Bugtraq: by author

3APA3A
- Re: licq remote DoS? (Apr 10 2008)
a.westtermann_at_alkacon.com
- Re: Alkacon OpenCms sessions.jsp searchfilter XSS (Apr 10 2008)
Adam Laurie
- ANNOUNCE: RFIDIOt-0.1s release (now available for Windows) (Apr 18 2008)
- ANNOUNCE: Apache-SSL security release - apache_1.3.41+ssl_1.59 (Apr 02 2008)
admin_at_adult.wikipediatr.com
- BigAnt Server 2.2 PreAuth Remote SEH Overflow Exploit (0day) (Apr 15 2008)
admin_at_bugreport.ir
- Acidcat CMS Multiple Vulnerabilities (Apr 20 2008)
- Carbon Communities forum Multiple Vulnerabilities. (Apr 16 2008)
Adrian Pastor
- Default key algorithm in Thomson and BT Home Hub routers (Apr 22 2008)
ajax_at_hotmail.com
- KwsPHP (Upload) Remote Code Execution Exploit (Apr 14 2008)
ak_at_red-database-security.com
- Oracle - Hardcoded Password and Password Reset of OUTLN User [DB13] (Apr 16 2008)
- Oracle - SQL Injection Vulnerability in SDO_UTIL [DB05] (Apr 16 2008)
- Oracle - SQL Injection in package SDO_IDX [DB07] (Apr 16 2008)
- Oracle - SQL Injection in package SDO_GEOM [DB06] (Apr 16 2008)
Albert Sellarès
- [CVE-2007-5301] alsaplayer PoC - exploit (Apr 09 2008)
Amit Klein
- Microsoft SWI blog inaccuracies (Apr 28 2008)
- Microsoft Windows DNS Stub Resolver Cache Poisoning (MS08-020) (Apr 08 2008)
Andrea Barisani
- [oCERT-2008-004] multiple speex implementations insufficient boundary checks (Apr 17 2008)
- [oCERT-2008-003] libpng zero-length chunks incorrect handling (Apr 13 2008)
- project announcement - oCERT - Open Source CERT (Apr 12 2008)
anonymous_at_mailinator.com
- Re: Hamachi Password Disclosure Vulnerability (Mar 30 2008)
ap_at_gnucitizen.org
- Re: Default key algorithm in Thomson and BT Home Hub routers (Apr 23 2008)
ascii
- WiKID wClient-PHP <= 3.0-2 Multiple XSS Vulnerabilities (Apr 11 2008)
blacklight_at_autistici.org
- Re: R.I.P. rgod (Apr 26 2008)
brad.antoniewicz_at_foundstone.com
- Swiki 1.5 Multiple Cross-Site Scripting Vulnerabilities (Apr 07 2008)
bugtraq_at_opencosmo.com
- OneSecurityDay 2008 - Web application auditing challenge (Apr 13 2008)
Cesar
- Token Kidnapping (Microsoft Security Advisory 951306) presentation available (Apr 19 2008)
Christian Kujau
- Re: R.I.P. rgod (Apr 30 2008)
- Re: R.I.P. rgod (Apr 29 2008)
Cisco Systems Product Security Incident Response Team
- Cisco Security Advisory: Cisco Network Admission Control Shared Secret Vulnerability (Apr 16 2008)
- Cisco Security Advisory: Cisco Unified Communications Disaster Recovery Framework Command Execution Vulnerability (Apr 03 2008)
contact_at_wsdeluxe.com
- Re: PHPSlideShow (toonchapter8.php) Cross-Site Scripting Vulnerability (Apr 16 2008)
CORE Security Technologies Advisories
- CORE-2008-0320 - Insufficient argument validation of hooked SSDT functions on multiple Antivirus and Firewalls (Apr 28 2008)
- CORE-2008-0314 - Orbit Downloader "Download failed" buffer overflow (Apr 03 2008)
crazy_kinq_at_hotmail.co.uk
- Xoops All Version -Articles- Article.PHP (ID) Blind SQL Injection ExpL0it (Apr 19 2008)
darkz.gsa_at_gamil.com
- Wikepage Wiki v.2007-2 Cross-Site Scripting (Apr 18 2008)
darkz.gsa_at_gmail.com
- LightNEasy v.1.2.2 flat Multiple Vulnerabilities (Apr 18 2008)
Darth Jedi
- RE: Internet explorer 7.0 spoofing (Apr 01 2008)
David Litchfield
- A New Class of Vulnerability in Oracle: Lateral SQL Injection (Apr 24 2008)
david130490_at_hotmail.com
- Trillian 3.1.9.0 DTD File Buffer Overflow (Apr 11 2008)
DeepSec Conference
- Announcement - DeepSec Conference 2008, Nov 11-14 2008 (Apr 16 2008)
Devin Carraway
