Mail Index

• Thread Index

• Secunia Research: CUPS IPP Tags Memory Corruption Vulnerability
  • From: Secunia Research
• Secunia Research: McAfee E-Business Server Auth Packet Handling Buffer Overflow
  • From: Secunia Research
• SEC Consult SA-20071031-0 :: Perdition IMAP Proxy Format String Vulnerability
  • From: Bernhard Mueller
• Re: [gentoo-announce] [ GLSA 200710-30 ] OpenSSL: Remote execution of arbitrary code
  • From: Steffan Baron
• Re: Comments re ISC's announcement on bind9 security
  • From: Shane Kerr
• iDefense Security Advisory 10.31.07: Macrovision InstallShield Update Service ActiveX Unsafe Method Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 10.31.07: Symantec Altiris Deployment Solution TFTP/MTFTP Service Directory Traversal Vulnerability
  • From: iDefense Labs
• [security bulletin] HPSBMA02236 SSRT061260 rev.2 - HP OpenView Performance Manager (OVPM) Running Shared Trace Service on HP-UX, Solaris, and Windows, Remote Arbitrary Code Execution
  • From: security-alert
• [security bulletin] HPSBMA02237 SSRT061260 rev.2 - HP OpenView Performance Agent (OVPA) Running Shared Trace Service, Remote Arbitrary Code Execution
  • From: security-alert
• [security bulletin] HPSBMA02238 SSRT061260 rev.2 - HP OpenView Reporter Running Shared Trace Service, Remote Arbitrary Code Execution
  • From: security-alert
• (tool announcement) bunny the fuzzer
  • From: Michal Zalewski
• rPSA-2007-0227-1 cups
  • From: rPath Update Announcements
• ZDI-07-058: Oracle E-Business Suite SQL Injection Vulnerability
  • From: zdi-disclosures
• Synergiser <= 1.2 RC1 Local File Inclusion & Full path disclosure
  • From: kingoftheworld92
• CFP: International workshop on Secure Software Engineering - Deadline extended!
  • From: secse08
• Re: Comments re ISC's announcement on bind9 security
  • From: Henrik Langos
• ZDI-07-059: Verity KeyView SDK Multiple File Format Parsing Vulnerabilities
  • From: zdi-disclosures
• sBlog 0.7.3 Beta Cross Site Request Forgery
  • From: Guns
• ZDI-07-060: HP OpenView Radia Integration Server File System Exposure Vulnerability
  • From: zdi-disclosures
• ZDI-07-064: Novell Client Trust Heap Overflow Vulnerability
  • From: zdi-disclosures
• ZDI-07-061: RealNetworks RealPlayer SWF Processing Remote Code Execution Vulnerability
  • From: zdi-disclosures
• (tool announce) Orizon v0.50 announce
  • From: Paolo Perego
• mac trojan in-the-wild
  • From: Gadi Evron
• SEC Consult SA-20071101-0 :: Multiple Vulnerabilities in SonicWALL SSL-VPN Client
  • From: Bernhard Mueller
• ZDI-07-062: RealNetworks RealPlayer PLS File Memory Corruption Vulnerability
  • From: zdi-disclosures
• Re: Comments re ISC's announcement on bind9 security
  • From: Network Protocol Security
• ZDI-07-063: RealPlayer RA Field Size File Processing Heap Oveflow Vulnerability
  • From: zdi-disclosures
• Re: Airkiosk/formlib application is XSS vuln
  • From: skien
• Cryptome: NSA has access to Windows Mobile smartphones
  • From: Juha-Matti Laurio
• Two XSS on Blue Coat ProxySG Management Console
  • From: research
• Re: Re: Comments re ISC's announcement on bind9 security
  • From: ntn
• Re: Airkiosk/formlib application is XSS vuln
  • From: Raymond Pete
• [ MDKSA-2007:203 ] - Updated xen packages fix multiple vulnerabilities
  • From: security
• Re: Comments re ISC's announcement on bind9 security
  • From: Theo de Raadt
• Re: mac trojan in-the-wild
  • From: Matthew Leeds
• [ MDKSA-2007:204 ] - Updated cups packages fix vulnerability
  • From: security
• RE: mac trojan in-the-wild
  • From: Thor (Hammer of God)
• Re: Comments re ISC's announcement on bind9 security
  • From: Tim
• RE: mac trojan in-the-wild
  • From: Alex Eckelberry
• RE: Cryptome: NSA has access to Windows Mobile smartphones
  • From: Kurt Dillard
• RE: mac trojan in-the-wild
  • From: Alex Eckelberry
• [ GLSA 200711-01 ] gFTP: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• IM upgrade automated social engineering attack
  • From: Dragos Ruiu
• [ GLSA 200711-03 ] Gallery: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• Secunia Research: ACDSee Products Image and Archive Plug-ins Buffer Overflows
  • From: Secunia Research
• Scribe <= 2.0 Remote PHP Code Execution
