stdin
By Subject

• 29o3 CMS (LibDir) Multiple Remote File Inclusion Vulnerability
  • eidelweiss@cyberservices.com (Tue May 11 2010 - 07:47:36 EEST)
• [ MDVSA-2010:082-1 ] clamav
  • security@mandriva.com (Thu May 20 2010 - 17:05:01 EEST)
• [ MDVSA-2010:089 ] gnutls
  • security@mandriva.com (Mon May 03 2010 - 21:48:01 EEST)
• [ MDVSA-2010:090 ] samba
  • security@mandriva.com (Tue May 04 2010 - 14:35:00 EEST)
• [ MDVSA-2010:090-1 ] samba
  • security@mandriva.com (Tue May 11 2010 - 02:08:00 EEST)
• [ MDVSA-2010:091 ] openoffice.org
  • security@mandriva.com (Wed May 05 2010 - 00:54:01 EEST)
• [ MDVSA-2010:092 ] cacti
  • security@mandriva.com (Fri May 07 2010 - 00:09:01 EEST)
• [ MDVSA-2010:093 ] mysql
  • security@mandriva.com (Fri May 07 2010 - 21:06:00 EEST)
• [ MDVSA-2010:094 ] tetex
  • security@mandriva.com (Wed May 12 2010 - 20:49:01 EEST)
• [ MDVSA-2010:095 ] libxext
  • security@mandriva.com (Thu May 13 2010 - 03:13:01 EEST)
• [ MDVSA-2010:096 ] tetex
  • security@mandriva.com (Mon May 17 2010 - 19:21:01 EEST)
• [ MDVSA-2010:097 ] pidgin
  • security@mandriva.com (Tue May 18 2010 - 17:07:01 EEST)
• [ MDVSA-2010:098 ] kdenetwork4
  • security@mandriva.com (Tue May 18 2010 - 19:29:00 EEST)
• [ MDVSA-2010:099 ] wireshark
  • security@mandriva.com (Tue May 18 2010 - 22:04:00 EEST)
• [ MDVSA-2010:100 ] krb5
  • security@mandriva.com (Wed May 19 2010 - 18:28:01 EEST)
• [ MDVSA-2010:101 ] mysql
  • security@mandriva.com (Wed May 19 2010 - 19:24:00 EEST)
• [ MDVSA-2010:102 ] ghostscript
  • security@mandriva.com (Wed May 19 2010 - 23:34:00 EEST)
• [ MDVSA-2010:103 ] postgresql
  • security@mandriva.com (Fri May 21 2010 - 00:39:00 EEST)
• [ MDVSA-2010:104 ] dovecot
  • security@mandriva.com (Fri May 21 2010 - 16:39:00 EEST)
• [ MDVSA-2010:105 ] openoffice.org
  • security@mandriva.com (Sat May 22 2010 - 00:27:01 EEST)
• [ MDVSA-2010:106 ] aria2
  • security@mandriva.com (Mon May 24 2010 - 20:12:01 EEST)
• [ MDVSA-2010:107 ] mysql
  • security@mandriva.com (Wed May 26 2010 - 00:28:01 EEST)
• [ MDVSA-2010:108 ] kolab-horde-framework
  • security@mandriva.com (Wed May 26 2010 - 17:53:01 EEST)
  • security@mandriva.com (Wed May 26 2010 - 18:03:00 EEST)
  • security@mandriva.com (Wed May 26 2010 - 18:22:00 EEST)
• [ MDVSA-2010:109 ] gtk+2.0
  • security@mandriva.com (Thu May 27 2010 - 18:28:00 EEST)
• [ MDVSA-2010:110 ] clamav
  • security@mandriva.com (Thu May 27 2010 - 19:44:00 EEST)
• [Bkis-01-2010] Multiple Vulnerabilities in BigAce - Bkis
  • Bkis (Sun May 23 2010 - 09:10:08 EEST)
  • Bkis (Sat May 22 2010 - 13:27:02 EEST)
• [CAL-20100204-1]Adobe Shockwave Player Director File Parsing ATOM size infinite loop vulnerability
  • Code Audit Labs (Wed May 12 2010 - 04:37:49 EEST)
• [CAL-20100204-2]Adobe Shockwave Player Director File Parsing integer overflow vulnerability
  • Code Audit Labs (Wed May 12 2010 - 04:39:33 EEST)
• [CAL-20100204-3]Adobe Shockwave Player Director File Parsing RCSL Pointer Overwrite
  • Code Audit Labs (Wed May 12 2010 - 04:40:38 EEST)
• [CORE-2010-0405] Adobe Director Invalid Read
  • Core Security Technologies Advisories (Thu May 13 2010 - 23:49:32 EEST)
  • Core Security Technologies Advisories Team (Tue May 11 2010 - 22:57:23 EEST)
• [CORE-2010-0427] Windows SMTP Service DNS query Id vulnerabilities
  • Core Security Technologies Advisories (Wed May 05 2010 - 01:11:04 EEST)
• [CORE-2010-0428] Microsoft Office Visio DXF File Insertion Buffer Overflow
  • Core Security Technologies Advisories Team (Tue May 04 2010 - 21:54:05 EEST)
• [Full-disclosure] Month of PHP Security - Summary - 1st May - 10th May
  • Eren Türkay (Tue May 11 2010 - 11:55:24 EEST)
• [HITB-Announce] HITBSecConf2010 - Malaysia Call for Papers
  • Hafez Kamal (Thu May 20 2010 - 05:40:16 EEST)
• [Kil13r-SA-20100513] Adobe Flash Player 10.0 Denial Of Service Vulnerability
  • unknown user (Wed May 19 2010 - 18:05:51 EEST)
• [oCERT-2010-001] multiple http client unexpected download filename vulnerability
  • Daniele Bianco (Mon May 17 2010 - 15:03:22 EEST)
• [security bulletin] HPSBGN02315 SSRT071487 rev.1 - HP TestDirector for Quality Center running on AIX, Linux and Solaris, Remote Unauthorized Access
  • security-alert@hp.com (Wed May 26 2010 - 16:25:09 EEST)
