Bugtraq: by thread

Bugtraq: by thread

323 messages starting Apr 01 08 and ending Apr 30 08
Date index | Thread index | Author index

iDefense Security Advisory 03.31.08: Macrovision InstallShield InstallScript One-Click Install Untrusted Library Loading Vulnerability iDefense Labs (Apr 01)
EasyNews-40tr Multiple Remote Vulnerabilities (SQL Injection Exploit/XSS/LFI) irancrash (Apr 01)
[SECURITY] [DSA 1536-1] New libxine packages fix several vulnerabilities Thijs Kinkhorst (Apr 01)
CAU-2008-0001 - Slowly Closing Door Race Condition I)ruid (Apr 01)
Terracotta Personal Edition Multiple vulnerabilities joseph . giron13 (Apr 01)
cevado technologies real estate CMS SQL injection joseph . giron13 (Apr 01)
[SECURITY] [DSA 1533-2] New exiftags packages fix several vulnerabilities Devin Carraway (Apr 01)
TCP/IP security vulnerability disclosed J. Oquendo (Apr 01)
[ GLSA 200804-01 ] CUPS: Multiple vulnerabilities Robert Buchholz (Apr 01)
Re: Internet explorer 7.0 spoofing Razi Shaban (Apr 01)
- <Possible follow-ups>
- Re: Re: Internet explorer 7.0 spoofing w0lfd33m (Apr 01)
- RE: Internet explorer 7.0 spoofing Darth Jedi (Apr 02)
- Re: Re: Re: Internet explorer 7.0 spoofing jplopezy (Apr 02)
- RE: Internet explorer 7.0 spoofing Mike Diaz (Apr 02)
Re: Hamachi Password Disclosure Vulnerability anonymous (Apr 01)
Writers Block SQL Injection Vulnerabilities nebelfrost23 (Apr 02)
HPSBMA02317 SSRT080026 rev.1 - HP Select Identity Software, Gain Unauthorized Access security-alert (Apr 02)
Datalife Engine 6.7 XSRF irancrash (Apr 02)
[USN-597-1] OpenSSH vulnerability Kees Cook (Apr 02)
HPSBTU02325 SSRT080006 rev.1 - HP Internet Express for Tru64 UNIX running PostgreSQL, Arbitrary Code Execution, Privilege Elevation, or Denial of Service (DoS) security-alert (Apr 02)
ANNOUNCE: Apache-SSL security release - apache_1.3.41+ssl_1.59 Adam Laurie (Apr 02)
Directory traversal in LANDesk Management Suite 8.80.1.1 Luigi Auriemma (Apr 02)
[ MDVSA-2008:081 ] - Updated CUPS packages fix multiple vulnerabilities security (Apr 02)
[SECURITY] [DSA 1537-1] New xpdf packages fix multiple vulnerabilities Devin Carraway (Apr 03)
[ GLSA 200804-02 ] bzip2: Denial of Service Pierre-Yves Rofes (Apr 03)
Webwasher Denial of Service Vulnerability security (Apr 03)
[USN-588-2] MySQL regression Jamie Strandboge (Apr 03)
[USN-598-1] CUPS vulnerabilities Jamie Strandboge (Apr 03)
Vulnerabilities in kses-based HTML filters lpilorz (Apr 03)
Joomla Component com_lms SQL Injection no-reply (Apr 03)
Recon 2008 CFP last call, early registration open Recon Conference (Apr 03)
Parallels virtuozzo's VZPP multiple csrf vulnerabilities poplix (Apr 03)
Cisco Security Advisory: Cisco Unified Communications Disaster Recovery Framework Command Execution Vulnerability Cisco Systems Product Security Incident Response Team (Apr 03)
POC2008 call for papers pocadm (Apr 03)
ZDI-08-014: Apple Quicktime Multiple Opcode Memory Corruption Vulnerabilities zdi-disclosures (Apr 04)
ZDI-08-018: Apple QuickTime Run Length Encoding Heap Overflow Vulnerability zdi-disclosures (Apr 04)
Medium security hole affecting Festival on Debian unstable/testing and Ubuntu Hardy Heron Tim Brown (Apr 04)
ZDI-08-016: Apple QuickTime MP4A Atom Parsing Heap Corruption Vulnerability zdi-disclosures (Apr 04)
ZDI-08-015: Apple QuickTime Clipping Region Heap Overflow Vulnerability zdi-disclosures (Apr 04)
ZDI-08-017: Apple QuickTime Kodak Encoding Heap Overflow Vulnerability zdi-disclosures (Apr 04)
CA Alert Notification Server Multiple Vulnerabilities Williams, James K (Apr 04)
