Most recent messages
233 messages sorted by: [ author ] [ thread ] [ subject ]

Starting: Mon Jun 27 2011 - 06:44:15 CDT
Ending: Fri Jul 29 2011 - 14:53:15 CDT

• bcksrvr format string in Sybase Adaptive Server 15.5 Luigi Auriemma (Mon Jun 27 2011 - 06:44:15 CDT)
• Upload directory traversal in Novell ZenWorks Handheld Management 7.0.2 Luigi Auriemma (Mon Jun 27 2011 - 06:46:00 CDT)
• Arbitrary files deletion in HP OpenView Performance Agent Luigi Auriemma (Mon Jun 27 2011 - 06:46:10 CDT)
• in_midi multiple vulnerabilities in Winamp 5.61 Luigi Auriemma (Wed Jun 29 2011 - 14:02:45 CDT)
• bcksrvr format string in Sybase Adaptive Server 15.5 Luigi Auriemma (Thu Jun 30 2011 - 11:56:42 CDT)
• ZDI-11-231: Apple QuickTime Pict File Matrix Parsing Remote Code Execution Vulnerability ZDI Disclosures (Wed Jun 29 2011 - 16:19:05 CDT)
• [slackware-security] pidgin (SSA:2011-178-01) Slackware Security Team (Mon Jun 27 2011 - 23:19:23 CDT)
• Joomla! 1.6.3 and lower | Multiple Cross Site Scripting (XSS) Vulnerabilities YGN Ethical Hacker Group (Tue Jun 28 2011 - 01:25:07 CDT)
• Breaking the links: Exploiting the linker Tim Brown (Wed Jun 29 2011 - 15:53:49 CDT)
• AST-2011-011: Possible enumeration of SIP users due to differing authentication responses Asterisk Security Team (Tue Jun 28 2011 - 15:31:15 CDT)
• ZDI-11-229: Apple QuickTime RIFF fmt Chunk Parsing Remote Code Execution Vulnerability ZDI Disclosures (Wed Jun 29 2011 - 16:16:20 CDT)
• Re: Resolved - NNT Change Tracker - Hard-Coded Encryption Key Originally posted as http://seclists.org/fulldisclosure/2011/May/460 dennis.brunnengmail.com (Wed Jun 29 2011 - 16:22:27 CDT)
• CORE-2011-0514: Multiple vulnerabilities in HP Data Protector CORE Security Technologies Advisories (Wed Jun 29 2011 - 16:35:39 CDT)
• CORE-2011-0606: HP Data Protector EXEC_CMD Buffer Overflow Vulnerability CORE Security Technologies Advisories (Wed Jun 29 2011 - 16:48:11 CDT)
• Working Remote Root Exploit for OpenSSH 3.4p1 (FreeBSD) HI-TECH . (Fri Jul 01 2011 - 10:45:22 CDT)
• [SECURITY] [DSA 2271-1] curl security update Giuseppe Iuculano (Sat Jul 02 2011 - 02:49:58 CDT)
• Multiple Cross-Site Scripting vulnerabilities in WebCalendar sschurtzt-online.de (Mon Jul 04 2011 - 01:46:09 CDT)
• ZDI-11-232: HP iNode Management Center iNodeMngChecker.exe Remote Code Execution Vulnerability ZDI Disclosures (Fri Jul 01 2011 - 12:32:27 CDT)
• [security bulletin] HPSBMU02686 SSRT100541 rev.3 - HP OpenView Storage Data Protector, Remote Execution of Arbitrary Code security-alerthp.com (Wed Jun 29 2011 - 18:53:29 CDT)
• [SECURITY] [DSA 2266-1] php5 security update Moritz Muehlenhoff (Wed Jun 29 2011 - 13:42:45 CDT)
• ZDI-11-230: Apple Quicktime Apple Lossless Audio Codec Parsing Remote Code Execution Vulnerability ZDI Disclosures (Wed Jun 29 2011 - 16:17:44 CDT)
• SEC Consult SA-20110701-0 :: Multiple SQL injection vulnerabilities in WordPress SEC Consult Vulnerability Lab (Fri Jul 01 2011 - 04:23:40 CDT)
• [security bulletin] HPSB3C02687 SSRT100377 rev.1 - HP Intelligent Management Center User Access Manager (UAM) and Endpoint Admission Defense (EAD), Remote Execution of Arbitrary Code security-alerthp.com (Fri Jul 01 2011 - 10:17:55 CDT)
• Spring Source OXM Remote OS Command Injection when XStream and IBM JRE are used pierre.ernstca.ibm.com (Thu Jun 30 2011 - 10:13:30 CDT)
• Re: [Full-disclosure] OpenSSH 3.5p1 Remote Root Exploit for FreeBSD Darren Tucker (Fri Jul 01 2011 - 01:38:18 CDT)
• NetBSD 5.1 libc/net multiple functions stack buffer overflow cxibsecurityreason.com (Fri Jul 01 2011 - 07:13:37 CDT)
• Re: [Full-disclosure] Working Remote Root Exploit for OpenSSH 3.4p1 (FreeBSD) HI-TECH . (Fri Jul 01 2011 - 10:52:07 CDT)
