stdin
By Author

• abc12345@hushmail.com
  • Re: Nginx 0.8.35 Space Character Remote Source Disclosure (Mon May 31 2010 - 18:00:22 EEST)
• admin@7b-ly.com
  • clearsite Remote File Include Vulnerability (Thu May 27 2010 - 18:59:41 EEST)
• advisory@htbridge.ch
  • SQL injection vulnerability in ImpressPages CMS (Fri May 28 2010 - 22:01:24 EEST)
  • SQL injection vulnerability in ImpressPages CMS (Fri May 28 2010 - 22:02:09 EEST)
  • SQL injection vulnerability in ImpressPages CMS (Fri May 28 2010 - 22:01:37 EEST)
  • SQL injection vulnerability in 360 Web Manager (Tue May 25 2010 - 20:48:12 EEST)
  • XSS vulnerability in 360 Web Manager (Tue May 25 2010 - 20:47:51 EEST)
  • SQL injection vulnerability in 360 Web Manager (Tue May 25 2010 - 20:47:45 EEST)
  • XSS vulnerability in RuubikCMS (Tue May 25 2010 - 20:48:30 EEST)
  • XSS vulnerability in GetSimple CMS (Tue May 25 2010 - 20:48:05 EEST)
  • XSS vulnerability in razorCMS (Tue May 25 2010 - 20:47:59 EEST)
  • XSRF (CSRF) in NPDS REvolution (Thu May 20 2010 - 21:17:29 EEST)
  • SQL injection vulnerability in LiSK CMS (Thu May 20 2010 - 21:17:17 EEST)
  • XSS vulnerability in gpEasy CMS (Thu May 20 2010 - 21:16:40 EEST)
  • XSS vulnerability in LiSK CMS (Thu May 20 2010 - 21:17:41 EEST)
  • SQL injection vulnerability in LiSK CMS (Thu May 20 2010 - 21:17:23 EEST)
  • XSRF (CSRF) in ocPortal (Thu May 20 2010 - 21:16:31 EEST)
  • XSS vulnerability in LiSK CMS (Thu May 20 2010 - 21:03:47 EEST)
  • Stored XSS vulnerability in NPDS REvolution (Tue May 18 2010 - 15:27:28 EEST)
  • XSS vulnerability in NPDS REvolution (Tue May 18 2010 - 15:26:36 EEST)
  • XSS vulnerability in JComments, Joomla (Tue May 18 2010 - 15:26:53 EEST)
  • XSS vulnerability in NPDS (Thu May 13 2010 - 19:40:44 EEST)
  • Blind SQL injection vulnerability in NPDS REvolution (Thu May 13 2010 - 19:40:33 EEST)
  • XSS in DynamiXgate Affiliate Store Builder (Tue May 11 2010 - 16:01:28 EEST)
  • XSS in Saurus CMS (Tue May 11 2010 - 16:02:02 EEST)
  • XSS vulnerability in Advanced Poll (Mon May 10 2010 - 10:55:56 EEST)
  • XSS vulnerability in EasyPublish CMS (Mon May 10 2010 - 10:55:54 EEST)
  • XSS vulnerability in Jaws (Fri May 07 2010 - 11:05:53 EEST)
  • XSS in ecoCMS (Tue May 04 2010 - 15:41:30 EEST)
  • XSRF (CSRF) in Zikula Application Framework (Tue May 04 2010 - 15:41:18 EEST)
  • XSS in eliteCMS (Tue May 04 2010 - 15:41:37 EEST)
  • XSS in Acuity CMS (Tue May 04 2010 - 15:41:51 EEST)
  • XSRF (CSRF) in eliteCMS (Tue May 04 2010 - 15:41:44 EEST)
• Albert Levi
  • CfP: GameSec 2010 - 5 days left to the deadline (Wed May 26 2010 - 11:35:28 EEST)
  • CfP: GameSec 2010 - Deadline extended to 31 May 2010 (Fri May 14 2010 - 14:31:16 EEST)
• Alexis Tremblay
  • Vulnerability with Cisco ACE. A2 3.0 (probably all version) (Fri May 07 2010 - 00:28:43 EEST)
• angelo@rosiello.org
  • New web malwares attacking big hosting providers (Thu May 06 2010 - 21:49:19 EEST)
• Bkis
  • [Bkis-01-2010] Multiple Vulnerabilities in BigAce - Bkis (Sun May 23 2010 - 09:10:08 EEST)
  • [Bkis-01-2010] Multiple Vulnerabilities in BigAce - Bkis (Sat May 22 2010 - 13:27:02 EEST)
• Casper.Dik@Sun.COM
  • Re: Sun Solaris 10 filesystem rm(1),find(1),etc, Denial-of-service (Wed May 26 2010 - 09:03:41 EEST)
• Christopher Schramm
  • SQL injection in OSCommerce Add-On Visitor Web Stats (Fri May 28 2010 - 10:12:10 EEST)
• Cisco Systems Product Security Incident Response Team
  • Cisco Security Advisory: Multiple Vulnerabilities in Cisco Network Building Mediator (Wed May 26 2010 - 19:30:00 EEST)
  • Cisco Security Advisory: Multiple vulnerabilities in Cisco PGW Softswitch (Wed May 12 2010 - 18:35:00 EEST)
• Code Audit Labs
  • [CAL-20100204-3]Adobe Shockwave Player Director File Parsing RCSL Pointer Overwrite (Wed May 12 2010 - 04:40:38 EEST)
  • [CAL-20100204-2]Adobe Shockwave Player Director File Parsing integer overflow vulnerability (Wed May 12 2010 - 04:39:33 EEST)
  • [CAL-20100204-1]Adobe Shockwave Player Director File Parsing ATOM size infinite loop vulnerability (Wed May 12 2010 - 04:37:49 EEST)
