267 messages sorted by: [ date ] [ thread ] [ subject ]

Starting: Mon Mar 01 2010 - 10:35:27 CST
Ending: Wed Mar 31 2010 - 16:04:54 CDT

• adamomega.org.uk
  • Re: Firefox 3.6 for Windows includes a forged CA cert (Mon Mar 22 2010 - 18:00:30 CDT)
• adminbugreport.ir
  • Ananta Gazelle SQL Injection Vulnerability (Sat Mar 13 2010 - 03:40:58 CST)
  • 1024CMS Blind SQL Injection Vulnerability (Tue Mar 02 2010 - 01:46:34 CST)
• Akos Szalkai
  • Re: Vulnerability Astaro Security Linux v5 (Tue Mar 23 2010 - 14:47:48 CDT)
• Albert Levi
  • CFP - GameSec 2010 - Conference on Decision and Game Theory for Security (Sun Mar 21 2010 - 08:12:48 CDT)
• Alex Legler
  • [ GLSA 201003-01 ] sudo: Privilege escalation (Wed Mar 03 2010 - 10:30:31 CST)
• Alexandr Polyakov
  • [DSECRG-09-064] SAP GUI - Insecure method, code execution (Tue Mar 23 2010 - 12:16:08 CDT)
• Andreas Kirbach
  • SQL Injection Vulnerabilitie in PhotoPost vBGallery 2.5 (Sun Mar 28 2010 - 08:09:47 CDT)
• Andrew Barkley
  • ZoneAlarm 9 (ForceField) Security Disclosure (Mon Mar 15 2010 - 10:06:21 CDT)
  • ZoneAlarm Security Circumvention (Mon Mar 08 2010 - 10:49:18 CST)
• Andriy Tereshchenko
  • Insecure SMS authorization scheme at LiqPAY micro-payments of PrivatBank (Ukraine) (Mon Mar 22 2010 - 12:38:36 CDT)
• Andrzej Targosz
  • Last Call for Papers, CONFidence 2010, 25-26May, Last Call for Papers (Mon Mar 15 2010 - 20:15:28 CDT)
• andrzej.targoszproidea.org.pl
  • CONFidence 2010 /25-26 May/, CfP (Sat Feb 27 2010 - 19:31:29 CST)
• andyhotmail.com
  • Re: Todd Miller Sudo local root exploit discovered by Slouching (Wed Mar 03 2010 - 06:03:32 CST)
• anonymanonym.com
  • Re: Re: Circumventing Critical Security in Windows XP (Sat Feb 27 2010 - 18:18:04 CST)
• Ansgar Wiechers
  • Re: ZoneAlarm Security Circumvention (Mon Mar 08 2010 - 15:56:17 CST)
  • Re: Circumventing Critical Security in Windows XP (Mon Mar 01 2010 - 13:05:52 CST)
• astera
  • PlumberCon 10 - Call for Papers (Mon Mar 15 2010 - 10:23:49 CDT)
• Bernardo Damele A. G.
  • [Tool] sqlmap 0.8 released (Sun Mar 14 2010 - 22:08:58 CDT)
• bugs
  • Symlink attack with Solaris Update manager and Sun Patch Cluster (Wed Mar 24 2010 - 12:26:48 CDT)
• bugsfbi.dhs.org
  • Symlink attack with Solaris Update manager (Tue Mar 23 2010 - 20:31:05 CDT)
• cfpruxcon.org.au
  • Ruxcon 2010 Call For Papers (Wed Mar 24 2010 - 21:15:57 CDT)
• Christopher
  • Sahana 0.6.2.2 Authentication Bypass (Wed Mar 17 2010 - 11:54:30 CDT)
• Cisco Systems Product Security Incident Response Team
  • Cisco Security Advisory: Cisco IOS Software Session Initiation Protocol Denial of Service Vulnerabilities (Wed Mar 24 2010 - 11:00:00 CDT)
  • Cisco Security Advisory: Cisco IOS Software IPsec Vulnerability (Wed Mar 24 2010 - 11:00:00 CDT)
  • Cisco Security Advisory: Cisco IOS Software NAT Skinny Call Control Protocol Vulnerability (Wed Mar 24 2010 - 11:00:00 CDT)
  • Cisco Security Advisory: Cisco Digital Media Player Remote Display Unauthorized Content Injection Vulnerability (Wed Mar 03 2010 - 10:26:19 CST)
  • Cisco Security Advisory: Multiple Vulnerabilities in Cisco Digital Media Manager (Wed Mar 03 2010 - 10:24:33 CST)
  • Cisco Security Advisory: Cisco Unified Communications Manager Denial of Service Vulnerabilities (Wed Mar 03 2010 - 09:45:00 CST)
• CORE Security Technologies Advisories
  • CORE-2010-0311 - eFront-learning PHP file inclusion vulnerability (Tue Mar 16 2010 - 15:48:04 CDT)
  • CORE-2009-0803: Virtual PC Hypervisor Memory Protection Vulnerability (Tue Mar 16 2010 - 15:11:40 CDT)