• [SECURITY] [DSA 2267-1] perl security update Moritz Muehlenhoff (Fri Jul 01 2011 - 12:52:58 CDT)
• [SECURITY] [DSA 2268-1] iceweasel security update Moritz Muehlenhoff (Fri Jul 01 2011 - 14:32:42 CDT)
• [SECURITY] [DSA 2262-2] php5 update Moritz Muehlenhoff (Fri Jul 01 2011 - 15:00:32 CDT)
• [SECURITY] [DSA 2269-1] iceape security update Moritz Muehlenhoff (Fri Jul 01 2011 - 15:16:48 CDT)
• Vega beta release: a new open-source web-application security assessment platform David Mirza (Fri Jul 01 2011 - 16:07:03 CDT)
• [SECURITY] [DSA 2270-1] qemu-kvm security update Moritz Muehlenhoff (Fri Jul 01 2011 - 15:51:24 CDT)
• APPLE-SA-2011-06-28-2 Java for Mac OS X 10.5 Update 10 Apple Product Security (Tue Jun 28 2011 - 15:11:48 CDT)
• NGS00062 Patch Notification: Apple Mac OS X ImageIO TIFF Heap Overflow ResearchNGSSecure (Tue Jun 28 2011 - 08:54:54 CDT)
• NGS00051 Technical Advisory: Cisco VPN Client Privilege Escalation ResearchNGSSecure (Tue Jun 28 2011 - 08:55:58 CDT)
• NGS00052 Technical Advisory: Apple Mac OS X Image RAW Multiple Buffer Overflows ResearchNGSSecure (Tue Jun 28 2011 - 09:04:41 CDT)
• NGS00057 Technical Advisory: Apple Mac OS X ImageIO Integer Overflow ResearchNGSSecure (Tue Jun 28 2011 - 09:18:35 CDT)
• Multiple vulnerabilities in Open-Realty advisoryhtbridge.ch (Tue Jun 28 2011 - 11:13:54 CDT)
• XSS in FlatPress advisoryhtbridge.ch (Tue Jun 28 2011 - 11:14:04 CDT)
• Integer overflow in foobar2000 1.1.7 Luigi Auriemma (Mon Jul 04 2011 - 12:06:56 CDT)
• Arbitrary files deletion in HP OpenView Communication Broker Luigi Auriemma (Thu Jun 30 2011 - 11:57:12 CDT)
• MITKRB5-SA-2011-005 FTP daemon fails to set effective group ID [CVE-2011-1526] Tom Yu (Tue Jul 05 2011 - 13:06:39 CDT)
• [SECURITY] [DSA 2272-1] bind9 security update Florian Weimer (Tue Jul 05 2011 - 13:46:15 CDT)
• Fwd: RFC 6274 on Security Assessment of the Internet Protocol Version 4 Fernando Gont (Tue Jul 05 2011 - 15:38:47 CDT)
• Ubuntu: reseed(8), random.org, and HTTP request Jeffrey Walton (Tue Jul 05 2011 - 23:04:23 CDT)
• Re: [Full-disclosure] Ubuntu: reseed(8), random.org, and HTTP request coderman (Wed Jul 06 2011 - 02:23:49 CDT)
• IDrive Online Backup ActiveX control Insecure Method advisoryhtbridge.ch (Wed Jul 06 2011 - 06:23:27 CDT)
• aTube Catcher ActiveX Control Insecure Method advisoryhtbridge.ch (Wed Jul 06 2011 - 06:23:40 CDT)
• Re: in_midi multiple vulnerabilities in Winamp 5.61 Henri Salo (Wed Jul 06 2011 - 07:14:09 CDT)
• Re: Multiple Cross-Site Scripting vulnerabilities in WebCalendar Henri Salo (Wed Jul 06 2011 - 05:59:47 CDT)
• Re: [Full-disclosure] Ubuntu: reseed(8), random.org, and HTTP request Jamie Strandboge (Wed Jul 06 2011 - 08:06:21 CDT)
• Re: SEC Consult SA-20110701-0 :: Multiple SQL injection vulnerabilities in WordPress Henri Salo (Wed Jul 06 2011 - 08:59:03 CDT)
• Cisco Security Advisory: Cisco Content Services Gateway Denial of Service Vulnerability Cisco Systems Product Security Incident Response Team (Wed Jul 06 2011 - 10:59:00 CDT)
• NGS00060 Technical Advisory: Blue Coat BCAAA Remote Code Execution Vulnerability ResearchNGSSecure (Tue Jul 05 2011 - 03:32:33 CDT)
• [security bulletin] HPSBUX02688 SSRT100513 rev.1 - HP-UX Dynamic Loader, Local Privilege Escalation, Denial of Service (DoS) security-alerthp.com (Tue Jul 05 2011 - 18:13:42 CDT)
• Aruba Advisory AID-070611 Cross Site Scripting vulnerability in ArubaOS and AirWave Administration Web Interfaces RGill (Wed Jul 06 2011 - 12:53:58 CDT)
• Security Advisory: CVE-2011-2465 ISC BIND 9 Remote Crash with Certain RPZ Configurations Barry Greene (Tue Jul 05 2011 - 08:54:44 CDT)
