440 messages sorted by: [ date ] [ thread ] [ subject ]

Starting: Thu Nov 01 2007 - 10:29:14 CDT
Ending: Fri Nov 30 2007 - 17:30:45 CST

• 3APA3A
  • Re[2]: Microsoft FTP Client Multiple Bufferoverflow Vulnerability (Fri Nov 30 2007 - 03:48:43 CST)
  • Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability (Thu Nov 29 2007 - 05:46:06 CST)
• [48bits] vulndev
  • [48Bits Advisory] QuickTime Panorama Sample Atom Heap Overflow (Sat Nov 10 2007 - 07:41:32 CST)
• abc.seogmail.com
  • li-guestbook sql inj (Fri Nov 09 2007 - 05:12:27 CST)
• Adam Laurie
  • Announce: RFIDIOt release RFIDIOt-0.1r, November 2007 (Tue Nov 27 2007 - 07:35:28 CST)
• adminbiyofrm.com
  • Sciurus Hosting Panel Code İnjection (Fri Nov 16 2007 - 23:20:29 CST)
• Adrian P
  • Several persistent XSS and CSRF on Wireless-G ADSL Gateway with SpeedBooster (WAG54GS) (Tue Nov 20 2007 - 16:26:03 CST)
• Advisoryaria-security.net
  • Aria-Security.Net Research: Rapid Classified HotList Image (Sat Nov 10 2007 - 14:34:07 CST)
  • Aria-Security.Net Research: Lotfian BROCHURE Management System (Thu Nov 08 2007 - 14:44:07 CST)
  • Aria-Security.Net Research: Request For Travel Sql Injection (Wed Nov 07 2007 - 20:31:52 CST)
• AdvisoryAria-Security.net,
  • MyWebFTP Password Disclosure (Mon Nov 05 2007 - 20:05:20 CST)
• aeroxteam-nospamgmail.com
  • Re: IceBB 1.0rc6 <= Remote SQL Injection (Mon Nov 19 2007 - 12:45:08 CST)
  • IceBB 1.0rc6 <= Remote SQL Injection (Sun Nov 18 2007 - 17:46:41 CST)
• Alex Eckelberry
  • RE: mac trojan in-the-wild (Thu Nov 01 2007 - 16:49:09 CDT)
  • RE: mac trojan in-the-wild (Thu Nov 01 2007 - 16:47:14 CDT)
• Alexander Klimov
  • Re: Breaking RSA: Totient indirect factorization (Thu Nov 15 2007 - 02:29:19 CST)
• Alla Bezroutchko
  • Predictable DNS transaction IDs in Microsoft DNS Server (Wed Nov 14 2007 - 06:07:28 CST)
• Amit Klein
  • After 6 months - fix available for Microsoft DNS cache poisoning attack (Tue Nov 13 2007 - 12:26:43 CST)
• andrzej.targoszproidea.org.pl
  • CONFidence 2008 CfP (Mon Nov 26 2007 - 17:06:33 CST)
• angelorosiello.org
  • RFID: Security Briefings (Mon Nov 12 2007 - 14:23:14 CST)
• anuj tenani
  • Re: SMF .htaccess bypass (Tue Nov 06 2007 - 13:31:40 CST)
• Asterisk Security Team
  • AST-2007-026 - SQL Injection issue in cdr_pgsql (Thu Nov 29 2007 - 16:23:39 CST)
  • AST-2007-025 - SQL Injection issue in res_config_pgsql (Thu Nov 29 2007 - 16:18:55 CST)
• atc08atilf.no
  • ATC-08 Call for papers (repost) (Tue Nov 13 2007 - 08:34:20 CST)
• avivra
  • Using CSRF to Attack Mobile Phones (Thu Nov 22 2007 - 15:16:13 CST)
• Bernardo Damele
  • [Tool] sqlmap: a blind SQL injection tool (release 0.5) (Sun Nov 04 2007 - 15:56:48 CST)
• Bernhard Mueller
  • SEC Consult SA-20071101-0 :: Multiple Vulnerabilities in SonicWALL SSL-VPN Client (Thu Nov 01 2007 - 07:06:37 CDT)
• BlackHawk
  • Re: MyBlog (MyCMS) Remote PHP Code execution / PHP Code injection .. (Fri Nov 23 2007 - 05:20:57 CST)
• bugtraqopencosmo.com
  • DeluxeBB E-Mail Address Change Security Bypass (Mon Nov 26 2007 - 13:02:35 CST)
  • VigileCMS <= 1.8 Stealth Remote Command Execution Exploit (Thu Nov 22 2007 - 13:45:11 CST)
  • SkyPortal vRC6 Multiple Remote Vulnerabilities (Wed Nov 21 2007 - 16:56:17 CST)
  • Ucms <= 1.8 Backdoor Remote Command Execution Exploit (Wed Nov 21 2007 - 16:59:46 CST)
  • TalkBack 2.2.7 Multiple Remote File Inclusion Vulnerabilities (Wed Nov 21 2007 - 16:58:07 CST)
• buzzypoczta.fm
  • Re: iDefense Security Advisory 11.07.07: Oracle 10g R2 PITRIG_DROPMETADATA Buffer Overflow Vulnerability (Thu Nov 08 2007 - 06:26:20 CST)
• CaseArmour.net Security Administrator
  • Re: Microsoft Jet Engine MDB File Parsing Stack Overflow Vulnerability (Fri Nov 16 2007 - 15:43:13 CST)
• Cesar
  • [Argeniss] Data0: Next generation malware for stealing databases (Paper) (Thu Nov 22 2007 - 05:57:52 CST)
• Chris
  • Cypress BX script backdoored? (Tue Nov 06 2007 - 13:58:22 CST)
• Chris Withers
  • security contact for mitsubishi electric? (Sat Nov 17 2007 - 05:12:30 CST)
• chris.rohlfgmail.com
  • Ruby/Gnome2 0.16.0 Format String Vulnerability (Tue Nov 27 2007 - 06:16:58 CST)
• Clifton Royston
  • Re: Breaking RSA: Totient indirect factorization (Thu Nov 15 2007 - 10:58:34 CST)
• cocoruder
  • Microsoft Jet Engine MDB File Parsing Stack Overflow Vulnerability (Fri Nov 16 2007 - 05:25:29 CST)
• coolshot_nospam_coolshot.net
  • Re: Aria-Security.net: CoolShot E-Lite POS 1.0 (Fri Nov 30 2007 - 06:35:00 CST)
• Core Security Technologies Advisories
  • CORE-2007-0821: Lotus Notes buffer overflow in the Lotus WorkSheet file processor (Tue Nov 27 2007 - 12:20:41 CST)
• cxibsecurityreason.com
  • PHP 5.2.4 mail.force_extra_parameters unsecure (Sun Nov 25 2007 - 10:04:11 CST)
• cybermilitanhotmail.com
  • Amber Script 1.0 (show_content.php id) Local File Inclusion Vulnerability (Sat Nov 24 2007 - 14:36:57 CST)
  • vBTube v1.1 - Beta ( Vbulletin Tube) Xss Vulnerable (Sat Nov 24 2007 - 14:38:02 CST)
  • Mp3 ToolBox 1.0 beta 5 Remote File &#304;nclude Vulnerability (Fri Nov 23 2007 - 13:42:20 CST)
• daniel.stirnimanncsnc.ch
  • Alcatel OmniPCX Enterprise VoIP Vulnerability (Mon Nov 19 2007 - 01:15:29 CST)
• David Litchfield
  • Oracle 11g/10g Installation Vulnerability (Tue Nov 13 2007 - 13:27:50 CST)
• djvincyhotmail.it
  • Skalinks <= 1_5 Cross Site Request Forgery Add Admin (Sat Nov 03 2007 - 18:09:18 CDT)
• DoZHackersCenter.com
  • GWExtranet Script Injections & Privilege Escalation Vulnerability (Sun Nov 25 2007 - 20:36:45 CST)
  • MySpace Scripts - Poll Creator JavaScript Injection Vulnerability (Thu Nov 22 2007 - 11:26:30 CST)
• Dragos Ruiu
  • CanSecWest 2008 CFP (deadline Nov 30, conf Mar 26-28) and PacSec Dojo's (Thu Nov 08 2007 - 22:18:34 CST)
  • Re: IM upgrade automated social engineering attack (Tue Nov 06 2007 - 14:50:47 CST)
