296 messages sorted by: [ date ] [ thread ] [ subject ]

Starting: Mon May 03 2010 - 10:09:18 CDT
Ending: Mon May 31 2010 - 13:54:21 CDT

• abc12345hushmail.com
  • Re: Nginx 0.8.35 Space Character Remote Source Disclosure (Mon May 31 2010 - 10:00:22 CDT)
• admin7b-ly.com
  • clearsite Remote File Include Vulnerability (Thu May 27 2010 - 10:59:41 CDT)
• advisoryhtbridge.ch
  • SQL injection vulnerability in ImpressPages CMS (Fri May 28 2010 - 14:01:24 CDT)
  • SQL injection vulnerability in ImpressPages CMS (Fri May 28 2010 - 14:02:09 CDT)
  • SQL injection vulnerability in ImpressPages CMS (Fri May 28 2010 - 14:01:37 CDT)
  • SQL injection vulnerability in 360 Web Manager (Tue May 25 2010 - 12:48:12 CDT)
  • XSS vulnerability in 360 Web Manager (Tue May 25 2010 - 12:47:51 CDT)
  • SQL injection vulnerability in 360 Web Manager (Tue May 25 2010 - 12:47:45 CDT)
  • XSS vulnerability in RuubikCMS (Tue May 25 2010 - 12:48:30 CDT)
  • XSS vulnerability in GetSimple CMS (Tue May 25 2010 - 12:48:05 CDT)
  • XSS vulnerability in razorCMS (Tue May 25 2010 - 12:47:59 CDT)
  • XSRF (CSRF) in NPDS REvolution (Thu May 20 2010 - 13:17:29 CDT)
  • SQL injection vulnerability in LiSK CMS (Thu May 20 2010 - 13:17:23 CDT)
  • SQL injection vulnerability in LiSK CMS (Thu May 20 2010 - 13:17:17 CDT)
  • XSS vulnerability in gpEasy CMS (Thu May 20 2010 - 13:16:40 CDT)
  • XSS vulnerability in LiSK CMS (Thu May 20 2010 - 13:17:41 CDT)
  • XSRF (CSRF) in ocPortal (Thu May 20 2010 - 13:16:31 CDT)
  • XSS vulnerability in LiSK CMS (Thu May 20 2010 - 13:03:47 CDT)
  • Stored XSS vulnerability in NPDS REvolution (Tue May 18 2010 - 07:27:28 CDT)
  • XSS vulnerability in NPDS REvolution (Tue May 18 2010 - 07:26:36 CDT)
  • XSS vulnerability in JComments, Joomla (Tue May 18 2010 - 07:26:53 CDT)
  • Blind SQL injection vulnerability in NPDS REvolution (Thu May 13 2010 - 11:40:33 CDT)
  • XSS vulnerability in NPDS (Thu May 13 2010 - 11:40:44 CDT)
  • XSS in DynamiXgate Affiliate Store Builder (Tue May 11 2010 - 08:01:28 CDT)
  • XSS in Saurus CMS (Tue May 11 2010 - 08:02:02 CDT)
  • XSS vulnerability in Advanced Poll (Mon May 10 2010 - 02:55:56 CDT)
  • XSS vulnerability in EasyPublish CMS (Mon May 10 2010 - 02:55:54 CDT)
  • XSS vulnerability in Jaws (Fri May 07 2010 - 03:05:53 CDT)
  • XSS in eliteCMS (Tue May 04 2010 - 07:41:37 CDT)
  • XSS in ecoCMS (Tue May 04 2010 - 07:41:30 CDT)
  • XSS in Acuity CMS (Tue May 04 2010 - 07:41:51 CDT)
  • XSRF (CSRF) in eliteCMS (Tue May 04 2010 - 07:41:44 CDT)
  • XSRF (CSRF) in Zikula Application Framework (Tue May 04 2010 - 07:41:18 CDT)
• Albert Levi
  • CfP: GameSec 2010 - 5 days left to the deadline (Wed May 26 2010 - 03:35:28 CDT)
  • CfP: GameSec 2010 - Deadline extended to 31 May 2010 (Fri May 14 2010 - 06:31:16 CDT)
• Alexis Tremblay
  • Vulnerability with Cisco ACE. A2 3.0 (probably all version) (Thu May 06 2010 - 16:28:43 CDT)
• angelorosiello.org
  • New web malwares attacking big hosting providers (Thu May 06 2010 - 13:49:19 CDT)
• Bkis
  • [Bkis-01-2010] Multiple Vulnerabilities in BigAce - Bkis (Sun May 23 2010 - 01:10:08 CDT)
  • [Bkis-01-2010] Multiple Vulnerabilities in BigAce - Bkis (Sat May 22 2010 - 05:27:02 CDT)
• Casper.DikSun.COM
  • Re: Sun Solaris 10 filesystem rm(1),find(1),etc, Denial-of-service (Wed May 26 2010 - 01:03:41 CDT)
• Christopher Schramm
  • SQL injection in OSCommerce Add-On Visitor Web Stats (Fri May 28 2010 - 02:12:10 CDT)
• Cisco Systems Product Security Incident Response Team
  • Cisco Security Advisory: Multiple Vulnerabilities in Cisco Network Building Mediator (Wed May 26 2010 - 11:30:00 CDT)
  • Cisco Security Advisory: Multiple vulnerabilities in Cisco PGW Softswitch (Wed May 12 2010 - 10:35:00 CDT)
• Code Audit Labs
  • [CAL-20100204-3]Adobe Shockwave Player Director File Parsing RCSL Pointer Overwrite (Tue May 11 2010 - 20:40:38 CDT)
  • [CAL-20100204-2]Adobe Shockwave Player Director File Parsing integer overflow vulnerability (Tue May 11 2010 - 20:39:33 CDT)