• Core Security Technologies Advisories
  • Re: [CORE-2010-0405] Adobe Director Invalid Read (Thu May 13 2010 - 23:49:32 EEST)
  • [CORE-2010-0427] Windows SMTP Service DNS query Id vulnerabilities (Wed May 05 2010 - 01:11:04 EEST)
• Core Security Technologies Advisories Team
  • [CORE-2010-0405] Adobe Director Invalid Read (Tue May 11 2010 - 22:57:23 EEST)
  • [CORE-2010-0428] Microsoft Office Visio DXF File Insertion Buffer Overflow (Tue May 04 2010 - 21:54:05 EEST)
• Cristofaro Mune
  • IS-2010-001 - Netgear WG602v4 Saved Pass Stack Overflow (Sun May 30 2010 - 22:27:42 EEST)
• cxib@securityreason.com
  • Sun Solaris 10 ftpd Cross-site request forgery (Fri May 21 2010 - 10:59:29 EEST)
  • Sun Solaris 10 filesystem rm(1),find(1),etc, Denial-of-service (Fri May 21 2010 - 10:59:36 EEST)
  • Sun Solaris 10 libc/*convert (*cvt) buffer overflow (Fri May 21 2010 - 10:59:54 EEST)
• Dan Rosenberg
  • Scientific Atlanta DPC2100 WebSTAR Cable Modem vulnerabilities (Mon May 24 2010 - 20:31:24 EEST)
  • Multiple memory corruption vulnerabilities in Ghostscript (Wed May 12 2010 - 03:27:35 EEST)
• daniel lopez
  • A vulnerability in Kaspersky Antivirus (Sat May 01 2010 - 18:47:48 EEST)
• Daniele Bianco
  • [oCERT-2010-001] multiple http client unexpected download filename vulnerability (Mon May 17 2010 - 15:03:22 EEST)
• dann frazier
  • [SECURITY] [DSA 2053-1] New Linux 2.6.26 packages fix several issues (Tue May 25 2010 - 09:51:38 EEST)
• David Guimaraes
  • SQL injection vulnerability in Zabbix <= 1.8.1 (Mon May 24 2010 - 20:48:07 EEST)
• David Mirza Ahmad
  • REC0N 2010 (MONTREAL) CFP Reminder & Preview (Wed May 05 2010 - 00:16:04 EEST)
• Davide Canali
  • Re: New web malwares attacking big hosting providers (Fri May 07 2010 - 09:00:19 EEST)
• developpeur@npds.org
  • Re: XSS vulnerability in NPDS (Tue May 18 2010 - 17:15:37 EEST)
• Devin Carraway
  • [SECURITY] [DSA 2043-1] New vlc packages fix arbitrary code execution (Tue May 11 2010 - 10:55:34 EEST)
  • [SECURITY] [DSA 2044-1] New mplayer packages fix arbitrary code execution (Tue May 11 2010 - 11:10:06 EEST)
• dm@securityfocus.com
  • Re: Administrivia: Real domain names in PoC/exploit examples (Fri May 28 2010 - 19:10:55 EEST)
  • Administrivia: Real domain names in PoC/exploit examples (Fri May 28 2010 - 17:29:56 EEST)
• donald00@live.com
  • Re: RE: Puntal (index.php) Remote File Inclusion Vulnerabilities (Tue May 04 2010 - 03:09:44 EEST)
• Dragos Ruiu
  • EUSecWest 2010 MiniCFP (conf Jun 16/17) and PacSec 2010 CFP (conf Nov 10/11, deadline July 30) (Thu May 27 2010 - 16:29:54 EEST)
• eidelweiss@cyberservices.com
  • Hustoj is HUST ACM OnlineJudge "fckeditor" file upload security issue (Sat May 22 2010 - 16:15:52 EEST)
  • JV2 Folder Gallery 3.1.1 (popup_slideshow.php) Multiple Vulnerability (Sun May 23 2010 - 12:45:45 EEST)
  • CompleteFTP Server v 4.x "PORT" command Remote DOS exploit (Mon May 24 2010 - 06:40:58 EEST)
  • Joomla Component advertising (com_aardvertiser) File Inclusion Vulnerability (Thu May 13 2010 - 18:59:28 EEST)
  • PolyPager 1.0rc10 (fckeditor) File Upload Security Issue (Wed May 12 2010 - 22:02:33 EEST)
  • 29o3 CMS (LibDir) Multiple Remote File Inclusion Vulnerability (Tue May 11 2010 - 07:47:36 EEST)
  • REZERVI (root) Remote Command Execution Vulnerability (Fri May 07 2010 - 03:10:44 EEST)
  • Knowledgeroot (fckeditor) Remote Arbitrary File Upload Exploit (Wed May 05 2010 - 02:59:33 EEST)
  • Puntal (index.php) Remote File Inclusion Vulnerabilities (Mon May 03 2010 - 21:10:25 EEST)
• ekoparty Security Conference
  • CFP for ekoparty 0x10 is now open! [ Buenos Aires, Argentina ] (Wed May 12 2010 - 00:06:33 EEST)
• Eren Türkay
  • Re: [Full-disclosure] Month of PHP Security - Summary - 1st May - 10th May (Tue May 11 2010 - 11:55:24 EEST)
• Francis Provencher
  • {PRL} Microsoft Windows Outlook Express and Windows Mail Integer Overflow (Tue May 11 2010 - 15:54:56 EEST)
• Frank Habermann
