Mail Index

• Thread Index

• Linux Kernel 2.6.18/2.6.24/2.6.20/2.6.22/2.6.21 denial of service exploit
  • From: i9p
• Re: apache 1.x <=> 2.x suphp (suPHP_ConfigPath) bypass safe mode exploit&#8206;
  • From: ms5ote
• A tool to identify the MD5 certs on FF
  • From: Memisyazici, Aras
• [SECURITY] [DSA 1694-1] New xterm packages fix remote code execution
  • From: Florian Weimer
• [SECURITY] [DSA 1695-1] New Ruby packages fix denial of service
  • From: Florian Weimer
• Re: Linux Kernel 2.6.18/2.6.24/2.6.20/2.6.22/2.6.21 denial of service exploit
  • From: joris
• Top 5-ish Threats to Watch for in 2009
  • From: Pete Herzog
• PollPro 3.0 XSRF VuLn.
  • From: b4DchiLd
• Re: Linux Kernel 2.6.18/2.6.24/2.6.20/2.6.22/2.6.21 denial of service exploit
  • From: Eugene Teo
• Call for papers and trainers - SeacureIT 2009
  • From: Stefano Zanero
• SolucionWeb (main.php?id_area) Remote SQL injection Vulnerability
  • From: Ehsan_Hp200
• Google Chrome FTP PASV IP Malicious Port Scanning Vulnerability.
  • From: Aditya K Sood
• ANNOUNCE: RFIDIOt ver 01.v released - Jan 2009
  • From: Adam Laurie
• php 4.x php5.2.x all "show_source()" ,"highlight_file()" bypass&#8207;
  • From: l1un
• Destiny Media Player 1.61 (.lst File) Local Stack Overflow Exploit
  • From: crimson . loyd
• MSFXDC Metasploit eXploits Development Contest
  • From: Jerome Athias
• Walusoft TFTPServer2000 Version 3.6.1 Directory Traversal
  • From: vuln_research
• Re: php 4.x php5.2.x all "show_source()" ,"highlight_file()" bypass&#8207;
  • From: faze0r
• Re: php 4.x php5.2.x all "show_source()" ,"highlight_file()" bypass&#8207;
  • From: a
• [USN-702-1] Samba vulnerability
  • From: Marc Deslauriers
• [Suspected Spam]"Security Assessment of the Internet Protocol" & the IETF
  • From: Fernando Gont
• Re: php 4.x php5.2.x all "show_source()" ,"highlight_file()" bypass&#8207;
  • From: Slack Traq
• [USN-703-1] xterm vulnerability
  • From: Kees Cook
• [SECURITY] [DSA 1694-2] New xterm packages fix regression
  • From: Florian Weimer
• New WHID web hacking incidents
  • From: Ofer Shezaf
• VUPLAYER BufferOver flow POC
  • From: alphanix00
• [oCERT-2008-016] Multiple OpenSSL signature verification API misuses
  • From: Will Drewry
• Plunet BusinessManager failure in access controls and multiple stored cross site scripting
  • From: Matteo Ignaccolo
• CFP: COLSEC 2009
  • From: Patrice CLEMENTE
• Secunia Research: HP OpenView Network Node Manager Multiple Vulnerabilities
  • From: Secunia Research
• [USN-701-2] Thunderbird vulnerabilities
  • From: Jamie Strandboge
• PHP-Fusion Mod Members Bewerb Sql Injection
  • From: r3d . w0rm
• Cisco Security Advisory: Cisco Global Site Selector Appliances DNS Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Secunia Research: TSC2 Help Desk CTab ActiveX Control Buffer Overflow
  • From: Secunia Research
• [USN-701-1] Thunderbird vulnerabilities
  • From: Jamie Strandboge
• PHP-Fusion Mod E-Cart Sql Injection
  • From: r3d . w0rm
• Plunet BusinessManager failure in access controls and multiple stored cross site scripting
  • From: Matteo Ignaccolo
• [SECURITY] [DSA 1696-1] New icedove packages fix several vulnerabilities
  • From: Steffen Joeris
• [SECURITY] [DSA 1697-1] New iceape packages fix several vulnerabilities
  • From: Steffen Joeris
• FreeBSD Security Advisory FreeBSD-SA-09:02.openssl
  • From: FreeBSD Security Advisories
• FreeBSD Security Advisory FreeBSD-SA-09:01.lukemftpd
  • From: FreeBSD Security Advisories
• CA20090107-01: CA Service Metric Analysis and CA Service Level Management smmsnmpd Arbitrary Command Execution Vulnerability
  • From: Williams, James K
• Re: [Suspected Spam]"Security Assessment of the Internet Protocol" & the IETF
  • From: Jerome Athias
• [USN-704-1] OpenSSL vulnerability
  • From: Jamie Strandboge
• PHP-Fusion Mod vArcade 1.8 Sql Injection Vulnerability
  • From: irancrash
• [IBM Datapower XS40] Denial of Service
  • From: erik
• CORE-2008-1128: Openfire multiple vulnerabilities
  • From: CORE Security Technologies Advisories
• Re: [IBM Datapower XS40] Denial of Service
  • From: terrordactylspam
• LayerOne 2009 Call for Papers
  • From: LayerOne Call For Papers
• [USN-705-1] NTP vulnerability
  • From: Jamie Strandboge
• AST-2009-001: Information leak in IAX2 authentication
  • From: Asterisk Security Team
• [USN-706-1] Bind vulnerability
  • From: Jamie Strandboge
• [SECURITY] [DSA 1698-1] New gforge packages fix SQL injection
  • From: Thijs Kinkhorst
• ShakaCon 2009 Call for Papers and Trainers
  • From: Shakacon
• Re: Plunet BusinessManager failure in access controls and multiple stored cross site scripting
  • From: Stefano Zanero
• Re: Linux Kernel 2.6.18/2.6.24/2.6.20/2.6.22/2.6.21 denial of service exploit
  • From: Shaochun Wang
• Leak of SNMP write password via SNMP read community in NETGEAR WG102 - Prosafe 802.11g Access Point
  • From: mad-vaittes
• Re: Leak of SNMP write password via SNMP read community in NETGEAR WG102 - Prosafe 802.11g Access Point
  • From: Simon Richter
• Java Runtime UTF-8 Decoder Smuggling Vector
  • From: William A. Rowe, Jr.
