Most recent messages
273 messages sorted by: [ author ] [ date ] [ subject ]

Starting: Mon Dec 01 2008 - 09:51:01 CST
Ending: Wed Dec 31 2008 - 10:13:54 CST

• [SECURITY] [DSA 1673-1] New wireshark packages fix several vulnerabilities Moritz Muehlenhoff (Sat Nov 29 2008 - 17:07:40 CST)
• [SECURITY] [DSA 1674-1] New jailer packages fix denial of service Moritz Muehlenhoff (Sun Nov 30 2008 - 02:33:23 CST)
• [SECURITY] [DSA 1675-1] New phpmyadmin packages fix cross site scripting Thijs Kinkhorst (Sun Nov 30 2008 - 06:53:28 CST)
• [TKADV2008-013] VLC media player RealMedia Processing Integer Overflow Vulnerability Tobias Klein (Sun Nov 30 2008 - 08:54:47 CST)
• /bin/login gives root to group utmp Paul Szabo (Sun Nov 30 2008 - 13:51:11 CST)
  • Re: /bin/login gives root to group utmp 0xjbrown41gmail.com (Mon Dec 01 2008 - 11:35:20 CST)
• Re: Re: Wrong report: BID 32287, Pi3Web ISAPI DoS vulnerability het_ebadiyahoo.com (Sun Nov 30 2008 - 02:39:26 CST)
  • Re: Re: Wrong report: BID 32287, Pi3Web ISAPI DoS vulnerability zimpelt-online.de (Mon Dec 01 2008 - 02:43:27 CST)
  • Re: Re: Re: Wrong report: BID 32287, Pi3Web ISAPI DoS vulnerability zimpelt-online.de (Wed Dec 03 2008 - 01:48:44 CST)
• [BMSA 2008-09] Two buffer overflow vulnerabilities in Rumpus v6.0 Nam Nguyen (Mon Dec 01 2008 - 10:56:19 CST)
• [USN-681-1] ImageMagick vulnerability Marc Deslauriers (Mon Dec 01 2008 - 11:11:08 CST)
• [USN-682-1] libvorbis vulnerabilities Marc Deslauriers (Mon Dec 01 2008 - 11:11:59 CST)
• [SECURITY] [DSA 1676-1] New flamethrower packages fix denial of service dann frazier (Mon Dec 01 2008 - 16:49:35 CST)
• Dates for SyScan'09 organisersyscan.org (Tue Dec 02 2008 - 06:16:44 CST)
• Cpanel fantastico Privilege Escalation "ModSec and PHP restriction Bypass" l1unhotmail.com (Mon Dec 01 2008 - 19:07:03 CST)
• [USN-683-1] Imlib2 vulnerability Marc Deslauriers (Tue Dec 02 2008 - 10:24:02 CST)
• [ GLSA 200812-01 ] OptiPNG: User-assisted execution of arbitrary code Robert Buchholz (Tue Dec 02 2008 - 11:25:54 CST)
• [ GLSA 200812-05 ] libsamplerate: User-assisted execution of arbitrary code Robert Buchholz (Tue Dec 02 2008 - 11:40:19 CST)
• [ GLSA 200812-06 ] libxml2: Multiple vulnerabilities Robert Buchholz (Tue Dec 02 2008 - 11:42:03 CST)
• [ GLSA 200812-03 ] IPsec-Tools: racoon Denial of Service Robert Buchholz (Tue Dec 02 2008 - 11:30:56 CST)
• [ GLSA 200812-04 ] lighttpd: Multiple vulnerabilities Robert Buchholz (Tue Dec 02 2008 - 11:33:06 CST)
• [ GLSA 200812-02 ] enscript: User-assisted execution of arbitrary code Robert Buchholz (Tue Dec 02 2008 - 11:28:07 CST)
• [ GLSA 200812-07 ] Mantis: Multiple vulnerabilities Robert Buchholz (Tue Dec 02 2008 - 11:55:03 CST)
• [SECURITY] [DSA 1677-1] New CUPS packages fix arbitrary code execution Martin Schulze (Tue Dec 02 2008 - 15:09:10 CST)
• VMSA-2008-0019 VMware Hosted products and patches for ESX and ESXi resolve a critical security issue and update bzip2 VMware Security team (Tue Dec 02 2008 - 23:24:01 CST)
  • Re: VMSA-2008-0019 VMware Hosted products and patches for ESX and ESXi resolve a critical security issue and update bzip2 Steve Shockley (Wed Dec 03 2008 - 12:42:11 CST)
• [HACKATTACK Advisory 20081203]Pro Clan Manager 0.4.2 - Session Fixation officehackattack.at (Wed Dec 03 2008 - 06:40:59 CST)
• [USN-684-1] ClamAV vulnerability Kees Cook (Tue Dec 02 2008 - 16:20:25 CST)
  • Re: [USN-684-1] ClamAV vulnerability 0xjbrown41gmail.com (Wed Dec 03 2008 - 20:31:41 CST)
• [SECURITY] [DSA 1678-1] New perl packages fix privilege escalation Steffen Joeris (Wed Dec 03 2008 - 00:15:24 CST)
• [SECURITY] [DSA 1679-1] New awstats packages fix cross-site scripting Florian Weimer (Wed Dec 03 2008 - 05:05:53 CST)
• [SVRT-06-08] MULTI SECURITY VULNERABILITIES IN MVNFORUM SVRT-Bkis (Wed Dec 03 2008 - 07:02:19 CST)
• [security bulletin] HPSBUX02389 SSRT080141 rev.1 - HP-UX, Local Denial of Service (DoS) security-alerthp.com (Wed Dec 03 2008 - 08:41:40 CST)
