456 messages sorted by: [ author ] [ date ] [ thread ]

Starting: Mon Oct 01 2007 - 12:27:20 CDT
Ending: Wed Oct 31 2007 - 16:08:28 CDT

• (tool announcement) bunny the fuzzer
  • Michal Zalewski (Wed Oct 31 2007 - 15:51:39 CDT)
• 0day: Hacking secured CITRIX from outside
  • pdp (architect) (Wed Oct 10 2007 - 10:47:23 CDT)
• 0day: mIRC pwns Windows
  • Gavin Hanover (Thu Oct 04 2007 - 08:47:31 CDT)
  • Fred Elliot (Thu Oct 04 2007 - 12:45:36 CDT)
  • Greg Rubin (Thu Oct 04 2007 - 11:04:06 CDT)
  • 3APA3A (Thu Oct 04 2007 - 06:12:02 CDT)
  • Gregory Rubin (Wed Oct 03 2007 - 13:47:47 CDT)
  • Gavin Hanover (Wed Oct 03 2007 - 14:59:45 CDT)
  • jinc4fareijjhotmail.com (Wed Oct 03 2007 - 11:06:29 CDT)
• 3Com WIFI router remote administration vulnerability.
  • Guy Mizrahi (Wed Oct 10 2007 - 09:14:01 CDT)
• 3proxy 0.5.3j released (bugfix)
  • 3APA3A (Tue Oct 23 2007 - 14:08:51 CDT)
• [ GLSA 200709-18 ] Bugzilla: Multiple vulnerabilities
  • Raphael Marichez (Sun Sep 30 2007 - 15:23:17 CDT)
• [ GLSA 200710-01 ] RPCSEC_GSS library: Buffer overflow
  • Pierre-Yves Rofes (Thu Oct 04 2007 - 16:45:55 CDT)
• [ GLSA 200710-02 ] PHP: Multiple vulnerabilities
  • Raphael Marichez (Sun Oct 07 2007 - 04:24:06 CDT)
• [ GLSA 200710-03 ] libvorbis: Multiple vulnerabilities
  • Raphael Marichez (Sun Oct 07 2007 - 15:07:04 CDT)
• [ GLSA 200710-04 ] libsndfile: Buffer overflow
  • Raphael Marichez (Sun Oct 07 2007 - 15:22:01 CDT)
• [ GLSA 200710-05 ] QGit: Insecure temporary file creation
  • Pierre-Yves Rofes (Sun Oct 07 2007 - 15:56:34 CDT)
• [ GLSA 200710-06 ] OpenSSL: Multiple vulnerabilities
  • Pierre-Yves Rofes (Sun Oct 07 2007 - 16:32:22 CDT)
• [ GLSA 200710-07 ] Tk: Buffer overflow
  • Raphael Marichez (Sun Oct 07 2007 - 17:06:09 CDT)
• [ GLSA 200710-08 ] KOffice, KWord, KPDF, KDE Graphics Libraries: Stack-based buffer overflow
  • Pierre-Yves Rofes (Tue Oct 09 2007 - 17:09:27 CDT)
• [ GLSA 200710-09 ] NX 2.1: User-assisted execution of arbitrary code
  • Pierre-Yves Rofes (Tue Oct 09 2007 - 17:25:54 CDT)
• [ GLSA 200710-10 ] SKK Tools: Insecure temporary file creation
  • Raphael Marichez (Fri Oct 12 2007 - 15:44:16 CDT)
• [ GLSA 200710-11 ] X Font Server: Multiple Vulnerabilities
  • Pierre-Yves Rofes (Fri Oct 12 2007 - 16:30:47 CDT)
• [ GLSA 200710-12 ] T1Lib: Buffer overflow
  • Pierre-Yves Rofes (Fri Oct 12 2007 - 17:08:59 CDT)
• [ GLSA 200710-13 ] Ampache: Multiple vulnerabilities
  • Pierre-Yves Rofes (Sat Oct 13 2007 - 06:35:06 CDT)
• [ GLSA 200710-14 ] DenyHosts: Denial of Service
  • Pierre-Yves Rofes (Sat Oct 13 2007 - 06:43:02 CDT)
• [ GLSA 200710-15 ] KDM: Local privilege escalation
  • Pierre-Yves Rofes (Sun Oct 14 2007 - 17:15:40 CDT)
• [ GLSA 200710-16 ] X.Org X server: Composite local privilege escalation
  • Pierre-Yves Rofes (Sun Oct 14 2007 - 17:38:27 CDT)
• [ GLSA 200710-17 ] Balsa: Buffer overflow
  • Raphael Marichez (Tue Oct 16 2007 - 17:27:06 CDT)
• [ GLSA 200710-18 ] util-linux: Local privilege escalation
  • Raphael Marichez (Thu Oct 18 2007 - 15:06:37 CDT)
• [ GLSA 200710-19 ] The Sleuth Kit: Integer underflow
  • Raphael Marichez (Thu Oct 18 2007 - 16:38:53 CDT)
• [ GLSA 200710-20 ] PDFKit, ImageKits: Buffer overflow
  • Raphael Marichez (Thu Oct 18 2007 - 17:46:04 CDT)
• [ GLSA 200710-21 ] TikiWiki: Arbitrary command execution
  • Raphael Marichez (Sat Oct 20 2007 - 15:36:30 CDT)
• [ GLSA 200710-22 ] TRAMP: Insecure temporary file creation
  • Raphael Marichez (Sat Oct 20 2007 - 15:55:06 CDT)
• [ GLSA 200710-23 ] Star: Directory traversal vulnerability
  • Raphael Marichez (Mon Oct 22 2007 - 16:38:14 CDT)
• [ GLSA 200710-24 ] OpenOffice.org: Heap-based buffer overflow
  • Raphael Marichez (Tue Oct 23 2007 - 02:13:49 CDT)
• [ GLSA 200710-25 ] MLDonkey: Privilege escalation
  • Raphael Marichez (Wed Oct 24 2007 - 16:43:02 CDT)
• [ GLSA 200710-26 ] HPLIP: Privilege escalation
  • Raphael Marichez (Wed Oct 24 2007 - 16:59:20 CDT)
• [ GLSA 200710-27 ] ImageMagick: Multiple vulnerabilities
  • Raphael Marichez (Wed Oct 24 2007 - 17:17:09 CDT)
• [ GLSA 200710-28 ] Qt: Buffer overflow
  • Raphael Marichez (Thu Oct 25 2007 - 16:46:24 CDT)
• [ GLSA 200710-29 ] Sylpheed, Claws Mail: User-assisted remote execution of arbitrary code
  • Raphael Marichez (Thu Oct 25 2007 - 17:01:46 CDT)
• [ GLSA 200710-30 ] OpenSSL: Remote execution of arbitrary code
  • Pierre-Yves Rofes (Tue Oct 30 2007 - 17:21:28 CDT)
• [ GLSA 200710-31 ] Opera: Multiple vulnerabilities
  • Raphael Marichez (Tue Oct 30 2007 - 15:53:37 CDT)
• [ MDKSA-2007:191 ] - Updated libsndfile packages fix vulnerability
  • securitymandriva.com (Mon Oct 01 2007 - 15:31:08 CDT)
• [ MDKSA-2007:192 ] - Updated mplayer packages fix vulnerability
  • securitymandriva.com (Mon Oct 01 2007 - 18:52:58 CDT)
• [ MDKSA-2007:193 ] - Updated openssl packages fix vulnerabilities
  • securitymandriva.com (Thu Oct 04 2007 - 18:56:22 CDT)
• [ MDKSA-2007:194 ] - Updated libvorbis packages fix vulnerabilities
  • securitymandriva.com (Wed Oct 10 2007 - 21:11:15 CDT)
• [ MDKSA-2007:195 ] - Updated kernel packages fix multiple vulnerabilities and bugs
  • securitymandriva.com (Mon Oct 15 2007 - 20:02:39 CDT)
• [ MDKSA-2007:196 ] - Updated kernel packages fix multiple vulnerabilities and bugs
  • securitymandriva.com (Mon Oct 15 2007 - 20:04:26 CDT)
• [ MDKSA-2007:197 ] - Updated tar packages prevent buffer overflow
  • securitymandriva.com (Mon Oct 15 2007 - 20:34:58 CDT)
• [ MDKSA-2007:198 ] - Updated util-linux packages fix vulnerability
  • securitymandriva.com (Mon Oct 15 2007 - 20:21:59 CDT)
• [ MDKSA-2007:199 ] - Updated phpMyAdmin packages fix multiple vulnerabilities
  • securitymandriva.com (Wed Oct 17 2007 - 14:05:12 CDT)
• [ MDKSA-2007:200 ] - Updated tk packages fix vulnerabilities
  • securitymandriva.com (Thu Oct 18 2007 - 17:02:44 CDT)
• [ MDKSA-2007:201 ] - Updated hplip packages fix vulnerabilities
  • securitymandriva.com (Mon Oct 22 2007 - 20:52:25 CDT)
• [ MDKSA-2007:202 ] - Updated Firefox packages fix multiple vulnerabilities
  • securitymandriva.com (Tue Oct 23 2007 - 13:06:58 CDT)
• [Aria-Security.Net] CodeWidgets.Com Online Event Registration Multiple login SQL Injection
  • AdvisoryAria-Security.Net, (Tue Oct 23 2007 - 17:43:45 CDT)
• [Aria-Security.Net] dmcms.0.7.0 SQL Injection
  • AdvisoryAria-Security.net, (Sun Oct 21 2007 - 12:27:49 CDT)
• [Aria-Security.Net] SearchSimon Lite Cross-Site Scripting Vuln.