  • Re: Knowledgeroot (fckeditor) Remote Arbitrary File Upload Exploit (Wed May 05 2010 - 22:28:01 EEST)
• FreeBSD Security Advisories
  • FreeBSD Security Advisory FreeBSD-SA-10:06.nfsclient (Thu May 27 2010 - 06:25:11 EEST)
  • FreeBSD Security Advisory FreeBSD-SA-10:05.opie (Thu May 27 2010 - 06:25:07 EEST)
  • FreeBSD Security Advisory FreeBSD-SA-10:04.jail (Thu May 27 2010 - 06:25:04 EEST)
• g1xsystem@windowslive.com
  • GR Board v1.8.6. (theme) Local File Inclusion Vulnerability (Mon May 31 2010 - 20:12:38 EEST)
  • GR Board v1.8.6.1 stab (page.php?theme) Remote File Inclusion Vulnerability (Sun May 30 2010 - 08:34:58 EEST)
  • Groone's Simple Contact Form (abspath) Remote File Inclusion Vulnerability (Fri May 28 2010 - 22:31:09 EEST)
  • Flock web browser v2.5.6 (Remote Memory Corrupt) Crash Exploit (Wed May 26 2010 - 00:20:27 EEST)
• geinblues@gmail.com
  • Firefox 3.6.3 (latest) <= memory exhaustion crash vulnerabilities (Tue May 18 2010 - 18:26:05 EEST)
• Giuseppe Iuculano
  • [SECURITY] [DSA-2046-1] New phpgroupware packages fix several vulnerabilities (Thu May 13 2010 - 23:14:54 EEST)
• Guillermo Marro Bruno
  • RE: STP mitm attack idea (Thu May 20 2010 - 16:50:01 EEST)
• Hafez Kamal
  • [HITB-Announce] HITBSecConf2010 - Malaysia Call for Papers (Thu May 20 2010 - 05:40:16 EEST)
• Hanno Böck
  • CMS Made Simple: backend cross site scripting (XSS), CVE-2010-1482 (Fri May 07 2010 - 15:42:16 EEST)
  • pmwiki: persistent cross site scripting (XSS), CVE-2010-1481 (Fri May 07 2010 - 15:30:09 EEST)
• HD Moore
  • Metasploit Framework 3.4.0 Released (Wed May 19 2010 - 01:03:28 EEST)
• iDefense Labs
  • iDefense Security Advisory 05.11.10: Abobe Shockwave Player Heap Memory Indexing Vulnerability (Wed May 12 2010 - 06:47:35 EEST)
• info@securitylab.ir
  • Nginx 0.8.35 Space Character Remote Source Disclosure (Mon May 31 2010 - 00:44:17 EEST)
  • Re: Microsoft Outlook Web Access (OWA) v8.2.254.0 "id" parameter Information Disclosure Vulnerability (Tue May 25 2010 - 14:35:02 EEST)
  • Smart Douran CMS Remote File Download (Wed May 19 2010 - 10:23:42 EEST)
• Jab³oñski, Pawe³
  • Re: Microsoft Outlook Web Access (OWA) v8.2.254.0 "id" parameter Information Disclosure Vulnerability (Sat May 22 2010 - 00:56:53 EEST)
• Jamie Strandboge
  • [USN-945-1] ClamAV vulnerabilities (Fri May 28 2010 - 00:32:55 EEST)
  • [USN-942-1] PostgreSQL vulnerabilities (Fri May 21 2010 - 20:15:46 EEST)
  • [USN-938-1] KDENetwork vulnerability (Thu May 13 2010 - 16:15:24 EEST)
• jeromie@comsecinc.com
  • Palo Alto Network Vulnerability - Cross-Site Scripting (XSS) (Wed May 12 2010 - 19:34:26 EEST)
• jerzy.patraszewski@gmail.com
  • Joomla component SimpleDownload Local File Inclusion (Mon May 17 2010 - 10:54:05 EEST)
• John Smith
  • Re: Re[4]: DoS vulnerabilities in Firefox, Internet Explorer, Chrome, Opera and other browsers (Sat May 29 2010 - 00:27:35 EEST)
  • Re: Re[2]: DoS vulnerabilities in Firefox, Internet Explorer, Chrome, Opera and other browsers (Fri May 28 2010 - 22:55:28 EEST)
  • Re: DoS vulnerabilities in Firefox, Internet Explorer, Chrome, Opera and other browsers (Fri May 28 2010 - 18:07:50 EEST)
• Justin C. Klein Keane
  • Re: Puntal (index.php) Remote File Inclusion Vulnerabilities (Tue May 04 2010 - 20:15:59 EEST)
• Kees Cook
  • [Suspected Spam][USN-944-1] GNU C Library vulnerabilities (Wed May 26 2010 - 00:38:33 EEST)
  • [Suspected Spam][USN-940-1] Kerberos vulnerabilities (Wed May 19 2010 - 22:45:28 EEST)
  • [Suspected Spam][USN-939-1] X.org vulnerabilities (Wed May 19 2010 - 00:35:48 EEST)
  • [USN-919-1] Emacs vulnerability (Tue Mar 30 2010 - 00:58:46 EEST)
• Konrad Rieck
  • Call for Papers: EC2ND 2010 (Sat May 15 2010 - 14:33:56 EEST)
• Krzysztof Å»elechowski
  • Re: Ghostscript 8.64 executes random code at startup (Wed May 26 2010 - 12:12:22 EEST)
• L4teral
  • Linux Mint 8 mintUpdate Insecure Temporary File Creation (Wed May 19 2010 - 23:07:25 EEST)
• lilf
  • BaoFeng Storm M3U File Processing Buffer Overflow Vulnerability (Thu May 06 2010 - 06:27:50 EEST)
• lis cker
