stdin
By Author

• ACROS Lists
  • ACROS Security: Remote Binary Planting in VMware Tools for Windows (ASPR #2010-04-12-1) (Mon Apr 12 2010 - 19:54:58 EEST)
  • ACROS Security: Local Binary Planting in VMware Tools for Windows (ASPR #2010-04-12-2) (Mon Apr 12 2010 - 19:54:58 EEST)
• admin@bugreport.ir
  • AneCMS Multiple Vulnerabilities (Mon Apr 12 2010 - 11:21:51 EEST)
• advisories@intern0t.net
  • vBulletin - Insecure Custom BBCode Tags (Thu Apr 29 2010 - 18:20:50 EEST)
• advisory@htbridge.ch
  • XSS in Microsoft SharePoint Server 2007 (Wed Apr 28 2010 - 19:12:17 EEST)
  • XSS vulnerability in Zikula Application Framework (Tue Apr 27 2010 - 15:03:28 EEST)
  • XSS vulnerability in Zikula Application Framework (Tue Apr 27 2010 - 15:03:19 EEST)
  • IP address spoofing in e107 (Tue Apr 20 2010 - 13:59:25 EEST)
  • CSRF in e107 (Tue Apr 20 2010 - 13:58:20 EEST)
• Agazzini Maurizio
  • Re: sudoedit local privilege escalation through PATH manipulation (Thu Apr 22 2010 - 11:04:09 EEST)
  • sudoedit local privilege escalation through PATH manipulation (Mon Apr 19 2010 - 14:04:44 EEST)
• Albert Levi
  • CfP: GameSec 2010 - Deadline is 3 weeks away! (Thu Apr 22 2010 - 10:50:50 EEST)
• Alexandr Polyakov
  • [DSECRG-09-049] IBM BladeCenter Management Module - DoS vulnerability (Thu Apr 15 2010 - 10:43:52 EEST)
  • [DSecRG-09-053] VMware Remoute Console - format string (Thu Apr 15 2010 - 10:40:33 EEST)
• Andrzej Targosz
  • CONFidence 2010, 25-26th May - Call For Participation (Thu Apr 29 2010 - 01:45:49 EEST)
• Angus Mann
  • Adobe viewer plugin can be made to crash IE or FF (Wed Apr 28 2010 - 04:05:23 EEST)
• Ansgar Wiechers
  • Re: sudoedit local privilege escalation through PATH manipulation (Tue Apr 20 2010 - 09:42:32 EEST)
• arun.gnyan@gmail.com
  • Apache ActiveMQ XSS Vulnerability (Thu Apr 29 2010 - 18:19:46 EEST)
• Cisco Systems Product Security Incident Response Team
  • Cisco Security Advisory: Cisco Small Business Video Surveillance Cameras and Cisco 4-Port Gigabit Security Routers Authentication Bypass Vulnerability (Wed Apr 21 2010 - 18:29:09 EEST)
  • Cisco Security Advisory: Cisco Secure Desktop ActiveX Control Code Execution Vulnerability (Wed Apr 14 2010 - 19:00:00 EEST)
• Clear Skies Security
  • Imperva SecureSphere Web Application Firewall and Database Firewall Bypass Vulnerability (Tue Apr 13 2010 - 23:18:47 EEST)
• CORE Security Technologies Advisories
  • CORE-2010-0406 - User Invoices Persistent XSS Vulnerability in CactuShop (Tue Apr 20 2010 - 23:51:46 EEST)
  • CORE-2010-0323: XSS Vulnerability in NextGEN Gallery Wordpress Plugin (Tue Apr 06 2010 - 23:33:17 EEST)
• Dan Rosenberg
  • Fun with FORTIFY_SOURCE (Tue Apr 27 2010 - 21:34:35 EEST)
• Dawid Golunski
  • Zabbix <= 1.8.1 SQL Injection (Thu Apr 01 2010 - 12:42:01 EEST)
• DeepSec Conference
  • DeepSec 2010 - Call for Papers and Experts (Thu Apr 08 2010 - 01:57:22 EEST)
• dlrow1991@ymail.com
  • Micropoint Proactive Denfense Mp110013.sys <= 1.3.10123.0 Local Privilege Escalation Exploit (Wed Apr 14 2010 - 07:12:19 EEST)
• Dominik George
  • Re: Widnows XP TCP/IP Stack Security Issue (ARP for non RFC 1918addresses) (Tue Apr 27 2010 - 08:06:39 EEST)
• Dragos Ruiu
  • EUSecWest Amsterdam 2010 Call For Papers (short deadline May 5 - conf June 16/17) (Fri Apr 30 2010 - 09:47:10 EEST)
• edgard.chammas@beyond-security.org
  • Vbulletin - Two-Step External Link XSS (Tue Apr 20 2010 - 10:32:00 EEST)
• eidelweiss@cyberservices.com
  • Madirish Webmail 2.01 (basedir) RFI/LFI Vulnerability (Sat Apr 24 2010 - 20:31:37 EEST)
  • phpegasus 'config.php' Arbitrary File Upload Vulnerability (Sun Apr 25 2010 - 16:12:52 EEST)
  • SmodCMS 'config.php' Arbitrary File Upload Vulnerability (Sat Apr 24 2010 - 23:36:26 EEST)
  • In-portal 5.0.3 Remote Arbitrary File Upload Exploit (Fri Apr 23 2010 - 07:21:25 EEST)
