248 messages sorted by: [ author ] [ date ] [ thread ]

Starting: Mon Feb 02 2009 - 10:29:13 CST
Ending: Fri Feb 27 2009 - 16:15:25 CST

• 3Com OfficeConnect Wireless Cable/DSL Router Authentication Bypass
  • luca.carettonikkisoft.com (Mon Feb 09 2009 - 09:55:55 CST)
• [ GLSA 200902-01 ] sudo: Privilege escalation
  • Tobias Heinlein (Fri Feb 06 2009 - 16:21:57 CST)
• [ GLSA 200902-02 ] OpenSSL: Certificate validation error
  • Robert Buchholz (Thu Feb 12 2009 - 15:09:30 CST)
• [ GLSA 200902-03 ] Valgrind: Untrusted search path
  • Robert Buchholz (Thu Feb 12 2009 - 15:10:28 CST)
• [ GLSA 200902-04 ] xterm: User-assisted arbitrary commands execution
  • Pierre-Yves Rofes (Thu Feb 12 2009 - 15:49:08 CST)
• [ GLSA 200902-05 ] KTorrent: Multiple vulnerabilitites
  • Pierre-Yves Rofes (Mon Feb 23 2009 - 15:41:42 CST)
• [ GLSA 200902-06 ] GNU Emacs, XEmacs: Multiple vulnerabilities
  • Pierre-Yves Rofes (Mon Feb 23 2009 - 16:02:23 CST)
• [ MDVA-2009:027 ] kernel
  • securitymandriva.com (Fri Feb 20 2009 - 02:10:00 CST)
• [ MDVSA-2009:026-1 ] phpMyAdmin
  • securitymandriva.com (Thu Feb 26 2009 - 11:27:00 CST)
• [ MDVSA-2009:031 ] avahi
  • securitymandriva.com (Sat Jan 31 2009 - 00:30:08 CST)
• [ MDVSA-2009:032 ] kernel
  • securitymandriva.com (Sat Jan 31 2009 - 00:30:19 CST)
• [ MDVSA-2009:033 ] sudo
  • securitymandriva.com (Wed Feb 04 2009 - 08:47:00 CST)
• [ MDVSA-2009:034 ] squid
  • securitymandriva.com (Tue Feb 10 2009 - 12:14:00 CST)
• [ MDVSA-2009:035 ] gstreamer0.10-plugins-good
  • securitymandriva.com (Tue Feb 10 2009 - 22:17:00 CST)
• [ MDVSA-2009:036 ] python
  • securitymandriva.com (Thu Feb 12 2009 - 11:57:01 CST)
• [ MDVSA-2009:037 ] bind
  • securitymandriva.com (Mon Feb 16 2009 - 07:55:01 CST)
• [ MDVSA-2009:038 ] blender
  • securitymandriva.com (Mon Feb 16 2009 - 10:46:00 CST)
• [ MDVSA-2009:039 ] gedit
  • securitymandriva.com (Mon Feb 16 2009 - 11:52:00 CST)
• [ MDVSA-2009:040 ] dia
  • securitymandriva.com (Mon Feb 16 2009 - 17:29:01 CST)
• [ MDVSA-2009:041 ] jhead
  • securitymandriva.com (Tue Feb 17 2009 - 12:23:00 CST)
• [ MDVSA-2009:042 ] samba
  • securitymandriva.com (Wed Feb 18 2009 - 13:48:01 CST)
• [ MDVSA-2009:043 ] gnumeric
  • securitymandriva.com (Thu Feb 19 2009 - 17:00:00 CST)
• [ MDVSA-2009:044 ] firefox
  • securitymandriva.com (Fri Feb 20 2009 - 04:00:00 CST)
• [ MDVSA-2009:045 ] php
  • securitymandriva.com (Fri Feb 20 2009 - 14:44:01 CST)
• [ MDVSA-2009:046 ] dia
  • securitymandriva.com (Fri Feb 20 2009 - 10:24:00 CST)
• [ MDVSA-2009:047 ] vim
  • securitymandriva.com (Fri Feb 20 2009 - 15:15:01 CST)
• [ MDVSA-2009:047-1 ] vim
  • securitymandriva.com (Tue Feb 24 2009 - 10:22:00 CST)
  • securitymandriva.com (Tue Feb 24 2009 - 10:17:00 CST)
• [ MDVSA-2009:048 ] epiphany
  • securitymandriva.com (Fri Feb 20 2009 - 17:20:00 CST)
• [ MDVSA-2009:048-1 ] epiphany
  • securitymandriva.com (Tue Feb 24 2009 - 08:24:00 CST)
• [ MDVSA-2009:048-2 ] epiphany
  • securitymandriva.com (Wed Feb 25 2009 - 18:25:00 CST)
• [ MDVSA-2009:049 ] pycrypto
  • securitymandriva.com (Fri Feb 20 2009 - 17:51:00 CST)
• [ MDVSA-2009:049-1 ] pycrypto
  • securitymandriva.com (Mon Feb 23 2009 - 18:04:01 CST)
• [ MDVSA-2009:050 ] python-pycrypto
  • securitymandriva.com (Fri Feb 20 2009 - 18:03:01 CST)