  • CORE-2009-1103: Microsoft Office Excel DbOrParamQry Record Parsing Vulnerability (Tue Mar 09 2010 - 15:35:52 CST)
  • CORE-2009-0813: Windows Movie Maker and Microsoft Producer IsValidWMToolsStream() Heap Overflow (Tue Mar 09 2010 - 15:33:43 CST)
  • CORRECTION: CORE-2009-0913 - Luxology Modo 401 .LXO Integer Overflow (Wed Mar 03 2010 - 11:12:29 CST)
  • Luxology Modo 401 .LXO Integer Overflow (Tue Mar 02 2010 - 14:05:43 CST)
• Cyrill Brunschwiler
  • CVE-2009-4505 OpenCMS OAMP Comments Module XSS (Wed Mar 24 2010 - 06:57:37 CDT)
• Dan Rosenberg
  • Exploiting nano (Sun Mar 28 2010 - 11:27:10 CDT)
  • Multiple vulnerabilities in Deliver (Wed Mar 24 2010 - 09:09:10 CDT)
  • ncpfs, Multiple Vulnerabilities (Fri Mar 05 2010 - 11:06:01 CST)
  • fcrontab Information Disclosure Vulnerability (Wed Mar 03 2010 - 18:06:22 CST)
• dan.j.rosenberggmail.com
  • Re: ncpfs, Multiple Vulnerabilities (Fri Mar 05 2010 - 13:10:11 CST)
• dann frazier
  • [SECURITY] [DSA 2012-1] New Linux 2.6.26 packages fix several issues (Thu Mar 11 2010 - 12:47:18 CST)
  • [SECURITY] [DSA-2010-1] New kvm packages fix several vulnerabilities (Wed Mar 10 2010 - 12:18:55 CST)
  • [SECURITY] [DSA 2004-1] New Linux 2.6.24 packages fix several vulnerabilities (Sun Feb 28 2010 - 21:53:30 CST)
• dr_ch1nahushmail.com
  • Unspecified EMC Documentum Remote Code Execution Vulnerability (Thu Mar 04 2010 - 10:16:36 CST)
• drstrangep0rkhushmail.com
  • Re: Apple Airport Wireless Products: Promiscuous FTP PORT Allowed in FTP Proxy Provides Security Bypass (Fri Mar 05 2010 - 20:12:44 CST)
• DSecRG
  • "Writing JIT-Spray Shellcode for fun and profit" by DSecRG (Sat Mar 06 2010 - 05:15:59 CST)
• dveditzcruzio.com
  • Re: Firefox 3.6 for Windows includes a forged CA cert (Mon Mar 22 2010 - 13:34:21 CDT)
• edgard.chammasbeyond-security.org
  • Sun Java System Communication Express CSRF via HPP (Fri Mar 12 2010 - 18:10:38 CST)
• faghaninsec.ir
  • Zigurrat CMS SQL Injection Vulnerability (Mon Mar 15 2010 - 07:02:03 CDT)
  • Pars CMS SQL Injection Vulnerability (Mon Mar 15 2010 - 07:01:07 CDT)
• Fernando Gont
  • IETF effort: Security Assesment of the Internet Protocol (Thu Mar 04 2010 - 03:48:49 CST)
• Francis Litterio
  • Firefox 3.6 for Windows includes a forged CA cert (Fri Mar 19 2010 - 15:22:16 CDT)
• Francis Provencher
  • {PRL} Novell Netware FTP Remote Stack Overflow (Mon Mar 29 2010 - 09:48:48 CDT)
  • {PRL} Lexmark Multiple Laser printer FTP Remote Denial of Services (Mon Mar 22 2010 - 08:11:00 CDT)
  • {PRL} Lexmark Multiple Laser Printer Remote Stack Overflow (Mon Mar 22 2010 - 08:06:58 CDT)
• Gary Niger
  • Safari browser port blocking bypassed by integer overflow (Tue Mar 23 2010 - 14:28:30 CDT)
• Giuseppe Iuculano
  • [SECURITY] [DSA 2024-1] New moin packages fix cross-site scripting (Wed Mar 31 2010 - 03:39:02 CDT)
  • [SECURITY] [DSA 2021-1] New spamass-milter packages fix remote command execution (Mon Mar 22 2010 - 06:01:46 CDT)
  • [SECURITY] [DSA-2019-1] New pango1.0 packages fix denial of service (Sat Mar 20 2010 - 04:41:28 CDT)
  • [SECURITY] [DSA 2017-1] New pulseaudio packages fix insecure temporary directory (Mon Mar 15 2010 - 15:14:44 CDT)
  • [SECURITY] [DSA 2016-1] New drupal6 packages fix several vulnerabilities (Sat Mar 13 2010 - 09:58:42 CST)
  • [SECURITY] [DSA 2014-1] New moin packages fix several vulnerabilities (Fri Mar 12 2010 - 04:51:08 CST)
  • [SECURITY] [DSA 2006-1] New sudo packages fix several vulnerabilities (Tue Mar 02 2010 - 14:36:52 CST)
• Hafez Kamal
  • [HITB-Announce] HITBSecConf2009 - Malaysia Videos Released! *Correction* (Tue Mar 23 2010 - 21:23:06 CDT)