  • From: kingoftheworld92
• Re: Comments re ISC's announcement on bind9 security
  • From: Shane Kerr
• Re: Comments re ISC's announcement on bind9 security
  • From: Tim
• Re: Comments re ISC's announcement on bind9 security
  • From: Shane Kerr
• [USN-537-2] Compiz vulnerability
  • From: Kees Cook
• Re: [botnets] re MAC trojan (fwd)
  • From: Gadi Evron
• Re: mac trojan in-the-wild
  • From: nnp
• Re: [Full-disclosure] mac trojan in-the-wild
  • From: Peter Besenbruch
• Re: mac trojan in-the-wild
  • From: Robert McArdle
• RE: mac trojan in-the-wild
  • From: Roger A. Grimes
• RE: mac trojan in-the-wild
  • From: Memisyazici, Aras
• Re: mac trojan in-the-wild
  • From: Nick FitzGerald
• RE: mac trojan in-the-wild
  • From: Thor (Hammer of God)
• Re: [Full-disclosure] mac trojan in-the-wild
  • From: Peter Besenbruch
• [UPH-07-03] Firefly Media Server remote format string vulnerability
  • From: nnp
• [UPH-07-02] Firefly Media Server DoS
  • From: nnp
• the heart of the problem [was: RE: mac trojan in-the-wild]
  • From: Gadi Evron
• Re: [UPH-07-01] Firefly Media Server DoS
  • From: nnp
• [UPH-07-01] Firefly Media Server DoS
  • From: nnp
• Re: [Full-disclosure] mac trojan in-the-wild
  • From: Paul Schmehl
• [ GLSA 200711-02 ] OpenSSH: Security bypass
  • From: Pierre-Yves Rofes
• RE: mac trojan in-the-wild
  • From: Roger A. Grimes
• RE: mac trojan in-the-wild
  • From: Jim Harrison
• RE: mac trojan in-the-wild
  • From: Gadi Evron
• Re: [UPH-07-03] Firefly Media Server remote format string vulnerability
  • From: nnp
• [ MDKSA-2007:205 ] - Updated opal packages fix vulnerability
  • From: security
• DoS Exploit for DHCPd bug (Bugtraq ID 25984 ; CVE-2007-5365)
  • From: Roman Medina-Heigl Hernandez
• phphelpdesk Multiple vulnerabilities
  • From: Joseph . giron13
• [ MDKSA-2007:206 ] - Updated pwlib packages fix vulnerability
  • From: security
• [SECURITY] [DSA 1397-1] New mono packages fix integer overflow
  • From: Moritz Muehlenhoff
• Skalinks <= 1_5 Cross Site Request Forgery Add Admin
  • From: djvincy
• JBC Explorer <= V7.20 RC 1 Remote Code Execution Exploit
  • From: gmdarkfig
• [SECURITY] [DSA 1398-1] New perdition packages fix arbitrary code execution
  • From: Noah Meyerhans
• [Tool] sqlmap: a blind SQL injection tool (release 0.5)
  • From: Bernardo Damele
• iDefense Security Advisory 11.02.07: Sun Microsystems Solaris srsexec Format String Vulnerability
  • From: iDefense Labs
• Re: Comments re ISC's announcement on bind9 security
  • From: Tim
• Leopard's firewall damages Skype and WoW
  • From: Juergen Schmidt
• [SECURITY] [DSA 1399-1] New pcre3 packages fix arbitrary code execution
  • From: Florian Weimer
• iDefense Security Advisory 11.05.07: Apple QuickTime Panorama Sample Atom Heap Buffer Overflow Vulnerability
  • From: iDefense Labs
• ZDI-07-066: Apple Quicktime PICT File PackBitsRgn Parsing Heap Corruption Vulnerability
  • From: zdi-disclosures
• ZDI-07-065: Apple QuickTime Color Table RGB Parsing Heap Corruption Vulnerability
  • From: zdi-disclosures
• ZDI-07-068: Apple QuickTime Uncompressedfile Opcode Stack Overflow Vulnerability
  • From: zdi-disclosures
• ZDI-07-067: Apple QuickTime PICT File Poly Opcodes Heap Corruption Vulnerability
  • From: zdi-disclosures
• [SECURITY] [DSA 1401-1] New iceape packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• [ MDKSA-2007:207 ] - Updated perl packages fix vulnerability
  • From: security
• [ MDKSA-2007:208 ] - Updated ghostscript packages fix vulnerability
  • From: security
• rPSA-2007-0232-1 perl
  • From: rPath Update Announcements
• [USN-539-1] CUPS vulnerability
  • From: Kees Cook
• [ MDKSA-2007:209 ] - Updated netpbm packages fix vulnerability
  • From: security
• [CVE-2007-5741] Plone: statusmessages and linkintegrity unsafe network data hotfix
  • From: mj
• Re: IM upgrade automated social engineering attack
  • From: Roman Shirokov
• SMF .htaccess bypass
  • From: h3llcode
• Re: SMF .htaccess bypass
  • From: Matt D. Harris
• Re: IM upgrade automated social engineering attack
  • From: Dragos Ruiu
• IDMOS v1.0 Alpha Multiple RFI Vulnerability
  • From: Guns
• Re: SMF .htaccess bypass
  • From: anuj tenani
• Cypress BX script backdoored?