• Re: Leak of SNMP write password via SNMP read community in NETGEAR WG102 - Prosafe 802.11g Access Point
  • From: Steve Shockley
• Re: Leak of SNMP write password via SNMP read community in NETGEAR WG102 - Prosafe 802.11g Access Point
  • From: Simon Richter
• [ MDVSA-2009:003 ] python
  • From: security
• [ MDVSA-2009:004 ] pam_mount
  • From: security
• [ MDVSA-2009:002 ] bind
  • From: security
• Re: Team SHATTER Security Advisory: Oracle Database Buffer Overflow in SYS.KUPF$FILE_INT.GET_FULL_FILENAME (DB11)
  • From: security curmudgeon
• Re: Team SHATTER Security Advisory: Oracle Database Buffer Overflow in SYS.KUPF$FILE_INT.GET_FULL_FILENAME (DB11)
  • From: Joxean Koret
• [ GLSA 200901-01 ] NDISwrapper: Arbitrary remote code execution
  • From: Robert Buchholz
• [ GLSA 200901-02 ] JHead: Multiple vulnerabilities
  • From: Robert Buchholz
• Comersus Shopping Cart <= v6 Remote User Pass Exploit
  • From: ajannhwt
• [ GLSA 200901-03 ] pdnsd: Denial of Service and cache poisoning
  • From: Robert Buchholz
• [ GLSA 200901-04 ] D-Bus: Denial of Service
  • From: Robert Buchholz
• [SECURITY] [DSA 1699-1] New zaptel packages fix privilege escalation
  • From: Florian Weimer
• [ GLSA 200901-05 ] Streamripper: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• [USN-707-1] CUPS vulnerabilities
  • From: Marc Deslauriers
• RE: Oracle Database Buffer Overflow in SYS.KUPF$FILE_INT.GET_FULL_FILENAME (Oracle CPU April 2008 DB11)
  • From: Integrigy Alerts
• Hack Aethra SV 1042 Adsl/Voip Router
  • From: SmoKe
• PHP Buffer Overflow(popen)
  • From: ew1zz
• [TKADV2009-001] Sun Solaris aio_suspend() Kernel Integer Overflow Vulnerability
  • From: Tobias Klein
• [BMSA-2009-01] Authentication bypass in Interspire Shopping Cart v4.0.1 and below
  • From: Nam Nguyen
• [ GLSA 200901-06 ] Tremulous: User-assisted execution of arbitrary code
  • From: Pierre-Yves Rofes
• [SECURITY] [DSA 1700-1] New lasso packages fix validation bypass
  • From: Moritz Muehlenhoff
• [ MDVSA-2009:005 ] xterm
  • From: security
• SyScan'09 Call For Paper - Shanghai, Hong Kong, Singapore, Taipei
  • From: organiser@xxxxxxxxxx
• Visuplay CMS SQL injection vulnerability
  • From: joseph . giron13
• [security bulletin] HPSBMA02392 SSRT071481 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Denial of Service (DoS)
  • From: security-alert
• [TKADV2009-002] Amarok Integer Overflow and Unchecked Allocation Vulnerabilities
  • From: Tobias Klein
• [SECURITY] [DSA 1701-1] New OpenSSL packages fix cryptographic weakness
  • From: Florian Weimer
• [ GLSA 200901-07 ] MPlayer: Multiple vulnerabilities
  • From: Tobias Heinlein
• [SECURITY] [DSA 1702-1] New ntp packages fix cryptographic weakness
  • From: Florian Weimer
• [SECURITY] [DSA 1703-1] New bind9 packages fix cryptographic weakness
  • From: Florian Weimer
• Secunia Research: DevIL "iGetHdrHeader()" Buffer Overflow Vulnerabilities
  • From: Secunia Research
• PDFBuilderX 2.2 Arbitrary File Overwrite
  • From: fakeperson7
• [ GLSA 200901-09 ] Adobe Reader: User-assisted execution of arbitrary code
  • From: Robert Buchholz
• [ GLSA 200901-08 ] Online-Bookmarks: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• [ MDVSA-2009:006 ] openoffice.org
  • From: security
• ANNOUNCE: DEFCON London - DC4420 - January meet - Thursday 15th Jan 2009
  • From: Major Malfunction
• rPSA-2009-0006-1 samba samba-client samba-server samba-swat
  • From: rPath Update Announcements
• iDefense Security Advisory 01.13.09: RIM BlackBerry Enterprise Server Attachment Service PDF Distiller 'symWidths' Heap Overflow Vulnerability
  • From: iDefense Labs
• ZDI-09-001: Microsoft SMB NT Trans Request Parsing Remote Code Execution Vulnerability
  • From: zdi-disclosures
• ZDI-09-002: Microsoft SMB NT Trans2 Request Parsing Remote Code Execution Vulnerability
  • From: zdi-disclosures
• rPSA-2009-0005-1 git gitweb
  • From: rPath Update Announcements
• rPSA-2009-0007-1 pam_krb5
  • From: rPath Update Announcements
• [USN-708-1] HPLIP vulnerability
  • From: Marc Deslauriers
• iDefense Security Advisory 01.13.09: RIM BlackBerry Enterprise Server Attachment Service PDF Distiller 'bitmaps' Heap Overflow Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 01.13.09: RIM BlackBerry Enterprise Server Attachment Service PDF Distiller Uninitialized Memory Vulnerability
  • From: iDefense Labs
• FreeBSD Security Advisory FreeBSD-SA-09:04.bind
  • From: FreeBSD Security Advisories
• Oracle CPU Jan 2009 Advisories.
