stdin
By Author

• advisories@intern0t.net
  • Jira Enterprise 4.0.1 - Multiple Low Risk Vulnerabilities (Wed Jul 28 2010 - 11:06:47 EEST)
  • vBulletin - Critical Information Disclosure (Thu Jul 22 2010 - 21:17:00 EEST)
• advisory@htbridge.ch
  • XSS vulnerability in Campsite (Fri Jul 30 2010 - 17:23:03 EEST)
  • XSS vulnerability in Campsite (Fri Jul 30 2010 - 17:23:30 EEST)
  • XSS vulnerability in Theeta CMS (Mon Jul 26 2010 - 23:08:03 EEST)
  • XSS vulnerability in Theeta CMS (Mon Jul 26 2010 - 23:07:59 EEST)
  • XSS vulnerability in SyndeoCMS (Mon Jul 26 2010 - 23:07:55 EEST)
  • XSS vulnerability in Theeta CMS (Mon Jul 26 2010 - 23:07:49 EEST)
  • XSS vulnerability in SyndeoCMS (Mon Jul 26 2010 - 23:07:49 EEST)
  • SQL injection vulnerability in Theeta CMS (Mon Jul 26 2010 - 23:07:40 EEST)
  • XSS vulnerability in SyndeoCMS (Mon Jul 26 2010 - 23:07:31 EEST)
  • XSS vulnerability in Spitfire (Thu Jul 22 2010 - 13:30:07 EEST)
  • XSS vulnerability in Spitfire (Thu Jul 22 2010 - 13:30:18 EEST)
  • XSS vulnerability in Spitfire (Thu Jul 22 2010 - 13:30:30 EEST)
  • XSS vulnerability in Spitfire (Thu Jul 22 2010 - 13:30:46 EEST)
  • XSS vulnerability in Spitfire search (Thu Jul 22 2010 - 13:29:54 EEST)
  • XSS vulnerability in WebPress (Thu Jul 15 2010 - 17:22:54 EEST)
  • XSRF (CSRF) in phpwcms (Thu Jul 15 2010 - 17:22:52 EEST)
  • XSS vulnerability in WebPress (Thu Jul 15 2010 - 17:22:51 EEST)
  • XSRF (CSRF) in Pixie (Thu Jul 15 2010 - 17:22:45 EEST)
  • XSS vulnerability in FestOS (Thu Jul 15 2010 - 17:22:45 EEST)
  • XSRF (CSRF) in Pixie (Thu Jul 15 2010 - 17:22:38 EEST)
  • XSS vulnerability in FestOS (Thu Jul 15 2010 - 17:22:24 EEST)
  • XSS vulnerability in Pixie (Thu Jul 15 2010 - 17:22:21 EEST)
  • Stored XSS vulnerability in Pixie (Thu Jul 15 2010 - 17:22:16 EEST)
  • XSS vulnerability in phpwcms (Thu Jul 15 2010 - 17:22:12 EEST)
  • XSS vulnerability in WebPress (Thu Jul 15 2010 - 17:22:12 EEST)
  • XSS vulnerability in WebPress (Thu Jul 15 2010 - 17:22:11 EEST)
  • XSS vulnerability in Taggon CMS (Thu Jul 15 2010 - 17:22:08 EEST)
  • XSS vulnerability in Pligg search module (Thu Jul 15 2010 - 17:22:06 EEST)
  • XSS vulnerability in Gekko Web Builder (Thu Jul 15 2010 - 17:21:56 EEST)
  • XSS vulnerability in DSite CMS (Thu Jul 15 2010 - 17:21:50 EEST)
  • XSS vulnerability in Diem (Tue Jul 13 2010 - 11:59:03 EEST)
  • SQL injection vulnerability in CMSQLite (Tue Jul 13 2010 - 11:58:58 EEST)
  • XSS vulnerability in Diem (Tue Jul 13 2010 - 11:58:10 EEST)
  • XSS vulnerability in Diem (Tue Jul 13 2010 - 11:59:45 EEST)
  • SQL injection vulnerability in CMSQLite (Tue Jul 13 2010 - 11:57:31 EEST)
  • SQL injection vulnerability in CMSQLite (Tue Jul 13 2010 - 11:59:07 EEST)
  • XSS vulnerability in CMSQLite (Tue Jul 13 2010 - 11:57:11 EEST)
  • XSS vulnerability in CruxCMS (Thu Jul 08 2010 - 17:40:46 EEST)
  • XSS vulnerability in CruxCMS (Thu Jul 08 2010 - 17:40:06 EEST)
  • XSS vulnerability in CruxPA (Thu Jul 08 2010 - 17:29:35 EEST)
  • XSS vulnerability in CruxPA (Thu Jul 08 2010 - 17:28:55 EEST)
  • XSS vulnerability in CruxPA (Thu Jul 08 2010 - 17:27:12 EEST)
  • XSS vulnerability in CruxPA (Thu Jul 08 2010 - 17:26:29 EEST)
• Akita Software Security
  • Akamai Download Manager arbitrary file download & execution (Fri Jul 30 2010 - 12:59:20 EEST)
  • Outlook PR_ATTACH_METHOD file execution vulnerability (Wed Jul 14 2010 - 20:36:44 EEST)
• Alexander Sotirov
  • Pwnie Awards 2010 (Wed Jul 14 2010 - 19:29:59 EEST)
• Alexandr Polyakov
  • [DSECRG-09-040] SAP Netweaver wsnavigator XSS Security Vulnerability (Fri Jul 23 2010 - 11:58:14 EEST)
