443 messages sorted by: [ author ] [ date ] [ thread ]

Starting: Tue Jan 01 2008 - 11:24:39 CST
Ending: Thu Jan 31 2008 - 17:06:18 CST

• 8e6 Technologies R3000 Internet Filter Bypass by Request Split
  • mparker8e6.com (Mon Jan 21 2008 - 14:02:40 CST)
  • nnposterdisclosed.not (Tue Jan 15 2008 - 20:55:20 CST)
• [ GLSA 200801-01 ] unp: Arbitrary command execution
  • Robert Buchholz (Tue Jan 08 2008 - 18:47:26 CST)
• [ GLSA 200801-02 ] R: Multiple vulnerabilities
  • Pierre-Yves Rofes (Wed Jan 09 2008 - 14:21:33 CST)
• [ GLSA 200801-03 ] Claws Mail: Insecure temporary file creation
  • Pierre-Yves Rofes (Wed Jan 09 2008 - 15:48:02 CST)
• [ GLSA 200801-04 ] OpenAFS: Denial of Service
  • Pierre-Yves Rofes (Wed Jan 09 2008 - 16:00:44 CST)
• [ GLSA 200801-05 ] Squid: Denial of Service
  • Pierre-Yves Rofes (Wed Jan 09 2008 - 16:17:52 CST)
• [ GLSA 200801-06 ] Xfce: Multiple vulnerabilities
  • Robert Buchholz (Wed Jan 09 2008 - 17:26:26 CST)
• [ GLSA 200801-07 ] Adobe Flash Player: Multiple vulnerabilities
  • Robert Buchholz (Sat Jan 19 2008 - 18:32:39 CST)
• [ GLSA 200801-08 ] libcdio: User-assisted execution of arbitrary code
  • Robert Buchholz (Sat Jan 19 2008 - 18:42:27 CST)
• [ GLSA 200801-09 ] X.Org X server and Xfont library: Multiple vulnerabilities
  • Robert Buchholz (Sun Jan 20 2008 - 15:40:15 CST)
• [ GLSA 200801-10 ] TikiWiki: Multiple vulnerabilities
  • Raphaël Marichez (Wed Jan 23 2008 - 17:05:53 CST)
• [ GLSA 200801-11 ] CherryPy: Directory traversal vulnerability
  • Robert Buchholz (Sun Jan 27 2008 - 10:25:24 CST)
• [ GLSA 200801-12 ] xine-lib: User-assisted execution of arbitrary code
  • Robert Buchholz (Sun Jan 27 2008 - 10:37:19 CST)
• [ GLSA 200801-13 ] ngIRCd: Denial of Service
  • Robert Buchholz (Sun Jan 27 2008 - 10:50:17 CST)
• [ GLSA 200801-14 ] Blam: User-assisted execution of arbitrary code
  • Robert Buchholz (Sun Jan 27 2008 - 11:08:30 CST)
• [ GLSA 200801-15 ] PostgreSQL: Multiple vulnerabilities
  • Raphael Marichez (Tue Jan 29 2008 - 03:41:31 CST)
• [ GLSA 200801-16 ] MaraDNS: CNAME Denial of Service
  • Raphael Marichez (Tue Jan 29 2008 - 16:58:35 CST)
• [ GLSA 200801-17 ] Netkit FTP Server: Denial of Service
  • Raphael Marichez (Tue Jan 29 2008 - 17:09:07 CST)
• [ GLSA 200801-18 ] Kazehakase: Multiple vulnerabilities
  • Pierre-Yves Rofes (Wed Jan 30 2008 - 16:32:08 CST)
• [ GLSA 200801-19 ] GOffice: Multiple vulnerabilities
  • Pierre-Yves Rofes (Wed Jan 30 2008 - 16:43:17 CST)
• [ GLSA 200801-20 ] libxml2: Denial of Service
  • Pierre-Yves Rofes (Wed Jan 30 2008 - 16:48:41 CST)
• [ GLSA 200801-21 ] Xdg-Utils: Arbitrary command execution
  • Pierre-Yves Rofes (Wed Jan 30 2008 - 17:00:38 CST)
• [ GLSA 200801-22 ] PeerCast: Buffer overflow
  • Pierre-Yves Rofes (Wed Jan 30 2008 - 17:18:42 CST)
• [ MDVSA-2008:001-1 ] - Updated wireshark packages fix multiple vulnerabilities
  • securitymandriva.com (Tue Jan 08 2008 - 00:00:13 CST)
• [ MDVSA-2008:002 ] - Updated squid package fixes remote denial of service
  • securitymandriva.com (Fri Jan 04 2008 - 17:42:45 CST)
• [ MDVSA-2008:003 ] - Updated clamav packages fix multiple vulnerabilities
  • securitymandriva.com (Wed Jan 09 2008 - 01:18:25 CST)
• [ MDVSA-2008:004 ] - Updated postgresql packages fix denial of service and privilege escalation issues
  • securitymandriva.com (Wed Jan 09 2008 - 01:59:11 CST)
  • securitymandriva.com (Wed Jan 09 2008 - 10:41:18 CST)
• [ MDVSA-2008:005 ] - Updated libexif packages fix multiple vulnerabilities
  • securitymandriva.com (Wed Jan 09 2008 - 16:56:13 CST)
• [ MDVSA-2008:006 ] - Updated exiv2 packages fix vulnerability
  • securitymandriva.com (Thu Jan 10 2008 - 14:06:32 CST)
• [ MDVSA-2008:007 ] - Updated madwifi-source, wpa_supplicant packages fix vulnerabilities
  • securitymandriva.com (Thu Jan 10 2008 - 23:44:54 CST)
• [ MDVSA-2008:008 ] - Updated kernel packages fix multiple vulnerabilities and bugs
  • securitymandriva.com (Fri Jan 11 2008 - 15:56:07 CST)
• [ MDVSA-2008:009 ] - Updated autofs packages fix insecure hosts configuration
  • securitymandriva.com (Fri Jan 11 2008 - 17:00:29 CST)
• [ MDVSA-2008:009-1 ] - Updated autofs packages fix insecure hosts configuration
  • securitymandriva.com (Sat Jan 12 2008 - 16:06:23 CST)
• [ MDVSA-2008:010 ] - Updated libxml2 packages fix DoS vulnerability
  • securitymandriva.com (Fri Jan 11 2008 - 19:05:25 CST)
• [ MDVSA-2008:011 ] - Updated rsync packages fix restrictions bypass vulnerabilities
  • securitymandriva.com (Fri Jan 11 2008 - 19:19:37 CST)
• [ MDVSA-2008:012 ] - Updated python packages fix vulnerabilities
  • securitymandriva.com (Mon Jan 14 2008 - 16:56:08 CST)
• [ MDVSA-2008:013 ] - Updated python packages fix vulnerability in imageop module
  • securitymandriva.com (Mon Jan 14 2008 - 17:04:52 CST)
• [ MDVSA-2008:014 ] - Updated apache 1.3.x packages fix multiple vulnerabilities
  • securitymandriva.com (Wed Jan 16 2008 - 16:16:50 CST)
• [ MDVSA-2008:015 ] - Updated apache 2.0.x packages fix multiple vulnerabilities
  • securitymandriva.com (Wed Jan 16 2008 - 16:29:34 CST)
• [ MDVSA-2008:016 ] - Updated apache 2.2.x packages fix multiple vulnerabilities
  • securitymandriva.com (Wed Jan 16 2008 - 17:30:09 CST)
• [ MDVSA-2008:017 ] - Updated MySQL packages fix multiple vulnerabilities
  • securitymandriva.com (Sat Jan 19 2008 - 20:42:50 CST)
• [ MDVSA-2008:018 ] - Updated gFTP packages fix vulnerabilities
  • securitymandriva.com (Mon Jan 21 2008 - 19:22:40 CST)
• [ MDVSA-2008:019 ] - Updated cairo packages fix vulnerability
  • securitymandriva.com (Tue Jan 22 2008 - 00:19:09 CST)
• [ MDVSA-2008:020 ] - Updated xine-lib packages fix remote code execution vulnerabilities
  • securitymandriva.com (Tue Jan 22 2008 - 18:12:24 CST)
• [ MDVSA-2008:021 ] - Updated XFree86 packages fix multiple vulnerabilities
  • securitymandriva.com (Thu Jan 24 2008 - 07:42:20 CST)
• [ MDVSA-2008:022 ] - Updated xorg-x11 packages fix multiple vulnerabilities
  • securitymandriva.com (Thu Jan 24 2008 - 07:44:34 CST)