  • AdvisoryAria-Security.Net, (Fri Oct 19 2007 - 23:46:49 CDT)
• [Aria-Security] Stuffed Tracker Multiple Cross-Site Scripting VULN
  • AdvisoryAria-Security.Net, (Fri Oct 05 2007 - 17:05:29 CDT)
  • AdvisoryAria-Security.Net, (Thu Oct 04 2007 - 15:18:54 CDT)
• [CAID 35724, 35725, 35726]: CA BrightStor ARCserve Backup Multiple Vulnerabilities
  • Williams, James K (Thu Oct 11 2007 - 13:27:15 CDT)
• [CAID 35754]: CA Host-Based Intrusion Prevention System (CA HIPS) Server Vulnerability
  • Williams, James K (Fri Oct 19 2007 - 08:49:11 CDT)
• [CORRECTED] Microsoft Windows XP SP2/2003 - Macrovision SecDrv.sys privilege escalation (0day)
  • Reversemode (Thu Oct 18 2007 - 11:04:16 CDT)
• [Dailydave] Canada's Response to Black Hat - SecTor 2007
  • Taylor, Gord (Tue Oct 16 2007 - 11:09:37 CDT)
• [ELEYTT] 10PAZDZIERNIK2007
  • Michal Bucko (Wed Oct 10 2007 - 15:25:46 CDT)
• [ELEYTT] Public Advisory 20-10-2007
  • Michal Bucko (Sat Oct 20 2007 - 11:52:27 CDT)
• [Full-disclosure] Remote Desktop Command Fixation Attacks
  • pdp (architect) (Sun Oct 14 2007 - 15:59:19 CDT)
  • Alex Everett (Thu Oct 11 2007 - 13:44:28 CDT)
  • gjgoweytmo.blackberry.net (Thu Oct 11 2007 - 07:27:48 CDT)
  • Pete Simpson (Fri Oct 12 2007 - 03:25:06 CDT)
  • gjgoweytmo.blackberry.net (Thu Oct 11 2007 - 07:27:48 CDT)
  • Paul Melson (Thu Oct 11 2007 - 09:12:15 CDT)
  • pdp (architect) (Thu Oct 11 2007 - 08:14:53 CDT)
  • gboyce (Thu Oct 11 2007 - 07:37:47 CDT)
• [Full-disclosure] The Death of Defence in Depth ? - An invitation to Hack.lu
  • Thierry Zoller (Tue Oct 16 2007 - 13:15:33 CDT)
  • Felix 'FX' Lindner (Wed Oct 10 2007 - 03:40:54 CDT)
• [Full-disclosure] Tikiwiki 1.9.8 exploit ITW
  • 3APA3A (Fri Oct 12 2007 - 05:23:02 CDT)
• [Full-disclosure] URI handling woes in Acrobat Reader, Netscape, Miranda, Skype
  • Thierry Zoller (Tue Oct 09 2007 - 16:18:38 CDT)
  • KJK::Hyperion (Sun Oct 07 2007 - 19:45:24 CDT)
  • Valdis.Kletnieksvt.edu (Sun Oct 07 2007 - 10:21:01 CDT)
  • Brett Moore (Mon Oct 08 2007 - 22:29:01 CDT)
  • KJK::Hyperion (Sun Oct 07 2007 - 22:49:35 CDT)
  • Roger A. Grimes (Sat Oct 06 2007 - 20:30:20 CDT)
  • Thierry Zoller (Sun Oct 07 2007 - 12:58:25 CDT)
  • Thierry Zoller (Sat Oct 06 2007 - 11:13:21 CDT)
• [Full-disclosure] URI handling woes in Acrobat Reader, Netscape,Miranda, Skype
  • gjgoweytmo.blackberry.net (Sun Oct 07 2007 - 22:34:13 CDT)
  • Geo. (Sun Oct 07 2007 - 21:52:31 CDT)
  • Glynn Clements (Sun Oct 07 2007 - 08:40:59 CDT)
  • Morning Wood (Mon Oct 08 2007 - 05:51:52 CDT)
  • Geo. (Sun Oct 07 2007 - 00:40:32 CDT)
  • Geo. (Sun Oct 07 2007 - 22:03:03 CDT)
  • 3APA3A (Mon Oct 08 2007 - 04:19:29 CDT)
  • Kurt Dillard (Sat Oct 06 2007 - 13:52:28 CDT)
  • Thierry Zoller (Sat Oct 06 2007 - 12:06:51 CDT)
  • Geo. (Sat Oct 06 2007 - 11:43:16 CDT)
• [gentoo-announce] [ GLSA 200710-30 ] OpenSSL: Remote execution of arbitrary code
  • Steffan Baron (Tue Oct 30 2007 - 18:53:00 CDT)
• [GS07-02] RSA Keon Multiple Cross-Site Scripting Vulnerabilities
  • Fatih Ozavci (Wed Oct 24 2007 - 05:04:28 CDT)
• [PoC] DNS Recursion bandwidth amplification
  • Shadow (Mon Oct 22 2007 - 22:06:27 CDT)
• [RISE-2007002] Borland InterBase Multiple Buffer Overflow Vulnerabilities
  • RISE Security (Wed Oct 03 2007 - 21:58:20 CDT)
• [RISE-2007003] Firebird Relational Database Multiple Buffer Overflow Vulnerabilities
  • RISE Security (Wed Oct 03 2007 - 21:59:34 CDT)
• [security bulletin] HPSBMA02230 SSRT071436 rev.1 - HP Select Identity, Remote Unauthorized Access
  • security-alerthp.com (Thu Oct 11 2007 - 08:17:57 CDT)
• [security bulletin] HPSBMA02230 SSRT071436 rev.2 - HP Select Identity, Remote Unauthorized Access
  • security-alerthp.com (Tue Oct 16 2007 - 13:01:42 CDT)
• [security bulletin] HPSBMA02236 SSRT061260 rev.2 - HP OpenView Performance Manager (OVPM) Running Shared Trace Service on HP-UX, Solaris, and Windows, Remote Arbitrary Code Execution
  • security-alerthp.com (Wed Oct 31 2007 - 13:47:20 CDT)
• [security bulletin] HPSBMA02237 SSRT061260 rev.2 - HP OpenView Performance Agent (OVPA) Running Shared Trace Service, Remote Arbitrary Code Execution
  • security-alerthp.com (Wed Oct 31 2007 - 13:48:18 CDT)
• [security bulletin] HPSBMA02238 SSRT061260 rev.2 - HP OpenView Reporter Running Shared Trace Service, Remote Arbitrary Code Execution
  • security-alerthp.com (Wed Oct 31 2007 - 13:49:00 CDT)
• [security bulletin] HPSBMA02274 SSRT071445 rev.1 - HP System Management Homepage (SMH) for HP-UX, Remote Cross Site Scripting (XSS)
  • security-alerthp.com (Mon Oct 08 2007 - 15:19:59 CDT)
• [security bulletin] HPSBMA02274 SSRT071445 rev.2 - HP System Management Homepage (SMH) for HP-UX, Remote Cross Site Scripting (XSS)
  • security-alerthp.com (Thu Oct 18 2007 - 10:00:15 CDT)
• [security bulletin] HPSBMA02275 SSRT071445 rev.1 - HP System Management Homepage (SMH) for Linux and Windows, Remote Cross Site Scripting (XSS)
  • security-alerthp.com (Mon Oct 08 2007 - 15:20:49 CDT)
• [security bulletin] HPSBST02280 SSRT071480 rev.1 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS07-055 to MS07-060
  • security-alerthp.com (Tue Oct 16 2007 - 13:04:32 CDT)
• [security bulletin] HPSBTU02276 SSRT071472 rev.1 - HP Tru64 UNIX Running Apache Tomcat, Remote Unauthorized Access, Remote Denial of Service (DoS)
  • security-alerthp.com (Tue Oct 16 2007 - 13:03:04 CDT)
• [security bulletin] HPSBUX01137 SSRT5954 rev.11 - HP-UX Running TCP/IP (IPv4), Remote Denial of Service (DoS)
  • security-alerthp.com (Mon Oct 08 2007 - 15:17:46 CDT)
• [security bulletin] HPSBUX02181 SSRT061289 rev.3 - HP-UX Running IPFilter, Remote Denial of Service (DoS)
  • security-alerthp.com (Mon Oct 08 2007 - 15:18:42 CDT)
• [security bulletin] HPSBUX02262 SSRT071447 rev. 1 - HP-UX running Apache, Remote Arbitrary Code Execution, Cross Site Scripting (XSS)
  • security-alerthp.com (Mon Oct 08 2007 - 15:16:55 CDT)
• [security bulletin] HPSBUX02273 SSRT071476 rev. 1 - HP-UX running Apache, Remote Unauthorized Denial of Service (DoS)
  • security-alerthp.com (Thu Oct 11 2007 - 08:18:48 CDT)
• [security bulletin] HPSBUX02273 SSRT071476 rev.2 - HP-UX Running Apache, Remote Unauthorized Denial of Service (DoS)