  • [HITB-Announce] HITBSecConf2009 - Malaysia Videos Released! (Mon Mar 22 2010 - 21:32:39 CDT)
  • [HITB-Announce] HITBSecConf2010 - Dubai Agenda Released (Sun Mar 14 2010 - 03:31:35 CDT)
• iDefense Labs
  • iDefense Security Advisory 03.30.10: Oracle Java Runtime Environment Image FIle Buffer Overflow Vulnerability (Tue Mar 30 2010 - 21:36:12 CDT)
  • iDefense Security Advisory 03.30.10: Microsoft Internet Explorer 'onreadystatechange' Use After Free Vulnerability (Tue Mar 30 2010 - 15:38:54 CDT)
  • iDefense Security Advisory 03.11.10: Multiple Vendor WebKit HTML Element Use After Free Vulnerability (Thu Mar 11 2010 - 18:01:42 CST)
  • iDefense Security Advisory 03.09.10: Microsoft Excel MDXSET Record Heap Overflow Vulnerability (Wed Mar 10 2010 - 02:21:31 CST)
  • iDefense Security Advisory 03.09.10: Microsoft Excel MDXTUPLE Record Heap Overflow Vulnerability (Wed Mar 10 2010 - 02:45:14 CST)
  • iDefense Security Advisory 03.09.10: Microsoft Excel Sheet Object Type Confusion Vulnerability (Wed Mar 10 2010 - 01:20:18 CST)
  • iDefense Security Advisory 03.09.10: Microsoft Excel FNGROUPNAME Record Uninitialized Memory Vulnerability (Wed Mar 10 2010 - 01:54:27 CST)
  • iDefense Security Advisory 03.04.10: Autonomy KeyView OLE Document Integer Overflow Vulnerability (Thu Mar 04 2010 - 18:30:06 CST)
  • iDefense Security Advisory 03.02.10: IBM Lotus Domino Web Access ActiveX Stack Buffer Overflow Vulnerability (Tue Mar 02 2010 - 01:16:51 CST)
• infosecuritylab.ir
  • Joomla Component com_xmap Sql Injection Vulnerability (Mon Mar 29 2010 - 12:08:38 CDT)
  • XSS vulnerability in easy page cms (Mon Mar 29 2010 - 13:09:43 CDT)
  • Joomla Component com_weblinks Sql Injection Vulnerability (Mon Mar 29 2010 - 12:08:11 CDT)
  • IE 6.0 - Local Crash Exploit (Sat Mar 20 2010 - 15:23:45 CDT)
  • phpinfo() XSS Vulnerability (Sat Mar 06 2010 - 05:03:45 CST)
• Jakob Lell
  • CVE-2010-0624: Heap-based buffer overflow in GNU Tar and GNU Cpio (Wed Mar 10 2010 - 05:59:55 CST)
• Jamie Strandboge
  • [USN-911-1] MoinMoin vulnerabilities (Thu Mar 11 2010 - 20:01:12 CST)
  • [USN-905-1] sudo vulnerabilities (Fri Feb 26 2010 - 15:44:06 CST)
• Jan Lehnardt
  • [SECURITY] CVE-2008-2370: Apache CouchDB Timing Attack Vulnerability (Wed Mar 31 2010 - 08:54:00 CDT)
  • [SECURITY] CVE-2008-2370: Apache CouchDB Timing Attack Vulnerability (Wed Mar 31 2010 - 08:48:01 CDT)
• Jan Schejbal
  • Miranda IM silent TLS failure (Tue Mar 16 2010 - 19:31:29 CDT)
• Jann Horn
  • Re: Todd Miller Sudo local root exploit discovered by Slouching (Wed Mar 03 2010 - 13:13:07 CST)
  • Re: Re: Circumventing Critical Security in Windows XP (Mon Mar 01 2010 - 12:35:34 CST)
• jasonngssoftware.com
  • Elevation of Privilege Vulnerability in iTunes for Windows (Wed Mar 31 2010 - 08:39:52 CDT)
• jdanielastaro.com
  • Re: Vulnerability Astaro Security Linux v5 (Tue Mar 23 2010 - 14:26:07 CDT)
• Jeromie Jackson
  • SugarCRM Stored XSS vulnerability (Tue Mar 16 2010 - 10:07:25 CDT)
• John Adams
  • Re: [Full-disclosure] Medium security hole in Varnish reverse proxy (Mon Mar 29 2010 - 12:12:38 CDT)
• Jonathan Brossard
  • Hackito Ergo Sum Conference (Paris 8-10 April 2010) : Schedule (Wed Mar 24 2010 - 18:13:06 CDT)
• k4mr4n_Styahoo.com
  • Internet Explorer 7.0 0day Vulnerability (Sat Mar 20 2010 - 15:36:01 CDT)
• Kees Cook
  • [USN-919-1] Emacs vulnerability (Mon Mar 29 2010 - 16:58:46 CDT)
  • [USN-916-1] Kerberos vulnerabilities (Tue Mar 23 2010 - 18:32:04 CDT)
  • [USN-909-1] dpkg vulnerability (Thu Mar 11 2010 - 01:06:46 CST)