• Re: Re: Multiple Cross-Site Scripting vulnerabilities in WebCalendar sschurtzt-online.de (Thu Jul 07 2011 - 01:29:30 CDT)
• Re: [Full-disclosure] Ubuntu: reseed(8), random.org, and HTTP request Michal Zalewski (Wed Jul 06 2011 - 14:41:55 CDT)
• [SECURITY] [DSA 2273-1] icedove security update Moritz Muehlenhoff (Wed Jul 06 2011 - 13:34:07 CDT)
• Re: [Full-disclosure] Ubuntu: reseed(8), random.org, and HTTP request Michal Zalewski (Wed Jul 06 2011 - 14:42:43 CDT)
• Security Advisory: CVE-2011-2516 Cantor, Scott E. (Wed Jul 06 2011 - 19:58:06 CDT)
• Security Advisory: CVE-2011-2464 - ISC BIND 9 Remote packet Denial of Service against Authoritative and Recursive Servers Barry Greene (Tue Jul 05 2011 - 08:53:02 CDT)
• [security bulletin] HPSBMA02674 SSRT100487 rev.2 - HP Service Manager and HP Service Center, Unauthorized Remote Access, Unsecured Local Access, Remote Disclosure of Privileged Information, HTTP Session Credential Re-use, Cross Site Scripting (XSS) and Remote Script Inject security-alerthp.com (Wed Jul 06 2011 - 18:05:23 CDT)
• phpMyAdmin 3.x Multiple Remote Code Executions Mango (Thu Jul 07 2011 - 13:54:31 CDT)
• [SECURITY] [DSA 2274-1] wireshark security update Moritz Muehlenhoff (Thu Jul 07 2011 - 14:00:37 CDT)
• ZDI-11-233: Symantec Web Gateway forget.php SQL Injection Vulnerability ZDI Disclosures (Thu Jul 07 2011 - 14:59:04 CDT)
• [SECURITY] [DSA 2275-1] openoffice.org security update Nico Golde (Thu Jul 07 2011 - 15:37:14 CDT)
• [security bulletin] HPSBMU02690 SSRT100569 rev.1 - HP Business Availability Center (BAC) Running on Solaris and Windows, Remote Denial of Service (DoS) security-alerthp.com (Fri Jul 08 2011 - 08:34:45 CDT)
• [security bulletin] HPSBUX02689 SSRT100494 rev.1 - HP-UX Running OpenSSL, Remote Denial of Service (DoS) security-alerthp.com (Fri Jul 08 2011 - 12:46:37 CDT)
• Re: [Full-disclosure] Binary Planting Goes "Any File Type" Dan Kaminsky (Fri Jul 08 2011 - 14:10:31 CDT)
• phpMyAdmin 3.x preg_replace RCE POC Mango (Fri Jul 08 2011 - 15:27:21 CDT)
• Re: [Full-disclosure] Binary Planting Goes "Any File Type" Mitja Kolsek (Fri Jul 08 2011 - 18:11:33 CDT)
• Re: [Full-disclosure] Binary Planting Goes "Any File Type" Dan Kaminsky (Fri Jul 08 2011 - 18:26:17 CDT)
• [SECURITY] [DSA 2276-1] asterisk security update Luciano Bello (Sun Jul 10 2011 - 10:17:03 CDT)
• [slackware-security] mozilla-thunderbird (SSA:2011-189-02) Slackware Security Team (Fri Jul 08 2011 - 14:19:12 CDT)
• [slackware-security] bind (SSA:2011-189-01) Slackware Security Team (Fri Jul 08 2011 - 14:18:53 CDT)
• Wireshark 1.4.0 Malformed IKE Packet Denial of Service vulnnipc.org.cn (Mon Jul 11 2011 - 04:40:10 CDT)
• [HITB-Announce] REMINDER: HITB2011 - Malaysia Call for Papers Closes on the 15th Hafez Kamal (Mon Jul 11 2011 - 09:40:38 CDT)
• Ferdows CMS Pro <=1.1.0 and Ferdows CMS <=9.0.5 Multiple Vulnerabilities adminbugreport.ir (Mon Jul 11 2011 - 07:31:56 CDT)
• POC2011 Call for Paper pocadmgmail.com (Mon Jul 11 2011 - 07:11:15 CDT)
• [SECURITY] [DSA 2277-1] xml-security-c security update Nico Golde (Sun Jul 10 2011 - 11:22:41 CDT)
• ZDI-11-234: Trend Micro Control Manager CasLogDirectInsertHandler.cs Remote Code Execution Vulnerability ZDI Disclosures (Mon Jul 11 2011 - 11:52:10 CDT)
• [SECURITY] [DSA 2276-2] asterisk regression update Luciano Bello (Mon Jul 11 2011 - 13:59:48 CDT)
• Tugux CMS 1.2 Multiple vulnerability (BLIND sql & xss) randyeidelweiss.info (Tue Jul 12 2011 - 07:31:38 CDT)
• [Announcement] ClubHack Magazine Issue 18-July2011 Released abhijeetclubhack.com (Tue Jul 12 2011 - 10:42:19 CDT)