  • [CAL-20100204-1]Adobe Shockwave Player Director File Parsing ATOM size infinite loop vulnerability (Tue May 11 2010 - 20:37:49 CDT)
• Core Security Technologies Advisories
  • Re: [CORE-2010-0405] Adobe Director Invalid Read (Thu May 13 2010 - 15:49:32 CDT)
  • [CORE-2010-0427] Windows SMTP Service DNS query Id vulnerabilities (Tue May 04 2010 - 17:11:04 CDT)
• Core Security Technologies Advisories Team
  • [CORE-2010-0405] Adobe Director Invalid Read (Tue May 11 2010 - 14:57:23 CDT)
  • [CORE-2010-0428] Microsoft Office Visio DXF File Insertion Buffer Overflow (Tue May 04 2010 - 13:54:05 CDT)
• Cristofaro Mune
  • IS-2010-001 - Netgear WG602v4 Saved Pass Stack Overflow (Sun May 30 2010 - 14:27:42 CDT)
• cxibsecurityreason.com
  • Sun Solaris 10 ftpd Cross-site request forgery (Fri May 21 2010 - 02:59:29 CDT)
  • Sun Solaris 10 filesystem rm(1),find(1),etc, Denial-of-service (Fri May 21 2010 - 02:59:36 CDT)
  • Sun Solaris 10 libc/*convert (*cvt) buffer overflow (Fri May 21 2010 - 02:59:54 CDT)
• Dan Rosenberg
  • Scientific Atlanta DPC2100 WebSTAR Cable Modem vulnerabilities (Mon May 24 2010 - 12:31:24 CDT)
  • Multiple memory corruption vulnerabilities in Ghostscript (Tue May 11 2010 - 19:27:35 CDT)
• daniel lopez
  • A vulnerability in Kaspersky Antivirus (Sat May 01 2010 - 10:47:48 CDT)
• Daniele Bianco
  • [oCERT-2010-001] multiple http client unexpected download filename vulnerability (Mon May 17 2010 - 07:03:22 CDT)
• dann frazier
  • [SECURITY] [DSA 2053-1] New Linux 2.6.26 packages fix several issues (Tue May 25 2010 - 01:51:38 CDT)
• David Guimaraes
  • SQL injection vulnerability in Zabbix <= 1.8.1 (Mon May 24 2010 - 12:48:07 CDT)
• David Mirza Ahmad
  • REC0N 2010 (MONTREAL) CFP Reminder & Preview (Tue May 04 2010 - 16:16:04 CDT)
• Davide Canali
  • Re: New web malwares attacking big hosting providers (Fri May 07 2010 - 01:00:19 CDT)
• developpeurnpds.org
  • Re: XSS vulnerability in NPDS (Tue May 18 2010 - 09:15:37 CDT)
• Devin Carraway
  • [SECURITY] [DSA 2043-1] New vlc packages fix arbitrary code execution (Tue May 11 2010 - 02:55:34 CDT)
  • [SECURITY] [DSA 2044-1] New mplayer packages fix arbitrary code execution (Tue May 11 2010 - 03:10:06 CDT)
• dmsecurityfocus.com
  • Re: Administrivia: Real domain names in PoC/exploit examples (Fri May 28 2010 - 11:10:55 CDT)
  • Administrivia: Real domain names in PoC/exploit examples (Fri May 28 2010 - 09:29:56 CDT)
• donald00live.com
  • Re: RE: Puntal (index.php) Remote File Inclusion Vulnerabilities (Mon May 03 2010 - 19:09:44 CDT)
• Dragos Ruiu
  • EUSecWest 2010 MiniCFP (conf Jun 16/17) and PacSec 2010 CFP (conf Nov 10/11, deadline July 30) (Thu May 27 2010 - 08:29:54 CDT)
• eidelweisscyberservices.com
  • JV2 Folder Gallery 3.1.1 (popup_slideshow.php) Multiple Vulnerability (Sun May 23 2010 - 04:45:45 CDT)
  • Hustoj is HUST ACM OnlineJudge "fckeditor" file upload security issue (Sat May 22 2010 - 08:15:52 CDT)
  • CompleteFTP Server v 4.x "PORT" command Remote DOS exploit (Sun May 23 2010 - 22:40:58 CDT)
  • Joomla Component advertising (com_aardvertiser) File Inclusion Vulnerability (Thu May 13 2010 - 10:59:28 CDT)
  • PolyPager 1.0rc10 (fckeditor) File Upload Security Issue (Wed May 12 2010 - 14:02:33 CDT)
  • 29o3 CMS (LibDir) Multiple Remote File Inclusion Vulnerability (Mon May 10 2010 - 23:47:36 CDT)
  • REZERVI (root) Remote Command Execution Vulnerability (Thu May 06 2010 - 19:10:44 CDT)
  • Knowledgeroot (fckeditor) Remote Arbitrary File Upload Exploit (Tue May 04 2010 - 18:59:33 CDT)
  • Puntal (index.php) Remote File Inclusion Vulnerabilities (Mon May 03 2010 - 13:10:25 CDT)
• ekoparty Security Conference
  • CFP for ekoparty 0x10 is now open! [ Buenos Aires, Argentina ] (Tue May 11 2010 - 16:06:33 CDT)
• Eren Türkay
  • Re: [Full-disclosure] Month of PHP Security - Summary - 1st May - 10th May (Tue May 11 2010 - 03:55:24 CDT)
• Francis Provencher
  • {PRL} Microsoft Windows Outlook Express and Windows Mail Integer Overflow (Tue May 11 2010 - 07:54:56 CDT)