• [security bulletin] HPSBGN02511 SSRT100022 rev.3 - Certain HP Small Form Factor, Microtower and Workstations PC's with Broadcom Integrated NIC Firmware, Remote Execution of Arbitrary Code
  • security-alert@hp.com (Tue May 18 2010 - 16:15:18 EEST)
• [security bulletin] HPSBMA02201 SSRT071328 rev.1 - HP LoadRunner Agent on Windows, Remote Unauthenticated Arbitrary Code Execution
  • security-alert@hp.com (Thu May 06 2010 - 17:22:11 EEST)
• [security bulletin] HPSBMA02400 SSRT080144 rev.4 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code
  • security-alert@hp.com (Wed May 05 2010 - 16:28:34 EEST)
• [security bulletin] HPSBMA02416 SSRT090008 rev.5 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code
  • security-alert@hp.com (Wed May 05 2010 - 16:28:18 EEST)
• [security bulletin] HPSBMA02442 SSRT090108 rev.1 - HP Business Availability Center Running Apache, Remote Cross Site Scripting (XSS), Cross Site Request Forgery (CSRF), Denial of Service (DoS)
  • security-alert@hp.com (Wed May 26 2010 - 16:25:50 EEST)
• [security bulletin] HPSBMA02483 SSRT090257 rev.3 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code
  • security-alert@hp.com (Wed May 05 2010 - 16:27:46 EEST)
• [security bulletin] HPSBMA02520 SSRT100071 rev.1 - HP Systems Insight Manager (SIM) for HP-UX, Linux, and Windows, Remote Unauthorized Access to Data
  • security-alert@hp.com (Wed May 12 2010 - 17:18:16 EEST)
• [security bulletin] HPSBMA02522 SSRT100086 rev.1 - HP Insight Control Server Migration for Windows, Remote Cross Site Scripting (XSS)
  • security-alert@hp.com (Wed May 12 2010 - 17:18:38 EEST)
• [security bulletin] HPSBMA02527 SSRT010098 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code
  • security-alert@hp.com (Tue May 11 2010 - 21:13:09 EEST)
• [security bulletin] HPSBMA02528 SSRT100106 rev.1 - HP Performance Center Agent on Windows, Remote Unauthenticated Arbitrary Code Execution
  • security-alert@hp.com (Tue May 11 2010 - 00:28:41 EEST)
• [security bulletin] HPSBMA02534 SSRT090180 rev.1 - HP System Management Homepage (SMH) for Linux and Windows, Remote Unauthorized Information Disclosure, Unauthorized Data Modification, Denial of Service (DoS)
  • security-alert@hp.com (Tue May 18 2010 - 14:33:48 EEST)
• [security bulletin] HPSBMA02535 SSRT100029 rev.1 - HP Performance Manager, Remote Unauthorized Access, Cross Site Scripting (XSS), Denial of Service (DoS)
  • security-alert@hp.com (Tue May 18 2010 - 19:19:48 EEST)
• [security bulletin] HPSBOV02497 SSRT090245 rev.3 - HP TCP/IP Services for OpenVMS Running NTP, Remote Execution of Arbitrary Code, Denial of Service (DoS)
  • security-alert@hp.com (Tue May 18 2010 - 00:08:33 EEST)
• [security bulletin] HPSBPI02532 SSRT100111 rev.1 - HP MFP Digital Sending Software Running on Windows, Local Unauthorized Access
  • security-alert@hp.com (Thu May 13 2010 - 17:04:18 EEST)
• [security bulletin] HPSBUX02523 SSRT100036 rev.1 - HP-UX Running ONCPlus, Remote Denial of Service (DoS), Increase in Privilege
  • security-alert@hp.com (Wed May 19 2010 - 00:54:30 EEST)
• [security bulletin] HPSBUX02523 SSRT100036 rev.2 - HP-UX Running ONCplus rpc.pcnfsd, Remote Denial of Service (DoS), Increase in Privilege
  • security-alert@hp.com (Fri May 28 2010 - 23:58:45 EEST)
• [SECURITY] [DSA 2038-2] New pidgin packages fix regression
  • Thijs Kinkhorst (Mon May 17 2010 - 23:37:56 EEST)
• [SECURITY] [DSA 2040-1] New squidguard packages fix several vulnerabilities
  • Sebastien Delafond (Sun May 02 2010 - 15:56:52 EEST)
• [SECURITY] [DSA 2042-1] New iscsitarget packages fix arbitrary code execution
  • Luciano Bello (Thu May 06 2010 - 00:16:13 EEST)
• [SECURITY] [DSA 2043-1] New vlc packages fix arbitrary code execution
  • Devin Carraway (Tue May 11 2010 - 10:55:34 EEST)
• [SECURITY] [DSA 2044-1] New mplayer packages fix arbitrary code execution
  • Devin Carraway (Tue May 11 2010 - 11:10:06 EEST)
• [SECURITY] [DSA 2045-1] New libtheora packages fix arbitrary code execution
  • Sebastien Delafond (Tue May 11 2010 - 22:33:02 EEST)
• [SECURITY] [DSA 2047-1] New aria2 packages fix directory traversal
  • Thijs Kinkhorst (Mon May 17 2010 - 21:28:36 EEST)
• [SECURITY] [DSA 2048-1] New dvipng packages fix arbitrary code execution
  • Sebastien Delafond (Sun May 23 2010 - 20:46:17 EEST)
• [SECURITY] [DSA 2049-1] New barnowl packages fix arbitrary code execution