• Re: [HACKATTACK Advisory 20081127]Social Impress CMS 1.1 - Session Fixation rene.satogmx.de (Wed Dec 03 2008 - 11:47:38 CST)
• [USN-685-1] Net-SNMP vulnerabilities Kees Cook (Wed Dec 03 2008 - 16:41:30 CST)
• [USN-686-1] AWStats vulnerability Kees Cook (Wed Dec 03 2008 - 18:16:57 CST)
• Joomla Component GameQ r3d.w0rmyahoo.com (Thu Dec 04 2008 - 09:20:16 CST)
  • Re: Joomla Component GameQ packetpacketstormsecurity.org (Thu Dec 04 2008 - 16:08:05 CST)
• [ MDVSA-2008:236 ] vim securitymandriva.com (Wed Dec 03 2008 - 22:16:00 CST)
• Advisory 06/2008: PHP ZipArchive::extractTo() Directory Traversal Vulnerability Stefan Esser (Thu Dec 04 2008 - 01:39:36 CST)
• DDIVRT-2008-18 Orb Denial of Service DDI.VulnerabilityAlertddifrontline.com (Thu Dec 04 2008 - 08:51:15 CST)
• [SECURITY] [DSA 1680-1] New clamav packages fix potential code execution Florian Weimer (Thu Dec 04 2008 - 02:26:17 CST)
• CVE-2008-2086: Java Web Start File Inclusion via System Properties Override VSR Advisories (Wed Dec 03 2008 - 22:13:54 CST)
• [UPRSN] Ubuntu Privacy Remix 8.04r1 fixes security issues Ubuntu Privacy Remix Team (Thu Dec 04 2008 - 08:46:55 CST)
• Re: XSS in Internet Explorer 6 and 7 MustLive (Thu Dec 04 2008 - 11:50:06 CST)
• [SECURITY] [DSA 1681-1] New Linux 2.6.24 packages fix several vulnerabilities dann frazier (Thu Dec 04 2008 - 11:59:11 CST)
• iDefense Security Advisory 12.04.08: Sun Java JRE TrueType Font Parsing Heap Overflow Vulnerability iDefense Labs (Thu Dec 04 2008 - 13:41:13 CST)
• Joomla Component mydyngallery r3d.w0rmyahoo.com (Thu Dec 04 2008 - 14:33:03 CST)
• iDefense Security Advisory 12.04.08: Sun Java Web Start GIF Decoding Memory Corruption Vulnerability iDefense Labs (Thu Dec 04 2008 - 15:39:20 CST)
• iDefense Security Advisory 12.04.08: Sun Java JRE Pack200 Decompression Integer Overflow Vulnerability iDefense Labs (Thu Dec 04 2008 - 16:00:47 CST)
• [ MDVSA-2008:237 ] apache2 securitymandriva.com (Thu Dec 04 2008 - 16:15:00 CST)
• [USN-687-1] nfs-utils vulnerability Marc Deslauriers (Thu Dec 04 2008 - 16:29:05 CST)
• iDefense Security Advisory 12.04.08: Sun Java JRE TrueType Font Parsing Integer Overflow Vulnerability iDefense Labs (Thu Dec 04 2008 - 16:35:06 CST)
• ZDI-08-077: Trillian AIM IMG Tag Parsing Stack Overflow Vulnerability zdi-disclosures3com.com (Thu Dec 04 2008 - 18:17:48 CST)
• ZDI-08-078: Trillian IMG SRC ID Memory Corruption Vulnerability zdi-disclosures3com.com (Thu Dec 04 2008 - 18:18:08 CST)
• ZDI-08-079: Trillian AIM Plugin Malformed XML Tag Heap Overflow Vulnerability zdi-disclosures3com.com (Thu Dec 04 2008 - 18:18:26 CST)
• ZDI-08-080: Sun Java AWT Library Sandbox Violation Vulnerability zdi-disclosures3com.com (Thu Dec 04 2008 - 18:18:45 CST)
• ZDI-08-081: Sun Java Web Start and Applet Multiple Sandbox Bypass Vulnerabilities zdi-disclosures3com.com (Thu Dec 04 2008 - 18:19:04 CST)
• [ MDVSA-2008:238 ] libsamplerate securitymandriva.com (Thu Dec 04 2008 - 19:34:00 CST)
• CVE-2008-5079: multiple listen()s on same socket corrupts the vcc table Hugo Dias (Thu Dec 04 2008 - 20:06:02 CST)
• RE: DDIVRT-DDIVRT-2008-15 iPhone Configuration Web Utility 1.0 for Windows Directory Traversal VulnerabilityAlertddifrontline.com (Fri Dec 05 2008 - 10:17:59 CST)
• Re: SecurityReason : PHP 5.2.6 dba_replace() destroying file Eygene Ryabinkin (Sat Dec 06 2008 - 06:47:14 CST)
  • Re: SecurityReason : PHP 5.2.6 dba_replace() destroying file Ilia Alshanetsky (Sat Dec 06 2008 - 09:00:14 CST)
  • Re: SecurityReason : PHP 5.2.6 dba_replace() destroying file Eygene Ryabinkin (Sat Dec 06 2008 - 11:48:05 CST)
• [ MDVSA-2008:239 ] clamav securitymandriva.com (Fri Dec 05 2008 - 20:42:00 CST)
• [ GLSA 200812-08 ] Mgetty: Insecure temporary file usage Pierre-Yves Rofes (Sat Dec 06 2008 - 11:53:43 CST)
• SecurityReason: PHP 5.2.6 SAPI php_getuid() overload cxibsecurityreason.com (Sat Dec 06 2008 - 13:40:48 CST)