  • Nucleus CMS v.3.51 (DIR_LIBS) Multiple Vulnerability (Wed Apr 14 2010 - 21:35:50 EEST)
  • 60cycleCMS (DOCUMENT_ROOT) Multiple Local File Inclusion Vulnerability (Wed Apr 14 2010 - 03:37:47 EEST)
  • WinSoftMagic Photo Editor .PNG File Buffer Overflow (Fri Apr 09 2010 - 03:41:35 EEST)
  • Re: DynPG CMS v4.1.0 Multiple Remote File Inclusion Vulnerability (Sun Apr 04 2010 - 21:03:25 EEST)
  • Apple Safari <= Tag (heap spray) Remote Buffer Overflow Exploit (osX) (Sun Apr 04 2010 - 20:55:38 EEST)
  • DynPG CMS v4.1.0 Multiple Remote File Inclusion Vulnerability (Thu Apr 01 2010 - 15:38:44 EEST)
• Fabien PERIGAUD
  • Cert-Lexsi - Microsoft Windows Media Services MMS Buffer Overflow Vulnerability (Wed Apr 14 2010 - 10:28:28 EEST)
• fizix610@hotmail.com
  • Unauthenticated Filesystem Access in iomega Home Media Network Hard Drive (Tue Apr 13 2010 - 22:02:59 EEST)
• gheibi@gmail.com
  • SQL Injection in MS Access with backslash escaped input (Fri Apr 30 2010 - 13:16:39 EEST)
• Giuseppe Iuculano
  • [SECURITY] [DSA 2021-2] New spamass-milter packages fix regression (Mon Apr 26 2010 - 23:02:53 EEST)
  • [SECURITY] [DSA 2031-1] New krb5 packages fix denial of service (Sun Apr 11 2010 - 11:43:03 EEST)
  • [SECURITY] [DSA 2032-1] New libpng packages fix several vulnerabilities (Sun Apr 11 2010 - 19:56:05 EEST)
  • [SECURITY] [DSA 2026-1] New netpbm-free packages fix denial of service (Fri Apr 02 2010 - 18:35:39 EEST)
• Hafez Kamal
  • [HITB-Announce] HITBSecConf2009 - Malaysia Videos Released! (Fri Apr 23 2010 - 07:18:03 EEST)
  • [HITB-Announce] HITBSecConf2010 - Dubai - Presentation Materials (Fri Apr 23 2010 - 07:31:21 EEST)
  • [HITB-Announce] FINAL CALL - CFP for HITBSecConf2010 Amsterdam (Thu Apr 08 2010 - 19:11:43 EEST)
• hashdays CFP
  • hashdays 2010 - Call for Papers (#days CFP) (Sat Apr 24 2010 - 16:51:32 EEST)
• iDefense Labs
  • iDefense Security Advisory 04.15.10: Multiple Vendor AgentX++ Integer Overflow Vulnerability (Sat Apr 17 2010 - 01:46:20 EEST)
  • iDefense Security Advisory 04.15.10: Multiple Vendor AgentX++ Stack Buffer Overflow Vulnerability (Sat Apr 17 2010 - 01:27:19 EEST)
  • iDefense Security Advisory 04.09.10: VMware VMnc Codec Heap Overflow Vulnerability (Sat Apr 10 2010 - 01:38:54 EEST)
• info
  • Hack.lu 2010 CfP (Tue Apr 06 2010 - 10:20:06 EEST)
• info@securitylab.ir
  • Ziggurat CMS Multiple Vulnerabilities (Thu Apr 15 2010 - 11:12:56 EEST)
  • Vana CMS Remote File Download (Tue Apr 13 2010 - 09:28:58 EEST)
• Ivan Jager
  • Re: STP mitm attack idea (Thu Apr 29 2010 - 20:21:32 EEST)
• J. Oquendo
  • Juniper SRX Critical Denial of Service Vulnerability (Thu Apr 01 2010 - 19:08:34 EEST)
• Jacopo Cappellato
  • [CVE-2010-0432] Apache OFBiz Multiple XSS Vulnerabilities (Wed Apr 14 2010 - 22:27:23 EEST)
• James Martin
  • Re: Vulnerability in CB Captcha for Joomla and Mambo (Fri Apr 16 2010 - 21:06:13 EEST)
• Jamie Strandboge
  • [USN-934-1] Netpbm vulnerability (Fri Apr 30 2010 - 04:52:38 EEST)
  • [USN-933-1] PostgreSQL vulnerability (Thu Apr 29 2010 - 04:56:23 EEST)
  • [USN-929-2] irssi regression (Tue Apr 20 2010 - 20:37:17 EEST)
  • [USN-932-1] KDM vulnerability (Tue Apr 20 2010 - 02:17:21 EEST)
  • [USN-890-6] CMake vulnerabilities (Thu Apr 15 2010 - 22:40:13 EEST)
  • [USN-929-1] irssi vulnerabilities (Fri Apr 16 2010 - 03:39:56 EEST)
  • [USN-928-1] Sudo vulnerability (Thu Apr 15 2010 - 19:33:58 EEST)
  • [USN-920-1] Firefox 3.0 and Xulrunner vulnerabilities (Sat Apr 10 2010 - 03:24:43 EEST)
  • [USN-927-2] NSS regression (Sun Apr 11 2010 - 18:35:15 EEST)
  • [USN-927-1] NSS vulnerability (Sat Apr 10 2010 - 01:44:30 EEST)
  • [USN-921-1] Firefox 3.5 and Xulrunner vulnerabilities (Sat Apr 10 2010 - 01:45:24 EEST)
  • [USN-927-3] Thunderbird regression (Mon Apr 12 2010 - 01:42:48 EEST)