  • From: Alexandr Polyakov
• [ MDVSA-2009:009 ] kvm
  • From: security
• Cisco Security Advisory: Cisco ONS Platform Crafted Packet Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• [ MDVSA-2009:010 ] qemu
  • From: security
• iDefense Security Advisory 01.13.09: Oracle Secure Backup Administration Server login.php Command Injection Vulnerability
  • From: iDefense Labs
• Trigger Abuse of MDSYS.SDO_TOPO_DROP_FTBL in Oracle 10g R1 and R2
  • From: David Litchfield
• Call for Papers: Cyber Warfare
  • From: kgconference
• Cisco Security Advisory: IronPort Encryption Appliance / PostX and PXE Encryption Vulnerabilities
  • From: Cisco Systems Product Security Incident Response Team
• OTSTurntables 1.00.027 (.ofl) Local Stack Overflow Exploit
  • From: crimson . loyd
• [ MDVSA-2009:007 ] ntp
  • From: security
• RE: DoS code for Cisco VLAN Trunking Protocol Vulnerability
  • From: Paul Oxman (poxman)
• Cisco Unified IP Phone 7960G and 7940G (SIP) RTP Header Vulnerability
  • From: Laurent Butti
• phpList <= 2.10.8 Local File inclusion
  • From: admin
• WowWee Rovio - Insufficient Access Controls - Covert Audio/Video Snooping Possible
  • From: Brian Dowling
• iDefense Security Advisory 01.13.09: Oracle Database 10g R2 Summary Advisor Arbitrary File Rewrite Vulnerability
  • From: iDefense Labs
• DoS code for Cisco VLAN Trunking Protocol Vulnerability
  • From: showrun . lee
• iDefense Security Advisory 01.13.09: Oracle Secure Backup Administration Server login.php Command Injection Vulnerability
  • From: iDefense Labs
• [ MDVSA-2009:008 ] qemu
  • From: security
• Cisco Security Response: Cisco IOS Cross-Site Scripting Vulnerabilities
  • From: Cisco Systems Product Security Incident Response Team
• PR08-19: XSS on Cisco IOS HTTP Server
  • From: ProCheckUp Research
• [SECURITY] [DSA 1704-1] New xulrunner packages fix several vulnerabilities
  • From: Steffen Joeris
• ZDI-09-003: Oracle Secure Backup exec_qr() Command Injection Vulnerability
  • From: zdi-disclosures
• ZDI-09-004: Oracle TimesTen evtdump Remote Format String Vulnerability
  • From: zdi-disclosures
• Oracle Secure Backup 10g Remote Code Execution
  • From: Joxean Koret
• Oracle TimesTen Remote Format String
  • From: Joxean Koret
• [ GLSA 200901-10 ] GnuTLS: Certificate validation error
  • From: Pierre-Yves Rofes
• [ GLSA 200901-11 ] Avahi: Denial of Service
  • From: Pierre-Yves Rofes
• TFTPUtil GUI TFTP Directory Traversal
  • From: vuln_research
• TFTPUtil GUI TFTP Server Denial of Service Vulnerability
  • From: vuln_research
• Windows NTP Time Server Syslog Monitor 1.0.000 Denial of Service Vulnerability
  • From: vuln_research
• Re: Assurent VR - Oracle BEA WebLogic Server Apache Connector Buffer Overflow
  • From: security curmudgeon
• [ MDVSA-2009:011 ] virtualbox
  • From: security
• Re: iDefense Security Advisory 01.13.09: Oracle Secure Backup Administration Server login.php Command Injection Vulnerability
  • From: security curmudgeon
• Oracle Secure Backup Multiple Denial Of Service vulnerabilities
  • From: noreply-secresearch@xxxxxxxxxxxx
• Oracle Secure Backup's observiced.exe Denial Of Service vulnerability
  • From: noreply-secresearch@xxxxxxxxxxxx
• Oracle Secure Backup NDMP_CONECT_CLIENT_AUTH Command Buffer Overflow Vulnerability
  • From: noreply-secresearch@xxxxxxxxxxxx
• ANNOUNCE: apache_1.3.41+ssl_1.60 released
  • From: Adam Laurie
• [waraxe-2009-SA#070] - Multiple Vulnerabilities in MKPortal <= 1.2.1
  • From: come2waraxe
• [SECURITY] [DSA 1705-1] New netatalk packages fix arbitrary code execution
  • From: Nico Golde
• [USN-709-1] tar vulnerability
  • From: Jamie Strandboge
• [SECURITY] [DSA 1707-1] New iceweasel packages fix several vulnerabilities
  • From: Steffen Joeris
• [ MDVSA-2009:012 ] mozilla-thunderbird
  • From: security
• [SECURITY] [DSA 1706-1] New amarok packages fix arbitrary code execution
  • From: Moritz Muehlenhoff
• [USN-700-2] Perl regression
  • From: Kees Cook
• Syslserve 1.058 Denial of Service Vulnerability
  • From: vuln_research
• [ MDVSA-2009:014 ] mplayer
  • From: security
• [ MDVSA-2009:015 ] ffmpeg
  • From: security
• DMXReady Blog Manager (SQL/XSS)
  • From: pouya . s3rver
• [ MDVSA-2009:013 ] mplayer
  • From: security
• Active Bids
  • From: pouya . s3rver
• [ MDVSA-2009:016 ] xen
  • From: security
• Announce: RSBAC 1.4.0 released
  • From: Amon Ott
• [ MDVSA-2009:017 ] kdebase
  • From: security
• Excel Viewer OCX 3.1/3.2 Denial of Service PoC
  • From: alphanix00
• Sagem router f@st 2404 remote reset poc
  • From: alphanix00
• FBI XSS Vulnerability
  • From: sohrab_behroozian
• [ MDVSA-2009:018 ] tomcat5
  • From: security
• Ralinktech wireless cards drivers vulnerability
  • From: springsec
• 53KF Web IM 2009 Cross-Site Scripting Vulnerabilities
  • From: Heart
• [Wintercore Research ] Fujitsu SystemcastWizard Lite PXEService Remote Buffer Overflow.
  • From: vulns
• Advisory: Oracle EBusiness Suite Sensitive Information Disclosure Vulnerability
  • From: Aditya K Sood
• [ GLSA 200901-12 ] noip-updater: Execution of arbitrary code
  • From: Pierre-Yves Rofes
• Web Hacking Incidents update for Jan 19th
  • From: Ofer Shezaf
• [ MDVSA-2009:019 ] imlib2
  • From: security
• [SECURITY] [DSA 1708-1] New Git packages fix remote code execution
  • From: Florian Weimer
• Secunia Research: EasyHDR Pro Radiance RGBE Buffer Overflow
  • From: Secunia Research
• Cybershade CMS Remote File include vulnerability
  • From: security
• [ANNOUNCE] Apache Jackrabbit 1.5.2 released
  • From: Jukka Zitting
• Re: Remote Cisco IOS FTP exploit
  • From: Russell L. Smoak
• MoinMoin Wiki Engine XSS Vulnerability
  • From: swhite
• Oracle Containers For Java Directory Traversal (OC4J) Oracle Application Server 10g (10.1.3.1.0) Oracle HTTP Server
  • From: Eduardo Vela
• Secunia Research: Trend Micro Network Security Component Vulnerabilities
  • From: Secunia Research
• [security bulletin] HPSBMA02400 SSRT080144 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code
  • From: security-alert
• Microsoft Bluetooth Stack OBEX Directory Traversal
  • From: alberto . morenot
• Secunia Research: OpenSG Radiance RGBE Buffer Overflow Vulnerability
  • From: Secunia Research
• Re: Remote Cisco IOS FTP exploit
  • From: security curmudgeon
• Videos from HITBSecConf2008 - Malaysia released!