• [ MDVSA-2009:050-1 ] python-pycrypto
  • securitymandriva.com (Mon Feb 23 2009 - 13:56:00 CST)
• [ MDVSA-2009:051 ] libpng
  • securitymandriva.com (Mon Feb 23 2009 - 14:33:00 CST)
• [ MDVSA-2009:052 ] php-smarty
  • securitymandriva.com (Tue Feb 24 2009 - 13:54:00 CST)
• [ MDVSA-2009:053 ] squirrelmail
  • securitymandriva.com (Tue Feb 24 2009 - 15:05:00 CST)
• [ MDVSA-2009:054 ] nagios
  • securitymandriva.com (Tue Feb 24 2009 - 18:05:01 CST)
• [ MDVSA-2009:055 ] audacity
  • securitymandriva.com (Wed Feb 25 2009 - 13:14:00 CST)
• [ MDVSA-2009:056 ] net-snmp
  • securitymandriva.com (Wed Feb 25 2009 - 19:22:00 CST)
  • securitymandriva.com (Wed Feb 25 2009 - 19:35:00 CST)
• [ MDVSA-2009:057 ] valgrind
  • securitymandriva.com (Thu Feb 26 2009 - 09:40:00 CST)
• [ MDVSA-2009:058 ] wireshark
  • securitymandriva.com (Thu Feb 26 2009 - 19:46:00 CST)
• [BMSA-2009-02] XML injection in PyBlosxom
  • Nam Nguyen (Sun Feb 08 2009 - 20:34:02 CST)
• [BMSA-2009-03] Multiple vulnerabilities in OpenSite v2.1
  • Nam Nguyen (Tue Feb 24 2009 - 20:37:34 CST)
• [DSECRG-09-008] JOnAS(4.10.3) - Linked XSS Vulnerability
  • Digital Security Research Group (Wed Feb 25 2009 - 10:15:34 CST)
• [DSECRG-09-009] APC PowerChute Network Shutdown's Web Interface - XSS vulnerability
  • Alexandr Polyakov (Fri Feb 27 2009 - 03:59:13 CST)
  • Vladimir '3APA3A' Dubrovin (Fri Feb 27 2009 - 00:38:20 CST)
  • Ansgar Wiechers (Thu Feb 26 2009 - 15:15:50 CST)
  • Vladimir '3APA3A' Dubrovin (Thu Feb 26 2009 - 12:46:28 CST)
  • Digital Security Research Group (Thu Feb 26 2009 - 10:40:50 CST)
• [ECHO_ADV_102$2009] BusinessSpace <= 1.2 (id) Remote SQL Injection Vulnerability
  • adve-rdc.org (Mon Feb 09 2009 - 16:18:32 CST)
• [ECHO_ADV_103$2009] taifajobs <= 1.0 (jobid) Remote SQL Injection Vulnerability
  • adve-rdc.org (Mon Feb 23 2009 - 11:59:32 CST)
• [Full-disclosure] Joomla Component com_joomradio SQL Injection
  • Packet Storm (Wed Feb 18 2009 - 16:21:10 CST)
• [Full-disclosure] PHP filesystem attack vectors
  • Stefan Esser (Sun Feb 08 2009 - 07:12:43 CST)
• [oCERT-2009-002] OpenCORE insufficient bounds checking during MP3 decoding
  • Will Drewry (Sat Feb 07 2009 - 10:45:11 CST)
• [security bulletin] HPSBGN02410 SSRT080135 rev.1 - HP Virtual Rooms Client Running on Windows, Remote Execution of Arbitrary Code
  • security-alerthp.com (Thu Feb 26 2009 - 07:34:46 CST)
• [security bulletin] HPSBMA02331 SSRT080000 rev.3 - HP-UX running WBEM Services, Remote Execution of Arbitrary Code, Gain Extended Privileges
  • security-alerthp.com (Wed Feb 11 2009 - 08:20:22 CST)
• [security bulletin] HPSBMA02384 SSRT071465 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Unauthorized Access, Denial of Service (DoS)
  • security-alerthp.com (Tue Feb 24 2009 - 15:30:08 CST)
• [security bulletin] HPSBMA02406 SSRT080100 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code
  • security-alerthp.com (Fri Feb 06 2009 - 08:15:30 CST)
• [security bulletin] HPSBMA02406 SSRT080100 rev.2 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code, Unauthorized Access to Data
  • security-alerthp.com (Tue Feb 17 2009 - 12:19:46 CST)
• [security bulletin] HPSBPI02398 SSRT080166 rev.1 - Certain HP LaserJet Printers, HP Color LaserJet Printers, and HP Digital Senders, Remote Unauthorized Access to Files