• [ MDVSA-2008:023 ] - Updated x11-server packages fix multiple vulnerabilities
  • securitymandriva.com (Thu Jan 24 2008 - 07:46:27 CST)
• [ MDVSA-2008:024 ] - Updated libxfont packages fix font handling vulnerability
  • securitymandriva.com (Thu Jan 24 2008 - 07:52:14 CST)
• [ MDVSA-2008:025 ] - Updated x11-server-xgl packages fix multiple vulnerabilities
  • securitymandriva.com (Thu Jan 24 2008 - 00:44:56 CST)
• [ MDVSA-2008:026 ] - Updated icu packages fix vulnerabilities
  • securitymandriva.com (Fri Jan 25 2008 - 14:27:29 CST)
• [ MDVSA-2008:027 ] - Updated pulseaudio packages fix local root vulnerability
  • securitymandriva.com (Fri Jan 25 2008 - 18:13:00 CST)
• [ MDVSA-2008:028 ] - Updated MySQL packages fix multiple vulnerabilities
  • securitymandriva.com (Tue Jan 29 2008 - 22:38:18 CST)
• [ MDVSA-2008:029 ] - Updated ruby packages fix possible man-in-the-middle attack
  • securitymandriva.com (Thu Jan 31 2008 - 01:44:33 CST)
• [ MDVSA-2008:1 ] - Updated wireshark packages fix multiple vulnerabilities
  • securitymandriva.com (Wed Jan 02 2008 - 17:30:28 CST)
• [!!FIX Information ] Nucleus 3.31 XSS in path
  • Digital Security Research Group (Tue Jan 29 2008 - 12:05:23 CST)
• [Aria-Security.Net] Real Estate Web SQL Injection
  • no-replyaria-security.net (Tue Jan 15 2008 - 21:42:43 CST)
• [CandyPress] eCommerce suite (SQL Injection + XSS + Path Disclosure)
  • AdminBugReport.IR (Fri Jan 25 2008 - 09:49:24 CST)
• [CSNC] OKI C5510MFP Printer Password Disclosure
  • Adrian Leuenberger (Thu Jan 17 2008 - 14:02:52 CST)
• [CVE-2007-2449] Apache Tomcat XSS vulnerabilities in the JSP examples
  • linlei99hotmail.com (Wed Jan 16 2008 - 16:40:29 CST)
• [DSECRG-08-002] Local File Include in arias 0.99-6
  • Digital Security Research Group [DSecRG] (Wed Jan 16 2008 - 04:37:35 CST)
• [DSECRG-08-003] blogcms 4.2.1b Multiple Security Vulnerabilities
  • Digital Security Research Group [DSecRG] (Wed Jan 16 2008 - 05:02:40 CST)
• [DSECRG-08-007] OpenBSD BGPD daemon Web Interface XSS.
  • Digital Security Research Group (Thu Jan 31 2008 - 11:19:04 CST)
  • Digital Security Research Group (Thu Jan 31 2008 - 04:43:04 CST)
• [FIXED] Remote Denial of Service for SSH service at Dell DRAC4 (maybe Mocana SSH)
  • Robert Scheck (Fri Jan 18 2008 - 05:01:40 CST)
• [Full-disclosure] Buffer-overflow in Quicktime Player 7.3.1.70
  • Luigi Auriemma (Mon Jan 14 2008 - 08:56:17 CST)
• [Full-disclosure] what is this?
  • crazy frog crazy frog (Tue Jan 15 2008 - 11:24:45 CST)
  • Gadi Evron (Tue Jan 15 2008 - 11:22:03 CST)
  • crazy frog crazy frog (Tue Jan 15 2008 - 02:26:48 CST)
  • Nick FitzGerald (Tue Jan 15 2008 - 00:45:21 CST)
  • 3APA3A (Mon Jan 14 2008 - 15:39:22 CST)
  • crazy frog crazy frog (Mon Jan 14 2008 - 07:56:24 CST)
  • Nick FitzGerald (Mon Jan 14 2008 - 05:52:23 CST)
  • 3APA3A (Mon Jan 14 2008 - 03:34:48 CST)
• [Full-disclosure] Yet another Dialog Spoofing Vulnerability - Firefox Basic Authentication
  • Michal Zalewski (Thu Jan 03 2008 - 04:48:21 CST)
  • avivra (Thu Jan 03 2008 - 07:34:54 CST)
• [HSC] Snitz Forums Multiple Vulnerabilities
  • Aaron Cake (Mon Jan 07 2008 - 13:39:03 CST)
  • DoZHackersCenter.com (Sun Jan 06 2008 - 23:08:43 CST)
• [INFIGO 2008-01-06]: McAfee E-Business Server Remote Preauth Code Execution / DoS
  • infocus (Wed Jan 09 2008 - 09:07:26 CST)
• [INFIGO-2008-01-06]: McAfee E-Business Server Remote Preauth Code Execution / DoS - Corrected
  • infocus (Wed Jan 09 2008 - 10:03:14 CST)
• [Reversemode Paper] Exploiting WDM Audio Drivers
  • Reversemode (Mon Jan 07 2008 - 09:30:26 CST)
• [security bulletin] HPSBGN02301 SSRT071508 rev.2 - HP Software Update Running on Windows, Remote Execution of Arbitrary Code, Gain Privileged Access
  • security-alerthp.com (Thu Jan 03 2008 - 06:05:19 CST)
• [security bulletin] HPSBMA02133 SSRT061201 rev.7 - HP Oracle for OpenView (OfO) Critical Patch Update
  • security-alerthp.com (Thu Jan 17 2008 - 07:30:57 CST)
• [security bulletin] HPSBMA02239 SSRT061260 rev.3 - HP OpenView Operations (OVO) Agents Running Shared Trace Service, Remote Arbitrary Code Execution
  • security-alerthp.com (Wed Jan 09 2008 - 07:57:18 CST)
• [security bulletin] HPSBST02304 SSRT080003 rev.1 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS08-001 to MS08-002
  • security-alerthp.com (Tue Jan 15 2008 - 08:10:00 CST)
• [security bulletin] HPSBUX02303 SSRT071468 rev.1 - HP-UX Running X Font Server (xfs) Software, Remote Execution of Arbitrary Code
  • security-alerthp.com (Tue Jan 15 2008 - 08:09:13 CST)
• [security bulletin] HPSBUX02306 SSRT071463 rev.1 - HP-UX Running ARPA Transport, Remote Denial of Service (DoS)
  • security-alerthp.com (Wed Jan 23 2008 - 07:46:06 CST)
• [SECURITY] [DSA 1443-1] New tcpreen packages fix denial of service
  • Moritz Muehlenhoff (Thu Jan 03 2008 - 12:50:10 CST)
• [SECURITY] [DSA 1444-1] New php5 packages fix several vulnerabilities
  • Moritz Muehlenhoff (Thu Jan 03 2008 - 14:25:59 CST)
• [SECURITY] [DSA 1444-2] New php5 packages fix regression
  • Moritz Muehlenhoff (Wed Jan 23 2008 - 15:29:45 CST)
• [SECURITY] [DSA 1445-1] New maradns packages fix denial of service
  • Moritz Muehlenhoff (Thu Jan 03 2008 - 15:15:41 CST)
• [SECURITY] [DSA 1446-1] New wireshark packages fix denial of service
  • Moritz Muehlenhoff (Thu Jan 03 2008 - 15:31:39 CST)
• [SECURITY] [DSA 1447-1] New tomcat5.5 packages fix several vulnerabilities
  • Moritz Muehlenhoff (Thu Jan 03 2008 - 15:54:49 CST)
• [SECURITY] [DSA 1448-1] New eggdrop packages fix arbitrary code execution
  • Steve Kemp (Sat Jan 05 2008 - 08:52:44 CST)
• [SECURITY] [DSA 1448-1] New eggdrop packages fix execution of arbitrary code
  • Steve Kemp (Sat Jan 05 2008 - 09:11:22 CST)
• [SECURITY] [DSA 1449-1] New loop-aes-utils packages fix programming error
  • Steve Kemp (Sat Jan 05 2008 - 09:09:31 CST)
• [SECURITY] [DSA 1450-1] New util-linux packages fix programming error
  • Steve Kemp (Sat Jan 05 2008 - 09:10:06 CST)
• [SECURITY] [DSA 1451-1] New mysql-dfsg-5.0 packages fix several vulnerabilities
