Most recent messages
269 messages sorted by: [ author ] [ thread ] [ subject ]

Starting: Wed Oct 01 2008 - 10:21:10 CDT
Ending: Fri Oct 31 2008 - 15:25:47 CDT

• RE: MySQL command-line client HTML injection vulnerability Quark IT - Hilton Travis (Tue Sep 30 2008 - 17:59:58 CDT)
• Printlog <= 0.4: Remote File Edition Vulnerability Pepelux (Tue Sep 30 2008 - 20:02:45 CDT)
• Oracle Password Cracker written in PL/SQL petepetefinnigan.com (Wed Oct 01 2008 - 06:37:51 CDT)
• Remote and Local File Inclusion Vulnerability <= 1.1 Rportal kadfroxgmail.com (Wed Oct 01 2008 - 14:24:23 CDT)
• phpMyID can act as a redirector and as headers injector atomo64gmail.com (Mon Sep 29 2008 - 19:55:49 CDT)
• Re: MS Internet Explorer 7 Denial Of Service Exploit Pruett, Mike (Wed Oct 01 2008 - 17:28:54 CDT)
• [USN-649-1] OpenSSH vulnerabilities Kees Cook (Wed Oct 01 2008 - 17:31:03 CDT)
• FreeBSD Security Advisory FreeBSD-SA-08:10.nd6 FreeBSD Security Advisories (Wed Oct 01 2008 - 19:39:19 CDT)
• Adobe Flash Player plug-in null pointer dereference and browser crash Matthew Dempsky (Wed Oct 01 2008 - 19:46:09 CDT)
• XSS vulnerability in phpMyID Raphael Geissert (Wed Oct 01 2008 - 20:08:06 CDT)
• Layered Defense Research Advisory: Juniper Netscreen Firewall Cross-Site-Scripting (XSS) event log injection dhlayereddefense.com (Wed Oct 01 2008 - 20:59:24 CDT)
• Re: [MajorSecurity Advisory #53]BLUEPAGE CMS - Cross Site Scripting and Session Fixation Issues adminmajorsecurity.de (Thu Oct 02 2008 - 05:00:04 CDT)
• HostAdmin Cross-Site Scripting Vulnerabilities adminirist.ir (Thu Oct 02 2008 - 11:20:25 CDT)
• Re: White Wolf Labs #080922-1: Exploitation Through ActiveSync 4.x Vladimir '3APA3A' Dubrovin (Thu Oct 02 2008 - 09:09:36 CDT)
• Re: Blue Coat xss Tom Kelly (Thu Oct 02 2008 - 14:56:59 CDT)
• Re: "Exploit creation - The random approach" or "Playing with random to build exploits" Nelson Brito (Thu Oct 02 2008 - 16:53:43 CDT)
• [USN-650-1] cpio vulnerability Jamie Strandboge (Thu Oct 02 2008 - 17:20:07 CDT)
• Website Directory - XSS Exploit Ghost hacker (Fri Oct 03 2008 - 08:01:50 CDT)
• Re: RE: MySQL command-line client HTML injection vulnerability mrry.dmlogmail.com (Fri Oct 03 2008 - 01:53:43 CDT)
• Re: "Exploit creation - The random approach" or "Playing with random to build exploits" Eygene Ryabinkin (Fri Oct 03 2008 - 10:43:24 CDT)
• Secunia Research: Trend Micro OfficeScan Directory Traversal Vulnerability Secunia Research (Fri Oct 03 2008 - 00:41:32 CDT)
• CMME Multiple Information disclosure vulnerabilities adminbugreport.ir (Sat Oct 04 2008 - 03:17:24 CDT)
• MetaGauge 1.0.0.17 Directory Traversal brad.antoniewiczfoundstone.com (Fri Oct 03 2008 - 15:02:11 CDT)
• AyeView v2.20 (malformed gif image) DoS Exploit crimson.loydgmail.com (Sat Oct 04 2008 - 14:49:42 CDT)
• iFoto, CSS-based GD2 photo gallery <= 1.0: Remote File Disclosure Vulnerability Pepelux (Sat Oct 04 2008 - 17:59:40 CDT)
• VMware Emulation Flaw x64 Guest Privilege Escalation (1/2) ds.adv.pubgmail.com (Fri Oct 03 2008 - 22:09:28 CDT)
• [SECURITY] [DSA-1645-1] New lighttpd packages fix various problems Steve Kemp (Mon Oct 06 2008 - 12:29:51 CDT)
• [ENABLESECURITY] Apple's Mail.app stores your S/MIME encrypted emails in clear text publistsenablesecurity.com (Mon Oct 06 2008 - 03:05:45 CDT)
• [ MDVSA-2008:209 ] pam_krb5 securitymandriva.com (Fri Oct 03 2008 - 18:25:00 CDT)
• [ MDVSA-2008:210 ] mono securitymandriva.com (Fri Oct 03 2008 - 19:17:00 CDT)
• FastStone Image Viewer v3.6 (malformed bmp image) DoS Exploit crimson.loydgmail.com (Sun Oct 05 2008 - 09:29:14 CDT)
• VMSA-2008-0016 VMware Hosted products, VirtualCenter Update 3 and patches for ESX and ESXi resolve multiple security issues VMware Security team (Fri Oct 03 2008 - 20:43:22 CDT)
• RE: RE: MySQL command-line client HTML injection vulnerability Quark IT - Hilton Travis (Sat Oct 04 2008 - 00:47:13 CDT)