- [SECURITY] [DSA 1548-1] New xpdf packages fix arbitrary code exitution (Apr 17 2008)
- [SECURITY] [DSA 1546-1] New gnumeric packages fix arbitrary code execution (Apr 10 2008)
- [SECURITY] [DSA 1543-1] New vlc packages fix several vulnerabilities (Apr 09 2008)
- [SECURITY] [DSA 1542-1] New libcairo packages fix arbitrary code execution (Apr 09 2008)
- [SECURITY] [DSA 1538-1] New alsaplayer packages fix arbitrary code execution (Apr 04 2008)
- [SECURITY] [DSA 1539-1] New mapserver packages fix multiple vulnerabilities (Apr 04 2008)
- [SECURITY] [DSA 1537-1] New xpdf packages fix multiple vulnerabilities (Apr 02 2008)
- [SECURITY] [DSA 1533-2] New exiftags packages fix several vulnerabilities (Apr 01 2008)
douchbag_at_douch.org
- Re: Re: Smf 1.1.4 Remote File Inclusion Vulnerabilities (Apr 21 2008)
Dragos Ruiu
- EUSecWest CFP Closes April 14th (conf May 21/22 2008) (Apr 10 2008)
Enno Rey
- Troopers08 Security Conference, April 23/24 (Munich/Germany) (Apr 14 2008)
erdc_at_echo.or.id
- [ECHO_ADV_89$2008] Softbiz Web Host Directory Script (search_result.php host_id) Blind Sql Injection Vulnerability (Apr 28 2008)
- [ECHO_ADV_88$2008] Prozilla Hosting Index (directory.php cat_id) Blind Sql Injection Vulnerability (Apr 28 2008)
evilcry_at_gmail.com
- TheGreenBowVPN, Login Credentials Disclosure (Apr 05 2008)
Florian Weimer
- [SECURITY] [DSA 1556-2] New perl packages fix denial of service (Apr 27 2008)
- [SECURITY] [DSA 1556-1] New perl packages fix denial of service (Apr 24 2008)
- [SECURITY] [DSA 1553-1] New ikiwiki packages fix cross-site request forgery (Apr 20 2008)
- [SECURITY] [DSA 1544-1] New pdns-recursor packages fix cache poisoning vulnerability (Apr 09 2008)
FreeBSD Security Advisories
- FreeBSD Security Advisory FreeBSD-SA-08:05.openssh (Apr 16 2008)
Gianluca Borello
- Re: Firefox 3.0 beta 5 crash (Apr 22 2008)
Guido Landi
- Re: xine-lib NES Sound Format Demuxer Buffer Overflow (Apr 23 2008)
hadihadi_zedehal_2006_at_yahoo.com
- Blogator-script 0.95 SQL Injection Vulnerbility (Apr 04 2008)
- Blogator-script 0.95 Change User Password Vulnerbility (Apr 04 2008)
hadikiamarsi_at_hotmail.com
- XSS Attack (Apr 29 2008)
- bug report (Apr 27 2008)
Hanno BÃ¶ck
- Cross site scripting issues in s9y (CVE-2008-1386, CVE-2008-1387) (Apr 22 2008)
- Correcting CVEs (was Re: [Full-disclosure] Cross site scripting issues in s9y (CVE-2008-1386, CVE-2008-1387)) (Apr 22 2008)
- clamav: Endless loop / hang with crafter arj, CVE-2008-1387 (Apr 15 2008)
houssamix_at_hotmail.fr
- BosNews 2002-2006 Remote add user admin (Apr 15 2008)
- BosNews v4.0 Remote add user admin (Apr 15 2008)
hsx_at_hotmail.fr
- KwsPHP Module ConcoursPhoto XSS (Apr 04 2008)
I)ruid
- CAU-2008-0002: Microsoft Windows SharePoint Services Picture Source XSS (Apr 08 2008)
- CAU-2008-0001 - Slowly Closing Door Race Condition (Mar 31 2008)
iDefense Labs
- iDefense Security Advisory 04.17.08: Multiple Vendor OpenOffice QPRO File Parsing Integer Underflow Vulnerability (Apr 17 2008)
- iDefense Security Advisory 04.17.08: Multiple Vendor OpenOffice QPRO Multiple Heap Overflow Vulnerabilities (Apr 17 2008)
- iDefense Security Advisory 04.17.08: Multiple Vendor OpenOffice EMF EMR_BITBLT Record Integer Overflow Vulnerability (Apr 17 2008)
- iDefense Security Advisory 04.17.08: Multiple Vendor OpenOffice OLE DocumentSummaryInformation Heap Overflow Vulnerability (Apr 17 2008)
- iDefense Security Advisory 04.15.08: Oracle Application Express Privilege Escalation Vulnerability (Apr 16 2008)