  • IM upgrade automated social engineering attack (Thu Nov 01 2007 - 22:08:43 CDT)
• drakomogmail.com
  • SQL injection bug found in TBSource. (Fri Nov 09 2007 - 15:25:48 CST)
• Duncan Simpson
  • Re: [Full-disclosure] Standing Up Against German Laws - Project HayNeedle (Sun Nov 11 2007 - 15:26:51 CST)
• DVLabs
  • TPTI-07-20: Apple Quicktime Movie Stack Overflow Vulnerability (Wed Nov 14 2007 - 14:56:06 CST)
• eEye Advisories
  • EEYE: BitDefender Online Scanner 8 Double Decode Heap Overflow (Tue Nov 20 2007 - 12:24:18 CST)
  • EEYE: Multiple Vulnerabilities In .FLAC File Format and Various Media Applications (Thu Nov 15 2007 - 13:59:31 CST)
• Elliot Kendall
  • Directory Traversal in SafeNet Sentinel Protection Server and Keys Server (Mon Nov 26 2007 - 15:06:11 CST)
• emacs25gmail.com
  • Re: Gadu-Gadu Local/Remote Buffer Overflow vulnerability (Fri Nov 23 2007 - 12:35:35 CST)
  • Re: Re: Gadu-Gadu Local/Remote Buffer Overflow vulnerability (Fri Nov 23 2007 - 01:23:05 CST)
• erdcecho.or.id
  • [ECHO_ADV_85$2007] alstrasoft E-Friends <= 4.98 (seid) Multiple Remote SQL Injection Vulnerabilities (Thu Nov 22 2007 - 03:07:21 CST)
  • [ECHO_ADV_84$2007] ProfileCMS <= 1.0 Remote SQL Injection Vulnerability (Sat Nov 17 2007 - 20:11:40 CST)
• Erick Galinkin
  • Re: Breaking RSA: Totient indirect factorization (Thu Nov 15 2007 - 21:33:16 CST)
• Ernesto Alvarez
  • two bytehoard 2.1 bugs (Mon Nov 26 2007 - 08:31:27 CST)
• fabio
  • Alice - dns spoofer (Sun Nov 11 2007 - 14:31:17 CST)
• Florian Echtler
  • Re: Standing Up Against German Laws - Project HayNeedle (Tue Nov 13 2007 - 03:59:53 CST)
• Florian Weimer
  • [SECURITY] [DSA 1400-1] New perl packages fix arbitrary code execution (Tue Nov 06 2007 - 15:32:59 CST)
  • [SECURITY] [DSA 1399-1] New pcre3 packages fix arbitrary code execution (Mon Nov 05 2007 - 14:22:19 CST)
• Foresight Linux Essential Announcement Service
  • FLEA-2007-0067-1 pidgin (Sun Nov 11 2007 - 22:58:09 CST)
  • FLEA-2007-0065-1 libpng (Sun Nov 11 2007 - 22:50:02 CST)
  • FLEA-2007-0069-1 perl (Sun Nov 11 2007 - 23:19:51 CST)
  • FLEA-2007-0068-1 ruby (Sun Nov 11 2007 - 23:08:53 CST)
  • FLEA-2007-0064-1 pcre (Sun Nov 11 2007 - 22:43:56 CST)
  • FLEA-2007-0063-1 perl (Sat Nov 10 2007 - 00:04:26 CST)
  • FLEA-2007-0066-1 ImageMagick (Sun Nov 11 2007 - 22:54:03 CST)
• Frank Guthausen
  • Re: Standing Up Against German Laws - Project HayNeedle (Wed Nov 14 2007 - 15:34:33 CST)
• FreeBSD Security Advisories
  • FreeBSD Security Advisory FreeBSD-SA-07:09.random (Thu Nov 29 2007 - 10:31:19 CST)
  • FreeBSD Security Advisory FreeBSD-SA-07:10.gtar (Thu Nov 29 2007 - 10:31:41 CST)
• Gadi Evron
  • Re: [Full-disclosure] Warning: Hackers hijacking unused IP Addresses inside Trusted domains [POC] (Wed Nov 21 2007 - 11:41:52 CST)
  • RE: mac trojan in-the-wild (Thu Nov 01 2007 - 20:04:44 CDT)
  • the heart of the problem [was: RE: mac trojan in-the-wild] (Thu Nov 01 2007 - 21:35:59 CDT)
  • Re: [botnets] re MAC trojan (fwd) (Thu Nov 01 2007 - 19:55:44 CDT)
  • mac trojan in-the-wild (Wed Oct 31 2007 - 18:21:00 CDT)
• gandlf
  • Re: Breaking RSA: Totient indirect factorization (Thu Nov 15 2007 - 14:46:44 CST)
  • Breaking RSA: Totient indirect factorization (Wed Nov 14 2007 - 15:59:42 CST)
• garystotalserversolutions.com
  • APC Management Vulnerability (Thu Nov 29 2007 - 08:41:38 CST)
• Gerald (Jerry) Carter
  • [SAMBA] CVE-2007-5398 - Remote Code Execution in Samba's nmbd (Thu Nov 15 2007 - 07:20:59 CST)
  • [SAMBA] CVE-2007-4572 - GETDC mailslot processing buffer overrun in nmbd (Thu Nov 15 2007 - 07:20:13 CST)
• gg_vulnyahoo.com
  • Re: Gadu-Gadu Local/Remote Buffer Overflow vulnerability (Thu Nov 22 2007 - 16:49:50 CST)
• Giuseppe Gottardi
  • SiteMinder Agent: Cross Site Scripting (Tue Nov 06 2007 - 21:10:00 CST)
• gmdarkfiggmail.com
  • JBC Explorer <= V7.20 RC 1 Remote Code Execution Exploit (Sun Nov 04 2007 - 14:17:14 CST)
• Graeme Fowler
  • Re: Certificate spoofing issue with Mozilla, Konqueror, Safari 2 (Mon Nov 19 2007 - 17:17:50 CST)
• Guns0x90.com.ar
  • PHP-Nuke Module Advertising Blind SQL Injection (Sat Nov 10 2007 - 16:14:25 CST)
  • PhpNuke (add-on) MS TopSites Edit Exploit And Html Injection (Tue Nov 06 2007 - 14:05:17 CST)
  • IDMOS v1.0 Alpha Multiple RFI Vulnerability (Tue Nov 06 2007 - 14:10:46 CST)
  • sBlog 0.7.3 Beta Cross Site Request Forgery (Thu Nov 01 2007 - 10:39:44 CDT)
• gynvaelvexillium.org
  • Re: Re: Re: Re: Re: Gadu-Gadu Local/Remote Buffer Overflow vulnerability (Fri Nov 23 2007 - 15:30:49 CST)
  • Re: Re: Re: Gadu-Gadu Local/Remote Buffer Overflow vulnerability (Fri Nov 23 2007 - 11:53:51 CST)
• h3llcodehotmail.it
  • Simple Machine Forum - Private section/posts/info disclosure (Thu Nov 08 2007 - 07:40:19 CST)
  • SMF .htaccess bypass (Tue Nov 06 2007 - 03:36:42 CST)
• Hanno Böck
  • CVE-2007-3694: Cross site scripting (XSS) in broadcast machine (Mon Nov 12 2007 - 06:55:02 CST)
• Henrik Langos
  • Re: Comments re ISC's announcement on bind9 security (Thu Nov 01 2007 - 07:17:40 CDT)
• iDefense Labs
  • iDefense Security Advisory 11.14.07: Apple Mac OS X AppleTalk Socket IOCTL Kernel Stack Buffer Overflow Vulnerability (Wed Nov 14 2007 - 17:43:54 CST)
  • iDefense Security Advisory 11.14.07: Apple Mac OS X Mach Port Inheritance Privilege Escalation Vulnerability (Wed Nov 14 2007 - 17:59:06 CST)
  • iDefense Security Advisory 11.14.07: Apple Mac OS X AppleTalk ASP Message Kernel Heap Overflow Vulnerability (Wed Nov 14 2007 - 17:43:20 CST)
  • iDefense Security Advisory 11.14.07: Apple Mac OS X AppleTalk mbuf Kernel Heap Overflow Vulnerability (Wed Nov 14 2007 - 17:44:13 CST)
  • iDefense Security Advisory 11.12.07: Novell NetWare Client Local Privilege Escalation Vulnerability (Tue Nov 13 2007 - 14:20:14 CST)