• Kingcope
  • Re: Todd Miller Sudo local root exploit discovered by Slouching (Wed Mar 03 2010 - 07:18:23 CST)
  • Todd Miller Sudo local root exploit discovered by Slouching (Mon Mar 01 2010 - 17:08:44 CST)
• Konrad Rieck
  • Call for Papers: EC2ND 2010 (Fri Mar 05 2010 - 10:43:36 CST)
• Kotas, Kevin J
  • CA20100318-01: Security Notice for CA ARCserve Backup (Thu Mar 18 2010 - 16:51:12 CDT)
• labsgdssecurity.com
  • Multiple DOM-Based XSS in Dojo Toolkit SDK (Mon Mar 15 2010 - 10:24:42 CDT)
• lamentilhack.org
  • Aris AGX agXchange ESM Cross Site Scripting Vulnerability (Mon Mar 22 2010 - 16:55:08 CDT)
  • IBM Lotus 6.x names.nsf Cross Site Scripting Vulnerability (Fri Mar 19 2010 - 15:57:21 CDT)
  • Aris AGX agXchange ESM Open Redirection Vulnerability (Fri Mar 19 2010 - 14:34:28 CDT)
  • IBM Lotus 6.x HTTP Response Splitting Vulnerability (Thu Mar 18 2010 - 21:19:00 CDT)
  • Friendly-Tech FriendlyTR69 CPE Remote Management V2.8.9 SQL Injection Vulnerability (Tue Mar 09 2010 - 18:52:17 CST)
  • IBM ENOVIA SmarTeam v5 Cross Site Scripting Vulnerability (Tue Mar 09 2010 - 09:17:25 CST)
  • Sparta Systems TrackWise TeamAccess module Multiple Cross Site Scripting Vulnerabilities (Tue Mar 02 2010 - 06:42:32 CST)
  • Eshbel Priority MarketGate module Cross Site Scripting Vulnerability (Mon Mar 01 2010 - 18:35:31 CST)
  • Oracle Siebel 7.x CRM Cross Site Scripting Vulnerability (Sun Feb 28 2010 - 13:27:12 CST)
  • ARISg5 (Version 5.0) Cross Site Scripting Vulnerability (Fri Feb 26 2010 - 14:38:26 CST)
• lis cker
  • There is a Permanent-type Cross-Site Vulnerability in “Personal Signature” in all version of Discuz!. It can be written by the worm! (Thu Mar 25 2010 - 07:58:56 CDT)
  • "$referer" export lead to the cross-site flaws in all versions of Discuz! (Wed Mar 24 2010 - 04:52:15 CDT)
  • There are lost of xss vul in PHPWind v6.0 ! (Thu Mar 18 2010 - 20:44:01 CDT)
  • [XSS] I found a xss in phpmyadmin 3.3.0 when we create new database in interface! (Fri Mar 12 2010 - 06:43:32 CST)
  • [xss] a xss on "threadid" parameter in BBSMAX (Tue Mar 09 2010 - 19:10:59 CST)
  • [XSS] i found a xss on "page" parameter in "eccredit.php" in Dvbbs < 8.3.0 (Sat Mar 06 2010 - 05:11:35 CST)
  • [xss] a xss on "action" parameter in BBSMAX (Fri Mar 05 2010 - 18:13:45 CST)
  • [xss] a xss on "ThreadID" parameter in BBSXP 2008 from china (Wed Mar 03 2010 - 22:47:56 CST)
  • [xss] i found a Cross Site Scripting Vulnerability about Discuz! 'uid' Parameter (Mon Mar 01 2010 - 18:56:37 CST)
• Lists
  • Apache mod_isapi Dangling Pointer Vulnerability - Security Advisory - SOS-10-002 (Fri Mar 05 2010 - 17:18:00 CST)
• Luka Milkovic
  • Multiple vulnerabilities in SUPERAntiSpyware and Super Ad Blocker (Wed Mar 10 2010 - 15:15:26 CST)
• Lukas Lueg
  • Remote buffer overflow in aircrack-ng causes DOS and possible code execution (Sun Mar 28 2010 - 14:57:02 CDT)
• Maciej Gojny
  • SQL injection vulnerability in wILD CMS (Tue Mar 09 2010 - 09:42:30 CST)
  • SQL injection vulnerability in Natychmiast CMS (Fri Mar 05 2010 - 05:03:05 CST)
• Major Malfunction
  • London DEFCON March meet - DC4420 - Wednesday March 31st 2010 (Mon Mar 29 2010 - 04:47:58 CDT)
• Marc Deslauriers
  • [USN-917-1] Puppet vulnerabilities (Wed Mar 24 2010 - 08:52:23 CDT)
  • [USN-918-1] Samba vulnerability (Wed Mar 24 2010 - 08:53:05 CDT)
  • [USN-915-1] Thunderbird vulnerabilities (Thu Mar 18 2010 - 10:36:26 CDT)
  • [USN-913-1] libpng vulnerabilities (Tue Mar 16 2010 - 12:34:50 CDT)
  • [USN-912-1] Audio File Library vulnerability (Tue Mar 16 2010 - 12:34:23 CDT)