- iDefense Security Advisory 04.09.08: IBM DB2 Universal Database db2dasStartStopFMDaemon Buffer Overflow Vulnerability (Apr 15 2008)
- iDefense Security Advisory 04.09.08: IBM DB2 Universal Database Administration Server File Creation Vulnerability (Apr 15 2008)
- iDefense Security Advisory 04.14.08: ClamAV libclamav PE WWPack Heap Overflow Vulnerability (Apr 15 2008)
- iDefense Security Advisory 04.09.08: EMC DiskXtender Authentication Bypass Vulnerability (Apr 10 2008)
- iDefense Security Advisory 04.09.08: EMC DiskXtender MediaStor Format String Vulnerability (Apr 10 2008)
- iDefense Security Advisory 04.09.08: EMC DiskXtender File System Manager Stack Buffer Overflow Vulnerability (Apr 10 2008)
- iDefense Security Advisory 04.08.08: Microsoft Windows Graphics Rendering Engine Integer Overflow Vulnerability (Apr 08 2008)
- iDefense Security Advisory 04.08.08: Microsoft HxTocCtrl ActiveX Control Invalid Param Heap Corruption Vulnerability (Apr 08 2008)
- iDefense Security Advisory 04.03.08: Computer Associates Alert Notification Service Multiple RPC Buffer Overflow Vulnerabilities (Apr 04 2008)
- iDefense Security Advisory 04.02.08: Symantec Norton Internet Security 2008 ActiveX Control Buffer Overflow Vulnerability (Apr 03 2008)
- iDefense Security Advisory 04.03.08: SCO UnixWare pkgadd Directory Traversal Vulnerability (Apr 03 2008)
- iDefense Security Advisory 04.02.08: Symantec Internet Security 2008 ActiveDataInfo.LaunchProcess Design Error Vulnerability (Apr 03 2008)
- iDefense Security Advisory 03.31.08: Macrovision InstallShield InstallScript One-Click Install Untrusted Library Loading Vulnerability (Mar 31 2008)
info_at_ilionsecurity.ch
- Zune software - arbitrary file overwrite (Apr 23 2008)
infocus
- [INFIGO-2008-04-08]: ICQ 6 remote buffer overflow vulnerability (Apr 16 2008)
ipsdix_at_gmail.com
- R.I.P. rgod (Apr 25 2008)
irancrash_at_gmail.com
- Minibb 2.2a XSS Vulnerability (Apr 28 2008)
- Datalife Engine 6.7 XSRF (Apr 01 2008)
- EasyNews-40tr Multiple Remote Vulnerabilities (SQL Injection Exploit/XSS/LFI) (Mar 31 2008)
J. Carlos Nieto
- WordPress 2.5 - Salt cracking vulnerability (Apr 15 2008)
J. Oquendo
- TCP/IP security vulnerability disclosed (Apr 01 2008)
jaime.blasco_at_aitsec.com
- SAP Netweaver 6.40-7.0 Cross-Site-Scripting (Apr 09 2008)
- New tool released : Syslog Fuzzer (Apr 08 2008)
Jamie Strandboge
- [USN-602-1] Firefox vulnerabilities (Apr 21 2008)
- [USN-601-1] Squid vulnerability (Apr 14 2008)
- [USN-599-1] Ghostscript vulnerability (Apr 09 2008)
- [USN-598-1] CUPS vulnerabilities (Apr 02 2008)
- [USN-588-2] MySQL regression (Apr 02 2008)
Jeff Williams
- Attack Technique: File Download Injection (Apr 07 2008)
Jessica Hope
- WoltLab(R) Community Framework XSS and Full Path Disclosure Vulnerability (Apr 07 2008)
john_at_heathcosoft.com
- Re: h2desk helpdesk path disclosure vulnerability (Apr 28 2008)
jose_at_eyeos.org
- openMosix userspace library stack-based buffer overflow (Apr 06 2008)
joseph.giron13_at_gmail.com
- cevado technologies real estate CMS SQL injection (Mar 31 2008)
- Terracotta Personal Edition Multiple vulnerabilities (Mar 31 2008)
jplopezy_at_gmail.com
- GroupWise 7.0 mailto: scheme buffer overflow (Apr 28 2008)
- Re: Curious vulnerability in Excel 2007 (Apr 26 2008)
- GroupWise 7 attached bugs (Apr 26 2008)
- Curious vulnerability in Excel 2007 (Apr 26 2008)
- Trillian 3.1 basic nick crash (Apr 24 2008)
- Firefox 3.0 beta 5 crash (Apr 22 2008)
- Safari 3.1.1 Multiple Vulnerabilities for windows (Apr 22 2008)
- Re: Re: Re: Internet explorer 7.0 spoofing (Apr 01 2008)