  • security-alerthp.com (Fri Feb 06 2009 - 08:14:48 CST)
• [security bulletin] HPSBPI02398 SSRT080166 rev.2 - Certain HP LaserJet Printers, HP Color LaserJet Printers, and HP Digital Senders, Remote Unauthorized Access to Files
  • security-alerthp.com (Sun Feb 15 2009 - 05:05:43 CST)
• [security bulletin] HPSBUX02401 SSRT090005 rev.1 - HP-UX Running Apache Web Server Suite, Remote Denial of Service (DoS), Cross-site Scripting (XSS), Execution of Arbitrary Code, Cross-Site Request Forgery (CSRF)
  • security-alerthp.com (Wed Feb 04 2009 - 07:19:58 CST)
• [security bulletin] HPSBUX02401 SSRT090005 rev.2 - HP-UX Running Apache Web Server Suite, Remote Denial of Service (DoS), Cross-site Scripting (XSS), Execution of Arbitrary Code, Cross-Site Request Forgery (CSRF)
  • security-alerthp.com (Fri Feb 13 2009 - 08:01:38 CST)
• [security bulletin] HPSBUX02407 SSRT080107 rev.1 - HP-UX Running IPv6, Remote Denial of Service (DoS) and Unauthorized Access
  • security-alerthp.com (Tue Feb 03 2009 - 09:33:44 CST)
• [security bulletin] HPSBUX02408 SSRT080182 rev.1 - HP-UX Running NFS, Local Denial of Service (DoS)
  • security-alerthp.com (Fri Feb 06 2009 - 08:16:06 CST)
• [SECURITY] [DSA 1716-1] New vnc4 packages fix remote code execution
  • Florian Weimer (Sat Jan 31 2009 - 15:26:15 CST)
• [SECURITY] [DSA 1717-1] New devil packages fix buffer overflow
  • Devin Carraway (Thu Feb 05 2009 - 00:30:23 CST)
• [SECURITY] [DSA 1718-1] New boinc packages fix validation bypass
  • Moritz Muehlenhoff (Sun Feb 08 2009 - 15:31:08 CST)
• [SECURITY] [DSA 1719-1] New gnutls13 packages fix certificate validation
  • Florian Weimer (Tue Feb 10 2009 - 01:00:19 CST)
• [SECURITY] [DSA 1720-1] New TYPO3 packages fix several vulnerabilities
  • Nico Golde (Tue Feb 10 2009 - 14:52:40 CST)
• [SECURITY] [DSA 1721-1] New libpam-krb5 packages fix local privilege escalation
  • Moritz Muehlenhoff (Wed Feb 11 2009 - 14:58:04 CST)
• [SECURITY] [DSA 1722-1] New libpam-heimdal packages fix local privilege escalation
  • Moritz Muehlenhoff (Wed Feb 11 2009 - 15:04:35 CST)
• [SECURITY] [DSA 1724-1] New moodle packages fix several vulnerabilities
  • Martin Schulze (Fri Feb 13 2009 - 14:39:44 CST)
• [SECURITY] [DSA 1725-1] New websvn packages fix information leak
  • Thijs Kinkhorst (Sun Feb 15 2009 - 09:42:58 CST)
• [SECURITY] [DSA 1726-1] New python-crypto packages fix denial of service
  • Moritz Muehlenhoff (Wed Feb 25 2009 - 14:31:39 CST)
• [SECURITY] [DSA 1727-1] New proftpd-dfsg packages fix SQL injection vulnerabilites
  • Steffen Joeris (Thu Feb 26 2009 - 02:25:52 CST)
• [SECURITY] [DSA 1728-1] New dkim-milter packages fix denial of service
  • Florian Weimer (Fri Feb 27 2009 - 12:16:12 CST)
• [SECURITY] CVE-2008-4308: Tomcat information disclosure vulnerability
  • Mark Thomas (Wed Feb 25 2009 - 17:17:37 CST)
• [SVRT-02-09] FeedDemon (ver<=2.7) Buffer Overflow Vulnerability
  • SVRT-Bkis (Thu Feb 05 2009 - 02:15:45 CST)
• [Tool] sqlmap 0.6.4 released
  • Bernardo Damele A. G. (Wed Feb 04 2009 - 10:59:05 CST)
• [UPRSN] Ubuntu Privacy Remix 8.04r3 fixes security issues
  • Ubuntu Privacy Remix Team (Mon Feb 16 2009 - 10:48:05 CST)
• [USN-717-1] Firefox and Xulrunner vulnerabilities
  • Jamie Strandboge (Tue Feb 10 2009 - 19:41:21 CST)
• [USN-717-2] Firefox vulnerabilities