• Frank Habermann
  • Re: Knowledgeroot (fckeditor) Remote Arbitrary File Upload Exploit (Wed May 05 2010 - 14:28:01 CDT)
• FreeBSD Security Advisories
  • FreeBSD Security Advisory FreeBSD-SA-10:06.nfsclient (Wed May 26 2010 - 22:25:11 CDT)
  • FreeBSD Security Advisory FreeBSD-SA-10:05.opie (Wed May 26 2010 - 22:25:07 CDT)
  • FreeBSD Security Advisory FreeBSD-SA-10:04.jail (Wed May 26 2010 - 22:25:04 CDT)
• g1xsystemwindowslive.com
  • GR Board v1.8.6. (theme) Local File Inclusion Vulnerability (Mon May 31 2010 - 12:12:38 CDT)
  • GR Board v1.8.6.1 stab (page.php?theme) Remote File Inclusion Vulnerability (Sun May 30 2010 - 00:34:58 CDT)
  • Groone's Simple Contact Form (abspath) Remote File Inclusion Vulnerability (Fri May 28 2010 - 14:31:09 CDT)
  • Flock web browser v2.5.6 (Remote Memory Corrupt) Crash Exploit (Tue May 25 2010 - 16:20:27 CDT)
• geinbluesgmail.com
  • Firefox 3.6.3 (latest) <= memory exhaustion crash vulnerabilities (Tue May 18 2010 - 10:26:05 CDT)
• Giuseppe Iuculano
  • [SECURITY] [DSA-2046-1] New phpgroupware packages fix several vulnerabilities (Thu May 13 2010 - 15:14:54 CDT)
• Guillermo Marro Bruno
  • RE: STP mitm attack idea (Thu May 20 2010 - 08:50:01 CDT)
• Hafez Kamal
  • [HITB-Announce] HITBSecConf2010 - Malaysia Call for Papers (Wed May 19 2010 - 21:40:16 CDT)
• Hanno Böck
  • CMS Made Simple: backend cross site scripting (XSS), CVE-2010-1482 (Fri May 07 2010 - 07:42:16 CDT)
  • pmwiki: persistent cross site scripting (XSS), CVE-2010-1481 (Fri May 07 2010 - 07:30:09 CDT)
• HD Moore
  • Metasploit Framework 3.4.0 Released (Tue May 18 2010 - 17:03:28 CDT)
• iDefense Labs
  • iDefense Security Advisory 05.11.10: Abobe Shockwave Player Heap Memory Indexing Vulnerability (Tue May 11 2010 - 22:47:35 CDT)
• infosecuritylab.ir
  • Nginx 0.8.35 Space Character Remote Source Disclosure (Sun May 30 2010 - 16:44:17 CDT)
  • Re: Microsoft Outlook Web Access (OWA) v8.2.254.0 "id" parameter Information Disclosure Vulnerability (Tue May 25 2010 - 06:35:02 CDT)
  • Smart Douran CMS Remote File Download (Wed May 19 2010 - 02:23:42 CDT)
• Jab³oñski, Pawe³
  • Re: Microsoft Outlook Web Access (OWA) v8.2.254.0 "id" parameter Information Disclosure Vulnerability (Fri May 21 2010 - 16:56:53 CDT)
• Jamie Strandboge
  • [USN-945-1] ClamAV vulnerabilities (Thu May 27 2010 - 16:32:55 CDT)
  • [USN-942-1] PostgreSQL vulnerabilities (Fri May 21 2010 - 12:15:46 CDT)
  • [USN-938-1] KDENetwork vulnerability (Thu May 13 2010 - 08:15:24 CDT)
• jeromiecomsecinc.com
  • Palo Alto Network Vulnerability - Cross-Site Scripting (XSS) (Wed May 12 2010 - 11:34:26 CDT)
• jerzy.patraszewskigmail.com
  • Joomla component SimpleDownload Local File Inclusion (Mon May 17 2010 - 02:54:05 CDT)
• John Smith
  • Re: Re[4]: DoS vulnerabilities in Firefox, Internet Explorer, Chrome, Opera and other browsers (Fri May 28 2010 - 16:27:35 CDT)
  • Re: Re[2]: DoS vulnerabilities in Firefox, Internet Explorer, Chrome, Opera and other browsers (Fri May 28 2010 - 14:55:28 CDT)
  • Re: DoS vulnerabilities in Firefox, Internet Explorer, Chrome, Opera and other browsers (Fri May 28 2010 - 10:07:50 CDT)
• Justin C. Klein Keane
  • Re: Puntal (index.php) Remote File Inclusion Vulnerabilities (Tue May 04 2010 - 12:15:59 CDT)
• Kees Cook
  • [Suspected Spam][USN-944-1] GNU C Library vulnerabilities (Tue May 25 2010 - 16:38:33 CDT)
  • [Suspected Spam][USN-940-1] Kerberos vulnerabilities (Wed May 19 2010 - 14:45:28 CDT)
  • [Suspected Spam][USN-939-1] X.org vulnerabilities (Tue May 18 2010 - 16:35:48 CDT)
  • [USN-919-1] Emacs vulnerability (Mon Mar 29 2010 - 16:58:46 CDT)
• Konrad Rieck
  • Call for Papers: EC2ND 2010 (Sat May 15 2010 - 06:33:56 CDT)
• Krzysztof Å»elechowski
  • Re: Ghostscript 8.64 executes random code at startup (Wed May 26 2010 - 04:12:22 CDT)
• L4teral
  • Linux Mint 8 mintUpdate Insecure Temporary File Creation (Wed May 19 2010 - 15:07:25 CDT)
• lilf
  • BaoFeng Storm M3U File Processing Buffer Overflow Vulnerability (Wed May 05 2010 - 22:27:50 CDT)