  • Injection of ECShop apps. (Fri May 07 2010 - 09:35:40 EEST)
• Luciano Bello
  • [SECURITY] [DSA 2042-1] New iscsitarget packages fix arbitrary code execution (Thu May 06 2010 - 00:16:13 EEST)
• ma+bt@dt.e-technik.uni-dortmund.de
  • fetchmail security announcement fetchmail-SA-2010-02 (CVE-2010-1167) (Thu May 06 2010 - 11:36:48 EEST)
• Maciej Gojny
  • XSS, SQL injection vulnerability in I-Vision CMS (Mon May 17 2010 - 00:46:17 EEST)
  • SmartCMS v.2 SQL injection vulnerability (Wed May 05 2010 - 00:59:41 EEST)
• Major Malfunction
  • London DEFCON May meet - DC4420 - Wed 26th May 2010 (Tue May 25 2010 - 12:13:03 EEST)
• Marc Deslauriers
  • [USN-941-1] MoinMoin vulnerability (Thu May 20 2010 - 16:30:00 EEST)
  • [USN-937-1] TeX Live vulnerabilities (Thu May 06 2010 - 16:35:17 EEST)
  • [USN-936-1] dvipng vulnerability (Thu May 06 2010 - 16:34:35 EEST)
• md.r00t.defacer@gmail.com
  • LinksAutomation Multiple Remote Vulnerabilities (Thu May 13 2010 - 22:18:29 EEST)
  • Turnkey Innovations SQL Injection Vulnerability (Mon May 10 2010 - 17:04:04 EEST)
• Michael Santos
  • PCRE compile workspace overflow (Wed May 05 2010 - 22:12:26 EEST)
• michael.messner@integralis.com
  • Webby Webserver v1.01 - Buffer overflow vulnerability with overwritten structured exception handler (SEH) (Tue May 25 2010 - 10:57:52 EEST)
• mike@sitewat.ch
  • phpvidz Administrative Password Disclosure (Sun May 16 2010 - 10:28:49 EEST)
• Moritz Muehlenhoff
  • [SECURITY] [DSA 2051-1] New postgresql-8.3 packages fix several vulnerabilities (Mon May 24 2010 - 19:00:11 EEST)
  • [SECURITY] [DSA 2050-1] New kdegraphics packages fix several vulnerabilities (Mon May 24 2010 - 18:38:34 EEST)
• MustLive
  • Re: DoS vulnerabilities in Firefox, Internet Explorer, Chrome and Opera (Mon May 31 2010 - 19:03:37 EEST)
  • [Suspected Spam]Vulnerability in ArtDesign CMS (Sat May 29 2010 - 14:12:05 EEST)
  • [Suspected Spam]DoS vulnerabilities in Firefox, Internet Explorer, Chrome and Opera (Fri May 28 2010 - 15:57:48 EEST)
  • Re: DoS vulnerabilities in Firefox, Internet Explorer, Chrome, Opera and other browsers (Thu May 27 2010 - 23:53:37 EEST)
  • New vulnerabilities in plugin DS-Syndicate for Joomla (Mon May 24 2010 - 01:17:17 EEST)
  • Vulnerabilities in DS-Syndicate for Joomla (Sat May 22 2010 - 18:07:17 EEST)
  • Vulnerability in widget Flash Tag Cloud for Blogsa and other ASP.NET engines (Thu May 20 2010 - 21:12:02 EEST)
  • Re: DoS vulnerabilities in Firefox, Internet Explorer, Chrome, Opera and other browsers (Thu May 20 2010 - 01:53:05 EEST)
  • DoS vulnerabilities in Firefox, Internet Explorer, Chrome, Opera and other browsers (Tue May 18 2010 - 16:17:50 EEST)
  • Re: Vulnerability in 3D user cloud for Joomla (Mon May 17 2010 - 23:48:35 EEST)
  • Vulnerability in 3D user cloud for Joomla (Sat May 15 2010 - 23:58:59 EEST)
  • Vulnerability in tagcloud for Kasseler CMS (Thu May 13 2010 - 23:54:21 EEST)
  • Vulnerability in widget Cumulus for BlogEngine.NET (Tue May 11 2010 - 23:18:04 EEST)
  • Re: Vulnerabilities in Sebo - webstore (Tue May 11 2010 - 02:47:21 EEST)
  • Vulnerabilities in Sebo - webstore (Sat May 08 2010 - 20:21:09 EEST)
  • Vulnerabilities in t3m_cumulus_tagcloud for TYPO3 (Wed May 05 2010 - 02:28:07 EEST)
  • Cross-Site Scripting vulnerability in Mango (Sun May 02 2010 - 03:04:59 EEST)
• Nate Eldredge
  • Re: Administrivia: Real domain names in PoC/exploit examples (Fri May 28 2010 - 18:38:57 EEST)
• ne01026@stegny.2a.pl
  • Ghostscript 8.64 executes random code at startup (Sat May 22 2010 - 12:38:56 EEST)
• noloader@gmail.com
  • Re: KHOBE - 8.0 earthquake for Windows desktop security software (Fri May 07 2010 - 03:52:01 EEST)
• Packet Storm
  • Re: SQL injection vulnerability in 360 Web Manager (Thu May 27 2010 - 02:32:43 EEST)
• Patroklos Argyroudis
  • CVE-2010-2020: FreeBSD kernel NFS client local vulnerabilities (Fri May 28 2010 - 17:43:20 EEST)
• paul.szabo@sydney.edu.au
  • Re: Ghostscript 8.64 executes random code at startup (Sun May 30 2010 - 13:49:41 EEST)