  • [USN-624-2] Erlang vulnerability (Fri Apr 09 2010 - 04:43:15 EEST)
  • [USN-926-1] ClamAV vulnerabilities (Fri Apr 09 2010 - 00:43:03 EEST)
  • [USN-925-1] MoinMoin vulnerabilities (Thu Apr 08 2010 - 20:26:42 EEST)
• Jan Lehnardt
  • [SECURITY] CVE-2008-2370: Apache CouchDB Timing Attack Vulnerability (Wed Mar 31 2010 - 16:54:00 EEST)
• Jan Schejbal
  • Miranda TLS MitM with XMPP/Jabber protocol (Tue Apr 06 2010 - 04:04:42 EEST)
• Jann Horn
  • Re: STP mitm attack idea (Wed Apr 28 2010 - 19:20:55 EEST)
• Jason T. Masker
  • Re: STP mitm attack idea (Thu Apr 29 2010 - 00:26:09 EEST)
• Jean-Christophe Baptiste
  • Re: STP mitm attack idea (Thu Apr 29 2010 - 21:22:03 EEST)
• Joel Maslak
  • Re: STP mitm attack idea (Thu Apr 29 2010 - 20:53:47 EEST)
• Joxean Koret
  • Hackproofing Oracle Financials 11i & R12 (Thu Apr 15 2010 - 22:18:50 EEST)
• k g
  • Conference on Cyber Conflict: speakers selected! (Mon Apr 26 2010 - 17:12:38 EEST)
• Kees Cook
  • [USN-924-1] Kerberos vulnerabilities (Wed Apr 07 2010 - 08:51:51 EEST)
  • [USN-923-1] OpenJDK vulnerabilities (Wed Apr 07 2010 - 08:51:23 EEST)
  • [USN-922-1] libnss-db vulnerability (Wed Mar 31 2010 - 22:41:01 EEST)
• Kotas, Kevin J
  • CA20100406-01: Security Notice for CA XOsoft (Tue Apr 06 2010 - 21:19:35 EEST)
• Laurent OUDOT at TEHTRI-Security
  • HITBSecConf DUBAI 2010: Learn more about web attacks and stealth hacking (Mon Apr 12 2010 - 16:57:01 EEST)
• lilf
  • WinMount MOU File Handling Overflow Vulnerability (Sat Apr 17 2010 - 08:30:11 EEST)
• lis cker
  • A XSS in User_ChkLogin.asp of PowerEasy 2006 (Sat Apr 24 2010 - 10:10:05 EEST)
• Luciano Bello
  • [SECURITY] [DSA 2028-1] New xpdf packages fix several vulnerabilities (Mon Apr 05 2010 - 18:23:30 EEST)
• Major Malfunction
  • London DEFCON April meet - DC4420 - Wed 28th April 2010 (Wed Apr 21 2010 - 21:07:22 EEST)
• Marc Deslauriers
  • [USN-931-2] FFmpeg regression (Mon Apr 26 2010 - 16:54:01 EEST)
  • [USN-931-1] FFmpeg vulnerabilities (Mon Apr 19 2010 - 21:34:01 EEST)
• Mark Janssen
  • Call for participation -- Eth0:2010 Summer (Wed Apr 21 2010 - 16:40:01 EEST)
• Mark Thomas
  • [SECURITY] CVE-2010-1157: Apache Tomcat information disclosure vulnerability (Thu Apr 22 2010 - 01:20:41 EEST)
• Matteo Valenza
  • Re: Vulnerability in CB Captcha for Joomla and Mambo (Fri Apr 16 2010 - 20:08:26 EEST)
• Matthias -apoc- Hecker
  • TCPDF Library Remote Code Execution Vulnerability (Thu Apr 08 2010 - 08:10:34 EEST)
• md.r00t.defacer@gmail.com
  • BPstyle - Graphic studio SQL Injection Vulnerabilities (Fri Apr 30 2010 - 11:14:49 EEST)
  • IWD Group SQL Injection Vulnerabilities (Thu Apr 22 2010 - 21:53:15 EEST)
• Mehdi Mahdjoub - Sysdream IT Security Services
  • Vulnerability Centreon IT & Network Monitoring v2.1.5 (Fri Apr 02 2010 - 12:41:01 EEST)
• Mehdi Mahdjoub [SYSDREAM]
  • CompleteFTP v3.3.0 - Remote Memory Consumption DoS (Mon Apr 19 2010 - 14:46:02 EEST)
• michael.mueller@integralis.com
  • XSS and Content Injection in HTC Windows Mobile SMS Preview PopUp (Thu Apr 22 2010 - 18:29:57 EEST)
• Moritz Muehlenhoff
  • [SECURITY] [DSA 2027-1] New xulrunner packages fix several vulnerabilities (Sat Apr 03 2010 - 20:50:19 EEST)
• Morris, John R. (SSRT)
  • [security bulletin] HPSBUX02508 SSRT100007 rev.2 - HP-UX Running sendmail with STARTTLS Enabled, Remote Unauthorized Access (Mon Apr 26 2010 - 16:33:12 EEST)
• mu-b
  • NovaStor NovaNet <= 13.0 issues (Mon Apr 26 2010 - 15:07:23 EEST)
• MustLive
  • Vulnerabilities in CCMS (Thu Apr 29 2010 - 21:23:55 EEST)
  • Re: Vulnerability in CB Captcha for Joomla and Mambo (Wed Apr 28 2010 - 21:33:13 EEST)
  • Re: New vulnerabilities in CMS SiteLogic (Mon Apr 26 2010 - 17:16:23 EEST)
  • Vulnerability in Referer for DataLife Engine (Fri Apr 23 2010 - 21:30:56 EEST)