• ZDI-11-235: TrendMicro Control Manager CASProcessor.exe BLOB Remote Code Execution Vulnerability ZDI Disclosures (Tue Jul 12 2011 - 12:29:09 CDT)
• Static Analysis Tool Exposition (SATE) - Call for Participation Delaitre, Aurelien (Mon Jul 11 2011 - 14:22:37 CDT)
• Alice (Telefonica Germany) Modem 1111 DoS + XSS Moritz Naumann (Mon Jul 11 2011 - 16:13:11 CDT)
• CVE-2010-2404 | Persistent Cross Site Scripting Vulnerability in Oracle I-Recruitment - E-Business Suite Aditya K Sood (Tue Jul 12 2011 - 21:54:43 CDT)
• [Annoucement] ClubHack Magazine - Call for Articles abhijeetclubhack.com (Wed Jul 13 2011 - 06:30:05 CDT)
• Paltalk Messenger ActiveX Control Multiple Insecure Methods advisoryhtbridge.ch (Wed Jul 13 2011 - 07:35:18 CDT)
• Dell IT Assistant detectIESettingsForITA.ocx ActiveX Control readRegVal() Remote Registry Dump Vulnerability nospamgmail.it (Wed Jul 13 2011 - 08:27:13 CDT)
• Torque Server Buffer Overflow Vulnerability pi3itsec.pl (Wed Jul 13 2011 - 10:06:18 CDT)
• Re: Wireshark 1.4.0 Malformed IKE Packet Denial of Service geraldwireshark.org (Wed Jul 13 2011 - 12:39:22 CDT)
• DC4420 - London DEFCON - July meet - Tuesday 19th July 2011 Major Malfunction (Wed Jul 13 2011 - 12:47:36 CDT)
• Re: [Full-disclosure] DC4420 - London DEFCON - July meet - Tuesday 19th July 2011 Major Malfunction (Wed Jul 13 2011 - 13:01:48 CDT)
• [SECURITY] CVE-2011-2526 Apache Tomcat Information disclosure and availability vulnerabilities Mark Thomas (Wed Jul 13 2011 - 10:33:22 CDT)
• [oCERT-2011-001] Chyrp input sanitization errors Andrea Barisani (Wed Jul 13 2011 - 15:17:30 CDT)
• iDefense Security Advisory 07.14.11: Citrix Access Gateway ActiveX Stack Buffer Overflow Vulnerability labs-no-reply (Thu Jul 14 2011 - 17:28:24 CDT)
• [slackware-security] mozilla-firefox (SSA:2011-195-02) Slackware Security Team (Thu Jul 14 2011 - 20:48:06 CDT)
• [slackware-security] seamonkey (SSA:2011-195-01) Slackware Security Team (Thu Jul 14 2011 - 20:47:42 CDT)
• ESA-2011-022: EMC Documentum eRoom Indexing Server HummingBird Client Connector Buffer Overflow Vulnerability Security_Alertemc.com (Fri Jul 15 2011 - 12:18:22 CDT)
• APPLE-SA-2011-07-15-2 iOS 4.2.9 Software Update for iPhone Apple Product Security (Fri Jul 15 2011 - 12:21:37 CDT)
• APPLE-SA-2011-07-15-1 iOS 4.3.4 Software Update Apple Product Security (Fri Jul 15 2011 - 12:21:30 CDT)
• [SECURITY] [DSA 2254-2] oprofile security update Luciano Bello (Fri Jul 15 2011 - 20:26:18 CDT)
• [SECURITY] [DSA 2278-1] horde3 security update Steffen Joeris (Fri Jul 15 2011 - 22:37:31 CDT)
• Reminder - DeepSec 2011 Call For Papers DeepSec Conference (Sun Jul 17 2011 - 14:48:25 CDT)
• Call for Papers: ICITST-2011 Call for papers (Mon Jul 18 2011 - 11:20:34 CDT)
• ZDI-11-236: EMC Documentum eRoom Indexing Server OpenText HummingBird Connector Remote Code Execution Vulnerability ZDI Disclosures (Mon Jul 18 2011 - 12:13:20 CDT)
• [ MDVSA-2011:112 ] blender securitymandriva.com (Mon Jul 18 2011 - 12:36:00 CDT)
• [ MDVSA-2011:114 ] blender securitymandriva.com (Mon Jul 18 2011 - 12:57:00 CDT)
• [SECURITY] [DSA 2279-1] libapache2-mod-authnz-external security update Steffen Joeris (Mon Jul 18 2011 - 19:49:15 CDT)
• [SECURITY] [DSA 2280-1] libvirt security update Steffen Joeris (Mon Jul 18 2011 - 20:27:20 CDT)
• H2HC Brazil (Hackers 2 Hackers Conference) 8th Edition - Call for Papers Rodrigo Rubira Branco \(BSDaemon\) (Tue Jul 19 2011 - 19:10:47 CDT)
• Oracle Sun GlassFish Enterprise Server Stored XSS Vulnerability - Security Advisory - SOS-11-009 Lists (Wed Jul 20 2011 - 00:05:44 CDT)
• HTC / Android OBEX FTP Service Directory Traversal Vulnerability alberto.morenotgmail.com (Wed Jul 20 2011 - 01:20:19 CDT)
