Home page logo
/

323 messages starting Apr 10 08 and ending Apr 16 08
Date index | Thread index | Author index

3APA3A

Re: licq remote DoS? 3APA3A (Apr 10)

Adam Laurie

ANNOUNCE: Apache-SSL security release - apache_1.3.41+ssl_1.59 Adam Laurie (Apr 02)
ANNOUNCE: RFIDIOt-0.1s release (now available for Windows) Adam Laurie (Apr 18)

admin

Carbon Communities forum Multiple Vulnerabilities. admin (Apr 16)
BigAnt Server 2.2 PreAuth Remote SEH Overflow Exploit (0day) admin (Apr 16)
Acidcat CMS Multiple Vulnerabilities admin (Apr 21)

Adrian Pastor

Default key algorithm in Thomson and BT Home Hub routers Adrian Pastor (Apr 22)

ajax

KwsPHP (Upload) Remote Code Execution Exploit ajax (Apr 15)

ak

Oracle - SQL Injection in package SDO_GEOM [DB06] ak (Apr 16)
Oracle - SQL Injection in package SDO_IDX [DB07] ak (Apr 16)
Oracle - SQL Injection Vulnerability in SDO_UTIL [DB05] ak (Apr 16)
Oracle - Hardcoded Password and Password Reset of OUTLN User [DB13] ak (Apr 16)

Albert Sellarès

[CVE-2007-5301] alsaplayer PoC - exploit Albert Sellarès (Apr 09)

Amit Klein

Microsoft Windows DNS Stub Resolver Cache Poisoning (MS08-020) Amit Klein (Apr 08)
Microsoft SWI blog inaccuracies Amit Klein (Apr 28)

Andrea Barisani

project announcement - oCERT - Open Source CERT Andrea Barisani (Apr 14)
[oCERT-2008-003] libpng zero-length chunks incorrect handling Andrea Barisani (Apr 14)
[oCERT-2008-004] multiple speex implementations insufficient boundary checks Andrea Barisani (Apr 17)

anonymous

Re: Hamachi Password Disclosure Vulnerability anonymous (Apr 01)

ap

Re: Default key algorithm in Thomson and BT Home Hub routers ap (Apr 23)

ascii

WiKID wClient-PHP <= 3.0-2 Multiple XSS Vulnerabilities ascii (Apr 11)

a . westtermann

Re: Alkacon OpenCms sessions.jsp searchfilter XSS a . westtermann (Apr 10)

blacklight

Re: R.I.P. rgod blacklight (Apr 28)

brad . antoniewicz

Swiki 1.5 Multiple Cross-Site Scripting Vulnerabilities brad . antoniewicz (Apr 08)

bugtraq

OneSecurityDay 2008 - Web application auditing challenge bugtraq (Apr 14)

Cesar

Token Kidnapping (Microsoft Security Advisory 951306) presentation available Cesar (Apr 19)

Christian Kujau

Re: R.I.P. rgod Christian Kujau (Apr 29)
Re: R.I.P. rgod Christian Kujau (Apr 30)

Cisco Systems Product Security Incident Response Team

Cisco Security Advisory: Cisco Unified Communications Disaster Recovery Framework Command Execution Vulnerability Cisco Systems Product Security Incident Response Team (Apr 03)
Cisco Security Advisory: Cisco Network Admission Control Shared Secret Vulnerability Cisco Systems Product Security Incident Response Team (Apr 16)

contact

Re: PHPSlideShow (toonchapter8.php) Cross-Site Scripting Vulnerability contact (Apr 16)

CORE Security Technologies Advisories

CORE-2008-0314 - Orbit Downloader "Download failed" buffer overflow CORE Security Technologies Advisories (Apr 04)
CORE-2008-0320 - Insufficient argument validation of hooked SSDT functions on multiple Antivirus and Firewalls CORE Security Technologies Advisories (Apr 29)

crazy_kinq

Xoops All Version -Articles- Article.PHP (ID) Blind SQL Injection ExpL0it crazy_kinq (Apr 21)

darkz . gsa

LightNEasy v.1.2.2 flat Multiple Vulnerabilities darkz . gsa (Apr 18)
Wikepage Wiki v.2007-2 Cross-Site Scripting darkz . gsa (Apr 18)

Darth Jedi

RE: Internet explorer 7.0 spoofing Darth Jedi (Apr 02)

david130490

Trillian 3.1.9.0 DTD File Buffer Overflow david130490 (Apr 11)

David Litchfield

A New Class of Vulnerability in Oracle: Lateral SQL Injection David Litchfield (Apr 24)

DeepSec Conference

Announcement - DeepSec Conference 2008, Nov 11-14 2008 DeepSec Conference (Apr 17)