  • security-alerthp.com (Thu Oct 18 2007 - 09:59:11 CDT)
• [security bulletin] HPSBUX02277 SSRT071453 rev.1 - HP-UX Running OpenSSL, Local Denial of Service (DoS)
  • security-alerthp.com (Tue Oct 16 2007 - 13:03:51 CDT)
• [SECURITY] [DSA 1362-2] New lighttpd packages fix buffer overflow
  • Steve Kemp (Sun Oct 07 2007 - 10:17:55 CDT)
• [SECURITY] [DSA 1365-3] New id3lib3.8.3 packages fix denial of service
  • dann frazier (Tue Oct 02 2007 - 03:47:49 CDT)
• [SECURITY] [DSA 1372-2] New ktorrent packages fix directory traversal
  • Steve Kemp (Tue Oct 23 2007 - 13:38:13 CDT)
• [SECURITY] [DSA 1379-1] New openssl packages fix arbitrary code execution
  • Noah Meyerhans (Tue Oct 02 2007 - 15:06:48 CDT)
• [SECURITY] [DSA 1379-1] New quagga packages fix denial of service
  • Steve Kemp (Wed Oct 03 2007 - 03:59:11 CDT)
• [SECURITY] [DSA 1379-2] New openssl packages fix arbitrary code execution
  • Noah Meyerhans (Wed Oct 10 2007 - 12:59:21 CDT)
• [SECURITY] [DSA 1380-1] New elinks packages fix information disclosure
  • Steve Kemp (Tue Oct 02 2007 - 17:34:17 CDT)
• [SECURITY] [DSA 1381-1] New Linux 2.6.18 packages fix several vulnerabilities
  • dann frazier (Tue Oct 02 2007 - 21:07:49 CDT)
• [SECURITY] [DSA 1381-2] New Linux 2.6.18 packages fix several vulnerabilities
  • dann frazier (Fri Oct 12 2007 - 18:54:38 CDT)
• [SECURITY] [DSA 1383-1] New gforge packages fix cross-site scripting
  • Thijs Kinkhorst (Thu Oct 04 2007 - 17:22:52 CDT)
• [SECURITY] [DSA 1384-1] New xen-utils packages fix several vulnerabilities
  • Steve Kemp (Fri Oct 05 2007 - 14:33:14 CDT)
• [SECURITY] [DSA 1386-1] New wesnoth packages fix denial of service
  • Martin Schulze (Mon Oct 15 2007 - 01:46:24 CDT)
• [SECURITY] [DSA 1386-2] New wesnoth packages fix denial of service
  • Martin Schulze (Mon Oct 15 2007 - 02:11:14 CDT)
• [SECURITY] [DSA 1387-1] New librpcsecgss packages fix arbitrary code execution
  • Florian Weimer (Mon Oct 15 2007 - 16:10:12 CDT)
• [SECURITY] [DSA 1388-1] New dhcp packages fix arbitrary code execution
  • Steve Kemp (Thu Oct 18 2007 - 09:25:49 CDT)
• [SECURITY] [DSA 1388-3] New dhcp packages fix arbitrary code execution
  • Noah Meyerhans (Mon Oct 29 2007 - 13:03:32 CDT)
• [SECURITY] [DSA 1389-1] New zoph packages fix SQL injection
  • Moritz Muehlenhoff (Thu Oct 18 2007 - 15:39:48 CDT)
• [SECURITY] [DSA 1389-2] New zoph packages fix SQL injection
  • Thijs Kinkhorst (Wed Oct 24 2007 - 17:21:34 CDT)
• [SECURITY] [DSA 1390-1] New t1lib packages fix arbitrary code execution
  • Noah Meyerhans (Thu Oct 18 2007 - 19:09:14 CDT)
• [SECURITY] [DSA 1391-1] New icedove packages fix several vulnerabilities
  • Moritz Muehlenhoff (Fri Oct 19 2007 - 10:55:05 CDT)
• [SECURITY] [DSA 1392-1] New xulrunner packages fix several vulnerabilities
  • Moritz Muehlenhoff (Sat Oct 20 2007 - 06:56:10 CDT)
• [SECURITY] [DSA 1393-1] New xfce4-terminal packages fix arbitrary command execution
  • Steve Kemp (Tue Oct 23 2007 - 13:48:00 CDT)
• [SECURITY] [DSA 1394-1] New reprepro packages fix authentication bypass
  • Thijs Kinkhorst (Tue Oct 23 2007 - 16:10:19 CDT)
• [SECURITY] [DSA 1395-1] New xen-utils packages fix file truncation
  • Steve Kemp (Thu Oct 25 2007 - 09:55:50 CDT)
• [SECURITY] [DSA 1396-1] New iceweasel packages fix several vulnerabilities
  • Moritz Muehlenhoff (Sat Oct 27 2007 - 06:54:56 CDT)
• [TOOL] w3af - Web Application Attack and Audit Framework
  • Andres Riancho (Thu Oct 18 2007 - 18:40:26 CDT)
• [Trick] VigileCMS All Versions DataMining Remote Hash Disclosure
  • kingoftheworld92fastwebnet.it (Thu Oct 25 2007 - 16:32:24 CDT)
• [USN-501-2] Ghostscript vulnerability
  • Kees Cook (Mon Oct 22 2007 - 17:23:26 CDT)
• [USN-523-1] ImageMagick vulnerabilities
  • Kees Cook (Wed Oct 03 2007 - 18:11:02 CDT)
• [USN-524-1] OpenOffice.org vulnerability
  • Kees Cook (Thu Oct 04 2007 - 18:27:15 CDT)
• [USN-525-1] libsndfile vulnerability
  • Kees Cook (Thu Oct 04 2007 - 19:17:31 CDT)
• [USN-526-1] debian-goodies vulnerability
  • Kees Cook (Thu Oct 04 2007 - 19:18:15 CDT)
• [USN-527-1] xen-3.0 vulnerability
  • Kees Cook (Tue Oct 09 2007 - 12:08:42 CDT)
• [USN-528-1] MySQL vulnerabilities
  • Kees Cook (Thu Oct 11 2007 - 01:26:30 CDT)
• [USN-529-1] Tk vulnerability
  • Kees Cook (Thu Oct 11 2007 - 14:16:03 CDT)
• [USN-530-1] hplip vulnerability
  • Kees Cook (Fri Oct 12 2007 - 13:57:17 CDT)
• [USN-531-1] dhcp vulnerability
  • Kees Cook (Mon Oct 22 2007 - 13:24:30 CDT)
• [USN-531-2] dhcp vulnerability
  • Kees Cook (Tue Oct 23 2007 - 15:09:13 CDT)
• [USN-532-1] nagios-plugins vulnerability
  • Kees Cook (Mon Oct 22 2007 - 13:33:54 CDT)
• [USN-533-1] util-linux vulnerability
  • Kees Cook (Mon Oct 22 2007 - 13:36:58 CDT)
• [USN-534-1] OpenSSL vulnerability
  • Kees Cook (Mon Oct 22 2007 - 13:38:29 CDT)
• [USN-535-1] Firefox vulnerabilities
  • Kees Cook (Mon Oct 22 2007 - 23:35:29 CDT)
• [USN-536-1] Thunderbird vulnerabilities
  • Kees Cook (Tue Oct 23 2007 - 16:08:27 CDT)
• [USN-537-1] gnome-screensaver vulnerability
  • Kees Cook (Tue Oct 23 2007 - 16:09:24 CDT)
• [USN-538-1] libpng vulnerabilities
  • Kees Cook (Thu Oct 25 2007 - 16:00:15 CDT)
  • Kees Cook (Thu Oct 25 2007 - 16:00:15 CDT)
• [vuln.sg] IBM Lotus Notes Attachment Viewer Buffer Overflow Vulnerabilities
  • vulnpost-removevuln.sg (Tue Oct 23 2007 - 09:38:21 CDT)
• [Vulz] eFileMan 7.x Multiple Vulnerabilities by Xcross87
  • pete.houston.17187gmail.com (Tue Oct 23 2007 - 12:26:33 CDT)
• [Vulz] eLouai's Download Script Remote File Download Vulnerability
  • pete.houston.17187gmail.com (Tue Oct 23 2007 - 12:03:48 CDT)
• [Vulz] Japanese PHP Gallery Hosting File Upload Vulz
  • pete.houston.17187gmail.com (Tue Oct 23 2007 - 12:01:28 CDT)
• [Vulz] PHP Basic Multiple Vulnerabilities by Xcross87 & Alucar
  • pete.houston.17187gmail.com (Tue Oct 23 2007 - 15:22:26 CDT)
  • pete.houston.17187gmail.com (Tue Oct 23 2007 - 11:59:28 CDT)
• [Vulz] Seeblick 1.0 Beta File Upload Vulz
  • pete.houston.17187gmail.com (Tue Oct 23 2007 - 11:55:39 CDT)
• [waraxe-2007-SA#059] - XSS in WordPress 2.3