  • Re: Ghostscript 8.64 executes random code at startup (Fri May 28 2010 - 16:42:34 EEST)
  • Re: Ghostscript 8.64 executes random code at startup (Thu May 27 2010 - 03:51:30 EEST)
  • Re: Ghostscript 8.64 executes random code at startup (Wed May 26 2010 - 14:15:15 EEST)
  • Re: Ghostscript 8.64 executes random code at startup (Wed May 26 2010 - 05:32:51 EEST)
  • Mathematica on Linux /tmp/MathLink vulnerability (Fri May 14 2010 - 04:56:10 EEST)
• Pete Herzog
  • OSSTMM 3 STAR Released! (Mon May 24 2010 - 21:47:02 EEST)
  • OSSTMM 3 based Home Security Vacation Guide v.2! (Thu May 20 2010 - 21:35:37 EEST)
  • Mastering Trust in Security Assessments (Thu May 20 2010 - 21:17:40 EEST)
  • Re: The New ISO Hacking Standard (Thu May 20 2010 - 23:59:49 EEST)
  • The New ISO Hacking Standard (Wed May 19 2010 - 16:14:13 EEST)
  • Security Awareness for kids (Tue May 18 2010 - 15:41:43 EEST)
• praveen_recker@sify.com
  • Denial of Dervice vulnerability in Helix Mobile Server (RealNetworks) (14.0.0.348) with long string to PluginDirectory in rmserver.cfg file (Mon May 24 2010 - 15:00:50 EEST)
  • Microsoft Outlook Web Access (OWA) v8.2.254.0 "id" parameter Information Disclosure Vulnerability (Fri May 21 2010 - 00:34:14 EEST)
• Raphael Geissert
  • [SECURITY] [DSA-2041-1] New mediawiki packages fix cross-site request forgery (Tue May 04 2010 - 03:25:46 EEST)
• research
  • PR10-03: Authenticated Cross-Site Scripting (XSS) within the Apache Axis2 administration console (Fri May 21 2010 - 19:08:49 EEST)
  • Multiple vulnerabilities within 3Com* iMC (Intelligent Management Center) (Thu May 20 2010 - 20:11:37 EEST)
• Rodrigo Branco
  • HP-UX, IBM AIX, SGI IRIX Remote Vulnerability - CVE-2010-1039 (Fri May 21 2010 - 01:55:03 EEST)
• rPath Update Announcements
  • rPSA-2010-0039-1 openssl openssl-scripts (Mon May 24 2010 - 01:50:27 EEST)
  • rPSA-2010-0037-1 kernel (Fri May 07 2010 - 20:59:41 EEST)
  • rPSA-2010-0036-1 openssl openssl-scripts (Fri May 07 2010 - 20:58:58 EEST)
  • rPSA-2010-0034-1 ntp ntp-utils (Fri May 07 2010 - 20:54:32 EEST)
• s2-security
  • CVE-2010-1454: SpringSource tc Server unauthenticated remote access to JMX interface (Mon May 17 2010 - 19:14:15 EEST)
• Salvatore Fresta aka Drosophila
  • Re: Vulnerabilities in Sebo - webstore (Mon May 10 2010 - 22:13:34 EEST)
  • Re: Vulnerabilities in Sebo - webstore (Tue May 11 2010 - 11:17:55 EEST)
  • Family Connections 2.2.3 Multiple Remote Vulnerabilities (Mon May 10 2010 - 15:37:27 EEST)
• Sebastien Delafond
  • [SECURITY] [DSA 2052-1] New krb5 packages fix denial of service (Mon May 24 2010 - 22:48:30 EEST)
  • [SECURITY] [DSA 2048-1] New dvipng packages fix arbitrary code execution (Sun May 23 2010 - 20:46:17 EEST)
  • [SECURITY] [DSA 2045-1] New libtheora packages fix arbitrary code execution (Tue May 11 2010 - 22:33:02 EEST)
  • [SECURITY] [DSA 2040-1] New squidguard packages fix several vulnerabilities (Sun May 02 2010 - 15:56:52 EEST)
• Secunia Research
  • Secunia Research: Ziproxy Two Integer Overflow Vulnerabilities (Mon May 24 2010 - 13:44:34 EEST)
  • Secunia Research: Orbit Downloader metalink "name" Directory Traversal (Wed May 19 2010 - 18:33:33 EEST)
  • Secunia Research: aria2 metalink "name" Directory Traversal Vulnerability (Thu May 13 2010 - 16:25:32 EEST)
  • Secunia Research: Free Download Manager metalink "name" Directory Traversal (Thu May 13 2010 - 16:19:19 EEST)
  • Secunia Research: KDE KGet metalink "name" Directory Traversal Vulnerability (Thu May 13 2010 - 16:19:03 EEST)
  • Secunia Research: KDE KGet Insecure File Operation Vulnerability (Thu May 13 2010 - 16:18:55 EEST)
  • Secunia Research: Free Download Manager Four Buffer Overflow Vulnerabilities (Thu May 13 2010 - 16:19:12 EEST)
  • Secunia Research: IrfanView PSD RLE Decompression Buffer Overflow (Wed May 12 2010 - 17:28:21 EEST)
  • Secunia Research: IrfanView PSD Image Parsing Sign-Extension Vulnerability (Wed May 12 2010 - 17:27:50 EEST)
  • Secunia Research: TomatoCMS "q" SQL Injection Vulnerability (Wed May 12 2010 - 17:23:17 EEST)