Devin Carraway

[SECURITY] [DSA 1533-2] New exiftags packages fix several vulnerabilities Devin Carraway (Apr 01)
[SECURITY] [DSA 1537-1] New xpdf packages fix multiple vulnerabilities Devin Carraway (Apr 03)
[SECURITY] [DSA 1539-1] New mapserver packages fix multiple vulnerabilities Devin Carraway (Apr 04)
[SECURITY] [DSA 1538-1] New alsaplayer packages fix arbitrary code execution Devin Carraway (Apr 04)
[SECURITY] [DSA 1542-1] New libcairo packages fix arbitrary code execution Devin Carraway (Apr 09)
[SECURITY] [DSA 1543-1] New vlc packages fix several vulnerabilities Devin Carraway (Apr 09)
[SECURITY] [DSA 1546-1] New gnumeric packages fix arbitrary code execution Devin Carraway (Apr 11)
[SECURITY] [DSA 1548-1] New xpdf packages fix arbitrary code exitution Devin Carraway (Apr 17)

douchbag

Re: Re: Smf 1.1.4 Remote File Inclusion Vulnerabilities douchbag (Apr 21)

Dragos Ruiu

EUSecWest CFP Closes April 14th (conf May 21/22 2008) Dragos Ruiu (Apr 10)

Enno Rey

Troopers08 Security Conference, April 23/24 (Munich/Germany) Enno Rey (Apr 15)

erdc

[ECHO_ADV_88$2008] Prozilla Hosting Index (directory.php cat_id) Blind Sql Injection Vulnerability erdc (Apr 28)
[ECHO_ADV_89$2008] Softbiz Web Host Directory Script (search_result.php host_id) Blind Sql Injection Vulnerability erdc (Apr 28)

evilcry

TheGreenBowVPN, Login Credentials Disclosure evilcry (Apr 05)

Florian Weimer

[SECURITY] [DSA 1544-1] New pdns-recursor packages fix cache poisoning vulnerability Florian Weimer (Apr 09)
[SECURITY] [DSA 1553-1] New ikiwiki packages fix cross-site request forgery Florian Weimer (Apr 21)
[SECURITY] [DSA 1556-1] New perl packages fix denial of service Florian Weimer (Apr 24)
[SECURITY] [DSA 1556-2] New perl packages fix denial of service Florian Weimer (Apr 28)

FreeBSD Security Advisories

FreeBSD Security Advisory FreeBSD-SA-08:05.openssh FreeBSD Security Advisories (Apr 17)

Gianluca Borello

Re: Firefox 3.0 beta 5 crash Gianluca Borello (Apr 22)

Guido Landi

Re: xine-lib NES Sound Format Demuxer Buffer Overflow Guido Landi (Apr 24)

hadihadi_zedehal_2006

Blogator-script 0.95 Change User Password Vulnerbility hadihadi_zedehal_2006 (Apr 05)
Blogator-script 0.95 SQL Injection Vulnerbility hadihadi_zedehal_2006 (Apr 05)

hadikiamarsi

bug report hadikiamarsi (Apr 28)
XSS Attack hadikiamarsi (Apr 29)

Hanno Böck

clamav: Endless loop / hang with crafter arj, CVE-2008-1387 Hanno Böck (Apr 15)
Correcting CVEs (was Re: [Full-disclosure] Cross site scripting issues in s9y (CVE-2008-1386, CVE-2008-1387)) Hanno Böck (Apr 22)
Cross site scripting issues in s9y (CVE-2008-1386, CVE-2008-1387) Hanno Böck (Apr 22)

houssamix

BosNews v4.0 Remote add user admin houssamix (Apr 15)
BosNews 2002-2006 Remote add user admin houssamix (Apr 15)

hsx

KwsPHP Module ConcoursPhoto XSS hsx (Apr 04)