  • Steffen Joeris (Sun May 23 2010 - 05:58:12 EEST)
• [SECURITY] [DSA 2050-1] New kdegraphics packages fix several vulnerabilities
  • Moritz Muehlenhoff (Mon May 24 2010 - 18:38:34 EEST)
• [SECURITY] [DSA 2051-1] New postgresql-8.3 packages fix several vulnerabilities
  • Moritz Muehlenhoff (Mon May 24 2010 - 19:00:11 EEST)
• [SECURITY] [DSA 2052-1] New krb5 packages fix denial of service
  • Thijs Kinkhorst (Mon May 24 2010 - 22:49:50 EEST)
  • Sebastien Delafond (Mon May 24 2010 - 22:48:30 EEST)
• [SECURITY] [DSA 2053-1] New Linux 2.6.26 packages fix several issues
  • dann frazier (Tue May 25 2010 - 09:51:38 EEST)
• [SECURITY] [DSA-2041-1] New mediawiki packages fix cross-site request forgery
  • Raphael Geissert (Tue May 04 2010 - 03:25:46 EEST)
• [SECURITY] [DSA-2046-1] New phpgroupware packages fix several vulnerabilities
  • Giuseppe Iuculano (Thu May 13 2010 - 23:14:54 EEST)
• [Suspected Spam][USN-939-1] X.org vulnerabilities
  • Kees Cook (Wed May 19 2010 - 00:35:48 EEST)
• [Suspected Spam][USN-940-1] Kerberos vulnerabilities
  • Kees Cook (Wed May 19 2010 - 22:45:28 EEST)
• [Suspected Spam][USN-944-1] GNU C Library vulnerabilities
  • Kees Cook (Wed May 26 2010 - 00:38:33 EEST)
• [Suspected Spam]DoS vulnerabilities in Firefox, Internet Explorer, Chrome and Opera
  • Susan Bradley (Fri May 28 2010 - 19:06:23 EEST)
  • MustLive (Fri May 28 2010 - 15:57:48 EEST)
• [Suspected Spam]Vulnerability in ArtDesign CMS
  • MustLive (Sat May 29 2010 - 14:12:05 EEST)
• [USN-919-1] Emacs vulnerability
  • Kees Cook (Tue Mar 30 2010 - 00:58:46 EEST)
• [USN-936-1] dvipng vulnerability
  • Marc Deslauriers (Thu May 06 2010 - 16:34:35 EEST)
• [USN-937-1] TeX Live vulnerabilities
  • Marc Deslauriers (Thu May 06 2010 - 16:35:17 EEST)
• [USN-938-1] KDENetwork vulnerability
  • Jamie Strandboge (Thu May 13 2010 - 16:15:24 EEST)
• [USN-941-1] MoinMoin vulnerability
  • Marc Deslauriers (Thu May 20 2010 - 16:30:00 EEST)
• [USN-942-1] PostgreSQL vulnerabilities
  • Jamie Strandboge (Fri May 21 2010 - 20:15:46 EEST)
• [USN-945-1] ClamAV vulnerabilities
  • Jamie Strandboge (Fri May 28 2010 - 00:32:55 EEST)
• [Wintercore Research] Consona Products - Multiple vulnerabilities
  • vulns@wintercore.com (Fri May 07 2010 - 14:02:50 EEST)
• A vulnerability in Kaspersky Antivirus
  • daniel lopez (Sat May 01 2010 - 18:47:48 EEST)
• Administrivia: Real domain names in PoC/exploit examples
  • dm@securityfocus.com (Fri May 28 2010 - 19:10:55 EEST)
  • Nate Eldredge (Fri May 28 2010 - 18:38:57 EEST)
  • dm@securityfocus.com (Fri May 28 2010 - 17:29:56 EEST)
• Arbitrary UNC file read in IE 8
  • Tim Starling (Mon May 24 2010 - 03:52:18 EEST)
• BaoFeng Storm M3U File Processing Buffer Overflow Vulnerability
  • lilf (Thu May 06 2010 - 06:27:50 EEST)
• Blind SQL injection vulnerability in NPDS REvolution
  • advisory@htbridge.ch (Thu May 13 2010 - 19:40:33 EEST)
• Cacti Multiple Parameter Cross Site Scripting Vulnerabilities
  • VUPEN Web Security (Fri May 21 2010 - 11:27:04 EEST)
• Call for Papers: EC2ND 2010
  • Konrad Rieck (Sat May 15 2010 - 14:33:56 EEST)
• Caucho Technology Resin digest.php Cross Site Scripting Vulnerability
  • xuanmumu@gmail.com (Wed May 19 2010 - 02:18:12 EEST)
• CFP for ekoparty 0x10 is now open! [ Buenos Aires, Argentina ]
  • ekoparty Security Conference (Wed May 12 2010 - 00:06:33 EEST)
• CfP: GameSec 2010 - 5 days left to the deadline
  • Albert Levi (Wed May 26 2010 - 11:35:28 EEST)
• CfP: GameSec 2010 - Deadline extended to 31 May 2010
  • Albert Levi (Fri May 14 2010 - 14:31:16 EEST)
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco Network Building Mediator
  • Cisco Systems Product Security Incident Response Team (Wed May 26 2010 - 19:30:00 EEST)
• Cisco Security Advisory: Multiple vulnerabilities in Cisco PGW Softswitch
  • Cisco Systems Product Security Incident Response Team (Wed May 12 2010 - 18:35:00 EEST)
• clearsite Remote File Include Vulnerability
  • admin@7b-ly.com (Thu May 27 2010 - 18:59:41 EEST)
• CMS Made Simple: backend cross site scripting (XSS), CVE-2010-1482
  • Hanno Böck (Fri May 07 2010 - 15:42:16 EEST)
• CompleteFTP Server v 4.x "PORT" command Remote DOS exploit
  • eidelweiss@cyberservices.com (Mon May 24 2010 - 06:40:58 EEST)
• Cross Site URL Hijacking by using Error Object in Mozilla Firefox