  • From: Chris
• PhpNuke (add-on) MS TopSites Edit Exploit And Html Injection
  • From: Guns
• rPSA-2007-0231-1 pcre
  • From: rPath Update Announcements
• iDefense Security Advisory 11.06.07: Microsoft DebugView Privilege Escalation Vulnerability
  • From: iDefense Labs
• MyWebFTP Password Disclosure
  • From: [NO-REPLY]
• [SECURITY] [DSA 1400-1] New perl packages fix arbitrary code execution
  • From: Florian Weimer
• [ GLSA 200711-04 ] Evolution: User-assisted remote execution of arbitrary code
  • From: Pierre-Yves Rofes
• [ MDKSA-2007:210 ] - Updated xfs package prevents arbitrary code execution vulnerabilities
  • From: security
• [ GLSA 200711-05 ] SiteBar: Multiple issues
  • From: Pierre-Yves Rofes
• SiteMinder Agent: Cross Site Scripting
  • From: Giuseppe Gottardi
• Secunia Research: Link Grammar "separate_sentence()" Buffer Overflow
  • From: Secunia Research
• Secunia Research: AbiWord Link Grammar "separate_sentence()" Buffer Overflow
  • From: Secunia Research
• Secunia Research: Xpdf "Stream.cc" Multiple Vulnerabilities
  • From: Secunia Research
• [ GLSA 200711-06 ] Apache: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• [ GLSA 200711-07 ] Python: User-assisted execution of arbitrary code
  • From: Pierre-Yves Rofes
• [ GLSA 200711-08 ] libpng: Multiple Denials of Service
  • From: Pierre-Yves Rofes
• [SECURITY] [DSA 1402-1] New gforge packages fix several vulnerabilities
  • From: Steve Kemp
• iDefense Security Advisory 11.07.07: Oracle 10g R2 PITRIG_DROPMETADATA Buffer Overflow Vulnerability
  • From: iDefense Labs
• [ GLSA 200711-09 ] MadWifi: Denial of Service
  • From: Pierre-Yves Rofes
• [ GLSA 200711-10 ] Mono: Buffer overflow
  • From: Pierre-Yves Rofes
• Re: iDefense Security Advisory 11.07.07: Oracle 10g R2 PITRIG_DROPMETADATA Buffer Overflow Vulnerability
  • From: buzzy
• Aria-Security.Net Research: Request For Travel Sql Injection
  • From: Advisory
• Simple Machine Forum - Private section/posts/info disclosure
  • From: h3llcode
• [OpenPKG-SA-2007.023] OpenPKG Security Advisory (perl)
  • From: OpenPKG GmbH
• Re: SiteMinder Agent: Cross Site Scripting
  • From: securityfocus
• [ GLSA 200711-12 ] Tomboy: User-assisted execution of arbitrary code
  • From: Pierre-Yves Rofes
• [ GLSA 200711-11 ] Nagios Plugins: Two buffer overflows
  • From: Pierre-Yves Rofes
• [security bulletin] HPSBUX02285 SSRT071484 rev.1 - HP-UX Running Aries PA Emulator, Local Unauthorized Access
  • From: security-alert
• [ GLSA 200711-13 ] 3proxy: Denial of Service
  • From: Pierre-Yves Rofes
• [ MDKSA-2007:211 ] - Updated pcre packages fix vulnerability
  • From: security
• Aria-Security.Net Research: Lotfian BROCHURE Management System
  • From: Advisory
• [ MDKSA-2007:213 ] - Updated pcre packages fix vulnerability
  • From: security
• [ MDKSA-2007:212 ] - Updated pcre packages fix vulnerability
  • From: security
• [SECURITY] [DSA 1404-1] New gallery2 packages fix privilege escalation
  • From: Thijs Kinkhorst
• AST-2007-024 - Fallacious security advisory spread on the Internet involving buffer overflow in Zaptel's sethdlc application
  • From: The Asterisk Development Team
• [SECURITY] [DSA 1403-1] New phpmyadmin packages fix cross-site scripting
  • From: Thijs Kinkhorst
• [ MDKSA-2007:214 ] - Updated flac packages fix vulnerability
  • From: security
• CanSecWest 2008 CFP (deadline Nov 30, conf Mar 26-28) and PacSec Dojo's
  • From: Dragos Ruiu
• [ MDKSA-2007:215 ] - Updated openldap packages fix vulnerability
  • From: security
• Re: Re: SiteMinder Agent: Cross Site Scripting
  • From: overet
• li-guestbook sql inj
  • From: abc . seo
• Re: SiteMinder Agent: Cross Site Scripting
  • From: Williams, James K
• Re: Simple Machine Forum - Private section/posts/info disclosure
  • From: klynn . securityfocus
• xoops mylinks module - sql injection
  • From: root
• Re: Simple Machine Forum - Private section/posts/info disclosure
  • From: Jindrich Kubec
• [SECURITY] [DSA 1405-1] New zope-cmfplone packages fix arbitrary code execution
  • From: Thijs Kinkhorst
• SQL injection bug found in TBSource.
  • From: drakomo
• iDefense Security Advisory 11.09.07: IBM Informix Dynamic Server DBLANG Directory Traversal Vulnerability
  • From: iDefense Labs
• [SECURITY] [DSA 1406-1] New horde3 packages fix several vulnerabilities
  • From: Thijs Kinkhorst
• iDefense Security Advisory 11.09.07: AOL AmpX ActiveX Control Multiple Buffer Overflow Vulnerabilities
  • From: iDefense Labs
• [48Bits Advisory] QuickTime Panorama Sample Atom Heap Overflow
  • From: [48bits] vulndev
• [SECURITY] [DSA 1405-2] New zope-cmfplone packages fix regression