  • From: Praburaajan
• rPSA-2009-0011-1 perl
  • From: rPath Update Announcements
• rPSA-2009-0009-1 bind bind-utils
  • From: rPath Update Announcements
• rPSA-2009-0010-1 ntp ntp-utils
  • From: rPath Update Announcements
• rPSA-2009-0008-1 openssl
  • From: rPath Update Announcements
• [ GLSA 200901-13 ] Pidgin: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• rPSA-2009-0014-1 hplip
  • From: rPath Update Announcements
• [SECURITY] [DSA 1693-2] New phppgadmin packages fix regression
  • From: Thijs Kinkhorst
• [SECURITY] [DSA 1709-1] New shadow packages fix privilege escalation
  • From: Thijs Kinkhorst
• CfP: 16th ACM Conference on Computer and Communications Security (CCS) 2009
  • From: Christopher Kruegel
• [DSECRG-09-004] AXIS 70U Network Document Server - Privilege Escalation and XSS
  • From: Digital Security Research Group
• Cisco Security Advisory: Cisco Security Manager Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco Unified Communications Manager CAPF Denial of Service Vulnerability`
  • From: Cisco Systems Product Security Incident Response Team
• Joomla component beamospetition 1.0.12 Sql Injection
  • From: vds_s
• Re: [Full-disclosure] Oracle Containers For Java Directory Traversal (OC4J) Oracle Application Server 10g (10.1.3.1.0) Oracle HTTP Server
  • From: Mark Thomas
• Digital Security opens a site of its research center DSec Research Group
  • From: Digital Security Research Group
• [IMF 2009] Call for Papers
  • From: Oliver Goebel
• [ GLSA 200901-14 ] Scilab: Insecure temporary file usage
  • From: Pierre-Yves Rofes
• [ MDVSA-2009:024 ] php4
  • From: security
• [ MDVSA-2009:020 ] xine-lib
  • From: security
• ZDI-09-006: Apple QuickTime AVI Header nBlockAlign Heap Corruption Vulnerability
  • From: zdi-disclosures
• Asp-project Cookie Handling
  • From: r3d . w0rm
• [ MDVSA-2009:022 ] php
  • From: security
• ZDI-09-008: Apple QuickTime STSD JPEG Atom Heap Corruption Vulnerability
  • From: zdi-disclosures
• [ GLSA 200901-15 ] Net-SNMP: Denial of Service
  • From: Pierre-Yves Rofes
• VUPlayer 2.49 .ASX local universal BOF exploit
  • From: maroc-anti-connexion
• [ MDVSA-2009:023 ] php
  • From: security
• ZDI-09-005: Apple QuickTime VR Track Header Atom Heap Corruption Vulnerability
  • From: zdi-disclosures
• [ MDVSA-2009:021 ] php
  • From: security
• ZDI-09-007: Apple QuickTime Cinepak Codec MDAT Heap Corruption Vulnerability
  • From: zdi-disclosures
• [TKADV2009-003] GStreamer Heap Overflow and Array Index out of Bounds Vulnerabilities
  • From: Tobias Klein
• [ MDVSA-2009:025 ] pidgin
  • From: security
• PHP-Nuke 8.0 Downloads Blind Sql Injection
  • From: r3d . w0rm
• Secunia Research: AXIS Camera Control "image_pan_tilt" Property Buffer Overflow
  • From: Secunia Research
• BBSxp Xss vulnerability
  • From: arashps0
• [ MDVSA-2009:026 ] phpMyAdmin
  • From: security
• ZDI-09-009: EMC AutoStart Backbone Engine Trusted Pointer Code Execution Vulnerability
  • From: zdi-disclosures
• Oblog XSS valnerability
  • From: arash . setayeshi
• Problems with syscall filtering technologies on Linux
  • From: Chris Evans
• VUplayer (.wax file) local buffer overflow crash exploit
  • From: storms0uth
• [HACKATTACK Advisory 25012009]ConPresso CMS 4.07 - Session Fixation, XFS, XSS
  • From: office
• Browser3D 3.5 (.sfs File) Local Stack Overflow Exploit (c)
  • From: maroc-anti-connexion
• Lootan(kedor) Sql Injection vulnerability
  • From: arash . setayeshi
• SonyEricsson WAP Push Denial of Service
  • From: Mobile Security Lab
• Nokia Multimedia Player (.AVI File) Null Dereference Pointer Exploit
  • From: alphanix00
• LDF Sql injection vulnerability
  • From: arash . setayeshi
• /bin/login DoS remains after DSA-1709
  • From: Paul Szabo
• Re: ZDI-09-007: Apple QuickTime Cinepak Codec MDAT Heap Corruption Vulnerability
  • From: security curmudgeon
• MediaMonkey 3.0.6 (.m3u file) Local Buffer Overflow PoC
  • From: alphanix00
• Re: [Full-disclosure] ZDI-09-007: Apple QuickTime Cinepak Codec MDAT Heap Corruption Vulnerability
  • From: Juha-Matti Laurio
• Browse3d (.sfs file) Local Stack Overflow Exploit
  • From: alphanix00
• Benchmarking attacks and major security weakness on all recent Windows versions up to Windows 200
  • From: thadeum
• Re: munky-bliki lfi
  • From: security curmudgeon
• [ MDVSA-2009:027 ] cups
  • From: security
• EleCard MPEG PLAYER (.m3u file) Local Stack Overflow Exploit
  • From: alphanix00
• CA20090123-01: Cohesion Tomcat Multiple Vulnerabilities
  • From: Williams, James K
• Re: Oblog XSS valnerability
  • From: dan . crowley
• WB News v2.0.X Remote File include ..