  • subs@itguard.info (Thu May 27 2010 - 13:22:23 EEST)
• Cross-Site Scripting vulnerability in Mango
  • MustLive (Sun May 02 2010 - 03:04:59 EEST)
• CVE-2010-1454: SpringSource tc Server unauthenticated remote access to JMX interface
  • s2-security (Mon May 17 2010 - 19:14:15 EEST)
• CVE-2010-2020: FreeBSD kernel NFS client local vulnerabilities
  • Patroklos Argyroudis (Fri May 28 2010 - 17:43:20 EEST)
• Cyberoam SSL VPN Client - Plain-text Storage of Username and Password
  • Wasim Halani (Wed May 26 2010 - 13:42:34 EEST)
• DEF CON 18 CFP closing in two weeks
  • The Dark Tangent (Sat May 15 2010 - 01:37:03 EEST)
• Denial of Dervice vulnerability in Helix Mobile Server (RealNetworks) (14.0.0.348) with long string to PluginDirectory in rmserver.cfg file
  • praveen_recker@sify.com (Mon May 24 2010 - 15:00:50 EEST)
• DM Database Server Memory Corruption Vulnerability
  • wsn1983@gmail.com (Mon May 31 2010 - 04:30:42 EEST)
• DoS vulnerabilities in Firefox, Internet Explorer, Chrome and Opera
  • MustLive (Mon May 31 2010 - 19:03:37 EEST)
• DoS vulnerabilities in Firefox, Internet Explorer, Chrome, Opera and other browsers
  • John Smith (Sat May 29 2010 - 00:27:35 EEST)
  • Vladimir '3APA3A' Dubrovin (Fri May 28 2010 - 23:35:05 EEST)
  • John Smith (Fri May 28 2010 - 22:55:28 EEST)
  • Vladimir '3APA3A' Dubrovin (Fri May 28 2010 - 21:17:56 EEST)
  • John Smith (Fri May 28 2010 - 18:07:50 EEST)
  • MustLive (Thu May 27 2010 - 23:53:37 EEST)
  • Susan Bradley (Thu May 20 2010 - 02:58:43 EEST)
  • MustLive (Thu May 20 2010 - 01:53:05 EEST)
  • Susan Bradley (Tue May 18 2010 - 20:38:47 EEST)
  • MustLive (Tue May 18 2010 - 16:17:50 EEST)
• ESA-2010-007: EMC Avamar Denial Of Service Vulnerability
  • Security_Alert@emc.com (Wed May 26 2010 - 17:18:49 EEST)
• EUSecWest 2010 MiniCFP (conf Jun 16/17) and PacSec 2010 CFP (conf Nov 10/11, deadline July 30)
  • Dragos Ruiu (Thu May 27 2010 - 16:29:54 EEST)
• Family Connections 2.2.3 Multiple Remote Vulnerabilities
  • Salvatore Fresta aka Drosophila (Mon May 10 2010 - 15:37:27 EEST)
• fetchmail security announcement fetchmail-SA-2010-02 (CVE-2010-1167)
  • ma+bt@dt.e-technik.uni-dortmund.de (Thu May 06 2010 - 11:36:48 EEST)
• Firefox 3.6.3 (latest) <= memory exhaustion crash vulnerabilities
  • geinblues@gmail.com (Tue May 18 2010 - 18:26:05 EEST)
• Flock web browser v2.5.6 (Remote Memory Corrupt) Crash Exploit
  • g1xsystem@windowslive.com (Wed May 26 2010 - 00:20:27 EEST)
• FreeBSD Security Advisory FreeBSD-SA-10:04.jail
  • FreeBSD Security Advisories (Thu May 27 2010 - 06:25:04 EEST)
• FreeBSD Security Advisory FreeBSD-SA-10:05.opie
  • FreeBSD Security Advisories (Thu May 27 2010 - 06:25:07 EEST)
• FreeBSD Security Advisory FreeBSD-SA-10:06.nfsclient
  • FreeBSD Security Advisories (Thu May 27 2010 - 06:25:11 EEST)
• Ghostscript 8.64 executes random code at startup
  • paul.szabo@sydney.edu.au (Sun May 30 2010 - 13:49:41 EEST)
  • paul.szabo@sydney.edu.au (Fri May 28 2010 - 16:42:34 EEST)
  • paul.szabo@sydney.edu.au (Thu May 27 2010 - 03:51:30 EEST)
  • paul.szabo@sydney.edu.au (Wed May 26 2010 - 14:15:15 EEST)
  • Krzysztof Å»elechowski (Wed May 26 2010 - 12:12:22 EEST)
  • paul.szabo@sydney.edu.au (Wed May 26 2010 - 05:32:51 EEST)
  • ne01026@stegny.2a.pl (Sat May 22 2010 - 12:38:56 EEST)
• GR Board v1.8.6. (theme) Local File Inclusion Vulnerability
  • g1xsystem@windowslive.com (Mon May 31 2010 - 20:12:38 EEST)
• GR Board v1.8.6.1 stab (page.php?theme) Remote File Inclusion Vulnerability
  • g1xsystem@windowslive.com (Sun May 30 2010 - 08:34:58 EEST)
• Groone's Simple Contact Form (abspath) Remote File Inclusion Vulnerability
  • g1xsystem@windowslive.com (Fri May 28 2010 - 22:31:09 EEST)
• HP-UX, IBM AIX, SGI IRIX Remote Vulnerability - CVE-2010-1039
  • Rodrigo Branco (Fri May 21 2010 - 01:55:03 EEST)
• Hustoj is HUST ACM OnlineJudge "fckeditor" file upload security issue
  • eidelweiss@cyberservices.com (Sat May 22 2010 - 16:15:52 EEST)
• IBM Lotus 6.x names.nsf Cross Site Scripting Vulnerability
  • security curmudgeon (Mon May 24 2010 - 21:44:45 EEST)
• iDefense Security Advisory 05.11.10: Abobe Shockwave Player Heap Memory Indexing Vulnerability
  • iDefense Labs (Wed May 12 2010 - 06:47:35 EEST)
• Injection of ECShop apps.