• lis cker
  • Injection of ECShop apps. (Fri May 07 2010 - 01:35:40 CDT)
• Luciano Bello
  • [SECURITY] [DSA 2042-1] New iscsitarget packages fix arbitrary code execution (Wed May 05 2010 - 16:16:13 CDT)
• ma+btdt.e-technik.uni-dortmund.de
  • fetchmail security announcement fetchmail-SA-2010-02 (CVE-2010-1167) (Thu May 06 2010 - 03:36:48 CDT)
• Maciej Gojny
  • XSS, SQL injection vulnerability in I-Vision CMS (Sun May 16 2010 - 16:46:17 CDT)
  • SmartCMS v.2 SQL injection vulnerability (Tue May 04 2010 - 16:59:41 CDT)
• Major Malfunction
  • London DEFCON May meet - DC4420 - Wed 26th May 2010 (Tue May 25 2010 - 04:13:03 CDT)
• Marc Deslauriers
  • [USN-941-1] MoinMoin vulnerability (Thu May 20 2010 - 08:30:00 CDT)
  • [USN-937-1] TeX Live vulnerabilities (Thu May 06 2010 - 08:35:17 CDT)
  • [USN-936-1] dvipng vulnerability (Thu May 06 2010 - 08:34:35 CDT)
• md.r00t.defacergmail.com
  • LinksAutomation Multiple Remote Vulnerabilities (Thu May 13 2010 - 14:18:29 CDT)
  • Turnkey Innovations SQL Injection Vulnerability (Mon May 10 2010 - 09:04:04 CDT)
• Michael Santos
  • PCRE compile workspace overflow (Wed May 05 2010 - 14:12:26 CDT)
• michael.messnerintegralis.com
  • Webby Webserver v1.01 - Buffer overflow vulnerability with overwritten structured exception handler (SEH) (Tue May 25 2010 - 02:57:52 CDT)
• mikesitewat.ch
  • phpvidz Administrative Password Disclosure (Sun May 16 2010 - 02:28:49 CDT)
• Moritz Muehlenhoff
  • [SECURITY] [DSA 2051-1] New postgresql-8.3 packages fix several vulnerabilities (Mon May 24 2010 - 11:00:11 CDT)
  • [SECURITY] [DSA 2050-1] New kdegraphics packages fix several vulnerabilities (Mon May 24 2010 - 10:38:34 CDT)
• MustLive
  • Re: DoS vulnerabilities in Firefox, Internet Explorer, Chrome and Opera (Mon May 31 2010 - 11:03:37 CDT)
  • [Suspected Spam]Vulnerability in ArtDesign CMS (Sat May 29 2010 - 06:12:05 CDT)
  • [Suspected Spam]DoS vulnerabilities in Firefox, Internet Explorer, Chrome and Opera (Fri May 28 2010 - 07:57:48 CDT)
  • Re: DoS vulnerabilities in Firefox, Internet Explorer, Chrome, Opera and other browsers (Thu May 27 2010 - 15:53:37 CDT)
  • New vulnerabilities in plugin DS-Syndicate for Joomla (Sun May 23 2010 - 17:17:17 CDT)
  • Vulnerabilities in DS-Syndicate for Joomla (Sat May 22 2010 - 10:07:17 CDT)
  • Vulnerability in widget Flash Tag Cloud for Blogsa and other ASP.NET engines (Thu May 20 2010 - 13:12:02 CDT)
  • Re: DoS vulnerabilities in Firefox, Internet Explorer, Chrome, Opera and other browsers (Wed May 19 2010 - 17:53:05 CDT)
  • DoS vulnerabilities in Firefox, Internet Explorer, Chrome, Opera and other browsers (Tue May 18 2010 - 08:17:50 CDT)
  • Re: Vulnerability in 3D user cloud for Joomla (Mon May 17 2010 - 15:48:35 CDT)
  • Vulnerability in 3D user cloud for Joomla (Sat May 15 2010 - 15:58:59 CDT)
  • Vulnerability in tagcloud for Kasseler CMS (Thu May 13 2010 - 15:54:21 CDT)
  • Vulnerability in widget Cumulus for BlogEngine.NET (Tue May 11 2010 - 15:18:04 CDT)
  • Re: Vulnerabilities in Sebo - webstore (Mon May 10 2010 - 18:47:21 CDT)
  • Vulnerabilities in Sebo - webstore (Sat May 08 2010 - 12:21:09 CDT)
  • Vulnerabilities in t3m_cumulus_tagcloud for TYPO3 (Tue May 04 2010 - 18:28:07 CDT)
  • Cross-Site Scripting vulnerability in Mango (Sat May 01 2010 - 19:04:59 CDT)
• Nate Eldredge
  • Re: Administrivia: Real domain names in PoC/exploit examples (Fri May 28 2010 - 10:38:57 CDT)
• ne01026stegny.2a.pl
  • Ghostscript 8.64 executes random code at startup (Sat May 22 2010 - 04:38:56 CDT)
• noloadergmail.com
  • Re: KHOBE - 8.0 earthquake for Windows desktop security software (Thu May 06 2010 - 19:52:01 CDT)
• Packet Storm
  • Re: SQL injection vulnerability in 360 Web Manager (Wed May 26 2010 - 18:32:43 CDT)
• Patroklos Argyroudis
  • CVE-2010-2020: FreeBSD kernel NFS client local vulnerabilities (Fri May 28 2010 - 09:43:20 CDT)
• paul.szabosydney.edu.au