  • iDefense Security Advisory 11.12.07: WinPcap NPF.SYS bpf_filter_init Arbitrary Array Indexing Vulnerability (Mon Nov 12 2007 - 12:00:40 CST)
  • iDefense Security Advisory 11.09.07: AOL AmpX ActiveX Control Multiple Buffer Overflow Vulnerabilities (Fri Nov 09 2007 - 15:33:50 CST)
  • iDefense Security Advisory 11.09.07: IBM Informix Dynamic Server DBLANG Directory Traversal Vulnerability (Fri Nov 09 2007 - 16:07:53 CST)
  • iDefense Security Advisory 11.07.07: Oracle 10g R2 PITRIG_DROPMETADATA Buffer Overflow Vulnerability (Wed Nov 07 2007 - 15:09:30 CST)
  • iDefense Security Advisory 11.06.07: Microsoft DebugView Privilege Escalation Vulnerability (Tue Nov 06 2007 - 14:40:18 CST)
  • iDefense Security Advisory 11.05.07: Apple QuickTime Panorama Sample Atom Heap Buffer Overflow Vulnerability (Mon Nov 05 2007 - 15:19:12 CST)
  • iDefense Security Advisory 11.02.07: Sun Microsystems Solaris srsexec Format String Vulnerability (Mon Nov 05 2007 - 11:03:07 CST)
• imipak
  • Re: Standing Up Against German Laws - Project HayNeedle (Wed Nov 14 2007 - 15:01:19 CST)
• infodigitalarmaments.com
  • Digital Armaments November-December Hacking Challenge: Diffuse Client Application (10.000$ extra) (Thu Nov 29 2007 - 08:28:58 CST)
• infoopencosmo.com
  • VigileCMS 1.4 Multiple Remote Vulnerabilities (Sun Nov 18 2007 - 07:24:49 CST)
• IRM Research
  • IRM025: TIBCO Rendezvous RVD Daemon Remote Memory Leak DoS (Thu Nov 29 2007 - 06:31:16 CST)
  • Creating Backdoors in Cisco IOS using Tcl (Tue Nov 27 2007 - 04:48:39 CST)
  • Six Remote Memory Corruption Vulnerabilities in IBM WebSphere MQ 6.0 (Wed Nov 14 2007 - 08:48:49 CST)
• ISecAuditors Security Advisories
  • [ISecAuditors Security Advisories] Cygwin buffer overflow due incorrect filename length check (Sat Nov 24 2007 - 10:12:37 CST)
  • [ISecAuditors Security Advisories] VTLS.web.gateway cgi is vulnerable to XSS (Tue Nov 13 2007 - 02:38:39 CST)
• J. Carlos Nieto
  • Re: Gekko <=0.8.2 (temp directory) Path Disclosure (Wed Nov 28 2007 - 17:22:19 CST)
• j00ru.vxgmail.com
  • Re: Re: Gadu-Gadu Local/Remote Buffer Overflow vulnerability (Fri Nov 23 2007 - 10:55:36 CST)
  • Gadu-Gadu Local/Remote Buffer Overflow vulnerability (Thu Nov 22 2007 - 14:53:58 CST)
• Jacob Appelbaum
  • Re: 27Mhz based wireless security insecurities - Aka - "We know what you typed last summer" (Fri Nov 30 2007 - 17:25:37 CST)
• Jamie Strandboge
  • [USN-544-2] Samba regression (Sat Nov 17 2007 - 06:49:21 CST)
  • [USN-544-1] Samba vulnerabilities (Thu Nov 15 2007 - 21:12:21 CST)
  • [USN-542-2] KOffice vulnerabilities (Thu Nov 15 2007 - 15:46:12 CST)
• Jan Münther
  • Re: Win2K3 Priv Escalation (Wed Nov 28 2007 - 02:20:20 CST)
• Jan Newger
  • Re: [Full-disclosure] Standing Up Against German Laws - Project HayNeedle (Sat Nov 10 2007 - 12:53:56 CST)
• Jason Muskat de VE3TSJ - GCFA, GCUX, CEI, CEH
  • Re: Banks (Wellsfargo.com) using CDNs to deliver Javascript: enables password theft by anyone compromising or controlling the CDN (Tue Nov 20 2007 - 23:01:52 CST)
• Jeimy Cano
  • National Computer and Information Security Conferences ACIS 2008 - COLOMBIA (Tue Nov 27 2007 - 10:11:32 CST)
• jf
  • Re: [Full-disclosure] Microsoft Jet Engine MDB File Parsing Stack Overflow Vulnerability (Sun Nov 18 2007 - 02:27:29 CST)
• Jim Harrison
  • RE: mac trojan in-the-wild (Thu Nov 01 2007 - 19:52:10 CDT)
• Jindrich Kubec
  • Re: Simple Machine Forum - Private section/posts/info disclosure (Thu Nov 08 2007 - 16:36:58 CST)
• joelpeshkin.net
  • Banks (Wellsfargo.com) using CDNs to deliver Javascript: enables password theft by anyone compromising or controlling the CDN (Mon Nov 19 2007 - 21:39:28 CST)
• johan beisser
  • Re: Standing Up Against German Laws - Project HayNeedle (Tue Nov 13 2007 - 15:07:02 CST)
  • Re: [Full-disclosure] Standing Up Against German Laws - Project HayNeedle (Tue Nov 13 2007 - 15:03:16 CST)
  • Re: Standing Up Against German Laws - Project HayNeedle (Mon Nov 12 2007 - 15:15:53 CST)
  • Re: Standing Up Against German Laws - Project HayNeedle (Mon Nov 12 2007 - 11:55:29 CST)
• Joseph.giron13gmail.com
  • GWextranet Multiple Vulnerabilites (Wed Nov 21 2007 - 14:45:19 CST)
  • E-vanced Solutions Multiple Vulnerabilites (Wed Nov 21 2007 - 14:19:54 CST)
  • ExoPHPdesk user profile XSS / profile SQL injection (Tue Nov 13 2007 - 16:44:36 CST)
  • phphelpdesk Multiple vulnerabilities (Fri Nov 02 2007 - 17:53:35 CDT)
• jplopezygmail.com
  • Bitcomet Resource Browser v1.1 XSS (Fri Nov 23 2007 - 22:33:40 CST)
• Juergen Schmidt
  • Leopard's firewall damages Skype and WoW (Mon Nov 05 2007 - 13:36:51 CST)
• Juha-Matti Laurio
  • Re: Microsoft Jet Engine MDB File Parsing Stack Overflow Vulnerability (Sat Nov 17 2007 - 17:58:02 CST)
  • Cryptome: NSA has access to Windows Mobile smartphones (Thu Nov 01 2007 - 13:16:12 CDT)
• JustinESC
  • Re: Win2K3 Priv Escalation (Wed Nov 28 2007 - 07:11:31 CST)
• justinescracing.com
  • Win2K3 Priv Escalation (Tue Nov 27 2007 - 15:59:05 CST)
• Kapetanakis Giannis
  • Re: Certificate spoofing issue with Mozilla, Konqueror, Safari 2 (Tue Nov 20 2007 - 16:09:46 CST)
  • Re: Certificate spoofing issue with Mozilla, Konqueror, Safari 2 (Mon Nov 19 2007 - 16:51:49 CST)
• Kees Cook
  • [USN-549-1] PHP vulnerabilities (Thu Nov 29 2007 - 16:45:40 CST)
  • [USN-548-1] Pidgin vulnerability (Wed Nov 28 2007 - 17:29:45 CST)
  • [USN-547-1] PCRE vulnerabilities (Mon Nov 26 2007 - 20:58:12 CST)
  • [USN-546-1] Firefox vulnerabilities (Mon Nov 26 2007 - 20:00:15 CST)
  • [USN-545-1] link-grammar vulnerability (Mon Nov 26 2007 - 18:47:48 CST)
  • [USN-543-1] VMWare vulnerabilities (Thu Nov 15 2007 - 16:40:14 CST)
  • [USN-541-1] Emacs vulnerability (Tue Nov 13 2007 - 16:16:04 CST)
  • [USN-542-1] poppler vulnerabilities (Tue Nov 13 2007 - 23:34:40 CST)