  • [DSECRG-09-068] SAP NetWaver SLD - multiple XSS (Fri Jul 23 2010 - 12:02:30 EEST)
• Andrea Barisani
  • [oCERT-2010-002] Joomla input sanitization errors (XSS) (Wed Jul 21 2010 - 00:03:34 EEST)
• Andrei Rimsa
  • Pligg Installation File XSS Vulnerability (Wed Jul 07 2010 - 23:02:43 EEST)
  • Pligg Installation File XSS Vulnerability (Wed Jul 07 2010 - 20:35:33 EEST)
  • Exponent Slideshow XSS Vulnerability (Wed Jul 07 2010 - 20:34:56 EEST)
  • RunCMS XSS Vulnerability via User Agent (Wed Jul 07 2010 - 20:36:05 EEST)
  • MODx Installation File XSS Vulnerability (Wed Jul 07 2010 - 20:35:12 EEST)
  • DCP-Portal Multiple XSS Vulnerabilities (Wed Jul 07 2010 - 20:34:33 EEST)
• bill@accensussecurity.com
  • Xlight FTPd Multiple Directory Traversal in SFTP (Tue Jul 06 2010 - 02:51:47 EEST)
• Bkis
  • [Bkis-03-2010] Vulnerability in Flash Slideshow Maker Vulnerability (Thu Jul 01 2010 - 11:51:46 EEST)
• bugreport@itguard.info
  • IIS5.1 Directory Authentication Bypass by using :$I30:$Index_Allocation (Fri Jul 02 2010 - 14:59:18 EEST)
• Cisco Systems Product Security Incident Response Team
  • Cisco Security Advisory: CDS Internet Streamer: Web Server Directory Traversal Vulnerability (Wed Jul 21 2010 - 18:24:06 EEST)
  • Cisco Security Advisory: Hard-Coded SNMP Community Names in Cisco Industrial Ethernet 3000 Series Switches Vulnerability (Wed Jul 07 2010 - 19:00:00 EEST)
• ClubHack
  • ClubHack2010 CFP (Thu Jul 15 2010 - 19:51:51 EEST)
• Crash
  • IrcDelphi DCA-00010 Vulnerability Report (Fri Jul 02 2010 - 23:03:47 EEST)
• Cristofaro Mune
  • IS-2010-006 - D-Link DAP-1160 formFilter buffer overflow (Wed Jul 14 2010 - 13:53:41 EEST)
• Dan Rosenberg
  • FuzzDiff tool (Mon Jul 26 2010 - 23:53:28 EEST)
  • Mac OS X WebDAV kernel extension local denial-of-service (Mon Jul 26 2010 - 16:11:30 EEST)
• david.kurz@majorsecurity.net
  • [MajorSecurity SA-079]PHPKIT WCMS - Multiple stored Cross Site Scripting Issues (Tue Jul 27 2010 - 07:09:31 EEST)
  • [MajorSecurity SA-076]Conpresso CMS - Cross site Scripting vulnerabilities (Fri Jul 16 2010 - 08:18:59 EEST)
• ddivulnalert@ddifrontline.com
  • DDIVRT-2010-29 ALPHA Ethernet Adapter II Web-Manager 3.40.2 Authentication Bypass (Thu Jul 01 2010 - 17:26:12 EEST)
• DeepSec Conference
  • DeepSec 2010 - Call for Papers - REMINDER (Wed Jul 07 2010 - 02:30:01 EEST)
• Dominic
  • London DEFCON July meet - DC4420 - Wed 28th July 2010 (Tue Jul 27 2010 - 10:30:27 EEST)
• egypt@metasploit.com
  • Metasploit Framework 3.4.1 Released (Mon Jul 12 2010 - 19:23:49 EEST)
• Elazar Broad
  • SAPGui BI wadmxhtml.dll Tags Property Heap Corruption (Thu Jul 15 2010 - 19:15:07 EEST)
• Florian Weimer
  • [SECURITY] [DSA 2077-1] New openldap packages fix potential code execution (Thu Jul 29 2010 - 22:08:28 EEST)
  • [SECURITY] [DSA 2076-1] New gnupg2 packages fix potential code execution (Tue Jul 27 2010 - 23:04:48 EEST)
• Francis Provencher
  • {PRL} Novell Groupwise Internet Agent Stack Overflow (Fri Jul 16 2010 - 20:45:41 EEST)
  • {PRL} Novell Groupwise Webaccess Stack Overflow (Thu Jul 15 2010 - 16:42:12 EEST)
• Frank Stuart
  • CVE-2010-2384: Solaris wbem unsafe use of temporary files (Tue Jul 20 2010 - 05:38:54 EEST)
  • CVE-2010-2382: Solaris nfslogd unsafe use of temporary files (Tue Jul 20 2010 - 05:32:55 EEST)
  • CVE-2010-2382: Solaris flar unsafe use of temporary files (Tue Jul 20 2010 - 05:27:45 EEST)
• FreeBSD Security Advisories
  • FreeBSD Security Advisory FreeBSD-SA-10:07.mbuf (Tue Jul 13 2010 - 05:52:09 EEST)
• g1xsystem@windowslive.com
  • DM Filemanager (fckeditor) Remote Arbitrary File Upload Exploit (Sat Jul 24 2010 - 17:06:42 EEST)