  • Secunia Research: TomatoCMS Script Insertion Vulnerabilities (Wed May 12 2010 - 17:23:10 EEST)
  • Secunia Research: Adobe Shockwave Player Font Processing Buffer Overflow (Wed May 12 2010 - 14:55:27 EEST)
  • Secunia Research: Adobe Shockwave Player Asset Entry Parsing Vulnerability (Wed May 12 2010 - 14:55:21 EEST)
  • Secunia Research: Adobe Shockwave Player Integer Overflow Vulnerability (Wed May 12 2010 - 14:55:13 EEST)
  • Secunia Research: Adobe Shockwave Player Array Indexing Vulnerability (Wed May 12 2010 - 11:29:12 EEST)
  • Secunia Research: Adobe Shockwave Player Signedness Error Vulnerability (Wed May 12 2010 - 11:28:54 EEST)
  • Secunia Research: Adobe Shockwave Player 3D Parsing Memory Corruption (Wed May 12 2010 - 11:28:38 EEST)
• security curmudgeon
  • Re: IBM Lotus 6.x names.nsf Cross Site Scripting Vulnerability (Mon May 24 2010 - 21:44:45 EEST)
• security-alert@hp.com
  • [security bulletin] HPSBUX02523 SSRT100036 rev.2 - HP-UX Running ONCplus rpc.pcnfsd, Remote Denial of Service (DoS), Increase in Privilege (Fri May 28 2010 - 23:58:45 EEST)
  • [security bulletin] HPSBMA02442 SSRT090108 rev.1 - HP Business Availability Center Running Apache, Remote Cross Site Scripting (XSS), Cross Site Request Forgery (CSRF), Denial of Service (DoS) (Wed May 26 2010 - 16:25:50 EEST)
  • [security bulletin] HPSBGN02315 SSRT071487 rev.1 - HP TestDirector for Quality Center running on AIX, Linux and Solaris, Remote Unauthorized Access (Wed May 26 2010 - 16:25:09 EEST)
  • [security bulletin] HPSBUX02523 SSRT100036 rev.1 - HP-UX Running ONCPlus, Remote Denial of Service (DoS), Increase in Privilege (Wed May 19 2010 - 00:54:30 EEST)
  • [security bulletin] HPSBMA02535 SSRT100029 rev.1 - HP Performance Manager, Remote Unauthorized Access, Cross Site Scripting (XSS), Denial of Service (DoS) (Tue May 18 2010 - 19:19:48 EEST)
  • [security bulletin] HPSBOV02497 SSRT090245 rev.3 - HP TCP/IP Services for OpenVMS Running NTP, Remote Execution of Arbitrary Code, Denial of Service (DoS) (Tue May 18 2010 - 00:08:33 EEST)
  • [security bulletin] HPSBMA02534 SSRT090180 rev.1 - HP System Management Homepage (SMH) for Linux and Windows, Remote Unauthorized Information Disclosure, Unauthorized Data Modification, Denial of Service (DoS) (Tue May 18 2010 - 14:33:48 EEST)
  • [security bulletin] HPSBGN02511 SSRT100022 rev.3 - Certain HP Small Form Factor, Microtower and Workstations PC's with Broadcom Integrated NIC Firmware, Remote Execution of Arbitrary Code (Tue May 18 2010 - 16:15:18 EEST)
  • [security bulletin] HPSBPI02532 SSRT100111 rev.1 - HP MFP Digital Sending Software Running on Windows, Local Unauthorized Access (Thu May 13 2010 - 17:04:18 EEST)
  • [security bulletin] HPSBMA02520 SSRT100071 rev.1 - HP Systems Insight Manager (SIM) for HP-UX, Linux, and Windows, Remote Unauthorized Access to Data (Wed May 12 2010 - 17:18:16 EEST)
  • [security bulletin] HPSBMA02522 SSRT100086 rev.1 - HP Insight Control Server Migration for Windows, Remote Cross Site Scripting (XSS) (Wed May 12 2010 - 17:18:38 EEST)
  • [security bulletin] HPSBMA02527 SSRT010098 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code (Tue May 11 2010 - 21:13:09 EEST)
  • [security bulletin] HPSBMA02528 SSRT100106 rev.1 - HP Performance Center Agent on Windows, Remote Unauthenticated Arbitrary Code Execution (Tue May 11 2010 - 00:28:41 EEST)
  • [security bulletin] HPSBMA02201 SSRT071328 rev.1 - HP LoadRunner Agent on Windows, Remote Unauthenticated Arbitrary Code Execution (Thu May 06 2010 - 17:22:11 EEST)
  • [security bulletin] HPSBMA02483 SSRT090257 rev.3 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code (Wed May 05 2010 - 16:27:46 EEST)
  • [security bulletin] HPSBMA02416 SSRT090008 rev.5 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code (Wed May 05 2010 - 16:28:18 EEST)
  • [security bulletin] HPSBMA02400 SSRT080144 rev.4 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code (Wed May 05 2010 - 16:28:34 EEST)
• security@mandriva.com