• OSI Security: Elitecore Cyberoam UTM - Authenticated Cross-Site Scripting Vulnerability Patrick Webster (Wed Jul 20 2011 - 01:26:40 CDT)
• XSS in Tiki Wiki CMS Groupware advisoryhtbridge.ch (Wed Jul 20 2011 - 07:40:25 CDT)
• [ MDVSA-2011:115 ] bind securitymandriva.com (Wed Jul 20 2011 - 09:40:00 CDT)
• APPLE-SA-2011-07-20-1 Safari 5.1 and Safari 5.0.6 Apple Product Security (Wed Jul 20 2011 - 10:33:40 CDT)
• Cisco Security Advisory: Cisco ASR 9000 Series Routers Line Card IP Version 4 Denial of Service Vulnerability Cisco Systems Product Security Incident Response Team (Wed Jul 20 2011 - 11:00:00 CDT)
• ZDI-11-237: CA Total Defense Suite Gateway Security Malformed HTTP Packet Remote Code Execution Vulnerability ZDI Disclosures (Wed Jul 20 2011 - 12:05:30 CDT)
• Cisco Security Advisory: Cisco SA 500 Series Security Appliances Web Management Interface Vulnerabilities Cisco Systems Product Security Incident Response Team (Wed Jul 20 2011 - 11:00:00 CDT)
• CA20110720-01: Security Notice for CA Gateway Security and Total Defense Kotas, Kevin J (Wed Jul 20 2011 - 12:54:07 CDT)
• Securstar - DriveCrypt - Local Kernel Denial of Service/Memory Disclosure/Privilege Escalation Digit Security Research (Wed Jul 20 2011 - 14:27:08 CDT)
• [SECURITY] [DSA 2281-1] opie security update Steffen Joeris (Wed Jul 20 2011 - 21:51:41 CDT)
• iDefense Security Advisory 07.20.11: Multiple Vendor WebKit MathML Use-After-Free Vulnerability labs-no-reply (Wed Jul 20 2011 - 14:53:00 CDT)
• iDefense Security Advisory 07.20.11: Safari WebKit TIFF Use-After-Free Vulnerability labs-no-reply (Wed Jul 20 2011 - 15:33:24 CDT)
• iDefense Security Advisory 07.20.11: Multiple Vendor WebKit frameset style Heap Corruption Vulnerability labs-no-reply (Wed Jul 20 2011 - 15:49:20 CDT)
• iDefense Security Advisory 07.20.11: Apple Safari innerText Use-After-Free Vulnerability labs-no-reply (Wed Jul 20 2011 - 15:57:53 CDT)
• iDefense Security Advisory 07.20.11: Multiple Vendor WebKit SVG animVal Memory Corruption Vulnerability labs-no-reply (Wed Jul 20 2011 - 16:50:00 CDT)
• Vbulletin 4.0.x => 4.1.3 (messagegroupid) SQL injection Vulnerability fb1h2s Hack 2 Secure (Wed Jul 20 2011 - 19:01:18 CDT)
• Microsoft Internet Explorer 'toStaticHTML' HTML Sanitizing Information Disclosure adicil.ibm.com (Thu Jul 21 2011 - 02:14:34 CDT)
• ZDI-11-238: Oracle Secure Backup validate_login Command Injection Remote Code Execution Vulnerability ZDI Disclosures (Thu Jul 21 2011 - 10:50:04 CDT)
• Foxit Reader Insecure Library Loading robkraussoutionary.com (Thu Jul 21 2011 - 12:11:43 CDT)
• Permutation Oriented Programming Nelson Brito (Thu Jul 21 2011 - 13:45:54 CDT)
• Joomla! 1.7.0-RC and lower | Multiple Cross Site Scripting (XSS) Vulnerabilities YGN Ethical Hacker Group (Thu Jul 21 2011 - 22:16:57 CDT)
• [ MDVSA-2011:116 ] curl securitymandriva.com (Fri Jul 22 2011 - 08:37:00 CDT)
• [ MDVSA-2011:117 ] krb5-appl securitymandriva.com (Fri Jul 22 2011 - 09:44:00 CDT)
• Hiding Backdoors in plain sight, again CoreTex Team (Fri Jul 22 2011 - 10:16:28 CDT)
• Re: [Full-disclosure] [Bkis] sNews 1.7.1 XSS vulnerability Henri Salo (Sun Jul 24 2011 - 05:08:35 CDT)
• [ MDVSA-2011:118 ] wireshark securitymandriva.com (Sun Jul 24 2011 - 06:51:01 CDT)
• CobraScripts (search_result.php?cid) Remote SQL injection Vulnerability ehsan_hp200hotmail.com (Sun Jul 24 2011 - 11:42:08 CDT)
• phpMyAdmin 3.x Conditional Session Manipulation Mango (Sun Jul 24 2011 - 12:13:41 CDT)
• NGS00042 Patch Notification: Solaris USB configuration descriptor kernel stack overflow ResearchNGSSecure (Mon Jul 25 2011 - 02:13:26 CDT)
• [SECURITY] [DSA 2282-1] qemu-kvm security update Moritz Muehlenhoff (Mon Jul 25 2011 - 05:14:19 CDT)