  • YACK CMS 10.5.27 Remote File Inclusion Vulnerability (Sat Jul 17 2010 - 16:53:45 EEST)
• Gadi Evron
  • Paper on the law and Implantable Devices security (Mon Jul 26 2010 - 13:45:18 EEST)
• Gerald Carter
  • [LWSA-2010-001] Likewise Open 5.4 & 6.0 (Mon Jul 26 2010 - 18:19:32 EEST)
• Giuseppe Iuculano
  • [SECURITY] [DSA 2074-1] New ncompress packages fix execution of arbitrary code (Wed Jul 21 2010 - 11:29:42 EEST)
  • [SECURITY] [DSA 2072-1] New libpng packages fix several vulnerabilities (Mon Jul 19 2010 - 15:27:24 EEST)
  • [SECURITY] [DSA-2068-1] New python-cjson packages fix denial of service (Sun Jul 11 2010 - 11:23:33 EEST)
• Hafez Kamal
  • [HITB-Ann] Reminder: HITB2010 Malaysia Call for Papers Closing August 9th (Thu Jul 29 2010 - 20:20:18 EEST)
  • [HITB-Announce] HITB Magazine Issue 003 + HITBSecConf2010 - Amsterdam (Mon Jul 05 2010 - 04:21:26 EEST)
• Hashdays CFP
  • Re: hashdays 2010 - Call for Papers (#days CFP) (Tue Jul 13 2010 - 08:55:11 EEST)
• Henri Salo
  • Re: [Full-disclosure] Remote Command Execution in dotDefender Site Management (Wed Jun 30 2010 - 23:56:01 EEST)
• houkouonchi@houkouonchi.jp
  • Re: Re: Two independent vulnerabilities (client and server side) in Quake3 engine and many derived games (Wed Jul 07 2010 - 17:48:46 EEST)
• Ian Maguire
  • Re: pam_captcha username harvest vulnerability (Thu Jul 15 2010 - 21:06:36 EEST)
  • pam_captcha username harvest vulnerability (Tue Jul 06 2010 - 21:04:12 EEST)
• info@securitylab.ir
  • Internet Explorer 8.0 Address Bar Spoofing Vulnerability (Sat Jul 24 2010 - 14:08:33 EEST)
  • Mozilla Firefox 3.5.x Address Bar Spoofing Vulnerability (Wed Jul 21 2010 - 18:35:00 EEST)
  • SeaMonkey 2.0.5 Address Bar Spoofing Vulnerability (Sat Jul 17 2010 - 15:43:57 EEST)
  • Opera Browser Address Bar Spoofing Vulnerability (Thu Jul 15 2010 - 08:34:29 EEST)
  • IE6 css set Denial of Service Vulnerability (Mon Jul 12 2010 - 16:07:44 EEST)
  • Opera Crash by <canvas> Element (Mon Jul 12 2010 - 16:04:47 EEST)
• Insomnia Security
  • Insomnia : ISVA-100730.1 - CMS Multiple SQL injection Vulnerabilities (Fri Jul 30 2010 - 01:29:50 EEST)
• ithilgore
  • A new zombie port scanning attack (Fri Jul 16 2010 - 01:24:47 EEST)
• ivan.sanchez@nullcode.com.ar
  • NTSOFT BBS E-Market Professional = XSS / Remote Execution Code (Mon Jul 05 2010 - 15:03:31 EEST)
• Jamie Strandboge
  • [USN-930-6] Firefox and Xulrunner vulnerability (Mon Jul 26 2010 - 20:38:16 EEST)
  • [USN-957-2] Firefox and Xulrunner vulnerability (Mon Jul 26 2010 - 20:10:05 EEST)
  • [USN-927-6] NSS vulnerability (Fri Jul 23 2010 - 12:13:54 EEST)
  • [USN-957-1] Firefox and Xulrunner vulnerabilities (Fri Jul 23 2010 - 12:28:54 EEST)
  • [USN-930-5] ant, apturl, Epiphany, gluezilla, gnome-python-extras, liferea, mozvoikko, OpenJDK, packagekit, ubufox, webfav, yelp update (Fri Jul 23 2010 - 13:12:30 EEST)
  • [USN-930-4] Firefox and Xulrunner vulnerabilities (Fri Jul 23 2010 - 12:56:49 EEST)
  • [USN-927-7] nspr update (Fri Jul 23 2010 - 12:19:10 EEST)
  • [USN-927-8] Thunderbird update (Fri Jul 23 2010 - 12:38:41 EEST)
  • [USN-956-1] sudo vulnerability (Thu Jul 01 2010 - 00:08:14 EEST)
• jason@modxcms.com
  • Re: MODx Installation File XSS Vulnerability (Wed Jul 07 2010 - 23:22:24 EEST)
• Jon
  • RE: vBulletin - Critical Information Disclosure (Fri Jul 23 2010 - 00:20:59 EEST)
• Jordan Sissel
  • Re: pam_captcha username harvest vulnerability (Thu Jul 15 2010 - 11:04:15 EEST)
• Jose Nicolas Castellano
  • CFP NcN 2010 (Thu Jul 29 2010 - 14:15:10 EEST)
• Juha-Matti Laurio
  • Re: ZDI-10-121: Command Injection Remote Code Execution Vulnerability (Thu Jul 15 2010 - 22:32:06 EEST)