  • Re: SecurityReason: PHP 5.2.6 SAPI php_getuid() overload Eygene Ryabinkin (Mon Dec 08 2008 - 04:49:03 CST)
  • Re: SecurityReason: PHP 5.2.6 SAPI php_getuid() overload Maksymilian Arciemowicz (Mon Dec 08 2008 - 07:14:36 CST)
  • Re: SecurityReason: PHP 5.2.6 SAPI php_getuid() overload Eygene Ryabinkin (Mon Dec 08 2008 - 07:47:36 CST)
• [SECURITY] [DSA 1682-1] New squirrelmail packages fix cross site scripting Thijs Kinkhorst (Sun Dec 07 2008 - 10:22:55 CST)
• Two XSS Flaws in PrestaShop 1.1.0.3 th3.r00k.ieatporkgmail.pork.com (Sun Dec 07 2008 - 21:32:37 CST)
• XSS in PHPepperShop v 1.4 th3.r00k.ieatporkgmail.pork.com (Sun Dec 07 2008 - 21:48:39 CST)
• Multiple Vendor Anti-Virus Software Malicious WebPage Detection Bypass xhakerman2006yahoo.com (Mon Dec 08 2008 - 00:26:16 CST)
• RadAsm <=2.2.1.5 Local Command Execution xhakerman2006yahoo.com (Sun Dec 07 2008 - 23:54:45 CST)
  • Re: RadAsm <=2.2.1.5 Local Command Execution Li Gen (Mon Dec 08 2008 - 10:07:57 CST)
• [DSECRG-08-040] Multiple Local File Include Vulnerabilities in Xoops 2.3.x Digital Security Research Group [DSecRG] (Mon Dec 08 2008 - 06:18:39 CST)
• [DSECRG-08-041] Stored XSS Vulnerability in Xoops 2.3.x Digital Security Research Group [DSecRG] (Mon Dec 08 2008 - 06:21:47 CST)
• [SVRT-07-08] Vulnerability in Face Recognition Authentication Mechanism of Lenovo-Asus-Toshiba Laptops SVRT-Bkis (Sun Dec 07 2008 - 22:39:48 CST)
• Neostrada Livebox Remote Network Down PoC Exploit 0in.emailgmail.com (Mon Dec 08 2008 - 13:12:51 CST)
• [security bulletin] HPSBMA02391 SSRT071481 rev.1 - HP OpenView Reporter and HP Reporter Running on Windows, Remote Denial of Service (DoS) security-alerthp.com (Mon Dec 08 2008 - 13:23:19 CST)
• [SECURITY] [DSA 1683-1] New streamripper packages fix potential code execution Florian Weimer (Mon Dec 08 2008 - 12:58:30 CST)
• [security bulletin] HPSBMA02390 SSRT071481 rev.1 - HP OpenView Performance Agent, HP Performance Agent, Remote Denial of Service (DoS) security-alerthp.com (Mon Dec 08 2008 - 13:22:27 CST)
• ZDI-08-082: BMC PatrolAgent Version Logging Format String Vulnerability zdi-disclosures3com.com (Mon Dec 08 2008 - 13:38:32 CST)
• DoS Vulnerability in Aruba Mobility Controller Caused by Malformed EAP Frame (Aruba Advisory ID: AID-12808) Robbie (Rupinder) Gill (Mon Dec 08 2008 - 13:20:58 CST)
• Multiple XSRF in DD-WRT (Remote Root Command Execution) th3.r00k.ieatporkgmail.pork.com (Mon Dec 08 2008 - 15:35:28 CST)
  • Re: Multiple XSRF in DD-WRT (Remote Root Command Execution) s.gottschalldd-wrt.com (Wed Dec 10 2008 - 06:22:56 CST)
  • Re: Multiple XSRF in DD-WRT (Remote Root Command Execution) Hanno Böck (Wed Dec 10 2008 - 17:42:59 CST)
  • Re: Multiple XSRF in DD-WRT (Remote Root Command Execution) David E. Thiel (Wed Dec 10 2008 - 17:51:01 CST)
  • Re: Multiple XSRF in DD-WRT (Remote Root Command Execution) pUm (Thu Dec 11 2008 - 02:57:05 CST)
  • Re[2]: Multiple XSRF in DD-WRT (Remote Root Command Execution) Vladimir '3APA3A' Dubrovin (Thu Dec 11 2008 - 03:55:26 CST)
  • Re: Multiple XSRF in DD-WRT (Remote Root Command Execution) Sebastian Gottschall (DD-WRT) (Thu Dec 11 2008 - 07:07:43 CST)
  • Re: Multiple XSRF in DD-WRT (Remote Root Command Execution) Sebastian Gottschall (DD-WRT) (Thu Dec 11 2008 - 07:14:58 CST)
  • Re: Multiple XSRF in DD-WRT (Remote Root Command Execution) dan.crowleygmail.com (Wed Dec 10 2008 - 20:14:10 CST)
  • Re: Multiple XSRF in DD-WRT (Remote Root Command Execution) David E. Thiel (Thu Dec 11 2008 - 11:57:03 CST)
  • Re: Re: Multiple XSRF in DD-WRT (Remote Root Command Execution) dan.crowleygmail.com (Thu Dec 11 2008 - 13:42:58 CST)
  • Re: Re: Multiple XSRF in DD-WRT (Remote Root Command Execution) 0xjbrown41gmail.com (Mon Dec 15 2008 - 12:47:15 CST)
• Re: [Full-disclosure] MS OWA 2003 Redirection Vulnerability - [MSRC 7368br] Peter Watkins (Mon Dec 08 2008 - 15:50:14 CST)
• DoS attacks on MIME-capable software via complex MIME emails bruhnsrecurity-labs.com (Mon Dec 08 2008 - 16:52:17 CST)