  • come2waraxeyahoo.com (Sat Oct 27 2007 - 14:18:51 CDT)
• A-Cart SQL Injection And Cross-Site Scripting
  • laurent.gaffiegmail.com (Wed Oct 24 2007 - 12:59:48 CDT)
  • AdvisoryAria-Security.Net, (Thu Oct 18 2007 - 21:49:10 CDT)
• about phpMyAdmin setup.php XSS vulnerability
  • Marc Delisle (Mon Oct 15 2007 - 18:10:12 CDT)
• Advisory SE-2007-01: TikiWiki Remote PHP Code Evaluation Vulnerability
  • Stefan Esser (Mon Oct 29 2007 - 05:34:16 CDT)
• Affiliate Network Pro Multiple Input Validation and Local file inclusion
  • hack2prisonyahoo.com (Sat Sep 29 2007 - 11:23:23 CDT)
• AGTC-Membership system v1.1a (adduser) Remote Add Admin Exploit
  • Guns0x90.com.ar (Sun Oct 28 2007 - 18:48:55 CDT)
• Airkiosk/formlib application is XSS vuln
  • skienlabgmail.com (Mon Oct 29 2007 - 19:40:48 CDT)
• Airscanner Mobile Security Advisory #07101401: Mobile-spy Victim/User Phone/SMS/URL Log Spoofing and Persistent XSS Injection
  • Seth Fogie (Tue Oct 23 2007 - 09:06:06 CDT)
• Aleris Software Systems Web Publisher Calendar SQL injection
  • Joseph.giron13gmail.com (Tue Oct 23 2007 - 17:04:48 CDT)
• Aria-Security.Net [Web based alpha tabbed address book SQL Injection]
  • AdvisoryAria-Security.Net, (Tue Oct 23 2007 - 17:56:51 CDT)
• ASP Product catalog SQL injection vulnerability
  • joseph.giron13gmail.com (Sat Sep 29 2007 - 21:25:14 CDT)
• ASP-CMS version 1 default password location.
  • joseph.giron13gmail.com (Sat Sep 29 2007 - 21:29:21 CDT)
• AST-2007-022: Buffer overflows in voicemail when using IMAP storage
  • The Asterisk Development Team (Wed Oct 10 2007 - 11:35:43 CDT)
• AST-2007-023 - SQL Injection Vulnerabilty in cdr_addon_mysql
  • Asterisk Security Team (Tue Oct 16 2007 - 18:59:11 CDT)
• BIND 8 EOL and BIND 8 DNS Cache Poisoning (Amit Klein, Trusteer)
  • Amit Klein (Sat Oct 06 2007 - 04:45:21 CDT)
  • sathyakrishnadasgmail.com (Mon Oct 01 2007 - 05:37:47 CDT)
• Black Hat Tokyo + DC and Europe CfPs now open.
  • Jeff Moss (Wed Oct 10 2007 - 18:31:20 CDT)
  • Jeff Moss (Mon Oct 08 2007 - 20:55:02 CDT)
• Bosdev Multiple vulnerabilities
  • Joseph.giron13gmail.com (Tue Oct 23 2007 - 21:21:19 CDT)
• BT Home Flub: Pwnin the BT Home Hub
  • Adrian P (Mon Oct 08 2007 - 16:07:42 CDT)
• CA BrightStor ARCServe BackUp Message Engine Remote Stack Overflow Vulnerability
  • hfli (Thu Oct 11 2007 - 02:29:43 CDT)
• Camino release 1.5.2 fixes several vulnerabilities
  • Juha-Matti Laurio (Mon Oct 22 2007 - 15:14:34 CDT)
• Cart32 Arbitrary File Download Vulnerability
  • Paul Craig (Wed Oct 03 2007 - 21:13:35 CDT)
• CFP C H A S E - 2 0 0 7 Lahore Pakistan
  • chase (Thu Oct 18 2007 - 12:50:21 CDT)
• CFP for HITBSecConf2008 - Dubai now open
  • Praburaajan (Tue Oct 23 2007 - 01:21:40 CDT)
• CheckPoint Secure Platform Multiple Buffer Overflows
  • hvazquezpentest.es (Tue Oct 16 2007 - 19:42:22 CDT)
  • fwadminbigorg.com (Thu Oct 11 2007 - 12:04:56 CDT)
  • Hugo van der Kooij (Wed Oct 03 2007 - 13:19:10 CDT)
  • Tony Reusser (Wed Oct 03 2007 - 10:46:38 CDT)
  • hvazquezpentest.es (Tue Oct 02 2007 - 00:17:29 CDT)
  • hvazquezpentest.es (Mon Oct 01 2007 - 07:16:14 CDT)
• Cisco PSIRT response on IRM Demonstrates Multiple Cisco IOS Exploitation Techniques
  • Andy Davis (Tue Oct 16 2007 - 11:01:48 CDT)
  • Mark Senior (Fri Oct 12 2007 - 14:51:48 CDT)
  • Roman Medina-Heigl Hernandez (Fri Oct 12 2007 - 07:57:55 CDT)
  • Andy Davis (Thu Oct 11 2007 - 02:32:19 CDT)
  • Halvar Flake (Fri Oct 12 2007 - 01:32:17 CDT)
  • Florian Weimer (Thu Oct 11 2007 - 11:55:16 CDT)
  • Halvar Flake (Thu Oct 11 2007 - 03:21:54 CDT)
  • Andy Davis (Wed Oct 10 2007 - 17:52:31 CDT)
  • Halvar Flake (Thu Oct 11 2007 - 14:25:05 CDT)
  • Damir Rajnovic (Wed Oct 10 2007 - 06:05:23 CDT)
• Cisco Security Advisory: Cisco Unified Communications Web-based Management Vulnerability
  • Cisco Systems Product Security Incident Response Team (Wed Oct 17 2007 - 11:00:00 CDT)
• Cisco Security Advisory: Cisco Wireless Control System Conversion Utility Adds Default Password
  • Cisco Systems Product Security Incident Response Team (Wed Oct 10 2007 - 10:57:52 CDT)
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco PIX and ASA Appliances
  • Cisco Systems Product Security Incident Response Team (Wed Oct 17 2007 - 12:15:25 CDT)
• Cisco Security Advisory: Multiple Vulnerabilities in Firewall Services Module
  • Cisco Systems Product Security Incident Response Team (Wed Oct 17 2007 - 11:29:47 CDT)
• Clients buffer-overflow in Live for Speed 0.5X10
  • Luigi Auriemma (Sat Oct 13 2007 - 16:44:10 CDT)
• ClubHack - CFP closing by 15th October 2007
  • `ClubHack ` (Mon Oct 01 2007 - 13:27:22 CDT)
• CMS Creamotion - Remote File inclusion
  • securitysoqor.net (Sat Oct 06 2007 - 10:42:32 CDT)
• Comments re ISC's announcement on bind9 security
  • Shane Kerr (Wed Oct 31 2007 - 08:44:35 CDT)
  • Network Protocol Security (Mon Oct 29 2007 - 14:43:10 CDT)
• Content Builder 0.7.5 RFI Bug
  • mehrad1989gmail.com (Wed Oct 03 2007 - 15:49:45 CDT)
• CORE-2007-0928: Stack-based buffer overflow vulnerability in OpenBSD’s DHCP server
  • Core Security Technologies Advisories (Wed Oct 10 2007 - 21:32:13 CDT)
• Corsaire Security Advisory - Citrix Access Gateway session ID disclosure issue
  • advisories (Mon Oct 22 2007 - 16:33:24 CDT)
• Cracking the iPhone (5 article series)
  • H D Moore (Mon Oct 22 2007 - 12:57:13 CDT)
• CVE-2007-4600 - Mathcad Protect Worksheet Vulnerability
  • bugtraqfirewraith.co.uk (Tue Oct 16 2007 - 08:04:15 CDT)
• DDIVRT-2007-05 NetSupport Manager Client Buffer Overflow
  • vulnerabilityresearchdigitaldefense.net (Thu Oct 04 2007 - 15:55:53 CDT)
• DeepSec 2007 Registration: hurry up, seats are filling fast
  • Stefano Zanero (Tue Oct 30 2007 - 11:01:37 CDT)
• Directory traversal flaw in shttp
  • digineo Advisories (Thu Oct 25 2007 - 12:46:26 CDT)
• Django 0.96 (stable) Admin Panel CSRF
  • J. Carlos Nieto (Mon Oct 29 2007 - 18:29:36 CDT)
• DNewsWeb Softwares Cross Site Scripting Vulrnability
  • DoZHackersCenter.com (Tue Oct 09 2007 - 00:51:50 CDT)
• DRBGuestbook Remote XSS Vulnerability
  • gokhankayahotmail.com (Wed Oct 03 2007 - 12:04:16 CDT)
• dvddb-0.6 media sql-inj. vuln.