iDefense Security Advisory 04.02.08: Symantec Internet Security 2008 ActiveDataInfo.LaunchProcess Design Error Vulnerability iDefense Labs (Apr 04)
ZDI-08-019: Apple QuickTime Malformed VR obji Atom Parsing Memory Corruption Vulnerability zdi-disclosures (Apr 04)
CA ARCserve Backup for Laptops and Desktops Server and CA Desktop Management Suite Multiple Vulnerabilities Williams, James K (Apr 04)
KwsPHP Module ConcoursPhoto XSS hsx (Apr 04)
[security bulletin] HPSBMA02323 SSRT080032 rev.1 - HP USB Floppy Drive Key (Option) for ProLiant Servers, Local Virus Infection security-alert (Apr 04)
CORE-2008-0314 - Orbit Downloader "Download failed" buffer overflow CORE Security Technologies Advisories (Apr 04)
iDefense Security Advisory 04.03.08: SCO UnixWare pkgadd Directory Traversal Vulnerability iDefense Labs (Apr 04)
iDefense Security Advisory 04.02.08: Symantec Norton Internet Security 2008 ActiveX Control Buffer Overflow Vulnerability iDefense Labs (Apr 04)
iDefense Security Advisory 04.03.08: Computer Associates Alert Notification Service Multiple RPC Buffer Overflow Vulnerabilities iDefense Labs (Apr 04)
[SECURITY] [DSA 1539-1] New mapserver packages fix multiple vulnerabilities Devin Carraway (Apr 04)
[SECURITY] [DSA 1538-1] New alsaplayer packages fix arbitrary code execution Devin Carraway (Apr 04)
rPSA-2008-0136-1 cups rPath Update Announcements (Apr 04)
rPSA-2008-0138-1 tshark wireshark rPath Update Announcements (Apr 04)
rPSA-2008-0139-1 gnome-ssh-askpass openssh openssh-client openssh-server rPath Update Announcements (Apr 04)
F5 BIG-IP Management Interface Perl Injection nnposter (Apr 05)
TheGreenBowVPN, Login Credentials Disclosure evilcry (Apr 05)
Blogator-script 0.95 Change User Password Vulnerbility hadihadi_zedehal_2006 (Apr 05)
[ GLSA 200804-03 ] OpenSSH: Privilege escalation Robert Buchholz (Apr 05)
Alkacon OpenCms sessions.jsp searchfilter XSS nnposter (Apr 05)
- <Possible follow-ups>
- Re: Alkacon OpenCms sessions.jsp searchfilter XSS a . westtermann (Apr 10)
Blogator-script 0.95 SQL Injection Vulnerbility hadihadi_zedehal_2006 (Apr 05)
[ GLSA 200804-05 ] NX: User-assisted execution of arbitrary code Robert Buchholz (Apr 07)
openMosix userspace library stack-based buffer overflow jose (Apr 07)
- <Possible follow-ups>
- Re: openMosix userspace library stack-based buffer overflow nixpanic (Apr 10)
Tumbleweed SecureTransport FileTransfer ActiveX Control Buffer Overflow Patrick Webster (Apr 07)
Wikepage Opus 13 2007.2 Directory Traversal Vulnerbility virangar_nml (Apr 07)
- <Possible follow-ups>
- Re: Wikepage Opus 13 2007.2 Directory Traversal Vulnerbility yeppy (Apr 08)
CDNetworks Nefficient Download(NeffyLauncher.dll) Vulnerabilities Simon Ryeo (Apr 07)
[SECURITY] [DSA 1540-1] New lighttpd packages fix denial of service Steve Kemp (Apr 07)
[ GLSA 200804-06 ] UnZip: User-assisted execution of arbitrary code Robert Buchholz (Apr 07)
[ GLSA 200804-04 ] MySQL: Multiple vulnerabilities Robert Buchholz (Apr 07)
Attack Technique: File Download Injection Jeff Williams (Apr 07)
Multiple vulnerabilities in HP OpenView NNM 7.53 Luigi Auriemma (Apr 07)
- <Possible follow-ups>
- Re: Multiple vulnerabilities in HP OpenView NNM 7.53 Luigi Auriemma (Apr 08)
Swiki 1.5 Multiple Cross-Site Scripting Vulnerabilities brad . antoniewicz (Apr 08)
[security bulletin] HPSBMA02327 SSRT071455 rev.1 - HP Integrity Servers iLO-2 Management Processors (iLO-2 MP), Denial of Service (DoS) security-alert (Apr 08)