  • Vulnerabilities in NovaBoard (Wed Apr 21 2010 - 23:45:33 EEST)
  • Re: Vulnerability in CB Captcha for Joomla and Mambo (Fri Apr 16 2010 - 23:33:04 EEST)
  • [Suspected Spam]New vulnerabilities in CMS SiteLogic (Sun Apr 18 2010 - 18:05:14 EEST)
  • Vulnerability in CB Captcha for Joomla and Mambo (Thu Apr 15 2010 - 14:22:35 EEST)
  • Insufficient Anti-automation and Denial of Service vulnerabilities in multiple systems (Mon Apr 12 2010 - 23:38:20 EEST)
  • Vulnerabilities in CMS SiteLogic (Sat Apr 10 2010 - 19:41:25 EEST)
  • Re: Vulnerabilities in Dunia Soccer (Fri Apr 09 2010 - 20:30:02 EEST)
  • Vulnerabilities in phpCOIN (Fri Apr 09 2010 - 16:09:56 EEST)
  • Vulnerabilities in CMS SiteLogic (Thu Apr 08 2010 - 19:53:59 EEST)
  • Vulnerabilities in Dunia Soccer (Wed Apr 07 2010 - 21:15:44 EEST)
  • Vulnerabilities in TAK cms (Mon Apr 05 2010 - 23:34:07 EEST)
  • Vulnerabilities in HoloCMS (Fri Apr 02 2010 - 20:59:43 EEST)
• nant@joomlapolis.com
  • Re: Vulnerability in CB Captcha for Joomla and Mambo (Sun Apr 18 2010 - 21:54:37 EEST)
  • Re: Vulnerability in CB Captcha for Joomla and Mambo (Fri Apr 16 2010 - 17:04:50 EEST)
• news
  • Re: STP mitm attack idea (Thu Apr 29 2010 - 09:19:58 EEST)
• Nico Golde
  • [SECURITY] [DSA 2030-1] New mahara packages fix sql injection (Tue Apr 06 2010 - 21:43:48 EEST)
  • [SECURITY] [DSA 2029-1] New imlib2 packages fix arbitrary code execution (Mon Apr 05 2010 - 22:03:08 EEST)
• nicolas.grandjean@conix.fr
  • CSRF Vulnerability in OSSIM 2.2.1 (Thu Apr 01 2010 - 15:14:20 EEST)
• none@gmail.com
  • Re: Re: Vulnerability in CB Captcha for Joomla and Mambo (Tue Apr 20 2010 - 02:38:20 EEST)
• Paul Schmehl
  • Re: Widnows XP TCP/IP Stack Security Issue (ARP for non RFC 1918 addresses) (Mon Apr 26 2010 - 23:16:13 EEST)
• Przemyslaw Borkowski
  • STP mitm attack idea (Tue Apr 27 2010 - 20:55:07 EEST)
• r.st@comcast.net
  • Re: Widnows XP TCP/IP Stack Security Issue (ARP for non RFC 1918addresses) (Mon Apr 26 2010 - 21:24:42 EEST)
• research@secpod.com
  • Apache ActiveMQ is prone to source code disclosure vulnerability. (Thu Apr 22 2010 - 17:43:10 EEST)
• Reversemode
  • JAVA web start arbitrary command-line injection - "-XXaltjvm" arbitrary dll loading (0day) (Fri Apr 09 2010 - 16:30:18 EEST)
• Roberto Suggi Liverani
  • Security-Assessment.com WhitePaper/Addendum: Cross Context Scripting with Firefox & Exploiting Cross Context Scripting vulnerabilities in Firefox (Thu Apr 22 2010 - 02:27:33 EEST)
• Salvatore Fresta aka Drosophila
  • New vulnerabilities in CMS SiteLogic (Mon Apr 26 2010 - 17:41:34 EEST)
  • Re: [Suspected Spam]New vulnerabilities in CMS SiteLogic (Mon Apr 19 2010 - 22:12:05 EEST)
• Secunia Research
  • Secunia Research: Internet Download Manager FTP Buffer Overflow Vulnerability (Fri Apr 30 2010 - 13:07:19 EEST)
  • Secunia Research: imlib2 "IMAGE_DIMENSIONS_OK()" Logic Error (Wed Apr 21 2010 - 10:42:43 EEST)
  • Secunia Research: e107 Content Management Plugin Script Insertion Vulnerability (Mon Apr 19 2010 - 11:06:26 EEST)
  • Secunia Research: e107 Avatar/Photograph Image File Upload Vulnerability (Mon Apr 19 2010 - 11:06:44 EEST)
  • Secunia Research: Visualization Library DAT File Parsing Vulnerabilities (Wed Apr 14 2010 - 13:19:36 EEST)
  • Secunia Research: VMWare VMnc Codec HexTile Encoding Buffer Overflow (Fri Apr 09 2010 - 16:16:19 EEST)
  • Secunia Research: VMWare VMnc Codec HexTile Encoding Two Integer Truncation Vulnerabilities (Fri Apr 09 2010 - 16:16:31 EEST)
  • Secunia Research: Pulse CMS Cross-Site Request Forgery (Fri Apr 09 2010 - 11:07:41 EEST)
  • Secunia Research: Pulse CMS Arbitrary File Upload Vulnerability (Fri Apr 09 2010 - 11:07:27 EEST)
• security-alert@hp.com