  • jamesglobalmegacorp.org (Tue Oct 02 2007 - 14:28:19 CDT)
• EEYE: CA BrightStor ArcServe Backup Server Arbitrary Pointer Dereference
  • eEye Advisories (Thu Oct 11 2007 - 14:35:23 CDT)
• eGov Content Manager Cross Site Scripting Vulrnability
  • DoZHackersCenter.com (Sat Sep 29 2007 - 17:18:05 CDT)
• Else If cms Multiple Remote vulnerabilities
  • securitysoqor.net (Sat Oct 06 2007 - 11:42:32 CDT)
• eXtremail(ly easy) remote roots
  • mu-b (Mon Oct 15 2007 - 06:32:20 CDT)
• feedreader3 has XSS vulnerability
  • avivra (Sun Sep 30 2007 - 08:26:44 CDT)
• file upload vulnerability in joomla media component
  • vinodsharma.mimitgmail.com (Wed Oct 03 2007 - 23:48:24 CDT)
• Final Call for Papers for Security Track at ApacheCon Europe 2008
  • Lars Eilebrecht (Sat Oct 27 2007 - 14:11:40 CDT)
• Firefox / IE6 crash on javascript nested loops
  • Jan Heisterkamp (Tue Oct 30 2007 - 15:24:16 CDT)
  • thabob (Tue Oct 30 2007 - 13:15:09 CDT)
• First ever ModSecurity public training at OWASP/WASC conf in SJ
  • Ofer Shezaf (Thu Oct 25 2007 - 06:44:20 CDT)
• Flatnuke3 Remote Cookie Manipoulation / Privilege Escalation
  • kingoftheworld92fastwebnet.it (Thu Oct 25 2007 - 07:35:08 CDT)
• FLEA-2007-0057-1 pidgin
  • Foresight Linux Essential Announcement Service (Wed Oct 03 2007 - 03:18:48 CDT)
• FLEA-2007-0058-1 openssl openssl-scripts
  • Foresight Linux Essential Announcement Service (Wed Oct 03 2007 - 17:56:35 CDT)
• FLEA-2007-0059-1 qt qt-tools
  • Foresight Linux Essential Announcement Service (Thu Oct 04 2007 - 06:55:14 CDT)
• FLEA-2007-0060-1 initscripts
  • Foresight Linux Essential Announcement Service (Fri Oct 26 2007 - 03:36:13 CDT)
• FLEA-2007-0061-1 sun-jre sun-jdk
  • Foresight Linux Essential Announcement Service (Sun Oct 28 2007 - 19:14:32 CDT)
• FLEA-2007-0062-1 firefox
  • Foresight Linux Essential Announcement Service (Sun Oct 28 2007 - 19:20:18 CDT)
• Folder Access bypass
  • hack2prisonyahoo.com (Mon Oct 22 2007 - 11:47:23 CDT)
• Format string in F.E.A.R. 1.08 through PB
  • Luigi Auriemma (Mon Oct 01 2007 - 14:31:43 CDT)
• Format string in The Dawn of Time 1.69s beta4
  • Luigi Auriemma (Fri Oct 05 2007 - 15:41:42 CDT)
• Format string in the Doom 3 engine through PB
  • Luigi Auriemma (Mon Oct 01 2007 - 14:31:32 CDT)
• FreeBSD Security Advisory FreeBSD-SA-07:08.openssl
  • FreeBSD Security Advisories (Wed Oct 03 2007 - 16:58:30 CDT)
• Fwd: [Full-disclosure] URI handling woes in Acrobat Reader, Netscape,Miranda, Skype
  • merigothgmail.com (Wed Oct 10 2007 - 18:35:54 CDT)
• Hackish XSS in shoutbox/blocco.php
  • demehackish.eu (Sun Oct 21 2007 - 13:10:29 CDT)
• Heap overflow in RealPlayer ID3 tag parser
  • NGSSoftware Insight Security Research (Mon Oct 29 2007 - 15:03:14 CDT)
• Holes in the firewall of Mac OS X Leopard
  • Juergen Schmidt (Mon Oct 29 2007 - 18:55:28 CDT)
  • Brandon S. Allbery KF8NH (Mon Oct 29 2007 - 17:02:44 CDT)
  • Juergen Schmidt (Mon Oct 29 2007 - 16:49:18 CDT)
• How to subvert Oracle Database Vault
  • Joxean Koret (Sun Oct 28 2007 - 12:54:33 CDT)
• HPSBMA02133 SSRT061201 rev.6 - HP Oracle for OpenView (OfO) Critical Patch Update
  • security-alerthp.com (Thu Oct 25 2007 - 08:07:21 CDT)
• HPSBMA02279 SSRT071298 rev.1 - HP OpenView Configuration Management (CM) Infrastructure (Radia) and Client Configuration Manager (CCM) Running httpd.tkd, Remote Unauthorized Access to Data
  • security-alerthp.com (Wed Oct 24 2007 - 08:45:55 CDT)
• HTML Injection Vuln in nssboard
  • kcghostgmail.com (Sat Oct 13 2007 - 23:03:08 CDT)
• i-Gallery 3.4 bug crack password!