• Kees Cook
  • [USN-964-1] Likewise Open vulnerability (Tue Jul 27 2010 - 00:50:50 EEST)
  • [USN-940-2] Kerberos vulnerability (Wed Jul 21 2010 - 11:36:43 EEST)
  • [USN-962-1] VTE vulnerability (Thu Jul 15 2010 - 21:36:21 EEST)
  • [USN-959-1] PAM vulnerability (Thu Jul 08 2010 - 01:38:25 EEST)
• Kiwicon
  • Kiwicon IV: Our Worst CFP Yet (Fri Jul 16 2010 - 03:30:46 EEST)
• Laurent OUDOT at TEHTRI-Security
  • Security Advisories from TEHTRI-Security at HITB Europe (Sat Jul 03 2010 - 12:05:07 EEST)
• lilf
  • QQplayer smi File Processing Buffer Overflow Vulnerability (Mon Jul 26 2010 - 09:43:06 EEST)
• madhck@gmail.com
  • Nessus Vulnerabilities (Mon Jul 26 2010 - 20:02:54 EEST)
• Mailing lists at Core Security Technologies
  • Hiding Backdoors in plain sight (Fri Jul 02 2010 - 22:33:02 EEST)
• Marc Deslauriers
  • [USN-958-1] Thunderbird vulnerabilities (Mon Jul 26 2010 - 19:55:47 EEST)
  • [USN-963-1] FreeType vulnerabilities (Tue Jul 20 2010 - 12:46:03 EEST)
  • [USN-961-1] Ghostscript vulnerabilities (Tue Jul 13 2010 - 21:48:00 EEST)
  • [USN-960-1] libpng vulnerabilities (Thu Jul 08 2010 - 16:39:38 EEST)
  • [USN-943-1] Thunderbird vulnerabilities (Tue Jul 06 2010 - 17:31:45 EEST)
• Marc Ruef
  • [scip_Advisory 4143] Shemes Grabbit Malicious NZB Date Denial of Service (Thu Jul 08 2010 - 14:07:34 EEST)
• Mark Thomas
  • [SECURITY] CVE-2010-2227: Apache Tomcat Remote Denial Of Service and Information Disclosure Vulnerability (Fri Jul 09 2010 - 19:31:00 EEST)
• martin@toughtomato.com
  • Re: TTVideo 1.0 Joomla Component SQL Injection Vulnerability (Wed Jul 28 2010 - 02:19:35 EEST)
• Moritz Muehlenhoff
  • [SECURITY] [DSA 2075-1] New xulrunner packages fix several vulnerabilities (Tue Jul 27 2010 - 22:47:37 EEST)
  • [SECURITY] [DSA 2071-1] New libmikmod packages fix several vulnerabilities (Wed Jul 14 2010 - 23:14:07 EEST)
  • [SECURITY] [DSA 2070-1] New freetype packages fix several vulnerabilities (Wed Jul 14 2010 - 23:04:45 EEST)
  • [SECURITY] [DSA 2066-1] New wireshark packages fix several vulnerabilities (Thu Jul 01 2010 - 22:42:45 EEST)
• MustLive
  • Day of bugs in WordPress 2 (Thu Jul 29 2010 - 23:55:15 EEST)
  • New vulnerabilities in Cetera eCommerce (Wed Jul 28 2010 - 20:28:41 EEST)
  • Vulnerabilities in Cetera eCommerce (Wed Jul 28 2010 - 20:00:22 EEST)
  • Multiple vulnerabilities in MC Content Manager (Sun Jul 25 2010 - 19:51:22 EEST)
  • [Suspected Spam]SQL Injection vulnerability in coWiki (Wed Jul 21 2010 - 19:27:49 EEST)
  • [Suspected Spam]Cross-Site Scripting vulnerabilities in SimpGB (Wed Jul 14 2010 - 20:41:30 EEST)
  • Vulnerabilities in SimpNews (Fri Jul 09 2010 - 17:00:04 EEST)
  • [Suspected Spam]File Download and DoS vulnerabilities in Firefox, Internet Explorer, Chrome and Opera (Sat Jul 03 2010 - 23:18:33 EEST)
  • Vulnerabilities in WP-UserOnline for WordPress (Thu Jul 01 2010 - 16:18:22 EEST)
• noreply@telus.com
  • TELUS Security Labs VR - iSCSI target Multiple Implementations iSNS Stack Buffer Overflow (Fri Jul 02 2010 - 22:19:48 EEST)
• Onapsis Research Labs
  • [Onapsis Security Advisory 2010-006] SAP J2EE Web Services Navigator Cross-Site Scripting (Wed Jul 21 2010 - 01:23:27 EEST)
• P0ndera@msn.com
  • Re: Two independent vulnerabilities (client and server side) in Quake3 engine and many derived games (Tue Jul 06 2010 - 00:57:22 EEST)
• Paul Craig
  • iKAT - Interactive Kiosk Attack Tool v3 : Defcon 18 Edition (Sun Jul 25 2010 - 10:15:12 EEST)
• paul.sec117@gmail.com
  • Re: Re: IIS5.1 Directory Authentication Bypass by using ?:$I30:$Index_Allocation? (Mon Jul 12 2010 - 23:14:36 EEST)
• Pedro Andujar