• PHPWebExplorer <= 0.09b: Local File Inclusion Vulnerability Pepelux (Sat Oct 04 2008 - 10:58:05 CDT)
• FOSS Gallery Admin Version <= 1.0 / Remote Arbitrary Upload Vulnerability Pepelux (Sat Oct 04 2008 - 19:30:48 CDT)
• FOSS Gallery Public Version <= 1.0 / Arbitrary file upload Vulnerabilities Pepelux (Sat Oct 04 2008 - 19:40:52 CDT)
• [SECURITY] [DSA 1643-1] New feta packages fix denial of service Moritz Muehlenhoff (Sun Oct 05 2008 - 06:08:24 CDT)
• OpenNMS Multiple Vulnerabilities Trancer (Sun Oct 05 2008 - 11:44:51 CDT)
• [SECURITY] [DSA-1644-1] New mplayer packages fix integer overflows Devin Carraway (Sun Oct 05 2008 - 15:55:31 CDT)
• Motorola Timbuktu's Internet Locator Service real-time data exposed to public. vulnswintercore.com (Mon Oct 06 2008 - 07:31:51 CDT)
• Re: AyeView v2.20 (malformed gif image) DoS Exploit Vladimir '3APA3A' Dubrovin (Mon Oct 06 2008 - 14:27:53 CDT)
• [SECURITY] [DSA 1647-1] New php5 packages fix several vulnerabilities Thijs Kinkhorst (Tue Oct 07 2008 - 01:52:54 CDT)
• Firefox Privacy Broken If Used to Open Web Page File Liu Die Yu (Tue Oct 07 2008 - 03:32:09 CDT)
• [SECURITY] [DSA-1646-1] New squid packages fix array bounds check Devin Carraway (Tue Oct 07 2008 - 01:12:02 CDT)
• HostAdmin 3.* Remote File Include Vulnerabilities adminirist.ir (Tue Oct 07 2008 - 00:04:22 CDT)
• Yerba SACphp <= 6.3 / Local File Inclusion Exploit Pepelux (Mon Oct 06 2008 - 18:12:02 CDT)
• Re: Verizon FIOS (and DSL?) wireless access point insecure default WEP key Michael Scheidell (Mon Oct 06 2008 - 17:38:05 CDT)
• [security bulletin] HPSBUX02375 SSRT080122 rev.1 - HP-UX Running NFS/ONCplus, Remote Denial of Service (DoS) security-alerthp.com (Tue Oct 07 2008 - 07:28:56 CDT)
• [OPENX-SA-2008-002] OpenX 2.4.9 and 2.6.2 fix SQL injection vulnerability Matteo Beccati (Tue Oct 07 2008 - 11:58:45 CDT)
• [ GLSA 200810-01 ] WordNet: Execution of arbitrary code Tobias Heinlein (Tue Oct 07 2008 - 13:13:38 CDT)
• Re: iFoto, CSS-based GD2 photo gallery <= 1.0: Remote File Disclosure Vulnerability Lostmongmail.com (Tue Oct 07 2008 - 13:52:48 CDT)
• Re: Motorola Timbuktu's Internet Locator Service real-time data exposed to public. artful38yahoo.com (Tue Oct 07 2008 - 15:06:24 CDT)
• ANNOUNCE - RFIDIOt version 0.1t released Adam Laurie (Wed Oct 08 2008 - 09:28:43 CDT)
• Re: HostAdmin 3.* Remote File Include Vulnerabilities adminmajorsecurity.de (Tue Oct 07 2008 - 17:52:49 CDT)
• [W02-1008] GearSoftware Powered Products Local Privilege Escalation (Microsoft Windows Kernel IopfCompleteRequest Integer Overflow) vulnswintercore.com (Tue Oct 07 2008 - 16:02:46 CDT)
• Cisco Security Advisory: Authentication Bypass in Cisco Unity Cisco Systems Product Security Incident Response Team (Wed Oct 08 2008 - 11:18:26 CDT)
• Windows Mobile 6 insecure password handling and too short WLAN-password MC Iglo (Wed Oct 08 2008 - 13:54:47 CDT)
• Advisory: Graphviz Buffer Overflow Code Execution roeehil.ibm.com (Wed Oct 08 2008 - 13:51:19 CDT)
• [SECURITY] [DSA 1648-1] New mon packages fix insecure temporary files Thijs Kinkhorst (Wed Oct 08 2008 - 14:34:19 CDT)
• Re: MySQL command-line client HTML injection vulnerability Michael Scheidell (Wed Oct 08 2008 - 15:26:52 CDT)
• [SECURITY] [DSA 1649-1] New iceweasel packages fix several vulnerabilities Moritz Muehlenhoff (Wed Oct 08 2008 - 15:15:55 CDT)
• ZDI-08-063: Novell eDirectory dhost.exe Content-Length Header Heap Overflow Vulnerability zdi-disclosures3com.com (Wed Oct 08 2008 - 16:32:29 CDT)
• ZDI-08-064: Novell eDirectory dhost.exe Accept Language Header Heap Overflow Vulnerability zdi-disclosures3com.com (Wed Oct 08 2008 - 16:32:55 CDT)
• ZDI-08-065: Novell eDirectory Core Protocol Opcode 0x0F Heap Overflow Vulnerability zdi-disclosures3com.com (Wed Oct 08 2008 - 16:33:21 CDT)
• Re: Motorola Timbuktu's Internet Locator Service real-time data exposed to public. Juha-Matti Laurio (Wed Oct 08 2008 - 15:58:41 CDT)