  • Re: DoS attacks on MIME-capable software via complex MIME emails Vladimir '3APA3A' Dubrovin (Tue Dec 09 2008 - 10:53:27 CST)
• [ MDVSA-2008:236-1 ] vim securitymandriva.com (Mon Dec 08 2008 - 20:38:00 CST)
• PHP safe_mode can be bypassed via proc_open() and custom environment. gat3waygat3way.eu (Tue Dec 09 2008 - 01:52:55 CST)
• SEC Consult SA-20081109-0 :: Microsoft SQL Server 2000 sp_replwritetovarbin limited memory overwrite vulnerability Bernhard Mueller (Tue Dec 09 2008 - 06:16:34 CST)
• rPSA-2008-0332-1 kernel rPath Update Announcements (Tue Dec 09 2008 - 10:21:52 CST)
• Multiple Vendor Anti-Virus Software Malicious WebPage Detection Bypass -Update- xhakerman2006yahoo.com (Tue Dec 09 2008 - 10:34:48 CST)
• Secunia Research: Microsoft Word RTF Polyline/Polygon Integer Overflow Secunia Research (Tue Dec 09 2008 - 12:38:46 CST)
• Secunia Research: Microsoft Excel NAME Record Array Indexing Vulnerability Secunia Research (Tue Dec 09 2008 - 13:06:04 CST)
• CORE-2008-1127 - Vinagre show_error() format string vulnerability CORE Security Technologies Advisories (Tue Dec 09 2008 - 13:49:36 CST)
• Secunia Research: Microsoft Hierarchical FlexGrid Control Integer Overflows Secunia Research (Tue Dec 09 2008 - 14:17:03 CST)
• iDefense Security Advisory 12.09.08: Microsoft Internet Explorer 5.01 EMBED tag Long File Name Extension Stack Buffer Overflow Vulnerability (iDefense Exclusive) iDefense Labs (Tue Dec 09 2008 - 14:16:41 CST)
• iDefense Security Advisory 12.09.08: Microsoft Windows Graphics Device Interface Integer Overflow Vulnerability iDefense Labs (Tue Dec 09 2008 - 14:50:39 CST)
• ZDI-08-083: Microsoft Animation ActiveX Control Malformed AVI Parsing Code Execution Vulnerability zdi-disclosures3com.com (Tue Dec 09 2008 - 15:07:25 CST)
• ZDI-08-084: Microsoft Office RTF Consecutive Drawing Object Parsing Heap Corruption Vulnerability zdi-disclosures3com.com (Tue Dec 09 2008 - 15:08:20 CST)
• ZDI-08-085: Microsoft Office RTF Drawing Object Heap Overflow Vulnerability zdi-disclosures3com.com (Tue Dec 09 2008 - 15:09:35 CST)
• ZDI-08-086: Microsoft Office Word Document Table Property Stack Overflow Vulnerability zdi-disclosures3com.com (Tue Dec 09 2008 - 15:10:15 CST)
• ZDI-08-087: Microsoft Internet Explorer Webdav Request Parsing Heap Corruption Vulnerability zdi-disclosures3com.com (Tue Dec 09 2008 - 15:10:54 CST)
• Insomnia : ISVA-081209.1 - IE Webdav Request Parsing Heap Corruption Vulnerability Brett Moore (Tue Dec 09 2008 - 17:32:12 CST)
• ISOI 6, Dallas, TX - January 29, 30 Gadi Evron (Tue Dec 09 2008 - 18:33:32 CST)
• [USN-689-1] Vinagre vulnerability Kees Cook (Tue Dec 09 2008 - 18:37:07 CST)
• [USN-678-2] GnuTLS regression Jamie Strandboge (Tue Dec 09 2008 - 19:00:46 CST)
• [SECURITY] [DSA 1684-1] New lcms packages fix multiple vulnerabilities Devin Carraway (Wed Dec 10 2008 - 01:51:43 CST)
• [IVIZ-08-011] ClamAV lzh unpacking segmentation fault iViZ Security Advisories (Wed Dec 10 2008 - 05:48:40 CST)
• [IVIZ-08-012] Bitdefender antivirus for Linux multiple vulnerabilities iViZ Security Advisories (Wed Dec 10 2008 - 05:51:28 CST)
• [IVIZ-08-013] Avast antivirus for Linux multiple vulnerabilities iViZ Security Advisories (Wed Dec 10 2008 - 05:57:26 CST)
• [IVIZ-08-014] AVG antivirus for Linux vulnerability iViZ Security Advisories (Wed Dec 10 2008 - 06:01:09 CST)
• [IVIZ-08-015] Sophos Antivirus for Linux vulnerability iViZ Security Advisories (Wed Dec 10 2008 - 06:02:49 CST)
• [IVIZ-08-016] F-Secure f-prot Antivirus for Linux corrupted ELF header Security Bypass iViZ Security Advisories (Wed Dec 10 2008 - 06:09:51 CST)
  • Re: [IVIZ-08-016] F-Secure f-prot Antivirus for Linux corrupted ELF header Security Bypass friskf-prot.com (Tue Dec 16 2008 - 11:34:48 CST)
  • Re: [IVIZ-08-016] F-Secure f-prot Antivirus for Linux corrupted ELF header Security Bypass mikael.albrechtf-secure.com (Mon Dec 22 2008 - 03:14:25 CST)