  • [ MDVSA-2010:109 ] gtk+2.0 (Thu May 27 2010 - 18:28:00 EEST)
  • [ MDVSA-2010:110 ] clamav (Thu May 27 2010 - 19:44:00 EEST)
  • [ MDVSA-2010:108 ] kolab-horde-framework (Wed May 26 2010 - 17:53:01 EEST)
  • [ MDVSA-2010:108 ] kolab-horde-framework (Wed May 26 2010 - 18:03:00 EEST)
  • [ MDVSA-2010:108 ] kolab-horde-framework (Wed May 26 2010 - 18:22:00 EEST)
  • [ MDVSA-2010:107 ] mysql (Wed May 26 2010 - 00:28:01 EEST)
  • [ MDVSA-2010:106 ] aria2 (Mon May 24 2010 - 20:12:01 EEST)
  • [ MDVSA-2010:105 ] openoffice.org (Sat May 22 2010 - 00:27:01 EEST)
  • [ MDVSA-2010:103 ] postgresql (Fri May 21 2010 - 00:39:00 EEST)
  • [ MDVSA-2010:104 ] dovecot (Fri May 21 2010 - 16:39:00 EEST)
  • [ MDVSA-2010:082-1 ] clamav (Thu May 20 2010 - 17:05:01 EEST)
  • [ MDVSA-2010:102 ] ghostscript (Wed May 19 2010 - 23:34:00 EEST)
  • [ MDVSA-2010:101 ] mysql (Wed May 19 2010 - 19:24:00 EEST)
  • [ MDVSA-2010:100 ] krb5 (Wed May 19 2010 - 18:28:01 EEST)
  • [ MDVSA-2010:098 ] kdenetwork4 (Tue May 18 2010 - 19:29:00 EEST)
  • [ MDVSA-2010:099 ] wireshark (Tue May 18 2010 - 22:04:00 EEST)
  • [ MDVSA-2010:097 ] pidgin (Tue May 18 2010 - 17:07:01 EEST)
  • [ MDVSA-2010:096 ] tetex (Mon May 17 2010 - 19:21:01 EEST)
  • [ MDVSA-2010:095 ] libxext (Thu May 13 2010 - 03:13:01 EEST)
  • [ MDVSA-2010:094 ] tetex (Wed May 12 2010 - 20:49:01 EEST)
  • [ MDVSA-2010:090-1 ] samba (Tue May 11 2010 - 02:08:00 EEST)
  • [ MDVSA-2010:093 ] mysql (Fri May 07 2010 - 21:06:00 EEST)
  • [ MDVSA-2010:092 ] cacti (Fri May 07 2010 - 00:09:01 EEST)
  • [ MDVSA-2010:091 ] openoffice.org (Wed May 05 2010 - 00:54:01 EEST)
  • [ MDVSA-2010:090 ] samba (Tue May 04 2010 - 14:35:00 EEST)
  • [ MDVSA-2010:089 ] gnutls (Mon May 03 2010 - 21:48:01 EEST)
• Security_Alert@emc.com
  • ESA-2010-007: EMC Avamar Denial Of Service Vulnerability (Wed May 26 2010 - 17:18:49 EEST)
• sh4v@n3t-datagrams.net
  • XSS bug in US Robotics firmware USR5463-v0_06.bin (Thu May 20 2010 - 18:24:07 EEST)
• Simon Kilvington
  • Re: The New ISO Hacking Standard (Thu May 20 2010 - 12:34:13 EEST)
• Stefan Esser
  • Month of PHP Security - Summary - 11st May - 21th (Fri May 21 2010 - 12:30:28 EEST)
  • Month of PHP Security - Summary - 1st May - 10th May (Mon May 10 2010 - 22:05:16 EEST)
• Steffen Joeris
  • [SECURITY] [DSA 2049-1] New barnowl packages fix arbitrary code execution (Sun May 23 2010 - 05:58:12 EEST)
• subs@itguard.info
  • Cross Site URL Hijacking by using Error Object in Mozilla Firefox (Thu May 27 2010 - 13:22:23 EEST)
• Susan Bradley
  • Re: [Suspected Spam]DoS vulnerabilities in Firefox, Internet Explorer, Chrome and Opera (Fri May 28 2010 - 19:06:23 EEST)
  • Re: DoS vulnerabilities in Firefox, Internet Explorer, Chrome, Opera and other browsers (Thu May 20 2010 - 02:58:43 EEST)
  • Re: DoS vulnerabilities in Firefox, Internet Explorer, Chrome, Opera and other browsers (Tue May 18 2010 - 20:38:47 EEST)
• The Dark Tangent
  • DEF CON 18 CFP closing in two weeks (Sat May 15 2010 - 01:37:03 EEST)
• Thijs Kinkhorst
  • [SECURITY] [DSA 2052-1] New krb5 packages fix denial of service (Mon May 24 2010 - 22:49:50 EEST)
  • [SECURITY] [DSA 2038-2] New pidgin packages fix regression (Mon May 17 2010 - 23:37:56 EEST)
  • [SECURITY] [DSA 2047-1] New aria2 packages fix directory traversal (Mon May 17 2010 - 21:28:36 EEST)
• Tim Starling
  • Arbitrary UNC file read in IE 8 (Mon May 24 2010 - 03:52:18 EEST)
• Tom Walsh - lists
  • RE: Puntal (index.php) Remote File Inclusion Vulnerabilities (Mon May 03 2010 - 23:39:23 EEST)
• Tom Yu
  • MITKRB5-SA-2010-005 [CVE-2010-1321] GSS-API lib null pointer deref (Tue May 18 2010 - 21:09:14 EEST)
• unknown user
  • [Kil13r-SA-20100513] Adobe Flash Player 10.0 Denial Of Service Vulnerability (Wed May 19 2010 - 18:05:51 EEST)
• Vadim Okun
  • Static analysis tool exposition (SATE) 2010 Call for participation (Thu May 27 2010 - 00:45:54 EEST)
• Vladimir '3APA3A' Dubrovin
  • Re[4]: DoS vulnerabilities in Firefox, Internet Explorer, Chrome, Opera and other browsers (Fri May 28 2010 - 23:35:05 EEST)