  • From: security
• [SECURITY] [DSA 1710-1] New ganglia-monitor-core packages fix remote code execution
  • From: Steffen Joeris
• [SECURITY] [DSA 1711-1] New TYPO3 packages fix remote code execution
  • From: Nico Golde
• [USN-710-1] xine-lib vulnerabilities
  • From: Marc Deslauriers
• [USN-711-1] KTorrent vulnerabilities
  • From: Marc Deslauriers
• Re: FUD Forum < 2.7.1 PHP code injection vurnelability
  • From: riklaunim
• NewsCMSlite Insecure Cookie Handling
  • From: admin
• [USN-712-1] Vim vulnerabilities
  • From: Marc Deslauriers
• Secunia Research: OpenX Multiple Vulnerabilities
  • From: Secunia Research
• OpenX 2.6.3 - Local File Inclusion
  • From: admin
• CA20090123-01: Cohesion Tomcat Multiple Vulnerabilities (Updated - v1.1)
  • From: Williams, James K
• JetAudio Basic 7.0.3 BufferOverFlow PoC
  • From: alphanix00
• SAP NetWeaver XSS Vulnerability
  • From: Martin Suess
• Total video player 1.3.7 local buffer overflow universal exploit
  • From: maroc-anti-connexion
• CA20090126-01: CA Anti-Virus Engine Detection Evasion Multiple Vulnerabilities
  • From: Williams, James K
• Max.Blog <= 1.0.6 (show_post.php) SQL Injection Vulnerability
  • From: Salvatore \"drosophila\" Fresta
• [ MDVSA-2009:030 ] amarok
  • From: security
• Max.Blog <= 1.0.6 (submit_post.php) SQL Injection Vulnerability
  • From: Salvatore \"drosophila\" Fresta
• Max.Blog <= 1.0.6 (offline_auth.php) Offline Authentication Bypass
  • From: Salvatore \"drosophila\" Fresta
• [USN-713-1] openjdk-6 vulnerabilities
  • From: Kees Cook
• CONFidence 2009, Final CfP
  • From: Andrzej Targosz
• Web Hacking Incidents update for Jan 28th
  • From: Ofer Shezaf
• Internet explorer 7.0 stack overflow
  • From: jplopezy
• Re: DoS attacks on MIME-capable software via complex MIME emails
  • From: Dave English
• CORE-2008-1211: Amaya web editor XML and HTML parser vulnerabilities
  • From: Core Security Technologies Advisories
• Advisory: Google Chrome 1.0.154.43 ClickJacking Vulnerability.
  • From: Aditya K Sood
• [TKADV2009-004] FFmpeg Type Conversion Vulnerability
  • From: Tobias Klein
• [SECURITY] [DSA 1712-1] New rt2400 packages fix arbitrary code execution
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 1713-1] New rt2500 packages fix arbitrary code execution
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 1714-1] New rt2570 packages fix arbitrary code execution
  • From: Moritz Muehlenhoff
• dBpowerAMP Audio Player v2 ( .pls file) LoCaL BufferOverFlow Exploit
  • From: alphanix00
• [security bulletin] HPSBMP02404 SSRT090014 rev.1 - MPE/iX Running BIND/iX, Remote DNS Cache Poisoning
  • From: security-alert
• Re: Internet explorer 7.0 stack overflow
  • From: jplopezy
• [SECURITY] [DSA 1715-1] New moin packages fix insufficient input sanitising
  • From: Devin Carraway
• [security bulletin] HPSBMA02403 SSRT090007 rev.1 - HP Select Access Running on HP-UX, Linux, Solaris, and Windows, Remote Cross Site Scripting (XSS)
  • From: security-alert
• Oracle Forms Cross site Scripting in (iFcgi60.exe / f60servlet)
  • From: DoZ
• Re: Advisory: Google Chrome 1.0.154.43 ClickJacking Vulnerability.
  • From: Michal Zalewski
• Oracle Application Server 10g Cross Site Scripting Vulnerability
  • From: DoZ
• Re: Secunia Research: OpenX Multiple Vulnerabilities
  • From: scott . switzer
• Motorola Wimax Modem CPEi300 Multiple Vulnerabilities
  • From: usman
• rPSA-2009-0021-1 sudo
  • From: rPath Update Announcements
• PerlSoft Guestbook v1.7b Bruteforcer + RCE!
  • From: Perforin
• [SECURITY] [DSA 1704-2] Updated netatalk packages fix denial of service
  • From: Nico Golde
• Re: XSS vulnerabilty in ASP.Net [with details]
  • From: m . rajeshpawar
• Bugs Online v2.14 Sql Injection
  • From: r3d . w0rm
• CVE-2008-4990 Enomaly ECP/Enomalism: Insecure temporary file creation vulnerabilities
  • From: Sam Johnston
• Re[2]: Internet explorer 7.0 stack overflow
  • From: Vladimir '3APA3A' Dubrovin
• [OPENX-SA-2009-001] OpenX 2.4.10 and 2.6.4 fix multiple vulnerabilities
  • From: Matteo Beccati
• [USN-715-1] Linux kernel vulnerabilities
  • From: Kees Cook
• ANNOUNCE - RFIDIOt 0.1w released - January 2009
  • From: Adam Laurie
• [USN-716-1] MoinMoin vulnerabilities
  • From: Jamie Strandboge
• PR08-21: Cross-site Request Forgery (CSRF) on Novell GroupWise WebAccess allows email theft and other attacks
  • From: ProCheckUp Research
• PR08-22: Persistent XSS on Novell GroupWise WebAccess
  • From: ProCheckUp Research
• PR08-23: XSS on Novell GroupWise WebAccess
  • From: ProCheckUp Research
• Re: Re: Google Chrome Browser (ChromeHTML://) remote parameter injection POC
  • From: come2waraxe
• [SECURITY] [DSA 1716-1] New vnc4 packages fix remote code execution
  • From: Florian Weimer
• BruCON call for papers
  • From: Filip Waeytens
• [ MDVSA-2009:031 ] avahi
  • From: security
• VMSA-2009-0001 ESX patches address an issue loading corrupt virtualdisks and update Service Console packages
  • From: VMware Security Team
• Secunia Research: Free Download Manager Torrent Parsing Buffer Overflows
  • From: Secunia Research
• Secunia Research: Free Download Manager Remote Control Server Buffer Overflow
  • From: Secunia Research
• [ MDVSA-2009:032 ] kernel
  • From: security
• [Wintercore Research WS02-0209] Kaspersky Products Klim5.sys local privilege escalation
  • From: vulns
• ZDI-09-010: Novell Netware Groupwise GWIA RCPT Command Buffer Overflow Vulnerability