WoltLab(R) Community Framework XSS and Full Path Disclosure Vulnerability Jessica Hope (Apr 08)
licq remote DoS? Milen Rangelov (Apr 08)
- Re: licq remote DoS? 3APA3A (Apr 10)
- <Possible follow-ups>
- Re: Re: licq remote DoS? mrangelov (Apr 10)
Wayport Public Access PC Authentication Bypass Weakness Pascal Cretain (Apr 08)
New tool released : Syslog Fuzzer jaime . blasco (Apr 08)
Microsoft Windows DNS Stub Resolver Cache Poisoning (MS08-020) Amit Klein (Apr 08)
[security bulletin] [security bulletin] HPSBST02318 SSRT080018 rev.1 - HP Storage Essentials Software, Remote Unauthorized Access to Data security-alert (Apr 08)
[security bulletin] HPSBMA02242 SSRT061260 rev.3 - HP OpenView Network Node Manager (OV NNM) Running Shared Trace Service, Remote Arbitrary Code Execution security-alert (Apr 08)
ZDI-08-020: Microsoft GDI WMF Parsing Heap Overflow Vulnerability zdi-disclosures (Apr 08)
iDefense Security Advisory 04.08.08: Microsoft HxTocCtrl ActiveX Control Invalid Param Heap Corruption Vulnerability iDefense Labs (Apr 09)
[SECURITY] [DSA 1541-1] New openldap2.3 packages fix denial of service Moritz Muehlenhoff (Apr 09)
ZDI-08-021: Adobe Flash Player DeclareFunction2 Invalid Object Use Vulnerability zdi-disclosures (Apr 09)
CAU-2008-0002: Microsoft Windows SharePoint Services Picture Source XSS I)ruid (Apr 09)
SAP Netweaver 6.40-7.0 Cross-Site-Scripting jaime . blasco (Apr 09)
Pu Arcade component for Joomla - SQL injection netmantis . com (Apr 09)
[ GLSA 200804-07 ] PECL APC: Buffer Overflow Robert Buchholz (Apr 09)
iDefense Security Advisory 04.08.08: Microsoft Windows Graphics Rendering Engine Integer Overflow Vulnerability iDefense Labs (Apr 09)
[SECURITY] [DSA 1542-1] New libcairo packages fix arbitrary code execution Devin Carraway (Apr 09)
[CVE-2007-5301] alsaplayer PoC - exploit Albert Sellarès (Apr 09)
[SECURITY] [DSA 1543-1] New vlc packages fix several vulnerabilities Devin Carraway (Apr 09)
[ MDVSA-2008:082 ] - Updated php-apc packages fix vulnerability security (Apr 09)
[USN-599-1] Ghostscript vulnerability Jamie Strandboge (Apr 09)
[SECURITY] [DSA 1544-1] New pdns-recursor packages fix cache poisoning vulnerability Florian Weimer (Apr 09)
IOActive Security Advisory: Buffer overflow in Python zlib extension module Justin Ferguson (Apr 09)
paFileDB 3.1 Remote SQL Injection noreply (Apr 10)
[ MDVSA-2008:083 ] - Updated audit packages fix vulnerability security (Apr 10)
[ GLSA 200804-08 ] lighttpd: Multiple vulnerabilities Tobias Heinlein (Apr 10)
EUSecWest CFP Closes April 14th (conf May 21/22 2008) Dragos Ruiu (Apr 10)
[ GLSA 200804-10 ] Tomcat: Multiple vulnerabilities Pierre-Yves Rofes (Apr 10)
[SECURITY] [DSA 1545-1] New rsync packages fix arbitrary code execution Moritz Muehlenhoff (Apr 10)
[ GLSA 200804-09 ] am-utils: Insecure temporary file creation Pierre-Yves Rofes (Apr 10)
w2b.ru multiple products SQL Injection noreply (Apr 11)
[USN-600-1] rsync vulnerability Kees Cook (Apr 11)
iDefense Security Advisory 04.09.08: EMC DiskXtender File System Manager Stack Buffer Overflow Vulnerability iDefense Labs (Apr 11)
[SECURITY] [DSA 1546-1] New gnumeric packages fix arbitrary code execution Devin Carraway (Apr 11)
Borland InterBase 2007 "ibserver.exe" Buffer Overflow Vulnerability POC Liu Zhen Hua (Apr 11)
iDefense Security Advisory 04.09.08: EMC DiskXtender MediaStor Format String Vulnerability iDefense Labs (Apr 11)
iDefense Security Advisory 04.09.08: EMC DiskXtender Authentication Bypass Vulnerability iDefense Labs (Apr 11)
WiKID wClient-PHP <= 3.0-2 Multiple XSS Vulnerabilities ascii (Apr 11)