  • hackerbinhphuocyahoo.com (Tue Oct 23 2007 - 02:14:05 CDT)
• iDefense Security Advisory 10.02.07: Multiple Vendor X Font Server Multiple Vulnerabilities
  • iDefense Labs (Tue Oct 02 2007 - 17:18:25 CDT)
• iDefense Security Advisory 10.02.07: Sun Microsystems Solaris FIFO FS Information Disclosure Vulnerability
  • iDefense Labs (Thu Oct 04 2007 - 13:16:02 CDT)
  • 3APA3A (Thu Oct 04 2007 - 11:38:51 CDT)
  • iDefense Labs (Wed Oct 03 2007 - 09:32:03 CDT)
• iDefense Security Advisory 10.09.07: Microsoft Windows Mail and Outlook Express NNTP Protocol Heap Overflow
  • Nick FitzGerald (Wed Oct 10 2007 - 03:15:57 CDT)
  • iDefense Labs (Tue Oct 09 2007 - 13:22:50 CDT)
• iDefense Security Advisory 10.10.07: Kaspersky Web Scanner ActiveX Format String Vulnerability
  • iDefense Labs (Wed Oct 10 2007 - 13:27:30 CDT)
• iDefense Security Advisory 10.11.07: Multiple Vendor FLAC Library Multiple Integer Overflow Vulnerabilities
  • iDefense Labs (Thu Oct 11 2007 - 14:46:32 CDT)
• iDefense Security Advisory 10.23.07: IBM Lotus Domino IMAP Buffer Overflow Vulnerability
  • iDefense Labs (Wed Oct 24 2007 - 12:17:50 CDT)
• iDefense Security Advisory 10.23.07: IBM Lotus Notes Client TagAttributeListCopy Buffer Overflow Vulnerability
  • iDefense Labs (Wed Oct 24 2007 - 11:32:06 CDT)
• iDefense Security Advisory 10.25.07: Trend Micro Tmxpflt.sys IOCTL 0xa0284403 Buffer Overflow Vulnerability
  • iDefense Labs (Thu Oct 25 2007 - 11:54:02 CDT)
• iDefense Security Advisory 10.30.07: IBM AIX 5.2 crontab BSS Buffer Overflow Vulnerability
  • iDefense Labs (Tue Oct 30 2007 - 13:14:25 CDT)
• iDefense Security Advisory 10.30.07: IBM AIX bellmail Stack Buffer Overflow Vulnerability
  • iDefense Labs (Tue Oct 30 2007 - 13:38:23 CDT)
• iDefense Security Advisory 10.30.07: IBM AIX dig dns_name_fromtext Integer Underflow Vulnerability
  • iDefense Labs (Tue Oct 30 2007 - 13:21:03 CDT)
• iDefense Security Advisory 10.30.07: IBM AIX ftp domacro Parameter Buffer Overflow Vulnerability
  • iDefense Labs (Tue Oct 30 2007 - 13:35:40 CDT)
• iDefense Security Advisory 10.30.07: IBM AIX lquerypv Stack Buffer Overflow Vulnerability
  • iDefense Labs (Tue Oct 30 2007 - 13:29:39 CDT)
• iDefense Security Advisory 10.30.07: IBM AIX lqueryvg Stack Buffer Overflow Vulnerability
  • iDefense Labs (Tue Oct 30 2007 - 13:25:28 CDT)
• iDefense Security Advisory 10.30.07: IBM AIX swcons Local Arbitrary File Access Vulnerability
  • iDefense Labs (Tue Oct 30 2007 - 13:06:12 CDT)
• iDefense Security Advisory 10.31.07: Macrovision InstallShield Update Service ActiveX Unsafe Method Vulnerability
  • iDefense Labs (Wed Oct 31 2007 - 13:19:42 CDT)
• iDefense Security Advisory 10.31.07: Symantec Altiris Deployment Solution TFTP/MTFTP Service Directory Traversal Vulnerability
  • iDefense Labs (Wed Oct 31 2007 - 13:39:39 CDT)
• idmos-phoenix cms Remote File inclusion
  • securitysoqor.net (Sat Oct 06 2007 - 12:10:11 CDT)
• ILIAS <= 3.8.3 Cross Site Scripting
  • L4teral (Tue Oct 30 2007 - 16:14:33 CDT)
• Immunity Debugger v1.2 Release
  • Nicolas Waisman (Mon Oct 01 2007 - 14:17:10 CDT)
• In Memoriam: Jun-ichiro Hagino
  • Dragos Ruiu (Tue Oct 30 2007 - 16:10:58 CDT)
• InnovaShop™® (mgs.jps) Cross Siting Scripting
  • jose luis góngora fernández (Mon Oct 15 2007 - 13:55:53 CDT)
• International Hacking & Security Conference "POC200"
  • poc2007gmail.com (Wed Oct 03 2007 - 11:39:39 CDT)
• IRM Advisory: Cisco IOS LPD Remote Stack Overflow
  • Andy Davis (Wed Oct 10 2007 - 18:03:29 CDT)
• IRM Discover More Vulnerabilities in Cisco IOS
  • Andy Davis (Tue Oct 23 2007 - 09:52:39 CDT)
• IRM Vendor Alerts: Six critical remote vulnerabilities in TIBCO SmartPGM FX
  • Andy Davis (Tue Oct 16 2007 - 11:25:59 CDT)
• Jeebles Directory Local File Inclusion
  • hack2prisonyahoo.com (Mon Oct 22 2007 - 10:26:07 CDT)
• Joomla! swMenuFree 4.6 Component Remote File Include
  • seanswmenupro.com (Thu Oct 11 2007 - 22:59:22 CDT)
  • Guns0x90.com.ar (Thu Oct 11 2007 - 11:41:50 CDT)
• Korean GHBoard Multiple Vulnerabilities by Xcross87
  • pete.houston.17187gmail.com (Tue Oct 23 2007 - 13:01:58 CDT)
• Latest web hacking incidents
  • Ofer Shezaf (Thu Oct 18 2007 - 06:37:57 CDT)
• LedgerSMB < 1.2.8, SQL-Ledger 2.x Multiple SQL Injection Issues
  • Chris Travers (Tue Oct 09 2007 - 11:31:14 CDT)
• M$ will fix URI?
  • Memisyazici, Aras (Thu Oct 11 2007 - 12:08:01 CDT)
• Memory overwrites in JVM via malformed TrueType font
  • NGSSoftware Insight Security Research (Mon Oct 29 2007 - 16:21:03 CDT)
• Micro Login System v1.0 (userpwd.txt) Password Disclosure Vulnerability
  • Guns0x90.com.ar (Fri Oct 26 2007 - 10:24:25 CDT)
• Microsoft Windows XP/2003 Macrovision SecDrv.sys privilege escalation (0day)
  • Reversemode (Wed Oct 17 2007 - 18:07:23 CDT)
• Multi Host Forum Pro phpbb & ipb Multiple Sql Injection
  • kingoftheworld92fastwebnet.it (Thu Oct 25 2007 - 16:31:11 CDT)
• Multiple CSRF in SimplePHPBlog
  • Hanno Böck (Wed Oct 17 2007 - 14:27:35 CDT)
  • demehackish.eu (Wed Oct 17 2007 - 09:00:55 CDT)
• Multiple SQL Injection Flaws in Oracle CTX_DOC package
  • NGSSoftware Insight Security Research (Wed Oct 17 2007 - 06:37:09 CDT)
• Multiple vulnerabilities in Dropteam 1.3.3
  • Luigi Auriemma (Fri Oct 05 2007 - 15:41:20 CDT)
• Netgear FVG318 is vunerable to DOS attack
  • NetGearleonbergers.plus.com (Wed Oct 17 2007 - 00:46:30 CDT)
• New Advisory: X-script GuestBook
  • m2xinbox.ru (Mon Oct 01 2007 - 08:12:40 CDT)
• new vuln in snewscms.net.ru in lang file
  • infomedconsultation.ru (Mon Oct 08 2007 - 06:07:08 CDT)
• Nortel IP Phone Flooding Denial of Service
  • daniel.stirnimancsnc.ch (Thu Oct 18 2007 - 07:28:43 CDT)
• Nortel IP Phone forced re-authentication
  • daniel.stirnimanncsnc.ch (Thu Oct 18 2007 - 07:29:53 CDT)
• Nortel IP Phone Surveillance Mode
  • daniel.stirnimanncsnc.ch (Thu Oct 18 2007 - 07:27:31 CDT)
• Nortel Telephony Server Denial of Service
  • daniel.stirnimanncsnc.ch (Thu Oct 18 2007 - 07:31:02 CDT)
• Nortel UNIStim IP Softphone Buffer-Overflow
  • daniel.stirnimanncsnc.ch (Thu Oct 18 2007 - 07:26:03 CDT)
• Novell OpenSUSE SWAMP multiple XSS
  • testaol.com (Fri Oct 26 2007 - 03:51:32 CDT)
  • morin.joshgmail.com (Tue Oct 23 2007 - 19:02:01 CDT)
• NULL pointer crash in World in Conflict 1.000
  • Luigi Auriemma (Tue Oct 09 2007 - 15:31:56 CDT)
• October Microsoft Tuesday
  • Todd Manning (Thu Oct 11 2007 - 11:14:07 CDT)
• Official Windows binaries of "curl" contain vulnerable zlib 1.2.2 (CAN-2005-2096)
  • Stefan Kanthak (Thu Oct 18 2007 - 14:05:56 CDT)
• Omnistar Live Software Cross-Site Scripting Vulrnability
  • DoZHackersCenter.com (Sun Oct 28 2007 - 20:48:05 CDT)
• OpenSSL Security Advisory
  • Ben Laurie (Fri Oct 12 2007 - 06:05:48 CDT)
• OpenSSL SSL_get_shared_ciphers() off-by-one buffer overflow
  • ejcthousandplaces.org (Thu Oct 04 2007 - 10:03:40 CDT)