  • From: Thijs Kinkhorst
• Eggblog v3.1.0 XSS Vulnerability
  • From: mesut
• FLEA-2007-0066-1 ImageMagick
  • From: Foresight Linux Essential Announcement Service
• Oracle 0-day to get SYSDBA access
  • From: pete
• Aria-Security.Net Research: Rapid Classified HotList Image
  • From: Advisory
• Re: Re: Simple Machine Forum - Private section/posts/info disclosure
  • From: rx
• Standing Up Against German Laws - Project HayNeedle
  • From: Paul Sebastian Ziegler
• Re: [Full-disclosure] Standing Up Against German Laws - Project HayNeedle
  • From: Jan Newger
• PeopleAggregatory security advisory - re CVE-2007-5631
  • From: phil
• CVE-2007-3694: Cross site scripting (XSS) in broadcast machine
  • From: Hanno Böck
• PHP-Nuke Module Advertising Blind SQL Injection
  • From: Guns
• FLEA-2007-0063-1 perl
  • From: Foresight Linux Essential Announcement Service
• FLEA-2007-0064-1 pcre
  • From: Foresight Linux Essential Announcement Service
• FLEA-2007-0068-1 ruby
  • From: Foresight Linux Essential Announcement Service
• iDefense Security Advisory 11.12.07: WinPcap NPF.SYS bpf_filter_init Arbitrary Array Indexing Vulnerability
  • From: iDefense Labs
• Re: Standing Up Against German Laws - Project HayNeedle
  • From: johan beisser
• FLEA-2007-0069-1 perl
  • From: Foresight Linux Essential Announcement Service
• FLEA-2007-0065-1 libpng
  • From: Foresight Linux Essential Announcement Service
• Alice - dns spoofer
  • From: fabio
• FLEA-2007-0067-1 pidgin
  • From: Foresight Linux Essential Announcement Service
• Cisco IOS Shellcode
  • From: Research
• Re: Standing Up Against German Laws - Project HayNeedle
  • From: Matt D. Harris
• RFID: Security Briefings
  • From: angelo
• HPSBUX02287 SSRT071485 rev.1 - HP-UX Running HP Secure Shell, Remotely Gain Extended Privileges
  • From: security-alert
• AutoIndex <= 2.2.2 Cross Site Scripting and Denial of Service
  • From: L4teral
• [ GLSA 200711-14 ] Mozilla Firefox, SeaMonkey, XULRunner: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• Re: Standing Up Against German Laws - Project HayNeedle
  • From: johan beisser
• [ GLSA 200711-15 ] FLAC: Buffer overflow
  • From: Pierre-Yves Rofes
• [ MDKSA-2007:204-1 ] - Updated cups packages fix vulnerability
  • From: security
• [ GLSA 200711-16 ] CUPS: Memory corruption
  • From: Pierre-Yves Rofes
• PR07-13: Cross-site Scripting / HTML injection on F5 FirePass 4100 SSL VPN 'download_plugin.php3' server-side script
  • From: research
• [ISecAuditors Security Advisories] VTLS.web.gateway cgi is vulnerable to XSS
  • From: ISecAuditors Security Advisories
• ATC-08 Call for papers (repost)
  • From: atc08
• Re: Bosdev Multiple vulnerabilities
  • From: sales
• [ MDKSA-2007:216 ] - Updated kernel packages fix multiple vulnerabilities and bugs
  • From: security
• After 6 months - fix available for Microsoft DNS cache poisoning attack
  • From: Amit Klein
• PHP <= 5.2.5 stream_wrapper_register() denial of service
  • From: laurent . gaffie
• PHP <= 5.2.5 Gettext Lib Multiple Denial of service
  • From: laurent . gaffie
• Re: [Full-disclosure] Standing Up Against German Laws - Project HayNeedle
  • From: Peter Conrad
• Oracle 11g/10g Installation Vulnerability
  • From: David Litchfield
• Re: Standing Up Against German Laws - Project HayNeedle
  • From: Florian Echtler
• Re: [Full-disclosure] Standing Up Against German Laws - Project HayNeedle
  • From: Duncan Simpson
• [USN-540-1] flac vulnerability
  • From: Kees Cook
• iDefense Security Advisory 11.12.07: Novell NetWare Client Local Privilege Escalation Vulnerability
  • From: iDefense Labs
• Re: Standing Up Against German Laws - Project HayNeedle
  • From: Paul Wouters
• [ MDKSA-2007:217 ] - Updated libpng packages fix multiple vulnerabilities
  • From: security
• Re: [Full-disclosure] Standing Up Against German Laws - Project HayNeedle
  • From: johan beisser
• Re: Standing Up Against German Laws - Project HayNeedle
  • From: johan beisser
• Re: Standing Up Against German Laws - Project HayNeedle
  • From: Valdis . Kletnieks
• Re: Standing Up Against German Laws - Project HayNeedle
  • From: Stefano Zanero
• [USN-541-1] Emacs vulnerability
  • From: Kees Cook
• ExoPHPdesk user profile XSS / profile SQL injection
  • From: Joseph . giron13
• Aria-Security.Net: MetaCart SQL Injection
  • From: No-Reply
• Predictable DNS transaction IDs in Microsoft DNS Server
  • From: Alla Bezroutchko
• [USN-542-1] poppler vulnerabilities
  • From: Kees Cook
• Free Forums "search" Sql Injection
  • From: No-Reply
• DocuSafe "Search" SQL Injection
  • From: No-Reply
• Konqueror Remote Denial Of Service