• Microsoft SQL Server 2005 sp_replwritetovarbin memory overwrite (update to SEC Consult SA-20081209) Bernhard Mueller (Wed Dec 10 2008 - 06:45:02 CST)
• CORE-2008-0228: Microsoft Word Malformed FIB Arbitrary Free Vulnerability CORE Security Technologies Advisories (Wed Dec 10 2008 - 09:25:32 CST)
• [security bulletin] HPSBUX02393 SSRT080057 rev.1 - HP-UX Running DCE, Remote Denial of Service (DoS) security-alerthp.com (Wed Dec 10 2008 - 10:36:07 CST)
• [ GLSA 200812-09 ] OpenSC: Insufficient protection of smart card PIN Robert Buchholz (Wed Dec 10 2008 - 10:51:45 CST)
• [ GLSA 200812-10 ] Archive::Tar: Directory traversal vulnerability Robert Buchholz (Wed Dec 10 2008 - 10:53:21 CST)
• iDefense Security Advisory 12.10.08: Microsoft Excel Malformed Object Memoy Corruption Vulnerability iDefense Labs (Wed Dec 10 2008 - 13:55:11 CST)
• Max's Guestbook (XSS) Remote Vulnerability 08253maurickcollege.nl (Wed Dec 10 2008 - 14:29:05 CST)
• CA ARCserve Backup LDBserver Vulnerability Williams, James K (Wed Dec 10 2008 - 15:04:37 CST)
• [ MDVSA-2008:240 ] vinagre securitymandriva.com (Wed Dec 10 2008 - 15:01:00 CST)
• [ GLSA 200812-11 ] CUPS: Multiple vulnerabilities Pierre-Yves Rofes (Wed Dec 10 2008 - 16:16:48 CST)
• Browser Security Handbook Michal Zalewski (Wed Dec 10 2008 - 17:05:06 CST)
• AST-2008-012: Remote crash vulnerability in IAX2 Asterisk Security Team (Wed Dec 10 2008 - 17:36:45 CST)
• Black Hat: New Webinar, Japan audio now on-line. jmoss (Wed Dec 10 2008 - 18:57:41 CST)
• aspProductCatalog Sql Injection r3d.w0rmyahoo.com (Thu Dec 11 2008 - 00:21:42 CST)
• Meta Cart Free Database Disclosure r3d.w0rmyahoo.com (Thu Dec 11 2008 - 02:06:50 CST)
• facto Database Disclosure r3d.w0rmyahoo.com (Thu Dec 11 2008 - 02:15:25 CST)
• Secunia Research: CA ARCserve Backup RPC "handle_t" Argument Vulnerability Secunia Research (Thu Dec 11 2008 - 05:10:59 CST)
• Aspect9: Internet Explorer 8.0 Beta 2 Anti-XSS Filter Vulnerabilities Rafel Ivgi (Thu Dec 11 2008 - 10:27:43 CST)
• ASP-CMS v.1.0 Sql Injection/Database Disclosure r3d.w0rmyahoo.com (Thu Dec 11 2008 - 14:12:51 CST)
• rPSA-2008-0336-1 tshark wireshark rPath Update Announcements (Thu Dec 11 2008 - 16:52:40 CST)
• Nokia N70/N73 Bluetooth Stack OBEX Implementation Denial of Service yangdnnipc.org.cn (Thu Dec 11 2008 - 21:12:13 CST)
• [SECURITY] [DSA 1685-1] New uw-imap packages fix multiple vulnerabilities Steffen Joeris (Fri Dec 12 2008 - 00:36:28 CST)
• Moodle 1.9.3 Remote Code Execution ascii (Fri Dec 12 2008 - 11:52:25 CST)
  • Re: Moodle 1.9.3 Remote Code Execution lentcooper.edu (Sun Dec 14 2008 - 23:00:03 CST)
  • Re: Moodle 1.9.3 Remote Code Execution Jamie Riden (Mon Dec 15 2008 - 11:22:32 CST)
  • Re: Moodle 1.9.3 Remote Code Execution hackeririyahoo.com (Tue Dec 16 2008 - 01:21:58 CST)
  • Re: Re: Moodle 1.9.3 Remote Code Execution martinmoodle.com (Mon Dec 15 2008 - 22:47:01 CST)
• [ GLSA 200812-12 ] Honeyd: Insecure temporary file creation Tobias Heinlein (Fri Dec 12 2008 - 14:50:27 CST)
• [ GLSA 200812-13 ] OpenOffice.org: Multiple vulnerabilities Pierre-Yves Rofes (Fri Dec 12 2008 - 17:01:11 CST)
• [ GLSA 200812-14 ] aview: Insecure temporary file usage Tobias Heinlein (Sat Dec 13 2008 - 18:38:30 CST)
• [SECURITY] [DSA 1686-1] New no-ip packages fix arbitrary code execution Moritz Muehlenhoff (Sun Dec 14 2008 - 14:23:27 CST)
• [ GLSA 200812-15 ] POV-Ray: User-assisted execution of arbitrary code Pierre-Yves Rofes (Sun Dec 14 2008 - 11:15:31 CST)
• [ GLSA 200812-16 ] Dovecot: Multiple vulnerabilities Tobias Heinlein (Mon Dec 15 2008 - 07:45:23 CST)
• CFAGCMS Remote File Inclusion adminbugreport.ir (Sun Dec 14 2008 - 01:04:13 CST)
• [TKADV2008-014] MPlayer TwinVQ Processing Stack Buffer Overflow Vulnerability Tobias Klein (Sun Dec 14 2008 - 10:32:40 CST)
• Multiple XSS Vulnerabilities in World Recipe 2.11 securityarmorize.com (Mon Dec 15 2008 - 02:34:46 CST)
• phpList vulnerability phplist (Mon Dec 15 2008 - 06:28:31 CST)