  • Re[2]: DoS vulnerabilities in Firefox, Internet Explorer, Chrome, Opera and other browsers (Fri May 28 2010 - 21:17:56 EEST)
  • Re: Secunia Research: KDE KGet Insecure File Operation Vulnerability (Fri May 14 2010 - 22:43:11 EEST)
• VMware Security team
  • VMSA-2010-0009 ESXi ntp and ESX Service Console third party updates (Fri May 28 2010 - 08:42:31 EEST)
  • VMSA-2010-0008 VMware View 3.1.3 addresses an important cross-site scripting vulnerability (Thu May 06 2010 - 09:44:44 EEST)
• vulns@wintercore.com
  • [Wintercore Research] Consona Products - Multiple vulnerabilities (Fri May 07 2010 - 14:02:50 EEST)
• VUPEN Security Research
  • VUPEN Security Research - Adobe Shockwave 3D Blocks Field Code Execution Vulnerability (CVE-2010-1283) (Wed May 12 2010 - 15:46:38 EEST)
  • VUPEN Security Research - Adobe Shockwave DIRAPI Multiple Code Execution Vulnerabilities (CVE-2010-1280) (Wed May 12 2010 - 15:46:36 EEST)
  • VUPEN Security Research - Adobe Shockwave 3D Two Remote Code Execution Vulnerabilities (CVE-2010-1284) (Wed May 12 2010 - 15:46:33 EEST)
  • VUPEN Security Research - Adobe Shockwave IML32 Multiple Code Execution Vulnerabilities (CVE-2010-0129) (Wed May 12 2010 - 15:46:28 EEST)
• VUPEN Web Security
  • PHP-Calendar "description" and "lastaction" Cross Site Scripting Vulnerabilities (Fri May 21 2010 - 11:20:35 EEST)
  • Cacti Multiple Parameter Cross Site Scripting Vulnerabilities (Fri May 21 2010 - 11:27:04 EEST)
  • phpGroupWare SQL Injections and Local File Inclusion Vulnerabilities (CVE-2010-0403 and CVE-2010-0404) (Fri May 14 2010 - 11:35:40 EEST)
• Wasim Halani
  • Cyberoam SSL VPN Client - Plain-text Storage of Username and Password (Wed May 26 2010 - 13:42:34 EEST)
• wsn1983@gmail.com
  • DM Database Server Memory Corruption Vulnerability (Mon May 31 2010 - 04:30:42 EEST)
• www.matousec.com - Research
  • KHOBE - 8.0 earthquake for Windows desktop security software (Wed May 05 2010 - 21:36:38 EEST)
• xuanmumu@gmail.com
  • Caucho Technology Resin digest.php Cross Site Scripting Vulnerability (Wed May 19 2010 - 02:18:12 EEST)
• yicong2010@yahoo.com
  • Kingsoft WebShield KAVSafe.sys <= 2010.4.14.609(2010.5.23) Kernel Mode Local Privilege Escalation Vulnerability (Mon May 24 2010 - 17:26:17 EEST)
  • Kingsoft WebShield KAVSafe.sys <= 2010.4.14.609(2010.5.23) Kernel Mode Local Privilege Escalation Vulnerability (Sun May 23 2010 - 06:37:00 EEST)
• Zakar Miklós
  • SA00001-2010 (Mon May 10 2010 - 15:37:26 EEST)
• ZDI Disclosures
  • ZDI-10-088: Adobe Shockwave Player 3D Parsing Memory Corruption Vulnerability (Wed May 12 2010 - 00:26:00 EEST)
  • ZDI-10-087: Adobe Shockwave Invalid Offset Memory Corruption Remote Code Execution Vulnerability (Wed May 12 2010 - 00:19:55 EEST)
  • ZDI-10-086: HP OpenView NNM getnnmdata.exe CGI Invalid Hostname Remote Code Execution Vulnerability (Wed May 12 2010 - 00:13:32 EEST)
  • ZDI-10-085: HP OpenView NNM getnnmdata.exe CGI Invalid ICount Remote Code Execution Vulnerability (Wed May 12 2010 - 00:11:49 EEST)
  • ZDI-10-089: Adobe Shockwave Director PAMI Chunk Remote Code Execution Vulnerability (Wed May 12 2010 - 00:28:41 EEST)
  • ZDI-10-084: HP OpenView NNM getnnmdata.exe CGI Invalid MaxAge Remote Code Execution Vulnerability (Wed May 12 2010 - 00:09:51 EEST)
  • ZDI-10-083: HP OpenView NNM snmpviewer.exe CGI Multiple Variable Remote Code Execution Vulnerability (Wed May 12 2010 - 00:08:36 EEST)
  • ZDI-10-082: HP OpenView NNM netmon sel CGI Variable Remote Code Execution Vulnerability (Wed May 12 2010 - 00:06:41 EEST)
  • ZDI-10-081: HP OpenView NNM ovet_demandpoll sel CGI Variable Format String Remote Code Execution Vulnerability (Tue May 11 2010 - 23:47:34 EEST)
  • ZDI-10-080: HP Mercury LoadRunner Agent Trusted Input Remote Code Execution Vulnerability (Thu May 06 2010 - 21:45:06 EEST)

Last message date: Mon May 31 2010 - 21:56:16 EEST
Archived on: Mon May 31 2010 - 21:56:17 EEST

This archive was generated by hypermail 2b28 : Mon May 31 2010 - 21:56:17 EEST