  • Moritz Muehlenhoff (Sun Jan 06 2008 - 12:04:18 CST)
• [SECURITY] [DSA 1452-1] New wzdftpd packages fix denial of service
  • Steve Kemp (Sun Jan 06 2008 - 14:29:28 CST)
• [SECURITY] [DSA 1453-1] New tomcat5 packages fix several vulnerabilities
  • Moritz Muehlenhoff (Mon Jan 07 2008 - 12:41:20 CST)
• [SECURITY] [DSA 1454-1] New freetype packages fix arbitrary code execution
  • Moritz Muehlenhoff (Mon Jan 07 2008 - 13:48:32 CST)
• [SECURITY] [DSA 1455-1] New libarchive1 packages fix several problems
  • Steve Kemp (Tue Jan 08 2008 - 14:29:10 CST)
• [SECURITY] [DSA 1456-1] New fail2ban packages fix denial of service
  • Thijs Kinkhorst (Wed Jan 09 2008 - 16:02:37 CST)
• [SECURITY] [DSA 1457-1] New dovecot packages fix information disclosure
  • Thijs Kinkhorst (Wed Jan 09 2008 - 16:15:23 CST)
• [SECURITY] [DSA 1458-1] New openafs packages fix denial of service vulnerability
  • Noah Meyerhans (Thu Jan 10 2008 - 14:47:39 CST)
• [SECURITY] [DSA 1459-1] New gforge packages fix SQL injection
  • Thijs Kinkhorst (Sun Jan 13 2008 - 09:07:24 CST)
• [SECURITY] [DSA 1460-1] New postgresql-8.1 packages fix several vulnerabilities
  • Moritz Muehlenhoff (Sun Jan 13 2008 - 09:45:01 CST)
• [SECURITY] [DSA 1461-1] New libxml2 packages fix denial of service
  • Moritz Muehlenhoff (Sun Jan 13 2008 - 10:57:16 CST)
• [SECURITY] [DSA 1462-1] New hplip packages fix privilege escalation
  • Moritz Muehlenhoff (Sun Jan 13 2008 - 11:14:11 CST)
• [SECURITY] [DSA 1463-1] New postgresql-7.4 packages fix several vulnerabilities
  • Moritz Muehlenhoff (Mon Jan 14 2008 - 12:51:52 CST)
• [SECURITY] [DSA 1464-1] New syslog-ng packages fix denial of service
  • Moritz Muehlenhoff (Tue Jan 15 2008 - 17:47:39 CST)
• [SECURITY] [DSA 1465-1] New apt-listchanges packages fix arbitrary code execution
  • Steve Kemp (Thu Jan 17 2008 - 08:38:45 CST)
• [SECURITY] [DSA 1465-2] New apt-listchanges packages fix arbitrary code execution
  • Steve Kemp (Thu Jan 17 2008 - 10:14:30 CST)
• [SECURITY] [DSA 1466-2] New xorg-server packages fix regression
  • Moritz Muehlenhoff (Sat Jan 19 2008 - 07:10:16 CST)
• [SECURITY] [DSA 1467-1] New mantis packages fix several vulnerabilities
  • Thijs Kinkhorst (Sat Jan 19 2008 - 06:42:03 CST)
• [SECURITY] [DSA 1468-1] New tomcat5.5 packages fix several vulnerabilities
  • Moritz Muehlenhoff (Sun Jan 20 2008 - 09:17:40 CST)
• [SECURITY] [DSA 1469-1] New flac packages fix arbitrary code execution
  • Moritz Muehlenhoff (Sun Jan 20 2008 - 09:43:22 CST)
• [SECURITY] [DSA 1470-1] New horde3 packages fix denial of service
  • Moritz Muehlenhoff (Sun Jan 20 2008 - 16:29:58 CST)
• [SECURITY] [DSA 1471-1] New libvorbis packages fix several vulnerabilities
  • Moritz Muehlenhoff (Mon Jan 21 2008 - 12:06:25 CST)
• [SECURITY] [DSA 1472-1] New xine-lib packages fix arbitrary code execution
  • Moritz Muehlenhoff (Mon Jan 21 2008 - 12:26:55 CST)
• [SECURITY] [DSA 1473-1] New scponly packages fix arbitrary code execution
  • Florian Weimer (Mon Jan 21 2008 - 13:33:26 CST)
• [SECURITY] [DSA 1474-1] New exiv2 packages fix arbitrary code execution
  • Moritz Muehlenhoff (Wed Jan 23 2008 - 15:41:02 CST)
• [SECURITY] [DSA 1475-1] new gforge packages fix cross site scripting
  • Thijs Kinkhorst (Sat Jan 26 2008 - 10:25:45 CST)
• [SECURITY] [DSA 1476-1] New pulseaudio packages fix privilege escalation
  • Moritz Muehlenhoff (Sun Jan 27 2008 - 12:16:38 CST)
• [SECURITY] [DSA 1477-1] New yarssr packages fix arbitrary shell command execution
  • Moritz Muehlenhoff (Sun Jan 27 2008 - 12:26:49 CST)
• [SECURITY] [DSA 1478-1] New mysql-dfsg-5.0 packages fix several vulnerabilities
  • Moritz Muehlenhoff (Mon Jan 28 2008 - 14:20:18 CST)
• [USN-560-1] Tomboy vulnerability
  • Jamie Strandboge (Mon Jan 07 2008 - 20:01:55 CST)
• [USN-561-1] pwlib vulnerability
  • Kees Cook (Tue Jan 08 2008 - 23:37:45 CST)
• [USN-562-1] opal vulnerability
  • Kees Cook (Tue Jan 08 2008 - 23:38:38 CST)
• [USN-563-1] CUPS vulnerabilities
  • Kees Cook (Tue Jan 08 2008 - 23:40:10 CST)
• [USN-564-1] Net-SNMP vulnerability
  • Jamie Strandboge (Wed Jan 09 2008 - 08:53:30 CST)
• [USN-565-1] Squid vulnerability
  • Kees Cook (Wed Jan 09 2008 - 16:22:24 CST)
• [USN-566-1] OpenSSH vulnerability
  • Kees Cook (Wed Jan 09 2008 - 20:00:28 CST)
• [USN-567-1] Dovecot vulnerability
  • Kees Cook (Thu Jan 10 2008 - 16:01:59 CST)
• [USN-568-1] PostgreSQL vulnerabilities
  • Jamie Strandboge (Mon Jan 14 2008 - 15:31:06 CST)
• [USN-569-1] libxml2 vulnerability
  • Kees Cook (Mon Jan 14 2008 - 18:13:03 CST)
• [USN-570-1] boost vulnerabilities
  • Jamie Strandboge (Wed Jan 16 2008 - 16:45:38 CST)
• [USN-571-1] X.org vulnerabilities
  • Kees Cook (Fri Jan 18 2008 - 00:24:41 CST)
• [USN-571-2] X.org regression
  • Kees Cook (Sat Jan 19 2008 - 01:33:40 CST)
• [USN-572-1] apt-listchanges vulnerability
  • Kees Cook (Fri Jan 18 2008 - 17:07:41 CST)
• [USN-573-1] PulseAudio vulnerability
  • Jamie Strandboge (Thu Jan 31 2008 - 16:24:46 CST)
• [waraxe-2008-SA#061] - Remote Code Execution in MyBB 1.2.10
  • come2waraxeyahoo.com (Wed Jan 16 2008 - 14:18:40 CST)
• [waraxe-2008-SA#062] - Multiple Sql Injections in MyBB 1.2.10
  • come2waraxeyahoo.com (Wed Jan 16 2008 - 14:19:44 CST)
• [waraxe-2008-SA#063] - Information Leakage in Kayako SupportSuite 3.11.01
  • come2waraxeyahoo.com (Mon Jan 21 2008 - 10:46:02 CST)
• [waraxe-2008-SA#064] - Sql Injection in MyBB 1.2.11
  • come2waraxeyahoo.com (Mon Jan 21 2008 - 10:47:18 CST)
• [waraxe-2008-SA#065] - Remote Shell Command Execution in Coppermine 1.4.14
  • come2waraxeyahoo.com (Wed Jan 30 2008 - 08:46:36 CST)
• [waraxe-2008-SA#066] - Multiple Vulnerabilities in Coppermine 1.4.14
  • come2waraxeyahoo.com (Thu Jan 31 2008 - 07:49:59 CST)
• Advisory: Tripwire Enterprise/Server XSS Vulnerability
  • Liquidmatrix Security Digest (Tue Jan 29 2008 - 08:16:09 CST)
• Agares PhpAutoVideo 2.21(XSS/RFI) Multiple Remote Vulnerabilities
  • houssamixhotmail.fr (Fri Jan 18 2008 - 03:13:16 CST)
• AmpJuke-0.7.0 (index.php) Xss VuLn.