  • From: zdi-disclosures
• Hex Workshop v6 "ColorMap files .cmap" Invalid Memory Reference crash POC
  • From: xhakerman2006
• Security Advisory for Bugzilla 3.2.1, 3.0.7, and 3.3.2
  • From: mkanat
• Web Hacking Incidents update for Feb 3rd
  • From: Ofer Shezaf
• NaviCopa webserver 3.01 Multiple Vulnerabilities
  • From: ew1zz
• SMF 1.1.7 Persistent XSS (requires permision to edit censor)
  • From: Eduardo Vela
• Nokia Multimedia Player v1.1 .m3u Heap Overflow PoC exploit
  • From: 0in . email
• [security bulletin] HPSBUX02407 SSRT080107 rev.1 - HP-UX Running IPv6, Remote Denial of Service (DoS) and Unauthorized Access
  • From: security-alert
• Call for papers and trainers - note extended deadline - SeacureIT 2009
  • From: Stefano Zanero
• Team SHATTER Security Advisory: Oracle Database Buffer Overflow in SYS.OLAPIMPL_T.ODCITABLESTART
  • From: Shatter
• Team SHATTER Security Advisory: SQL Injection in Oracle Enterprise Manager (TARGET Parameter)
  • From: Shatter
• CORE-2008-1009 - VNC Multiple Integer Overflows
  • From: CORE Security Technologies Advisories
• Euphonics Audio Player v1.0 (.pls) Local BOF POC
  • From: darkb0x97
• Squid Proxy Cache Denial of Service in request handling
  • From: Amos Jeffries
• [security bulletin] HPSBUX02401 SSRT090005 rev.1 - HP-UX Running Apache Web Server Suite, Remote Denial of Service (DoS), Cross-site Scripting (XSS), Execution of Arbitrary Code, Cross-Site Request Forgery (CSRF)
  • From: security-alert
• [ MDVSA-2009:033 ] sudo
  • From: security
• QIP 2005 Denial of Service Vulnerability
  • From: ss_contacts
• DDIVRT-2008-19 HP JetDirect Web Administration Directory Traversal
  • From: vulnerabilityresearch
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco Wireless LAN Controllers
  • From: Cisco Systems Product Security Incident Response Team
• rgboard v4 (07.07.27) Multiple Vulnerability
  • From: make0day
• metabbs 0.11 Change admin password vulnerability
  • From: make0day
• LCPlayer (.qt file) EOP change PoC (app crash)
  • From: darkb0x97
• StreamDown v6.4.3 Local Buffer Overflow PoC
  • From: todor . donev
• Re: DMXReady Blog Manager (SQL/XSS)
  • From: support
• [Tool] sqlmap 0.6.4 released
  • From: Bernardo Damele A. G.
• Cisco IOS XSS/CSRF Vulnerability
  • From: azask2
• [SVRT-02-09] FeedDemon (ver<=2.7) Buffer Overflow Vulnerability
  • From: SVRT-Bkis
• [SECURITY] [DSA 1717-1] New devil packages fix buffer overflow
  • From: Devin Carraway
• Re: SMF 1.1.7 Persistent XSS (requires permision to edit censor)
  • From: metallica48423
• Nokia N95-8 browser denial of service
  • From: jplopezy
• C4 SCADA Security Advisory - AREVA e-terrahabitat / e-terraplatform Multiple Vulnerabilities
  • From: Eyal Udassin
• dBpowerAMP Audio Player local buffer overflow exploit
  • From: maroc-anti-connexion
• Re: Nokia N95-8 browser denial of service
  • From: Thierry Zoller
• Speaking line up confirmed! uCon Security Conference 2009 - Recife, Brazil
  • From: uCon Security Conference
• SFX-SQLi: A new SQL injection technique for MSSQL (dumps a table in one request!)
  • From: Daniel Kachakil
• [security bulletin] HPSBPI02398 SSRT080166 rev.1 - Certain HP LaserJet Printers, HP Color LaserJet Printers, and HP Digital Senders, Remote Unauthorized Access to Files
  • From: security-alert
• RealNetworks RealPlayer IVR File Processing Multiple Code Execute Vulnerabilities
  • From: noreply-secresearch@xxxxxxxxxxxx
• [security bulletin] HPSBMA02406 SSRT080100 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code
  • From: security-alert
• [security bulletin] HPSBUX02408 SSRT080182 rev.1 - HP-UX Running NFS, Local Denial of Service (DoS)
  • From: security-alert
• Re: SFX-SQLi: A new SQL injection technique for MSSQL (dumps a table in one request!)
  • From: Razi Shaban
• Vulnerable: Ilch CMS
  • From: Gizmore
• iDefense Security Advisory 02.06.09: HP Network Node Manager Multiple Command Injection Vulnerabilities
  • From: iDefense Labs
• CamFrog Password Disclosure Vulnerability
  • From: zigmatn
• iDefense Security Advisory 02.06.09: HP Network Node Manager Multiple Information Disclosure Vulnerabilities
  • From: iDefense Labs
• [ GLSA 200902-01 ] sudo: Privilege escalation
  • From: Tobias Heinlein
• [oCERT-2009-002] OpenCORE insufficient bounds checking during MP3 decoding
  • From: Will Drewry
• [SECURITY] [DSA 1718-1] New boinc packages fix validation bypass
  • From: Moritz Muehlenhoff
• Re: SFX-SQLi: A new SQL injection technique for MSSQL (dumps a table in one request!)
  • From: Roman Medina-Heigl Hernandez
• PHP filesystem attack vectors
  • From: ascii
• [BMSA-2009-02] XML injection in PyBlosxom
  • From: Nam Nguyen
• Re: [Full-disclosure] PHP filesystem attack vectors
  • From: Stefan Esser
• Re: SFX-SQLi: A new SQL injection technique for MSSQL (dumps a table in one request!)
  • From: Razi Shaban
• rooting your own phone: android security
  • From: Pavel Machek
• LFI in Drupal CMS
  • From: rasool . nasr
• Trend micro - IWSVA/IWSS - Authorization module password leak
  • From: david . vorel
• Nokia N95-8 JPG crash
  • From: jplopezy
• 3Com OfficeConnect Wireless Cable/DSL Router Authentication Bypass
  • From: luca . caretton
• ZeroShell <= 1.0beta11 Remote Code Execution
  • From: Luca Carettoni
• Re: SFX-SQLi: A new SQL injection technique for MSSQL (dumps a table in one request!)