iDefense Labs

iDefense Security Advisory 03.31.08: Macrovision InstallShield InstallScript One-Click Install Untrusted Library Loading Vulnerability iDefense Labs (Apr 01)
iDefense Security Advisory 04.02.08: Symantec Internet Security 2008 ActiveDataInfo.LaunchProcess Design Error Vulnerability iDefense Labs (Apr 04)
iDefense Security Advisory 04.03.08: SCO UnixWare pkgadd Directory Traversal Vulnerability iDefense Labs (Apr 04)
iDefense Security Advisory 04.02.08: Symantec Norton Internet Security 2008 ActiveX Control Buffer Overflow Vulnerability iDefense Labs (Apr 04)
iDefense Security Advisory 04.03.08: Computer Associates Alert Notification Service Multiple RPC Buffer Overflow Vulnerabilities iDefense Labs (Apr 04)
iDefense Security Advisory 04.08.08: Microsoft HxTocCtrl ActiveX Control Invalid Param Heap Corruption Vulnerability iDefense Labs (Apr 09)
iDefense Security Advisory 04.08.08: Microsoft Windows Graphics Rendering Engine Integer Overflow Vulnerability iDefense Labs (Apr 09)
iDefense Security Advisory 04.09.08: EMC DiskXtender File System Manager Stack Buffer Overflow Vulnerability iDefense Labs (Apr 11)
iDefense Security Advisory 04.09.08: EMC DiskXtender MediaStor Format String Vulnerability iDefense Labs (Apr 11)
iDefense Security Advisory 04.09.08: EMC DiskXtender Authentication Bypass Vulnerability iDefense Labs (Apr 11)
iDefense Security Advisory 04.14.08: ClamAV libclamav PE WWPack Heap Overflow Vulnerability iDefense Labs (Apr 15)
iDefense Security Advisory 04.09.08: IBM DB2 Universal Database Administration Server File Creation Vulnerability iDefense Labs (Apr 16)
iDefense Security Advisory 04.09.08: IBM DB2 Universal Database db2dasStartStopFMDaemon Buffer Overflow Vulnerability iDefense Labs (Apr 16)
iDefense Security Advisory 04.15.08: Oracle Application Express Privilege Escalation Vulnerability iDefense Labs (Apr 16)
iDefense Security Advisory 04.17.08: Multiple Vendor OpenOffice OLE DocumentSummaryInformation Heap Overflow Vulnerability iDefense Labs (Apr 18)
iDefense Security Advisory 04.17.08: Multiple Vendor OpenOffice EMF EMR_BITBLT Record Integer Overflow Vulnerability iDefense Labs (Apr 18)
iDefense Security Advisory 04.17.08: Multiple Vendor OpenOffice QPRO Multiple Heap Overflow Vulnerabilities iDefense Labs (Apr 18)
iDefense Security Advisory 04.17.08: Multiple Vendor OpenOffice QPRO File Parsing Integer Underflow Vulnerability iDefense Labs (Apr 18)

info

Zune software - arbitrary file overwrite info (Apr 23)

infocus

[INFIGO-2008-04-08]: ICQ 6 remote buffer overflow vulnerability infocus (Apr 16)

ipsdix

R.I.P. rgod ipsdix (Apr 25)

irancrash

EasyNews-40tr Multiple Remote Vulnerabilities (SQL Injection Exploit/XSS/LFI) irancrash (Apr 01)
Datalife Engine 6.7 XSRF irancrash (Apr 02)
Minibb 2.2a XSS Vulnerability irancrash (Apr 28)

I)ruid

CAU-2008-0001 - Slowly Closing Door Race Condition I)ruid (Apr 01)
CAU-2008-0002: Microsoft Windows SharePoint Services Picture Source XSS I)ruid (Apr 09)

jaime . blasco

New tool released : Syslog Fuzzer jaime . blasco (Apr 08)
SAP Netweaver 6.40-7.0 Cross-Site-Scripting jaime . blasco (Apr 09)

Jamie Strandboge

[USN-588-2] MySQL regression Jamie Strandboge (Apr 03)
[USN-598-1] CUPS vulnerabilities Jamie Strandboge (Apr 03)
[USN-599-1] Ghostscript vulnerability Jamie Strandboge (Apr 09)
[USN-601-1] Squid vulnerability Jamie Strandboge (Apr 14)
[USN-602-1] Firefox vulnerabilities Jamie Strandboge (Apr 22)

J. Carlos Nieto

WordPress 2.5 - Salt cracking vulnerability J. Carlos Nieto (Apr 15)

Jeff Williams

Attack Technique: File Download Injection Jeff Williams (Apr 07)

Jessica Hope

WoltLab(R) Community Framework XSS and Full Path Disclosure Vulnerability Jessica Hope (Apr 08)

john

Re: h2desk helpdesk path disclosure vulnerability john (Apr 29)

J. Oquendo

TCP/IP security vulnerability disclosed J. Oquendo (Apr 01)

jose

openMosix userspace library stack-based buffer overflow jose (Apr 07)

joseph . giron13

Terracotta Personal Edition Multiple vulnerabilities joseph . giron13 (Apr 01)
cevado technologies real estate CMS SQL injection joseph . giron13 (Apr 01)

jplopezy

Re: Re: Re: Internet explorer 7.0 spoofing jplopezy (Apr 02)
Safari 3.1.1 Multiple Vulnerabilities for windows jplopezy (Apr 22)
Firefox 3.0 beta 5 crash jplopezy (Apr 22)
Trillian 3.1 basic nick crash jplopezy (Apr 24)
Curious vulnerability in Excel 2007 jplopezy (Apr 26)
GroupWise 7 attached bugs jplopezy (Apr 26)
Re: Curious vulnerability in Excel 2007 jplopezy (Apr 26)
GroupWise 7.0 mailto: scheme buffer overflow jplopezy (Apr 28)

Juha-Matti Laurio

Re: [Full-disclosure] Secunia Research: Lotus Notes Folio Flat File Parsing Buffer Overflows Juha-Matti Laurio (Apr 17)