[ GLSA 200804-12 ] gnome-screensaver: Privilege escalation Raphael Marichez (Apr 11)
[ GLSA 200804-11 ] policyd-weight: Insecure temporary file creation Robert Buchholz (Apr 11)
Directory traversal and multiple Denials of Service in HP OpenView NNM 7.53 Luigi Auriemma (Apr 11)
Trillian 3.1.9.0 DTD File Buffer Overflow david130490 (Apr 11)
IOActive Security Advisory: Incorrect input validation in PyString_FromStringAndSize() leads to multiple buffer overflows Justin Ferguson (Apr 11)
[ MDVSA-2008:084 ] - Updated rsync packages fix vulnerability security (Apr 12)
DEF CON 16 Retro Announcement! Back to Bang! The Dark Tangent (Apr 12)
- <Possible follow-ups>
- DEF CON 16 Retro Announcement! Back to Bang! The Dark Tangent (Apr 14)
Re: WoltLab(R) Community Framework WCF 1.0.6 marc . deroche (Apr 12)
project announcement - oCERT - Open Source CERT Andrea Barisani (Apr 14)
[oCERT-2008-003] libpng zero-length chunks incorrect handling Andrea Barisani (Apr 14)
Secunia Research: Adobe Flash Player "Declare Function (V7)" Heap Overflow Secunia Research (Apr 14)
Secunia Research: Lotus Notes kvdocve.dll Path Processing Buffer Overflow Secunia Research (Apr 14)
OneSecurityDay 2008 - Web application auditing challenge bugtraq (Apr 14)
Secunia Research: activePDF DocConverter Folio Flat File Parsing Buffer Overflows Secunia Research (Apr 14)
Secunia Research: Lotus Notes htmsr.dll Buffer Overflows Secunia Research (Apr 14)
Secunia Research: Autonomy Keyview Folio Flat File Parsing Buffer Overflows Secunia Research (Apr 14)
Secunia Research: Symantec Mail Security Folio Flat File Parsing Buffer Overflows Secunia Research (Apr 14)
Secunia Research: Lotus Notes Applix Graphics Parsing Vulnerabilities Secunia Research (Apr 14)
DOINGSOFT-2008-03-10-001 - XSS issue in BOXiR2 Sebastien gioria (Apr 14)
Secunia Research: Lotus Notes Folio Flat File Parsing Buffer Overflows Secunia Research (Apr 14)
Secunia Research: Lotus Notes EML Reader Buffer Overflows Secunia Research (Apr 14)
Secunia Research: HP OpenView Network Node Manager OpenView5.exe Directory Traversal Secunia Research (Apr 14)
Secunia Research: Autonomy Keyview Applix Graphics Parsing Vulnerabilities Secunia Research (Apr 14)
Secunia Research: Autonomy Keyview EML Reader Buffer Overflows Secunia Research (Apr 14)
Secunia Research: Symantec Mail Security Applix Graphics Parsing Vulnerabilities Secunia Research (Apr 14)
Secunia Research: activePDF DocConverter Applix Graphics Parsing Vulnerabilities Secunia Research (Apr 14)
Secunia Research: Internet Explorer Data Stream Handling Vulnerability Secunia Research (Apr 14)
S21SEC-041-en:Cezanne SW Cross-Site Scripting S21sec labs (Apr 14)
S21SEC-042-en:Cezanne SW Cross-Site Scripting (login required) S21sec labs (Apr 14)
S21SEC-043-en:Cezanne SW Blind SQL Injection S21sec labs (Apr 14)
Fones Clinic Mart SQL turkish-warriorr (Apr 14)
[USN-601-1] Squid vulnerability Jamie Strandboge (Apr 14)
Troopers08 Security Conference, April 23/24 (Munich/Germany) Enno Rey (Apr 15)
[ GLSA 200804-15 ] libpng: Execution of arbitrary code Robert Buchholz (Apr 15)
[ GLSA 200804-14 ] Opera: Multiple vulnerabilities Robert Buchholz (Apr 15)
KwsPHP (Upload) Remote Code Execution Exploit ajax (Apr 15)
[ GLSA 200804-13 ] Asterisk: Multiple vulnerabilities Robert Buchholz (Apr 15)
Dotclear 'ecrire/images.php' Arbitrary File Upload Vulnerability Morgan ARMAND (Apr 15)
[ MDVSA-2008:085 ] - Updated python packages fix arbitrary code execution vulnerability security (Apr 15)