  • From: laurent . gaffie
• Six Remote Memory Corruption Vulnerabilities in IBM WebSphere MQ 6.0
  • From: IRM Research
• [ MDKSA-2007:218 ] - Updated mono packages fix arbitrary code execution vulnerability
  • From: security
• [security bulletin] HPSBMA02288 SSRT071465 rev.1 - HP OpenView Operations (OVO) Running on HP-UX and Solaris, Remote Unauthorized Access, Denial of Service (DoS)
  • From: security-alert
• Re: Standing Up Against German Laws - Project HayNeedle
  • From: Raj Mathur
• [ GLSA 200711-17 ] Ruby on Rails: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• Re: Standing Up Against German Laws - Project HayNeedle
  • From: imipak
• TPTI-07-20: Apple Quicktime Movie Stack Overflow Vulnerability
  • From: DVLabs
• [ GLSA 200711-18 ] Cpio: Buffer overflow
  • From: Pierre-Yves Rofes
• [ GLSA 200711-19 ] TikiWiki: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• Breaking RSA: Totient indirect factorization
  • From: gandlf
• [ GLSA 200711-20 ] Pioneers: Denial of Service
  • From: Pierre-Yves Rofes
• Re: Standing Up Against German Laws - Project HayNeedle
  • From: Frank Guthausen
• iDefense Security Advisory 11.14.07: Apple Mac OS X AppleTalk mbuf Kernel Heap Overflow Vulnerability
  • From: iDefense Labs
• Re: Breaking RSA: Totient indirect factorization
  • From: Alexander Klimov
• iDefense Security Advisory 11.14.07: Apple Mac OS X AppleTalk ASP Message Kernel Heap Overflow Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 11.14.07: Apple Mac OS X Mach Port Inheritance Privilege Escalation Vulnerability
  • From: iDefense Labs
• Some hashes for the record
  • From: shadown
• [security bulletin] HPSBUX02284 SSRT071483 rev.2 - HP-UX Running Java JRE and JDK, Remote Unauthorized Access
  • From: security-alert
• [SAMBA] CVE-2007-4572 - GETDC mailslot processing buffer overrun in nmbd
  • From: Gerald (Jerry) Carter
• [SAMBA] CVE-2007-5398 - Remote Code Execution in Samba's nmbd
  • From: Gerald (Jerry) Carter
• Secunia Research: Samba "reply_netbios_packet()" Buffer Overflow Vulnerability
  • From: Secunia Research
• iDefense Security Advisory 11.14.07: Apple Mac OS X AppleTalk Socket IOCTL Kernel Stack Buffer Overflow Vulnerability
  • From: iDefense Labs
• Re: HPSBUX02287 SSRT071485 rev.1 - HP-UX Running HP Secure Shell, Remotely Gain Extended Privileges
  • From: Nick Boyce
• Re: Breaking RSA: Totient indirect factorization
  • From: Clifton Royston
• Aida-Web Information Exposure
  • From: MC Iglo
• [TKADV2007-001] Mac OS X TIOCSETD IOCTL Kernel Memory Corruption Vulnerability
  • From: Tobias Klein
• [ MDKSA-2007:219 ] - Updated xpdf packages fix vulnerabilities
  • From: security
• EEYE: Multiple Vulnerabilities In .FLAC File Format and Various Media Applications
  • From: eEye Advisories
• [USN-542-2] KOffice vulnerabilities
  • From: Jamie Strandboge
• PR07-26: Persistent XSS on Aruba 800 Mobility Controller's login page
  • From: research
• Re: Breaking RSA: Totient indirect factorization
  • From: gandlf
• PR07-02: XSS on Liferay Portal Enterprise 4.1.1 login page ('login' parameter)
  • From: research
• [USN-543-1] VMWare vulnerabilities
  • From: Kees Cook
• [ MDKSA-2007:220 ] - Updated gpdf packages fix vulnerabilities
  • From: security
• [RISE-2007004] Apple Mac OS X 10.4.x Kernel i386_set_ldt() Integer Overflow Vulnerability
  • From: RISE Security
• [USN-544-1] Samba vulnerabilities
  • From: Jamie Strandboge
• [ MDKSA-2007:221 ] - Updated kdegraphics packages fix vulnerabilities in kpdf
  • From: security
• Microsoft Jet Engine MDB File Parsing Stack Overflow Vulnerability
  • From: cocoruder
• AhnLab AntiVirus Remote Kernel Memory Corruption
  • From: Sowhat
• Javamail login username and password same email problem
  • From: thetaung
• Re: Breaking RSA: Totient indirect factorization
  • From: Watson Ladd
• Re: Breaking RSA: Totient indirect factorization
  • From: Erick Galinkin
• JiRos Upload Manager SQL Injection
  • From: no-reply
• rPSA-2007-0241-1 samba samba-swat
  • From: rPath Update Announcements
• [USN-544-2] Samba regression
  • From: Jamie Strandboge
• RE: Standing Up Against German Laws - Project HayNeedle
  • From: Quark IT - Hilton Travis
• net-finity (links.php) Remote SQL Injection Vulnerability
  • From: verys-secret
• Black Lily 2007 (products.php class) Remote SQL Injection Vulnerability
  • From: verys-secret
• Myspace Clone Script (index.php) Remote File Inclusion Vulnerability
  • From: verys-secret
• Re: Microsoft Jet Engine MDB File Parsing Stack Overflow Vulnerability
  • From: CaseArmour.net Security Administrator
• security contact for mitsubishi electric?