  • Editran editcp V4.1 R7 - Remote buffer overflow (Mon Jul 05 2010 - 14:50:13 EEST)
• praveen_recker@sify.com
  • Heap Overflow/DoS Vulnerability in Media Player Classic (Mon Jul 26 2010 - 21:28:28 EEST)
  • VLC Player M3U file ftp:// URI Handler Remote Stack Buffer Overflow (Mon Jul 05 2010 - 21:55:29 EEST)
• Raphael Geissert
  • [SECURITY] [DSA-2069-1] New znc packages fix denial of service (Mon Jul 12 2010 - 05:03:07 EEST)
  • [SECURITY] [DSA-2067-1] New mahara packages fix several vulnerabilities (Fri Jul 02 2010 - 19:16:39 EEST)
• research
  • PR09-16: Juniper Secure Access series (Juniper IVE) Cross-Site Scripting Vulnerability (Wed Jul 14 2010 - 18:21:10 EEST)
• Richard.haf@gmail.com
  • Re: IIS5.1 Directory Authentication Bypass by using ?:$I30:$Index_Allocation? (Mon Jul 12 2010 - 18:39:11 EEST)
• rimsa@live.com
  • Re: MODx Installation File XSS Vulnerability (Thu Jul 08 2010 - 01:59:39 EEST)
  • Re: RunCMS XSS Vulnerability via User Agent (Thu Jul 08 2010 - 01:58:27 EEST)
• Rodrigo Branco
  • PoC for CVE-2010-1869 (ghostscript) and CVE-2010-1039 (rpc.pcnfsd) (Sun Jul 18 2010 - 21:31:54 EEST)
• Rodrigo Rubira Branco (BSDaemon)
  • Call For Papers - Hackers 2 Hackers Conference 7th Edition - Brazil (Sat Jul 24 2010 - 23:24:18 EEST)
• Salvatore Fresta aka Drosophila
  • PBBooking 1.0.4_3 Joomla Component Multiple Blind SQL Injection (Thu Jul 29 2010 - 12:37:59 EEST)
  • PhotoMap Gallery 1.6.0 Joomla Component Multiple Blind SQL Injection (Wed Jul 28 2010 - 16:58:56 EEST)
  • Appointinator 1.0.1 Joomla Component Multiple Remote Vulnerabilities (Wed Jul 28 2010 - 01:01:28 EEST)
  • TTVideo 1.0 Joomla Component SQL Injection Vulnerability (Tue Jul 27 2010 - 10:34:04 EEST)
  • WhiteBoard 0.1.30 Multiple Blind SQL Injection Vulnerabilities (Sun Jul 25 2010 - 23:43:14 EEST)
  • RedShop 1.0.23.1 Joomla Component Blind SQL Injection Vulnerability (Thu Jul 15 2010 - 22:14:23 EEST)
  • Sandbox 2.0.3 Multiple Remote Vulnerabilities (Wed Jul 07 2010 - 02:43:49 EEST)
  • ArtForms 2.1b7.2 RC2 Joomla Component Multiple Remote Vulnerabilities (Wed Jul 07 2010 - 20:44:29 EEST)
  • iScripts MultiCart 2.2 Multiple SQL Injection Vulnerability (Sun Jul 04 2010 - 02:03:42 EEST)
  • Canteen Joomla Component 1.0 Multiple Remote Vulnerabilities (Sun Jul 04 2010 - 15:22:00 EEST)
  • iScripts SocialWare 2.2.x Multiple Remote Vulnerability (Sat Jul 03 2010 - 19:12:09 EEST)
  • iScripts CyberMatch 1.0 Blind SQL Injection Vulnerability (Fri Jul 02 2010 - 02:50:42 EEST)
  • iScripts ReserveLogic 1.0 SQL Injection Vulnerability (Fri Jul 02 2010 - 01:20:17 EEST)
  • REVISION: iScripts EasySnaps 2.0 Multiple SQL Injection Vulnerabilities (Fri Jul 02 2010 - 00:38:46 EEST)
• Secunia Research
  • Secunia Research: Autonomy KeyView wkssr.dll Record Parsing Buffer Overflows (Wed Jul 28 2010 - 10:02:21 EEST)
  • Secunia Research: Autonomy KeyView wkssr.dll String Indexing Vulnerability (Wed Jul 28 2010 - 10:01:38 EEST)
  • Secunia Research: Autonomy KeyView wkssr.dll Integer Underflow Vulnerability (Wed Jul 28 2010 - 10:01:02 EEST)
  • Secunia Research: Autonomy KeyView wosr.dll Data Block Parsing Buffer Overflow (Wed Jul 28 2010 - 10:00:28 EEST)
  • Secunia Research: Autonomy KeyView rtfsr.dll RTF Parsing Signedness Error (Wed Jul 28 2010 - 09:59:46 EEST)
  • Secunia Research: Autonomy KeyView wkssr.dll Floating Point Conversion Buffer Overflow (Wed Jul 28 2010 - 09:58:55 EEST)
  • Secunia Research: Autonomy KeyView Compound File Parsing Buffer Overflow (Wed Jul 28 2010 - 09:58:08 EEST)
  • Secunia Research: GIGABYTE Dldrv2 ActiveX Control Unsafe Methods (Thu Jul 15 2010 - 14:20:24 EEST)