  • [USN-541-1] Emacs vulnerability (Tue Nov 13 2007 - 16:16:04 CST)
  • [USN-540-1] flac vulnerability (Tue Nov 13 2007 - 14:11:12 CST)
  • [USN-539-1] CUPS vulnerability (Mon Nov 05 2007 - 23:57:44 CST)
  • [USN-537-2] Compiz vulnerability (Fri Nov 02 2007 - 10:33:53 CDT)
• kingoftheworld92fastwebnet.it
  • Eurologon CMS Multiple SQL Injection (Tue Nov 27 2007 - 11:26:47 CST)
  • Eurologon CMS Db credentials disclosure / files download (Tue Nov 27 2007 - 11:20:11 CST)
  • Re: PHP-Nuke NSN Script Depository module <= 1.0.3 Remote Source / DB Credentials Disclosure (Mon Nov 26 2007 - 15:27:13 CST)
  • PHP-Nuke NSN Script Depository module <= 1.0.3 Remote Source / DB Credentials Disclosure (Mon Nov 26 2007 - 14:51:32 CST)
  • Tilde CMS <= v. 4.x "aarstal" parameter of "yeardetail" SQL Injection (Mon Nov 26 2007 - 13:06:24 CST)
  • PBLang <= 4.99.17.q Remote File Rewriting / Remote Command Execution (Sat Nov 24 2007 - 04:42:11 CST)
  • Scribe <= 2.0 Remote PHP Code Execution (Thu Nov 01 2007 - 17:14:59 CDT)
  • Synergiser <= 1.2 RC1 Local File Inclusion & Full path disclosure (Thu Nov 01 2007 - 07:59:25 CDT)
• klynn.securityfocuskevinlynn.com
  • Re: Simple Machine Forum - Private section/posts/info disclosure (Fri Nov 09 2007 - 11:52:58 CST)
• Kurt Dillard
  • RE: Cryptome: NSA has access to Windows Mobile smartphones (Thu Nov 01 2007 - 16:34:35 CDT)
• L4teral
  • AutoIndex <= 2.2.2 Cross Site Scripting and Denial of Service (Mon Nov 12 2007 - 14:32:35 CST)
• laurent.gaffiegmail.com
  • Konqueror Remote Denial Of Service (Wed Nov 14 2007 - 09:33:10 CST)
  • PHP <= 5.2.5 Gettext Lib Multiple Denial of service (Tue Nov 13 2007 - 13:03:45 CST)
  • PHP <= 5.2.5 stream_wrapper_register() denial of service (Tue Nov 13 2007 - 13:47:05 CST)
• Luigi Auriemma
  • Crash in LIVE555 Media Server 2007.11.01 (Sun Nov 18 2007 - 12:45:51 CST)
• mailme.not
  • Skype DoS (Sun Nov 25 2007 - 13:50:55 CST)
• Matt Ausmus
  • RE: Win2K3 Priv Escalation (Tue Nov 27 2007 - 18:41:36 CST)
• Matt D. Harris
  • Re: Standing Up Against German Laws - Project HayNeedle (Mon Nov 12 2007 - 13:27:52 CST)
  • Re: SMF .htaccess bypass (Tue Nov 06 2007 - 12:39:34 CST)
• Matthew Leeds
  • Re[2]: Microsoft FTP Client Multiple Bufferoverflow Vulnerability (Thu Nov 29 2007 - 18:18:25 CST)
  • Re: mac trojan in-the-wild (Thu Nov 01 2007 - 15:57:06 CDT)
• Max Moser
  • 27Mhz based wireless security insecurities - Aka - "We know what you typed last summer" (Fri Nov 30 2007 - 10:27:03 CST)
• MC Iglo
  • Aida-Web Information Exposure (Thu Nov 15 2007 - 03:41:14 CST)
• Memisyazici, Aras
  • RE: mac trojan in-the-wild (Thu Nov 01 2007 - 17:14:49 CDT)
• mesuth-labs.org
  • Eggblog v3.1.0 XSS Vulnerability (Sun Nov 11 2007 - 14:13:27 CST)
• michaelcleverly.com
  • Re: Creating Backdoors in Cisco IOS using Tcl (Tue Nov 27 2007 - 11:49:24 CST)
• Michal Zalewski
  • Re: Certificate spoofing issue with Mozilla, Konqueror, Safari 2 (Mon Nov 19 2007 - 17:38:46 CST)
• mjjarn.com
  • [CVE-2007-5741] Plone: statusmessages and linkintegrity unsafe network data hotfix (Tue Nov 06 2007 - 12:08:25 CST)
• morin.joshgmail.com
  • PHPSlideShow XSS Update (Tue Nov 27 2007 - 15:16:54 CST)
  • Liferay Enterprise Portal multiple XSS (Tue Nov 27 2007 - 14:20:30 CST)
• Moritz Muehlenhoff
  • [SECURITY] [DSA 1415-1] New tk8.4 packages fix arbitrary code execution (Tue Nov 27 2007 - 14:51:17 CST)
  • [SECURITY] [DSA 1416-1] New tk8.3 packages fix arbitrary code execution (Tue Nov 27 2007 - 14:56:39 CST)
  • [SECURITY] [DSA 1414-1] New wireshark packages fix several vulnerabilities (Mon Nov 26 2007 - 18:39:25 CST)
  • [SECURITY] [DSA 1412-1] New ruby1.9 packages fix insecure SSL certificate validation (Sun Nov 25 2007 - 02:10:14 CST)
  • [SECURITY] [DSA 1411-1] New libopenssl-ruby packages fix insecure SSL certificate validation (Sun Nov 25 2007 - 02:09:18 CST)
  • [SECURITY] [DSA 1410-1] New ruby1.8 packages fix insecure SSL certificate validation (Sun Nov 25 2007 - 02:08:23 CST)
  • [SECURITY] [DSA 1408-1] New kdegraphics packages fix arbitrary code execution (Wed Nov 21 2007 - 15:32:28 CST)
  • [SECURITY] [DSA 1407-1] New cupsys packages fix arbitrary code execution (Sun Nov 18 2007 - 07:22:48 CST)
  • [SECURITY] [DSA 1401-1] New iceape packages fix several vulnerabilities (Mon Nov 05 2007 - 17:44:32 CST)
  • [SECURITY] [DSA 1397-1] New mono packages fix integer overflow (Sat Nov 03 2007 - 10:52:14 CDT)
• Network Protocol Security
  • Re: Comments re ISC's announcement on bind9 security (Wed Oct 31 2007 - 16:28:36 CDT)
• Nick Boyce
  • Re: HPSBUX02287 SSRT071485 rev.1 - HP-UX Running HP Secure Shell, Remotely Gain Extended Privileges (Thu Nov 15 2007 - 11:15:30 CST)
• Nick FitzGerald
  • Re: mac trojan in-the-wild (Thu Nov 01 2007 - 18:36:57 CDT)
• Nicolas FISCHBACH
  • Re: [Full-disclosure] Creating Backdoors in Cisco IOS using Tcl (Tue Nov 27 2007 - 09:19:07 CST)
• Nils Toedtmann
  • Re: Certificate spoofing issue with Mozilla, Konqueror, Safari 2 (Mon Nov 19 2007 - 17:58:28 CST)
  • Certificate spoofing issue with Mozilla, Konqueror, Safari 2 (Sun Nov 18 2007 - 13:43:45 CST)
• nnp
  • Re: [UPH-07-03] Firefly Media Server remote format string vulnerability (Fri Nov 02 2007 - 13:03:42 CDT)
  • [UPH-07-01] Firefly Media Server DoS (Fri Nov 02 2007 - 12:55:06 CDT)
  • Re: [UPH-07-01] Firefly Media Server DoS (Fri Nov 02 2007 - 13:04:56 CDT)
  • [UPH-07-02] Firefly Media Server DoS (Fri Nov 02 2007 - 12:57:50 CDT)
  • [UPH-07-03] Firefly Media Server remote format string vulnerability (Fri Nov 02 2007 - 13:00:12 CDT)
  • Re: mac trojan in-the-wild (Thu Nov 01 2007 - 17:27:55 CDT)
• nnposterdisclosed.not
  • Citrix NetScaler Web Management Cookie Weakness (Sun Nov 25 2007 - 20:06:03 CST)
  • Citrix NetScaler Web Management XSS (Mon Nov 19 2007 - 08:10:13 CST)