BosNews v4.0 Remote add user admin houssamix (Apr 15)
clamav: Endless loop / hang with crafter arj, CVE-2008-1387 Hanno Böck (Apr 15)
BosNews 2002-2006 Remote add user admin houssamix (Apr 15)
Re: Secunia Research: Lotus Notes Folio Flat File Parsing Buffer Overflows Luigi Auriemma (Apr 15)
[ MDVSA-2008:086 ] - Updated kernel packages fix vulnerability security (Apr 15)
- <Possible follow-ups>
- [ MDVSA-2008:086 ] - Updated kernel packages fix vulnerability security (Apr 15)
[SECURITY] [DSA 1540-2] New lighttpd packages fix denial of service Steve Kemp (Apr 15)
Koobi CMS 4.2.4/4.2.5/4.3.0 Multiple Remote SQL Injection Vulnerabilities sys-project (Apr 15)
WordPress 2.5 - Salt cracking vulnerability J. Carlos Nieto (Apr 15)
Koobi Pro 6.25 poll Remote SQL Injection Vulnerability Sabun (Apr 15)
remote file include win32 . exe (Apr 15)
- <Possible follow-ups>
- remote file include win32 . exe (Apr 15)
iDefense Security Advisory 04.14.08: ClamAV libclamav PE WWPack Heap Overflow Vulnerability iDefense Labs (Apr 15)
DIVX Player <= 6.7.0 Buffer Overflow PoC ( .SRT ) securfrog (Apr 15)
Oracle - SQL Injection in package SDO_GEOM [DB06] ak (Apr 16)
Carbon Communities forum Multiple Vulnerabilities. admin (Apr 16)
BigAnt Server 2.2 PreAuth Remote SEH Overflow Exploit (0day) admin (Apr 16)
- <Possible follow-ups>
- Re: BigAnt Server 2.2 PreAuth Remote SEH Overflow Exploit (0day) m . memelli (Apr 17)
VMSA-2008-0007 Moderate Updated Service Console packages pcre, net-snmp, and OpenPegasus VMware Security team (Apr 16)
Oracle - SQL Injection in package SDO_IDX [DB07] ak (Apr 16)
Oracle - SQL Injection Vulnerability in SDO_UTIL [DB05] ak (Apr 16)
[INFIGO-2008-04-08]: ICQ 6 remote buffer overflow vulnerability infocus (Apr 16)
Oracle - Hardcoded Password and Password Reset of OUTLN User [DB13] ak (Apr 16)
Cisco Security Advisory: Cisco Network Admission Control Shared Secret Vulnerability Cisco Systems Product Security Incident Response Team (Apr 16)
CA DSM gui_cm_ctrls ActiveX Control Vulnerability Williams, James K (Apr 16)
iDefense Security Advisory 04.09.08: IBM DB2 Universal Database Administration Server File Creation Vulnerability iDefense Labs (Apr 16)
iDefense Security Advisory 04.09.08: IBM DB2 Universal Database db2dasStartStopFMDaemon Buffer Overflow Vulnerability iDefense Labs (Apr 16)
iDefense Security Advisory 04.15.08: Oracle Application Express Privilege Escalation Vulnerability iDefense Labs (Apr 16)
Re: PHPSlideShow (toonchapter8.php) Cross-Site Scripting Vulnerability contact (Apr 16)
Classifieds Caffe (index.php cat_id) Remote SQL Injection sys-project (Apr 16)
ZDI-08-022: Apple Safari WebKit PCRE Handling Integer Overflow Vulnerability zdi-disclosures (Apr 16)
FreeBSD Security Advisory FreeBSD-SA-08:05.openssh FreeBSD Security Advisories (Apr 17)
[ MDVSA-2008:087 ] - Updated policykit package fixes format string vulnerability security (Apr 17)
[oCERT-2008-004] multiple speex implementations insufficient boundary checks Andrea Barisani (Apr 17)
[SECURITY] [DSA 1547-1] New OpenOffice.org packages fix arbitrary code execution Martin Schulze (Apr 17)
[ GLSA 200804-16 ] rsync: Execution of arbitrary code Robert Buchholz (Apr 17)
[ GLSA 200804-17 ] Speex: User-assisted execution of arbitrary code Robert Buchholz (Apr 17)
[ GLSA 200804-18 ] Poppler: User-assisted execution of arbitrary code Robert Buchholz (Apr 17)
[security bulletin] HPSBMA02133 SSRT061201 rev.8 - HP Oracle for OpenView (OfO) Critical Patch Update security-alert (Apr 17)