  • lis cker (Fri May 07 2010 - 09:35:40 EEST)
• IS-2010-001 - Netgear WG602v4 Saved Pass Stack Overflow
  • Cristofaro Mune (Sun May 30 2010 - 22:27:42 EEST)
• Joomla Component advertising (com_aardvertiser) File Inclusion Vulnerability
  • eidelweiss@cyberservices.com (Thu May 13 2010 - 18:59:28 EEST)
• Joomla component SimpleDownload Local File Inclusion
  • jerzy.patraszewski@gmail.com (Mon May 17 2010 - 10:54:05 EEST)
• JV2 Folder Gallery 3.1.1 (popup_slideshow.php) Multiple Vulnerability
  • eidelweiss@cyberservices.com (Sun May 23 2010 - 12:45:45 EEST)
• KHOBE - 8.0 earthquake for Windows desktop security software
  • noloader@gmail.com (Fri May 07 2010 - 03:52:01 EEST)
  • www.matousec.com - Research (Wed May 05 2010 - 21:36:38 EEST)
• Kingsoft WebShield KAVSafe.sys <= 2010.4.14.609(2010.5.23) Kernel Mode Local Privilege Escalation Vulnerability
  • yicong2010@yahoo.com (Mon May 24 2010 - 17:26:17 EEST)
  • yicong2010@yahoo.com (Sun May 23 2010 - 06:37:00 EEST)
• Knowledgeroot (fckeditor) Remote Arbitrary File Upload Exploit
  • Frank Habermann (Wed May 05 2010 - 22:28:01 EEST)
  • eidelweiss@cyberservices.com (Wed May 05 2010 - 02:59:33 EEST)
• LinksAutomation Multiple Remote Vulnerabilities
  • md.r00t.defacer@gmail.com (Thu May 13 2010 - 22:18:29 EEST)
• Linux Mint 8 mintUpdate Insecure Temporary File Creation
  • L4teral (Wed May 19 2010 - 23:07:25 EEST)
• London DEFCON May meet - DC4420 - Wed 26th May 2010
  • Major Malfunction (Tue May 25 2010 - 12:13:03 EEST)
• Mastering Trust in Security Assessments
  • Pete Herzog (Thu May 20 2010 - 21:17:40 EEST)
• Mathematica on Linux /tmp/MathLink vulnerability
  • paul.szabo@sydney.edu.au (Fri May 14 2010 - 04:56:10 EEST)
• Metasploit Framework 3.4.0 Released
  • HD Moore (Wed May 19 2010 - 01:03:28 EEST)
• Microsoft Outlook Web Access (OWA) v8.2.254.0 "id" parameter Information Disclosure Vulnerability
  • info@securitylab.ir (Tue May 25 2010 - 14:35:02 EEST)
  • Jab³oñski, Pawe³ (Sat May 22 2010 - 00:56:53 EEST)
  • praveen_recker@sify.com (Fri May 21 2010 - 00:34:14 EEST)
• MITKRB5-SA-2010-005 [CVE-2010-1321] GSS-API lib null pointer deref
  • Tom Yu (Tue May 18 2010 - 21:09:14 EEST)
• Month of PHP Security - Summary - 11st May - 21th
  • Stefan Esser (Fri May 21 2010 - 12:30:28 EEST)
• Month of PHP Security - Summary - 1st May - 10th May
  • Stefan Esser (Mon May 10 2010 - 22:05:16 EEST)
• Multiple memory corruption vulnerabilities in Ghostscript
  • Dan Rosenberg (Wed May 12 2010 - 03:27:35 EEST)
• Multiple vulnerabilities within 3Com* iMC (Intelligent Management Center)
  • research (Thu May 20 2010 - 20:11:37 EEST)
• New vulnerabilities in plugin DS-Syndicate for Joomla
  • MustLive (Mon May 24 2010 - 01:17:17 EEST)
• New web malwares attacking big hosting providers
  • Davide Canali (Fri May 07 2010 - 09:00:19 EEST)
  • angelo@rosiello.org (Thu May 06 2010 - 21:49:19 EEST)
• Nginx 0.8.35 Space Character Remote Source Disclosure
  • abc12345@hushmail.com (Mon May 31 2010 - 18:00:22 EEST)
  • info@securitylab.ir (Mon May 31 2010 - 00:44:17 EEST)
• OSSTMM 3 based Home Security Vacation Guide v.2!
  • Pete Herzog (Thu May 20 2010 - 21:35:37 EEST)
• OSSTMM 3 STAR Released!