Juha-Matti Laurio
- Re: [Full-disclosure] Secunia Research: Lotus Notes Folio Flat File Parsing Buffer Overflows (Apr 17 2008)
Justin Ferguson
- IOActive Security Advisory: Incorrect input validation in PyString_FromStringAndSize() leads to multiple buffer overflows (Apr 11 2008)
- IOActive Security Advisory: Buffer overflow in Python zlib extension module (Apr 09 2008)
Kees Cook
- [USN-604-1] Gnumeric vulnerability (Apr 21 2008)
- [USN-603-2] KOffice vulnerability (Apr 17 2008)
- [USN-603-1] poppler vulnerability (Apr 17 2008)
- [USN-600-1] rsync vulnerability (Apr 10 2008)
- [USN-597-1] OpenSSH vulnerability (Apr 01 2008)
laurent.gaffie_at_gmail.com
- xine-lib NES Sound Format Demuxer Buffer Overflow (Apr 23 2008)
- Re: NetClassifieds Sql Injection (Apr 23 2008)
Layer One
- LayerOne 2008 - Final Pre-Con Update (Apr 22 2008)
Liran Cohen
- Re: rPSA-2008-0151-1 libpng (Apr 30 2008)
Liu Zhen Hua
- Borland InterBase 2007 "ibserver.exe" Buffer Overflow Vulnerability POC (Apr 11 2008)
lpilorz_at_mailinator.com
- Vulnerabilities in kses-based HTML filters (Apr 02 2008)
Luigi Auriemma
- Re: Secunia Research: Lotus Notes Folio Flat File Parsing Buffer Overflows (Apr 15 2008)
- Directory traversal and multiple Denials of Service in HP OpenView NNM 7.53 (Apr 11 2008)
- Re: Multiple vulnerabilities in HP OpenView NNM 7.53 (Apr 08 2008)
- Multiple vulnerabilities in HP OpenView NNM 7.53 (Apr 07 2008)
- Directory traversal in LANDesk Management Suite 8.80.1.1 (Apr 02 2008)
luke.jennings_at_mwrinfosecurity.com
- ANNOUNCE: Security Implications of Windows Access Tokens Whitepaper (Apr 18 2008)
m.memelli_at_be4mind.com
- Re: BigAnt Server 2.2 PreAuth Remote SEH Overflow Exploit (0day) (Apr 17 2008)
Major Malfunction
- London DEFCON meet - Thursday 1st May - DC4420 (Apr 27 2008)
marc.deroche_at_wins.ch
- Re: WoltLab(R) Community Framework WCF 1.0.6 (Apr 12 2008)
Mark Crowther
- IRM Security Advisory : RedDot CMS SQL injection vulnerability (Apr 21 2008)
Marshall Eubanks
- Re: heanet.dl.sourceforge.net hacked? (Apr 30 2008)
Martin Schulze
- [SECURITY] [DSA 1547-1] New OpenOffice.org packages fix arbitrary code execution (Apr 17 2008)
Matthias Geerdsen
- [ GLSA 200804-30 ] KDE start_kdeinit: Multiple vulnerabilities (Apr 29 2008)
- [ GLSA 200804-24 ] DBmail: Data disclosure (Apr 18 2008)
- [ GLSA 200804-23 ] CUPS: Integer overflow vulnerability (Apr 18 2008)
Mauro Faccenda
- Re: Firefox 3.0 beta 5 crash (Apr 22 2008)
Michael Scheidell
- heanet.dl.sourceforge.net hacked? (Apr 30 2008)
Michael.Brooks.SPAM_at_pork.rooksecurity.com
- Deciphering the PHP-Nuke Capthca (Apr 19 2008)
- Deciphering the Simple Machines Forum audio Captcha (Apr 19 2008)
Mike Diaz
- RE: Internet explorer 7.0 spoofing (Apr 02 2008)
Milen Rangelov
- licq remote DoS? (Apr 08 2008)
mirrors_at_heanet.ie
- Re: heanet.dl.sourceforge.net hacked? (Apr 30 2008)
Morgan ARMAND
- Dotclear 'ecrire/images.php' Arbitrary File Upload Vulnerability (Apr 15 2008)
Moritz Muehlenhoff
- [SECURITY] [DSA 1563-1] New asterisk packages fix denial of service (Apr 30 2008)
- [SECURITY] [DSA 1562-1] New iceape packages fix arbitrary code execution (Apr 28 2008)
- [SECURITY] [DSA 1558-1] New xulrunner packages fix arbitrary code execution (Apr 24 2008)
- [SECURITY] [DSA 1534-2] New iceape packages fix regression (Apr 24 2008)
- [SECURITY] [DSA 1555-1] New iceweasel packages fix arbitrary code execution (Apr 23 2008)
- [SECURITY] [DSA 1552-1] New mplayer packages fix arbitrary code execution (Apr 19 2008)