  • g0rk3m-31hotmail.com (Tue Jan 29 2008 - 12:43:22 CST)
• Apache mod_negotiation Xss and Http Response Splitting
  • Minded Security Research Labs (Tue Jan 22 2008 - 16:15:52 CST)
• Article DashBoard all version SQL Injection Vulnerability
  • heyme.com (Wed Jan 16 2008 - 16:27:27 CST)
  • xcross87gmail.com (Tue Jan 15 2008 - 07:36:22 CST)
• Aruba Mobility Controller User Authentication Vulnerability - Aruba Advisory ID: AID-122207
  • Robbie Gill (Fri Jan 04 2008 - 17:42:22 CST)
• ASPired2Protect bypass
  • milad_sa2007yahoo.com (Sat Jan 26 2008 - 15:40:05 CST)
• AST-2008-001: Crash from transfer using BYE with Also header
  • Asterisk Security Team (Wed Jan 02 2008 - 15:57:48 CST)
• At long last - Extra Outlooks!
  • Thor (Hammer of God) (Fri Jan 11 2008 - 13:07:38 CST)
• At long last -- Extra Outlooks!
  • Francois Labreque (Fri Jan 11 2008 - 15:23:13 CST)
  • Thor (Hammer of God) (Fri Jan 11 2008 - 13:18:22 CST)
  • Casper.DikSun.COM (Fri Jan 11 2008 - 13:02:19 CST)
  • Alexander Bochmann (Fri Jan 11 2008 - 11:42:00 CST)
  • Thor (Hammer of God) (Fri Jan 11 2008 - 00:28:34 CST)
• Attackers can SkypeFind you
  • avivra (Thu Jan 31 2008 - 11:31:21 CST)
• AW: phpBB2 2.0.22 Cross Site Scripting Vulnerability
  • Aufmuth Andreas (Fri Jan 04 2008 - 00:53:58 CST)
• AXIGEN 5.0.x AXIMilter Format String Exploit
  • hempel (Sun Jan 20 2008 - 16:24:25 CST)
• Belkin Wireless G Plus MIMO Router F5D9230-4 Authentication Bypass Vulnerability
  • gmdarkfiggmail.com (Sat Jan 19 2008 - 14:29:21 CST)
• Belong Site Builder 0.1b Bypass Admincp
  • ÑèåÇæÓê çãÑ (Tue Jan 22 2008 - 10:47:19 CST)
• Binn SBuilder (nid) Remote Blind Sql Injection Vulnerabily
  • sys-projecthotmail.com (Mon Jan 14 2008 - 10:59:40 CST)
• BitDefender Update Server - Unauthorized Remote File Access Vulnerability
  • oliver karow (Sat Jan 19 2008 - 05:41:58 CST)
• BLOG:CMS 4.2.1.c (DIR_PLUGINS) Multiple Remote File Include
  • ÑæãÇäÓí åßÑ (Sun Jan 20 2008 - 20:49:56 CST)
• Bloofox CMS SQL Injection (Authentication bypass) , Source code disclosure
  • adminbugreport.ir (Sun Jan 20 2008 - 00:13:47 CST)
• boastMachine <=3.1 SQL Injection Vulnerbility
  • hadihadi_zedehal_2006yahoo.com (Mon Jan 21 2008 - 03:57:15 CST)
• BT Home Flub: Pwnin the BT Home Hub (5) - exploiting IGDs remotely via UPnP
  • Adrian P (Thu Jan 10 2008 - 06:20:37 CST)
• Buffer-overflow and format string in White_Dune 0.29beta791
  • Luigi Auriemma (Wed Jan 02 2008 - 13:55:33 CST)
• Buffer-overflow in Quicktime Player 7.3.1.70
  • Marcello Barnaba (void) (Sat Jan 12 2008 - 16:41:57 CST)
  • Luigi Auriemma (Sat Jan 12 2008 - 07:33:43 CST)
  • snaggopenssl.it (Sat Jan 12 2008 - 05:30:08 CST)
  • Luigi Auriemma (Fri Jan 11 2008 - 15:14:49 CST)
  • str0ke (Fri Jan 11 2008 - 09:51:36 CST)
  • nonevoid.gov (Thu Jan 10 2008 - 19:55:58 CST)
  • Marcello Barnaba (void) (Thu Jan 10 2008 - 15:39:10 CST)
  • Luigi Auriemma (Thu Jan 10 2008 - 12:45:17 CST)
• C4 Security Advisory - GE Fanuc Cimplicity 6.1 Heap Overflow
  • pete.sagege.com (Tue Jan 29 2008 - 07:32:44 CST)
  • Eyal Udassin (Fri Jan 25 2008 - 11:38:27 CST)
• C4 Security Advisory - GE Fanuc Proficy Information Portal 2.6 Arbitrary File Upload and Execution
  • pete.sagege.com (Tue Jan 29 2008 - 07:33:42 CST)
  • Eyal Udassin (Fri Jan 25 2008 - 11:38:27 CST)
• C4 Security Advisory - GE Fanuc Proficy Information Portal 2.6 Authentication Vulnerability
  • pete.sagege.com (Tue Jan 29 2008 - 07:34:28 CST)
  • Eyal Udassin (Fri Jan 25 2008 - 11:38:27 CST)
• Call Jacking: Phreaking the BT Home Hub
  • Adrian P (Mon Jan 21 2008 - 03:54:33 CST)
• CFP: EuroSec Workshop (March 31st, 2008)
  • Stefano Zanero (Fri Jan 11 2008 - 03:12:14 CST)
• Cisco Security Advisory: Cisco PIX and ASA Time-to-Live Vulnerability
  • Eric Davis (Wed Jan 23 2008 - 13:11:45 CST)
  • Cisco Systems Product Security Incident Response Team (Wed Jan 23 2008 - 10:33:55 CST)
• Cisco Security Advisory: Cisco Unified Communications Manager CTL Provider Heap Overflow
  • Cisco Systems Product Security Incident Response Team (Wed Jan 16 2008 - 10:15:00 CST)
• Cisco Security Advisory: Cisco Wireless Control System Tomcat mod_jk.so Vulnerability
  • Cisco Systems Product Security Incident Response Team (Wed Jan 30 2008 - 10:58:45 CST)
• Cisco Security Advisory: Default Passwords in the Application Velocity System
  • Cisco Systems Product Security Incident Response Team (Wed Jan 23 2008 - 11:28:29 CST)
• ClanSphere 2007.4.4 Remote File Disclosure Vulnerability.