  • Re: Ghostscript 8.64 executes random code at startup (Sun May 30 2010 - 05:49:41 CDT)
  • Re: Ghostscript 8.64 executes random code at startup (Fri May 28 2010 - 08:42:34 CDT)
  • Re: Ghostscript 8.64 executes random code at startup (Wed May 26 2010 - 19:51:30 CDT)
  • Re: Ghostscript 8.64 executes random code at startup (Wed May 26 2010 - 06:15:15 CDT)
  • Re: Ghostscript 8.64 executes random code at startup (Tue May 25 2010 - 21:32:51 CDT)
  • Mathematica on Linux /tmp/MathLink vulnerability (Thu May 13 2010 - 20:56:10 CDT)
• Pete Herzog
  • OSSTMM 3 STAR Released! (Mon May 24 2010 - 13:47:02 CDT)
  • OSSTMM 3 based Home Security Vacation Guide v.2! (Thu May 20 2010 - 13:35:37 CDT)
  • Mastering Trust in Security Assessments (Thu May 20 2010 - 13:17:40 CDT)
  • Re: The New ISO Hacking Standard (Thu May 20 2010 - 15:59:49 CDT)
  • The New ISO Hacking Standard (Wed May 19 2010 - 08:14:13 CDT)
  • Security Awareness for kids (Tue May 18 2010 - 07:41:43 CDT)
• praveen_reckersify.com
  • Denial of Dervice vulnerability in Helix Mobile Server (RealNetworks) (14.0.0.348) with long string to PluginDirectory in rmserver.cfg file (Mon May 24 2010 - 07:00:50 CDT)
  • Microsoft Outlook Web Access (OWA) v8.2.254.0 "id" parameter Information Disclosure Vulnerability (Thu May 20 2010 - 16:34:14 CDT)
• Raphael Geissert
  • [SECURITY] [DSA-2041-1] New mediawiki packages fix cross-site request forgery (Mon May 03 2010 - 19:25:46 CDT)
• research
  • PR10-03: Authenticated Cross-Site Scripting (XSS) within the Apache Axis2 administration console (Fri May 21 2010 - 11:08:49 CDT)
  • Multiple vulnerabilities within 3Com* iMC (Intelligent Management Center) (Thu May 20 2010 - 12:11:37 CDT)
• Rodrigo Branco
  • HP-UX, IBM AIX, SGI IRIX Remote Vulnerability - CVE-2010-1039 (Thu May 20 2010 - 17:55:03 CDT)
• rPath Update Announcements
  • rPSA-2010-0039-1 openssl openssl-scripts (Sun May 23 2010 - 17:50:27 CDT)
  • rPSA-2010-0037-1 kernel (Fri May 07 2010 - 12:59:41 CDT)
  • rPSA-2010-0036-1 openssl openssl-scripts (Fri May 07 2010 - 12:58:58 CDT)
  • rPSA-2010-0034-1 ntp ntp-utils (Fri May 07 2010 - 12:54:32 CDT)
• s2-security
  • CVE-2010-1454: SpringSource tc Server unauthenticated remote access to JMX interface (Mon May 17 2010 - 11:14:15 CDT)
• Salvatore Fresta aka Drosophila
  • Re: Vulnerabilities in Sebo - webstore (Mon May 10 2010 - 14:13:34 CDT)
  • Re: Vulnerabilities in Sebo - webstore (Tue May 11 2010 - 03:17:55 CDT)
  • Family Connections 2.2.3 Multiple Remote Vulnerabilities (Mon May 10 2010 - 07:37:27 CDT)
• Sebastien Delafond
  • [SECURITY] [DSA 2052-1] New krb5 packages fix denial of service (Mon May 24 2010 - 14:48:30 CDT)
  • [SECURITY] [DSA 2048-1] New dvipng packages fix arbitrary code execution (Sun May 23 2010 - 12:46:17 CDT)
  • [SECURITY] [DSA 2045-1] New libtheora packages fix arbitrary code execution (Tue May 11 2010 - 14:33:02 CDT)
  • [SECURITY] [DSA 2040-1] New squidguard packages fix several vulnerabilities (Sun May 02 2010 - 07:56:52 CDT)
• Secunia Research
  • Secunia Research: Ziproxy Two Integer Overflow Vulnerabilities (Mon May 24 2010 - 05:44:34 CDT)
  • Secunia Research: Orbit Downloader metalink "name" Directory Traversal (Wed May 19 2010 - 10:33:33 CDT)
  • Secunia Research: Free Download Manager Four Buffer Overflow Vulnerabilities (Thu May 13 2010 - 08:19:12 CDT)
  • Secunia Research: Free Download Manager metalink "name" Directory Traversal (Thu May 13 2010 - 08:19:19 CDT)
  • Secunia Research: KDE KGet metalink "name" Directory Traversal Vulnerability (Thu May 13 2010 - 08:19:03 CDT)
  • Secunia Research: aria2 metalink "name" Directory Traversal Vulnerability (Thu May 13 2010 - 08:25:32 CDT)
  • Secunia Research: KDE KGet Insecure File Operation Vulnerability (Thu May 13 2010 - 08:18:55 CDT)
  • Secunia Research: IrfanView PSD RLE Decompression Buffer Overflow (Wed May 12 2010 - 09:28:21 CDT)
  • Secunia Research: IrfanView PSD Image Parsing Sign-Extension Vulnerability (Wed May 12 2010 - 09:27:50 CDT)