Justin Ferguson

IOActive Security Advisory: Buffer overflow in Python zlib extension module Justin Ferguson (Apr 09)
IOActive Security Advisory: Incorrect input validation in PyString_FromStringAndSize() leads to multiple buffer overflows Justin Ferguson (Apr 11)

Kees Cook

[USN-597-1] OpenSSH vulnerability Kees Cook (Apr 02)
[USN-600-1] rsync vulnerability Kees Cook (Apr 11)
[USN-603-1] poppler vulnerability Kees Cook (Apr 17)
[USN-603-2] KOffice vulnerability Kees Cook (Apr 17)
[USN-604-1] Gnumeric vulnerability Kees Cook (Apr 22)

laurent . gaffie

Re: NetClassifieds Sql Injection laurent . gaffie (Apr 23)
xine-lib NES Sound Format Demuxer Buffer Overflow laurent . gaffie (Apr 23)

Layer One

LayerOne 2008 - Final Pre-Con Update Layer One (Apr 23)

Liran Cohen

Re: rPSA-2008-0151-1 libpng Liran Cohen (Apr 30)

Liu Zhen Hua

Borland InterBase 2007 "ibserver.exe" Buffer Overflow Vulnerability POC Liu Zhen Hua (Apr 11)

lpilorz

Vulnerabilities in kses-based HTML filters lpilorz (Apr 03)

Luigi Auriemma

Directory traversal in LANDesk Management Suite 8.80.1.1 Luigi Auriemma (Apr 02)
Multiple vulnerabilities in HP OpenView NNM 7.53 Luigi Auriemma (Apr 07)
Re: Multiple vulnerabilities in HP OpenView NNM 7.53 Luigi Auriemma (Apr 08)
Directory traversal and multiple Denials of Service in HP OpenView NNM 7.53 Luigi Auriemma (Apr 11)
Re: Secunia Research: Lotus Notes Folio Flat File Parsing Buffer Overflows Luigi Auriemma (Apr 15)

luke . jennings

ANNOUNCE: Security Implications of Windows Access Tokens Whitepaper luke . jennings (Apr 21)

Major Malfunction

London DEFCON meet - Thursday 1st May - DC4420 Major Malfunction (Apr 28)

marc . deroche

Re: WoltLab(R) Community Framework WCF 1.0.6 marc . deroche (Apr 12)

Mark Crowther

IRM Security Advisory : RedDot CMS SQL injection vulnerability Mark Crowther (Apr 21)

Marshall Eubanks

Re: heanet.dl.sourceforge.net hacked? Marshall Eubanks (Apr 30)

Martin Schulze

[SECURITY] [DSA 1547-1] New OpenOffice.org packages fix arbitrary code execution Martin Schulze (Apr 17)

Matthias Geerdsen

[ GLSA 200804-23 ] CUPS: Integer overflow vulnerability Matthias Geerdsen (Apr 21)
[ GLSA 200804-24 ] DBmail: Data disclosure Matthias Geerdsen (Apr 21)
[ GLSA 200804-30 ] KDE start_kdeinit: Multiple vulnerabilities Matthias Geerdsen (Apr 29)

Mauro Faccenda

Re: Firefox 3.0 beta 5 crash Mauro Faccenda (Apr 26)

Michael . Brooks . SPAM

Deciphering the Simple Machines Forum audio Captcha Michael . Brooks . SPAM (Apr 21)
Deciphering the PHP-Nuke Capthca Michael . Brooks . SPAM (Apr 21)

Michael Scheidell

heanet.dl.sourceforge.net hacked? Michael Scheidell (Apr 30)

Mike Diaz

RE: Internet explorer 7.0 spoofing Mike Diaz (Apr 02)

Milen Rangelov

licq remote DoS? Milen Rangelov (Apr 08)

mirrors

Re: heanet.dl.sourceforge.net hacked? mirrors (Apr 30)

m . memelli

Re: BigAnt Server 2.2 PreAuth Remote SEH Overflow Exploit (0day) m . memelli (Apr 17)

Morgan ARMAND

Dotclear 'ecrire/images.php' Arbitrary File Upload Vulnerability Morgan ARMAND (Apr 15)

Moritz Muehlenhoff

[SECURITY] [DSA 1541-1] New openldap2.3 packages fix denial of service Moritz Muehlenhoff (Apr 09)
[SECURITY] [DSA 1545-1] New rsync packages fix arbitrary code execution Moritz Muehlenhoff (Apr 10)
[SECURITY] [DSA 1549-1] New clamav packages fix several vulnerabilities Moritz Muehlenhoff (Apr 17)
[SECURITY] [DSA 1550-1] New suphp packages fix local privilege escalation Moritz Muehlenhoff (Apr 17)
[SECURITY] [DSA 1551-1] New python2.4 packages fix several vulnerabilities Moritz Muehlenhoff (Apr 19)
[SECURITY] [DSA 1552-1] New mplayer packages fix arbitrary code execution Moritz Muehlenhoff (Apr 19)
[SECURITY] [DSA 1555-1] New iceweasel packages fix arbitrary code execution Moritz Muehlenhoff (Apr 23)
[SECURITY] [DSA 1534-2] New iceape packages fix regression Moritz Muehlenhoff (Apr 24)
[SECURITY] [DSA 1558-1] New xulrunner packages fix arbitrary code execution Moritz Muehlenhoff (Apr 25)
[SECURITY] [DSA 1562-1] New iceape packages fix arbitrary code execution Moritz Muehlenhoff (Apr 28)
[SECURITY] [DSA 1563-1] New asterisk packages fix denial of service Moritz Muehlenhoff (Apr 30)