  • p4imi0 (Sun Jan 27 2008 - 17:36:59 CST)
• Clever Copy <=3.0 Multiple Remote Vulnerabilities
  • hadihadi_zedehal_2006yahoo.com (Thu Jan 17 2008 - 02:54:46 CST)
• common dns misconfiguration can lead to "same site" scripting
  • David Malone (Mon Jan 21 2008 - 11:04:27 CST)
  • Florian Weimer (Mon Jan 21 2008 - 11:19:02 CST)
  • Florian Weimer (Mon Jan 21 2008 - 02:25:08 CST)
  • Kurt Grutzmacher (Fri Jan 18 2008 - 18:02:23 CST)
  • Tavis Ormandy (Fri Jan 18 2008 - 10:40:58 CST)
• contactforms "cforms-css.php" Remote File Inclusion
  • Sw33t.h4cK3rhotmail.securityfocus.com (Wed Jan 30 2008 - 21:14:03 CST)
• CORE-2007-1106: SynCE Remote Command Injection
  • CORE Security Technologies Advisories (Mon Jan 07 2008 - 13:36:11 CST)
• CORE-2007-1119: CORE FORCE Kernel Buffer Overflow
  • CORE Security Technologies Advisories (Thu Jan 17 2008 - 15:20:48 CST)
• CORE-2007-1219: Firebird Remote Memory Corruption
  • Core Security Technologies Advisories (Mon Jan 28 2008 - 11:32:00 CST)
• Corsaire Security Advisory: Sun J2RE DoS issue
  • advisories (Tue Jan 08 2008 - 06:36:53 CST)
• Country by Country Computer Sets now available for ISA 2004
  • Thor (Hammer of God) (Wed Jan 16 2008 - 14:00:25 CST)
• Country by Country ISA Computer Sets
  • Jim Harrison (Mon Jan 21 2008 - 11:17:56 CST)
  • Thor (Hammer of God) (Sat Jan 19 2008 - 12:41:04 CST)
  • Thor (Hammer of God) (Wed Jan 16 2008 - 17:03:26 CST)
  • Richard Powell (Fri Jan 18 2008 - 13:45:51 CST)
  • Thor (Hammer of God) (Fri Jan 18 2008 - 13:37:15 CST)
  • Thor (Hammer of God) (Wed Jan 16 2008 - 16:19:45 CST)
  • GomoR (Wed Jan 16 2008 - 15:53:51 CST)
  • The Fungi (Thu Jan 17 2008 - 12:01:35 CST)
  • Thor (Hammer of God) (Mon Jan 14 2008 - 16:20:50 CST)
• cPanel Hosting Manager (dohtaccess.html)
  • no-replyaria-security.net (Tue Jan 15 2008 - 22:09:29 CST)
• Cross site scripting (XSS) in Moodle 1.8.3
  • Hanno Böck (Fri Jan 11 2008 - 17:51:55 CST)
• Cross-Site Scripting (XSS) in phpWebSite 1.4.0 search
  • Audun Larsen (Tue Jan 01 2008 - 08:12:08 CST)
• Cryptome: NSA has real-time access to Hushmail servers
  • M. Burnett (Mon Dec 31 2007 - 11:41:38 CST)
  • Lee Dilkie (Tue Jan 01 2008 - 11:47:48 CST)
  • John Simpson (Tue Jan 01 2008 - 23:38:07 CST)
• CSRF/XSS in Sungard Banner
  • bannerch4n.org (Tue Jan 29 2008 - 10:43:59 CST)
• Defeating audio captcha systems
  • 3APA3A (Tue Jan 15 2008 - 16:33:34 CST)
  • JosŽé M. Palazón Romero (Tue Jan 15 2008 - 00:01:03 CST)
• DeluxeBB 1.1 XSS Vulnerabilitie
  • nbbngmx.net (Tue Jan 22 2008 - 11:07:53 CST)
• Digital Armaments January-February Hacking Challenge: Special 20.000$ Prize - Windows Vulnerabilities and Exploit
  • infodigitalarmaments.com (Thu Jan 10 2008 - 04:36:44 CST)
• E-SMART CART bypass
  • milad_sa2007yahoo.com (Thu Jan 24 2008 - 17:13:30 CST)
• ERRATA: [ GLSA 200709-07 ] Eggdrop: Buffer overflow
  • Robert Buchholz (Tue Jan 08 2008 - 16:05:52 CST)
• eTicket 'index.php' Cross Site Scripting Path Vulnerability
  • Alessandro Tanasi (Sun Jan 27 2008 - 07:07:35 CST)
• eTicket 1.5.5.2 Multiple Vulnerabilities
  • L4teral (Sun Jan 06 2008 - 13:22:23 CST)
• Exploit in IE6,7
  • Nick FitzGerald (Mon Jan 28 2008 - 16:25:42 CST)
  • r2thotmail.it (Mon Jan 28 2008 - 05:37:17 CST)
• Exploiting the SpamBam plugin for wordpress
  • JosŽé M. Palazón Romero (Tue Jan 15 2008 - 00:01:53 CST)
• F5 BIG-IP Web Management ASM Security Report XSS
  • nnposterdisclosed.not (Fri Jan 25 2008 - 22:56:47 CST)
• F5 BIG-IP Web Management List Search XSS
  • nnposterdisclosed.not (Mon Jan 14 2008 - 08:36:46 CST)
• Facebook security contact
  • Alexander Sotirov (Mon Jan 28 2008 - 02:23:51 CST)
• First (Major) web hacking incidents for 2008. Sign of the year to come?
  • Paul Schmehl (Wed Jan 09 2008 - 10:37:33 CST)
  • Ofer Shezaf (Wed Jan 09 2008 - 07:57:37 CST)
• Flaw in Alice gate2 pluswifi adsl modem
  • wargame89yahoo.it (Mon Jan 21 2008 - 07:41:58 CST)
• FortiGuard: URL Filtering Application Bypass Vulnerability
  • 3APA3A (Fri Jan 04 2008 - 13:25:01 CST)
  • Danux (Thu Jan 03 2008 - 17:27:58 CST)
• FreeBSD Security Advisory FreeBSD-SA-08:01.pty
  • FreeBSD Security Advisories (Mon Jan 14 2008 - 17:09:39 CST)
• FreeBSD Security Advisory FreeBSD-SA-08:02.libc
  • FreeBSD Security Advisories (Mon Jan 14 2008 - 17:09:43 CST)
• Garment Center (index.cgi) Local File Inclusion
  • Smasherciucciamiilcalzino.it (Mon Jan 14 2008 - 11:13:46 CST)
  • Smasherciucciamiilcalzino.it (Sat Jan 12 2008 - 10:44:24 CST)
• gdb bug
  • digit2004optonline.net (Thu Jan 24 2008 - 15:49:16 CST)
• Gradman <= 0.1.3 (agregar_info.php?tabla=) Local File Inclusion Exploit
  • sys-projecthotmail.com (Wed Jan 16 2008 - 15:11:31 CST)
• Hacking The Interwebs
  • pdp (architect) (Sun Jan 13 2008 - 02:27:05 CST)
• HPSBUX02153 SSRT061181 rev.7 - HP-UX Running Firefox, Remote Unauthorized Access or Elevation of Privileges or Denial of Service (DoS)
  • security-alerthp.com (Tue Jan 08 2008 - 06:57:04 CST)
• HPSBUX02156 SSRT061236 rev.4 - HP-UX Running Thunderbird, Remote Unauthorized Access or Elevation of Privileges or Denial of Service (DoS)
  • security-alerthp.com (Tue Jan 08 2008 - 06:57:54 CST)
• iDefense Security Advisory 01.07.08: Motorola netOctopus Agent MSR Write Privilege Escalation Vulnerability
  • iDefense Labs (Mon Jan 07 2008 - 15:09:53 CST)
• iDefense Security Advisory 01.09.08: Novell NetWare Client nicm.sys Local Privilege Escalation Vulnerability
  • iDefense Labs (Wed Jan 09 2008 - 15:06:53 CST)
• iDefense Security Advisory 01.15.08: Apple QuickTime Macintosh Resource Processing Heap Corruption Vulnerability
  • iDefense Labs (Tue Jan 15 2008 - 17:15:44 CST)
• iDefense Security Advisory 01.15.08: TIBCO SmartSockets RTserver Heap Overflow Vulnerability
  • iDefense Labs (Tue Jan 15 2008 - 13:01:23 CST)
• iDefense Security Advisory 01.15.08: TIBCO SmartSockets RTServer Multiple Untrusted Loop Bounds Vulnerabilities
  • iDefense Labs (Tue Jan 15 2008 - 13:18:52 CST)