• TmaxSoft JEUS Alternate Data Streams Vulnerability Simon Ryeo (Fri Dec 12 2008 - 11:51:37 CST)
• Fwd: TmaxSoft JEUS Alternate Data Streams Vulnerability Simon Ryeo (Sat Dec 13 2008 - 22:12:06 CST)
• [ MDVSA-2008:242 ] wireshark securitymandriva.com (Mon Dec 15 2008 - 15:35:00 CST)
• [SECURITY] [DSA 1687-1] New Linux 2.6.18 packages fix several vulnerabilities dann frazier (Mon Dec 15 2008 - 15:33:39 CST)
• [ MDVSA-2008:243 ] enscript securitymandriva.com (Mon Dec 15 2008 - 17:31:00 CST)
• [USN-691-1] Ruby vulnerability Marc Deslauriers (Tue Dec 16 2008 - 09:18:46 CST)
• Re: ooVoo 1.7.1.35 (URL Protocol) remote unicode buffer overflow poc philip.robertsonoovoo.com (Tue Dec 16 2008 - 11:38:38 CST)
• [ GLSA 200812-17 ] Ruby: Multiple vulnerabilities Tobias Heinlein (Tue Dec 16 2008 - 14:37:02 CST)
• ZDI-08-088: Oracle E-Business Suite Business Intelligence SQL Injection Vulnerability zdi-disclosures3com.com (Tue Dec 16 2008 - 13:14:14 CST)
• CVE-2008-1094 - Barracuda Span Firewall SQL Injection Vulnerability marian.ventuneacul.ie (Tue Dec 16 2008 - 15:11:24 CST)
• CVE-2008-0971 - Barracuda Networks products Multiple Cross-Site Scripting Vulnerabilities marian.ventuneacul.ie (Tue Dec 16 2008 - 15:29:33 CST)
• Joomla: Session hijacking vulnerability, CVE-2008-4122 Hanno Böck (Tue Dec 16 2008 - 15:56:23 CST)
  • Re: Joomla: Session hijacking vulnerability, CVE-2008-4122 darkz.gsagmail.com (Thu Dec 18 2008 - 05:40:40 CST)
• [ GLSA 200812-18 ] JasPer: User-assisted execution of arbitrary code Robert Buchholz (Tue Dec 16 2008 - 16:06:16 CST)
• RE: [Full-disclosure] ZDI-08-088: Oracle E-Business Suite Self-Service Web Applications SQL Injection Vulnerability Integrigy Security (Tue Dec 16 2008 - 17:01:00 CST)
• n.runs-SA-2008.010 - Opera HTML parsing Code Execution securitynruns.com (Wed Dec 17 2008 - 09:06:27 CST)
• Network Security Scanner OpenVAS 2.0.0 Released Michael Wiegand (Wed Dec 17 2008 - 08:40:29 CST)
• [ MDVSA-2008:244 ] mozilla-firefox securitymandriva.com (Wed Dec 17 2008 - 17:18:00 CST)
• [USN-690-1] Firefox and xulrunner vulnerabilities Jamie Strandboge (Wed Dec 17 2008 - 17:54:48 CST)
• [TKADV2008-015] Sun Solaris SIOCGTUNPARAM IOCTL Kernel NULL pointer dereference Tobias Klein (Thu Dec 18 2008 - 05:22:26 CST)
• Firefox cross-domain text theft (CESA-2008-011) Chris Evans (Thu Dec 18 2008 - 03:00:22 CST)
• [USN-692-1] Gadu vulnerability Kees Cook (Wed Dec 17 2008 - 18:12:13 CST)
• [USN-693-1] LittleCMS vulnerability Kees Cook (Wed Dec 17 2008 - 18:12:50 CST)
• [SECURITY] CVE-2008-2938 - Apache Tomcat information disclosure vulnerability - Update 2 Mark Thomas (Thu Dec 18 2008 - 10:46:17 CST)
• [USN-690-2] Firefox vulnerabilities Jamie Strandboge (Wed Dec 17 2008 - 18:13:13 CST)
• [USN-690-3] Firefox vulnerabilities Jamie Strandboge (Wed Dec 17 2008 - 18:19:24 CST)
• [USN-694-1] libvirt vulnerability Jamie Strandboge (Wed Dec 17 2008 - 18:26:05 CST)
• [USN-695-1] shadow vulnerability Kees Cook (Wed Dec 17 2008 - 19:22:19 CST)
• EasySiteNetwork (joke.php?id) Remote SQL injection Vulnerability Ehsan_Hp200Hotmail.com (Thu Dec 18 2008 - 00:22:35 CST)
• php python extension safe_mode bypass amirsalmani.ir (Wed Dec 17 2008 - 19:52:47 CST)
• [ MDVSA-2008:245 ] firefox securitymandriva.com (Wed Dec 17 2008 - 22:55:00 CST)
• CONFidence 2009, CFP Andrzej Targosz (Thu Dec 18 2008 - 13:43:26 CST)
  • Re: CONFidence 2009, CFP Dominik 'Rathann' Mierzejewski (Fri Dec 19 2008 - 03:32:34 CST)
• [USN-696-1] Avahi vulnerabilities Jamie Strandboge (Thu Dec 18 2008 - 16:36:54 CST)
• SEC Consult SA-20081219-0 :: Fujitsu-Siemens WebTransactions remote command injection vulnerability Bernhard Mueller (Fri Dec 19 2008 - 06:14:58 CST)
• [security bulletin] HPSBST02394 SSRT080183 rev.1 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS08-070 to MS08-077 security-alerthp.com (Fri Dec 19 2008 - 07:50:03 CST)
• HTC Touch vCard over IP Denial of Service Mobile Security Lab (Fri Dec 19 2008 - 09:23:38 CST)