  • From: Chris Withers
• Sciurus Hosting Panel Code &#304;njection
  • From: admin
• [ MDKSA-2007:222 ] - Updated koffice packages fix vulnerabilities
  • From: security
• [ MDKSA-2007:223 ] - Updated pdftohtml packages fix vulnerabilities
  • From: security
• [ MDKSA-2007:224 ] - Updated samba packages fix vulnerabilities
  • From: security
• Re: Microsoft Jet Engine MDB File Parsing Stack Overflow Vulnerability
  • From: Juha-Matti Laurio
• [ECHO_ADV_84$2007] ProfileCMS <= 1.0 Remote SQL Injection Vulnerability
  • From: erdc
• [ GLSA 200711-24 ] Mozilla Thunderbird: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• [ GLSA 200711-26 ] teTeX: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• Vulnerability Hash Database - Maillist
  • From: Sowhat
• Re: [Full-disclosure] Microsoft Jet Engine MDB File Parsing Stack Overflow Vulnerability
  • From: jf
• [ GLSA 200711-25 ] MySQL: Denial of Service
  • From: Pierre-Yves Rofes
• [ GLSA 200711-27 ] Link Grammar: User-assisted execution of arbitrary code
  • From: Pierre-Yves Rofes
• [ GLSA 200711-23 ] VMware Workstation and Player: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• [ GLSA 200711-21 ] Bochs: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• VigileCMS 1.4 Multiple Remote Vulnerabilities
  • From: info
• Belkin Wireless G Router DoS
  • From: r00t
• [ MDKSA-2007:225 ] - Updated net-snmp packages fix remote denial of service vulnerability
  • From: security
• IceBB 1.0rc6 <= Remote SQL Injection
  • From: aeroxteam-nospam
• [ GLSA 200711-22 ] Poppler, KDE: User-assisted execution of arbitrary code
  • From: Pierre-Yves Rofes
• Crash in LIVE555 Media Server 2007.11.01
  • From: Luigi Auriemma
• [SECURITY] [DSA 1407-1] New cupsys packages fix arbitrary code execution
  • From: Moritz Muehlenhoff
• [Aria-Secutiy Net] Click&BaneX SQL Injection
  • From: no-reply
• Re: IceBB 1.0rc6 <= Remote SQL Injection
  • From: aeroxteam-nospam
• Citrix NetScaler Web Management XSS
  • From: nnposter
• Wordpress Cookie Authentication Vulnerability
  • From: Steven J. Murdoch
• Alcatel OmniPCX Enterprise VoIP Vulnerability
  • From: daniel . stirnimann
• Certificate spoofing issue with Mozilla, Konqueror, Safari 2
  • From: Nils Toedtmann
• rPSA-2007-0242-1 php5 php5-cgi php5-mysql php5-pear php5-pgsql php5-soap php5-xsl
  • From: rPath Update Announcements
• [ GLSA 200711-28 ] Perl: Buffer overflow
  • From: Pierre-Yves Rofes
• Re: Certificate spoofing issue with Mozilla, Konqueror, Safari 2
  • From: Kapetanakis Giannis
• Re: Certificate spoofing issue with Mozilla, Konqueror, Safari 2
  • From: Graeme Fowler
• Re: Certificate spoofing issue with Mozilla, Konqueror, Safari 2
  • From: Michal Zalewski
• [ MDKSA-2007:226 ] - Updated kernel packages fix multiple vulnerabilities and bugs
  • From: security
• [security bulletin] HPSBUX02289 SSRT071461 rev.1 - HP-UX Running BIND 8, Remote DNS Cache Poisoning
  • From: security-alert
• Re: Certificate spoofing issue with Mozilla, Konqueror, Safari 2
  • From: Nils Toedtmann
• Banks (Wellsfargo.com) using CDNs to deliver Javascript: enables password theft by anyone compromising or controlling the CDN
  • From: joel
• [ MDKSA-2007:227 ] - Updated poppler packages fix vulnerabilities
  • From: security
• [ MDKSA-2007:228 ] - Updated cups packages fix vulnerabilities
  • From: security
• EEYE: BitDefender Online Scanner 8 Double Decode Heap Overflow
  • From: eEye Advisories
• [ GLSA 200711-29 ] Samba: Execution of arbitrary code
  • From: Pierre-Yves Rofes
• [ GLSA 200711-30 ] PCRE: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• [ GLSA 200711-31 ] Net-SNMP: Denial of Service
  • From: Pierre-Yves Rofes
• Re: Certificate spoofing issue with Mozilla, Konqueror, Safari 2
  • From: Kapetanakis Giannis
• [ GLSA 200711-32 ] Feynmf: Insecure temporary file creation
  • From: Pierre-Yves Rofes
• Several persistent XSS and CSRF on Wireless-G ADSL Gateway with SpeedBooster (WAG54GS)
  • From: Adrian P
• [ MDKSA-2007:229 ] - Updated phpMyAdmin packages fix multiple vulnerabilities
  • From: security
• [Aria-Security.Net] VU Case Manager "Username/Password" SQL Injection
  • From: no-reply
• Re: Banks (Wellsfargo.com) using CDNs to deliver Javascript: enables password theft by anyone compromising or controlling the CDN
  • From: Jason Muskat de VE3TSJ - GCFA, GCUX, CEI, CEH
• Aria-Security.Net: VU Mailer (Mass Mail) "Password" SQL Injection
  • From: no-reply
• rPSA-2007-0243-1 flac
  • From: rPath Update Announcements
• Re: [Full-disclosure] Warning: Hackers hijacking unused IP Addresses inside Trusted domains [POC]
  • From: Paul Schmehl
• [ MDKSA-2007:230 ] - Updated tetex packages fix vulnerabilities
  • From: security
• rPSA-2007-0245-1 kernel
  • From: rPath Update Announcements
• rPSA-2007-0245-2 kernel
  • From: rPath Update Announcements
• Re: [Full-disclosure] Warning: Hackers hijacking unused IP Addresses inside Trusted domains [POC]
  • From: Gadi Evron
• E-vanced Solutions Multiple Vulnerabilites
  • From: Joseph . giron13
• GWextranet Multiple Vulnerabilites
  • From: Joseph . giron13
• [SECURITY] [DSA 1408-1] New kdegraphics packages fix arbitrary code execution
  • From: Moritz Muehlenhoff
• TalkBack 2.2.7 Multiple Remote File Inclusion Vulnerabilities
  • From: bugtraq
• Ucms <= 1.8 Backdoor Remote Command Execution Exploit
  • From: bugtraq
• SkyPortal vRC6 Multiple Remote Vulnerabilities
  • From: bugtraq
• [ MDKSA-2007:224-1 ] - Updated samba packages fix vulnerabilities
  • From: security
• Wheatblog (wB) Remote File inclusion ..
  • From: security
• Aria-Security.net: NetAuctionHelp SQL Injection
  • From: no-reply
• [ECHO_ADV_85$2007] alstrasoft E-Friends <= 4.98 (seid) Multiple Remote SQL Injection Vulnerabilities
  • From: erdc
• GetBlog local File inclusion ..