  • Jamie Strandboge (Tue Feb 10 2009 - 19:43:03 CST)
• [USN-717-3] Firefox vulnerabilities
  • Jamie Strandboge (Tue Feb 10 2009 - 19:49:31 CST)
• [USN-719-1] pam-krb5 vulnerabilities
  • Marc Deslauriers (Thu Feb 12 2009 - 13:18:14 CST)
• [USN-720-1] PHP vulnerabilities
  • Marc Deslauriers (Thu Feb 12 2009 - 13:18:54 CST)
• [USN-721-1] fglrx-installer vulnerability
  • Kees Cook (Tue Feb 17 2009 - 14:56:23 CST)
• [USN-722-1] sudo vulnerability
  • Kees Cook (Tue Feb 17 2009 - 15:32:55 CST)
• [USN-723-1] Git vulnerabilities
  • Marc Deslauriers (Wed Feb 18 2009 - 15:23:53 CST)
• [USN-724-1] Squid vulnerability
  • Jamie Strandboge (Thu Feb 26 2009 - 06:28:55 CST)
• [waraxe-2009-SA#072] - Multiple Vulnerabilities in RavenNuke 2.3.0
  • come2waraxeyahoo.com (Mon Feb 16 2009 - 10:40:38 CST)
• [Wintercore Research WS02-0209] Kaspersky Products Klim5.sys local privilege escalation
  • vulnswintercore.com (Mon Feb 02 2009 - 10:47:20 CST)
• ACM CCS '09: Call for Workshop Proposals
  • Christopher Kruegel (Wed Feb 11 2009 - 17:37:53 CST)
• ANNOUNCE: RFIDIOt-0.1x release - February 2009
  • Adam Laurie (Thu Feb 26 2009 - 08:23:01 CST)
• Another SQL injection in ProFTPd with mod_mysql (probably postgres as well)
  • Benjamin Milde (Tue Feb 24 2009 - 17:13:50 CST)
  • Edward Bjarte Fjellskål (Wed Feb 11 2009 - 10:07:41 CST)
  • Sergio Aguayo (Tue Feb 10 2009 - 22:32:25 CST)
  • Shino (Tue Feb 10 2009 - 17:50:13 CST)
  • gat3waygat3way.eu (Wed Feb 11 2009 - 01:20:56 CST)
  • Daniel Mayer (Tue Feb 10 2009 - 16:12:17 CST)
  • gat3waygat3way.eu (Tue Feb 10 2009 - 13:49:53 CST)
• Apache directory traversal on shared hosting environment.
  • Ben M. Thomas (Thu Feb 19 2009 - 11:42:19 CST)
  • davefortuity.biz (Thu Feb 19 2009 - 11:03:58 CST)
  • davechostgator.com (Wed Feb 18 2009 - 23:48:18 CST)
• Apple Safari 4 Beta feeds: URI NULL Pointer Dereference Denial of Service Vulnerability
  • Trancer (Wed Feb 25 2009 - 09:34:25 CST)
• BackTrack 4 Beta Released
  • Mati Aharoni (Wed Feb 11 2009 - 10:37:37 CST)
• BitDefender Internet Security XSS
  • rbedybitdefender.com (Fri Feb 27 2009 - 07:25:55 CST)
  • jplopezygmail.com (Thu Feb 26 2009 - 10:12:49 CST)
• BruCON call for papers
  • Filip Waeytens (Sat Jan 31 2009 - 05:47:41 CST)
• C4 SCADA Security Advisory - AREVA e-terrahabitat / e-terraplatform Multiple Vulnerabilities
  • Eyal Udassin (Thu Feb 05 2009 - 10:46:38 CST)
• Call for papers and trainers - note extended deadline - SeacureIT 2009
  • Stefano Zanero (Tue Feb 03 2009 - 13:37:27 CST)
• CamFrog Password Disclosure Vulnerability
  • zigmatngmail.com (Fri Feb 06 2009 - 14:23:44 CST)
• Cisco IOS XSS/CSRF Vulnerability
  • azask2gmail.com (Wed Feb 04 2009 - 15:56:17 CST)
• Cisco Security Advisory: Cisco ACE Application Control Engine Device Manager and Application Networking Manager Vulnerabilities
  • Cisco Systems Product Security Incident Response Team (Wed Feb 25 2009 - 11:10:54 CST)
• Cisco Security Advisory: Cisco Unified MeetingPlace Web Conferencing Authentication Bypass Vulnerability
  • Cisco Systems Product Security Incident Response Team (Wed Feb 25 2009 - 10:00:00 CST)
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco Wireless LAN Controllers
  • Cisco Systems Product Security Incident Response Team (Wed Feb 04 2009 - 10:41:40 CST)