  • [security bulletin] HPSBMA02525 SSRT100083 rev.1 - HP System Insight Manager Running on HP-UX, Linux, and Windows , Remote Cross Site Scripting (XSS), Cross Site Request Forgery (CSRF), Privilege Elevation (Tue Apr 27 2010 - 22:49:08 EEST)
  • [security bulletin] HPSBMA02488 SSRT100013 rev.2 - HP ProLiant Support Pack 8.30 for Windows, Remote Code Execution, Information Disclosure (Mon Apr 26 2010 - 23:08:01 EEST)
  • [security bulletin] HPSBUX02519 SSRT100004 rev.1 - HP-UX Running BIND, Remote Compromise of NXDOMAIN Responses (Thu Apr 22 2010 - 05:36:45 EEST)
  • [security bulletin] HPSBMA02492 SSRT100079 rev.1 - HP System Management Homepage (SMH) for Linux and Windows, Remote Cross Site Scripting (XSS), Denial of Service (DoS), Execution of Arbitrary Code, Unauthorized Access (Thu Apr 22 2010 - 16:27:27 EEST)
  • [security bulletin] HPSBMA02494 SSRT090168 rev.1 - HP Virtual Machine Manager (VMM) for Windows, Remote Unauthorized Access, Privilege Elevation (Thu Apr 22 2010 - 17:23:52 EEST)
  • [security bulletin] HPSBUX02508 SSRT100007 rev.2 - HP-UX Running sendmail with STARTTLS Enabled, Remote Unauthorized Access (Wed Apr 21 2010 - 02:21:54 EEST)
  • [security bulletin] HPSBMA02491 SSRT100060 rev.1 - HP Operations Manager for Windows, Remote Execution of Arbitrary Code (Tue Apr 20 2010 - 16:15:33 EEST)
  • [security bulletin] HPSBUX02518 SSRT100051 rev.1 - HP-UX, Local Denial of Service (DoS) (Tue Apr 20 2010 - 00:11:15 EEST)
  • [security bulletin] HPSBUX02517 SSRT100058 rev.2 - HP-UX Running OpenSSL, Remote Unauthorized Information Disclosure, Unauthorized Data Modification, Denial of Service (DoS) (Tue Apr 20 2010 - 01:54:49 EEST)
  • [security bulletin] HPSBUX02517 SSRT100058 rev.1 - HP-UX Running OpenSSL, Remote Unauthorized Information Disclosure, Unauthorized Data Modification, Denial of Service (DoS) (Wed Apr 14 2010 - 01:32:46 EEST)
  • [security bulletin] HPSBPI02398 SSRT080166 rev.5 - Certain HP LaserJet Printers, HP Color LaserJet Printers, and HP Digital Senders, Remote Unauthorized Access to Files (Tue Apr 13 2010 - 16:09:53 EEST)
  • [security bulletin] HPSBMA02490 SSRT090222 rev.2 - HP SOA Registry Foundation, Remote Unauthorized Access to Data, Cross Site Scripting (XSS), Privilege Escalation (Fri Apr 02 2010 - 20:11:05 EEST)
• security@mandriva.com
  • [ MDVSA-2010:088 ] kernel (Fri Apr 30 2010 - 21:44:01 EEST)
  • [ MDVSA-2010:086 ] kdegraphics (Thu Apr 29 2010 - 19:46:00 EEST)
  • [ MDVSA-2010:087 ] poppler (Thu Apr 29 2010 - 22:07:00 EEST)
  • [ MDVSA-2009:332-1 ] gimp (Wed Apr 28 2010 - 23:00:01 EEST)
  • [ MDVSA-2010:085 ] pidgin (Wed Apr 28 2010 - 21:51:00 EEST)
  • [ MDVSA-2010:078-1 ] sudo (Wed Apr 28 2010 - 20:56:01 EEST)
  • [ MDVSA-2010:084 ] java-1.6.0-openjdk (Wed Apr 28 2010 - 15:31:01 EEST)
  • [ MDVSA-2010:071 ] mozilla-thunderbird (Fri Apr 23 2010 - 19:31:00 EEST)
  • [ MDVSA-2010:070-1 ] firefox (Tue Apr 20 2010 - 21:53:00 EEST)
  • [ MDVSA-2010:083 ] emacs (Tue Apr 20 2010 - 16:24:00 EEST)
  • [ MDVSA-2010:076-1 ] openssl (Tue Apr 20 2010 - 00:18:00 EEST)
  • [ MDVSA-2010:082 ] clamav (Sun Apr 18 2010 - 20:45:00 EEST)
  • [ MDVSA-2010:079 ] irssi (Sat Apr 17 2010 - 20:56:00 EEST)
  • [ MDVSA-2010:077 ] nss_db (Sat Apr 17 2010 - 17:39:00 EEST)
  • [ MDVSA-2010:078 ] sudo (Sat Apr 17 2010 - 18:08:00 EEST)
  • [ MDVSA-2010:081 ] apache-mod_auth_shadow (Sun Apr 18 2010 - 19:21:01 EEST)
  • [ MDVSA-2010:076 ] openssl (Sat Apr 17 2010 - 19:49:00 EEST)
  • [ MDVSA-2010:080 ] brltty (Sat Apr 17 2010 - 22:40:00 EEST)
  • [ MDVSA-2010:075 ] openoffice.org (Fri Apr 16 2010 - 00:31:00 EEST)
  • [ MDVSA-2010:074 ] kdebase (Thu Apr 15 2010 - 21:41:01 EEST)
  • [ MDVSA-2010:073 ] cups (Wed Apr 14 2010 - 19:25:02 EEST)
  • [ MDVSA-2010:073-1 ] cups (Wed Apr 14 2010 - 19:59:01 EEST)
  • [ MDVSA-2010:070 ] firefox (Tue Apr 13 2010 - 19:50:00 EEST)
  • [ MDVSA-2010:071 ] krb5 (Wed Apr 14 2010 - 01:03:01 EEST)