  • Secunia Research: TomatoCMS "q" SQL Injection Vulnerability (Wed May 12 2010 - 09:23:17 CDT)
  • Secunia Research: TomatoCMS Script Insertion Vulnerabilities (Wed May 12 2010 - 09:23:10 CDT)
  • Secunia Research: Adobe Shockwave Player Font Processing Buffer Overflow (Wed May 12 2010 - 06:55:27 CDT)
  • Secunia Research: Adobe Shockwave Player Asset Entry Parsing Vulnerability (Wed May 12 2010 - 06:55:21 CDT)
  • Secunia Research: Adobe Shockwave Player Integer Overflow Vulnerability (Wed May 12 2010 - 06:55:13 CDT)
  • Secunia Research: Adobe Shockwave Player Array Indexing Vulnerability (Wed May 12 2010 - 03:29:12 CDT)
  • Secunia Research: Adobe Shockwave Player Signedness Error Vulnerability (Wed May 12 2010 - 03:28:54 CDT)
  • Secunia Research: Adobe Shockwave Player 3D Parsing Memory Corruption (Wed May 12 2010 - 03:28:38 CDT)
• security curmudgeon
  • Re: IBM Lotus 6.x names.nsf Cross Site Scripting Vulnerability (Mon May 24 2010 - 13:44:45 CDT)
• security-alerthp.com
  • [security bulletin] HPSBUX02523 SSRT100036 rev.2 - HP-UX Running ONCplus rpc.pcnfsd, Remote Denial of Service (DoS), Increase in Privilege (Fri May 28 2010 - 15:58:45 CDT)
  • [security bulletin] HPSBMA02442 SSRT090108 rev.1 - HP Business Availability Center Running Apache, Remote Cross Site Scripting (XSS), Cross Site Request Forgery (CSRF), Denial of Service (DoS) (Wed May 26 2010 - 08:25:50 CDT)
  • [security bulletin] HPSBGN02315 SSRT071487 rev.1 - HP TestDirector for Quality Center running on AIX, Linux and Solaris, Remote Unauthorized Access (Wed May 26 2010 - 08:25:09 CDT)
  • [security bulletin] HPSBUX02523 SSRT100036 rev.1 - HP-UX Running ONCPlus, Remote Denial of Service (DoS), Increase in Privilege (Tue May 18 2010 - 16:54:30 CDT)
  • [security bulletin] HPSBMA02535 SSRT100029 rev.1 - HP Performance Manager, Remote Unauthorized Access, Cross Site Scripting (XSS), Denial of Service (DoS) (Tue May 18 2010 - 11:19:48 CDT)
  • [security bulletin] HPSBOV02497 SSRT090245 rev.3 - HP TCP/IP Services for OpenVMS Running NTP, Remote Execution of Arbitrary Code, Denial of Service (DoS) (Mon May 17 2010 - 16:08:33 CDT)
  • [security bulletin] HPSBGN02511 SSRT100022 rev.3 - Certain HP Small Form Factor, Microtower and Workstations PC's with Broadcom Integrated NIC Firmware, Remote Execution of Arbitrary Code (Tue May 18 2010 - 08:15:18 CDT)
  • [security bulletin] HPSBMA02534 SSRT090180 rev.1 - HP System Management Homepage (SMH) for Linux and Windows, Remote Unauthorized Information Disclosure, Unauthorized Data Modification, Denial of Service (DoS) (Tue May 18 2010 - 06:33:48 CDT)
  • [security bulletin] HPSBPI02532 SSRT100111 rev.1 - HP MFP Digital Sending Software Running on Windows, Local Unauthorized Access (Thu May 13 2010 - 09:04:18 CDT)
  • [security bulletin] HPSBMA02522 SSRT100086 rev.1 - HP Insight Control Server Migration for Windows, Remote Cross Site Scripting (XSS) (Wed May 12 2010 - 09:18:38 CDT)
  • [security bulletin] HPSBMA02520 SSRT100071 rev.1 - HP Systems Insight Manager (SIM) for HP-UX, Linux, and Windows, Remote Unauthorized Access to Data (Wed May 12 2010 - 09:18:16 CDT)
  • [security bulletin] HPSBMA02527 SSRT010098 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code (Tue May 11 2010 - 13:13:09 CDT)
  • [security bulletin] HPSBMA02528 SSRT100106 rev.1 - HP Performance Center Agent on Windows, Remote Unauthenticated Arbitrary Code Execution (Mon May 10 2010 - 16:28:41 CDT)
  • [security bulletin] HPSBMA02201 SSRT071328 rev.1 - HP LoadRunner Agent on Windows, Remote Unauthenticated Arbitrary Code Execution (Thu May 06 2010 - 09:22:11 CDT)
  • [security bulletin] HPSBMA02483 SSRT090257 rev.3 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code (Wed May 05 2010 - 08:27:46 CDT)
  • [security bulletin] HPSBMA02400 SSRT080144 rev.4 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code (Wed May 05 2010 - 08:28:34 CDT)
  • [security bulletin] HPSBMA02416 SSRT090008 rev.5 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code (Wed May 05 2010 - 08:28:18 CDT)