  • From: Amit Klein
• London DEFCON DC4420 - February 2009 Meet - Thursday 12th
  • From: Major Malfunction
• Remote Authentication Bypass - Swann DVR4 SecuraNet (possibly DVR9 as well)
  • From: tez
• [ECHO_ADV_102$2009] BusinessSpace <= 1.2 (id) Remote SQL Injection Vulnerability
  • From: adv
• Re: Nokia N95-8 JPG crash
  • From: Dmitry Yu. Bolkhovityanov
• [SECURITY] [DSA 1719-1] New gnutls13 packages fix certificate validation
  • From: Florian Weimer
• Another SQL injection in ProFTPd with mod_mysql (probably postgres as well)
  • From: gat3way
• Craft Silicon Banking@Home SQL Injection
  • From: Francesco Bianchino
• [Suspected Spam][Fwd: Re: Novell-QuickFinder Server Xss & Java remote execution Code]
  • From: ivan . sanchez
• Web Hacking Incidents update for Feb 10th
  • From: Ofer Shezaf
• Re: PHP filesystem attack vectors
  • From: cxib
• Nokia Phoenix Service Software 2008.04.007.32837 overflow POC
  • From: murderskill
• [ MDVSA-2009:034 ] squid
  • From: security
• Re: Another SQL injection in ProFTPd with mod_mysql (probably postgres as well)
  • From: Daniel Mayer
• [SECURITY] [DSA 1720-1] New TYPO3 packages fix several vulnerabilities
  • From: Nico Golde
• ZDI-09-012: Microsoft Internet Explorer Malformed CSS Memory Corruption
  • From: ZDI Disclosures
• ZDI-09-011: Microsoft Internet Explorer CFunctionPointer Memory Corruption Vulnerability
  • From: ZDI Disclosures
• [USN-717-1] Firefox and Xulrunner vulnerabilities
  • From: Jamie Strandboge
• ProFTPd with mod_mysql Authentication Bypass Exploit
  • From: alphanix00
• Re: Re: Another SQL injection in ProFTPd with mod_mysql (probably postgres as well)
  • From: gat3way
• [ MDVSA-2009:035 ] gstreamer0.10-plugins-good
  • From: security
• Local vulnerability in suexec + FastCGI + PHP configurations
  • From: security . 432
• Re: Another SQL injection in ProFTPd with mod_mysql (probably postgres as well)
  • From: Shino
• Full Path Disclosure In Photolibrary 1.009
  • From: XiaShing
• [USN-717-3] Firefox vulnerabilities
  • From: Jamie Strandboge
• [security bulletin] HPSBMA02331 SSRT080000 rev.3 - HP-UX running WBEM Services, Remote Execution of Arbitrary Code, Gain Extended Privileges
  • From: security-alert
• [USN-717-2] Firefox vulnerabilities
  • From: Jamie Strandboge
• Web Hacking Incidents update for Feb 10th (Links corrected)
  • From: Ofer Shezaf
• Directory traversal vulnerability in Geovision Digital Video Surveillance System (geohttpserver)
  • From: dejan . levaja
• Re: Another SQL injection in ProFTPd with mod_mysql (probably postgres as well)
  • From: Sergio Aguayo
• [SECURITY] [DSA 1722-1] New libpam-heimdal packages fix local privilege escalation
  • From: Moritz Muehlenhoff
• pam-krb5 security advisory (3.12 and earlier)
  • From: Russ Allbery
• Re: pam-krb5 security advisory (3.12 and earlier)
  • From: Tim Skirvin
• BackTrack 4 Beta Released
  • From: Mati Aharoni
• Re: Another SQL injection in ProFTPd with mod_mysql (probably postgres as well)
  • From: Edward Bjarte Fjellskål
• [SECURITY] [DSA 1721-1] New libpam-krb5 packages fix local privilege escalation
  • From: Moritz Muehlenhoff
• SEP(Symantec) Bug
  • From: Sandeep Cheema
• Re: LFI in Drupal CMS
  • From: security
• Full Path Disclosure In Photolibrary 1.009(Update)
  • From: XiaShing
• Denial of Service using Partial GET Request in Mozilla Firefox 3.06
  • From: XiaShing
• RE: SEP(Symantec) Bug
  • From: James C. Slora Jr.
• [ MDVSA-2009:036 ] python
  • From: security
• [USN-719-1] pam-krb5 vulnerabilities
  • From: Marc Deslauriers
• Re: Denial of Service using Partial GET Request in Mozilla Firefox 3.06
  • From: Rolphin
• [USN-720-1] PHP vulnerabilities
  • From: Marc Deslauriers
• [ GLSA 200902-03 ] Valgrind: Untrusted search path
  • From: Robert Buchholz
• [ GLSA 200902-02 ] OpenSSL: Certificate validation error
  • From: Robert Buchholz
• Re: Denial of Service using Partial GET Request in Mozilla Firefox 3.06
  • From: XiaShing
• [ GLSA 200902-04 ] xterm: User-assisted arbitrary commands execution
  • From: Pierre-Yves Rofes
• Re: RE: SEP(Symantec) Bug
  • From: steve . fowler
• Re: Re: Denial of Service using Partial GET Request in Mozilla Firefox 3.06
  • From: XiaShing
• Nokia N95 browser "setAttributeNode" method crash
  • From: jplopezy
• Enomaly ECP/Enomalism: Silent update remote command execution vulnerability
  • From: Sam Johnston
• [security bulletin] HPSBUX02401 SSRT090005 rev.2 - HP-UX Running Apache Web Server Suite, Remote Denial of Service (DoS), Cross-site Scripting (XSS), Execution of Arbitrary Code, Cross-Site Request Forgery (CSRF)
  • From: security-alert
• Re: SEP(Symantec) Bug
  • From: Sandeep Cheema
• Security Assessment of the Transmission Control Protocol (TCP)
  • From: Fernando Gont
• SEPKILL /im SMC.EXE /f
  • From: Sandeep Cheema
• RE: SEP(Symantec) Bug
  • From: Jon Kloske
• Re: SEPKILL /im SMC.EXE /f
  • From: Sandeep Cheema
• Re: SEPKILL /im SMC.EXE /f
  • From: Sandeep Cheema
• Cross-site scripting in Samizdat 0.6.1
  • From: Dmitry Borodaenko
• Re: SEPKILL /im SMC.EXE /f
  • From: Sandeep Cheema
• Re: Enomaly ECP/Enomalism: Silent update remote command execution vulnerability
  • From: sc0ttbeardsley
• Re: SEPKILL /im SMC.EXE /f
  • From: Sandeep Cheema
• RE: SEPKILL /im SMC.EXE /f
  • From: David Calabro
• ACM CCS '09: Call for Workshop Proposals
  • From: Christopher Kruegel
• Re: Local vulnerability in suexec + FastCGI + PHP configurations
  • From: Martijn Vernooij