• Cisco Security Advisory: Multiple Vulnerabilities in the Cisco ACE Application Control Engine Module and Cisco ACE 4710 Application Control Engine
  • Cisco Systems Product Security Incident Response Team (Wed Feb 25 2009 - 10:15:00 CST)
• Cisco Unified MeetingPlace Web Conferencing Stored Cross Site Scripting Vulnerability
  • security.assurancenab.com.au (Wed Feb 25 2009 - 17:33:48 CST)
• CORE-2008-1009 - VNC Multiple Integer Overflows
  • CORE Security Technologies Advisories (Tue Feb 03 2009 - 14:11:46 CST)
• Craft Silicon Banking<img src="/imgs/at.gif" border=0 align=middle>Home SQL Injection
  • Francesco Bianchino (Tue Feb 10 2009 - 13:54:56 CST)
• Cross-site scripting in Samizdat 0.6.1
  • Dmitry Borodaenko (Fri Feb 13 2009 - 06:43:46 CST)
• cryptsetup can't destroy last key of a LUKS partition under Ubuntu/Debian
  • Pierre Dinh-van (Fri Feb 13 2009 - 02:24:52 CST)
• dBpowerAMP Audio Player local buffer overflow exploit
  • maroc-anti-connexionhotmail.com (Thu Feb 05 2009 - 11:43:37 CST)
• DDIVRT-2008-19 HP JetDirect Web Administration Directory Traversal
  • vulnerabilityresearchddifrontline.com (Wed Feb 04 2009 - 08:42:23 CST)
• DDIVRT-2009-20 NetMRI Login Application Cross-site Scripting Vulnerability
  • ddvulnalertddifronline.com (Wed Feb 18 2009 - 11:26:24 CST)
• Denial of Service using Partial GET Request in Mozilla Firefox 3.06
  • nodepesos.eu (Fri Feb 20 2009 - 06:31:39 CST)
  • Mike Duncan (Fri Feb 13 2009 - 11:02:39 CST)
  • XiaShinggmail.com (Thu Feb 12 2009 - 16:04:33 CST)
  • XiaShinggmail.com (Thu Feb 12 2009 - 15:20:17 CST)
  • Rolphin (Thu Feb 12 2009 - 13:12:12 CST)
  • XiaShinggmail.com (Thu Feb 12 2009 - 02:14:40 CST)
• Directory traversal vulnerability in Geovision Digital Video Surveillance System (geohttpserver)
  • dejan.levajanetsec.rs (Wed Feb 11 2009 - 09:49:45 CST)
• djbdns misformats some long response packets; patch and example attack
  • Matthew Dempsky (Thu Feb 26 2009 - 17:34:01 CST)
• DMXReady Blog Manager (SQL/XSS)
  • supportdmxready.com (Mon Feb 02 2009 - 10:31:22 CST)
• Drupal Local File Inclusion Vulnerability (Windows)
  • Bogdan Calin (Fri Feb 27 2009 - 03:17:07 CST)
• Enomaly ECP/Enomalism: Multiple vulnerabilities in enomalism2.sh (redux)
  • Sam Johnston (Sun Feb 15 2009 - 05:56:31 CST)
• Enomaly ECP/Enomalism: Silent update remote command execution vulnerability
  • larsenomaly.com (Fri Feb 13 2009 - 15:25:05 CST)
  • sc0ttbeardsleygmail.com (Fri Feb 13 2009 - 12:14:08 CST)
  • Sam Johnston (Thu Feb 12 2009 - 17:43:40 CST)
• Euphonics Audio Player v1.0 (.pls) Local BOF POC
  • darkb0x97googlemail.com (Tue Feb 03 2009 - 17:16:17 CST)
• flatnux Flatnux-2009-01-27 Remote File Include
  • blabla-34 (Sun Feb 01 2009 - 21:20:52 CST)
• FreeBSD Security Advisory FreeBSD-SA-09:05.telnetd
  • FreeBSD Security Advisories (Mon Feb 16 2009 - 16:02:33 CST)
• Full Path Disclosure In Photolibrary 1.009
  • XiaShinggmail.com (Wed Feb 11 2009 - 01:58:45 CST)
• Full Path Disclosure In Photolibrary 1.009(Update)
  • XiaShinggmail.com (Wed Feb 11 2009 - 17:27:22 CST)
• gigCalendar 1.0 (banddetails.php) Joomla Component SQL Injection
  • Salvatore \ (Sat Feb 21 2009 - 12:14:49 CST)
• gigCalendar 1.0 (venuedetails.php) Joomla Component SQL Injection
  • Salvatore \ (Sat Feb 21 2009 - 12:09:30 CST)