• iDefense Security Advisory 01.15.08: TIBCO SmartSockets RTserver Multiple Untrusted Pointer Offset Vulnerabilities
  • iDefense Labs (Tue Jan 15 2008 - 13:12:38 CST)
• iDefense Security Advisory 01.15.08: TIBCO SmartSockets RTServer Multiple Untrusted Pointer Vulnerabilities
  • iDefense Labs (Tue Jan 15 2008 - 13:04:42 CST)
• iDefense Security Advisory 01.17.08: Multiple Vendor X Server EVI and MIT-SHM Extensions Integer Overflow Vulnerabilities
  • iDefense Labs (Thu Jan 17 2008 - 14:40:27 CST)
• iDefense Security Advisory 01.17.08: Multiple Vendor X Server TOG-CUP Extension Information Disclosure Vulnerability
  • iDefense Labs (Thu Jan 17 2008 - 14:40:17 CST)
• iDefense Security Advisory 01.17.08: Multiple Vendor X Server XFree86-Misc Extension Invalid Array Index Vulnerability
  • iDefense Labs (Thu Jan 17 2008 - 14:40:35 CST)
• iDefense Security Advisory 01.17.08: Multiple Vendor X Server XInput Extension Multiple Memory Corruption Vulnerabilities
  • iDefense Labs (Thu Jan 17 2008 - 14:40:06 CST)
• iDefense Security Advisory 01.22.08: IBM Tivoli PMfOSD HTTP Request Method Buffer Overflow Vulnerability
  • iDefense Labs (Thu Jan 24 2008 - 13:07:54 CST)
• iDefense Security Advisory 01.23.08: IBM AIX pioout BSS Buffer Overflow Vulnerability
  • iDefense Labs (Thu Jan 24 2008 - 13:19:05 CST)
• iDefense Security Advisory 12.24.07: Novell ZENworks Endpoint Security Management Local Privilege Escalation Vulnerability
  • iDefense Labs (Fri Jan 04 2008 - 15:42:46 CST)
• ImageAlbum Remote SQL Injection Vulnerabilities
  • dbrawsecurity.org (Thu Jan 10 2008 - 21:09:20 CST)
• ImageShack Toolbar FileUploader Class insecurities
  • retrogalice.it (Thu Jan 24 2008 - 02:57:09 CST)
• IMF 2008 - Call for Papers
  • Oliver Goebel (Thu Jan 17 2008 - 16:28:10 CST)
• Insecure Use of RC4 in LSrunasE and Supercrypt (CVE-2007-6340)
  • Daniel Roethlisberger (Tue Jan 29 2008 - 15:11:13 CST)
• INVISION POWER BOARD 2.1.7 ACTIVE XSS/SQL INJECTION EXPLOIT
  • underwateritdefence.ru (Sat Jan 05 2008 - 07:29:32 CST)
• Joomla 1.0.13 CSRF
  • J. Carlos Nieto (Tue Jan 08 2008 - 12:36:56 CST)
  • J. Carlos Nieto (Tue Jan 08 2008 - 12:07:49 CST)
• JoomlaFlash Component Multiple Remote File Inclusion
  • Smasherciucciamiilcalzino.it (Wed Jan 16 2008 - 18:06:03 CST)
• Latest round of web hacking incidents for 2007 & Project news
  • s f (Thu Jan 03 2008 - 20:28:50 CST)
  • Peter Watkins (Thu Jan 03 2008 - 13:41:35 CST)
  • Memisyazici, Aras (Sun Dec 30 2007 - 06:13:24 CST)
  • Ofer Shezaf (Tue Jan 01 2008 - 11:46:26 CST)
• LayerOne 2008 - CFP Released
  • Layer One (Mon Jan 07 2008 - 12:56:24 CST)
• Level-One WBR-3460A Grants Root Access
  • anastasiosmgmail.com (Mon Jan 07 2008 - 18:24:45 CST)
• LFI in Tuned Studios Templates
  • Digital Security Research Group [DSecRG] (Wed Jan 09 2008 - 08:47:32 CST)
• Linksys WRT54 GL - Session riding (CSRF)
  • Valdis.Kletnieksvt.edu (Tue Jan 15 2008 - 12:14:03 CST)
  • Daniel Weber (Tue Jan 15 2008 - 12:08:09 CST)
  • Jan Heisterkamp (Mon Jan 14 2008 - 12:58:17 CST)
  • J. Oquendo (Mon Jan 14 2008 - 11:31:41 CST)
  • Tomaz (Mon Jan 14 2008 - 01:20:42 CST)
  • Florian Weimer (Fri Jan 11 2008 - 04:54:20 CST)
  • Jan Heisterkamp (Mon Jan 07 2008 - 13:19:13 CST)
  • Jan Heisterkamp (Mon Jan 07 2008 - 13:42:28 CST)
  • tomaz.bratusateamintell.com (Mon Jan 07 2008 - 03:40:52 CST)
• Making big money...
  • jmacaranasfxdd.com (Thu Jan 17 2008 - 08:22:35 CST)
• Mambo 4.6.3 Path Disclosure, XSS , XSRF, DOS
  • adminbugreport.ir (Mon Jan 28 2008 - 07:47:22 CST)
• Max's File Uploader File Upload Vulnerability
  • xcross87gmail.com (Tue Jan 15 2008 - 09:12:26 CST)
• mcGuestbook v1.2 Remote File Inc.
  • the.tiger100gmail.com (Thu Jan 17 2008 - 06:07:29 CST)
  • gokhankayahotmail.com (Wed Jan 16 2008 - 12:44:01 CST)
• MegaBBS ASP Forum Cross-Site Scripting
  • grossmanyahoo.com (Sun Jan 20 2008 - 16:27:52 CST)
• Member Area System (MAS) Remote File Include Vulnerability (view_func.php)
  • m3vengeyahoo.com (Fri Jan 18 2008 - 11:01:36 CST)
  • ship_nxyahoo.com (Fri Jan 11 2008 - 05:12:20 CST)
• Metasploit Framework v3.1 Released
  • H D Moore (Sun Jan 27 2008 - 23:32:31 CST)
• MicroNews Admin Direct Access vulnerability
  • xcross87gmail.com (Tue Jan 15 2008 - 09:33:33 CST)
• Million Dollar Script 2.0.14 Remote File Disclosure Vulnerability.
  • p4imi0 (Mon Jan 07 2008 - 11:58:39 CST)
• MODx CMS Source code disclosure, local file inclusion
  • adminbugreport.ir (Wed Jan 02 2008 - 00:51:05 CST)
• MTCMS <=2.0 SQL Injection Vulnerbility
  • hadihadi_zedehal_2006yahoo.com (Thu Jan 10 2008 - 12:18:23 CST)
• multiple CAPTCHA automation test bypass digest
  • 3APA3A (Thu Jan 03 2008 - 13:53:27 CST)
• Multiple vulnerabilities in Georgia SoftWorks SSH2 Server 7.01.0003
  • Luigi Auriemma (Wed Jan 02 2008 - 13:55:57 CST)
• Multiple vulnerabilities in yaSSL 1.7.5
  • Luigi Auriemma (Fri Jan 04 2008 - 11:53:32 CST)
• MyBB 1.2.11 Multiple XSRF Vulnerabilities
  • nbbngmx.net (Fri Jan 18 2008 - 14:50:23 CST)
• Naymz multiple XSS
  • morin.joshgmail.com (Fri Jan 11 2008 - 11:11:32 CST)
• netrisk 1.9.7 Multiple Remote Vulnerabilities (sql injection/xss)
  • hadihadi_zedehal_2006yahoo.com (Sun Jan 06 2008 - 07:50:59 CST)
• NetRisk 1.9.7 Remote File Inclusion Vulnerability
  • erneernealizm.us (Fri Jan 04 2008 - 18:07:16 CST)
• New search engine for exploits
  • Security Basic (Thu Jan 17 2008 - 19:46:40 CST)
• New Web Hacking Incidents at WHID
  • Ofer Shezaf (Mon Jan 07 2008 - 08:09:39 CST)
• nilson's blogger 0.11 remote file disclosure vulnerabilities
  • muuratsalo experimental hack lab (Thu Jan 31 2008 - 13:56:34 CST)
• Nucleus 3.31 XSS in path
  • Digital Security Research Group (Tue Jan 29 2008 - 11:30:43 CST)
• OneCMS Vulnerabilities
  • webmasterinsanevisions.com (Sat Jan 26 2008 - 12:56:45 CST)
  • adminbugreport.ir (Mon Jan 07 2008 - 02:49:47 CST)
• PacerCMS Multiple Vulnerabilities (XSS/SQL)
  • dbrawsecurity.org (Tue Jan 22 2008 - 06:14:06 CST)
• Pass-The-Hash Toolkit v1.2 released.