• [SECURITY] [DSA 2283-1] krb5-appl security update Moritz Muehlenhoff (Mon Jul 25 2011 - 06:53:06 CDT)
• phpBB AJAX Chat/Shoutbox MOD CSRF Vulnerability spamgoesherestevenroddis.com (Mon Jul 25 2011 - 07:21:24 CDT)
• [SECURITY] [DSA 2284-1] opensaml2 security update Moritz Muehlenhoff (Mon Jul 25 2011 - 09:16:47 CDT)
• [ MDVSA-2011:119 ] libsndfile securitymandriva.com (Mon Jul 25 2011 - 09:38:00 CDT)
• [DSB-2011-01] Security Advisory FreeRADIUS 2.1.11 advisorydfn-cert.de (Mon Jul 25 2011 - 10:36:27 CDT)
• OWASP AppSec USA 2011 Pre-conference Challenge #3 - July adam.basoowasp.org (Mon Jul 25 2011 - 12:52:35 CDT)
• APPLE-SA-2011-07-20-2 iWork 9.1 Update Apple Product Security (Mon Jul 25 2011 - 13:25:07 CDT)
• APPLE-SA-2011-07-25-1 iOS 4.3.5 Software Update Apple Product Security (Mon Jul 25 2011 - 13:32:50 CDT)
• APPLE-SA-2011-07-25-2 iOS 4.2.10 Software Update for iPhone Apple Product Security (Mon Jul 25 2011 - 13:32:48 CDT)
• TWSL2011-007: iOS SSL Implementation Does Not Validate Certificate Chain Trustwave Advisories (Mon Jul 25 2011 - 14:55:44 CDT)
• [SECURITY] [DSA 2285-1] mapserver security update Nico Golde (Mon Jul 25 2011 - 17:33:07 CDT)
• PHP-Barcode 0.3pl1 Remote Code Execution beford (Mon Jul 25 2011 - 18:03:24 CDT)
• CA ARCserve D2D r15 GWT RPC Request Auth Bypass / Credentials Disclosure and Commands Execution nospamgmail.it (Mon Jul 25 2011 - 23:01:58 CDT)
• Zones Web Solution (index.php?manufacturers_id) Remote SQL injection Vulnerability ehsan_hp200hotmail.com (Tue Jul 26 2011 - 03:25:08 CDT)
• Funnel Web (items.php?&cat_id) Remote SQL injection Vulnerability ehsan_hp200hotmail.com (Tue Jul 26 2011 - 03:50:39 CDT)
• Funnel Web (directory.php?cid) Remote SQL injection Vulnerability ehsan_hp200hotmail.com (Tue Jul 26 2011 - 03:57:40 CDT)
• Funnel Web (selected_product.php?t) Remote SQL injection Vulnerability ehsan_hp200hotmail.com (Tue Jul 26 2011 - 04:07:34 CDT)
• Funnel Web (pages.php?page) Remote SQL injection Vulnerability ehsan_hp200hotmail.com (Tue Jul 26 2011 - 04:13:02 CDT)
• Indonesia Web Design (link-directory.php?cid) (link-directory.php?pid) Remote SQL injection Vulnerability ehsan_hp200hotmail.com (Tue Jul 26 2011 - 05:04:16 CDT)
• DotComEgypt (products.php?cat_id) Remote SQL injection Vulnerability ehsan_hp200hotmail.com (Tue Jul 26 2011 - 05:31:51 CDT)
• Precision (products.php?cat_id) Remote SQL injection Vulnerability ehsan_hp200hotmail.com (Tue Jul 26 2011 - 05:50:49 CDT)
• Lava (news_item.php?id) (album.php?id) (basket.php?baction) Remote SQL injection Vulnerability ehsan_hp200hotmail.com (Tue Jul 26 2011 - 06:45:11 CDT)
• [PT-2011-08] Multiple vulnerabilities in Dlink DPH 150SE/E/F1 noreplyptsecurity.ru (Tue Jul 26 2011 - 07:21:49 CDT)
• [PT-2011-25] SQL injection vulnerabilities in Support Incident Tracker noreplyptsecurity.ru (Tue Jul 26 2011 - 07:22:38 CDT)
• [PT-2011-05] Cross-Site Scripting in Koha Library Software noreplyptsecurity.ru (Tue Jul 26 2011 - 07:23:21 CDT)
• Hacking IPv6 Networks (slides) Fernando Gont (Tue Jul 26 2011 - 12:05:12 CDT)
• Re: CA ARCserve D2D r15 GWT RPC Request Auth Bypass / Credentials Williams, James K (Tue Jul 26 2011 - 13:12:01 CDT)
• [Tool] DoS for OpenSLP (and others) Nicolas Grégoire (Tue Jul 26 2011 - 10:50:32 CDT)
• [SECURITY] [DSA 2286-1] phpmyadmin security update Thijs Kinkhorst (Tue Jul 26 2011 - 14:11:55 CDT)
• ESA-2011-024: EMC Captiva eInput multiple vulnerabilities Security_Alertemc.com (Tue Jul 26 2011 - 16:51:16 CDT)
• ESA-2011-021: EMC Data Protection Advisor sensitive information disclosure vulnerability Security_Alertemc.com (Tue Jul 26 2011 - 16:52:22 CDT)