• gigCalendar Joomla Component 1.0 SQL Injection
  • Salvatore \ (Sat Feb 21 2009 - 12:00:59 CST)
• Golabi CMS Remote File Inclusion Vulnerability
  • rezazahfarangmail.com (Thu Feb 26 2009 - 01:26:47 CST)
• hello bug in windows live messenger
  • rasod korad (Wed Feb 18 2009 - 12:56:13 CST)
• Hex Workshop <= v6 (.hex) File Local Code
  • xhakerman2008hotmail.com (Fri Feb 27 2009 - 03:39:33 CST)
• Hex Workshop v6 "ColorMap files .cmap" Invalid Memory Reference crash POC
  • xhakerman2006yahoo.com (Tue Feb 03 2009 - 09:39:37 CST)
• HP Quality Center vulnerability
  • Pavel Kankovsky (Tue Feb 24 2009 - 17:19:23 CST)
  • infoexposit.co.uk (Mon Feb 23 2009 - 04:47:08 CST)
• HTC Touch vCard over IP Denial of Service PoC Code
  • Mobile Security Lab (Fri Feb 27 2009 - 11:57:35 CST)
• iDefense Security Advisory 02.06.09: HP Network Node Manager Multiple Command Injection Vulnerabilities
  • iDefense Labs (Fri Feb 06 2009 - 14:18:50 CST)
• iDefense Security Advisory 02.06.09: HP Network Node Manager Multiple Information Disclosure Vulnerabilities
  • iDefense Labs (Fri Feb 06 2009 - 15:00:05 CST)
• iDefense Security Advisory 02.24.09: Adobe Flash Player Invalid Object Reference Vulnerability
  • iDefense Labs (Tue Feb 24 2009 - 12:33:11 CST)
• LCPlayer (.qt file) EOP change PoC (app crash)
  • darkb0x97googlemail.com (Wed Feb 04 2009 - 13:08:03 CST)
• LFI in Drupal CMS
  • securitydrupal.org (Wed Feb 18 2009 - 07:22:20 CST)
  • securitydrupal.org (Thu Feb 12 2009 - 02:31:20 CST)
  • rasool.nasrgmail.com (Sun Feb 08 2009 - 15:03:08 CST)
• Local vulnerability in suexec + FastCGI + PHP configurations
  • Martijn Vernooij (Thu Feb 12 2009 - 09:42:28 CST)
  • security.432amxl.com (Wed Feb 11 2009 - 03:55:09 CST)
• London DEFCON DC4420 - February 2009 Meet - Thursday 12th
  • Major Malfunction (Mon Feb 09 2009 - 11:00:35 CST)
• metabbs 0.11 Change admin password vulnerability
  • make0daygmail.com (Sun Feb 01 2009 - 22:27:44 CST)
• Microsoft SDL meets CWE/SANS Top25
  • Juha-Matti Laurio (Mon Feb 02 2009 - 10:19:37 CST)
• NaviCopa webserver 3.01 Multiple Vulnerabilities
  • ew1zzhotmail.com (Mon Feb 02 2009 - 18:59:00 CST)
• New site about security conferences : www.security-briefings.com
  • JohnTheTrainingCo.com (Thu Feb 26 2009 - 08:41:59 CST)
• Nokia Multimedia Player v1.1 .m3u Heap Overflow PoC exploit
  • 0in.emailgmail.com (Tue Feb 03 2009 - 07:10:59 CST)
• Nokia N95 browser "setAttributeNode" method crash
  • jplopezygmail.com (Fri Feb 13 2009 - 10:56:56 CST)
• Nokia N95-8 browser denial of service
  • Thierry Zoller (Thu Feb 05 2009 - 11:51:19 CST)
  • jplopezygmail.com (Thu Feb 05 2009 - 00:01:46 CST)
• Nokia N95-8 JPG crash
  • Dmitry Yu. Bolkhovityanov (Mon Feb 09 2009 - 21:47:49 CST)
  • jplopezygmail.com (Sat Feb 07 2009 - 12:24:47 CST)
• Nokia Phoenix Service Software 2008.04.007.32837 overflow POC
  • murderskillgmail.com (Tue Feb 10 2009 - 10:52:52 CST)
• Novell-QuickFinder Server Xss & Java remote execution Code]
  • ivan.sancheznullcode.com.ar (Tue Feb 10 2009 - 12:43:24 CST)
• On the implementation of TCP urgent data (IETF Internet Draft)
  • Fernando Gont (Fri Feb 27 2009 - 12:51:30 CST)
• pam-krb5 security advisory (3.12 and earlier)
  • Tim Skirvin (Wed Feb 11 2009 - 15:15:06 CST)
  • Russ Allbery (Wed Feb 11 2009 - 14:04:09 CST)