• no-replyAria-Security.net
  • Re: Re: Aria-Security.net: NetAuctionHelp SQL Injection (Sat Nov 24 2007 - 16:07:28 CST)
  • NetAuctionHelp Classified Ads v1.0 SQL Injection (Sat Nov 24 2007 - 16:11:33 CST)
  • Aria-Security.net: CoolShot E-Lite POS 1.0 (Sat Nov 24 2007 - 02:27:38 CST)
  • Aria-Security.net: Irola My-Time v3.5 SQL Injection (Fri Nov 23 2007 - 03:53:35 CST)
  • Aria-Security.net: NetAuctionHelp SQL Injection (Wed Nov 21 2007 - 23:46:50 CST)
  • Aria-Security.Net: VU Mailer (Mass Mail) "Password" SQL Injection (Tue Nov 20 2007 - 19:32:33 CST)
  • [Aria-Security.Net] VU Case Manager "Username/Password" SQL Injection (Tue Nov 20 2007 - 19:33:10 CST)
  • [Aria-Secutiy Net] Click&BaneX SQL Injection (Sun Nov 18 2007 - 19:15:30 CST)
  • JiRos Upload Manager SQL Injection (Fri Nov 16 2007 - 18:10:19 CST)
  • DocuSafe "Search" SQL Injection (Tue Nov 13 2007 - 17:28:13 CST)
  • Free Forums "search" Sql Injection (Tue Nov 13 2007 - 18:44:51 CST)
  • Aria-Security.Net: MetaCart SQL Injection (Tue Nov 13 2007 - 18:30:01 CST)
• Noah Meyerhans
  • [SECURITY] [DSA 1413-1] New mysql packages fix multiple vulnerabilities (Mon Nov 26 2007 - 11:20:12 CST)
  • [SECURITY] [DSA 1398-1] New perdition packages fix arbitrary code execution (Mon Nov 05 2007 - 07:03:47 CST)
• noreplyaria-security.net
  • Aria-Security.Net: Gouae DWD Realty SQL Injection (Sun Nov 25 2007 - 15:44:17 CST)
• ntnnetworkontap.com
  • Re: Re: Comments re ISC's announcement on bind9 security (Thu Nov 01 2007 - 14:14:06 CDT)
• Ofer Shezaf
  • OWASP Israel Conference 2007, Dec 3rd 2007 (Tue Nov 27 2007 - 07:39:43 CST)
• OpenPKG GmbH
  • [OpenPKG-SA-2007.023] OpenPKG Security Advisory (perl) (Thu Nov 08 2007 - 01:52:52 CST)
• overetsecuritydate.it
  • Re: Re: SiteMinder Agent: Cross Site Scripting (Fri Nov 09 2007 - 03:32:27 CST)
• Paolo Perego
  • (tool announce) Orizon v0.50 announce (Thu Nov 01 2007 - 08:08:24 CDT)
• Paul Schmehl
  • Re: [Full-disclosure] Warning: Hackers hijacking unused IP Addresses inside Trusted domains [POC] (Wed Nov 21 2007 - 09:56:49 CST)
  • Re: [Full-disclosure] mac trojan in-the-wild (Thu Nov 01 2007 - 21:13:10 CDT)
• Paul Sebastian Ziegler
  • Standing Up Against German Laws - Project HayNeedle (Sat Nov 10 2007 - 11:28:54 CST)
• Paul Wouters
  • Re: Standing Up Against German Laws - Project HayNeedle (Tue Nov 13 2007 - 14:39:47 CST)
• Pete Herzog
  • SCARE metrics and tool release (Fri Nov 30 2007 - 09:30:18 CST)
• petepetefinnigan.com
  • Oracle 0-day to get SYSDBA access (Mon Nov 12 2007 - 07:13:37 CST)
• Peter Besenbruch
  • Re: [Full-disclosure] mac trojan in-the-wild (Thu Nov 01 2007 - 18:44:05 CDT)
  • Re: [Full-disclosure] mac trojan in-the-wild (Thu Nov 01 2007 - 20:36:00 CDT)
• Peter Conrad
  • Re: [Full-disclosure] Standing Up Against German Laws - Project HayNeedle (Tue Nov 13 2007 - 04:13:06 CST)
• philbroadbandmechanics.com
  • PeopleAggregatory security advisory - re CVE-2007-5631 (Sun Nov 11 2007 - 16:24:26 CST)
• Pierre-Yves Rofes
  • ERRATA: [ GLSA 200711-20 ] Pioneers: Multiple Denials of Service (Thu Nov 29 2007 - 16:00:13 CST)
  • [ GLSA 200711-34 ] CSTeX: Multiple vulnerabilities (Sun Nov 25 2007 - 16:49:13 CST)
  • [ GLSA 200711-33 ] nss_ldap: Information disclosure (Sun Nov 25 2007 - 15:43:56 CST)
  • [ GLSA 200711-32 ] Feynmf: Insecure temporary file creation (Tue Nov 20 2007 - 16:32:28 CST)
  • [ GLSA 200711-31 ] Net-SNMP: Denial of Service (Tue Nov 20 2007 - 16:06:24 CST)
  • [ GLSA 200711-30 ] PCRE: Multiple vulnerabilities (Tue Nov 20 2007 - 15:44:46 CST)
  • [ GLSA 200711-29 ] Samba: Execution of arbitrary code (Tue Nov 20 2007 - 15:25:10 CST)
  • [ GLSA 200711-28 ] Perl: Buffer overflow (Mon Nov 19 2007 - 15:10:42 CST)
  • [ GLSA 200711-22 ] Poppler, KDE: User-assisted execution of arbitrary code (Sun Nov 18 2007 - 14:55:35 CST)
  • [ GLSA 200711-21 ] Bochs: Multiple vulnerabilities (Sat Nov 17 2007 - 17:58:21 CST)
  • [ GLSA 200711-23 ] VMware Workstation and Player: Multiple vulnerabilities (Sun Nov 18 2007 - 15:12:26 CST)
  • [ GLSA 200711-27 ] Link Grammar: User-assisted execution of arbitrary code (Sun Nov 18 2007 - 17:10:18 CST)
  • [ GLSA 200711-25 ] MySQL: Denial of Service (Sun Nov 18 2007 - 15:51:17 CST)
  • [ GLSA 200711-26 ] teTeX: Multiple vulnerabilities (Sun Nov 18 2007 - 16:30:08 CST)
  • [ GLSA 200711-24 ] Mozilla Thunderbird: Multiple vulnerabilities (Sun Nov 18 2007 - 15:33:23 CST)
  • [ GLSA 200711-20 ] Pioneers: Denial of Service (Wed Nov 14 2007 - 16:11:12 CST)
  • [ GLSA 200711-19 ] TikiWiki: Multiple vulnerabilities (Wed Nov 14 2007 - 16:00:20 CST)
  • [ GLSA 200711-18 ] Cpio: Buffer overflow (Wed Nov 14 2007 - 15:42:15 CST)
  • [ GLSA 200711-17 ] Ruby on Rails: Multiple vulnerabilities (Wed Nov 14 2007 - 15:14:44 CST)
  • [ GLSA 200711-16 ] CUPS: Memory corruption (Mon Nov 12 2007 - 15:56:28 CST)
  • [ GLSA 200711-15 ] FLAC: Buffer overflow (Mon Nov 12 2007 - 15:42:33 CST)
  • [ GLSA 200711-14 ] Mozilla Firefox, SeaMonkey, XULRunner: Multiple vulnerabilities (Mon Nov 12 2007 - 15:16:07 CST)
  • [ GLSA 200711-13 ] 3proxy: Denial of Service (Thu Nov 08 2007 - 14:41:26 CST)
  • [ GLSA 200711-11 ] Nagios Plugins: Two buffer overflows (Thu Nov 08 2007 - 13:17:41 CST)
  • [ GLSA 200711-12 ] Tomboy: User-assisted execution of arbitrary code (Thu Nov 08 2007 - 13:46:43 CST)
  • [ GLSA 200711-10 ] Mono: Buffer overflow (Wed Nov 07 2007 - 17:00:03 CST)
  • [ GLSA 200711-09 ] MadWifi: Denial of Service (Wed Nov 07 2007 - 14:43:26 CST)
  • [ GLSA 200711-08 ] libpng: Multiple Denials of Service (Wed Nov 07 2007 - 14:15:31 CST)
  • [ GLSA 200711-07 ] Python: User-assisted execution of arbitrary code (Wed Nov 07 2007 - 13:45:33 CST)
  • [ GLSA 200711-06 ] Apache: Multiple vulnerabilities (Wed Nov 07 2007 - 13:31:44 CST)