mrangelov

Re: Re: licq remote DoS? mrangelov (Apr 10)

nebelfrost23

Writers Block SQL Injection Vulnerabilities nebelfrost23 (Apr 02)

netmantis . com

Pu Arcade component for Joomla - SQL injection netmantis . com (Apr 09)

NGSSoftware Insight Security Research

Critical Vulnerability in SNMPc NGSSoftware Insight Security Research (Apr 30)

nixpanic

Re: openMosix userspace library stack-based buffer overflow nixpanic (Apr 10)

nnposter

F5 BIG-IP Management Interface Perl Injection nnposter (Apr 05)
Alkacon OpenCms sessions.jsp searchfilter XSS nnposter (Apr 05)

Noah Meyerhans

[SECURITY] [DSA 1554-1] New roundup packages fix cross-site scripting vulnerability Noah Meyerhans (Apr 22)

no-reply

Joomla Component com_lms SQL Injection no-reply (Apr 03)

noreply

paFileDB 3.1 Remote SQL Injection noreply (Apr 10)
w2b.ru multiple products SQL Injection noreply (Apr 11)
5th avenue Shopping Cart SQL Injection noreply (Apr 18)
Horde Webmail XSS [Aria-Security] noreply (Apr 23)
NetClassifieds Sql Injection noreply (Apr 23)

Oliver Goebel

IMF 2008 - 2nd Call for Papers Oliver Goebel (Apr 26)

organiser () syscan org

SyScan'08 Singapore - Call for Paper organiser () syscan org (Apr 21)

packet

Re: Powered by gCards v1.46 SQL packet (Apr 21)

Pascal Cretain

Wayport Public Access PC Authentication Bypass Weakness Pascal Cretain (Apr 08)

Patrick Webster

Tumbleweed SecureTransport FileTransfer ActiveX Control Buffer Overflow Patrick Webster (Apr 07)

Pierre-Yves Rofes

[ GLSA 200804-02 ] bzip2: Denial of Service Pierre-Yves Rofes (Apr 03)
[ GLSA 200804-10 ] Tomcat: Multiple vulnerabilities Pierre-Yves Rofes (Apr 10)
[ GLSA 200804-09 ] am-utils: Insecure temporary file creation Pierre-Yves Rofes (Apr 10)
[ GLSA 200804-29 ] Comix: Multiple vulnerabilities Pierre-Yves Rofes (Apr 26)

Pieter de Boer

Re: heanet.dl.sourceforge.net hacked? Pieter de Boer (Apr 30)

pobore

Re: Simple Machines Forum "SMF Shoutbox" Mod Persistent XSS pobore (Apr 26)

pocadm

POC2008 call for papers pocadm (Apr 03)

poplix

Parallels virtuozzo's VZPP multiple csrf vulnerabilities poplix (Apr 03)

ProCheckUp Research

PR07-43: Cross-domain redirect on RSA Authentication Agent ProCheckUp Research (Apr 23)
PR07-44: XSS on RSA Authentication Agent login page ProCheckUp Research (Apr 23)

Rainer Duffner

Re: heanet.dl.sourceforge.net hacked? Rainer Duffner (Apr 30)

Raphael Marichez

[ GLSA 200804-12 ] gnome-screensaver: Privilege escalation Raphael Marichez (Apr 11)

Razi Shaban

Re: Internet explorer 7.0 spoofing Razi Shaban (Apr 01)

Recon Conference

Recon 2008 CFP last call, early registration open Recon Conference (Apr 03)

