
• [USN-912-1] Audio File Library vulnerability Marc Deslauriers (Tue Mar 16 2010 - 19:34:23 EET)
• ZDI-10-032: SAP MaxDB Malformed Handshake Request Remote Code Execution Vulnerability ZDI Disclosures (Tue Mar 16 2010 - 18:56:30 EET)
• [SECURITY] [DSA 2017-1] New pulseaudio packages fix insecure temporary directory Giuseppe Iuculano (Mon Mar 15 2010 - 22:14:44 EET)
• rPSA-2010-0018-1 bind bind-utils caching-nameserver rPath Update Announcements (Tue Mar 16 2010 - 03:21:11 EET)
• Last Call for Papers, CONFidence 2010, 25-26May, Last Call for Papers Andrzej Targosz (Tue Mar 16 2010 - 03:15:28 EET)
• ZDI-10-030: Apple WebKit CSS run-in Attribute Rendering Remote Code Execution Vulnerability ZDI Disclosures (Tue Mar 16 2010 - 18:20:09 EET)
• [USN-913-1] libpng vulnerabilities Marc Deslauriers (Tue Mar 16 2010 - 19:34:50 EET)
• CORE-2009-0803: Virtual PC Hypervisor Memory Protection Vulnerability CORE Security Technologies Advisories (Tue Mar 16 2010 - 22:11:40 EET)
• CORE-2010-0311 - eFront-learning PHP file inclusion vulnerability CORE Security Technologies Advisories (Tue Mar 16 2010 - 22:48:04 EET)
• [security bulletin] HPSBGN02511 SSRT100022 rev.2 - HP Small Form Factor or Microtower PC with Broadcom Integrated NIC Firmware, Remote Execution of Arbitrary Code security-alert@hp.com (Tue Mar 16 2010 - 22:56:56 EET)
• [CORELAN-10-13] - Windisc Local Stack BOF Security (Tue Mar 16 2010 - 23:32:27 EET)
• Vulnerabilities in VXDate for Joomla MustLive (Tue Mar 16 2010 - 23:40:35 EET)
• Miranda IM silent TLS failure Jan Schejbal (Wed Mar 17 2010 - 02:31:29 EET)
• Secunia Research: Quicksilver Forums Backup Information Disclosure Secunia Research (Wed Mar 17 2010 - 17:33:47 EET)
• Secunia Research: Quicksilver Forums Cross-Site Request Forgery Vulnerability Secunia Research (Wed Mar 17 2010 - 17:33:56 EET)
• Secunia Research: Quicksilver Forums "mysqldump" Password Disclosure Secunia Research (Wed Mar 17 2010 - 17:33:39 EET)
• Sahana 0.6.2.2 Authentication Bypass Christopher (Wed Mar 17 2010 - 18:54:30 EET)
• CA20100318-01: Security Notice for CA ARCserve Backup Kotas, Kevin J (Thu Mar 18 2010 - 23:51:12 EET)
• There are lost of xss vul in PHPWind v6.0 ! lis cker (Fri Mar 19 2010 - 03:44:01 EET)
• IBM Lotus 6.x HTTP Response Splitting Vulnerability lament@ilhack.org (Fri Mar 19 2010 - 04:19:00 EET)
• [SECURITY] [DSA-2018-1] New php5 packages fix null pointer dereference Raphael Geissert (Thu Mar 18 2010 - 18:38:27 EET)
• [USN-915-1] Thunderbird vulnerabilities Marc Deslauriers (Thu Mar 18 2010 - 17:36:26 EET)
• Vulnerability Httpdx v1.5.3b Mehdi Mahdjoub - Sysdream IT Security Services (Fri Mar 19 2010 - 16:48:21 EET)
• announcing skipfish, an automated web app security scanner Michal Zalewski (Fri Mar 19 2010 - 19:51:27 EET)
• [CORELAN-10-015] - Remote Help 0.0.7 Httpd DoS (Format String) Security (Sat Mar 20 2010 - 22:43:13 EET)
• Aris AGX agXchange ESM Open Redirection Vulnerability lament@ilhack.org (Fri Mar 19 2010 - 21:34:28 EET)