  • Secunia Research: GIGABYTE Dldrv2 ActiveX Control Array Indexing Vulnerability (Thu Jul 15 2010 - 14:20:31 EEST)
  • Secunia Research: Joomla BookLibrary From Same Author Module "id" SQL Injection (Mon Jul 05 2010 - 11:53:53 EEST)
• security curmudgeon
  • Re: XSS vulnerability in PortalApp (Tue Jul 06 2010 - 00:40:51 EEST)
  • Re: SQL injection vulnerability in TomatoCMS (Tue Jul 06 2010 - 00:19:04 EEST)
  • Re: SQL injection vulnerability in WebDB (Mon Jul 05 2010 - 21:25:55 EEST)
  • Re: Cherokee Web Server 0.5.3 Multiple Vulnerabilities (Fri Jul 02 2010 - 03:16:40 EEST)
• security-alert@hp.com
  • [security bulletin] HPSBUX02556 SSRT100014 rev.2 - HP-UX Running rpc.ttdbserver, Remote Execution of Arbitrary Code (Thu Jul 29 2010 - 16:02:20 EEST)
  • [security bulletin] HPSBMA02549 SSRT090158 rev.2 - HP Insight Control Power Management for Windows, Local Unauthorized Read Access to Data (Wed Jul 28 2010 - 16:25:38 EEST)
  • [security bulletin] HPSBMA02558 SSRT100158 rev.2 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code (Wed Jul 21 2010 - 21:04:20 EEST)
  • [security bulletin] HPSBMA02551 SSRT100065 rev.2 - HP Virtual Connect Enterprise Manager for Windows, Remote Cross Site Scripting (XSS) (Wed Jul 21 2010 - 21:47:12 EEST)
  • [security bulletin] HPSBMA02557 SSRT100025 rev.1- HP OpenView Network Node Manager (OV NNM) Running on Windows, Remote Execution of Arbitrary Code (Tue Jul 20 2010 - 23:51:46 EEST)
  • [security bulletin] HPSBMA02558 SSRT010158 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code (Tue Jul 20 2010 - 23:52:25 EEST)
  • [security bulletin] HPSBMA02425 SSRT080091 rev.3 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code (Tue Jul 20 2010 - 16:16:29 EEST)
  • [security bulletin] HPSBMA02550 SSRT100170 rev.2 - HP Insight Software Installer for Windows, Local Unauthorized Access to Data, Remote Cross Site Request Forgery (CSRF) (Thu Jul 15 2010 - 16:25:51 EEST)
  • [security bulletin] HPSBUX02556 SSRT100014 rev.1 - HP-UX Running rpc.ttdbserver, Remote Execution of Arbitrary Code (Wed Jul 14 2010 - 19:39:09 EEST)
  • [security bulletin] HPSBMA02554 SSRT100018 rev.2 - HP Insight Control for Linux, Remote Execution of Arbitrary Code, Remote Denial of Service (DoS), Remote Unauthorized Access (Wed Jul 14 2010 - 19:26:05 EEST)
  • [security bulletin] HPSBMA02439 SSRT080082 rev.3 - HP OpenView SNMP Emanate Master Agent Running on HP-UX, Linux, Solaris, and Windows, Remote Unauthorized Access (Wed Jul 14 2010 - 21:03:15 EEST)
  • [security bulletin] HPSBOV02539 SSRT090267 rev.1 - HP OpenVMS Auditing, Local Information Disclosure, Elevation of Privilege, Denial of Service (DoS) (Tue Jul 13 2010 - 20:48:03 EEST)
  • [security bulletin] HPSBMA02555 SSRT100064 rev.1 - HP Client Automation Enterprise Infrastructure (Radia) Remote Disclosure of Information (Tue Jul 13 2010 - 20:40:33 EEST)
  • [security bulletin] HPSBMA02553 SSRT100184 rev.1 - HP Insight Control Server Migration for Windows, Local and Remote Unauthorized Access to Data, Remote Cross Site Request Forgery (CSRF), Cross Site Scripting (XSS) (Tue Jul 13 2010 - 16:24:05 EEST)
  • [security bulletin] HPSBMA02551 SSRT100165 rev.1 - HP Virtual Connect Enterprise Manager for Windows, Remote Cross Site Scripting (XSS) (Tue Jul 13 2010 - 16:23:57 EEST)
  • [security bulletin] HPSBMA02550 SSRT100170 rev.1 - HP Insight Software Installer for Windows, Local Unauthorized Access to Data, Remote Cross Site Request Forgery (CSRF) (Tue Jul 13 2010 - 16:23:46 EEST)
  • [security bulletin] HPSBTU02453 SSRT091037 rev.1 - HP Tru64 UNIX BIND Server, Denial of Service (DoS) (Tue Jul 13 2010 - 16:11:55 EEST)