  • [USN-908-1] Apache vulnerabilities (Wed Mar 10 2010 - 13:41:48 CST)
  • [USN-907-1] gnome-screensaver vulnerabilities (Mon Mar 08 2010 - 08:29:55 CST)
  • [USN-906-1] CUPS vulnerabilities (Wed Mar 03 2010 - 14:38:53 CST)
• Marcus Meissner
  • Re: Firefox 3.6 for Windows includes a forged CA cert (Tue Mar 23 2010 - 04:16:06 CDT)
• Martin Barbella
  • Open redirection vulnerability in the Drupal API function drupal_goto (Drupal 6.15 and 5.21) (Thu Mar 04 2010 - 09:06:07 CST)
• Mehdi Mahdjoub - Sysdream IT Security Services
  • Vulnerability Astaro Security Linux v5 (Tue Mar 23 2010 - 03:47:13 CDT)
  • Vulnerability Httpdx v1.5.3b (Fri Mar 19 2010 - 09:48:21 CDT)
  • Vulnerability httpdx v1.5.3 (Mon Mar 15 2010 - 10:28:53 CDT)
• michael.muellerintegralis.com
  • OXID eShop Enterprise: Session Fixation and XSS Vulnerabilities (Tue Mar 30 2010 - 01:13:28 CDT)
  • Multiple Vulnerabilities in EASY Enterprise DMS (Thu Mar 25 2010 - 09:12:35 CDT)
• Michal Zalewski
  • announcing skipfish, an automated web app security scanner (Fri Mar 19 2010 - 12:51:27 CDT)
  • ...because you can't get enough of clickjacking (Sat Mar 13 2010 - 00:28:01 CST)
• Mike Duncan
  • Re: Firefox 3.6 for Windows includes a forged CA cert (Mon Mar 22 2010 - 12:35:28 CDT)
• moridiasporan.net
  • Re: Information disclosure vulnerability in Drupal's Realname User Reference Widget contributed module (version 6.x-1.0) (Sat Feb 27 2010 - 17:34:44 CST)
• Moritz Muehlenhoff
  • [SECURITY] [DSA 2013-1] New egroupware packages fix several vulnerabilities (Thu Mar 11 2010 - 16:30:09 CST)
  • [SECURITY] [DSA 2008-1] New typo3-src packages fix several vulnerabilities (Mon Mar 08 2010 - 17:16:23 CST)
  • [SECURITY] [DSA 2004-1] New samba packages fix several vulnerabilities (Sun Feb 28 2010 - 15:55:00 CST)
• MustLive
  • [Suspected Spam]Vulnerabilities in NoCMS (Wed Mar 31 2010 - 11:09:08 CDT)
  • Vulnerabilities in MiniManager for Project MANGOS (Mon Mar 29 2010 - 13:17:10 CDT)
  • Vulnerabilities in ArcManager (Sun Mar 28 2010 - 11:01:22 CDT)
  • Vulnerabilities in TooFAST (Fri Mar 26 2010 - 09:09:16 CDT)
  • Vulnerabilities in WeBAM (Wed Mar 24 2010 - 16:48:30 CDT)
  • Vulnerabilities in WordPress (Fri Mar 19 2010 - 16:57:16 CDT)
  • Vulnerabilities in CaptchaSecurityImages (Mon Mar 22 2010 - 14:51:24 CDT)
  • Vulnerabilities in VXDate for Joomla (Tue Mar 16 2010 - 16:40:35 CDT)
  • New vulnerabilities in Abton (Fri Mar 12 2010 - 10:59:36 CST)
  • Vulnerability in phpAdsNew, OpenAds and OpenX (Sun Mar 14 2010 - 16:36:43 CDT)
  • Vulnerabilities in Abton (Wed Mar 10 2010 - 15:57:52 CST)
  • Vulnerabilities in Hydra Engine (Tue Mar 09 2010 - 15:54:08 CST)
• Nico Golde
  • [SECURITY] [DSA 2022-1] New mediawiki packages fix several vulnerabilities (Tue Mar 23 2010 - 15:18:40 CDT)
  • [SECURITY] [DSA 2020-1] New ikiwiki packages fix cross-site scripting (Sat Mar 20 2010 - 09:34:35 CDT)
  • [SECURITY] [DSA 2011-1] New dpkg packages fix path traversal (Wed Mar 10 2010 - 14:48:44 CST)
  • [SECURITY] [DSA 2007-1] New cups packages fix arbitrary code execution (Wed Mar 03 2010 - 16:12:23 CST)
• nicolas.grandjeanconix.fr
  • Multiple XSS vulnerabilities in OSSIM 2.2.1 (Wed Mar 31 2010 - 07:16:41 CDT)
• noonenothing.com
  • Re: Re: Todd Miller Sudo local root exploit discovered by Slouching (Thu Mar 04 2010 - 10:11:41 CST)
• NSO Research
  • NSOADV-2010-006: Authentium Command Free Scan ActiveX Control buffer overflow (Thu Mar 04 2010 - 09:32:52 CST)
  • Re: NSOADV-2010-004: McAfee LinuxShield remote/local code execution (Wed Mar 03 2010 - 03:59:57 CST)