  • snaggsecurenetwork.it (Mon Oct 01 2007 - 07:07:00 CDT)
• Oracle audit issue with XMLDB ftp service
  • NGSSoftware Insight Security Research (Wed Oct 17 2007 - 07:07:06 CDT)
• Oracle RDBMS TNS Data packet DoS
  • NGSSoftware Insight Security Research (Wed Oct 17 2007 - 06:55:55 CDT)
• Oracle TNS Listener DoS and/or remote memory inspection
  • NGSSoftware Insight Security Research (Wed Oct 17 2007 - 06:47:44 CDT)
• Original Photo Gallery Remote Command Execution
  • ascii (Tue Oct 02 2007 - 15:21:45 CDT)
• OSI CODES - PHP Live! Remote File Inclusion
  • AdvisoryAria-Security.Net, (Tue Oct 23 2007 - 16:12:18 CDT)
• PacSec 2007 Agenda (Tokyo 11-29/30)
  • Dragos Ruiu (Sun Oct 21 2007 - 23:30:49 CDT)
• phpBB Mod OpenID 0.2.0 BBStore.php Remote File Inclusion
  • str0ke (Mon Oct 01 2007 - 13:15:23 CDT)
  • h3llcodehotmail.it (Sun Sep 30 2007 - 17:50:47 CDT)
• playing for fun with <=IE7
  • laurent.gaffiegmail.com (Thu Oct 25 2007 - 10:58:16 CDT)
  • avivra (Mon Oct 15 2007 - 17:21:10 CDT)
  • jason.gerfengmail.com (Mon Oct 15 2007 - 10:28:13 CDT)
  • James C. Slora Jr. (Mon Oct 15 2007 - 14:39:55 CDT)
  • Roger A. Grimes (Sat Oct 13 2007 - 13:05:44 CDT)
  • laurent.gaffiegmail.com (Fri Oct 12 2007 - 15:34:02 CDT)
• RealNetworks RealPlayer/RealOne Player/Helix Player Remote Heap Corruption
  • Piotr Bania (Thu Oct 25 2007 - 23:10:24 CDT)
• RealNetworks RealPlayer/RealOne Player/Helix Player Remote Memory Corruption
  • Piotr Bania (Thu Oct 25 2007 - 23:10:23 CDT)
• Regarding vulnerability in ViArt Shop
  • supportviart.com (Wed Oct 10 2007 - 06:01:07 CDT)
• ReloadCMS Vulnerable
  • sekuruemail.ua (Sat Oct 20 2007 - 09:27:20 CDT)
• Remote Desktop Command Fixation Attacks
  • pdp (architect) (Sat Oct 13 2007 - 07:51:04 CDT)
  • Thor (Hammer of God) (Fri Oct 12 2007 - 11:32:58 CDT)
  • hvdkooijvanderkooij.org (Thu Oct 11 2007 - 16:45:05 CDT)
  • Jim Harrison (Thu Oct 11 2007 - 16:26:15 CDT)
  • pdp (architect) (Wed Oct 10 2007 - 19:17:16 CDT)
  • pdp (architect) (Wed Oct 10 2007 - 19:24:48 CDT)
  • M. Burnett (Thu Oct 11 2007 - 00:36:17 CDT)
  • Thor (Hammer of God) (Wed Oct 10 2007 - 17:11:21 CDT)
  • Steve Shockley (Wed Oct 10 2007 - 14:38:08 CDT)
  • pdp (architect) (Wed Oct 10 2007 - 06:14:32 CDT)
• Reporting Vulnerable Public Web mail
  • ivan.sancheznullcode.com.ar (Fri Oct 05 2007 - 12:58:04 CDT)
• Research: Cybercrime and the Electoral System
  • Oliver Friedrichs (Mon Oct 08 2007 - 17:41:08 CDT)
• RFIDIOt release - version 0.1q
  • Adam Laurie (Tue Oct 30 2007 - 04:24:03 CDT)
• rPSA-2007-0203-1 rmake rmake-proxy rmake-repos
  • rPath Update Announcements (Tue Oct 02 2007 - 17:28:22 CDT)
• rPSA-2007-0204-1 qt-x11-free
  • rPath Update Announcements (Wed Oct 03 2007 - 14:37:11 CDT)
• rPSA-2007-0205-1 xorg-x11 xorg-x11-fonts xorg-x11-tools xorg-x11-xfs
  • rPath Update Announcements (Wed Oct 03 2007 - 14:41:43 CDT)
• rPSA-2007-0206-1 openssl openssl-scripts
  • rPath Update Announcements (Wed Oct 03 2007 - 14:49:20 CDT)
• rPSA-2007-0209-1 elinks
  • rPath Update Announcements (Fri Oct 05 2007 - 11:20:22 CDT)
• rPSA-2007-0210-1 xen
  • rPath Update Announcements (Mon Oct 08 2007 - 13:11:15 CDT)
• rPSA-2007-0212-1 util-linux
  • rPath Update Announcements (Mon Oct 08 2007 - 22:29:32 CDT)
• rPSA-2007-0214-1 initscripts
  • rPath Update Announcements (Thu Oct 11 2007 - 16:30:52 CDT)
• rPSA-2007-0219-1 libpng
  • rPath Update Announcements (Thu Oct 18 2007 - 14:29:12 CDT)
• rPSA-2007-0220-1 ImageMagick
  • rPath Update Announcements (Thu Oct 18 2007 - 18:20:21 CDT)
• rPSA-2007-0221-1 php php-mysql php-pgsql
  • rPath Update Announcements (Wed Oct 24 2007 - 11:58:47 CDT)
• rPSA-2007-0222-1 cpio tar
  • rPath Update Announcements (Tue Oct 23 2007 - 18:37:06 CDT)
• rPSA-2007-0225-1 firefox
  • rPath Update Announcements (Fri Oct 26 2007 - 14:55:54 CDT)
• rPSA-2007-0225-2 firefox thunderbird
  • rPath Update Announcements (Mon Oct 29 2007 - 13:22:46 CDT)
• rPSA-2007-0227-1 cups
  • rPath Update Announcements (Wed Oct 31 2007 - 15:49:09 CDT)
• Ruby Net::HTTPS library does not validate server certificate CN
  • Thomas (Mon Oct 01 2007 - 03:10:32 CDT)
• S21SEC-037-en: OPAL SIP Protocol Remote Denial of Service
  • S21sec Labs (Thu Oct 11 2007 - 15:49:48 CDT)
• S21SEC-038-en: Alcatel Omnivista 4760 Cross-Site Scripting
  • S21sec Labs (Thu Oct 18 2007 - 17:02:29 CDT)
• SAXON version 5.4 Multiple Path Disclosure Vulnerabilities
  • securityresearchnetvigilance.com (Mon Oct 29 2007 - 10:45:10 CDT)
• SAXON version 5.4 SQL Injection Vulnerability
  • securityresearchnetvigilance.com (Mon Oct 29 2007 - 10:57:09 CDT)
• SAXON version 5.4 XSS Attack Vulnerability
  • securityresearchnetvigilance.com (Mon Oct 29 2007 - 10:55:54 CDT)
• SEC Consult SA-20071012-0 :: Madwifi xrates element remote DOS
  • Bernhard Mueller (Fri Oct 12 2007 - 06:05:20 CDT)
• SEC Consult SA-20071031-0 :: Perdition IMAP Proxy Format String Vulnerability
  • Bernhard Mueller (Wed Oct 31 2007 - 07:11:37 CDT)
• Secunia Research: CUPS IPP Tags Memory Corruption Vulnerability
  • Secunia Research (Wed Oct 31 2007 - 04:40:12 CDT)
• Secunia Research: IBM Tivoli Storage Manager Client CAD Service Script Insertion
  • Secunia Research (Mon Oct 29 2007 - 05:09:16 CDT)
• Secunia Research: IPSwitch IMail Server IMail Client Buffer Overflow
  • Secunia Research (Tue Oct 30 2007 - 07:08:05 CDT)
• Secunia Research: IrfanView Palette File Importing Buffer Overflow Vulnerability
  • Secunia Research (Tue Oct 16 2007 - 09:24:10 CDT)
• Secunia Research: McAfee E-Business Server Auth Packet Handling Buffer Overflow
  • Secunia Research (Wed Oct 31 2007 - 04:00:43 CDT)
• Security Briefings
  • angelorosiello.org (Sat Oct 27 2007 - 07:46:48 CDT)
• Serious holes affecting SiteBar 3.3.8
  • Tim Brown (Thu Oct 18 2007 - 15:01:35 CDT)
• Several vulnerabilities in CMS Made Simple 1.1.3.1
  • Omid (Wed Oct 10 2007 - 00:17:39 CDT)
• Siebel Security Basics
  • Jonathan Katz (Mon Oct 29 2007 - 19:14:39 CDT)
• simple dns rebinding protection with dnsmasq
  • Collin R. Mulliner (Mon Oct 22 2007 - 13:05:06 CDT)
• Simple Machines Forum multiple sql injection flaws with exploit code.
  • th3.r00k.spammenotgmail.com (Fri Oct 19 2007 - 19:33:37 CDT)
• Simple PHP Blog (sphpblog) <= 0.5.1 Multiple Vulnerabilities
  • gmdarkfiggmail.com (Sun Oct 21 2007 - 13:04:09 CDT)
• Smart-Shop Shopping Cart Cross-Site Scripting Vulrnability
  • DoZHackersCenter.com (Sat Oct 27 2007 - 23:49:07 CDT)
• smbftpd 0.96 format string vulnerability
  • Jerry Illikainen (Mon Oct 01 2007 - 10:48:02 CDT)
• Softwin's anti-virus BitDefender contains vulnerable zlib (CA-2007-07)
  • Stefan Kanthak (Thu Oct 18 2007 - 14:05:51 CDT)
• SQL Injection Flaw in Oracle Workspace Manager
  • David Litchfield (Wed Oct 17 2007 - 09:27:49 CDT)
• SSH attacks - anyone else seen these?