• Token Kidnapping Windows 2003 PoC exploit Cesar (Wed Oct 08 2008 - 16:33:39 CDT)
• ZDI-08-066: Novell eDirectory Core Protocol Opcode 0x24 Heap Overflow Vulnerability zdi-disclosures3com.com (Wed Oct 08 2008 - 16:33:44 CDT)
• FC2 BLOG Cross-Site Scripting Vulnerabilities xsp (Wed Oct 08 2008 - 20:35:29 CDT)
• [security bulletin] HPSBMA02376 SSRT080099 rev.1 - HP System Management Homepage (SMH) for Linux and Windows, Remote Cross Site Scripting (XSS) security-alerthp.com (Thu Oct 09 2008 - 07:25:35 CDT)
• PR08-24: Proxim Tsunami MP.11 2411 vulnerable to SNMP Injection ProCheckUp Research (Thu Oct 09 2008 - 08:02:44 CDT)
• [security bulletin] HPSBMA02362 SSRT080044, SSRT080045, SSRT080042 rev.2 - HP OpenView Network Node Manager (OV NNM), Remote Denial of Service (DoS), Execute Arbitrary Code security-alerthp.com (Thu Oct 09 2008 - 07:24:21 CDT)
• News Manager Remote SQL Injection Vulnerability Ghost hacker (Thu Oct 09 2008 - 04:21:25 CDT)
• PR07-31: Unauthenticated SQL Injection, XSS on Login Page and Username Enumeration on DPSnet Case Progress ProCheckUp Research (Thu Oct 09 2008 - 04:35:35 CDT)
• [security bulletin] HPSBMA02374 SSRT080046 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Denial of Service (DoS) security-alerthp.com (Thu Oct 09 2008 - 07:25:01 CDT)
• Re: Token Kidnapping Windows 2003 PoC exploit groovydudemywasteofbandwidth.com (Thu Oct 09 2008 - 07:25:41 CDT)
• [ GLSA 200810-02 ] Portage: Untrusted search path local root vulnerability Robert Buchholz (Thu Oct 09 2008 - 12:36:48 CDT)
• Re: PR08-24: Proxim Tsunami MP.11 2411 vulnerable to SNMP Injection Vladimir '3APA3A' Dubrovin (Thu Oct 09 2008 - 13:20:45 CDT)
• Re: Motorola Timbuktu's Internet Locator Service real-time data exposed to public. therese.vanrynemotorola.com (Thu Oct 09 2008 - 11:04:02 CDT)
• Re: PR08-24: Proxim Tsunami MP.11 2411 vulnerable to SNMP Injection lee.e.riancensus.gov (Thu Oct 09 2008 - 16:24:27 CDT)
• CA ARCserve Backup Multiple Vulnerabilities Williams, James K (Thu Oct 09 2008 - 16:57:05 CDT)
• Re: News Manager Remote SQL Injection Vulnerability packetpacketstormsecurity.org (Thu Oct 09 2008 - 17:20:30 CDT)
• [SECURITY] CVE-2008-3271 - Apache Tomcat information disclosure Mark Thomas (Thu Oct 09 2008 - 17:46:19 CDT)
• ZDI-08-067: Apple CUPS 1.3.7 (HP-GL/2 filter) Remote Code Execution Vulnerability zdi-disclosures3com.com (Thu Oct 09 2008 - 21:21:04 CDT)
• [USN-651-1] Ruby vulnerabilities Jamie Strandboge (Thu Oct 09 2008 - 21:25:50 CDT)
• Re[2]: PR08-24: Proxim Tsunami MP.11 2411 vulnerable to SNMP Injection Vladimir '3APA3A' Dubrovin (Fri Oct 10 2008 - 01:28:43 CDT)
• Re: PR08-24: Proxim Tsunami MP.11 2411 vulnerable to SNMP Injection ProCheckUp Research (Fri Oct 10 2008 - 03:35:33 CDT)
• [LC-2008-04] Nokia Browser Array Sort Denial Of Service Vulnerability luca.carettoniikkisoft.com (Fri Oct 10 2008 - 11:04:01 CDT)
• [ MDVSA-2008:211 ] cups securitymandriva.com (Sat Oct 11 2008 - 03:41:00 CDT)
• [ MDVSA-2008:210-1 ] mono securitymandriva.com (Sat Oct 11 2008 - 12:50:00 CDT)
• CA BrightStor ARCServe BackUp Message Engine Remote Command Injection Vulnerability cocoruder (Fri Oct 10 2008 - 19:43:41 CDT)
• Uninformed Journal Release Announcement: Volume 10 sflistdigitaloffense.net (Mon Oct 13 2008 - 10:28:40 CDT)
• Marvell Driver Malformed Association Request Vulnerability Laurent Butti (Mon Oct 13 2008 - 06:29:40 CDT)
• [SECURITY] [DSA 1646-2] New squid packages fix array bounds check Devin Carraway (Sat Oct 11 2008 - 01:46:58 CDT)
• CREATE ANY DIRECTORY to SYSDBA paul.wrightoracleforensics.com (Sat Oct 11 2008 - 04:39:46 CDT)
• Re: Re: Token Kidnapping Windows 2003 PoC exploit ideaburneryahoo.com (Sat Oct 11 2008 - 13:42:28 CDT)
• &#304;ltaweb Al&#305;&#351;veri&#351; Sistemi (tr) Sql inj ozdemirtravelgmail.com (Sat Oct 11 2008 - 03:08:54 CDT)
• NewLife Blogger <= v3.0 / Insecure Cookie Handling & SQL Injection Vulnerability Pepelux (Sun Oct 12 2008 - 18:55:59 CDT)