• PHCDownload 1.1.0 Vulnerabilities
  • contactvnbrain.net (Fri Feb 20 2009 - 11:10:00 CST)
• PHP filesystem attack vectors
  • cxibsecurityreason.com (Tue Feb 10 2009 - 14:34:24 CST)
  • ascii (Sun Feb 08 2009 - 04:53:22 CST)
• phpslash <= 0.8.1.1 Remote Code Execution Exploit
  • gmdarkfiggmail.com (Sun Feb 01 2009 - 04:38:05 CST)
• POP Peeper 3.4.0.0 UIDL Remote Buffer Overflow Vulnerability
  • Krakow Labs (Fri Feb 27 2009 - 15:10:23 CST)
• pPIM Multiple Vulnerabilities
  • Justin C. Klein Keane (Tue Feb 24 2009 - 16:55:21 CST)
• ProFTPd with mod_mysql Authentication Bypass Exploit
  • alphanix00gmail.com (Tue Feb 10 2009 - 17:24:24 CST)
• QIP 2005 Denial of Service Vulnerability
  • ss_contactshotmail.com (Wed Feb 04 2009 - 08:38:28 CST)
• RainbowCrack 1.3 is released, the new generation of time-memory tradeoff hash cracker
  • shuangleilive.com (Fri Feb 13 2009 - 00:50:16 CST)
• RealNetworks RealPlayer IVR File Processing Multiple Code Execute Vulnerabilities
  • noreply-secresearchfortinet.com (Thu Feb 05 2009 - 19:35:01 CST)
• Remote Authentication Bypass - Swann DVR4 SecuraNet (possibly DVR9 as well)
  • tezspilsby.net (Tue Feb 10 2009 - 07:34:03 CST)
• RFI Bug
  • Francesco Laurita (Tue Feb 17 2009 - 03:44:49 CST)
  • Dr.linuxgmx.net (Mon Feb 16 2009 - 11:13:08 CST)
• rgboard v4 (07.07.27) Multiple Vulnerability
  • make0daygmail.com (Sun Feb 01 2009 - 22:24:18 CST)
• rooting your own phone: android security
  • Pavel Machek (Sun Feb 08 2009 - 04:22:44 CST)
• Secunia Research: Free Download Manager Remote Control Server Buffer Overflow
  • Secunia Research (Mon Feb 02 2009 - 05:36:54 CST)
• Secunia Research: Free Download Manager Torrent Parsing Buffer Overflows
  • Secunia Research (Mon Feb 02 2009 - 05:37:03 CST)
• Secunia Research: ksquirrel-libs Radiance RGBE Buffer Overflows
  • Secunia Research (Wed Feb 25 2009 - 09:16:23 CST)
• Secunia Research: Orbit Downloader Long URL Parsing Buffer Overflow
  • Secunia Research (Wed Feb 25 2009 - 03:55:59 CST)
• Secunia Research: SHOUTcast DNAS Relay Server Buffer Overflow
  • Secunia Research (Wed Feb 25 2009 - 09:12:07 CST)
• Security Advisory for Bugzilla 3.2.1, 3.0.7, and 3.3.2
  • mkanatbugzilla.org (Tue Feb 03 2009 - 04:37:04 CST)
• Security Assessment of the Transmission Control Protocol (TCP)
  • Fernando Gont (Thu Feb 12 2009 - 16:38:35 CST)
• SEP(Symantec) Bug
  • securesymantec.com (Fri Feb 13 2009 - 16:58:29 CST)
  • Jon Kloske (Thu Feb 12 2009 - 21:41:08 CST)
  • Sandeep Cheema (Thu Feb 12 2009 - 23:54:23 CST)
  • steve.fowleroregonstate.edu (Thu Feb 12 2009 - 16:02:18 CST)
  • James C. Slora Jr. (Thu Feb 12 2009 - 11:27:23 CST)
  • Sandeep Cheema (Thu Feb 12 2009 - 08:16:11 CST)
• SEPKILL /im SMC.EXE /f
  • Sandeep Cheema (Thu Feb 19 2009 - 23:42:55 CST)
  • Sandeep Cheema (Thu Feb 19 2009 - 23:31:53 CST)
  • Sandeep Cheema (Thu Feb 19 2009 - 01:20:20 CST)
  • David Calabro (Fri Feb 13 2009 - 13:32:24 CST)
  • Sandeep Cheema (Fri Feb 13 2009 - 13:48:29 CST)
  • Sandeep Cheema (Fri Feb 13 2009 - 11:25:15 CST)
  • Sandeep Cheema (Fri Feb 13 2009 - 07:33:20 CST)
  • Sandeep Cheema (Fri Feb 13 2009 - 08:36:24 CST)
  • Sandeep Cheema (Fri Feb 13 2009 - 06:48:08 CST)
• SFX-SQLi: A new SQL injection technique for MSSQL (dumps a table in one request!)