  • [ GLSA 200711-05 ] SiteBar: Multiple issues (Tue Nov 06 2007 - 16:52:20 CST)
  • [ GLSA 200711-04 ] Evolution: User-assisted remote execution of arbitrary code (Tue Nov 06 2007 - 15:42:42 CST)
  • [ GLSA 200711-02 ] OpenSSH: Security bypass (Thu Nov 01 2007 - 19:15:30 CDT)
  • [ GLSA 200711-03 ] Gallery: Multiple vulnerabilities (Thu Nov 01 2007 - 19:32:22 CDT)
  • [ GLSA 200711-01 ] gFTP: Multiple vulnerabilities (Thu Nov 01 2007 - 18:58:03 CDT)
• poc2007gmail.com
  • Some Data of POC2007 (Wed Nov 28 2007 - 14:40:08 CST)
• Quark IT - Hilton Travis
  • RE: Standing Up Against German Laws - Project HayNeedle (Fri Nov 16 2007 - 21:05:23 CST)
• r00tbl4ckh0l3.com
  • Belkin Wireless G Router DoS (Sat Nov 17 2007 - 23:50:17 CST)
• Raj Mathur
  • Re: Standing Up Against German Laws - Project HayNeedle (Tue Nov 13 2007 - 21:20:50 CST)
• Rajesh Sethumadhavan
  • Microsoft FTP Client Multiple Bufferoverflow Vulnerability (Wed Nov 28 2007 - 00:12:03 CST)
• Raymond Pete
  • Re: Airkiosk/formlib application is XSS vuln (Thu Nov 01 2007 - 11:39:05 CDT)
• Research
  • Cisco IOS Shellcode (Mon Nov 12 2007 - 03:53:22 CST)
• researchprocheckup.com
  • PR07-37: XSS on Apache HTTP Server 413 error pages via malformed HTTP method (Fri Nov 30 2007 - 10:17:45 CST)
  • PR07-15: Cross-site Scripting (XSS) / HTML injection on F5 FirePass 4100 SSL VPN 'my.logon.php3' server-side script (Fri Nov 30 2007 - 05:50:04 CST)
  • PR07-14: Cross-site Scripting (XSS) / HTML injection on F5 FirePass 4100 SSL VPN 'my.activation.php3' server-side script (Fri Nov 30 2007 - 04:51:53 CST)
  • PR07-02: XSS on Liferay Portal Enterprise 4.1.1 login page ('login' parameter) (Thu Nov 15 2007 - 15:46:11 CST)
  • PR07-26: Persistent XSS on Aruba 800 Mobility Controller's login page (Thu Nov 15 2007 - 15:47:59 CST)
  • PR07-13: Cross-site Scripting / HTML injection on F5 FirePass 4100 SSL VPN 'download_plugin.php3' server-side script (Mon Nov 12 2007 - 17:04:15 CST)
  • Two XSS on Blue Coat ProxySG Management Console (Thu Nov 01 2007 - 12:20:04 CDT)
• RISE Security
  • [RISE-2007004] Apple Mac OS X 10.4.x Kernel i386_set_ldt() Integer Overflow Vulnerability (Thu Nov 15 2007 - 21:02:24 CST)
• Robert McArdle
  • Re: mac trojan in-the-wild (Fri Nov 02 2007 - 05:42:10 CDT)
• Roger A. Grimes
  • RE: mac trojan in-the-wild (Fri Nov 02 2007 - 03:42:15 CDT)
  • RE: mac trojan in-the-wild (Thu Nov 01 2007 - 19:37:00 CDT)
• Roman Medina-Heigl Hernandez
  • DoS Exploit for DHCPd bug (Bugtraq ID 25984 ; CVE-2007-5365) (Fri Nov 02 2007 - 16:06:07 CDT)
• Roman Shirokov
  • Re: IM upgrade automated social engineering attack (Tue Nov 06 2007 - 04:37:50 CST)
• rootfuck.com
  • Re: Simple Machines Forum multiple sql injection flaws with exploit code. (Wed Nov 21 2007 - 20:51:43 CST)
• roothanicker.it
  • xoops mylinks module - sql injection (Fri Nov 09 2007 - 05:38:55 CST)
• rPath Update Announcements
  • rPSA-2007-0254-1 idle python (Fri Nov 30 2007 - 07:35:53 CST)
  • rPSA-2007-0252-1 cups poppler tetex tetex-afm tetex-dvips tetex-fonts tetex-latex tetex-xdvi (Wed Nov 28 2007 - 17:19:51 CST)
  • rPSA-2007-0245-2 kernel (Wed Nov 21 2007 - 10:33:17 CST)
  • rPSA-2007-0245-1 kernel (Wed Nov 21 2007 - 10:28:33 CST)
  • rPSA-2007-0243-1 flac (Wed Nov 21 2007 - 09:35:02 CST)
  • rPSA-2007-0242-1 php5 php5-cgi php5-mysql php5-pear php5-pgsql php5-soap php5-xsl (Mon Nov 19 2007 - 14:06:46 CST)
  • rPSA-2007-0241-1 samba samba-swat (Fri Nov 16 2007 - 20:58:52 CST)
  • rPSA-2007-0231-1 pcre (Tue Nov 06 2007 - 14:15:34 CST)
  • rPSA-2007-0232-1 perl (Tue Nov 06 2007 - 08:19:54 CST)
• rxh4cky0u.org
  • Re: Re: Simple Machine Forum - Private section/posts/info disclosure (Sun Nov 11 2007 - 07:20:41 CST)
• salesbosdev.com
  • Re: Bosdev Multiple vulnerabilities (Mon Nov 12 2007 - 18:08:58 CST)
• sdfkjsomcoismwevoiweoo2.pl
  • Re: Re: Re: Re: Gadu-Gadu Local/Remote Buffer Overflow vulnerability (Fri Nov 23 2007 - 13:37:30 CST)
• secse08gmail.com
  • CFP: International workshop on Secure Software Engineering - Deadline extended! (Thu Nov 01 2007 - 09:16:37 CDT)
• Secunia Research
  • Secunia Research: Symantec Backup Exec Job Engine Denial of Service (Wed Nov 28 2007 - 03:43:32 CST)
  • Secunia Research: Samba "reply_netbios_packet()" Buffer Overflow Vulnerability (Thu Nov 15 2007 - 09:12:38 CST)
  • Secunia Research: Xpdf "Stream.cc" Multiple Vulnerabilities (Wed Nov 07 2007 - 09:42:22 CST)
  • Secunia Research: AbiWord Link Grammar "separate_sentence()" Buffer Overflow (Wed Nov 07 2007 - 05:41:02 CST)
  • Secunia Research: Link Grammar "separate_sentence()" Buffer Overflow (Wed Nov 07 2007 - 05:40:22 CST)
  • Secunia Research: ACDSee Products Image and Archive Plug-ins Buffer Overflows (Fri Nov 02 2007 - 04:08:46 CDT)
• Secure
  • SYM07-029 Symantec BEWS Multiple DoS in Job Engine (Wed Nov 28 2007 - 12:19:39 CST)
• security-alerthp.com
  • [security bulletin] HPSBUX02292 SSRT071499 rev.1 - HP-UX Running Apache, Remote Execution of Arbitrary Code (Thu Nov 29 2007 - 07:29:23 CST)
  • [security bulletin] HPSBMA02283 SSRT071319 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Cross Site Scripting (XSS) (Thu Nov 29 2007 - 07:28:37 CST)
  • [security bulletin] HPSBUX02251 SSRT071449 rev.3 - HP-UX Running BIND, Remote DNS Cache Poisoning (Tue Nov 27 2007 - 06:45:16 CST)
  • HPSBST02291 SSRT071498 rev.1 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS07-061 and MS07-062 (Mon Nov 26 2007 - 07:25:33 CST)
  • [security bulletin] HPSBUX02289 SSRT071461 rev.1 - HP-UX Running BIND 8, Remote DNS Cache Poisoning (Tue Nov 20 2007 - 08:00:33 CST)
  • [security bulletin] HPSBUX02284 SSRT071483 rev.2 - HP-UX Running Java JRE and JDK, Remote Unauthorized Access (Thu Nov 15 2007 - 07:54:54 CST)