• Firefox 3.6 for Windows includes a forged CA cert Francis Litterio (Fri Mar 19 2010 - 22:22:16 EET)
  • Re: Firefox 3.6 for Windows includes a forged CA cert dveditz@cruzio.com (Mon Mar 22 2010 - 20:34:21 EET)
  • Re: Firefox 3.6 for Windows includes a forged CA cert adam@omega.org.uk (Tue Mar 23 2010 - 01:00:30 EET)
  • Re: Firefox 3.6 for Windows includes a forged CA cert Mike Duncan (Mon Mar 22 2010 - 19:35:28 EET)
  • Re: Firefox 3.6 for Windows includes a forged CA cert Marcus Meissner (Tue Mar 23 2010 - 11:16:06 EET)
• IBM Lotus 6.x names.nsf Cross Site Scripting Vulnerability lament@ilhack.org (Fri Mar 19 2010 - 22:57:21 EET)
• [SECURITY] [DSA-2019-1] New pango1.0 packages fix denial of service Giuseppe Iuculano (Sat Mar 20 2010 - 11:41:28 EET)
• [ MDVSA-2010:062 ] curl security@mandriva.com (Sat Mar 20 2010 - 03:20:02 EET)
• [SECURITY] [DSA 2020-1] New ikiwiki packages fix cross-site scripting Nico Golde (Sat Mar 20 2010 - 16:34:35 EET)
• [ MDVSA-2010:063 ] libpng security@mandriva.com (Tue Mar 23 2010 - 01:21:00 EET)
• CFP - GameSec 2010 - Conference on Decision and Game Theory for Security Albert Levi (Sun Mar 21 2010 - 15:12:48 EET)
• {PRL} Lexmark Multiple Laser Printer Remote Stack Overflow Francis Provencher (Mon Mar 22 2010 - 15:06:58 EET)
• [ MDVSA-2010:064 ] libpng security@mandriva.com (Tue Mar 23 2010 - 14:57:00 EET)
• REMINDER: Month of PHP Security 2010 - CALL FOR PAPERS - Only 3 weeks left Stefan Esser (Sun Mar 21 2010 - 09:44:35 EET)
• [SECURITY] [DSA 2021-1] New spamass-milter packages fix remote command execution Giuseppe Iuculano (Mon Mar 22 2010 - 13:01:46 EET)
• IE 6.0 - Local Crash Exploit info@securitylab.ir (Sat Mar 20 2010 - 22:23:45 EET)
  • Re: IE 6.0 - Local Crash Exploit Veg (Tue Mar 23 2010 - 21:16:45 EET)
• Vulnerability Astaro Security Linux v5 Mehdi Mahdjoub - Sysdream IT Security Services (Tue Mar 23 2010 - 10:47:13 EET)
  • Re: Vulnerability Astaro Security Linux v5 jdaniel@astaro.com (Tue Mar 23 2010 - 21:26:07 EET)
  • Re: Vulnerability Astaro Security Linux v5 Akos Szalkai (Tue Mar 23 2010 - 21:47:48 EET)
• [DSECRG-09-064] SAP GUI - Insecure method, code execution Alexandr Polyakov (Tue Mar 23 2010 - 19:16:08 EET)
• MX Simulator Server 2010-02-06 Remote Buffer Overflow PoC Salvatore Fresta aka Drosophila (Sat Mar 20 2010 - 22:45:03 EET)
• [HITB-Announce] HITBSecConf2009 - Malaysia Videos Released! Hafez Kamal (Tue Mar 23 2010 - 04:32:39 EET)
• Safari browser port blocking bypassed by integer overflow Gary Niger (Tue Mar 23 2010 - 21:28:30 EET)
• Vulnerabilities in CaptchaSecurityImages MustLive (Mon Mar 22 2010 - 21:51:24 EET)
• [ MDVSA-2010:065 ] cpio security@mandriva.com (Tue Mar 23 2010 - 16:06:00 EET)
• MITKRB5-SA-2010-002 denial of service in SPNEGO [CVE-2010-0628 VU#839413] Tom Yu (Tue Mar 23 2010 - 20:04:41 EET)
• Aris AGX agXchange ESM Cross Site Scripting Vulnerability lament@ilhack.org (Mon Mar 22 2010 - 23:55:08 EET)