• PHP APC vulnerable to local attacks Moritz Naumann (Fri Dec 19 2008 - 13:21:11 CST)
• rPSA-2008-0338-1 cups rPath Update Announcements (Fri Dec 19 2008 - 15:07:47 CST)
• [ GLSA 200812-19 ] PowerDNS: Multiple vulnerabilities Pierre-Yves Rofes (Fri Dec 19 2008 - 15:43:05 CST)
• [SECURITY] [DSA 1688-1] New courier-authlib packages fix SQL injection Steffen Joeris (Sat Dec 20 2008 - 09:21:38 CST)
• chicomas <=2.0.4 Multiple Vulnerabilities adminbugreport.ir (Sat Dec 20 2008 - 01:25:49 CST)
  • Re: chicomas <=2.0.4 Multiple Vulnerabilities security curmudgeon (Sat Dec 20 2008 - 14:55:01 CST)
• [SECURITY] [DSA 1678-2] New perl packages fix regression Florian Weimer (Sun Dec 21 2008 - 04:04:41 CST)
• [USN-699-1] Blender vulnerabilities Marc Deslauriers (Mon Dec 22 2008 - 08:34:43 CST)
• [USN-698-1] Nagios vulnerability Marc Deslauriers (Mon Dec 22 2008 - 08:35:54 CST)
• Secunia Research: Trend Micro HouseCall "notifyOnLoadNative()" Vulnerability Secunia Research (Sun Dec 21 2008 - 02:47:09 CST)
• [USN-698-2] Nagios3 vulnerabilities Marc Deslauriers (Mon Dec 22 2008 - 08:36:42 CST)
• POC for CVE-2008-5619 (roundcubemail PHP arbitrary code injection) Jacobo Avariento Gimeno (Mon Dec 22 2008 - 06:13:32 CST)
• [UPRSN] Ubuntu Privacy Remix 8.04r2 introduces "noexec"-mounting by default Ubuntu Privacy Remix Team (Mon Dec 22 2008 - 03:55:49 CST)
• [SECURITY] [DSA 1691-1] New moodle packages fix several vulnerabilities Thijs Kinkhorst (Mon Dec 22 2008 - 02:27:17 CST)
• FreeSSHd Multiple Remote Stack Overflow Vulnerabilities writ3r-dont-want-bugtraq-spam-gmail.com (Mon Dec 22 2008 - 01:42:59 CST)
• Secunia Research: Trend Micro HouseCall ActiveX Control Arbitrary Code Execution Secunia Research (Mon Dec 22 2008 - 10:07:31 CST)
• CoolPlayer 2.19 (Skin File) Local Buffer Overflow Exploit writ3r-dont-want-bugtraq-spam-gmail.com (Mon Dec 22 2008 - 01:39:55 CST)
• [USN-697-1] Imlib2 vulnerability Marc Deslauriers (Mon Dec 22 2008 - 08:35:17 CST)
• [USN-698-1] Nagios vulnerability Marc Deslauriers (Mon Dec 22 2008 - 08:35:54 CST)
• CORE-2008-1210: Qemu and KVM VNC server remote DoS CORE Security Technologies Advisories (Mon Dec 22 2008 - 11:30:28 CST)
• [SECURITY] [DSA 1689-1] New proftpd-dfsg packages fix Cross-Site Request Forgery Martin Schulze (Sun Dec 21 2008 - 08:24:42 CST)
• [SECURITY] [DSA 1690-1] New avahi packages fix denial of service Florian Weimer (Mon Dec 22 2008 - 00:49:55 CST)
• [ISecAuditors Security Advisories] Wordpress is vulnerable to an unauthorized upgrade and XSS ISecAuditors Security Advisories (Mon Dec 22 2008 - 11:36:14 CST)
• [ISecAuditors Security Advisories] Multiple vulnerabilities in WiFi router COMTREND CT-536/HG-536+ ISecAuditors Security Advisories (Mon Dec 22 2008 - 12:16:29 CST)
• rPSA-2008-0341-1 dovecot rPath Update Announcements (Mon Dec 22 2008 - 13:20:06 CST)
  • Re: rPSA-2008-0341-1 dovecot olgarusskoyepole.ru (Tue Dec 23 2008 - 00:42:38 CST)
• [ GLSA 200812-20 ] phpCollab: Multiple vulnerabilities Pierre-Yves Rofes (Sun Dec 21 2008 - 13:25:46 CST)
• [ MDVA-2008:241 ] mailscanner securitymandriva.com (Mon Dec 22 2008 - 14:07:00 CST)
• [security bulletin] HPSBST02397 SSRT080187 rev.1 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS08-078 security-alerthp.com (Mon Dec 22 2008 - 18:03:42 CST)
• FreeBSD Security Advisory FreeBSD-SA-08:13.protosw FreeBSD Security Advisories (Mon Dec 22 2008 - 19:39:22 CST)
• [USN-677-2] OpenOffice.org Internationalization update Jamie Strandboge (Tue Dec 23 2008 - 11:57:36 CST)
• [ISecAuditors Security Advisories] PSI remote integer overflow DoS ISecAuditors Security Advisories (Tue Dec 23 2008 - 05:19:14 CST)
• DDIVRT-2008-16 Citrix Broadcast Server 6.0 login.asp SQL Injection --- Update for BID 32832 VulnerabilityResearchddifrontline.com (Tue Dec 23 2008 - 09:01:32 CST)
• [SECURITY] [DSA 1688-2] New courier-authlib packages fix regression Florian Weimer (Mon Dec 22 2008 - 17:18:44 CST)