[security bulletin] HPSBST02329 SSRT080048 rev.1 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS08-018 to MS08-025 security-alert (Apr 17)
[security bulletin] HPSBMA02328 SSRT071293 rev.2 - HP OpenView Network Node Manager (OV NNM) Running Apache, Remote Cross Site Scripting (XSS), Denial of Service (DoS), Execute Arbitrary Code security-alert (Apr 17)
Microsoft Works 7 WkImgSrv.dll crash POC wsn1983 (Apr 17)
Announcement - DeepSec Conference 2008, Nov 11-14 2008 DeepSec Conference (Apr 17)
[SECURITY] [DSA 1548-1] New xpdf packages fix arbitrary code exitution Devin Carraway (Apr 17)
[USN-603-1] poppler vulnerability Kees Cook (Apr 17)
[USN-603-2] KOffice vulnerability Kees Cook (Apr 17)
[SECURITY] [DSA 1549-1] New clamav packages fix several vulnerabilities Moritz Muehlenhoff (Apr 17)
Re: [Full-disclosure] Secunia Research: Lotus Notes Folio Flat File Parsing Buffer Overflows Juha-Matti Laurio (Apr 17)
[SECURITY] [DSA 1550-1] New suphp packages fix local privilege escalation Moritz Muehlenhoff (Apr 17)
iDefense Security Advisory 04.17.08: Multiple Vendor OpenOffice OLE DocumentSummaryInformation Heap Overflow Vulnerability iDefense Labs (Apr 18)
iDefense Security Advisory 04.17.08: Multiple Vendor OpenOffice EMF EMR_BITBLT Record Integer Overflow Vulnerability iDefense Labs (Apr 18)
iDefense Security Advisory 04.17.08: Multiple Vendor OpenOffice QPRO Multiple Heap Overflow Vulnerabilities iDefense Labs (Apr 18)
iDefense Security Advisory 04.17.08: Multiple Vendor OpenOffice QPRO File Parsing Integer Underflow Vulnerability iDefense Labs (Apr 18)
[ GLSA 200804-19 ] PHP Toolkit: Data disclosure and Denial of Service Robert Buchholz (Apr 18)
[ MDVSA-2008:088 ] - Updated clamav packages fix multiple vulnerabilities security (Apr 18)
[ MDVSA-2008:089 ] - Updated poppler packages fix vulnerability security (Apr 18)
BitTorrent Clients and CSRF th3 . r00k . nospam (Apr 18)
[ GLSA 200804-20 ] Sun JDK/JRE: Multiple vulnerabilities Robert Buchholz (Apr 18)
5th avenue Shopping Cart SQL Injection noreply (Apr 18)
LightNEasy v.1.2.2 flat Multiple Vulnerabilities darkz . gsa (Apr 18)
[ GLSA 200804-21 ] Adobe Flash Player: Multiple vulnerabilities Robert Buchholz (Apr 18)
Wikepage Wiki v.2007-2 Cross-Site Scripting darkz . gsa (Apr 18)
Team SHATTER Security Advisory: Multiple DoS in JAR files manipulation procedures Team SHATTER (Apr 18)
Team SHATTER Security Advisory: IBM DB2 UDB Arbitrary file overwrite in SYSPROC.NNSTAT procedure Team SHATTER (Apr 18)
[ GLSA 200804-22 ] PowerDNS Recursor: DNS Cache Poisoning Robert Buchholz (Apr 18)
Team SHATTER Security Advisory: IBM DB2 UDB Arbitrary code execution in ADMIN_SP_C/ADMIN_SP_C2 procedures Team SHATTER (Apr 18)
ANNOUNCE: RFIDIOt-0.1s release (now available for Windows) Adam Laurie (Apr 18)
[SECURITY] [DSA 1551-1] New python2.4 packages fix several vulnerabilities Moritz Muehlenhoff (Apr 19)
[SECURITY] [DSA 1552-1] New mplayer packages fix arbitrary code execution Moritz Muehlenhoff (Apr 19)
Token Kidnapping (Microsoft Security Advisory 951306) presentation available Cesar (Apr 19)
Deciphering the Simple Machines Forum audio Captcha Michael . Brooks . SPAM (Apr 21)
Acidcat CMS Multiple Vulnerabilities admin (Apr 21)
SyScan'08 Singapore - Call for Paper organiser () syscan org (Apr 21)
[ MDVSA-2008:090 ] - Updated OpenOffice.org packages fix vulnerabilities security (Apr 21)
Deciphering the PHP-Nuke Capthca Michael . Brooks . SPAM (Apr 21)
[SECURITY] [DSA 1553-1] New ikiwiki packages fix cross-site request forgery Florian Weimer (Apr 21)