• RainbowCrack 1.3 is released, the new generation of time-memory tradeoff hash cracker
  • From: shuanglei
• cryptsetup can't destroy last key of a LUKS partition under Ubuntu/Debian
  • From: Pierre Dinh-van
• Re: Denial of Service using Partial GET Request in Mozilla Firefox 3.06
  • From: Mike Duncan
• [SECURITY] [DSA 1724-1] New moodle packages fix several vulnerabilities
  • From: Martin Schulze
• Re: Enomaly ECP/Enomalism: Silent update remote command execution vulnerability
  • From: lars
• Re: SEP(Symantec) Bug
  • From: secure
• [security bulletin] HPSBPI02398 SSRT080166 rev.2 - Certain HP LaserJet Printers, HP Color LaserJet Printers, and HP Digital Senders, Remote Unauthorized Access to Files
  • From: security-alert
• Enomaly ECP/Enomalism: Multiple vulnerabilities in enomalism2.sh (redux)
  • From: Sam Johnston
• [SECURITY] [DSA 1725-1] New websvn packages fix information leak
  • From: Thijs Kinkhorst
• [UPRSN] Ubuntu Privacy Remix 8.04r3 fixes security issues
  • From: Ubuntu Privacy Remix Team
• [waraxe-2009-SA#072] - Multiple Vulnerabilities in RavenNuke 2.3.0
  • From: come2waraxe
• [ MDVSA-2009:037 ] bind
  • From: security
• RFI Bug
  • From: Dr . linux
• [ MDVSA-2009:038 ] blender
  • From: security
• [ MDVSA-2009:039 ] gedit
  • From: security
• FreeBSD Security Advisory FreeBSD-SA-09:05.telnetd
  • From: FreeBSD Security Advisories
• [ MDVSA-2009:040 ] dia
  • From: security
• Re: RFI Bug
  • From: Francesco Laurita
• [security bulletin] HPSBMA02406 SSRT080100 rev.2 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code, Unauthorized Access to Data
  • From: security-alert
• [ MDVSA-2009:041 ] jhead
  • From: security
• [USN-721-1] fglrx-installer vulnerability
  • From: Kees Cook
• [USN-722-1] sudo vulnerability
  • From: Kees Cook
• Re: SyScan'09 Call For Paper - Shanghai, Hong Kong, Singapore, Taipei
  • From: organiser@xxxxxxxxxx
• Re: LFI in Drupal CMS
  • From: security
• DDIVRT-2009-20 NetMRI Login Application Cross-site Scripting Vulnerability
  • From: ddvulnalert
• RE: hello bug in windows live messenger
  • From: rasod korad
• [ MDVSA-2009:042 ] samba
  • From: security
• [USN-723-1] Git vulnerabilities
  • From: Marc Deslauriers
• Re: [Full-disclosure] Joomla Component com_joomradio SQL Injection
  • From: Packet Storm
• Weekly Web Hacking Incidents update for Feb 19th
  • From: Ofer Shezaf
• Apache directory traversal on shared hosting environment.
  • From: davec
• Re: SEPKILL /im SMC.EXE /f
  • From: Sandeep Cheema
• Re: Apache directory traversal on shared hosting environment.
  • From: dave
• Re: Apache directory traversal on shared hosting environment.
  • From: Ben M. Thomas
• [ MDVA-2009:027 ] kernel
  • From: security
• Re: Team SHATTER Security Advisory: Oracle Database Buffer Overflow in SYS.OLAPIMPL_T.ODCITABLESTART
  • From: security curmudgeon
• [ MDVSA-2009:043 ] gnumeric
  • From: security
• [ MDVSA-2009:044 ] firefox
  • From: security
• Re: Re: Denial of Service using Partial GET Request in Mozilla Firefox 3.06
  • From: node
• [ MDVSA-2009:046 ] dia
  • From: security
• PHCDownload 1.1.0 Vulnerabilities
  • From: contact
• Re: SEPKILL /im SMC.EXE /f
  • From: Sandeep Cheema
• Re: SEPKILL /im SMC.EXE /f
  • From: Sandeep Cheema
• [ MDVSA-2009:047 ] vim
  • From: security
• [ MDVSA-2009:045 ] php
  • From: security
• [ MDVSA-2009:048 ] epiphany
  • From: security
• [ MDVSA-2009:049 ] pycrypto
  • From: security
• [ MDVSA-2009:050 ] python-pycrypto
  • From: security
• gigCalendar Joomla Component 1.0 SQL Injection
  • From: Salvatore \"drosophila\" Fresta
• gigCalendar 1.0 (banddetails.php) Joomla Component SQL Injection
  • From: Salvatore \"drosophila\" Fresta
• gigCalendar 1.0 (venuedetails.php) Joomla Component SQL Injection
  • From: Salvatore \"drosophila\" Fresta
• XSS Attack using SMS to Optus/Huawei E960 HSDPA Router
  • From: rizki . wicaksono
• HP Quality Center vulnerability
  • From: info
• [ECHO_ADV_103$2009] taifajobs <= 1.0 (jobid) Remote SQL Injection Vulnerability
  • From: adv
• [ MDVSA-2009:050-1 ] python-pycrypto
  • From: security
• [ MDVSA-2009:051 ] libpng
  • From: security
• [ GLSA 200902-05 ] KTorrent: Multiple vulnerabilitites
  • From: Pierre-Yves Rofes
• [ GLSA 200902-06 ] GNU Emacs, XEmacs: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• [ MDVSA-2009:049-1 ] pycrypto
  • From: security
• VMSA-2009-0002 VirtualCenter Update 4 updates Tomcat to 5.5.27
  • From: VMware Security team
• [ MDVSA-2009:048-1 ] epiphany
  • From: security
• [ MDVSA-2009:047-1 ] vim
  • From: security
• [ MDVSA-2009:047-1 ] vim
  • From: security
• iDefense Security Advisory 02.24.09: Adobe Flash Player Invalid Object Reference Vulnerability
  • From: iDefense Labs
• [ MDVSA-2009:052 ] php-smarty
  • From: security
• Re: Another SQL injection in ProFTPd with mod_mysql (probably postgres as well)
  • From: Benjamin Milde
• [ MDVSA-2009:053 ] squirrelmail
  • From: security
• [ MDVSA-2009:054 ] nagios
  • From: security
• Secunia Research: Orbit Downloader Long URL Parsing Buffer Overflow
  • From: Secunia Research
• pPIM Multiple Vulnerabilities
  • From: Justin C. Klein Keane
• [security bulletin] HPSBMA02384 SSRT071465 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Unauthorized Access, Denial of Service (DoS)
  • From: security-alert
• Apple Safari 4 Beta feeds: URI NULL Pointer Dereference Denial of Service Vulnerability
  • From: Trancer
• [DSECRG-09-008] JOnAS(4.10.3) - Linked XSS Vulnerability
  • From: Digital Security Research Group