  • Amit Klein (Mon Feb 09 2009 - 11:45:04 CST)
  • Razi Shaban (Sun Feb 08 2009 - 10:29:05 CST)
  • Roman Medina-Heigl Hernandez (Sun Feb 08 2009 - 10:16:30 CST)
  • Razi Shaban (Fri Feb 06 2009 - 10:50:25 CST)
  • Daniel Kachakil (Fri Feb 06 2009 - 06:10:29 CST)
• SMF 1.1.7 Persistent XSS (requires permision to edit censor)
  • metallica48423gmail.com (Thu Feb 05 2009 - 03:57:11 CST)
  • Eduardo Vela (Tue Feb 03 2009 - 02:56:37 CST)
• Sopcast SopCore Control (sopocx.ocx 3.0.3.501) SetExternalPlayer() user assisted remote code execution poc
  • nospamgmail.it (Wed Feb 25 2009 - 23:56:19 CST)
• Speaking line up confirmed! uCon Security Conference 2009 - Recife, Brazil
  • uCon Security Conference (Thu Feb 05 2009 - 15:33:40 CST)
• Squid Proxy Cache Denial of Service in request handling
  • Amos Jeffries (Wed Feb 04 2009 - 05:53:04 CST)
• StreamDown v6.4.3 Local Buffer Overflow PoC
  • todor.donevgmail.com (Mon Feb 02 2009 - 07:36:52 CST)
• SyScan'09 Call For Paper - Shanghai, Hong Kong, Singapore, Taipei
  • organisersyscan.org (Wed Feb 18 2009 - 02:05:27 CST)
• Team SHATTER Security Advisory: Oracle Database Buffer Overflow in SYS.OLAPIMPL_T.ODCITABLESTART
  • security curmudgeon (Thu Feb 19 2009 - 21:21:14 CST)
  • Shatter (Tue Feb 03 2009 - 11:57:56 CST)
• Team SHATTER Security Advisory: SQL Injection in Oracle Enterprise Manager (TARGET Parameter)
  • Shatter (Tue Feb 03 2009 - 11:55:11 CST)
• Trend micro - IWSVA/IWSS - Authorization module password leak
  • david.vorelhoneynet.cz (Mon Feb 09 2009 - 07:30:09 CST)
• VMSA-2009-0001 ESX patches address an issue loading corrupt virtual disks and update Service Console packages
  • VMware Security Team (Sat Jan 31 2009 - 02:06:03 CST)
• VMSA-2009-0002 VirtualCenter Update 4 updates Tomcat to 5.5.27
  • VMware Security team (Mon Feb 23 2009 - 23:53:17 CST)
• VMSA-2009-0003 ESX 2.5.5 patch 12 updates service console package ed
  • VMware Security team (Thu Feb 26 2009 - 22:10:43 CST)
• Vulnerable: Ilch CMS
  • Gizmore (Fri Feb 06 2009 - 11:28:13 CST)
• Web Hacking Incidents update for Feb 10th
  • Ofer Shezaf (Tue Feb 10 2009 - 10:19:34 CST)
• Web Hacking Incidents update for Feb 10th (Links corrected)
  • Ofer Shezaf (Tue Feb 10 2009 - 23:18:37 CST)
• Web Hacking Incidents update for Feb 3rd
  • Ofer Shezaf (Tue Feb 03 2009 - 09:43:30 CST)
• Weekly Web Hacking Incidents update for Feb 19th
  • Ofer Shezaf (Wed Feb 18 2009 - 21:02:03 CST)
• XSS Attack using SMS to Optus/Huawei E960 HSDPA Router
  • rizki.wicaksonogmail.com (Sun Feb 22 2009 - 22:42:51 CST)
• ZDI-09-010: Novell Netware Groupwise GWIA RCPT Command Buffer Overflow Vulnerability
  • zdi-disclosures3com.com (Mon Feb 02 2009 - 11:52:54 CST)
• ZDI-09-011: Microsoft Internet Explorer CFunctionPointer Memory Corruption Vulnerability
  • ZDI Disclosures (Tue Feb 10 2009 - 14:56:41 CST)
• ZDI-09-012: Microsoft Internet Explorer Malformed CSS Memory Corruption
  • ZDI Disclosures (Tue Feb 10 2009 - 14:57:58 CST)
• ZeroShell <= 1.0beta11 Remote Code Execution
  • Luca Carettoni (Mon Feb 09 2009 - 09:59:52 CST)

Last message date: Fri Feb 27 2009 - 16:15:25 CST
Archived on: Fri Feb 27 2009 - 16:15:25 CST

248 messages sorted by: [ author ] [ date ] [ thread ]