IRM Security Advisory : RedDot CMS SQL injection vulnerability Mark Crowther (Apr 21)
Powered by gCards v1.46 SQL turkish-warriorr (Apr 21)
- Re: Powered by gCards v1.46 SQL packet (Apr 21)
[ GLSA 200804-23 ] CUPS: Integer overflow vulnerability Matthias Geerdsen (Apr 21)
Re: Re: Smf 1.1.4 Remote File Inclusion Vulnerabilities douchbag (Apr 21)
[ GLSA 200804-24 ] DBmail: Data disclosure Matthias Geerdsen (Apr 21)
Sea-Surfing on the Motorola Surfboard th3 . r00k . nospam (Apr 21)
ANNOUNCE: Security Implications of Windows Access Tokens Whitepaper luke . jennings (Apr 21)
Xoops All Version -Articles- Article.PHP (ID) Blind SQL Injection ExpL0it crazy_kinq (Apr 21)
[USN-602-1] Firefox vulnerabilities Jamie Strandboge (Apr 22)
[USN-604-1] Gnumeric vulnerability Kees Cook (Apr 22)
Cross site scripting issues in s9y (CVE-2008-1386, CVE-2008-1387) Hanno Böck (Apr 22)
- Correcting CVEs (was Re: [Full-disclosure] Cross site scripting issues in s9y (CVE-2008-1386, CVE-2008-1387)) Hanno Böck (Apr 22)
Safari 3.1.1 Multiple Vulnerabilities for windows jplopezy (Apr 22)
Firefox 3.0 beta 5 crash jplopezy (Apr 22)
- Re: Firefox 3.0 beta 5 crash Gianluca Borello (Apr 22)
  - Re: Firefox 3.0 beta 5 crash Mauro Faccenda (Apr 26)
  - Re: Firefox 3.0 beta 5 crash (Slightly unrelated) Skratz0r (Apr 26)
[SECURITY] [DSA 1554-1] New roundup packages fix cross-site scripting vulnerability Noah Meyerhans (Apr 22)
Default key algorithm in Thomson and BT Home Hub routers Adrian Pastor (Apr 22)
- <Possible follow-ups>
- Re: Default key algorithm in Thomson and BT Home Hub routers ap (Apr 23)
AST-2008-006 - 3-way handshake in IAX2 incomplete Security Officer (Apr 23)
LayerOne 2008 - Final Pre-Con Update Layer One (Apr 23)
Horde Webmail XSS [Aria-Security] noreply (Apr 23)
NetClassifieds Sql Injection noreply (Apr 23)
- <Possible follow-ups>
- Re: NetClassifieds Sql Injection laurent . gaffie (Apr 23)
Zune software - arbitrary file overwrite info (Apr 23)
[ GLSA 200804-25 ] VLC: User-assisted execution of arbitrary code Robert Buchholz (Apr 23)
[SECURITY] [DSA 1555-1] New iceweasel packages fix arbitrary code execution Moritz Muehlenhoff (Apr 23)
[ GLSA 200804-26 ] Openfire: Denial of Service Robert Buchholz (Apr 23)
PR07-43: Cross-domain redirect on RSA Authentication Agent ProCheckUp Research (Apr 23)
PR07-44: XSS on RSA Authentication Agent login page ProCheckUp Research (Apr 23)
[W01-0408] Realtek HD Audio Codec Drivers (Vista) - Local Privilege Escalation vulns (Apr 23)
xine-lib NES Sound Format Demuxer Buffer Overflow laurent . gaffie (Apr 23)
- Re: xine-lib NES Sound Format Demuxer Buffer Overflow Guido Landi (Apr 24)
[ GLSA 200804-28 ] JRockit: Multiple vulnerabilities Tobias Heinlein (Apr 24)
DDIVRT-2008-11 BadBlue uninst.exe DoS vulnerabilityresearch (Apr 24)
Trillian 3.1 basic nick crash jplopezy (Apr 24)
[ GLSA 200804-27 ] SILC: Multiple vulnerabilities Tobias Heinlein (Apr 24)
A New Class of Vulnerability in Oracle: Lateral SQL Injection David Litchfield (Apr 24)
HPSBGN02333 SSRT080031 rev.1 - HP Software Update HPeDiag Running on Windows, Remote Disclosure of Information and Execution of Arbitrary Code security-alert (Apr 24)
[SECURITY] [DSA 1557-1] New phpmyadmin packages fix several vulnerabilities Thijs Kinkhorst (Apr 24)
[SECURITY] [DSA 1556-1] New perl packages fix denial of service Florian Weimer (Apr 24)
[SECURITY] [DSA 1534-2] New iceape packages fix regression Moritz Muehlenhoff (Apr 24)
[SECURITY] [DSA 1558-1] New xulrunner packages fix arbitrary code execution Moritz Muehlenhoff (Apr 25)