• [SECURITY] [DSA 1652-1] New ruby1.9 packages fix several vulnerabilities Moritz Muehlenhoff (Sun Oct 12 2008 - 04:37:58 CDT)
• iSEC Partners Security Advisory - 2008-002-lenovornr - Lenovo Rescue and Recovery 4.20 Chris Clark (Fri Oct 10 2008 - 17:24:59 CDT)
• [SECURITY] [DSA 1653-1] New Linux 2.6.18 packages fix several vulnerabilities dann frazier (Mon Oct 13 2008 - 15:25:41 CDT)
• Telecom Italia Alice Pirelli routers backdoor discoverd to activate telnet/ftp/tftp from internal LAN/WLAN. drpepppperonegmail.com (Mon Oct 13 2008 - 17:57:10 CDT)
• [SECURITY] [DSA 1650-1] New openldap2.3 packags fix denial of service Moritz Muehlenhoff (Sun Oct 12 2008 - 04:35:44 CDT)
• [SECURITY] [DSA 1651-1] New ruby1.8 packages fix several vulnerabilities Moritz Muehlenhoff (Sun Oct 12 2008 - 04:36:52 CDT)
• [RISE-2008001] Sun Solstice AdminSuite sadmind adm_build_path() Buffer Overflow Vulnerability RISE Security (Tue Oct 14 2008 - 09:43:29 CDT)
• WP Comment Remix 1.4.3 Multiple Vulnerabilities g30rg3_x (Mon Oct 13 2008 - 23:37:16 CDT)
• [USN-653-1] D-Bus vulnerabilities Kees Cook (Tue Oct 14 2008 - 12:24:46 CDT)
• [SECURITY] [DSA 1654-1] New libxml2 packages fix execution of arbitrary code Steve Kemp (Tue Oct 14 2008 - 13:04:50 CDT)
• Webscene eCommerce (level) Remote Sql Injection angelch4ng.cc (Tue Oct 14 2008 - 11:29:29 CDT)
• [USN-652-1] LittleCMS vulnerability Kees Cook (Tue Oct 14 2008 - 12:24:07 CDT)
• iDefense Security Advisory 10.14.08: Microsoft Host Integration Server 2006 Command Execution Vulnerability iDefense Labs (Tue Oct 14 2008 - 14:22:42 CDT)
• CORE-2008-1010: VLC media player XSPF Memory Corruption CORE Security Technologies Advisories (Tue Oct 14 2008 - 16:16:57 CDT)
• ZDI-08-068: Microsoft Office Excel BIFF File Format Parsing Stack Overflow Vulnerability zdi-disclosures3com.com (Tue Oct 14 2008 - 16:46:51 CDT)
• ZDI-08-069: Microsoft Internet Explorer componentFromPoint Memory Corruption Vulnerability zdi-disclosures3com.com (Tue Oct 14 2008 - 16:46:55 CDT)
• TPTI-08-07: Microsoft Windows Message Queuing Service Heap Overflow and Memory Disclosure Vulnerability dvlabs (Tue Oct 14 2008 - 17:51:31 CDT)
• iDefense Security Advisory 10.14.08: Microsoft Visual Basic for Applications - Multiple Vulnerabilities labs-no-replyidefense.com (Tue Oct 14 2008 - 18:12:29 CDT)
• [USN-654-1] libexif vulnerabilities Kees Cook (Tue Oct 14 2008 - 19:32:47 CDT)
• iDefense Security Advisory 10.14.08: Sun Java Web Proxy Server FTP Resource Handling Heap-Based Buffer Overflow labs-no-replyidefense.com (Tue Oct 14 2008 - 19:43:22 CDT)
• [USN-655-1] exiv2 vulnerabilities Kees Cook (Tue Oct 14 2008 - 21:27:22 CDT)
• Vivid Ads Shopping Cart (cid) Remote SQL Injection djmomolive.com (Tue Oct 14 2008 - 23:05:48 CDT)
• MS OWA 2003 Redirection Vulnerability Martin Suess (Wed Oct 15 2008 - 04:18:24 CDT)
• Exploit for MS08-066 - AFD.sys kernel memory overwrite. Reversemode (Wed Oct 15 2008 - 08:03:11 CDT)
• Paper: Adventures with a certain Xen vulnerability Joanna Rutkowska (Wed Oct 15 2008 - 08:39:21 CDT)
• Internet Explorer 6 componentFromPoint() remote memory disclosure and remote code execution Ivan Fratric (Wed Oct 15 2008 - 08:42:42 CDT)
• [ MDVSA-2008:212 ] libxml2 securitymandriva.com (Wed Oct 15 2008 - 12:55:00 CDT)
• Re: MS OWA 2003 Redirection Vulnerability Stefano Di Paola (Wed Oct 15 2008 - 12:51:39 CDT)
• [security bulletin] HPSBMA02349 SSRT080043 rev.2 - HP OpenView Network Node Manager (OV NNM), Remote Unauthorized Access to Data security-alerthp.com (Wed Oct 15 2008 - 13:28:14 CDT)
• Multiple Flash Authoring Heap Overflows - Malformed SWF Files Paul Craig (Wed Oct 15 2008 - 16:02:28 CDT)
• [USN-656-1] CUPS vulnerabilities Jamie Strandboge (Wed Oct 15 2008 - 16:53:16 CDT)
• [ MDVSA-2008:213 ] dbus securitymandriva.com (Wed Oct 15 2008 - 15:40:00 CDT)
• SEC Consult SA-20081016-0 :: Remote command execution in Instant Expert Analysis Bernhard Mueller (Thu Oct 16 2008 - 08:16:03 CDT)