  • NSOADV-2010-004: McAfee LinuxShield remote/local code execution (Tue Mar 02 2010 - 15:30:07 CST)
• Paul Craig
  • Skype URI Handler Input Validation (Wed Mar 10 2010 - 16:23:57 CST)
• Paul Makowski
  • Re: Easy FTP Server 1.7.0.2 Remote BoF (Mon Mar 01 2010 - 03:25:25 CST)
• Paulino Calderon
  • Croogo CMS 1.2 Cross Site Scripting Vulnerabilities (Mon Mar 08 2010 - 21:25:04 CST)
• Pierre Noguès
  • BitComet <= 1.19 Remote DOS Exploit (Wed Mar 31 2010 - 07:12:53 CDT)
  • OpenDcHub 0.8.1 Remote Code Execution Exploit (Wed Mar 31 2010 - 07:15:09 CDT)
• rajat swarup
  • CVE-2010-0684: Apache ActiveMQ Persistent Cross-Site Scripting (XSS) Vulnerability (Tue Mar 30 2010 - 12:53:01 CDT)
• Raphael Geissert
  • [SECURITY] [DSA-2018-1] New php5 packages fix null pointer dereference (Thu Mar 18 2010 - 11:38:27 CDT)
• rPath Update Announcements
  • rPSA-2010-0018-1 bind bind-utils caching-nameserver (Mon Mar 15 2010 - 20:21:11 CDT)
  • rPSA-2010-0022-1 sendmail sendmail-cf (Mon Mar 15 2010 - 20:29:50 CDT)
  • rPSA-2010-0013-1 gzip (Sun Mar 07 2010 - 08:02:21 CST)
  • rPSA-2010-0014-1 mysql mysql-bench mysql-server (Sun Mar 07 2010 - 08:13:52 CST)
  • rPSA-2010-0012-1 postgresql postgresql-contrib postgresql-server (Sun Mar 07 2010 - 07:59:24 CST)
  • rPSA-2010-0011-1 gnome-ssh-askpass openssh openssh-client openssh-server (Sun Mar 07 2010 - 07:57:34 CST)
• s2-security
  • CVE-2009-2907: SpringSource Hyperic HQ multiple XSS vulnerabilities (Tue Mar 23 2010 - 15:49:28 CDT)
• Sabahattin Gucukoglu
  • Re: Apple Airport Wireless Products: Promiscuous FTP PORT Allowed in FTP Proxy Provides Security Bypass (Mon Mar 08 2010 - 23:26:01 CST)
  • Apple Airport Wireless Products: Promiscuous FTP PORT Allowed in FTP Proxy Provides Security Bypass (Thu Mar 04 2010 - 11:19:15 CST)
• Salvatore Fresta aka Drosophila
  • Re: Vulnerabilities in WeBAM (Thu Mar 25 2010 - 10:41:06 CDT)
  • MX Simulator Server 2010-02-06 Remote Buffer Overflow PoC (Sat Mar 20 2010 - 15:45:03 CDT)
  • Re: phpinfo() XSS Vulnerability (Mon Mar 08 2010 - 15:29:50 CST)
• Secunia Research
  • Secunia Research: Sun Java JDK/JRE Soundbank Resource Name Buffer Overflow (Wed Mar 31 2010 - 03:59:51 CDT)
  • Secunia Research: Sun Java JDK/JRE Soundbank Resource Parsing Buffer Overflow (Wed Mar 31 2010 - 03:59:05 CDT)
  • Secunia Research: ViewVC Regular Expression Search Cross-Site Scripting (Tue Mar 30 2010 - 06:15:57 CDT)
  • Secunia Research: Pulse CMS Arbitrary File Deletion Vulnerability (Wed Mar 24 2010 - 10:56:53 CDT)
  • Secunia Research: Pulse CMS Arbitrary File Writing Vulnerability (Wed Mar 24 2010 - 10:56:20 CDT)
  • Secunia Research: Pulse CMS login.php Arbitrary File Writing Vulnerability (Wed Mar 24 2010 - 10:57:03 CDT)
  • Secunia Research: Quicksilver Forums "mysqldump" Password Disclosure (Wed Mar 17 2010 - 10:33:39 CDT)
  • Secunia Research: Quicksilver Forums Cross-Site Request Forgery Vulnerability (Wed Mar 17 2010 - 10:33:56 CDT)
  • Secunia Research: Quicksilver Forums Backup Information Disclosure (Wed Mar 17 2010 - 10:33:47 CDT)
  • Secunia Research: XnView DICOM Parsing Integer Overflow Vulnerability (Wed Mar 10 2010 - 10:07:12 CST)
  • Secunia Research: Employee Timeclock Software Backup Information Disclosure (Wed Mar 10 2010 - 07:00:30 CST)
  • Secunia Research: Employee Timeclock Software "mysqldump" Password Disclosure (Wed Mar 10 2010 - 07:00:44 CST)
  • Secunia Research: Employee Timeclock Software SQL Injection Vulnerabilities (Wed Mar 10 2010 - 07:00:38 CST)
• Security