• Agent Image (news_details.php?news_ID) Remote SQL injection Vulnerability ehsan_hp200hotmail.com (Wed Jul 27 2011 - 00:57:35 CDT)
• SA500 vulnerabilities - details michal.sajdaksecuritum.pl (Wed Jul 27 2011 - 03:43:18 CDT)
• [ MDVSA-2011:120 ] freetype2 securitymandriva.com (Wed Jul 27 2011 - 02:45:19 CDT)
• G2webCMS (products.php?cat_id) (member-profile.php?profile) Remote SQL injection Vulnerability ehsan_hp200hotmail.com (Wed Jul 27 2011 - 04:51:02 CDT)
• iCube Lab (product_details.php?cat_id) Remote SQL injection Vulnerability ehsan_hp200hotmail.com (Wed Jul 27 2011 - 05:08:11 CDT)
• Solutiontech (product.php?cat_id) Remote SQL injection Vulnerability ehsan_hp200hotmail.com (Wed Jul 27 2011 - 05:59:30 CDT)
• Chrome Web Solutions (details.php?cat_id) (listing_more.php?id) Remote SQL injection Vulnerability ehsan_hp200hotmail.com (Wed Jul 27 2011 - 06:13:45 CDT)
• Multiple XSS in GBook PHP guestbook advisoryhtbridge.ch (Wed Jul 27 2011 - 06:18:08 CDT)
• Redirection vulnerability in MBoard advisoryhtbridge.ch (Wed Jul 27 2011 - 06:20:45 CDT)
• [ MDVSA-2011:121 ] samba securitymandriva.com (Wed Jul 27 2011 - 09:24:00 CDT)
• ZDI-11-239: Apple Safari Webkit FrameOwner Element Remote Code Execution Vulnerability ZDI Disclosures (Wed Jul 27 2011 - 10:23:25 CDT)
• ZDI-11-240: Apple Safari Webkit SVG Marker Remote Code Execution Vulnerability ZDI Disclosures (Wed Jul 27 2011 - 10:34:45 CDT)
• ZDI-11-241: Webkit setAttributes attributeChanged Remote Code Execution Vulnerability ZDI Disclosures (Wed Jul 27 2011 - 10:38:08 CDT)
• ZDI-11-242: Apple Safari Rendering Object Body Detachment Remote Code Execution Vulnerability ZDI Disclosures (Wed Jul 27 2011 - 10:39:07 CDT)
• ZDI-11-243: WebKit ContentEditable Inline Style Remote Code Execution Vulnerability ZDI Disclosures (Wed Jul 27 2011 - 10:43:48 CDT)
• Dow Group (dynamic.php?id) (sub.php?solutioncat_id) (news_desc.php?id) (product.php?id) Remote SQL injection Vulnerability ehsan_hp200hotmail.com (Wed Jul 27 2011 - 10:47:17 CDT)
• FootBall Cms (view_table_lig.php?group) XSS Vulnerability ehsan_hp200hotmail.com (Wed Jul 27 2011 - 11:38:07 CDT)
• TeamSHATTER Security Advisory: Oracle Enterprise Manager vulnerable to XSS (notifRuleInfo$mode page) Shatter (Wed Jul 27 2011 - 17:54:57 CDT)
• TeamSHATTER Security Advisory: Oracle Enterprise Manager vulnerable to XSS (sitemap page) Shatter (Wed Jul 27 2011 - 18:01:07 CDT)
• TeamSHATTER Security Advisory: Oracle Enterprise Manager vulnerable to XSS (metricDetail$type page) Shatter (Wed Jul 27 2011 - 18:01:18 CDT)
• Coherendz (products.php?cat_id) Remote SQL injection Vulnerability ehsan_hp200hotmail.com (Thu Jul 28 2011 - 00:17:47 CDT)
• WOC Consulting (search_result.php?cid) Remote SQL injection Vulnerability ehsan_hp200hotmail.com (Thu Jul 28 2011 - 00:20:17 CDT)
• Canoy Softwares (search_result.php?loc_id) Remote SQL injection Vulnerability ehsan_hp200hotmail.com (Thu Jul 28 2011 - 00:20:58 CDT)
• Zones Web Solution (StoneDetails.php?stone) XSS Vulnerability ehsan_hp200hotmail.com (Thu Jul 28 2011 - 00:24:08 CDT)
• Zones Web Solution (status.asp?print) (search_result.php?loc_id) Remote SQL injection Vulnerabilities ehsan_hp200hotmail.com (Thu Jul 28 2011 - 00:26:19 CDT)
• Web Fusion Nepal (tour.php?category) XSS Vulnerability ehsan_hp200hotmail.com (Thu Jul 28 2011 - 00:27:16 CDT)
• Avon Groups (search_result.php?cid) Remote SQL injection Vulnerability ehsan_hp200hotmail.com (Thu Jul 28 2011 - 00:27:54 CDT)
• Web Fusion Nepal (find.php?id) Remote SQL injection Vulnerability ehsan_hp200hotmail.com (Thu Jul 28 2011 - 00:28:46 CDT)
• Infocus Web Solutions (news_desc.php?id) Remote SQL injection Vulnerability ehsan_hp200hotmail.com (Thu Jul 28 2011 - 00:30:29 CDT)