• Internet Explorer 7.0 0day Vulnerability k4mr4n_St@yahoo.com (Sat Mar 20 2010 - 22:36:01 EET)
• {PRL} Lexmark Multiple Laser printer FTP Remote Denial of Services Francis Provencher (Mon Mar 22 2010 - 15:11:00 EET)
• Insecure SMS authorization scheme at LiqPAY micro-payments of PrivatBank (Ukraine) Andriy Tereshchenko (Mon Mar 22 2010 - 19:38:36 EET)
• Vulnerabilities in WordPress MustLive (Fri Mar 19 2010 - 23:57:16 EET)
• [USN-916-1] Kerberos vulnerabilities Kees Cook (Wed Mar 24 2010 - 01:32:04 EET)
• CVE-2009-4505 OpenCMS OAMP Comments Module XSS Cyrill Brunschwiler (Wed Mar 24 2010 - 13:57:37 EET)
• [HITB-Announce] HITBSecConf2009 - Malaysia Videos Released! *Correction* Hafez Kamal (Wed Mar 24 2010 - 04:23:06 EET)
• CVE-2009-2907: SpringSource Hyperic HQ multiple XSS vulnerabilities s2-security (Tue Mar 23 2010 - 22:49:28 EET)
• [SECURITY] [DSA 2022-1] New mediawiki packages fix several vulnerabilities Nico Golde (Tue Mar 23 2010 - 22:18:40 EET)
• "$referer" export lead to the cross-site flaws in all versions of Discuz! lis cker (Wed Mar 24 2010 - 11:52:15 EET)
• [USN-918-1] Samba vulnerability Marc Deslauriers (Wed Mar 24 2010 - 15:53:05 EET)
• Secunia Research: Pulse CMS login.php Arbitrary File Writing Vulnerability Secunia Research (Wed Mar 24 2010 - 17:57:03 EET)
• Secunia Research: Pulse CMS Arbitrary File Writing Vulnerability Secunia Research (Wed Mar 24 2010 - 17:56:20 EET)
• Symlink attack with Solaris Update manager bugs@fbi.dhs.org (Wed Mar 24 2010 - 03:31:05 EET)
• Cisco Security Advisory: Cisco IOS Software NAT Skinny Call Control Protocol Vulnerability Cisco Systems Product Security Incident Response Team (Wed Mar 24 2010 - 18:00:00 EET)
• Cisco Security Advisory: Cisco IOS Software IPsec Vulnerability Cisco Systems Product Security Incident Response Team (Wed Mar 24 2010 - 18:00:00 EET)
• Secunia Research: Pulse CMS Arbitrary File Deletion Vulnerability Secunia Research (Wed Mar 24 2010 - 17:56:53 EET)
• [USN-917-1] Puppet vulnerabilities Marc Deslauriers (Wed Mar 24 2010 - 15:52:23 EET)
• Multiple vulnerabilities in Deliver Dan Rosenberg (Wed Mar 24 2010 - 16:09:10 EET)
• Symlink attack with Solaris Update manager and Sun Patch Cluster bugs (Wed Mar 24 2010 - 19:26:48 EET)
• Cisco Security Advisory: Cisco IOS Software Session Initiation Protocol Denial of Service Vulnerabilities Cisco Systems Product Security Incident Response Team (Wed Mar 24 2010 - 18:00:00 EET)
• Vulnerabilities in WeBAM MustLive (Wed Mar 24 2010 - 23:48:30 EET)
  • Re: Vulnerabilities in WeBAM Salvatore Fresta aka Drosophila (Thu Mar 25 2010 - 17:41:06 EET)
• [ MDVSA-2010:066 ] kernel security@mandriva.com (Thu Mar 25 2010 - 00:16:01 EET)
• [security bulletin] HPSBMA02436 SSRT080064 rev.1 - HP Project and Portfolio Management Center (PPMC), Remote Cross Site Scripting (XSS) security-alert@hp.com (Thu Mar 25 2010 - 01:15:49 EET)
• [security bulletin] HPSBUX02508 SSRT100007 rev.1 - HP-UX Running sendmail with STARTTLS Enabled, Remote Unauthorized Access security-alert@hp.com (Thu Mar 25 2010 - 03:29:56 EET)