  • Hernan Ochoa (Mon Jan 21 2008 - 10:37:06 CST)
• Peers static overflow in BitTorrent 6.0 and uTorrent 1.7.5
  • Luigi Auriemma (Fri Jan 25 2008 - 13:42:50 CST)
  • Luigi Auriemma (Wed Jan 16 2008 - 12:47:28 CST)
• PeteFinnigan.com Limited advisory for Oracle January 2008 CPU
  • Pete Finnigan (Wed Jan 30 2008 - 11:51:09 CST)
• PHP 5.2.5 cURL safe_mode bypass
  • cxibsecurityreason.com (Tue Jan 22 2008 - 16:32:27 CST)
• Php Search Remote Inclusion
  • effectiveness63gmail.com (Sun Jan 20 2008 - 10:11:02 CST)
• phpBB 2.0.22 Remote PM Delete XSRF Vulnerability
  • nbbngmx.net (Wed Jan 23 2008 - 14:28:59 CST)
• phpBB2 2.0.22 Cross Site Scripting Vulnerability
  • neothermicphpbb.com (Thu Jan 03 2008 - 16:28:53 CST)
  • adminbatznet.com (Thu Jan 03 2008 - 13:39:49 CST)
  • neothermicphpbb.com (Thu Jan 03 2008 - 11:28:47 CST)
  • bugtraqopencosmo.com (Wed Jan 02 2008 - 13:54:30 CST)
• PHPEchoCMS Multible remote vulnerabilitis
  • securitysoqor.net (Wed Jan 16 2008 - 23:07:58 CST)
• phpIP 4.3.2 - Numerous SQL Injection Vulnerablities
  • Charles Hooper (Sat Jan 26 2008 - 19:08:48 CST)
• PHPKIT 1.6.4 PL1 2 XSRF Vulnerabilities
  • nbbngmx.net (Tue Jan 29 2008 - 10:14:34 CST)
• PhPress-0.3.0 Read All Sql Information For Config
  • r2thotmail.it (Sat Jan 26 2008 - 04:04:45 CST)
• Pipe to FOR Crashes CMD
  • James C. Slora Jr. (Tue Jan 15 2008 - 09:41:06 CST)
• PIX Privilege Escalation Vulnerability
  • Aaron Collins (Mon Feb 25 2008 - 13:40:08 CST)
  • tbbunnctc.net (Thu Jan 24 2008 - 19:24:32 CST)
  • Eloy Paris (Thu Jan 24 2008 - 10:40:08 CST)
  • tbbunnctc.net (Wed Jan 23 2008 - 21:42:53 CST)
• PostgreSQL 2007-01-07 Cumulative Security Release
  • Josh Berkus (Mon Jan 07 2008 - 11:14:31 CST)
• PR07-06, PR07-07, PR07-08, PR07-09, PR07-10, PR07-12: Several XSS, Cross-domain Redirection and Frame Injection on Sun Java System Identity Manager
  • ProCheckUp Research (Thu Jan 10 2008 - 06:00:12 CST)
• PR07-38: XSS on sIFR
  • bugs+securityfocusnovemberborn.net (Tue Jan 22 2008 - 13:19:26 CST)
  • ProCheckUp Research (Tue Jan 22 2008 - 04:31:32 CST)
• Pre Dynamic Institution bypass
  • milad_sa2007yahoo.com (Thu Jan 24 2008 - 17:12:12 CST)
• Pre Hotel and Resorts reservation portal login bypass
  • milad_sa2007yahoo.com (Thu Jan 24 2008 - 17:08:30 CST)
• Pre-auth buffer-overflow in mySQL through yaSSL
  • Luigi Auriemma (Fri Jan 04 2008 - 11:54:45 CST)
• Pre-auth remote commands execution in SAP MaxDB 7.6.03.07
  • Luigi Auriemma (Wed Jan 09 2008 - 11:47:48 CST)
• Privileg escalation in Omegasoft Insel 7
  • MC Iglo (Wed Jan 09 2008 - 08:52:16 CST)
• PWDumpX v1.0 and PWDumpX v1.1 updated - bug fixes
  • Reed Arvin (Mon Jan 07 2008 - 13:57:58 CST)
• PWDumpX v1.4 - Dumps domain password cache, LSA secrets, password hashes, and password history hashes.
  • Reed Arvin (Mon Jan 07 2008 - 13:53:46 CST)
• re-resting of zzuf results
  • Hanno Böck (Thu Jan 10 2008 - 23:06:33 CST)
• Recent Web Hacks: WHID update for Janury 30th 2008
  • Michael Wojcik (Wed Jan 30 2008 - 10:32:46 CST)
  • Ofer Shezaf (Wed Jan 30 2008 - 07:31:16 CST)
• Remote File Disclosure in phpCMS 1.2.2
  • 3APA3A (Tue Jan 29 2008 - 11:45:37 CST)
  • Digital Security Research Group (Tue Jan 29 2008 - 11:26:07 CST)
• RichStrong CMS (showproduct.asp?cat=) Remote SQL Injection Exploit
  • sys-projecthotmail.com (Wed Jan 16 2008 - 05:36:08 CST)
• rPSA-2008-0001-1 dovecot
  • Jonathan Smith (Fri Jan 04 2008 - 01:31:59 CST)
  • Dominic Hargreaves (Fri Jan 04 2008 - 03:16:20 CST)
  • Steven M. Christey (Thu Jan 03 2008 - 19:13:04 CST)
  • Dominic Hargreaves (Thu Jan 03 2008 - 14:23:45 CST)
  • rPath Update Announcements (Thu Jan 03 2008 - 12:33:39 CST)
• rPSA-2008-0004-1 tshark wireshark
  • rPath Update Announcements (Thu Jan 03 2008 - 16:55:57 CST)
• rPSA-2008-0006-1 libexif
  • rPath Update Announcements (Fri Jan 04 2008 - 19:12:13 CST)
• rPSA-2008-0007-1 tetex tetex-afm tetex-dvips tetex-fonts tetex-latex tetex-xdvi
  • rPath Update Announcements (Fri Jan 04 2008 - 19:13:02 CST)
• rPSA-2008-0008-1 cups
  • rPath Update Announcements (Sat Jan 05 2008 - 09:11:53 CST)
• rPSA-2008-0015-1 cairo
  • rPath Update Announcements (Tue Jan 15 2008 - 16:52:53 CST)
• rPSA-2008-0016-1 postgresql postgresql-server
  • rPath Update Announcements (Tue Jan 15 2008 - 16:53:57 CST)
• rPSA-2008-0017-1 libxml2
  • rPath Update Announcements (Tue Jan 15 2008 - 16:54:33 CST)
• rPSA-2008-0018-1 mysql mysql-bench mysql-server
  • rPath Update Announcements (Thu Jan 17 2008 - 09:32:21 CST)
• rPSA-2008-0021-1 kernel
  • rPath Update Announcements (Thu Jan 17 2008 - 10:11:45 CST)
• rPSA-2008-0029-1 bind bind-utils
  • rPath Update Announcements (Thu Jan 24 2008 - 13:34:27 CST)
• rPSA-2008-0030-1 CherryPy
  • rPath Update Announcements (Thu Jan 24 2008 - 13:42:57 CST)
• rPSA-2008-0032-1 xorg-x11 xorg-x11-fonts xorg-x11-tools xorg-x11-xfs
  • rPath Update Announcements (Wed Jan 30 2008 - 16:06:21 CST)
• Safari 2 Denial of Service
  • S21sec labs (Sat Jan 12 2008 - 09:30:14 CST)
• SDL_Image 1.2.6 and prior GIF handling buffer overflow
  • Gynvael Coldwind (Wed Jan 23 2008 - 02:20:30 CST)
• SecurityReason - Apache (mod_proxy_ftp) Undefined Charset UTF-7 XSS Vulnerability
  • sp3xsecurityreason.com (Thu Jan 10 2008 - 17:30:59 CST)
• SecurityReason - Apache (mod_status) Refresh Header - Open Redirector (XSS)
  • sp3xsecurityreason.com (Tue Jan 15 2008 - 02:33:08 CST)
• SecurityReason - Apache2 CSRF, XSS, Memory Corruption and Denial of Service Vulnerability
  • sp3xsecurityreason.com (Thu Jan 10 2008 - 17:29:25 CST)
• securityvulns.com russian vulnerabilities digest
  • 3APA3A (Thu Jan 03 2008 - 14:50:08 CST)
• sflog! 0.96 remote file disclosure vulnerabilities
  • muuratsalo experimental hack lab (Thu Jan 31 2008 - 09:50:46 CST)
• Simple Machines Forum Cross-Site Scripting Vulnerabilities
  • devnull.org (Sat Jan 26 2008 - 22:52:22 CST)
  • DoZHackersCenter.com (Wed Jan 09 2008 - 20:12:49 CST)
• SinFP fingerprinting tool online demo
  • GomoR (Wed Jan 16 2008 - 15:55:22 CST)
• Skype videomood XSS
  • avivra (Thu Jan 17 2008 - 14:23:46 CST)
• SocialURL Login Page Cross-Site Scripting
  • morin.joshgmail.com (Mon Jan 07 2008 - 08:15:25 CST)
• SocksCap Stack Overflow (<= 2.40-051231)
  • azizovitdefence.ru (Fri Jan 18 2008 - 12:51:53 CST)
• Some DoS in some telnet servers
  • Luigi Auriemma (Fri Jan 04 2008 - 11:57:52 CST)
• Some hashes for the record
  • Sergio 'shadown' Alvarez (Tue Jan 22 2008 - 09:01:05 CST)
• SQID v0.3 - SQL Injection Digger.