• securitymandriva.com
  • [ MDVSA-2010:109 ] gtk+2.0 (Thu May 27 2010 - 10:28:00 CDT)
  • [ MDVSA-2010:110 ] clamav (Thu May 27 2010 - 11:44:00 CDT)
  • [ MDVSA-2010:108 ] kolab-horde-framework (Wed May 26 2010 - 09:53:01 CDT)
  • [ MDVSA-2010:108 ] kolab-horde-framework (Wed May 26 2010 - 10:22:00 CDT)
  • [ MDVSA-2010:108 ] kolab-horde-framework (Wed May 26 2010 - 10:03:00 CDT)
  • [ MDVSA-2010:107 ] mysql (Tue May 25 2010 - 16:28:01 CDT)
  • [ MDVSA-2010:106 ] aria2 (Mon May 24 2010 - 12:12:01 CDT)
  • [ MDVSA-2010:105 ] openoffice.org (Fri May 21 2010 - 16:27:01 CDT)
  • [ MDVSA-2010:103 ] postgresql (Thu May 20 2010 - 16:39:00 CDT)
  • [ MDVSA-2010:104 ] dovecot (Fri May 21 2010 - 08:39:00 CDT)
  • [ MDVSA-2010:082-1 ] clamav (Thu May 20 2010 - 09:05:01 CDT)
  • [ MDVSA-2010:102 ] ghostscript (Wed May 19 2010 - 15:34:00 CDT)
  • [ MDVSA-2010:101 ] mysql (Wed May 19 2010 - 11:24:00 CDT)
  • [ MDVSA-2010:100 ] krb5 (Wed May 19 2010 - 10:28:01 CDT)
  • [ MDVSA-2010:098 ] kdenetwork4 (Tue May 18 2010 - 11:29:00 CDT)
  • [ MDVSA-2010:099 ] wireshark (Tue May 18 2010 - 14:04:00 CDT)
  • [ MDVSA-2010:097 ] pidgin (Tue May 18 2010 - 09:07:01 CDT)
  • [ MDVSA-2010:096 ] tetex (Mon May 17 2010 - 11:21:01 CDT)
  • [ MDVSA-2010:095 ] libxext (Wed May 12 2010 - 19:13:01 CDT)
  • [ MDVSA-2010:094 ] tetex (Wed May 12 2010 - 12:49:01 CDT)
  • [ MDVSA-2010:090-1 ] samba (Mon May 10 2010 - 18:08:00 CDT)
  • [ MDVSA-2010:093 ] mysql (Fri May 07 2010 - 13:06:00 CDT)
  • [ MDVSA-2010:092 ] cacti (Thu May 06 2010 - 16:09:01 CDT)
  • [ MDVSA-2010:091 ] openoffice.org (Tue May 04 2010 - 16:54:01 CDT)
  • [ MDVSA-2010:090 ] samba (Tue May 04 2010 - 06:35:00 CDT)
  • [ MDVSA-2010:089 ] gnutls (Mon May 03 2010 - 13:48:01 CDT)
• Security_Alertemc.com
  • ESA-2010-007: EMC Avamar Denial Of Service Vulnerability (Wed May 26 2010 - 09:18:49 CDT)
• sh4vn3t-datagrams.net
  • XSS bug in US Robotics firmware USR5463-v0_06.bin (Thu May 20 2010 - 10:24:07 CDT)
• Simon Kilvington
  • Re: The New ISO Hacking Standard (Thu May 20 2010 - 04:34:13 CDT)
• Stefan Esser
  • Month of PHP Security - Summary - 11st May - 21th (Fri May 21 2010 - 04:30:28 CDT)
  • Month of PHP Security - Summary - 1st May - 10th May (Mon May 10 2010 - 14:05:16 CDT)
• Steffen Joeris
  • [SECURITY] [DSA 2049-1] New barnowl packages fix arbitrary code execution (Sat May 22 2010 - 21:58:12 CDT)
• subsitguard.info
  • Cross Site URL Hijacking by using Error Object in Mozilla Firefox (Thu May 27 2010 - 05:22:23 CDT)
• Susan Bradley
  • Re: [Suspected Spam]DoS vulnerabilities in Firefox, Internet Explorer, Chrome and Opera (Fri May 28 2010 - 11:06:23 CDT)
  • Re: DoS vulnerabilities in Firefox, Internet Explorer, Chrome, Opera and other browsers (Wed May 19 2010 - 18:58:43 CDT)
  • Re: DoS vulnerabilities in Firefox, Internet Explorer, Chrome, Opera and other browsers (Tue May 18 2010 - 12:38:47 CDT)
• The Dark Tangent
  • DEF CON 18 CFP closing in two weeks (Fri May 14 2010 - 17:37:03 CDT)
• Thijs Kinkhorst
  • [SECURITY] [DSA 2052-1] New krb5 packages fix denial of service (Mon May 24 2010 - 14:49:50 CDT)
  • [SECURITY] [DSA 2038-2] New pidgin packages fix regression (Mon May 17 2010 - 15:37:56 CDT)
  • [SECURITY] [DSA 2047-1] New aria2 packages fix directory traversal (Mon May 17 2010 - 13:28:36 CDT)
• Tim Starling
  • Arbitrary UNC file read in IE 8 (Sun May 23 2010 - 19:52:18 CDT)
• Tom Walsh - lists
  • RE: Puntal (index.php) Remote File Inclusion Vulnerabilities (Mon May 03 2010 - 15:39:23 CDT)
• Tom Yu
  • MITKRB5-SA-2010-005 [CVE-2010-1321] GSS-API lib null pointer deref (Tue May 18 2010 - 13:09:14 CDT)
• unknown user
  • [Kil13r-SA-20100513] Adobe Flash Player 10.0 Denial Of Service Vulnerability (Wed May 19 2010 - 10:05:51 CDT)
• Vadim Okun
  • Static analysis tool exposition (SATE) 2010 Call for participation (Wed May 26 2010 - 16:45:54 CDT)
• Vladimir '3APA3A' Dubrovin
  • Re[4]: DoS vulnerabilities in Firefox, Internet Explorer, Chrome, Opera and other browsers (Fri May 28 2010 - 15:35:05 CDT)