  • [security bulletin] HPSBMA02288 SSRT071465 rev.1 - HP OpenView Operations (OVO) Running on HP-UX and Solaris, Remote Unauthorized Access, Denial of Service (DoS) (Wed Nov 14 2007 - 10:33:29 CST)
  • HPSBUX02287 SSRT071485 rev.1 - HP-UX Running HP Secure Shell, Remotely Gain Extended Privileges (Mon Nov 12 2007 - 13:57:33 CST)
  • [security bulletin] HPSBUX02285 SSRT071484 rev.1 - HP-UX Running Aries PA Emulator, Local Unauthorized Access (Thu Nov 08 2007 - 13:51:17 CST)
• securitymandriva.com
  • [ MDKSA-2007:224-3 ] - Updated samba packages fix regressions (Thu Nov 29 2007 - 23:04:19 CST)
  • [ MDKSA-2007:233 ] - Updated cpio package fixes buffer overflow and directory traversal vulnerabilities (Wed Nov 28 2007 - 17:19:53 CST)
  • [ MDKSA-2007:233 ] - Updated cpio package fixes buffer overflow and directory traversal vulnerabilities (Wed Nov 28 2007 - 16:42:26 CST)
  • [ MDKSA-2007:232 ] - Updated kernel packages fix multiple vulnerabilities and bugs (Wed Nov 28 2007 - 14:46:27 CST)
  • [ MDKSA-2007:224-2 ] - Updated samba packages fix vulnerabilities (Fri Nov 23 2007 - 17:08:33 CST)
  • [ MDKSA-2007:231 ] - Updated cacti packages fix SQL injection vulnerability (Thu Nov 22 2007 - 14:35:35 CST)
  • [ MDKSA-2007:224-1 ] - Updated samba packages fix vulnerabilities (Wed Nov 21 2007 - 18:38:34 CST)
  • [ MDKSA-2007:230 ] - Updated tetex packages fix vulnerabilities (Tue Nov 20 2007 - 19:20:57 CST)
  • [ MDKSA-2007:229 ] - Updated phpMyAdmin packages fix multiple vulnerabilities (Tue Nov 20 2007 - 17:26:35 CST)
  • [ MDKSA-2007:228 ] - Updated cups packages fix vulnerabilities (Mon Nov 19 2007 - 20:23:22 CST)
  • [ MDKSA-2007:227 ] - Updated poppler packages fix vulnerabilities (Mon Nov 19 2007 - 20:12:41 CST)
  • [ MDKSA-2007:226 ] - Updated kernel packages fix multiple vulnerabilities and bugs (Mon Nov 19 2007 - 17:41:14 CST)
  • [ MDKSA-2007:225 ] - Updated net-snmp packages fix remote denial of service vulnerability (Mon Nov 19 2007 - 12:12:22 CST)
  • [ MDKSA-2007:224 ] - Updated samba packages fix vulnerabilities (Sat Nov 17 2007 - 15:05:45 CST)
  • [ MDKSA-2007:223 ] - Updated pdftohtml packages fix vulnerabilities (Sat Nov 17 2007 - 14:13:08 CST)
  • [ MDKSA-2007:222 ] - Updated koffice packages fix vulnerabilities (Sat Nov 17 2007 - 13:56:53 CST)
  • [ MDKSA-2007:221 ] - Updated kdegraphics packages fix vulnerabilities in kpdf (Thu Nov 15 2007 - 22:07:14 CST)
  • [ MDKSA-2007:220 ] - Updated gpdf packages fix vulnerabilities (Thu Nov 15 2007 - 15:23:52 CST)
  • [ MDKSA-2007:219 ] - Updated xpdf packages fix vulnerabilities (Thu Nov 15 2007 - 14:12:21 CST)
  • [ MDKSA-2007:218 ] - Updated mono packages fix arbitrary code execution vulnerability (Wed Nov 14 2007 - 11:25:57 CST)
  • [ MDKSA-2007:217 ] - Updated libpng packages fix multiple vulnerabilities (Tue Nov 13 2007 - 14:52:26 CST)
  • [ MDKSA-2007:216 ] - Updated kernel packages fix multiple vulnerabilities and bugs (Tue Nov 13 2007 - 12:12:03 CST)
  • [ MDKSA-2007:204-1 ] - Updated cups packages fix vulnerability (Mon Nov 12 2007 - 15:49:30 CST)
  • [ MDKSA-2007:215 ] - Updated openldap packages fix vulnerability (Thu Nov 08 2007 - 22:23:31 CST)
  • [ MDKSA-2007:214 ] - Updated flac packages fix vulnerability (Thu Nov 08 2007 - 18:12:59 CST)
  • [ MDKSA-2007:212 ] - Updated pcre packages fix vulnerability (Thu Nov 08 2007 - 15:07:15 CST)
  • [ MDKSA-2007:213 ] - Updated pcre packages fix vulnerability (Thu Nov 08 2007 - 15:12:10 CST)
  • [ MDKSA-2007:211 ] - Updated pcre packages fix vulnerability (Thu Nov 08 2007 - 15:02:47 CST)
  • [ MDKSA-2007:210 ] - Updated xfs package prevents arbitrary code execution vulnerabilities (Tue Nov 06 2007 - 16:06:30 CST)
  • [ MDKSA-2007:209 ] - Updated netpbm packages fix vulnerability (Mon Nov 05 2007 - 23:41:26 CST)
  • [ MDKSA-2007:208 ] - Updated ghostscript packages fix vulnerability (Mon Nov 05 2007 - 23:36:53 CST)
  • [ MDKSA-2007:207 ] - Updated perl packages fix vulnerability (Mon Nov 05 2007 - 23:35:36 CST)
  • [ MDKSA-2007:206 ] - Updated pwlib packages fix vulnerability (Fri Nov 02 2007 - 17:15:52 CDT)
  • [ MDKSA-2007:205 ] - Updated opal packages fix vulnerability (Fri Nov 02 2007 - 17:00:00 CDT)
  • [ MDKSA-2007:204 ] - Updated cups packages fix vulnerability (Thu Nov 01 2007 - 15:36:52 CDT)
  • [ MDKSA-2007:203 ] - Updated xen packages fix multiple vulnerabilities (Thu Nov 01 2007 - 12:52:44 CDT)
• securitysoqor.net
  • MyBlog (MyCMS) Remote PHP Code execution / PHP Code injection .. (Thu Nov 22 2007 - 04:30:15 CST)
  • GetBlog local File inclusion .. (Thu Nov 22 2007 - 03:39:11 CST)
  • Wheatblog (wB) Remote File inclusion .. (Thu Nov 22 2007 - 03:30:05 CST)
• securityfocusnetdevice.com
  • Re: SiteMinder Agent: Cross Site Scripting (Thu Nov 08 2007 - 09:08:57 CST)
• shadown
  • Some hashes for the record (Wed Nov 14 2007 - 18:58:08 CST)
• Shane Kerr
  • Re: Comments re ISC's announcement on bind9 security (Fri Nov 02 2007 - 09:57:33 CDT)
  • Re: Comments re ISC's announcement on bind9 security (Fri Nov 02 2007 - 05:45:53 CDT)
• skien
  • Re: Airkiosk/formlib application is XSS vuln (Thu Nov 01 2007 - 12:37:24 CDT)
• Sowhat
  • Vulnerability Hash Database - Maillist (Sun Nov 18 2007 - 00:18:48 CST)
  • AhnLab AntiVirus Remote Kernel Memory Corruption (Fri Nov 16 2007 - 09:12:29 CST)
• Stefano Zanero
  • Re: Standing Up Against German Laws - Project HayNeedle (Tue Nov 13 2007 - 16:03:31 CST)
• Steve Kemp
  • [SECURITY] [DSA 1409-3] New samba packages fix several vulnerabilities (Thu Nov 29 2007 - 08:28:19 CST)
  • [SECURITY] [DSA 1409-2] New samba packages fix several vulnerabilities (Mon Nov 26 2007 - 08:53:41 CST)
  • [SECURITY] [DSA 1409-1] New samba packages fix several vulnerabilities (Thu Nov 22 2007 - 14:51:40 CST)
  • [SECURITY] [DSA 1402-1] New gforge packages fix several vulnerabilities (Wed Nov 07 2007 - 14:15:11 CST)