  • [CORELAN-10-015] - Remote Help 0.0.7 Httpd DoS (Format String) (Sat Mar 20 2010 - 15:43:13 CDT)
  • [CORELAN-10-13] - Windisc Local Stack BOF (Tue Mar 16 2010 - 16:32:27 CDT)
  • QuickZip 0day detailed write-up (Mon Mar 15 2010 - 13:24:23 CDT)
• Security Lists NL
  • Juniper SA Series Cross Site Scripting Issue (Fri Mar 05 2010 - 07:41:57 CST)
• security-alerthp.com
  • [security bulletin] HPSBOV02506 SSRT090244 rev.1 - HP Secure Web Server for OpenVMS (based on Apache) CSWS, Remote Denial of Service (DoS), Unauthorized Disclosure of Information, Unauthorized Modification of Information (Tue Mar 30 2010 - 11:43:47 CDT)
  • [security bulletin] HPSBMA02490 SSRT090222 rev.1 - HP SOA Registry Foundation, Remote Unauthorized Access to Data, Cross Site Scripting (XSS), Privilege Escalation (Tue Mar 30 2010 - 08:13:37 CDT)
  • [security bulletin] HPSBUX02514 SSRT100010 rev.1 - HP-UX running AudFilter rules enabled, Local Denial of Service (DoS) (Mon Mar 29 2010 - 17:48:01 CDT)
  • [security bulletin] HPSBMA02513 SSRT090110 rev.1 - Insight Control for Linux (IC-Linux) Remote Execution of Arbitrary Code, Local Unauthorized Elevation of Privilege (Tue Mar 30 2010 - 07:36:48 CDT)
  • [security bulletin] HPSBOV02497 SSRT090245 rev.2 - HP TCP/IP Services for OpenVMS Running NTP, Remote Execution of Arbitrary Code, Denial of Service (DoS) (Fri Mar 26 2010 - 23:12:30 CDT)
  • [security bulletin] HPSBUX02509 SSRT100032 rev.1 - HP-UX Running NFS/ONCplus, NFS Inadvertently Enabled (Thu Mar 25 2010 - 16:01:42 CDT)
  • [security bulletin] HPSBUX02508 SSRT100007 rev.1 - HP-UX Running sendmail with STARTTLS Enabled, Remote Unauthorized Access (Wed Mar 24 2010 - 20:29:56 CDT)
  • [security bulletin] HPSBMA02436 SSRT080064 rev.1 - HP Project and Portfolio Management Center (PPMC), Remote Cross Site Scripting (XSS) (Wed Mar 24 2010 - 18:15:49 CDT)
  • [security bulletin] HPSBGN02511 SSRT100022 rev.2 - HP Small Form Factor or Microtower PC with Broadcom Integrated NIC Firmware, Remote Execution of Arbitrary Code (Tue Mar 16 2010 - 15:56:56 CDT)
  • [security bulletin] HPSBMA02489 SSRT090065 rev.1 - HP Performance Insight , Remote Execution of Arbitrary Commands (Tue Mar 09 2010 - 08:15:06 CST)
• securitymandriva.com
  • [ MDVSA-2010:068 ] php (Sat Mar 27 2010 - 13:30:00 CDT)
  • [ MDVSA-2010:068 ] php (Sat Mar 27 2010 - 10:46:00 CDT)
  • [ MDVSA-2010:068 ] php (Sat Mar 27 2010 - 14:03:00 CDT)
  • [ MDVSA-2010:067 ] kernel (Thu Mar 25 2010 - 20:53:00 CDT)
  • [ MDVSA-2010:066 ] kernel (Wed Mar 24 2010 - 17:16:01 CDT)
  • [ MDVSA-2010:065 ] cpio (Tue Mar 23 2010 - 09:06:00 CDT)
  • [ MDVSA-2010:064 ] libpng (Tue Mar 23 2010 - 07:57:00 CDT)
  • [ MDVSA-2010:063 ] libpng (Mon Mar 22 2010 - 18:21:00 CDT)
  • [ MDVSA-2010:062 ] curl (Fri Mar 19 2010 - 20:20:02 CDT)
  • [ MDVSA-2010:061 ] ncpfs (Thu Mar 11 2010 - 14:05:00 CST)
  • [ MDVSA-2010:060 ] squid (Wed Mar 10 2010 - 16:05:00 CST)
  • [ MDVSA-2010:059 ] virtualbox (Wed Mar 10 2010 - 13:16:01 CST)
  • [ MDVSA-2010:058 ] php (Tue Mar 09 2010 - 13:50:00 CST)
  • [ MDVSA-2010:057 ] apache (Sat Mar 06 2010 - 16:26:01 CST)
  • [ MDVSA-2010:056 ] openoffice.org (Fri Mar 05 2010 - 16:11:00 CST)
  • [ MDVSA-2010:055 ] poppler (Fri Mar 05 2010 - 10:21:01 CST)
  • [ MDVSA-2010:054 ] pam_krb5 (Thu Mar 04 2010 - 10:25:00 CST)
  • [ MDVSA-2010:053 ] apache (Tue Mar 02 2010 - 14:27:01 CST)
  • [ MDVSA-2010:052 ] sudo (Mon Mar 01 2010 - 15:59:01 CST)
  • [ MDVSA-2010:051 ] mozilla-thunderbird (Mon Mar 01 2010 - 11:45:01 CST)
• Stefan Esser