• HACKATTACK Advisory 20081016]WEB//NEWS SQL Injection and Cookie Manipulation officehackattack.at (Thu Oct 16 2008 - 06:48:13 CDT)
• rPSA-2008-0295-1 rails rPath Update Announcements (Thu Oct 16 2008 - 12:16:44 CDT)
• rPSA-2008-0294-1 postfix rPath Update Announcements (Thu Oct 16 2008 - 12:16:00 CDT)
• [ MDVSA-2008:214 ] mon securitymandriva.com (Thu Oct 16 2008 - 15:01:00 CDT)
• Re: Re: MS OWA 2003 Redirection Vulnerability martin.suesscsnc.ch (Wed Oct 15 2008 - 14:55:53 CDT)
• [SECURITY] [DSA 1655-1] New Linux 2.6.24 packages fix several vulnerabilities dann frazier (Thu Oct 16 2008 - 19:19:48 CDT)
• Doubt in MySQL Quick Admin <= 1.5.5 (COOKIE) Local File Inclusion Vulnerability POC posted on milworm vinodsharma.mimitgmail.com (Fri Oct 17 2008 - 00:04:12 CDT)
• flashchat severe bug ch0p83gmail.com (Fri Oct 17 2008 - 09:44:38 CDT)
• Re: Doubt in MySQL Quick Admin <= 1.5.5 (COOKIE) Local File Inclusion Vulnerability POC posted on milworm g30rg3_x (Fri Oct 17 2008 - 11:30:38 CDT)
• Re: MS OWA 2003 Redirection Vulnerability - [MSRC 7368br] Davide Del Vecchio (Fri Oct 17 2008 - 14:07:58 CDT)
• Application-level OS fingerprinting research - pre-release hashes dan.crowleygmail.com (Fri Oct 17 2008 - 14:22:39 CDT)
• Re: [Full-disclosure] MS OWA 2003 Redirection Vulnerability - [MSRC7368br] Morning Wood (Sat Oct 18 2008 - 13:19:07 CDT)
• HITBSecConf2008 - Malaysia: Online registration closes on 24th Oct Praburaajan (Sat Oct 18 2008 - 18:09:43 CDT)
• [ MDVSA-2008:208-1 ] pam_mount securitymandriva.com (Sat Oct 18 2008 - 18:49:00 CDT)
• Re: MS OWA 2003 Redirection Vulnerability - [MSRC7368br] Davide Dante Del Vecchio (Sat Oct 18 2008 - 20:16:51 CDT)
• CVE-2008-2625: Oracle DBMS – Proxy Authentication Vulnerability shulmanimperva.com (Sun Oct 19 2008 - 01:26:11 CDT)
• CVE-2008-4000: Oracle PeopleTools – Authentication Weakness shulmanimperva.com (Sun Oct 19 2008 - 01:28:26 CDT)
• Cross Site Scripting (XSS) Vulnerabilitiy in cpcommerce, CVE-2008-4121 Fabian Fingerle (Sun Oct 19 2008 - 17:01:42 CDT)
• FireGPG Passphrase And Cleartext Vulnerability Mike Benham (Mon Oct 20 2008 - 00:33:21 CDT)
• Secunia Research: HP SiteScope SNMP Trap Script Insertion Vulnerability Secunia Research (Mon Oct 20 2008 - 05:11:15 CDT)
• Lee has posted more detailed response to Fyodor's TCP/IP DoS post Juha-Matti Laurio (Mon Oct 20 2008 - 07:47:32 CDT)
• [Tool] sqlmap 0.6.1 released Bernardo Damele A. G. (Mon Oct 20 2008 - 09:45:16 CDT)
• [SECURITY] [DSA 1656-1] New cupsys packages fix several vulnerabilities Moritz Muehlenhoff (Mon Oct 20 2008 - 12:21:43 CDT)
• London DEFCON meet - DC4420 - Thursday October 23rd Major Malfunction (Mon Oct 20 2008 - 12:34:05 CDT)
• [TKADV2008-010] VLC media player TiVo ty Processing Stack Overflow Vulnerability Tobias Klein (Mon Oct 20 2008 - 14:18:36 CDT)
• Last Call for DeepSec IDSC 2008 in Vienna DeepSec Conference Vienna (Mon Oct 20 2008 - 14:44:19 CDT)
• [Off-Topic] How I was busted. Story of a poor lonesome hacker Jerome Athias (Mon Oct 20 2008 - 15:05:25 CDT)
• [SECURITY] [DSA 1657-1] New qemu packages fix denial of service Steve Kemp (Mon Oct 20 2008 - 15:29:57 CDT)
• Insomnia : ISVA-081020.1 - Altiris Deployment Server Agent - Privilege Escalation Brett Moore (Mon Oct 20 2008 - 18:29:43 CDT)
• [USN-657-1] Amarok vulnerability Jamie Strandboge (Tue Oct 21 2008 - 08:34:22 CDT)
• Google Chrome OnbeforeUload and OnUnload Null Check Vulnerability. Aditya K Sood (Mon Oct 20 2008 - 22:42:02 CDT)
• SECOBJADV-2008-04: Symantec Veritas Storage Foundation Memory Disclosure Vulnerability Security Objectives Corporation (Tue Oct 21 2008 - 10:29:14 CDT)
• n.runs-SA-2008.008 - Internet Explorer HTML Object Memory Corruption and Remote Code Execution securitynruns.com (Tue Oct 21 2008 - 10:09:24 CDT)
• [tool] crapto1 released blapostgmail.com (Tue Oct 21 2008 - 12:17:14 CDT)