Robert Buchholz

[ GLSA 200804-01 ] CUPS: Multiple vulnerabilities Robert Buchholz (Apr 01)
[ GLSA 200804-03 ] OpenSSH: Privilege escalation Robert Buchholz (Apr 05)
[ GLSA 200804-05 ] NX: User-assisted execution of arbitrary code Robert Buchholz (Apr 07)
[ GLSA 200804-06 ] UnZip: User-assisted execution of arbitrary code Robert Buchholz (Apr 07)
[ GLSA 200804-04 ] MySQL: Multiple vulnerabilities Robert Buchholz (Apr 07)
[ GLSA 200804-07 ] PECL APC: Buffer Overflow Robert Buchholz (Apr 09)
[ GLSA 200804-11 ] policyd-weight: Insecure temporary file creation Robert Buchholz (Apr 11)
[ GLSA 200804-15 ] libpng: Execution of arbitrary code Robert Buchholz (Apr 15)
[ GLSA 200804-14 ] Opera: Multiple vulnerabilities Robert Buchholz (Apr 15)
[ GLSA 200804-13 ] Asterisk: Multiple vulnerabilities Robert Buchholz (Apr 15)
[ GLSA 200804-16 ] rsync: Execution of arbitrary code Robert Buchholz (Apr 17)
[ GLSA 200804-17 ] Speex: User-assisted execution of arbitrary code Robert Buchholz (Apr 17)
[ GLSA 200804-18 ] Poppler: User-assisted execution of arbitrary code Robert Buchholz (Apr 17)
[ GLSA 200804-19 ] PHP Toolkit: Data disclosure and Denial of Service Robert Buchholz (Apr 18)
[ GLSA 200804-20 ] Sun JDK/JRE: Multiple vulnerabilities Robert Buchholz (Apr 18)
[ GLSA 200804-21 ] Adobe Flash Player: Multiple vulnerabilities Robert Buchholz (Apr 18)
[ GLSA 200804-22 ] PowerDNS Recursor: DNS Cache Poisoning Robert Buchholz (Apr 18)
[ GLSA 200804-25 ] VLC: User-assisted execution of arbitrary code Robert Buchholz (Apr 23)
[ GLSA 200804-26 ] Openfire: Denial of Service Robert Buchholz (Apr 23)

roberto . suggi

SugarCRM Community Edition Local File Disclosure Vulnerability roberto . suggi (Apr 29)

rohit

Re: Yourfreeworld Styleish Text Ads Script rohit (Apr 29)

rPath Update Announcements

rPSA-2008-0136-1 cups rPath Update Announcements (Apr 04)
rPSA-2008-0138-1 tshark wireshark rPath Update Announcements (Apr 04)
rPSA-2008-0139-1 gnome-ssh-askpass openssh openssh-client openssh-server rPath Update Announcements (Apr 04)
rPSA-2008-0149-1 idle python rPath Update Announcements (Apr 26)
rPSA-2008-0151-1 libpng rPath Update Announcements (Apr 29)

S21sec labs

S21SEC-041-en:Cezanne SW Cross-Site Scripting S21sec labs (Apr 14)
S21SEC-042-en:Cezanne SW Cross-Site Scripting (login required) S21sec labs (Apr 14)
S21SEC-043-en:Cezanne SW Blind SQL Injection S21sec labs (Apr 14)

Sabun

Koobi Pro 6.25 poll Remote SQL Injection Vulnerability Sabun (Apr 15)

Sebastien gioria

DOINGSOFT-2008-03-10-001 - XSS issue in BOXiR2 Sebastien gioria (Apr 14)

Secunia Research

Secunia Research: Adobe Flash Player "Declare Function (V7)" Heap Overflow Secunia Research (Apr 14)
Secunia Research: Lotus Notes kvdocve.dll Path Processing Buffer Overflow Secunia Research (Apr 14)
Secunia Research: activePDF DocConverter Folio Flat File Parsing Buffer Overflows Secunia Research (Apr 14)
Secunia Research: Lotus Notes htmsr.dll Buffer Overflows Secunia Research (Apr 14)
Secunia Research: Autonomy Keyview Folio Flat File Parsing Buffer Overflows Secunia Research (Apr 14)
Secunia Research: Symantec Mail Security Folio Flat File Parsing Buffer Overflows Secunia Research (Apr 14)
Secunia Research: Lotus Notes Applix Graphics Parsing Vulnerabilities Secunia Research (Apr 14)
Secunia Research: Lotus Notes Folio Flat File Parsing Buffer Overflows Secunia Research (Apr 14)
Secunia Research: Lotus Notes EML Reader Buffer Overflows Secunia Research (Apr 14)
Secunia Research: HP OpenView Network Node Manager OpenView5.exe Directory Traversal Secunia Research (Apr 14)
Secunia Research: Autonomy Keyview Applix Graphics Parsing Vulnerabilities Secunia Research (Apr 14)
Secunia Research: Autonomy Keyview EML Reader Buffer Overflows Secunia Research (Apr 14)
Secunia Research: Symantec Mail Security Applix Graphics Parsing Vulnerabilities Secunia Research (Apr 14)
Secunia Research: activePDF DocConverter Applix Graphics Parsing Vulnerabilities Secunia Research (Apr 14)
Secunia Research: Internet Explorer Data Stream Handling Vulnerability Secunia Research (Apr 14)

securfrog

DIVX Player <= 6.7.0 Buffer Overflow PoC ( .SRT ) securfrog (Apr 15)