- [SECURITY] [DSA 1551-1] New python2.4 packages fix several vulnerabilities (Apr 19 2008)
- [SECURITY] [DSA 1550-1] New suphp packages fix local privilege escalation (Apr 17 2008)
- [SECURITY] [DSA 1549-1] New clamav packages fix several vulnerabilities (Apr 17 2008)
- [SECURITY] [DSA 1545-1] New rsync packages fix arbitrary code execution (Apr 10 2008)
- [SECURITY] [DSA 1541-1] New openldap2.3 packages fix denial of service (Apr 08 2008)
mrangelov_at_globul.bg
- Re: Re: licq remote DoS? (Apr 10 2008)
nebelfrost23_at_web.de
- Writers Block SQL Injection Vulnerabilities (Apr 02 2008)
netmantis.com_at_gmail.com
- Pu Arcade component for Joomla - SQL injection (Apr 09 2008)
NGSSoftware Insight Security Research
- Critical Vulnerability in SNMPc (Apr 30 2008)
nixpanic_at_users.sourceforge.net
- Re: openMosix userspace library stack-based buffer overflow (Apr 10 2008)
nnposter_at_disclosed.not
- Alkacon OpenCms sessions.jsp searchfilter XSS (Apr 04 2008)
- F5 BIG-IP Management Interface Perl Injection (Apr 04 2008)
no-reply_at_aria-security.net
- Joomla Component com_lms SQL Injection (Apr 02 2008)
Noah Meyerhans
- [SECURITY] [DSA 1554-1] New roundup packages fix cross-site scripting vulnerability (Apr 22 2008)
noreply_at_aria-security.com
- NetClassifieds Sql Injection (Apr 22 2008)
- Horde Webmail XSS [Aria-Security] (Apr 22 2008)
- 5th avenue Shopping Cart SQL Injection (Apr 17 2008)
- w2b.ru multiple products SQL Injection (Apr 10 2008)
- paFileDB 3.1 Remote SQL Injection (Apr 09 2008)
Oliver Goebel
- IMF 2008 - 2nd Call for Papers (Apr 22 2008)
organiser_at_syscan.org
- SyScan'08 Singapore - Call for Paper (Apr 20 2008)
packet_at_packetstormsecurity.org
- Re: Powered by gCards v1.46 SQL (Apr 21 2008)
Pascal Cretain
- Wayport Public Access PC Authentication Bypass Weakness (Apr 08 2008)
Patrick Webster
- Tumbleweed SecureTransport FileTransfer ActiveX Control Buffer Overflow (Apr 07 2008)
Pierre-Yves Rofes
- [ GLSA 200804-29 ] Comix: Multiple vulnerabilities (Apr 25 2008)
- [ GLSA 200804-09 ] am-utils: Insecure temporary file creation (Apr 10 2008)
- [ GLSA 200804-10 ] Tomcat: Multiple vulnerabilities (Apr 10 2008)
- [ GLSA 200804-02 ] bzip2: Denial of Service (Apr 02 2008)
Pieter de Boer
- Re: heanet.dl.sourceforge.net hacked? (Apr 30 2008)
pobore_at_gmail.com
- Re: Simple Machines Forum "SMF Shoutbox" Mod Persistent XSS (Apr 22 2008)
pocadm_at_gmail.com
- POC2008 call for papers (Apr 03 2008)
poplix
- Parallels virtuozzo's VZPP multiple csrf vulnerabilities (Apr 02 2008)
ProCheckUp Research
- PR07-44: XSS on RSA Authentication Agent login page (Apr 23 2008)
- PR07-43: Cross-domain redirect on RSA Authentication Agent (Apr 23 2008)
Rainer Duffner
- Re: heanet.dl.sourceforge.net hacked? (Apr 30 2008)
Raphael Marichez
- [ GLSA 200804-12 ] gnome-screensaver: Privilege escalation (Apr 11 2008)
Razi Shaban
- Re: Internet explorer 7.0 spoofing (Mar 31 2008)
Recon Conference
- Recon 2008 CFP last call, early registration open (Apr 02 2008)
Robert Buchholz
- [ GLSA 200804-26 ] Openfire: Denial of Service (Apr 23 2008)
- [ GLSA 200804-25 ] VLC: User-assisted execution of arbitrary code (Apr 23 2008)
- [ GLSA 200804-22 ] PowerDNS Recursor: DNS Cache Poisoning (Apr 18 2008)
- [ GLSA 200804-21 ] Adobe Flash Player: Multiple vulnerabilities (Apr 18 2008)
- [ GLSA 200804-20 ] Sun JDK/JRE: Multiple vulnerabilities (Apr 17 2008)
- [ GLSA 200804-19 ] PHP Toolkit: Data disclosure and Denial of Service (Apr 17 2008)
- [ GLSA 200804-18 ] Poppler: User-assisted execution of arbitrary code (Apr 17 2008)