• Opera Stored Cross Site Scripting Vulnerability Roberto Suggi (Wed Oct 22 2008 - 02:10:33 CDT)
• Secunia Research: HP OpenView Products Shared Trace Service Denial of Service Secunia Research (Wed Oct 22 2008 - 07:10:26 CDT)
• Advisory for Oracle CPU October 2008 - APEX Flows excessive privileges Pete Finnigan (Wed Oct 22 2008 - 07:36:36 CDT)
• FGA-2008-23:EMC NetWorker Denial of Service Vulnerability noreply-secresearchfortinet.com (Wed Oct 22 2008 - 00:31:42 CDT)
• Secunia Research: GNU Enscript "setfilename" Special Escape Buffer Overflow Secunia Research (Wed Oct 22 2008 - 06:53:51 CDT)
• Secunia Research: Trend Micro OfficeScan CGI Parsing Buffer Overflows Secunia Research (Wed Oct 22 2008 - 06:54:10 CDT)
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco PIX and Cisco ASA Cisco Systems Product Security Incident Response Team (Wed Oct 22 2008 - 10:45:17 CDT)
• SECOBJADV-2008-05: Symantec Veritas Storage Foundation Arbitrary File Read Vulnerability Security Objectives Corporation (Wed Oct 22 2008 - 11:41:37 CDT)
• Re: FGA-2008-23:EMC NetWorker Denial of Service Vulnerability Security_Alertemc.com (Wed Oct 22 2008 - 10:38:36 CDT)
• [SECURITY] [DSA 1658-1] New dbus packages fix denial of service Thijs Kinkhorst (Wed Oct 22 2008 - 14:50:25 CDT)
• SNMP Injection: Achieving Persistent HTML Injection via SNMP on Embedded Devices ProCheckUp Research (Wed Oct 22 2008 - 12:07:40 CDT)
• phpcrs <= 2.06 / Local File Inclusion Vulnerability (this is the correct :) Pepelux (Wed Oct 22 2008 - 16:44:55 CDT)
• vshop - Axcoto cart <= 0.1alpha / Local File Inclusion Vulnerability Pepelux (Wed Oct 22 2008 - 16:47:08 CDT)
• GoodTech SSH Remote Buffer Overflow Exploit writ3rgmail.com (Wed Oct 22 2008 - 18:52:20 CDT)
• freeSSHd (stf - rename) Buffer Overflow Vulnerability writ3rgmail.com (Wed Oct 22 2008 - 18:55:27 CDT)
• SiteEngine 5.x Multiple Remote Vulnerabilities xuanmumugmail.com (Wed Oct 22 2008 - 21:45:00 CDT)
• Re: MJGuest 6.8 GT Cross Site Scripting Vulnerability alighieri_mlibero.it (Thu Oct 23 2008 - 04:38:55 CDT)
• Re: vshop - Axcoto cart <= 0.1alpha / Local File Inclusion Vulnerability Jose Luis (Thu Oct 23 2008 - 04:33:24 CDT)
• txtshop - beta 1.0 / Local File Inclusion Vulnerability Pepelux (Thu Oct 23 2008 - 04:32:12 CDT)
• [security bulletin] HPSBST02379 SSRT080143 rev.1 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS08-056 to MS08-066 security-alerthp.com (Thu Oct 23 2008 - 14:55:52 CDT)
• [SECURITY] [DSA 1659-1] New libspf2 packages fix potential remote code execution Florian Weimer (Thu Oct 23 2008 - 15:00:50 CDT)
• [USN-658-1] Moodle vulnerability Kees Cook (Thu Oct 23 2008 - 16:33:41 CDT)
• MS08-067 - Where can I find an exploit for this? Chip Panarchy (Fri Oct 24 2008 - 00:06:31 CDT)
• Re: MS08-067 - Where can I find an exploit for this? Salvador III Manaois (Fri Oct 24 2008 - 11:50:19 CDT)
• iPei cross site scripting Vulnerablity Ghost hacker (Thu Oct 23 2008 - 17:31:27 CDT)
• Re: MS08-067 - Where can I find an exploit for this? Salvador III Manaois (Fri Oct 24 2008 - 11:27:06 CDT)
• HTTPBruteForcer released Jerome Athias (Sat Oct 25 2008 - 09:43:48 CDT)
• Java Web start vulnerability varun.srivastavgmail.com (Sat Oct 25 2008 - 03:18:16 CDT)
• Re: HTTPBruteForcer released raven (Sat Oct 25 2008 - 13:11:57 CDT)
• Re: HTTPBruteForcer released The Anarcat (Sat Oct 25 2008 - 14:45:50 CDT)
• Windows RPC MS08-067 FAQ document released Juha-Matti Laurio (Sat Oct 25 2008 - 21:26:22 CDT)
• [SECURITY] [DSA 1660-1] New clamav packages fix denial of service Florian Weimer (Sun Oct 26 2008 - 08:43:46 CDT)
• BotNet on the Rise faghaninsec.ir (Sun Oct 26 2008 - 09:02:36 CDT)
• bcoos 1.0.13 Remote File Include Vulnerability Cru3l.b0y (Mon Oct 27 2008 - 06:36:41 CDT)
• [security bulletin] HPSBMA02373 SSRT071467 rev.2 - HP Insight Diagnostics Running on Linux and Windows, Remote Unauthorized Access to Files security-alerthp.com (Mon Oct 27 2008 - 06:59:57 CDT)