  • Re[2]: DoS vulnerabilities in Firefox, Internet Explorer, Chrome, Opera and other browsers (Fri May 28 2010 - 13:17:56 CDT)
  • Re: Secunia Research: KDE KGet Insecure File Operation Vulnerability (Fri May 14 2010 - 14:43:11 CDT)
• VMware Security team
  • VMSA-2010-0009 ESXi ntp and ESX Service Console third party updates (Fri May 28 2010 - 00:42:31 CDT)
  • VMSA-2010-0008 VMware View 3.1.3 addresses an important cross-site scripting vulnerability (Thu May 06 2010 - 01:44:44 CDT)
• vulnswintercore.com
  • [Wintercore Research] Consona Products - Multiple vulnerabilities (Fri May 07 2010 - 06:02:50 CDT)
• VUPEN Security Research
  • VUPEN Security Research - Adobe Shockwave IML32 Multiple Code Execution Vulnerabilities (CVE-2010-0129) (Wed May 12 2010 - 07:46:28 CDT)
  • VUPEN Security Research - Adobe Shockwave 3D Blocks Field Code Execution Vulnerability (CVE-2010-1283) (Wed May 12 2010 - 07:46:38 CDT)
  • VUPEN Security Research - Adobe Shockwave DIRAPI Multiple Code Execution Vulnerabilities (CVE-2010-1280) (Wed May 12 2010 - 07:46:36 CDT)
  • VUPEN Security Research - Adobe Shockwave 3D Two Remote Code Execution Vulnerabilities (CVE-2010-1284) (Wed May 12 2010 - 07:46:33 CDT)
• VUPEN Web Security
  • PHP-Calendar "description" and "lastaction" Cross Site Scripting Vulnerabilities (Fri May 21 2010 - 03:20:35 CDT)
  • Cacti Multiple Parameter Cross Site Scripting Vulnerabilities (Fri May 21 2010 - 03:27:04 CDT)
  • phpGroupWare SQL Injections and Local File Inclusion Vulnerabilities (CVE-2010-0403 and CVE-2010-0404) (Fri May 14 2010 - 03:35:40 CDT)
• Wasim Halani
  • Cyberoam SSL VPN Client - Plain-text Storage of Username and Password (Wed May 26 2010 - 05:42:34 CDT)
• wsn1983gmail.com
  • DM Database Server Memory Corruption Vulnerability (Sun May 30 2010 - 20:30:42 CDT)
• www.matousec.com - Research
  • KHOBE - 8.0 earthquake for Windows desktop security software (Wed May 05 2010 - 13:36:38 CDT)
• xuanmumugmail.com
  • Caucho Technology Resin digest.php Cross Site Scripting Vulnerability (Tue May 18 2010 - 18:18:12 CDT)
• yicong2010yahoo.com
  • Kingsoft WebShield KAVSafe.sys <= 2010.4.14.609(2010.5.23) Kernel Mode Local Privilege Escalation Vulnerability (Mon May 24 2010 - 09:26:17 CDT)
  • Kingsoft WebShield KAVSafe.sys <= 2010.4.14.609(2010.5.23) Kernel Mode Local Privilege Escalation Vulnerability (Sat May 22 2010 - 22:37:00 CDT)
• Zakar Miklós
  • SA00001-2010 (Mon May 10 2010 - 07:37:26 CDT)
• ZDI Disclosures
  • ZDI-10-086: HP OpenView NNM getnnmdata.exe CGI Invalid Hostname Remote Code Execution Vulnerability (Tue May 11 2010 - 16:13:32 CDT)
  • ZDI-10-088: Adobe Shockwave Player 3D Parsing Memory Corruption Vulnerability (Tue May 11 2010 - 16:26:00 CDT)
  • ZDI-10-087: Adobe Shockwave Invalid Offset Memory Corruption Remote Code Execution Vulnerability (Tue May 11 2010 - 16:19:55 CDT)
  • ZDI-10-085: HP OpenView NNM getnnmdata.exe CGI Invalid ICount Remote Code Execution Vulnerability (Tue May 11 2010 - 16:11:49 CDT)
  • ZDI-10-084: HP OpenView NNM getnnmdata.exe CGI Invalid MaxAge Remote Code Execution Vulnerability (Tue May 11 2010 - 16:09:51 CDT)
  • ZDI-10-083: HP OpenView NNM snmpviewer.exe CGI Multiple Variable Remote Code Execution Vulnerability (Tue May 11 2010 - 16:08:36 CDT)
  • ZDI-10-082: HP OpenView NNM netmon sel CGI Variable Remote Code Execution Vulnerability (Tue May 11 2010 - 16:06:41 CDT)
  • ZDI-10-081: HP OpenView NNM ovet_demandpoll sel CGI Variable Format String Remote Code Execution Vulnerability (Tue May 11 2010 - 15:47:34 CDT)
  • ZDI-10-089: Adobe Shockwave Director PAMI Chunk Remote Code Execution Vulnerability (Tue May 11 2010 - 16:28:41 CDT)
  • ZDI-10-080: HP Mercury LoadRunner Agent Trusted Input Remote Code Execution Vulnerability (Thu May 06 2010 - 13:45:06 CDT)

Last message date: Mon May 31 2010 - 13:54:21 CDT
Archived on: Mon May 31 2010 - 13:54:21 CDT

296 messages sorted by: [ date ] [ thread ] [ subject ]