  • From: security
• Remote Shell Command Execution in "KB-Bestellsystem" (amensa-soft.de)
  • From: zero-x
• [Argeniss] Data0: Next generation malware for stealing databases (Paper)
  • From: Cesar
• MyBlog (MyCMS) Remote PHP Code execution / PHP Code injection ..
  • From: security
• Re: Simple Machines Forum multiple sql injection flaws with exploit code.
  • From: root
• VigileCMS <= 1.8 Stealth Remote Command Execution Exploit
  • From: bugtraq
• MySpace Scripts - Poll Creator JavaScript Injection Vulnerability
  • From: DoZ
• Gadu-Gadu Local/Remote Buffer Overflow vulnerability
  • From: j00ru . vx
• [SECURITY] [DSA 1409-1] New samba packages fix several vulnerabilities
  • From: Steve Kemp
• Using CSRF to Attack Mobile Phones
  • From: avivra
• [ MDKSA-2007:231 ] - Updated cacti packages fix SQL injection vulnerability
  • From: security
• Re: Gadu-Gadu Local/Remote Buffer Overflow vulnerability
  • From: gg_vuln
• Re: Re: Gadu-Gadu Local/Remote Buffer Overflow vulnerability
  • From: emacs25
• Aria-Security.net: Irola My-Time v3.5 SQL Injection
  • From: no-reply
• Re: MyBlog (MyCMS) Remote PHP Code execution / PHP Code injection ..
  • From: BlackHawk
• [0day Remote Command Execution] VigileCMS <= 1.8 Stealth
  • From: wegotyourbox
• Re: Re: Gadu-Gadu Local/Remote Buffer Overflow vulnerability
  • From: j00ru . vx
• Re: Re: Re: Gadu-Gadu Local/Remote Buffer Overflow vulnerability
  • From: gynvael
• Re: Re: Re: Re: Gadu-Gadu Local/Remote Buffer Overflow vulnerability
  • From: sdfkjsomcoismwevoiweo
• Re: Gadu-Gadu Local/Remote Buffer Overflow vulnerability
  • From: emacs25
• Mp3 ToolBox 1.0 beta 5 Remote File &#304;nclude Vulnerability
  • From: cybermilitan
• Re: Re: Re: Re: Re: Gadu-Gadu Local/Remote Buffer Overflow vulnerability
  • From: gynvael
• [ MDKSA-2007:224-2 ] - Updated samba packages fix vulnerabilities
  • From: security
• Bitcomet Resource Browser v1.1 XSS
  • From: jplopezy
• Aria-Security.net: CoolShot E-Lite POS 1.0
  • From: no-reply
• Re: Aria-Security.net: NetAuctionHelp SQL Injection
  • From: support
• PBLang <= 4.99.17.q Remote File Rewriting / Remote Command Execution
  • From: kingoftheworld92
• [ISecAuditors Security Advisories] Cygwin buffer overflow due incorrect filename length check
  • From: ISecAuditors Security Advisories
• vBTube v1.1 - Beta ( Vbulletin Tube) Xss Vulnerable
  • From: cybermilitan
• Amber Script 1.0 (show_content.php id) Local File Inclusion Vulnerability
  • From: cybermilitan
• NetAuctionHelp Classified Ads v1.0 SQL Injection
  • From: no-reply
• Re: Re: Aria-Security.net: NetAuctionHelp SQL Injection
  • From: no-reply
• [SECURITY] [DSA 1410-1] New ruby1.8 packages fix insecure SSL certificate validation
  • From: Moritz Muehlenhoff
• Aria-Security.Net: Gouae DWD Realty SQL Injection
  • From: noreply
• [SECURITY] [DSA 1411-1] New libopenssl-ruby packages fix insecure SSL certificate validation
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 1409-2] New samba packages fix several vulnerabilities
  • From: Steve Kemp
• HPSBST02291 SSRT071498 rev.1 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS07-061 and MS07-062
  • From: security-alert
• [SECURITY] [DSA 1412-1] New ruby1.9 packages fix insecure SSL certificate validation
  • From: Moritz Muehlenhoff
• GWExtranet Script Injections & Privilege Escalation Vulnerability
  • From: DoZ
• PHP 5.2.4 mail.force_extra_parameters unsecure
  • From: cxib
• two bytehoard 2.1 bugs
  • From: Ernesto Alvarez
• PHPSlideShow (toonchapter8.php) Cross-Site Scripting Vulnerability
  • From: sys-project
• Skype DoS
  • From: mail
• Calendar Proverbs <=1.1 (caladmin.php) Remote SQL Injection
  • From: sys-project
• Citrix NetScaler Web Management Cookie Weakness
  • From: nnposter
• FMDeluxe (index.php) Cross-Site Scripting Vulnerability
  • From: sys-project
• [ GLSA 200711-33 ] nss_ldap: Information disclosure
  • From: Pierre-Yves Rofes
• [ GLSA 200711-34 ] CSTeX: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• [SECURITY] [DSA 1413-1] New mysql packages fix multiple vulnerabilities
  • From: Noah Meyerhans
• 2007-06 Sentinel Protection Server Directory Traversal
  • From: VulnerabilityResearch
• DeluxeBB E-Mail Address Change Security Bypass
  • From: bugtraq
• Tilde CMS <= v. 4.x "aarstal" parameter of "yeardetail" SQL Injection
  • From: kingoftheworld92
• SimpleGallery v0.1.3 (index.php) Cross-Site Scripting Vulnerability
  • From: sys-project
• PHP-Nuke NSN Script Depository module <= 1.0.3 Remote Source / DB Credentials Disclosure
  • From: kingoftheworld92
• Directory Traversal in SafeNet Sentinel Protection Server and Keys Server
  • From: Elliot Kendall