• Ruxcon 2010 Call For Papers cfp@ruxcon.org.au (Thu Mar 25 2010 - 04:15:57 EET)
• There is a Permanent-type Cross-Site Vulnerability in “Personal Signature” in all version of Discuz!. It can be written by the worm! lis cker (Thu Mar 25 2010 - 14:58:56 EET)
• Multiple Vulnerabilities in EASY Enterprise DMS michael.mueller@integralis.com (Thu Mar 25 2010 - 16:12:35 EET)
• Hackito Ergo Sum Conference (Paris 8-10 April 2010) : Schedule Jonathan Brossard (Thu Mar 25 2010 - 01:13:06 EET)
• [ MDVSA-2010:067 ] kernel security@mandriva.com (Fri Mar 26 2010 - 03:53:00 EET)
• [security bulletin] HPSBUX02509 SSRT100032 rev.1 - HP-UX Running NFS/ONCplus, NFS Inadvertently Enabled security-alert@hp.com (Thu Mar 25 2010 - 23:01:42 EET)
• Vulnerabilities in TooFAST MustLive (Fri Mar 26 2010 - 16:09:16 EET)
• Vulnerabilities in ArcManager MustLive (Sun Mar 28 2010 - 19:01:22 EEST)
• {PRL} Novell Netware FTP Remote Stack Overflow Francis Provencher (Mon Mar 29 2010 - 17:48:48 EEST)
• [SECURITY] [DSA 2023-1] New curl packages fix arbitrary code execution Steffen Joeris (Sun Mar 28 2010 - 05:23:43 EEST)
• [ MDVSA-2010:068 ] php security@mandriva.com (Sat Mar 27 2010 - 17:46:00 EET)
  • [ MDVSA-2010:068 ] php security@mandriva.com (Sat Mar 27 2010 - 20:30:00 EET)
  • [ MDVSA-2010:068 ] php security@mandriva.com (Sat Mar 27 2010 - 21:03:00 EET)
• London DEFCON March meet - DC4420 - Wednesday March 31st 2010 Major Malfunction (Mon Mar 29 2010 - 12:47:58 EEST)
• [security bulletin] HPSBOV02497 SSRT090245 rev.2 - HP TCP/IP Services for OpenVMS Running NTP, Remote Execution of Arbitrary Code, Denial of Service (DoS) security-alert@hp.com (Sat Mar 27 2010 - 06:12:30 EET)
• Medium security hole in Varnish reverse proxy Tim Brown (Mon Mar 29 2010 - 11:07:48 EEST)
• Exploiting nano Dan Rosenberg (Sun Mar 28 2010 - 19:27:10 EEST)
• SQL Injection Vulnerabilitie in PhotoPost vBGallery 2.5 Andreas Kirbach (Sun Mar 28 2010 - 16:09:47 EEST)
• Remote buffer overflow in aircrack-ng causes DOS and possible code execution Lukas Lueg (Sun Mar 28 2010 - 22:57:02 EEST)
• Vulnerabilities in MiniManager for Project MANGOS MustLive (Mon Mar 29 2010 - 21:17:10 EEST)
• Re: [Full-disclosure] Medium security hole in Varnish reverse proxy John Adams (Mon Mar 29 2010 - 20:12:38 EEST)
  • Re: [Full-disclosure] Medium security hole in Varnish reverse proxy Tim Brown (Tue Mar 30 2010 - 02:04:15 EEST)
• XSS vulnerability in easy page cms info@securitylab.ir (Mon Mar 29 2010 - 21:09:43 EEST)
• Joomla Component com_xmap Sql Injection Vulnerability info@securitylab.ir (Mon Mar 29 2010 - 20:08:38 EEST)
• Joomla Component com_weblinks Sql Injection Vulnerability info@securitylab.ir (Mon Mar 29 2010 - 20:08:11 EEST)
• [USN-919-1] Emacs vulnerability Kees Cook (Tue Mar 30 2010 - 00:58:46 EEST)
• [security bulletin] HPSBUX02514 SSRT100010 rev.1 - HP-UX running AudFilter rules enabled, Local Denial of Service (DoS) security-alert@hp.com (Tue Mar 30 2010 - 01:48:01 EEST)