- [ GLSA 200804-17 ] Speex: User-assisted execution of arbitrary code (Apr 17 2008)
- [ GLSA 200804-16 ] rsync: Execution of arbitrary code (Apr 17 2008)
- [ GLSA 200804-13 ] Asterisk: Multiple vulnerabilities (Apr 14 2008)
- [ GLSA 200804-14 ] Opera: Multiple vulnerabilities (Apr 14 2008)
- [ GLSA 200804-15 ] libpng: Execution of arbitrary code (Apr 14 2008)
- [ GLSA 200804-11 ] policyd-weight: Insecure temporary file creation (Apr 11 2008)
- [ GLSA 200804-07 ] PECL APC: Buffer Overflow (Apr 09 2008)
- [ GLSA 200804-04 ] MySQL: Multiple vulnerabilities (Apr 06 2008)
- [ GLSA 200804-06 ] UnZip: User-assisted execution of arbitrary code (Apr 06 2008)
- [ GLSA 200804-05 ] NX: User-assisted execution of arbitrary code (Apr 06 2008)
- [ GLSA 200804-03 ] OpenSSH: Privilege escalation (Apr 05 2008)
- [ GLSA 200804-01 ] CUPS: Multiple vulnerabilities (Apr 01 2008)
roberto.suggi_at_security-assessment.com
- SugarCRM Community Edition Local File Disclosure Vulnerability (Apr 28 2008)
rohit_at_yourfreeworld.com
- Re: Yourfreeworld Styleish Text Ads Script (Apr 29 2008)
rPath Update Announcements
- rPSA-2008-0151-1 libpng (Apr 29 2008)
- rPSA-2008-0149-1 idle python (Apr 25 2008)
- rPSA-2008-0139-1 gnome-ssh-askpass openssh openssh-client openssh-server (Apr 04 2008)
- rPSA-2008-0138-1 tshark wireshark (Apr 04 2008)
- rPSA-2008-0136-1 cups (Apr 04 2008)
S21sec labs
- S21SEC-043-en:Cezanne SW Blind SQL Injection (Apr 14 2008)
- S21SEC-042-en:Cezanne SW Cross-Site Scripting (login required) (Apr 14 2008)
- S21SEC-041-en:Cezanne SW Cross-Site Scripting (Apr 14 2008)
Sabun_at_hotmail.com
- Koobi Pro 6.25 poll Remote SQL Injection Vulnerability (Apr 14 2008)
Sebastien gioria
- DOINGSOFT-2008-03-10-001 - XSS issue in BOXiR2 (Apr 13 2008)
Secunia Research
- Secunia Research: Internet Explorer Data Stream Handling Vulnerability (Apr 14 2008)
- Secunia Research: activePDF DocConverter Applix Graphics Parsing Vulnerabilities (Apr 14 2008)
- Secunia Research: Symantec Mail Security Applix Graphics Parsing Vulnerabilities (Apr 14 2008)
- Secunia Research: Autonomy Keyview EML Reader Buffer Overflows (Apr 14 2008)
- Secunia Research: Autonomy Keyview Applix Graphics Parsing Vulnerabilities (Apr 14 2008)
- Secunia Research: HP OpenView Network Node Manager OpenView5.exe Directory Traversal (Apr 14 2008)
- Secunia Research: Lotus Notes EML Reader Buffer Overflows (Apr 14 2008)
- Secunia Research: Lotus Notes Folio Flat File Parsing Buffer Overflows (Apr 14 2008)
- Secunia Research: Lotus Notes Applix Graphics Parsing Vulnerabilities (Apr 14 2008)
- Secunia Research: Symantec Mail Security Folio Flat File Parsing Buffer Overflows (Apr 14 2008)
- Secunia Research: Autonomy Keyview Folio Flat File Parsing Buffer Overflows (Apr 14 2008)
- Secunia Research: Lotus Notes htmsr.dll Buffer Overflows (Apr 14 2008)
- Secunia Research: activePDF DocConverter Folio Flat File Parsing Buffer Overflows (Apr 14 2008)
- Secunia Research: Lotus Notes kvdocve.dll Path Processing Buffer Overflow (Apr 14 2008)
- Secunia Research: Adobe Flash Player "Declare Function (V7)" Heap Overflow (Apr 14 2008)
securfrog_at_gmail.com
- DIVX Player <= 6.7.0 Buffer Overflow PoC ( .SRT ) (Apr 15 2008)
Security Officer
- AST-2008-006 - 3-way handshake in IAX2 incomplete (Apr 22 2008)
security-alert_at_hp.com
- [security bulletin] HPSBMA02331 SSRT080000 rev.1 - HP-UX running WBEM Services, Remote Execution of Arbitrary Code, Gain Extended Privileges (Apr 30 2008)