  • Pete Herzog (Mon May 24 2010 - 21:47:02 EEST)
• Palo Alto Network Vulnerability - Cross-Site Scripting (XSS)
  • jeromie@comsecinc.com (Wed May 12 2010 - 19:34:26 EEST)
• PCRE compile workspace overflow
  • Michael Santos (Wed May 05 2010 - 22:12:26 EEST)
• PHP-Calendar "description" and "lastaction" Cross Site Scripting Vulnerabilities
  • VUPEN Web Security (Fri May 21 2010 - 11:20:35 EEST)
• phpGroupWare SQL Injections and Local File Inclusion Vulnerabilities (CVE-2010-0403 and CVE-2010-0404)
  • VUPEN Web Security (Fri May 14 2010 - 11:35:40 EEST)
• phpvidz Administrative Password Disclosure
  • mike@sitewat.ch (Sun May 16 2010 - 10:28:49 EEST)
• pmwiki: persistent cross site scripting (XSS), CVE-2010-1481
  • Hanno Böck (Fri May 07 2010 - 15:30:09 EEST)
• PolyPager 1.0rc10 (fckeditor) File Upload Security Issue
  • eidelweiss@cyberservices.com (Wed May 12 2010 - 22:02:33 EEST)
• PR10-03: Authenticated Cross-Site Scripting (XSS) within the Apache Axis2 administration console
  • research (Fri May 21 2010 - 19:08:49 EEST)
• Puntal (index.php) Remote File Inclusion Vulnerabilities
  • Justin C. Klein Keane (Tue May 04 2010 - 20:15:59 EEST)
  • donald00@live.com (Tue May 04 2010 - 03:09:44 EEST)
  • Tom Walsh - lists (Mon May 03 2010 - 23:39:23 EEST)
  • eidelweiss@cyberservices.com (Mon May 03 2010 - 21:10:25 EEST)
• REC0N 2010 (MONTREAL) CFP Reminder & Preview
  • David Mirza Ahmad (Wed May 05 2010 - 00:16:04 EEST)
• REZERVI (root) Remote Command Execution Vulnerability
  • eidelweiss@cyberservices.com (Fri May 07 2010 - 03:10:44 EEST)
• rPSA-2010-0034-1 ntp ntp-utils
  • rPath Update Announcements (Fri May 07 2010 - 20:54:32 EEST)
• rPSA-2010-0036-1 openssl openssl-scripts
  • rPath Update Announcements (Fri May 07 2010 - 20:58:58 EEST)
• rPSA-2010-0037-1 kernel
  • rPath Update Announcements (Fri May 07 2010 - 20:59:41 EEST)
• rPSA-2010-0039-1 openssl openssl-scripts
  • rPath Update Announcements (Mon May 24 2010 - 01:50:27 EEST)
• SA00001-2010
  • Zakar Miklós (Mon May 10 2010 - 15:37:26 EEST)
• Scientific Atlanta DPC2100 WebSTAR Cable Modem vulnerabilities
  • Dan Rosenberg (Mon May 24 2010 - 20:31:24 EEST)
• Secunia Research: Adobe Shockwave Player 3D Parsing Memory Corruption
  • Secunia Research (Wed May 12 2010 - 11:28:38 EEST)
• Secunia Research: Adobe Shockwave Player Array Indexing Vulnerability
  • Secunia Research (Wed May 12 2010 - 11:29:12 EEST)
• Secunia Research: Adobe Shockwave Player Asset Entry Parsing Vulnerability
  • Secunia Research (Wed May 12 2010 - 14:55:21 EEST)
• Secunia Research: Adobe Shockwave Player Font Processing Buffer Overflow
  • Secunia Research (Wed May 12 2010 - 14:55:27 EEST)
• Secunia Research: Adobe Shockwave Player Integer Overflow Vulnerability
  • Secunia Research (Wed May 12 2010 - 14:55:13 EEST)
• Secunia Research: Adobe Shockwave Player Signedness Error Vulnerability
  • Secunia Research (Wed May 12 2010 - 11:28:54 EEST)
• Secunia Research: aria2 metalink "name" Directory Traversal Vulnerability
  • Secunia Research (Thu May 13 2010 - 16:25:32 EEST)
• Secunia Research: Free Download Manager Four Buffer Overflow Vulnerabilities
  • Secunia Research (Thu May 13 2010 - 16:19:12 EEST)
• Secunia Research: Free Download Manager metalink "name" Directory Traversal
  • Secunia Research (Thu May 13 2010 - 16:19:19 EEST)
• Secunia Research: IrfanView PSD Image Parsing Sign-Extension Vulnerability
  • Secunia Research (Wed May 12 2010 - 17:27:50 EEST)
• Secunia Research: IrfanView PSD RLE Decompression Buffer Overflow
  • Secunia Research (Wed May 12 2010 - 17:28:21 EEST)
• Secunia Research: KDE KGet Insecure File Operation Vulnerability
  • Vladimir '3APA3A' Dubrovin (Fri May 14 2010 - 22:43:11 EEST)
  • Secunia Research (Thu May 13 2010 - 16:18:55 EEST)
• Secunia Research: KDE KGet metalink "name" Directory Traversal Vulnerability
  • Secunia Research (Thu May 13 2010 - 16:19:03 EEST)
• Secunia Research: Orbit Downloader metalink "name" Directory Traversal
  • Secunia Research (Wed May 19 2010 - 18:33:33 EEST)
• Secunia Research: TomatoCMS "q" SQL Injection Vulnerability
  • Secunia Research (Wed May 12 2010 - 17:23:17 EEST)
• Secunia Research: TomatoCMS Script Insertion Vulnerabilities