security

[ MDVSA-2008:081 ] - Updated CUPS packages fix multiple vulnerabilities security (Apr 02)
Webwasher Denial of Service Vulnerability security (Apr 03)
[ MDVSA-2008:082 ] - Updated php-apc packages fix vulnerability security (Apr 09)
[ MDVSA-2008:083 ] - Updated audit packages fix vulnerability security (Apr 10)
[ MDVSA-2008:084 ] - Updated rsync packages fix vulnerability security (Apr 12)
[ MDVSA-2008:085 ] - Updated python packages fix arbitrary code execution vulnerability security (Apr 15)
[ MDVSA-2008:086 ] - Updated kernel packages fix vulnerability security (Apr 15)
[ MDVSA-2008:086 ] - Updated kernel packages fix vulnerability security (Apr 15)
[ MDVSA-2008:087 ] - Updated policykit package fixes format string vulnerability security (Apr 17)
[ MDVSA-2008:088 ] - Updated clamav packages fix multiple vulnerabilities security (Apr 18)
[ MDVSA-2008:089 ] - Updated poppler packages fix vulnerability security (Apr 18)
[ MDVSA-2008:090 ] - Updated OpenOffice.org packages fix vulnerabilities security (Apr 21)
[ MDVSA-2008:091 ] - Updated wireshark packages fix denial of service vulnerabilities security (Apr 25)
[ MDVSA-2008:092 ] - Updated gstreamer-plugins-good packages fix vulnerabilities security (Apr 29)
[ MDVSA-2008:093 ] - Updated vorbis-tools packages fix vulnerabilities security (Apr 29)

security-alert

HPSBMA02317 SSRT080026 rev.1 - HP Select Identity Software, Gain Unauthorized Access security-alert (Apr 02)
HPSBTU02325 SSRT080006 rev.1 - HP Internet Express for Tru64 UNIX running PostgreSQL, Arbitrary Code Execution, Privilege Elevation, or Denial of Service (DoS) security-alert (Apr 02)
[security bulletin] HPSBMA02323 SSRT080032 rev.1 - HP USB Floppy Drive Key (Option) for ProLiant Servers, Local Virus Infection security-alert (Apr 04)
[security bulletin] HPSBMA02327 SSRT071455 rev.1 - HP Integrity Servers iLO-2 Management Processors (iLO-2 MP), Denial of Service (DoS) security-alert (Apr 08)
[security bulletin] [security bulletin] HPSBST02318 SSRT080018 rev.1 - HP Storage Essentials Software, Remote Unauthorized Access to Data security-alert (Apr 08)
[security bulletin] HPSBMA02242 SSRT061260 rev.3 - HP OpenView Network Node Manager (OV NNM) Running Shared Trace Service, Remote Arbitrary Code Execution security-alert (Apr 08)
[security bulletin] HPSBMA02133 SSRT061201 rev.8 - HP Oracle for OpenView (OfO) Critical Patch Update security-alert (Apr 17)
[security bulletin] HPSBST02329 SSRT080048 rev.1 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS08-018 to MS08-025 security-alert (Apr 17)
[security bulletin] HPSBMA02328 SSRT071293 rev.2 - HP OpenView Network Node Manager (OV NNM) Running Apache, Remote Cross Site Scripting (XSS), Denial of Service (DoS), Execute Arbitrary Code security-alert (Apr 17)
HPSBGN02333 SSRT080031 rev.1 - HP Software Update HPeDiag Running on Windows, Remote Disclosure of Information and Execution of Arbitrary Code security-alert (Apr 24)
[security bulletin] HPSBMA02331 SSRT080000 rev.1 - HP-UX running WBEM Services, Remote Execution of Arbitrary Code, Gain Extended Privileges security-alert (Apr 30)

securityfocus . com

Re: Re: heanet.dl.sourceforge.net hacked? securityfocus . com (Apr 30)

Security Officer

AST-2008-006 - 3-way handshake in IAX2 incomplete Security Officer (Apr 23)

Simon Ryeo

CDNetworks Nefficient Download(NeffyLauncher.dll) Vulnerabilities Simon Ryeo (Apr 07)

Skratz0r

Re: Firefox 3.0 beta 5 crash (Slightly unrelated) Skratz0r (Apr 26)

Stefano Zanero

CFP: Workshop on Open Source Software for Computer and Network Forensics Stefano Zanero (Apr 30)

Steve Kemp

[SECURITY] [DSA 1540-1] New lighttpd packages fix denial of service Steve Kemp (Apr 07)
[SECURITY] [DSA 1540-2] New lighttpd packages fix denial of service Steve Kemp (Apr 15)

Steven J. Murdoch

Wordpress 2.5 Cookie Integrity Protection Vulnerability Steven J. Murdoch (Apr 26)

sys-project

Koobi CMS 4.2.4/4.2.5/4.3.0 Multiple Remote SQL Injection Vulnerabilities sys-project (Apr 15)
Classifieds Caffe (index.php cat_id) Remote SQL Injection sys-project (Apr 16)