• XSS in phpMyadmin hadikiamarsihotmail.com (Mon Oct 27 2008 - 07:02:51 CDT)
• Windows RPC MS08-067 FAQ document updated Juha-Matti Laurio (Mon Oct 27 2008 - 10:41:23 CDT)
• ClubHack2008 [India] - CFP Closing Soon ClubHack (Mon Oct 27 2008 - 07:41:11 CDT)
• MyBB 1.4.2: Multiple Vulnerabilties Micheal Cottingham (Mon Oct 27 2008 - 10:15:11 CDT)
• MSF eXploit Builder v2 Alpha Sources Released Jerome Athias (Sun Oct 26 2008 - 17:53:46 CDT)
• n.runs-SA-2008.009 - Eaton MGE OPS Network Shutdown Module - authentication bypass vulnerability and remote code execution securitynruns.com (Mon Oct 27 2008 - 10:53:48 CDT)
• Writeup by Amit Klein (Trusteer): Address Bar Spoofing for IE6 Amit Klein (Mon Oct 27 2008 - 11:14:20 CDT)
• rPSA-2008-0305-1 pcre rPath Update Announcements (Mon Oct 27 2008 - 12:47:50 CDT)
• [ MDVSA-2008:215 ] wireshark securitymandriva.com (Mon Oct 27 2008 - 12:35:00 CDT)
• Blaze Media Pro 8.02 SE vulnerability ipsdixgmail.com (Mon Oct 27 2008 - 13:28:39 CDT)
• rPSA-2008-0306-1 libxslt rPath Update Announcements (Mon Oct 27 2008 - 12:53:27 CDT)
• Re: Writeup by Amit Klein (Trusteer): Address Bar Spoofing for IE6 Amit Klein (Mon Oct 27 2008 - 12:01:49 CDT)
• Re: MyBB 1.4.2: Multiple Vulnerabilties krzysztof.kozlowskikozik.net.pl (Mon Oct 27 2008 - 16:14:29 CDT)
• [ MDVSA-2008:216 ] emacs securitymandriva.com (Mon Oct 27 2008 - 17:15:00 CDT)
• PHP-Nuke Module League (team&tid) XSS Vulnerability Ehsan_Hp200hotmail.com (Tue Oct 28 2008 - 11:04:23 CDT)
• A video can crash ANY iphone/ipod and a few libraries. zibreegmail.com (Tue Oct 28 2008 - 13:17:11 CDT)
• [ MDVSA-2008:217 ] lynx securitymandriva.com (Tue Oct 28 2008 - 15:46:00 CDT)
• [ MDVSA-2008:218 ] lynx securitymandriva.com (Tue Oct 28 2008 - 16:08:00 CDT)
• Aria-Security.com: Saba 2.0 Cross Site Scripting [PASSIVE] The-0utl4wAria-Security.com (Wed Oct 29 2008 - 00:09:37 CDT)
• Re: MySQL command-line client HTML injection vulnerability okunomysql.com (Tue Oct 28 2008 - 19:57:22 CDT)
• Quassel IRC: connection hijacking Wouter Coekaerts (Tue Oct 28 2008 - 18:26:57 CDT)
• Re: Quassel IRC: connection hijacking Wouter Coekaerts (Tue Oct 28 2008 - 18:35:02 CDT)
• Re: [ MDVSA-2008:217 ] lynx Thomas Dickey (Tue Oct 28 2008 - 18:33:15 CDT)
• Secunia Research: Adobe PageMaker PMD File Processing Buffer Overflows Secunia Research (Wed Oct 29 2008 - 10:57:37 CDT)
• KVIrc version 3.4.0 Virgo remote format string proof of concept exploit. fabio (Wed Oct 29 2008 - 12:44:42 CDT)
• [SECURITY] [DSA 1661-1] New OpenOffice.org packages fix several vulnerabilities Martin Schulze (Wed Oct 29 2008 - 13:16:58 CDT)
• Advanced application-level OS fingerprinting dan.crowleygmail.com (Wed Oct 29 2008 - 15:55:55 CDT)
• [ MDVSA-2008:221 ] aterm securitymandriva.com (Wed Oct 29 2008 - 19:15:00 CDT)
• Re: MS08-067 - Where can I find an exploit for this? Isaias Calderon (Thu Oct 30 2008 - 01:14:11 CDT)
• PHP-Nuke Module BookCatalog (category&catid) Remote SQL injection Vulnerability Ehsan_Hp200hotmail.com (Thu Oct 30 2008 - 09:22:48 CDT)
• Re: MS08-067 - Where can I find an exploit for this? illumina7i (Wed Oct 29 2008 - 20:26:15 CDT)
• rPSA-2008-0309-1 lighttpd rPath Update Announcements (Thu Oct 30 2008 - 08:55:07 CDT)
• [ MDVSA-2008:220 ] kernel securitymandriva.com (Wed Oct 29 2008 - 18:17:00 CDT)
• [ MDVSA-2008:219 ] mplayer securitymandriva.com (Wed Oct 29 2008 - 18:22:00 CDT)
• [funsec] ICANN Terminates EstDomains' Registrar Accreditation (fwd) Gadi Evron (Wed Oct 29 2008 - 03:28:46 CDT)
• Tool update: VoIPER v0.07 nnp (Tue Oct 28 2008 - 18:33:13 CDT)
• IranMC ( detail.php?Kala ) Remote SQL injection Vulnerability Ehsan_Hp200hotmail.com (Thu Oct 30 2008 - 09:13:08 CDT)
• rPSA-2008-0307-1 nfs-client nfs-server nfs-utils rPath Update Announcements (Thu Oct 30 2008 - 08:31:22 CDT)
• PHP-Nuke Module Sectionsnew (printpage&artid) Remote SQL injection Vulnerability Ehsan_Hp200hotmail.com (Thu Oct 30 2008 - 09:07:15 CDT)