  • REMINDER: Month of PHP Security 2010 - CALL FOR PAPERS - Only 3 weeks left (Sun Mar 21 2010 - 02:44:35 CDT)
  • Month of PHP Security 2010 - CALL FOR PAPERS (Sat Feb 27 2010 - 06:14:05 CST)
• Steffen Joeris
  • [SECURITY] [DSA 2025-1] New icedove packages fix several vulnerabilities (Wed Mar 31 2010 - 03:41:27 CDT)
  • [SECURITY] [DSA 2023-1] New curl packages fix arbitrary code execution (Sat Mar 27 2010 - 21:23:43 CDT)
  • [SECURITY] [DSA 2009-1] New tdiary packages fix cross-site scripting (Tue Mar 09 2010 - 15:57:06 CST)
• Steve Shockley
  • Re: Todd Miller Sudo local root exploit discovered by Slouching (Thu Mar 04 2010 - 18:32:28 CST)
• thomassyscan.org
  • SyScan'10 CFP (Mon Mar 15 2010 - 07:27:23 CDT)
• Tim Brown
  • Re: [Full-disclosure] Medium security hole in Varnish reverse proxy (Mon Mar 29 2010 - 18:04:15 CDT)
  • Medium security hole in Varnish reverse proxy (Mon Mar 29 2010 - 03:07:48 CDT)
• Tom Yu
  • MITKRB5-SA-2010-002 denial of service in SPNEGO [CVE-2010-0628 VU#839413] (Tue Mar 23 2010 - 13:04:41 CDT)
• Trustwave Advisories
  • Trustwave's SpiderLabs Security Advisory TWSL2010-002 (Tue Mar 30 2010 - 19:02:46 CDT)
• Veal, Richard
  • RE: NSOADV-2010-004: McAfee LinuxShield remote/local code execution (Wed Mar 03 2010 - 02:14:31 CST)
• Veg
  • Re: IE 6.0 - Local Crash Exploit (Tue Mar 23 2010 - 14:16:45 CDT)
• villys777gmail.com
  • CVE-2010-0188 Exploit Code (Fri Mar 12 2010 - 17:55:42 CST)
• VMware Security Team
  • VMSA-2010-0005 VMware products address vulnerabilities in WebAccess (Tue Mar 30 2010 - 00:38:46 CDT)
  • VMSA-2010-0004 ESX Service Console and vMA third party updates (Thu Mar 04 2010 - 00:47:03 CST)
• VUPEN Security Research
  • VUPEN Security Research - Apple Safari ColorSync Profile Integer Overflow Vulnerability (Fri Mar 12 2010 - 11:52:35 CST)
  • VUPEN Security Research - Microsoft Office Excel Record Processing Code Execution Vulnerability (Wed Mar 10 2010 - 05:01:40 CST)
• Williams, James K
  • CA20100304-01: Security Notice for CA SiteMinder (Thu Mar 04 2010 - 11:51:28 CST)
• ZDI Disclosures
  • ZDI-10-030: Apple WebKit CSS run-in Attribute Rendering Remote Code Execution Vulnerability (Tue Mar 16 2010 - 11:20:09 CDT)
  • ZDI-10-032: SAP MaxDB Malformed Handshake Request Remote Code Execution Vulnerability (Tue Mar 16 2010 - 11:56:30 CDT)
  • ZDI-10-031: Apple Webkit Blink Event Dangling Pointer Remote Code Execution Vulnerability (Tue Mar 16 2010 - 11:24:05 CDT)
  • ZDI-10-029: Apple WebKit innerHTML element Substitution Remote Code Execution Vulnerability (Mon Mar 15 2010 - 11:51:37 CDT)
  • ZDI-10-027: Skype Protocol Handler datapath Argument Injection Remote Code Execution Vulnerability (Thu Mar 11 2010 - 11:57:30 CST)
  • ZDI-10-028: Skype URI Processing Arbitrary XML File Deletion Vulnerability (Thu Mar 11 2010 - 11:57:26 CST)
  • ZDI-10-026: Hewlett-Packard OVPI helpmanager Servlet Remote Code Execution Vulnerability (Tue Mar 09 2010 - 13:14:22 CST)
  • ZDI-10-025: Microsoft Office Excel XLSX File Parsing Remote Code Execution Vulnerability (Tue Mar 09 2010 - 12:35:07 CST)
  • ZDI-10-024: Novell eDirectory SOAP Request Parsing Denial of Service Vulnerability (Tue Mar 02 2010 - 14:55:23 CST)
  • ZDI-10-023: Multiple Vendor librpc.dll Signedness Error Remote Code Execution Vulnerability (Mon Mar 01 2010 - 16:42:21 CST)
  • ZDI-10-022: IBM Informix librpc.dll Multiple Remote Code Execution Vulnerabilities (Mon Mar 01 2010 - 16:37:28 CST)

Last message date: Wed Mar 31 2010 - 16:04:54 CDT
Archived on: Wed Mar 31 2010 - 16:04:54 CDT

267 messages sorted by: [ date ] [ thread ] [ subject ]