  • [ MDVSA-2010:072 ] cups (Wed Apr 14 2010 - 17:37:00 EEST)
  • [ MDVSA-2010:069 ] nss (Wed Apr 07 2010 - 03:39:00 EEST)
• sinner
  • [#OUF-273299]: AVTECH Software (AVC781Viewer.dll) ActiveX Multiple Remote Vulnerabilities (Tue Apr 20 2010 - 07:30:38 EEST)
• Stefan Esser
  • Advisory 02/2010: MyBB Password Reset Weak Random Numbers Vulnerability (Tue Apr 13 2010 - 11:20:18 EEST)
  • Advisory 01/2010: MyBB Password Reset Email BCC: Injection Vulnerability (Tue Apr 13 2010 - 10:41:14 EEST)
• Stefan Fritsch
  • [SECURITY] [DSA-2035-1] New apache2 packages fix several issues (Sat Apr 17 2010 - 23:58:14 EEST)
• Stefan Laudat
  • RE: STP mitm attack idea (Thu Apr 29 2010 - 10:22:40 EEST)
• Susan Bradley
  • Re: Vulnerability in CB Captcha for Joomla and Mambo (Fri Apr 16 2010 - 21:24:22 EEST)
  • Re: Vulnerability in CB Captcha for Joomla and Mambo (Thu Apr 15 2010 - 22:11:29 EEST)
  • Re: Vulnerabilities in phpCOIN (Sat Apr 10 2010 - 00:28:27 EEST)
  • Re: Vulnerabilities in Dunia Soccer (Fri Apr 09 2010 - 22:16:00 EEST)
  • Re: Vulnerabilities in Dunia Soccer (Thu Apr 08 2010 - 22:05:21 EEST)
• Sébastien Delafond
  • [SECURITY] [DSA 2033-1] New ejabberd packages fix denial of service (Thu Apr 15 2010 - 19:53:11 EEST)
• terry white
  • Re: Vulnerabilities in NovaBoard (Fri Apr 23 2010 - 00:11:53 EEST)
• th_decoder@126.com
  • Windows 2000/XP/2003 win32k.sys SfnINSTRING local kernel Denial of Service Vulnerability (Thu Apr 22 2010 - 14:55:56 EEST)
  • Windows 2000/XP/2003 win32k.sys SfnLOGONNOTIFY local kernel Denial of Service Vulnerability (Thu Apr 22 2010 - 13:28:38 EEST)
• Thijs Kinkhorst
  • [SECURITY] [DSA 2039-1] New cacti packages fix missing input sanitising (Fri Apr 23 2010 - 23:00:02 EEST)
  • [SECURITY] [DSA 2038-1] New pidgin packages fix denial of service (Sun Apr 18 2010 - 18:47:22 EEST)
  • [SECURITY] [DSA 2034-1] New phpmyadmin packages fix several vulnerabilities (Sat Apr 17 2010 - 15:35:52 EEST)
  • [SECURITY] [DSA 2037-1] New kdm packages fix privilege escalation (Sun Apr 18 2010 - 00:54:51 EEST)
  • [SECURITY] [DSA 2036-1] New jasper packages fix denial of service (Sun Apr 18 2010 - 00:23:29 EEST)
• Timothy D. Morgan
  • CVE-2009-4509: TANDBERG VCS Authentication Bypass (Sat Apr 10 2010 - 06:50:21 EEST)
• Tom Yu
  • MITKRB5-SA-2010-004 [CVE-2010-1320] double free in KDC (Tue Apr 20 2010 - 21:34:25 EEST)
  • MITKRB5-SA-2010-003 [CVE-2010-0629] denial of service in kadmind in older krb5 releases (Tue Apr 06 2010 - 21:23:35 EEST)
• Tomi Tuominen
  • t2'10: Call for Papers 2010 (Helsinki / Finland) (Sun Apr 25 2010 - 16:50:02 EEST)
• VMware Security team
  • VMSA-2010-0007 VMware hosted products, vCenter Server and ESX patches resolve multiple security issues (Fri Apr 09 2010 - 12:28:34 EEST)
  • VMSA-2010-0006 ESX Service Console updates for samba and acpid (Thu Apr 01 2010 - 22:34:57 EEST)
• VSR Advisories
  • CVE-2009-4510: TANDBERG VCS Static SSH Host Keys (Sat Apr 10 2010 - 06:54:11 EEST)
  • CVE-2009-4511: TANDBERG VCS Arbitrary File Retrieval (Sat Apr 10 2010 - 06:56:20 EEST)
• VUPEN Security Research
  • VUPEN Security Research - VMware Products Movie Decoder Heap Overflow Vulnerability (Mon Apr 12 2010 - 18:52:13 EEST)
  • VUPEN Security Research - Apple Quicktime PICT Handling Heap Overflow Vulnerability (Thu Apr 01 2010 - 03:15:25 EEST)
  • VUPEN Security Research - Sun Java JDK/JRE AWT Library Invalid Index Vulnerability (Thu Apr 01 2010 - 02:50:23 EEST)
  • VUPEN Security Research - Sun Java JDK/JRE AWT Library Invalid Pointer Vulnerability (Thu Apr 01 2010 - 02:49:20 EEST)
  • VUPEN Security Research - Apple Quicktime FLC Encoded Movie Heap Overflow Vulnerability (Thu Apr 01 2010 - 03:19:01 EEST)
  • VUPEN Security Research - Sun Java JDK/JRE Unpack200 Buffer Overflow Vulnerability (Thu Apr 01 2010 - 02:56:15 EEST)