  • Metaeye SG (Mon Jan 14 2008 - 08:17:36 CST)
• SQL scalar function to convert big int to dot notation
  • Thor (Hammer of God) (Wed Jan 16 2008 - 14:20:15 CST)
• Syhunt: HFS (HTTP File Server) Log Arbitrary File/Directory Manipulation and Denial-of-Service Vulnerabilities
  • Felipe M. Aragon (Wed Jan 23 2008 - 11:52:06 CST)
• Syhunt: HFS (HTTP File Server) Template Cross-Site Scripting and Information Disclosure Vulnerabilities
  • Felipe M. Aragon (Wed Jan 23 2008 - 11:47:17 CST)
• Syhunt: HFS (HTTP File Server) Username Spoofing and Log Forging/Injection Vulnerability
  • Felipe M. Aragon (Wed Jan 23 2008 - 11:52:35 CST)
• sysHotel On Line Remote File Disclosure Vulnerability.
  • p4imi0 (Tue Jan 08 2008 - 05:03:40 CST)
• Tiger PHP News System SQL Injection
  • 0in.emailgmail.com (Thu Jan 24 2008 - 10:41:40 CST)
• Tiger Team: New TV series about pen testers airing on CourtTV Dec 25 11 pm
  • michael.lambiegmail.com (Wed Jan 16 2008 - 14:41:15 CST)
• tinyBB v0.2 Message Board Remote File Inc.
  • g0rk3m-31hotmail.com (Wed Jan 30 2008 - 09:26:17 CST)
• Tool availability - browser DOM Checker
  • Michal Zalewski (Fri Jan 25 2008 - 17:49:09 CST)
• TPTI-08-01: Apple Quicktime Image File IDSC Atom Memory Corruption Vulnerability
  • DVLabs (Tue Jan 15 2008 - 17:02:03 CST)
• TPTI-08-02: Cisco Call Manager CTLProvider Heap Overflow Vulnerability
  • DVLabs (Wed Jan 16 2008 - 14:12:32 CST)
• Troopers 08 Security Conference, Call for Papers
  • Enno Rey (Tue Jan 22 2008 - 01:58:22 CST)
• Two vulnerabilities for PatchLink Update Client for Unix.
  • lcashdolgmail.com (Fri Jan 25 2008 - 14:29:30 CST)
• uCon 2008 call for participation - Recife, Brazil
  • uconthebugmagazine.org (Thu Jan 10 2008 - 05:02:21 CST)
• Uninformed Journal Release Announcement: Volume 9
  • Uninformed Journal (Mon Jan 28 2008 - 12:59:56 CST)
• UPDATED VMSA-2008-0001.1 Moderate OpenPegasus PAM Authentication Buffer Overflow and updated service console packages
  • VMware Security team (Tue Jan 22 2008 - 19:10:09 CST)
• Utimaco Safeguard Easy vulnerability
  • joachim.schneiderutimaco.de (Fri Jan 18 2008 - 13:07:41 CST)
  • benleavettgooglemail.com (Thu Jan 17 2008 - 09:13:50 CST)
• VB Marketing "tseekdir.cgi" Local File Inclusion
  • Sw33t.h4cK3rhotmail.securityfocus.com (Mon Jan 28 2008 - 11:27:23 CST)
• vBulletin 3.6.8 XSRF/XSS Vulnerability
  • nbbngmx.net (Mon Jan 07 2008 - 10:51:07 CST)
  • nbbngmx.net (Sat Jan 05 2008 - 15:46:14 CST)
• VMSA-2008-0001 Moderate OpenPegasus PAM Authentication Buffer Overflow and updated service console packages
  • VMware Security team (Mon Jan 07 2008 - 19:46:23 CST)
• VMSA-2008-0002 Low severity security update for VirtualCenter and ESX Server 3.0.2, and ESX 3.0.1
  • VMware Security team (Mon Jan 07 2008 - 19:56:48 CST)
• Web Wiz Forums Directory traversal
  • adminbugreport.ir (Wed Jan 23 2008 - 01:33:13 CST)
• Web Wiz NewsPad Directory traversal
  • adminbugreport.ir (Wed Jan 23 2008 - 01:34:33 CST)
• Web Wiz Rich Text Editor Directory traversal + HTM/HTML file creation on the server
  • adminbugreport.ir (Wed Jan 23 2008 - 01:36:27 CST)
• Webspell 4.01.02 2 Vulnerabilites
  • nbbngmx.net (Wed Jan 30 2008 - 07:12:58 CST)
• what is this?
  • Yousef Syed (Wed Jan 16 2008 - 02:57:44 CST)
  • none (Tue Jan 15 2008 - 11:26:47 CST)
  • Memisyazici, Aras (Tue Jan 15 2008 - 10:33:27 CST)
  • Jamie Riden (Tue Jan 15 2008 - 10:28:32 CST)
  • Denis (Tue Jan 15 2008 - 10:41:59 CST)
  • Denis (Tue Jan 15 2008 - 10:36:15 CST)
  • crazy frog crazy frog (Tue Jan 15 2008 - 00:12:33 CST)
  • Denis (Mon Jan 14 2008 - 23:16:03 CST)
  • Gadi Evron (Mon Jan 14 2008 - 15:46:05 CST)
  • Mario Contestabile (Mon Jan 14 2008 - 13:09:49 CST)
  • admintkroupa.net (Mon Jan 14 2008 - 09:29:39 CST)
  • Robert McArdle (Mon Jan 14 2008 - 09:59:25 CST)
  • crazy frog crazy frog (Mon Jan 14 2008 - 09:56:59 CST)
  • Robert McArdle (Mon Jan 14 2008 - 09:44:08 CST)
  • Jose Nazario (Mon Jan 14 2008 - 09:44:13 CST)
  • crazy frog crazy frog (Sun Jan 13 2008 - 11:33:02 CST)
  • crazy frog crazy frog (Sun Jan 13 2008 - 10:01:34 CST)
• WifiZoo v1.3 released (minor release)
  • Hernan Ochoa (Mon Jan 21 2008 - 06:46:54 CST)
• Woltlab Burning Board 2.3.6 PL2 Remote Delete Thread XSRF Vulnerability
  • nbbngmx.net (Wed Jan 23 2008 - 13:49:48 CST)
• WoltLab Burning Board 3.x.x Private Message Delete XSRF Vulnerability
  • nbbngmx.net (Sat Jan 26 2008 - 17:23:28 CST)
• Word 2007 Email as PDF path disclosure flaw
  • ebk_listshotmail.com (Thu Jan 10 2008 - 10:07:12 CST)
• XSRF under Dean’s Permalinks Migration 1.0
  • g30rg3_x (Tue Jan 22 2008 - 14:50:58 CST)
• xss in w3-msql error page
  • vivek_infosecyahoo.com (Thu Jan 03 2008 - 08:11:28 CST)
• XSS Vulnerabilities in Common Shockwave Flash Files
  • rich cannings (Wed Jan 02 2008 - 12:54:18 CST)
• Ye&#351;il Koridor Ziyareti Defteri (index.php) SqL. inj.
  • g0rk3m-31hotmail.com (Wed Jan 30 2008 - 06:33:13 CST)
• Yet another Dialog Spoofing Vulnerability - Firefox Basic Authentication
  • avivra (Thu Jan 03 2008 - 00:12:06 CST)
• ZDI-08-001: IBM Tivoli Storage Manager Express Backup Server Heap Overflow Vulnerability
  • zdi-disclosures3com.com (Mon Jan 14 2008 - 12:51:37 CST)
• ZDI-08-002: Citrix Presentation Server IMA Service Heap Overflow Vulnerability
  • zdi-disclosures3com.com (Thu Jan 17 2008 - 17:40:08 CST)

Last message date: Thu Jan 31 2008 - 17:06:18 CST
Archived on: Thu Jan 31 2008 - 17:06:18 CST

443 messages sorted by: [ author ] [ date ] [ thread ]