[ MDVSA-2008:091 ] - Updated wireshark packages fix denial of service vulnerabilities security (Apr 25)
Lotus expeditor rcplauncher uri handler vulnerability Thomas Pollet (Apr 25)
R.I.P. rgod ipsdix (Apr 25)
- <Possible follow-ups>
- Re: R.I.P. rgod blacklight (Apr 28)
  - Re: R.I.P. rgod Christian Kujau (Apr 29)
    - Message not available
    - Re: R.I.P. rgod Christian Kujau (Apr 30)
[ GLSA 200804-29 ] Comix: Multiple vulnerabilities Pierre-Yves Rofes (Apr 26)
Curious vulnerability in Excel 2007 jplopezy (Apr 26)
- <Possible follow-ups>
- Re: Curious vulnerability in Excel 2007 jplopezy (Apr 26)
Wordpress 2.5 Cookie Integrity Protection Vulnerability Steven J. Murdoch (Apr 26)
GroupWise 7 attached bugs jplopezy (Apr 26)
IMF 2008 - 2nd Call for Papers Oliver Goebel (Apr 26)
rPSA-2008-0149-1 idle python rPath Update Announcements (Apr 26)
Re: Simple Machines Forum "SMF Shoutbox" Mod Persistent XSS pobore (Apr 26)
[SECURITY] [DSA 1556-2] New perl packages fix denial of service Florian Weimer (Apr 28)
[SECURITY] [DSA 1560-1] New kronolith2 packages fix cross site scripting Thijs Kinkhorst (Apr 28)
GroupWise 7.0 mailto: scheme buffer overflow jplopezy (Apr 28)
London DEFCON meet - Thursday 1st May - DC4420 Major Malfunction (Apr 28)
bug report hadikiamarsi (Apr 28)
[SECURITY] [DSA 1561-1] New ldm packages fix information disclosure Thijs Kinkhorst (Apr 28)
Minibb 2.2a XSS Vulnerability irancrash (Apr 28)
Microsoft SWI blog inaccuracies Amit Klein (Apr 28)
[SECURITY] [DSA 1562-1] New iceape packages fix arbitrary code execution Moritz Muehlenhoff (Apr 28)
[ECHO_ADV_88$2008] Prozilla Hosting Index (directory.php cat_id) Blind Sql Injection Vulnerability erdc (Apr 28)
[ECHO_ADV_89$2008] Softbiz Web Host Directory Script (search_result.php host_id) Blind Sql Injection Vulnerability erdc (Apr 28)
CORE-2008-0320 - Insufficient argument validation of hooked SSDT functions on multiple Antivirus and Firewalls CORE Security Technologies Advisories (Apr 29)
Re: h2desk helpdesk path disclosure vulnerability john (Apr 29)
[ GLSA 200804-30 ] KDE start_kdeinit: Multiple vulnerabilities Matthias Geerdsen (Apr 29)
SugarCRM Community Edition Local File Disclosure Vulnerability roberto . suggi (Apr 29)
rPSA-2008-0151-1 libpng rPath Update Announcements (Apr 29)
- Re: rPSA-2008-0151-1 libpng Liran Cohen (Apr 30)
Re: Yourfreeworld Styleish Text Ads Script rohit (Apr 29)
XSS Attack hadikiamarsi (Apr 29)
[ MDVSA-2008:092 ] - Updated gstreamer-plugins-good packages fix vulnerabilities security (Apr 29)
[ MDVSA-2008:093 ] - Updated vorbis-tools packages fix vulnerabilities security (Apr 29)
[security bulletin] HPSBMA02331 SSRT080000 rev.1 - HP-UX running WBEM Services, Remote Execution of Arbitrary Code, Gain Extended Privileges security-alert (Apr 30)
Critical Vulnerability in SNMPc NGSSoftware Insight Security Research (Apr 30)
CFP: Workshop on Open Source Software for Computer and Network Forensics Stefano Zanero (Apr 30)
heanet.dl.sourceforge.net hacked? Michael Scheidell (Apr 30)
- Re: heanet.dl.sourceforge.net hacked? Pieter de Boer (Apr 30)
- Re: heanet.dl.sourceforge.net hacked? Rainer Duffner (Apr 30)
  - Re: heanet.dl.sourceforge.net hacked? Marshall Eubanks (Apr 30)
- <Possible follow-ups>
- Re: heanet.dl.sourceforge.net hacked? mirrors (Apr 30)
- Re: Re: heanet.dl.sourceforge.net hacked? securityfocus . com (Apr 30)
[SECURITY] [DSA 1563-1] New asterisk packages fix denial of service Moritz Muehlenhoff (Apr 30)

Previous period

Next period