• [USN-700-1] Perl vulnerabilities Kees Cook (Tue Dec 23 2008 - 19:33:54 CST)
• [USN-698-3] Nagios vulnerabilities Marc Deslauriers (Tue Dec 23 2008 - 08:16:59 CST)
• [ GLSA 200812-23 ] Imlib2: User-assisted execution of arbitrary code Pierre-Yves Rofes (Tue Dec 23 2008 - 16:40:26 CST)
• FRHACK Registration open (Christmas offer) Jerome Athias (Wed Dec 24 2008 - 03:15:04 CST)
• Personal Sticky Threads v1.0.3c vbulletin Add-on problem xl4nothinggmail.com (Tue Dec 23 2008 - 12:52:12 CST)
• [ GLSA 200812-22 ] Ampache: Insecure temporary file usage Pierre-Yves Rofes (Tue Dec 23 2008 - 16:23:43 CST)
• FreeBSD Security Advisory FreeBSD-SA-08:12.ftpd FreeBSD Security Advisories (Mon Dec 22 2008 - 19:39:28 CST)
• [ GLSA 200812-24 ] VLC: Multiple vulnerabilities Tobias Heinlein (Tue Dec 23 2008 - 18:35:03 CST)
• [ GLSA 200812-21 ] ClamAV: Multiple vulnerabilities Pierre-Yves Rofes (Tue Dec 23 2008 - 16:15:19 CST)
• PGP Desktop 9.0.6 Denial Of Service - ZeroDay contact.fingersgmail.com (Tue Dec 23 2008 - 07:11:28 CST)
• Google Chrome Browser (ChromeHTML://) remote parameter injection POC nospammail.it (Tue Dec 23 2008 - 13:54:29 CST)
  • Re: Google Chrome Browser (ChromeHTML://) remote parameter injection POC Already-sended-information-to-security-focusmailinator.com (Thu Dec 25 2008 - 04:03:19 CST)
  • Re: Re: Google Chrome Browser (ChromeHTML://) remote parameter injection POC nospammail.it (Thu Dec 25 2008 - 18:21:51 CST)
• Castlecops security site closed for good Michael Scheidell (Thu Dec 25 2008 - 06:35:59 CST)
• MS Windows Media Player * (.WAV) Remote Integrer Overflow Laurent.gaffiegmail.com (Wed Dec 24 2008 - 17:32:58 CST)
• joomla com_lowcosthotels sql injection lovebughotmail.it (Thu Dec 25 2008 - 05:44:32 CST)
• PHP-Fusion Mod TI - Blog System Sql Injection r3d.w0rmyahoo.com (Thu Dec 25 2008 - 09:12:04 CST)
• ClubHack2008 presentations are now online ClubHack (Fri Dec 26 2008 - 00:46:47 CST)
• Joomla Component mdigg 2.2.8 Blind SQL Injection Exploit hadihadi_zedehal_2006yahoo.com (Fri Dec 26 2008 - 13:40:33 CST)
• [SECURITY] [DSA 1692-1] New php-xajax packages fix cross-site scripting Steffen Joeris (Sat Dec 27 2008 - 03:49:06 CST)
• hm? new vulnerabilities? wav windows media anonymousanonym.an (Sat Dec 27 2008 - 22:34:51 CST)
• MSN messenger sends IP addresses Public and Private Carmelo Brancato (Mon Dec 29 2008 - 07:55:14 CST)
• ViArt Shopping Cart v3.5 Multiple Remote Vulnerabilities XiaShinggmail.com (Sun Dec 28 2008 - 23:58:07 CST)
• Madrese-Portal Sql Injection r3d.w0rmyahoo.com (Thu Dec 25 2008 - 14:22:03 CST)
• MagpieRSS XSS 0day adminelites0ft.com (Sun Dec 28 2008 - 16:50:56 CST)
  • Re: MagpieRSS XSS 0day Antone Roundy (Mon Dec 29 2008 - 16:24:46 CST)
• [SECURITY] [DSA 1693-1] New phppgadmin packages fix several vulnerabilities Thijs Kinkhorst (Sat Dec 27 2008 - 05:54:26 CST)
• [ MDVSA-2008:246 ] kernel securitymandriva.com (Mon Dec 29 2008 - 10:45:01 CST)
• Mavi Emlak Sql Injection r3d.w0rmyahoo.com (Thu Dec 25 2008 - 14:23:29 CST)
• Megacubo 5.0.7 (mega://) remote eval() injection exploit pyronospam.it (Tue Dec 30 2008 - 08:45:32 CST)
• reliable IOS exploitation Gadi Evron (Mon Dec 29 2008 - 16:08:06 CST)
• php-nuke 8.0 module sections artid blind sql inj vuln. the.dumencigmail.com (Tue Dec 30 2008 - 08:31:59 CST)
  • Re: php-nuke 8.0 module sections artid blind sql inj vuln. John Haywood (Tue Dec 30 2008 - 12:01:35 CST)
• MD5 Considered Harmful Today: Creating a rogue CA certificate Alexander Sotirov (Tue Dec 30 2008 - 10:50:57 CST)
• apache 1.x <=> 2.x suphp (suPHP_ConfigPath) bypass safe mode exploit&#8206; v8ihotmail.com (Tue Dec 30 2008 - 12:31:05 CST)
• CFP uCon Security Conference 2009 - Recife, Brazil uCon Security Conference (Tue Dec 30 2008 - 21:21:01 CST)

Last message date: Wed Dec 31 2008 - 10:13:54 CST
Archived on: Wed Dec 31 2008 - 10:13:54 CST

273 messages sorted by: [ author ] [ date ] [ subject ]