• A1 Solutions (cat_sell.php?cid) Remote SQL injection Vulnerability ehsan_hp200hotmail.com (Thu Jul 28 2011 - 00:31:42 CDT)
• indiacon (selloffers.php?cid) Remote SQL injection Vulnerability ehsan_hp200hotmail.com (Thu Jul 28 2011 - 00:32:17 CDT)
• CobraScripts (selloffers.php?cid) Remote SQL injection Vulnerability ehsan_hp200hotmail.com (Thu Jul 28 2011 - 00:34:01 CDT)
• Wireshark 1.6.1 Malformed IKE Packet Denial of Service vulnnipc.org.cn (Thu Jul 28 2011 - 03:42:13 CDT)
• Re: [Full-disclosure] [BMSA-2009-07] Backdoor in PyForum Henri Salo (Thu Jul 28 2011 - 06:39:06 CDT)
• Two security issues fixed in ioQuake3 engine Thilo Schulz (Thu Jul 28 2011 - 07:55:04 CDT)
• [security bulletin] HPSBMU02692 SSRT100581 rev.2 - HP SiteScope, Remote Cross Site Scripting (XSS) and Session Fixation Attack security-alerthp.com (Thu Jul 28 2011 - 08:11:58 CDT)
• [SECURITY] [DSA 2287-1] libpng security update Luciano Bello (Thu Jul 28 2011 - 11:23:46 CDT)
• [security bulletin] HPSBMU02693 SSRT100583 rev.1 - HP Network Automation Running on Linux, Solaris, and Windows, Remote SQL Injection, Cross Site Scripting (XSS) security-alerthp.com (Thu Jul 28 2011 - 11:42:51 CDT)
• [security bulletin] HPSBMU02669 SSRT100346 rev.3 - HP Data Protector Media Management Daemon (mmd), Remote Denial of Service (DoS) security-alerthp.com (Thu Jul 28 2011 - 12:26:01 CDT)
• [security bulletin] HPSBUX02689 SSRT100494 rev.2 - HP-UX Running OpenSSL, Remote Denial of Service (DoS) security-alerthp.com (Thu Jul 28 2011 - 12:26:40 CDT)
• [security bulletin] HPSBMU02691 SSRT100483 rev.2 - HP Performance Agent and HP Operations Agent, Remote Arbitrary File Deletion security-alerthp.com (Thu Jul 28 2011 - 12:25:02 CDT)
• Gopal Systems (products.php?cat_id) Remote SQL injection Vulnerability ehsan_hp200hotmail.com (Thu Jul 28 2011 - 08:34:36 CDT)
• n.runs-SA-2011.001 - Citrix XenApp / XenDesktop Stack-Based Buffer Overflow securitynruns.com (Thu Jul 28 2011 - 14:21:08 CDT)
• n.runs-SA-2011.002 - Citrix XenApp / XenDesktop XML Service Heap Corruption securitynruns.com (Thu Jul 28 2011 - 14:21:08 CDT)
• ZDI-11-244: (0day) FlexNet License Server Manager lmadmin Remote Code Execution Vulnerability ZDI Disclosures (Thu Jul 28 2011 - 15:25:25 CDT)
• Sitecore CMS 6.4 Open URL Redirect Vulnerability Tom Neaves (Thu Jul 28 2011 - 17:02:38 CDT)
• [SECURITY] [DSA 2288-1] libsndfile security update Moritz Muehlenhoff (Thu Jul 28 2011 - 17:00:12 CDT)
• PacSec CFP note, deadline Aug 3; conf Nov 9/10 Tokyo Dragos Ruiu (Thu Jul 28 2011 - 20:58:40 CDT)
• Cisco Security Advisory: Cisco TelePresence Recording Server Default Credentials for Root Account Vulnerability Cisco Systems Product Security Incident Response Team (Fri Jul 29 2011 - 09:15:44 CDT)
• Vegetav (news_item.php?id) Remote SQL injection Vulnerability ehsan_hp200hotmail.com (Fri Jul 29 2011 - 10:36:26 CDT)
• cgcraft llc (info.php?id) (news_item.php?id) Remote SQL injection Vulnerability ehsan_hp200hotmail.com (Fri Jul 29 2011 - 11:26:39 CDT)
• AppSec USA 2011 Open Source Showcase Call for Demos adam.basoowasp.org (Fri Jul 29 2011 - 12:03:07 CDT)
• ZDI-11-245: Sybase Adaptive Server Backup and Monitor Server Translation Array Remote Code Execution Vulnerability ZDI Disclosures (Fri Jul 29 2011 - 13:32:12 CDT)
• ZDI-11-246: Sybase Adaptive Server Backup and Monitor Server NULL Write Remote Code Execution Vulnerability ZDI Disclosures (Fri Jul 29 2011 - 13:34:02 CDT)

Last message date: Fri Jul 29 2011 - 14:53:15 CDT
Archived on: Fri Jul 29 2011 - 14:53:15 CDT

233 messages sorted by: [ author ] [ thread ] [ subject ]