• JLMForo System (modificarPerfil.php) Cross-Site Scripting Vulnerability
  • From: sys-project
• Re: PHP-Nuke NSN Script Depository module <= 1.0.3 Remote Source / DB Credentials Disclosure
  • From: kingoftheworld92
• ZDI-07-069: CA BrightStor ARCserve Backup Message Engine Insecure Method Exposure Vulnerability
  • From: zdi-disclosures
• FIGIS (FILogin.do) Bypass SQL Injection Vulnerability
  • From: sys-project
• CONFidence 2008 CfP
  • From: andrzej . targosz
• [USN-545-1] link-grammar vulnerability
  • From: Kees Cook
• Creating Backdoors in Cisco IOS using Tcl
  • From: IRM Research
• [USN-546-1] Firefox vulnerabilities
  • From: Kees Cook
• OWASP Israel Conference 2007, Dec 3rd 2007
  • From: Ofer Shezaf
• [security bulletin] HPSBUX02251 SSRT071449 rev.3 - HP-UX Running BIND, Remote DNS Cache Poisoning
  • From: security-alert
• [USN-547-1] PCRE vulnerabilities
  • From: Kees Cook
• Ruby/Gnome2 0.16.0 Format String Vulnerability
  • From: chris . rohlf
• Announce: RFIDIOt release RFIDIOt-0.1r, November 2007
  • From: Adam Laurie
• National Computer and Information Security Conferences ACIS 2008 - COLOMBIA
  • From: Jeimy Cano
• [SECURITY] [DSA 1414-1] New wireshark packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• Eurologon CMS Db credentials disclosure / files download
  • From: kingoftheworld92
• Re: [Full-disclosure] Creating Backdoors in Cisco IOS using Tcl
  • From: Nicolas FISCHBACH
• Eurologon CMS Multiple SQL Injection
  • From: kingoftheworld92
• Re: Creating Backdoors in Cisco IOS using Tcl
  • From: michael
• CORE-2007-0821: Lotus Notes buffer overflow in the Lotus WorkSheet file processor
  • From: Core Security Technologies Advisories
• Liferay Enterprise Portal multiple XSS
  • From: morin . josh
• PHPSlideShow XSS Update
  • From: morin . josh
• PHPkit 1.6.1 (include.php?path=) Remote File Inclusion
  • From: sys-project
• [SECURITY] [DSA 1416-1] New tk8.3 packages fix arbitrary code execution
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 1415-1] New tk8.4 packages fix arbitrary code execution
  • From: Moritz Muehlenhoff
• Win2K3 Priv Escalation
  • From: justin
• RE: Win2K3 Priv Escalation
  • From: Matt Ausmus
• Re: Win2K3 Priv Escalation
  • From: Jan Münther
• Microsoft FTP Client Multiple Bufferoverflow Vulnerability
  • From: Rajesh Sethumadhavan
• Secunia Research: Symantec Backup Exec Job Engine Denial of Service
  • From: Secunia Research
• Re: Win2K3 Priv Escalation
  • From: Justin@ESC
• RE: Win2K3 Priv Escalation
  • From: Thor (Hammer of God)
• Gekko <=0.8.2 (temp directory) Path Disclosure
  • From: sys-project
• SYM07-029 Symantec BEWS Multiple DoS in Job Engine
  • From: Secure
• [ MDKSA-2007:232 ] - Updated kernel packages fix multiple vulnerabilities and bugs
  • From: security
• Some Data of POC2007
  • From: poc2007
• [ MDKSA-2007:233 ] - Updated cpio package fixes buffer overflow and directory traversal vulnerabilities
  • From: security
• Re: Gekko <=0.8.2 (temp directory) Path Disclosure
  • From: J. Carlos Nieto
• rPSA-2007-0252-1 cups poppler tetex tetex-afm tetex-dvips tetex-fonts tetex-latex tetex-xdvi
  • From: rPath Update Announcements
• [USN-548-1] Pidgin vulnerability
  • From: Kees Cook
• [ MDKSA-2007:233 ] - Updated cpio package fixes buffer overflow and directory traversal vulnerabilities
  • From: security
• [security bulletin] HPSBMA02283 SSRT071319 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Cross Site Scripting (XSS)
  • From: security-alert
• [security bulletin] HPSBUX02292 SSRT071499 rev.1 - HP-UX Running Apache, Remote Execution of Arbitrary Code
  • From: security-alert
• [SECURITY] [DSA 1409-3] New samba packages fix several vulnerabilities
  • From: Steve Kemp
• Digital Armaments November-December Hacking Challenge: Diffuse Client Application (10.000$ extra)
  • From: info
• APC Management Vulnerability
  • From: garys
• Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability
  • From: 3APA3A
• IRM025: TIBCO Rendezvous RVD Daemon Remote Memory Leak DoS
  • From: IRM Research
• FreeBSD Security Advisory FreeBSD-SA-07:10.gtar
  • From: FreeBSD Security Advisories
• FreeBSD Security Advisory FreeBSD-SA-07:09.random
  • From: FreeBSD Security Advisories
• ERRATA: [ GLSA 200711-20 ] Pioneers: Multiple Denials of Service
  • From: Pierre-Yves Rofes
• AST-2007-025 - SQL Injection issue in res_config_pgsql
  • From: Asterisk Security Team
• AST-2007-026 - SQL Injection issue in cdr_pgsql
  • From: Asterisk Security Team
• Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability
  • From: Valdis . Kletnieks
• [USN-549-1] PHP vulnerabilities
  • From: Kees Cook
• Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability
  • From: Steve Shockley