  • [security bulletin] HPSBUX02451 SSRT090137 rev.1 - HP-UX Running BIND, Remote Denial of Service (DoS) (Tue Jul 13 2010 - 16:11:47 EEST)
  • [security bulletin] HPSBUX02450 SSRT090141 rev1 - HP-UX ttrace(2), Local Denial of Service (DoS) (Tue Jul 13 2010 - 16:11:38 EEST)
  • [security bulletin] HPSBMA02549 SSRT090158 rev.1 - HP Insight Control Power Management for Windows, Local Unauthorized Access to Data, Denial of Service (DoS) (Tue Jul 13 2010 - 16:10:58 EEST)
  • [security bulletin] HPSBMA02548 SSRT100126 rev.1 - HP Insight Orchestration for Windows, Remote Unauthorized Access (Tue Jul 13 2010 - 16:10:29 EEST)
  • [security bulletin] HPSBMA02547 SSRT100179 rev.1 - HP Systems Insight Manager (SIM) for HP-UX, Linux, and Windows, Remote Execution of Arbitrary Code and Other Vulnerabilities (Tue Jul 13 2010 - 16:10:19 EEST)
• security@mandriva.com
  • [ MDVSA-2010:142 ] openldap (Wed Jul 28 2010 - 22:15:00 EEST)
  • [ MDVSA-2010:141 ] samba (Tue Jul 27 2010 - 19:43:00 EEST)
  • [ MDVSA-2010:140 ] php (Tue Jul 27 2010 - 18:02:00 EEST)
  • [ MDVSA-2010:138 ] iputils (Fri Jul 23 2010 - 15:22:00 EEST)
  • [ MDVSA-2010:137 ] freetype2 (Sun Jul 18 2010 - 23:10:00 EEST)
  • [ MDVSA-2010:135 ] ghostscript (Fri Jul 16 2010 - 03:38:00 EEST)
  • [ MDVSA-2010:136 ] ghostscript (Fri Jul 16 2010 - 03:43:00 EEST)
  • [ MDVSA-2010:134 ] ghostscript (Fri Jul 16 2010 - 03:15:00 EEST)
  • [ MDVSA-2010:133 ] libpng (Fri Jul 16 2010 - 01:57:01 EEST)
  • [ MDVSA-2010:132 ] python (Wed Jul 14 2010 - 20:45:01 EEST)
  • [ MDVSA-2010:131 ] iscsitarget (Mon Jul 12 2010 - 21:32:00 EEST)
  • [ MDVSA-2010:128 ] lftp (Wed Jul 07 2010 - 00:36:01 EEST)
  • [ MDVSA-2010:129 ] heimdal (Wed Jul 07 2010 - 19:10:00 EEST)
  • [ MDVSA-2010:130 ] heimdal (Wed Jul 07 2010 - 19:25:00 EEST)
  • [ MDVSA-2010:127 ] imlib2 (Fri Jul 02 2010 - 18:53:00 EEST)
• Security_Alert@emc.com
  • ESA-2010-012: EMC Disk Library (EDL) Denial Of Service Vulnerability (Fri Jul 30 2010 - 18:03:59 EEST)
  • ESA-2010-011: RSA, The Security Division of EMC, announces a fix for potential security vulnerability in RSAR Federated Identity Manager (Wed Jul 21 2010 - 16:43:22 EEST)
• sh4v@n3t-datagrams.net
  • XSS holes dotDefender (Sat Jul 10 2010 - 00:47:29 EEST)
• Shreyas Zare
  • Re: Internet Explorer 8.0 Address Bar Spoofing Vulnerability (Mon Jul 26 2010 - 19:30:34 EEST)
• spider@foofus.net
  • Foofus.net Security Advisory: Symantec AMS Intel Alert Handler service Design Flaw (Mon Jul 26 2010 - 16:00:19 EEST)
• Thijs Kinkhorst
  • [SECURITY] [DSA 2073-1] New mlmmj packages fix directory traversal (Tue Jul 20 2010 - 22:31:27 EEST)
• thomas@jsthosting.com
  • cPanel XSS Vulnerability (Wed Jul 14 2010 - 19:38:36 EEST)
• Tobias Glemser
  • OWASP Appsec Germany Call for Papers (Wed Jul 14 2010 - 20:31:18 EEST)
• Tom Ritter
  • Microsoft ClickOnce MITM Vulnerabilities (Sat Jul 17 2010 - 18:30:52 EEST)
• VMware Security Team
  • VMSA-2010-0012 VMware vCenter Update Manager fix for Jetty Web server addresses important security vulnerabilities (Mon Jul 19 2010 - 19:27:16 EEST)
  • VMSA-2010-0011 VMware Studio 2.1 addresses security vulnerabilities in virtual appliances created with Studio 2.0. (Tue Jul 13 2010 - 08:29:42 EEST)
• VSR Advisories
  • CVE-2010-2375: WebLogic Plugin HTTP Injection via Encoded URLs (Wed Jul 14 2010 - 01:29:20 EEST)
  • VSR Advisory: Multiple Cisco CSS / ACE Client Certificate and HTTP Header Manipulation Vulnerabilities (Fri Jul 02 2010 - 16:12:27 EEST)
• VUPEN Security Research
  • VUPEN Security Research - HP OpenView Network Node Manager "ov.dll" Buffer Overflow Vulnerability (CVE-2010-2704) (Wed Jul 21 2010 - 21:27:54 EEST)