Team SHATTER

Team SHATTER Security Advisory: Multiple DoS in JAR files manipulation procedures Team SHATTER (Apr 18)
Team SHATTER Security Advisory: IBM DB2 UDB Arbitrary file overwrite in SYSPROC.NNSTAT procedure Team SHATTER (Apr 18)
Team SHATTER Security Advisory: IBM DB2 UDB Arbitrary code execution in ADMIN_SP_C/ADMIN_SP_C2 procedures Team SHATTER (Apr 18)

th3 . r00k . nospam

BitTorrent Clients and CSRF th3 . r00k . nospam (Apr 18)
Sea-Surfing on the Motorola Surfboard th3 . r00k . nospam (Apr 21)

The Dark Tangent

DEF CON 16 Retro Announcement! Back to Bang! The Dark Tangent (Apr 12)
DEF CON 16 Retro Announcement! Back to Bang! The Dark Tangent (Apr 14)

Thijs Kinkhorst

[SECURITY] [DSA 1536-1] New libxine packages fix several vulnerabilities Thijs Kinkhorst (Apr 01)
[SECURITY] [DSA 1557-1] New phpmyadmin packages fix several vulnerabilities Thijs Kinkhorst (Apr 24)
[SECURITY] [DSA 1560-1] New kronolith2 packages fix cross site scripting Thijs Kinkhorst (Apr 28)
[SECURITY] [DSA 1561-1] New ldm packages fix information disclosure Thijs Kinkhorst (Apr 28)

Thomas Pollet

Lotus expeditor rcplauncher uri handler vulnerability Thomas Pollet (Apr 25)

Tim Brown

Medium security hole affecting Festival on Debian unstable/testing and Ubuntu Hardy Heron Tim Brown (Apr 04)

Tobias Heinlein

[ GLSA 200804-08 ] lighttpd: Multiple vulnerabilities Tobias Heinlein (Apr 10)
[ GLSA 200804-28 ] JRockit: Multiple vulnerabilities Tobias Heinlein (Apr 24)
[ GLSA 200804-27 ] SILC: Multiple vulnerabilities Tobias Heinlein (Apr 24)

turkish-warriorr

Fones Clinic Mart SQL turkish-warriorr (Apr 14)
Powered by gCards v1.46 SQL turkish-warriorr (Apr 21)

virangar_nml

Wikepage Opus 13 2007.2 Directory Traversal Vulnerbility virangar_nml (Apr 07)

VMware Security team

VMSA-2008-0007 Moderate Updated Service Console packages pcre, net-snmp, and OpenPegasus VMware Security team (Apr 16)

vulnerabilityresearch

DDIVRT-2008-11 BadBlue uninst.exe DoS vulnerabilityresearch (Apr 24)

vulns

[W01-0408] Realtek HD Audio Codec Drivers (Vista) - Local Privilege Escalation vulns (Apr 23)

w0lfd33m

Re: Re: Internet explorer 7.0 spoofing w0lfd33m (Apr 01)

Williams, James K

CA Alert Notification Server Multiple Vulnerabilities Williams, James K (Apr 04)
CA ARCserve Backup for Laptops and Desktops Server and CA Desktop Management Suite Multiple Vulnerabilities Williams, James K (Apr 04)
CA DSM gui_cm_ctrls ActiveX Control Vulnerability Williams, James K (Apr 16)

win32 . exe

remote file include win32 . exe (Apr 15)
remote file include win32 . exe (Apr 15)

wsn1983

Microsoft Works 7 WkImgSrv.dll crash POC wsn1983 (Apr 17)

yeppy

Re: Wikepage Opus 13 2007.2 Directory Traversal Vulnerbility yeppy (Apr 08)

zdi-disclosures

ZDI-08-014: Apple Quicktime Multiple Opcode Memory Corruption Vulnerabilities zdi-disclosures (Apr 04)
ZDI-08-018: Apple QuickTime Run Length Encoding Heap Overflow Vulnerability zdi-disclosures (Apr 04)
ZDI-08-016: Apple QuickTime MP4A Atom Parsing Heap Corruption Vulnerability zdi-disclosures (Apr 04)
ZDI-08-015: Apple QuickTime Clipping Region Heap Overflow Vulnerability zdi-disclosures (Apr 04)
ZDI-08-017: Apple QuickTime Kodak Encoding Heap Overflow Vulnerability zdi-disclosures (Apr 04)
ZDI-08-019: Apple QuickTime Malformed VR obji Atom Parsing Memory Corruption Vulnerability zdi-disclosures (Apr 04)
ZDI-08-020: Microsoft GDI WMF Parsing Heap Overflow Vulnerability zdi-disclosures (Apr 08)
ZDI-08-021: Adobe Flash Player DeclareFunction2 Invalid Object Use Vulnerability zdi-disclosures (Apr 09)
ZDI-08-022: Apple Safari WebKit PCRE Handling Integer Overflow Vulnerability zdi-disclosures (Apr 16)
Previous period Next period
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]