- HPSBGN02333 SSRT080031 rev.1 - HP Software Update HPeDiag Running on Windows, Remote Disclosure of Information and Execution of Arbitrary Code (Apr 24 2008)
- [security bulletin] HPSBMA02328 SSRT071293 rev.2 - HP OpenView Network Node Manager (OV NNM) Running Apache, Remote Cross Site Scripting (XSS), Denial of Service (DoS), Execute Arbitrary Code (Apr 17 2008)
- [security bulletin] HPSBST02329 SSRT080048 rev.1 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS08-018 to MS08-025 (Apr 17 2008)
- [security bulletin] HPSBMA02133 SSRT061201 rev.8 - HP Oracle for OpenView (OfO) Critical Patch Update (Apr 17 2008)
- [security bulletin] HPSBMA02242 SSRT061260 rev.3 - HP OpenView Network Node Manager (OV NNM) Running Shared Trace Service, Remote Arbitrary Code Execution (Apr 08 2008)
- [security bulletin] [security bulletin] HPSBST02318 SSRT080018 rev.1 - HP Storage Essentials Software, Remote Unauthorized Access to Data (Apr 08 2008)
- [security bulletin] HPSBMA02327 SSRT071455 rev.1 - HP Integrity Servers iLO-2 Management Processors (iLO-2 MP), Denial of Service (DoS) (Apr 08 2008)
- [security bulletin] HPSBMA02323 SSRT080032 rev.1 - HP USB Floppy Drive Key (Option) for ProLiant Servers, Local Virus Infection (Apr 04 2008)
- HPSBTU02325 SSRT080006 rev.1 - HP Internet Express for Tru64 UNIX running PostgreSQL, Arbitrary Code Execution, Privilege Elevation, or Denial of Service (DoS) (Apr 02 2008)
- HPSBMA02317 SSRT080026 rev.1 - HP Select Identity Software, Gain Unauthorized Access (Apr 02 2008)
security_at_mandriva.com
- [ MDVSA-2008:093 ] - Updated vorbis-tools packages fix vulnerabilities (Apr 29 2008)
- [ MDVSA-2008:092 ] - Updated gstreamer-plugins-good packages fix vulnerabilities (Apr 29 2008)
- [ MDVSA-2008:091 ] - Updated wireshark packages fix denial of service vulnerabilities (Apr 24 2008)
- [ MDVSA-2008:090 ] - Updated OpenOffice.org packages fix vulnerabilities (Apr 20 2008)
- [ MDVSA-2008:089 ] - Updated poppler packages fix vulnerability (Apr 17 2008)
- [ MDVSA-2008:088 ] - Updated clamav packages fix multiple vulnerabilities (Apr 17 2008)
- [ MDVSA-2008:087 ] - Updated policykit package fixes format string vulnerability (Apr 16 2008)
- [ MDVSA-2008:086 ] - Updated kernel packages fix vulnerability (Apr 15 2008)
- [ MDVSA-2008:086 ] - Updated kernel packages fix vulnerability (Apr 15 2008)
- [ MDVSA-2008:085 ] - Updated python packages fix arbitrary code execution vulnerability (Apr 15 2008)
- [ MDVSA-2008:084 ] - Updated rsync packages fix vulnerability (Apr 11 2008)
- [ MDVSA-2008:083 ] - Updated audit packages fix vulnerability (Apr 09 2008)
- [ MDVSA-2008:082 ] - Updated php-apc packages fix vulnerability (Apr 09 2008)
- [ MDVSA-2008:081 ] - Updated CUPS packages fix multiple vulnerabilities (Apr 02 2008)
security_at_securecomputing.com
- Webwasher Denial of Service Vulnerability (Apr 03 2008)
securityfocus.com_at_thermoman.de
- Re: Re: heanet.dl.sourceforge.net hacked? (Apr 30 2008)
Simon Ryeo
- CDNetworks Nefficient Download(NeffyLauncher.dll) Vulnerabilities (Apr 07 2008)
Skratz0r
- Re: Firefox 3.0 beta 5 crash (Slightly unrelated) (Apr 22 2008)
Stefano Zanero
- CFP: Workshop on Open Source Software for Computer and Network Forensics (Apr 30 2008)
Steve Kemp
- [SECURITY] [DSA 1540-2] New lighttpd packages fix denial of service (Apr 15 2008)
- [SECURITY] [DSA 1540-1] New lighttpd packages fix denial of service (Apr 07 2008)
Steven J. Murdoch
- Wordpress 2.5 Cookie Integrity Protection Vulnerability (Apr 25 2008)
sys-project_at_hotmail.com
- Classifieds Caffe (index.php cat_id) Remote SQL Injection (Apr 16 2008)