  • VUPEN Security Research - HP OpenView Network Node Manager "nnmrptconfig.exe" Buffer Overflow (CVE-2010-2703) (Wed Jul 21 2010 - 21:26:45 EEST)
  • VUPEN Security Research - Winamp Player FLV Data Processing Multiple Overflow Vulnerabilities (Tue Jul 13 2010 - 17:03:05 EEST)
• VUPEN Web Security
  • Zoph Multiple Parameter Cross Site Scripting Vulnerabilities (Fri Jul 02 2010 - 16:49:38 EEST)
• yuval.lerner@topmanage.com.pa
  • Re: SAP's web module OLK SQL Injection vulnerability (Thu Jul 01 2010 - 18:57:19 EEST)
• ZDI Disclosures
  • ZDI-10-136: Novell Teaming ajaxUploadImageFile Remote Code Execution Vulnerability (Wed Jul 21 2010 - 22:01:11 EEST)
  • ZDI-10-137: Hewlett-Packard OpenView NNM webappmon.exe execvp_nc Remote Code Execution Vulnerability (Wed Jul 21 2010 - 22:03:53 EEST)
  • ZDI-10-135: Novell Groupwise WebAccess Multiple Cross-Site Scripting Vulnerabilities (Wed Jul 21 2010 - 03:34:48 EEST)
  • ZDI-10-134: Mozilla Firefox DOM Attribute Cloning Remote Code Execution Vulnerability (Wed Jul 21 2010 - 03:34:03 EEST)
  • ZDI-10-133: Mozilla Firefox CSS font-face Remote Code Execution Vulnerability (Wed Jul 21 2010 - 03:27:07 EEST)
  • ZDI-10-132: Mozilla Firefox Plugin Parameter EnsureCachedAttrParamArrays Remote Code Execution Vulnerability (Wed Jul 21 2010 - 03:25:17 EEST)
  • ZDI-10-131: Mozilla Firefox nsTreeSelection Dangling Pointer Remote Code Execution Vulnerability (Wed Jul 21 2010 - 03:23:24 EEST)
  • ZDI-10-130: Mozilla Firefox NodeIterator Remote Code Execution Vulnerability (Wed Jul 21 2010 - 03:21:10 EEST)
  • ZDI-10-129: Novell Netware Groupwise Internet Gateway Remote Code Execution Vulnerability (Fri Jul 16 2010 - 20:07:46 EEST)
  • ZDI-10-128: Ipswitch Imail Server Queuemgr Format String Remote Code Execution Vulnerability (Thu Jul 15 2010 - 22:20:24 EEST)
  • ZDI-10-127: Ipswitch Imail Server Mailing List Remote Code Execution Vulnerability (Thu Jul 15 2010 - 22:18:33 EEST)
  • ZDI-10-126: Ipswitch Imail Server List Mailer Reply-To Address Remote Code Execution Vulnerability (Thu Jul 15 2010 - 22:16:37 EEST)
  • ZDI-10-125: IBM SolidDB solid.exe Handshake Request Username Field Remote Code Execution Vulnerability (Wed Jul 14 2010 - 01:38:35 EEST)
  • ZDI-10-124: Oracle Secure Backup Web Interface Various Post-Auth Command Injection Remote Code Execution Vulnerabilities (Wed Jul 14 2010 - 01:24:50 EEST)
  • ZDI-10-123: Oracle Secure Backup Administration Authentication Bypass Vulnerability (Wed Jul 14 2010 - 01:21:35 EEST)
  • ZDI-10-122: Oracle Secure Backup Administration Command Injection Remote Code Execution Vulnerability (Wed Jul 14 2010 - 01:19:05 EEST)
  • ZDI-10-121: Command Injection Remote Code Execution Vulnerability (Wed Jul 14 2010 - 01:16:39 EEST)
  • ZDI-10-120: Oracle Secure Backup Administration objectname Command Injection Remote Code Execution Vulnerability (Wed Jul 14 2010 - 01:13:05 EEST)
  • ZDI-10-119: Oracle Secure Backup Administration $other Variable Command Injection Remote Code Execution Vulnerability (Wed Jul 14 2010 - 01:08:40 EEST)
  • ZDI-10-118: Oracle Secure Backup Administration uname Authentication Bypass Vulnerability (Wed Jul 14 2010 - 01:06:04 EEST)
  • TPTI-10-04: Oracle Secure Backup Scheduler Service Remote Code Execution Vulnerability (Wed Jul 14 2010 - 00:57:05 EEST)
  • ZDI-10-117: Microsoft Office Access AccWizObjects ActiveX Control Uninitialized Imports Remote Code Execution Vulnerability (Tue Jul 13 2010 - 20:56:41 EEST)

Last message date: Fri Jul 30 2010 - 22:47:30 EEST
Archived on: Fri Jul 30 2010 - 22:47:30 EEST

This archive was generated by hypermail 2b28 : Fri Jul 30 2010 - 22:47:30 EEST