  • VUPEN Security Research - Apple Quicktime PICT Processing Integer Overflow Vulnerability (Thu Apr 01 2010 - 03:14:56 EEST)
  • VUPEN Security Research - Apple iTunes ColorSync Profile Integer Overflow Vulnerability (Thu Apr 01 2010 - 03:03:35 EEST)
• VUPEN Web Research
  • VUPEN Security Research - Adobe Acrobat and Reader GIF Data Buffer Overflow Vulnerability (Wed Apr 14 2010 - 20:13:35 EEST)
  • VUPEN Security Research - Adobe Acrobat and Reader JPEG Data Buffer Overflow Vulnerability (Wed Apr 14 2010 - 20:14:16 EEST)
  • VUPEN Security Research - Adobe Acrobat and Reader BMP Data Buffer Overflow Vulnerability (Wed Apr 14 2010 - 20:13:07 EEST)
  • VUPEN Security Research - Adobe Acrobat and Reader PNG Data Buffer Overflow Vulnerability (Wed Apr 14 2010 - 20:15:49 EEST)
  • VUPEN Web Security Research - WebAsyst Shop-Script Multiple Input Validation Vulnerabilities (Wed Apr 14 2010 - 20:08:53 EEST)
• wborskey@gmail.com
  • Widnows XP TCP/IP Stack Security Issue (ARP for non RFC 1918 addresses) (Sun Apr 25 2010 - 04:15:56 EEST)
• Williams, Dan
  • RE: STP mitm attack idea (Fri Apr 30 2010 - 16:02:32 EEST)
• wlet@gmx.net
  • Re: STP mitm attack idea (Thu Apr 29 2010 - 09:31:43 EEST)
• wsn1983@gmail.com
  • RJ-iTop Network Vulnerability Scanner System Multiple SQL Injection Vulnerabilities (Wed Apr 14 2010 - 16:12:08 EEST)
• ZDI Disclosures
  • ZDI-10-079: Realnetworks Helix Server NTLM Authentication Invalid Base64 Remote Code Execution Vulnerability (Wed Apr 28 2010 - 20:12:28 EEST)
  • ZDI-10-078: Novell ZENworks Configuration Management UploadServlet Remote Code Execution Vulnerability (Fri Apr 23 2010 - 19:48:29 EEST)
  • ZDI-10-077: Adobe Download Manager Atlcom.get_atlcom ActiveX Control Remote Code Execution Vulnerability (Wed Apr 21 2010 - 19:59:12 EEST)
  • ZDI-10-076: Apple Preview libFontParser SpecialEncoding Remote Code Execution Vulnerability (Thu Apr 15 2010 - 06:00:42 EEST)
  • ZDI-10-072: Cisco Secure Desktop CSDWebInstaller ActiveX Control Remote Code Execution Vulnerability (Wed Apr 14 2010 - 21:32:52 EEST)
  • ZDI-10-070: Microsoft Windows Media Player Codec Retrieval Dangling Pointer Remote Code Execution Vulnerability (Tue Apr 13 2010 - 21:43:51 EEST)
  • ZDI-10-074: Sun Microsystems Directory Server Enterprise ASN.1 Parsing Remote Code Execution Vulnerability (Wed Apr 14 2010 - 00:45:20 EEST)
  • ZDI-10-069: Microsoft Office Publisher File Conversion TextBox Processing Buffer Overflow Vulnerability (Tue Apr 13 2010 - 21:41:46 EEST)
  • ZDI-10-075: Sun Microsystems Directory Server Enterprise DSML UTF-8 Denial of Service Vulnerability (Wed Apr 14 2010 - 00:47:45 EEST)
  • ZDI-10-073: Sun Microsystems Directory Server DSML-over-HTTP Username Search Denial of Service Vulnerability (Wed Apr 14 2010 - 00:42:38 EEST)
  • ZDI-10-071: Adobe Reader TrueType Font Handling Remote Code Execution Vulnerability (Tue Apr 13 2010 - 21:58:49 EEST)
  • ZDI-10-068: Apple QuickTime H.263 Array Index Parsing Remote Code Execution Vulnerability (Fri Apr 09 2010 - 21:01:45 EEST)
  • ZDI-10-067: Apple QuickTime Pict BkPixPat Remote Code Execution Vulnerability (Tue Apr 06 2010 - 22:34:27 EEST)
  • ZDI-10-066: CA XOsoft Control Service entry_point.aspx Remote Code Execution Vulnerability (Tue Apr 06 2010 - 21:25:25 EEST)
  • ZDI-10-065: CA XOsoft xosoapapi.asmx Multiple Remote Code Execution Vulnerabilities (Tue Apr 06 2010 - 21:23:04 EEST)
  • ZDI-10-063: Mozilla Firefox Cross Document DOM Node Moving Code Execution Vulnerability (Tue Apr 06 2010 - 00:07:43 EEST)
  • ZDI-10-062: Novell Netware NWFTPD RMD/RNFR/DELE Argument Parsing Remote Code Execution Vulnerabilities (Mon Apr 05 2010 - 22:27:01 EEST)
  • ZDI-10-057: Sun Java Runtime Environment JPEGImageDecoderImpl Remote Code Execution Vulnerability (Mon Apr 05 2010 - 18:57:20 EEST)