- Koobi CMS 4.2.4/4.2.5/4.3.0 Multiple Remote SQL Injection Vulnerabilities (Apr 15 2008)
Team SHATTER
- Team SHATTER Security Advisory: IBM DB2 UDB Arbitrary code execution in ADMIN_SP_C/ADMIN_SP_C2 procedures (Apr 18 2008)
- Team SHATTER Security Advisory: IBM DB2 UDB Arbitrary file overwrite in SYSPROC.NNSTAT procedure (Apr 18 2008)
- Team SHATTER Security Advisory: Multiple DoS in JAR files manipulation procedures (Apr 18 2008)
th3.r00k.nospam_at_pork.gmail.com
- Sea-Surfing on the Motorola Surfboard (Apr 18 2008)
- BitTorrent Clients and CSRF (Apr 18 2008)
The Dark Tangent
- DEF CON 16 Retro Announcement! Back to Bang! (Apr 12 2008)
- DEF CON 16 Retro Announcement! Back to Bang! (Apr 11 2008)
Thijs Kinkhorst
- [SECURITY] [DSA 1561-1] New ldm packages fix information disclosure (Apr 28 2008)
- [SECURITY] [DSA 1560-1] New kronolith2 packages fix cross site scripting (Apr 28 2008)
- [SECURITY] [DSA 1557-1] New phpmyadmin packages fix several vulnerabilities (Apr 24 2008)
- [SECURITY] [DSA 1536-1] New libxine packages fix several vulnerabilities (Mar 31 2008)
Thomas Pollet
- Lotus expeditor rcplauncher uri handler vulnerability (Apr 25 2008)
Tim Brown
- Medium security hole affecting Festival on Debian unstable/testing and Ubuntu Hardy Heron (Apr 03 2008)
Tobias Heinlein
- [ GLSA 200804-27 ] SILC: Multiple vulnerabilities (Apr 24 2008)
- [ GLSA 200804-28 ] JRockit: Multiple vulnerabilities (Apr 24 2008)
- [ GLSA 200804-08 ] lighttpd: Multiple vulnerabilities (Apr 10 2008)
turkish-warriorr_at_hotmail.com
- Powered by gCards v1.46 SQL (Apr 18 2008)
- Fones Clinic Mart SQL (Apr 14 2008)
virangar_nml_at_yahoo.com
- Wikepage Opus 13 2007.2 Directory Traversal Vulnerbility (Apr 07 2008)
VMware Security team
- VMSA-2008-0007 Moderate Updated Service Console packages pcre, net-snmp, and OpenPegasus (Apr 15 2008)
vulnerabilityresearch_at_digitaldefense.net
- DDIVRT-2008-11 BadBlue uninst.exe DoS (Apr 24 2008)
vulns_at_wintercore.com
- [W01-0408] Realtek HD Audio Codec Drivers (Vista) - Local Privilege Escalation (Apr 23 2008)
w0lfd33m_at_hotmail.com
- Re: Re: Internet explorer 7.0 spoofing (Mar 31 2008)
Williams, James K
- CA DSM gui_cm_ctrls ActiveX Control Vulnerability (Apr 16 2008)
- CA ARCserve Backup for Laptops and Desktops Server and CA Desktop Management Suite Multiple Vulnerabilities (Apr 04 2008)
- CA Alert Notification Server Multiple Vulnerabilities (Apr 04 2008)
win32.exe_at_w.cn
- remote file include (Apr 15 2008)
- remote file include (Apr 15 2008)
wsn1983_at_gmail.com
- Microsoft Works 7 WkImgSrv.dll crash POC (Apr 17 2008)
yeppy_at_noreply..org
- Re: Wikepage Opus 13 2007.2 Directory Traversal Vulnerbility (Apr 07 2008)
zdi-disclosures_at_3com.com
- ZDI-08-022: Apple Safari WebKit PCRE Handling Integer Overflow Vulnerability (Apr 16 2008)
- ZDI-08-021: Adobe Flash Player DeclareFunction2 Invalid Object Use Vulnerability (Apr 08 2008)
- ZDI-08-020: Microsoft GDI WMF Parsing Heap Overflow Vulnerability (Apr 08 2008)
- ZDI-08-019: Apple QuickTime Malformed VR obji Atom Parsing Memory Corruption Vulnerability (Apr 03 2008)
- ZDI-08-017: Apple QuickTime Kodak Encoding Heap Overflow Vulnerability (Apr 03 2008)
- ZDI-08-015: Apple QuickTime Clipping Region Heap Overflow Vulnerability (Apr 03 2008)
- ZDI-08-016: Apple QuickTime MP4A Atom Parsing Heap Corruption Vulnerability (Apr 03 2008)
- ZDI-08-018: Apple QuickTime Run Length Encoding Heap Overflow Vulnerability (Apr 03 2008)
- ZDI-08-014: Apple Quicktime Multiple Opcode Memory Corruption Vulnerabilities (Apr 03 2008)