• [security bulletin] HPSBMA02490 SSRT090222 rev.1 - HP SOA Registry Foundation, Remote Unauthorized Access to Data, Cross Site Scripting (XSS), Privilege Escalation security-alert@hp.com (Tue Mar 30 2010 - 16:13:37 EEST)
• [security bulletin] HPSBMA02513 SSRT090110 rev.1 - Insight Control for Linux (IC-Linux) Remote Execution of Arbitrary Code, Local Unauthorized Elevation of Privilege security-alert@hp.com (Tue Mar 30 2010 - 15:36:48 EEST)
• Secunia Research: ViewVC Regular Expression Search Cross-Site Scripting Secunia Research (Tue Mar 30 2010 - 14:15:57 EEST)
• OXID eShop Enterprise: Session Fixation and XSS Vulnerabilities michael.mueller@integralis.com (Tue Mar 30 2010 - 09:13:28 EEST)
• VMSA-2010-0005 VMware products address vulnerabilities in WebAccess VMware Security Team (Tue Mar 30 2010 - 08:38:46 EEST)
• [security bulletin] HPSBOV02506 SSRT090244 rev.1 - HP Secure Web Server for OpenVMS (based on Apache) CSWS, Remote Denial of Service (DoS), Unauthorized Disclosure of Information, Unauthorized Modification of Information security-alert@hp.com (Tue Mar 30 2010 - 19:43:47 EEST)
• CVE-2010-0684: Apache ActiveMQ Persistent Cross-Site Scripting (XSS) Vulnerability rajat swarup (Tue Mar 30 2010 - 20:53:01 EEST)
• iDefense Security Advisory 03.30.10: Microsoft Internet Explorer 'onreadystatechange' Use After Free Vulnerability iDefense Labs (Tue Mar 30 2010 - 23:38:54 EEST)
• [SECURITY] CVE-2008-2370: Apache CouchDB Timing Attack Vulnerability Jan Lehnardt (Wed Mar 31 2010 - 16:48:01 EEST)
• Secunia Research: Sun Java JDK/JRE Soundbank Resource Parsing Buffer Overflow Secunia Research (Wed Mar 31 2010 - 11:59:05 EEST)
• Multiple XSS vulnerabilities in OSSIM 2.2.1 nicolas.grandjean@conix.fr (Wed Mar 31 2010 - 15:16:41 EEST)
• Elevation of Privilege Vulnerability in iTunes for Windows jason@ngssoftware.com (Wed Mar 31 2010 - 16:39:52 EEST)
• Trustwave's SpiderLabs Security Advisory TWSL2010-002 Trustwave Advisories (Wed Mar 31 2010 - 03:02:46 EEST)
• [SECURITY] [DSA 2025-1] New icedove packages fix several vulnerabilities Steffen Joeris (Wed Mar 31 2010 - 11:41:27 EEST)
• OpenDcHub 0.8.1 Remote Code Execution Exploit Pierre Noguès (Wed Mar 31 2010 - 15:15:09 EEST)
• Secunia Research: Sun Java JDK/JRE Soundbank Resource Name Buffer Overflow Secunia Research (Wed Mar 31 2010 - 11:59:51 EEST)
• [Suspected Spam]Vulnerabilities in NoCMS MustLive (Wed Mar 31 2010 - 19:09:08 EEST)
• [SECURITY] [DSA 2024-1] New moin packages fix cross-site scripting Giuseppe Iuculano (Wed Mar 31 2010 - 11:39:02 EEST)
• BitComet <= 1.19 Remote DOS Exploit Pierre Noguès (Wed Mar 31 2010 - 15:12:53 EEST)
• iDefense Security Advisory 03.30.10: Oracle Java Runtime Environment Image FIle Buffer Overflow Vulnerability iDefense Labs (Wed Mar 31 2010 - 05:36:12 EEST)

Last message date: Wed Mar 31 2010 - 22:24:22 EEST
Archived on: Wed Mar 31 2010 - 22:24:23 EEST

This archive was generated by hypermail 2b28 : Wed Mar 31 2010 - 22:24:23 EEST