• Re: [Full-disclosure] [funsec] ICANN Terminates EstDomains' Registrar Accreditation (fwd) Juha-Matti Laurio (Wed Oct 29 2008 - 17:56:07 CDT)
• rPSA-2008-0308-1 samba samba-client samba-server samba-swat rPath Update Announcements (Thu Oct 30 2008 - 08:42:40 CDT)
• Re: Advanced application-level OS fingerprinting Berend-Jan Wever (Thu Oct 30 2008 - 12:28:47 CDT)
• [ MDVSA-2008:222 ] Eterm securitymandriva.com (Wed Oct 29 2008 - 20:01:00 CDT)
• PHP-Nuke Module Current_Issue (summary&id) Remote SQL injection Vulnerability Ehsan_Hp200hotmail.com (Thu Oct 30 2008 - 08:54:42 CDT)
• DebugDiag (CrashHangExt.dll 1.0) NULL Pointer Dereference crimson.loydgmail.com (Thu Oct 30 2008 - 04:57:49 CDT)
• harlandscripts Mypage.php Sql Injection beenudel1986gmail.com (Wed Oct 29 2008 - 23:26:34 CDT)
• ZDI-08-070: SonicWALL Content-Filtering Universal Script Injection Vulnerability zdi-disclosures3com.com (Thu Oct 30 2008 - 14:16:25 CDT)
• iDefense Security Advisory 10.30.08: Novell eDirectory NCP Get Extension Information Request Memory Corruption Vulnerability labs-no-replyidefense.com (Thu Oct 30 2008 - 12:56:30 CDT)
• [USN-661-1] Linux kernel regression Jamie Strandboge (Thu Oct 30 2008 - 12:40:31 CDT)
• ZDI-08-071: IBM Tivoli Storage Manager Express for Microsoft SQL Heap Overflow Vulnerability zdi-disclosures3com.com (Thu Oct 30 2008 - 14:16:43 CDT)
• [ GLSA 200810-03 ] libspf2: DNS response buffer overflow Robert Buchholz (Thu Oct 30 2008 - 16:27:08 CDT)
• iDefense Security Advisory 10.30.08: Adobe PageMaker Key Strings Stack Buffer Overflow iDefense Labs (Thu Oct 30 2008 - 15:24:35 CDT)
• 2008 OpenVAS Contest The OpenVAS Team (Thu Oct 30 2008 - 18:34:21 CDT)
• Universal Website Hijacking by Exploiting Firewall Content Filtering Features + SonicWALL firewalls 0day Adrian P (Thu Oct 30 2008 - 21:31:03 CDT)
• spitfirephoto Pro pages.php Sql Injection beenudel1986gmail.com (Thu Oct 30 2008 - 23:18:18 CDT)
• phpWebSite links.php Sql Injection beenudel1986gmail.com (Thu Oct 30 2008 - 23:20:52 CDT)
• U-Mail Webmail 'edit.php' Arbitrary File Write Vulnerability WSN1983GMAIL.COM (Thu Oct 30 2008 - 23:32:43 CDT)
• VMSA-2008-0017 Updated ESX packages for libxml2, ucd-snmp, libtiff VMware Security Team (Fri Oct 31 2008 - 02:12:34 CDT)
• Cpanel 11.x Local File Inclusion & Cross Site Scripting - Discovered By Khashayar Fereidani irancrashgmail.com (Fri Oct 31 2008 - 08:03:55 CDT)
• Re: Universal Website Hijacking by Exploiting Firewall Content Filtering Features + SonicWALL firewalls 0day sipherrgmail.com (Fri Oct 31 2008 - 12:11:40 CDT)
• Secunia Research: Interact SQL Injection and Cross-Site Request Forgery Secunia Research (Fri Oct 31 2008 - 10:45:04 CDT)
• Re: Universal Website Hijacking by Exploiting Firewall Content Filtering Features + SonicWALL firewalls 0day sipherrgmail.com (Fri Oct 31 2008 - 12:15:14 CDT)
• iDefense Security Advisory 10.31.08: OpenOffice EMF Record Parsing Multiple Integer Overflow Vulnerabilities iDefense Labs (Fri Oct 31 2008 - 11:54:39 CDT)
• iDefense Security Advisory 10.31.08: Oracle WebLogic Apache Connector iDefense Labs (Fri Oct 31 2008 - 13:19:27 CDT)
• [Paper] Reflective Dll Injection stephen_fewerharmonysecurity.com (Fri Oct 31 2008 - 12:54:15 CDT)
• Typo <= 5.1.3 Multiple Vulnerabilities L4teral (Fri Oct 31 2008 - 13:21:35 CDT)
• Re: Java Web start vulnerability varun.srivastavgmail.com (Fri Oct 31 2008 - 13:20:37 CDT)
• [ MDVSA-2008:121-1 ] freetype2 securitymandriva.com (Fri Oct 31 2008 - 14:23:00 CDT)
• RE: Universal Website Hijacking by Exploiting Firewall Content Filtering Features + SonicWALL firewalls 0day Jim Harrison (Fri Oct 31 2008 - 15:05:15 CDT)
• Final notification about "POC2008" Conference pocadmgmail.com (Fri Oct 31 2008 - 14:48:34 CDT)

Last message date: Fri Oct 31 2008 - 15:25:47 CDT
Archived on: Fri Oct 31 2008 - 15:25:47 CDT

269 messages sorted by: [ author ] [ thread ] [ subject ]