  • Tim (Wed Oct 17 2007 - 19:05:06 CDT)
  • pand0ra (Tue Oct 16 2007 - 16:17:20 CDT)
  • James Lay (Tue Oct 16 2007 - 14:34:18 CDT)
  • Jose Nazario (Tue Oct 16 2007 - 15:35:34 CDT)
  • Mark R. Bowyer (Tue Oct 16 2007 - 14:29:04 CDT)
  • Gayathri Swaminathan (Tue Oct 16 2007 - 14:28:10 CDT)
  • Tim (Tue Oct 16 2007 - 12:06:19 CDT)
• SSHatter 0.6
  • Tim Brown (Sat Oct 06 2007 - 10:53:30 CDT)
• Stringbeans (Portal) - Lang Parameter Cross-Site Scripting Vulnerability
  • jose luis góngora fernández (Mon Oct 15 2007 - 14:00:24 CDT)
• SYMSA-2007-010: Microsoft ActiveSync 4.x Weak Password Obfuscation
  • researchsymantec.com (Mon Oct 15 2007 - 13:39:55 CDT)
• SYMSA-2007-011: Microsoft WM5 PocketPC Phone Ed SMS Handler Issue
  • researchsymantec.com (Wed Oct 17 2007 - 14:56:11 CDT)
• SYMSA-2007-012: Microsoft Windows CE IGMP Denial of Service
  • researchsymantec.com (Mon Oct 22 2007 - 20:03:35 CDT)
• SYMSA-2007-013: Lotus Notes Memory Mapped Files Vulnerability
  • researchsymantec.com (Tue Oct 23 2007 - 10:11:51 CDT)
• Team SHATTER Alert: Oracle Database Buffer overflow vulnerability in function MDSYS.SDO_CS.TRANSFORM
  • Team SHATTER (Mon Oct 29 2007 - 05:29:00 CDT)
• Team SHATTER Alert: Oracle Database Buffer overflow vulnerability in procedure DBMS_AQADM_SYS.DBLINK_INFO
  • Team SHATTER (Mon Oct 29 2007 - 05:30:25 CDT)
• teatro 1.6 ( basePath ) Remote File Include Vulnerability
  • alkomandoz-hackerhotmail.com (Sun Oct 28 2007 - 12:32:01 CDT)
• The Death of Defence in Depth ? - An invitation to Hack.lu
  • Thierry Zoller (Tue Oct 09 2007 - 14:14:30 CDT)
• Third-party patch for CVE-2007-3896 (Internet Explorer 7 invalid URI handling) available
  • KJK::Hyperion (Sat Oct 13 2007 - 22:04:57 CDT)
• Third-party patch for CVE-2007-3896, UPDATE NOW
  • KJK::Hyperion (Wed Oct 17 2007 - 07:16:21 CDT)
• Tikiwiki 1.9.8 exploit ITW
  • 3APA3A (Fri Oct 12 2007 - 05:23:02 CDT)
  • Moritz Naumann (Thu Oct 11 2007 - 16:20:06 CDT)
• TikiWiki <= 1.9.8.1 Cross Site Scripting / Local File Inclusion
  • L4teral (Thu Oct 25 2007 - 14:42:21 CDT)
• TorrentTrader Classic Mutiple Remote vulnerabilities
  • securitysoqor.net (Sun Oct 07 2007 - 20:08:50 CDT)
• TPTI-07-16: CA BrightStor Hierarchical Storage Manager Buffer Overflow Vulnerabilities
  • TSRT3com.com (Tue Oct 02 2007 - 15:36:31 CDT)
• TPTI-07-17: CA BrightStor Hierarchical Storage Manager SQL Injection Vulnerabilities
  • TSRT3com.com (Tue Oct 02 2007 - 15:38:20 CDT)
• TPTI-07-18: EMC RepliStor Server Heap Overflow Vulnerability
  • TSRT3com.com (Wed Oct 10 2007 - 17:02:58 CDT)
• Two buffer-overflow in FSD V2.052 d9 and FSFDT V3.000 d9
  • Luigi Auriemma (Mon Oct 01 2007 - 14:31:00 CDT)
• Two buffer-overflow in FSD V2.052 d9 and FSFDT V3.000 d9[EXPLOIT]
  • weakfraglab.at (Thu Oct 04 2007 - 05:19:50 CDT)
• Unexploitable buffer-overflow in America's Army 2.8.2 through PB
  • Luigi Auriemma (Mon Oct 01 2007 - 14:31:38 CDT)
• Untrusted Java applet can connect to localhost
  • NGSSoftware Insight Security Research (Mon Oct 29 2007 - 16:20:22 CDT)
• URI handling as the harbinger of interaction errors
  • Florian Weimer (Thu Oct 11 2007 - 11:49:04 CDT)
  • Steven M. Christey (Wed Oct 10 2007 - 18:47:11 CDT)
• URI handling woes in Acrobat Reader, Netscape, Miranda, Skype
  • Jim Slora (Mon Oct 08 2007 - 09:24:38 CDT)
  • Andreas Lindenblatt (Tue Oct 09 2007 - 06:03:10 CDT)
  • Andreas Lindenblatt (Tue Oct 09 2007 - 01:33:57 CDT)
  • Thierry Zoller (Sat Oct 06 2007 - 10:06:06 CDT)
  • Juergen Schmidt (Sat Oct 06 2007 - 05:46:47 CDT)
  • Roger A. Grimes (Fri Oct 05 2007 - 14:54:11 CDT)
  • Juergen Schmidt (Fri Oct 05 2007 - 07:58:48 CDT)
• URI handling woes in Acrobat Reader, Netscape,Miranda, Skype
  • Thierry Zoller (Thu Oct 11 2007 - 07:48:53 CDT)
• usd250 helpdesk XSS vulnerabily.
  • Joseph.giron13gmail.com (Mon Oct 22 2007 - 17:37:20 CDT)
• Viart Shopping Cart Directory Transversal Vuln
  • AdvisoryAria-Security.Net, (Mon Oct 08 2007 - 21:53:07 CDT)
• VImpX ActiveX (VImpX.ocx v. 4.7.3.0) Remote
  • saw_xyzyahoo.com (Sat Oct 13 2007 - 09:53:34 CDT)
• Vulnerabilities
  • Victor Brilon (Wed Oct 10 2007 - 04:31:09 CDT)
  • sottwellsottwell.com (Tue Oct 09 2007 - 23:53:47 CDT)
  • xoxlandgmail.com (Tue Oct 09 2007 - 01:35:22 CDT)
• Vulnerabilities digest
  • 3APA3A (Wed Oct 10 2007 - 13:19:25 CDT)
• Webroot Desktop Firewall <=5.5.10.20 DNS recursion
  • komarovitdefence.ru (Sun Oct 28 2007 - 04:40:24 CDT)
• WifiZoo v1.2 release
  • Hernan Ochoa (Tue Oct 02 2007 - 01:08:14 CDT)
• Windows binary of "GSview 4.8" contain vulnerable zlib (CAN-2005-2096)
  • Stefan Kanthak (Mon Oct 29 2007 - 16:04:53 CDT)
  • Stefan Kanthak (Sun Oct 21 2007 - 07:18:43 CDT)
  • farion42yahoo.de (Sat Oct 20 2007 - 04:55:01 CDT)
  • Stefan Kanthak (Thu Oct 18 2007 - 14:05:43 CDT)
• Windows binary of "Virtual Floppy Drive 2.1" contains vulnerable zlib (CAN-2005-2096)
  • Stefan Kanthak (Mon Oct 29 2007 - 16:05:02 CDT)
• wmtrssreader joomla component 1.0 Remote File Include Vulnerability
  • cyber-crimesibersavascilar.com (Wed Oct 10 2007 - 01:47:12 CDT)
• WWWISIS <= 7.1 (IsisScript) Multiple Vulnerabilities
  • jose luis góngora fernández (Tue Oct 16 2007 - 11:23:57 CDT)
• Xcomputer - Lang Parameter Cross-Site Scripting Vulnerability
  • jose luis góngora fernández (Mon Oct 15 2007 - 16:21:01 CDT)
• ZDI-07-055: Microsoft Windows DCERPC Authentication Denial of Service Vulnerability
  • zdi-disclosures3com.com (Wed Oct 10 2007 - 16:51:32 CDT)
• ZDI-07-056: IBM DB2 DB2JDS Multiple Vulnerabilities
  • zdi-disclosures3com.com (Wed Oct 10 2007 - 16:51:46 CDT)
• ZDI-07-057: Firebird process_packet() Remote Stack Overflow Vulnerability
  • zdi-disclosures3com.com (Wed Oct 10 2007 - 16:51:56 CDT)

Last message date: Wed Oct 31 2007 - 16:08:28 CDT
Archived on: Wed Oct 31 2007 - 16:08:28 CDT

456 messages sorted by: [ author ] [ date ] [ thread ]