  • Secunia Research (Wed May 12 2010 - 17:23:10 EEST)
• Secunia Research: Ziproxy Two Integer Overflow Vulnerabilities
  • Secunia Research (Mon May 24 2010 - 13:44:34 EEST)
• Security Awareness for kids
  • Pete Herzog (Tue May 18 2010 - 15:41:43 EEST)
• Smart Douran CMS Remote File Download
  • info@securitylab.ir (Wed May 19 2010 - 10:23:42 EEST)
• SmartCMS v.2 SQL injection vulnerability
  • Maciej Gojny (Wed May 05 2010 - 00:59:41 EEST)
• SQL injection in OSCommerce Add-On Visitor Web Stats
  • Christopher Schramm (Fri May 28 2010 - 10:12:10 EEST)
• SQL injection vulnerability in 360 Web Manager
  • Packet Storm (Thu May 27 2010 - 02:32:43 EEST)
  • advisory@htbridge.ch (Tue May 25 2010 - 20:48:12 EEST)
  • advisory@htbridge.ch (Tue May 25 2010 - 20:47:45 EEST)
• SQL injection vulnerability in ImpressPages CMS
  • advisory@htbridge.ch (Fri May 28 2010 - 22:01:24 EEST)
  • advisory@htbridge.ch (Fri May 28 2010 - 22:02:09 EEST)
  • advisory@htbridge.ch (Fri May 28 2010 - 22:01:37 EEST)
• SQL injection vulnerability in LiSK CMS
  • advisory@htbridge.ch (Thu May 20 2010 - 21:17:17 EEST)
  • advisory@htbridge.ch (Thu May 20 2010 - 21:17:23 EEST)
• SQL injection vulnerability in Zabbix <= 1.8.1
  • David Guimaraes (Mon May 24 2010 - 20:48:07 EEST)
• Static analysis tool exposition (SATE) 2010 Call for participation
  • Vadim Okun (Thu May 27 2010 - 00:45:54 EEST)
• Stored XSS vulnerability in NPDS REvolution
  • advisory@htbridge.ch (Tue May 18 2010 - 15:27:28 EEST)
• STP mitm attack idea
  • Guillermo Marro Bruno (Thu May 20 2010 - 16:50:01 EEST)
• Sun Solaris 10 filesystem rm(1),find(1),etc, Denial-of-service
  • Casper.Dik@Sun.COM (Wed May 26 2010 - 09:03:41 EEST)
  • cxib@securityreason.com (Fri May 21 2010 - 10:59:36 EEST)
• Sun Solaris 10 ftpd Cross-site request forgery
  • cxib@securityreason.com (Fri May 21 2010 - 10:59:29 EEST)
• Sun Solaris 10 libc/*convert (*cvt) buffer overflow
  • cxib@securityreason.com (Fri May 21 2010 - 10:59:54 EEST)
• The New ISO Hacking Standard
  • Pete Herzog (Thu May 20 2010 - 23:59:49 EEST)
  • Simon Kilvington (Thu May 20 2010 - 12:34:13 EEST)
  • Pete Herzog (Wed May 19 2010 - 16:14:13 EEST)
• Turnkey Innovations SQL Injection Vulnerability
  • md.r00t.defacer@gmail.com (Mon May 10 2010 - 17:04:04 EEST)
• VMSA-2010-0008 VMware View 3.1.3 addresses an important cross-site scripting vulnerability
  • VMware Security team (Thu May 06 2010 - 09:44:44 EEST)
• VMSA-2010-0009 ESXi ntp and ESX Service Console third party updates
  • VMware Security team (Fri May 28 2010 - 08:42:31 EEST)
• Vulnerabilities in DS-Syndicate for Joomla
  • MustLive (Sat May 22 2010 - 18:07:17 EEST)
• Vulnerabilities in Sebo - webstore
  • Salvatore Fresta aka Drosophila (Mon May 10 2010 - 22:13:34 EEST)
  • Salvatore Fresta aka Drosophila (Tue May 11 2010 - 11:17:55 EEST)
  • MustLive (Tue May 11 2010 - 02:47:21 EEST)
  • MustLive (Sat May 08 2010 - 20:21:09 EEST)
• Vulnerabilities in t3m_cumulus_tagcloud for TYPO3
  • MustLive (Wed May 05 2010 - 02:28:07 EEST)
• Vulnerability in 3D user cloud for Joomla
  • MustLive (Mon May 17 2010 - 23:48:35 EEST)
  • MustLive (Sat May 15 2010 - 23:58:59 EEST)
• Vulnerability in tagcloud for Kasseler CMS
  • MustLive (Thu May 13 2010 - 23:54:21 EEST)
• Vulnerability in widget Cumulus for BlogEngine.NET
  • MustLive (Tue May 11 2010 - 23:18:04 EEST)
• Vulnerability in widget Flash Tag Cloud for Blogsa and other ASP.NET engines
  • MustLive (Thu May 20 2010 - 21:12:02 EEST)
• Vulnerability with Cisco ACE. A2 3.0 (probably all version)
  • Alexis Tremblay (Fri May 07 2010 - 00:28:43 EEST)
• VUPEN Security Research - Adobe Shockwave 3D Blocks Field Code Execution Vulnerability (CVE-2010-1283)
  • VUPEN Security Research (Wed May 12 2010 - 15:46:38 EEST)
• VUPEN Security Research - Adobe Shockwave 3D Two Remote Code Execution Vulnerabilities (CVE-2010-1284)
  • VUPEN Security Research (Wed May 12 2010 - 15:46:33 EEST)
• VUPEN Security Research - Adobe Shockwave DIRAPI Multiple Code Execution Vulnerabilities (CVE-2010-1280)
  • VUPEN Security Research (Wed May 12 2010 - 15:46:36 EEST)
• VUPEN Security Research - Adobe Shockwave IML32 Multiple Code Execution Vulnerabilities (CVE-2010-0129)
  • VUPEN Security Research (Wed May 12 2010 - 15:46:28 EEST)