  • ZDI-10-059: Sun Java Runtime Environment JPEGImageEncoderImpl Remote Code Execution Vulnerability (Mon Apr 05 2010 - 20:28:30 EEST)
  • ZDI-10-055: Sun Java Runtime Environment Mutable InetAddress Socket Policy Violation Vulnerability (Mon Apr 05 2010 - 18:29:25 EEST)
  • ZDI-10-052: Sun Java Runtime Environment XNewPtr Remote Code Execution Vulnerability (Mon Apr 05 2010 - 18:12:47 EEST)
  • ZDI-10-051: Sun Java Runtime RMIConnectionImpl Privileged Context Remote Code Execution Vulnerability (Mon Apr 05 2010 - 18:09:40 EEST)
  • ZDI-10-058: Apple Mac OS X ImageIO Framework JPEG2000 Remote Code Execution Vulnerability (Mon Apr 05 2010 - 19:22:48 EEST)
  • ZDI-10-050: Mozilla Firefox nsTreeSelection EventListener Remote Code Execution Vulnerability (Fri Apr 02 2010 - 21:08:44 EEST)
  • ZDI-10-061: Sun Java Runtime CMM readMabCurveData Remote Code Execution Vulnerability (Mon Apr 05 2010 - 20:34:25 EEST)
  • ZDI-10-049: Mozilla Firefox PluginArray nsMimeType Dangling Pointer Remote Code Execution Vulnerability (Fri Apr 02 2010 - 21:06:10 EEST)
  • ZDI-10-048: Mozilla Firefox nsTreeContentView Dangling Pointer Remote Code Execution Vulnerability (Fri Apr 02 2010 - 21:01:32 EEST)
  • ZDI-10-060: Sun Java Runtime Environment MixerSequencer Invalid Array Index Remote Code Execution Vulnerability (Mon Apr 05 2010 - 20:31:15 EEST)
  • ZDI-10-054: Sun Java Runtime Environment JPEGImageReader stepX Remote Code Execution Vulnerability (Mon Apr 05 2010 - 18:25:33 EEST)
  • ZDI-10-047: Mozilla Firefox libpr0n imgContainer Bits-Per-Pixel Change Remote Code Execution Vulnerability (Fri Apr 02 2010 - 20:56:41 EEST)
  • ZDI-10-046: Mozilla Firefox Web Worker Array Remote Code Execution Vulnerability (Fri Apr 02 2010 - 20:21:48 EEST)
  • ZDI-10-053: Sun Java Runtime Environment MIDI File metaEvent Remote Code Execution Vulnerability (Mon Apr 05 2010 - 18:15:39 EEST)
  • ZDI-10-056: Sun Java Runtime Environment Trusted Methods Chaining Remote Code Execution Vulnerability (Mon Apr 05 2010 - 18:44:28 EEST)
  • ZDI-10-045: Apple QuickTime MPEG-1 genl Atom Remote Code Execution Vulnerability (Fri Apr 02 2010 - 20:16:03 EEST)
  • ZDI-10-044: Apple QuickTime FLI LinePacket Remote Code Execution Vulnerability (Fri Apr 02 2010 - 20:01:46 EEST)
  • ZDI-10-043: Apple QuickTime FlashPix NumberOfTiles Remote Code Execution Vulnerability (Fri Apr 02 2010 - 19:47:06 EEST)
  • ZDI-10-042: Apple QuickTime MediaVideo Compressor Name Remote Code Execution Vulnerability (Fri Apr 02 2010 - 19:42:50 EEST)
  • ZDI-10-041: Apple QuickTime QDM2/QDCA Atom Remote Code Execution Vulnerability (Fri Apr 02 2010 - 19:37:34 EEST)
  • ZDI-10-040: Apple QuickTime RLE Bit Depth Remote Code Execution Vulnerability (Fri Apr 02 2010 - 19:33:53 EEST)
  • ZDI-10-039: Apple OS X Internet Enabled Disk Image Remote Code Execution Vulnerability (Fri Apr 02 2010 - 19:30:57 EEST)
  • ZDI-10-038: Apple QuickTime QDMC/QDM2 Remote Code Execution Vulnerability (Fri Apr 02 2010 - 19:27:49 EEST)
  • ZDI-10-037: Apple QuickTime MJPEG Sample Dimensions Remote Code Execution Vulnerability (Fri Apr 02 2010 - 19:21:32 EEST)
  • ZDI-10-036: Apple QuickTime H.263 PictureHeader Remote Code Execution Vulnerability (Fri Apr 02 2010 - 19:14:05 EEST)
  • ZDI-10-035: Apple QuickTime genl Atom Remote Code Execution Vulnerability (Fri Apr 02 2010 - 19:07:06 EEST)
  • ZDI-10-034: Microsoft Internet Explorer Tabular Data Control ActiveX Remote Code Execution Vulnerability (Fri Apr 02 2010 - 18:56:18 EEST)
  • ZDI-10-033: Microsoft Internet Explorer TIME2 Behavior Remote Code Execution Vulnerability (Fri Apr 02 2010 - 18:53:22 EEST)

Last message date: Fri Apr 30 2010 - 22:33:31 EEST
Archived on: Fri Apr 30 2010 - 22:33:33 EEST

This archive was generated by hypermail 2b28 : Fri Apr 30 2010 - 22:33:33 EEST