• Steve Shockley
  • Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability (Thu Nov 29 2007 - 17:09:23 CST)
• Steven J. Murdoch
  • Wordpress Cookie Authentication Vulnerability (Mon Nov 19 2007 - 12:44:43 CST)
• supportnetauctionhelp.com
  • Re: Aria-Security.net: NetAuctionHelp SQL Injection (Sat Nov 24 2007 - 04:47:09 CST)
• sys-projecthotmail.com
  • Gekko <=0.8.2 (temp directory) Path Disclosure (Wed Nov 28 2007 - 11:05:03 CST)
  • PHPkit 1.6.1 (include.php?path=) Remote File Inclusion (Tue Nov 27 2007 - 13:00:26 CST)
  • FIGIS (FILogin.do) Bypass SQL Injection Vulnerability (Mon Nov 26 2007 - 16:11:28 CST)
  • JLMForo System (modificarPerfil.php) Cross-Site Scripting Vulnerability (Mon Nov 26 2007 - 15:38:21 CST)
  • SimpleGallery v0.1.3 (index.php) Cross-Site Scripting Vulnerability (Mon Nov 26 2007 - 11:08:54 CST)
  • FMDeluxe (index.php) Cross-Site Scripting Vulnerability (Mon Nov 26 2007 - 11:05:30 CST)
  • Calendar Proverbs <=1.1 (caladmin.php) Remote SQL Injection (Mon Nov 26 2007 - 11:10:04 CST)
  • PHPSlideShow (toonchapter8.php) Cross-Site Scripting Vulnerability (Mon Nov 26 2007 - 11:07:21 CST)
• TeLeMan
  • QEMU code_gen_buffer overflow POC (Fri Nov 30 2007 - 10:26:53 CST)
• The Asterisk Development Team
  • AST-2007-024 - Fallacious security advisory spread on the Internet involving buffer overflow in Zaptel's sethdlc application (Thu Nov 08 2007 - 16:02:37 CST)
• Theo de Raadt
  • Re: Comments re ISC's announcement on bind9 security (Thu Nov 01 2007 - 14:51:56 CDT)
• thesinodahotmail.com
  • DOS in Realplayer 11 ActiveX on Win Vista and Win XP SP2 (Thu Nov 29 2007 - 17:34:50 CST)
• thetaunggmail.com
  • Javamail login username and password same email problem (Fri Nov 16 2007 - 02:06:37 CST)
• Thijs Kinkhorst
  • [SECURITY] [DSA 1405-2] New zope-cmfplone packages fix regression (Sun Nov 11 2007 - 10:43:44 CST)
  • [SECURITY] [DSA 1406-1] New horde3 packages fix several vulnerabilities (Fri Nov 09 2007 - 16:47:35 CST)
  • [SECURITY] [DSA 1405-1] New zope-cmfplone packages fix arbitrary code execution (Fri Nov 09 2007 - 16:38:37 CST)
  • [SECURITY] [DSA 1403-1] New phpmyadmin packages fix cross-site scripting (Thu Nov 08 2007 - 16:13:37 CST)
  • [SECURITY] [DSA 1404-1] New gallery2 packages fix privilege escalation (Thu Nov 08 2007 - 16:40:13 CST)
• Thor (Hammer of God)
  • RE: Win2K3 Priv Escalation (Wed Nov 28 2007 - 11:31:22 CST)
  • RE: mac trojan in-the-wild (Fri Nov 02 2007 - 00:18:55 CDT)
  • RE: mac trojan in-the-wild (Thu Nov 01 2007 - 19:14:43 CDT)
• Tim
  • Re: Comments re ISC's announcement on bind9 security (Fri Nov 02 2007 - 11:01:42 CDT)
  • Re: Comments re ISC's announcement on bind9 security (Fri Nov 02 2007 - 07:23:43 CDT)
  • Re: Comments re ISC's announcement on bind9 security (Thu Nov 01 2007 - 15:50:20 CDT)
• Tobias Klein
  • [TKADV2007-001] Mac OS X TIOCSETD IOCTL Kernel Memory Corruption Vulnerability (Thu Nov 15 2007 - 13:43:39 CST)
• Valdis.Kletnieksvt.edu
  • Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability (Thu Nov 29 2007 - 16:19:49 CST)
  • Re: Standing Up Against German Laws - Project HayNeedle (Tue Nov 13 2007 - 15:38:39 CST)
• verys-secrethotmail.com
  • Myspace Clone Script (index.php) Remote File Inclusion Vulnerability (Sat Nov 17 2007 - 09:57:01 CST)
  • Black Lily 2007 (products.php class) Remote SQL Injection Vulnerability (Sat Nov 17 2007 - 10:00:58 CST)
  • net-finity (links.php) Remote SQL Injection Vulnerability (Sat Nov 17 2007 - 10:02:19 CST)
• Vincent Archer
  • Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability (Fri Nov 30 2007 - 02:44:20 CST)
• VulnerabilityResearchDigitalDefense.net
  • 2007-06 Sentinel Protection Server Directory Traversal (Mon Nov 26 2007 - 06:53:01 CST)
• Watson Ladd
  • Re: Breaking RSA: Totient indirect factorization (Wed Nov 14 2007 - 17:40:31 CST)
• wegotyourboxgmail.com
  • [0day Remote Command Execution] VigileCMS <= 1.8 Stealth (Fri Nov 23 2007 - 09:04:21 CST)
• Williams, James K
  • Re: SiteMinder Agent: Cross Site Scripting (Fri Nov 09 2007 - 10:48:34 CST)
• zdi-disclosures3com.com
  • ZDI-07-069: CA BrightStor ARCserve Backup Message Engine Insecure Method Exposure Vulnerability (Mon Nov 26 2007 - 16:10:30 CST)
  • ZDI-07-067: Apple QuickTime PICT File Poly Opcodes Heap Corruption Vulnerability (Mon Nov 05 2007 - 16:39:55 CST)
  • ZDI-07-068: Apple QuickTime Uncompressedfile Opcode Stack Overflow Vulnerability (Mon Nov 05 2007 - 16:40:00 CST)
  • ZDI-07-065: Apple QuickTime Color Table RGB Parsing Heap Corruption Vulnerability (Mon Nov 05 2007 - 16:39:45 CST)
  • ZDI-07-066: Apple Quicktime PICT File PackBitsRgn Parsing Heap Corruption Vulnerability (Mon Nov 05 2007 - 16:39:51 CST)
  • ZDI-07-064: Novell Client Trust Heap Overflow Vulnerability (Wed Oct 31 2007 - 18:18:00 CDT)
  • ZDI-07-060: HP OpenView Radia Integration Server File System Exposure Vulnerability (Wed Oct 31 2007 - 18:14:03 CDT)
  • ZDI-07-063: RealPlayer RA Field Size File Processing Heap Oveflow Vulnerability (Wed Oct 31 2007 - 18:14:50 CDT)
  • ZDI-07-062: RealNetworks RealPlayer PLS File Memory Corruption Vulnerability (Wed Oct 31 2007 - 18:14:42 CDT)
  • ZDI-07-061: RealNetworks RealPlayer SWF Processing Remote Code Execution Vulnerability (Wed Oct 31 2007 - 18:14:31 CDT)
  • ZDI-07-059: Verity KeyView SDK Multiple File Format Parsing Vulnerabilities (Wed Oct 31 2007 - 18:13:45 CDT)
  • ZDI-07-058: Oracle E-Business Suite SQL Injection Vulnerability (Wed Oct 31 2007 - 18:13:34 CDT)
• zero-xlinuxmail.org
  • Remote Shell Command Execution in "KB-Bestellsystem" (amensa-soft.de) (Thu Nov 22 2007 - 05:19:29 CST)

Last message date: Fri Nov 30 2007 - 17:30:45 CST
Archived on: Fri Nov 30 2007 - 17:30:45 CST

440 messages sorted by: [ date ] [ thread ] [ subject ]