• Webby Webserver v1.01 - Buffer overflow vulnerability with overwritten structured exception handler (SEH)
  • michael.messner@integralis.com (Tue May 25 2010 - 10:57:52 EEST)
• XSRF (CSRF) in eliteCMS
  • advisory@htbridge.ch (Tue May 04 2010 - 15:41:44 EEST)
• XSRF (CSRF) in NPDS REvolution
  • advisory@htbridge.ch (Thu May 20 2010 - 21:17:29 EEST)
• XSRF (CSRF) in ocPortal
  • advisory@htbridge.ch (Thu May 20 2010 - 21:16:31 EEST)
• XSRF (CSRF) in Zikula Application Framework
  • advisory@htbridge.ch (Tue May 04 2010 - 15:41:18 EEST)
• XSS bug in US Robotics firmware USR5463-v0_06.bin
  • sh4v@n3t-datagrams.net (Thu May 20 2010 - 18:24:07 EEST)
• XSS in Acuity CMS
  • advisory@htbridge.ch (Tue May 04 2010 - 15:41:51 EEST)
• XSS in DynamiXgate Affiliate Store Builder
  • advisory@htbridge.ch (Tue May 11 2010 - 16:01:28 EEST)
• XSS in ecoCMS
  • advisory@htbridge.ch (Tue May 04 2010 - 15:41:30 EEST)
• XSS in eliteCMS
  • advisory@htbridge.ch (Tue May 04 2010 - 15:41:37 EEST)
• XSS in Saurus CMS
  • advisory@htbridge.ch (Tue May 11 2010 - 16:02:02 EEST)
• XSS vulnerability in 360 Web Manager
  • advisory@htbridge.ch (Tue May 25 2010 - 20:47:51 EEST)
• XSS vulnerability in Advanced Poll
  • advisory@htbridge.ch (Mon May 10 2010 - 10:55:56 EEST)
• XSS vulnerability in EasyPublish CMS
  • advisory@htbridge.ch (Mon May 10 2010 - 10:55:54 EEST)
• XSS vulnerability in GetSimple CMS
  • advisory@htbridge.ch (Tue May 25 2010 - 20:48:05 EEST)
• XSS vulnerability in gpEasy CMS
  • advisory@htbridge.ch (Thu May 20 2010 - 21:16:40 EEST)
• XSS vulnerability in Jaws
  • advisory@htbridge.ch (Fri May 07 2010 - 11:05:53 EEST)
• XSS vulnerability in JComments, Joomla
  • advisory@htbridge.ch (Tue May 18 2010 - 15:26:53 EEST)
• XSS vulnerability in LiSK CMS
  • advisory@htbridge.ch (Thu May 20 2010 - 21:17:41 EEST)
  • advisory@htbridge.ch (Thu May 20 2010 - 21:03:47 EEST)
• XSS vulnerability in NPDS
  • developpeur@npds.org (Tue May 18 2010 - 17:15:37 EEST)
  • advisory@htbridge.ch (Thu May 13 2010 - 19:40:44 EEST)
• XSS vulnerability in NPDS REvolution
  • advisory@htbridge.ch (Tue May 18 2010 - 15:26:36 EEST)
• XSS vulnerability in razorCMS
  • advisory@htbridge.ch (Tue May 25 2010 - 20:47:59 EEST)
• XSS vulnerability in RuubikCMS
  • advisory@htbridge.ch (Tue May 25 2010 - 20:48:30 EEST)
• XSS, SQL injection vulnerability in I-Vision CMS
  • Maciej Gojny (Mon May 17 2010 - 00:46:17 EEST)
• ZDI-10-080: HP Mercury LoadRunner Agent Trusted Input Remote Code Execution Vulnerability
  • ZDI Disclosures (Thu May 06 2010 - 21:45:06 EEST)
• ZDI-10-081: HP OpenView NNM ovet_demandpoll sel CGI Variable Format String Remote Code Execution Vulnerability
  • ZDI Disclosures (Tue May 11 2010 - 23:47:34 EEST)
• ZDI-10-082: HP OpenView NNM netmon sel CGI Variable Remote Code Execution Vulnerability
  • ZDI Disclosures (Wed May 12 2010 - 00:06:41 EEST)
• ZDI-10-083: HP OpenView NNM snmpviewer.exe CGI Multiple Variable Remote Code Execution Vulnerability
  • ZDI Disclosures (Wed May 12 2010 - 00:08:36 EEST)
• ZDI-10-084: HP OpenView NNM getnnmdata.exe CGI Invalid MaxAge Remote Code Execution Vulnerability
  • ZDI Disclosures (Wed May 12 2010 - 00:09:51 EEST)
• ZDI-10-085: HP OpenView NNM getnnmdata.exe CGI Invalid ICount Remote Code Execution Vulnerability
  • ZDI Disclosures (Wed May 12 2010 - 00:11:49 EEST)
• ZDI-10-086: HP OpenView NNM getnnmdata.exe CGI Invalid Hostname Remote Code Execution Vulnerability
  • ZDI Disclosures (Wed May 12 2010 - 00:13:32 EEST)
• ZDI-10-087: Adobe Shockwave Invalid Offset Memory Corruption Remote Code Execution Vulnerability
  • ZDI Disclosures (Wed May 12 2010 - 00:19:55 EEST)
• ZDI-10-088: Adobe Shockwave Player 3D Parsing Memory Corruption Vulnerability
  • ZDI Disclosures (Wed May 12 2010 - 00:26:00 EEST)
• ZDI-10-089: Adobe Shockwave Director PAMI Chunk Remote Code Execution Vulnerability
  • ZDI Disclosures (Wed May 12 2010 - 00:28:41 EEST)
• {PRL} Microsoft Windows Outlook Express and Windows Mail Integer Overflow
  • Francis Provencher (Tue May 11 2010 - 15:54:56 EEST)

Last message date: Mon May 31 2010 - 21:56:16 EEST
Archived on: Mon May 31 2010 - 21:56:17 EEST

This archive was generated by hypermail 2b28 : Mon May 31 2010 - 21:56:17 EEST