Most recent messages
262 messages sorted by: [ author ] [ thread ] [ subject ]

Starting: Fri Aug 01 2008 - 09:36:50 CDT
Ending: Thu Aug 28 2008 - 14:51:06 CDT

• [ GLSA 200807-16 ] Python: Multiple vulnerabilities Robert Buchholz (Thu Jul 31 2008 - 18:33:28 CDT)
• CA ARCserve Backup for Laptops and Desktops Server LGServer Service Vulnerability Williams, James K (Fri Aug 01 2008 - 05:52:07 CDT)
• [CVE-2008-2370] Apache Tomcat information disclosure vulnerability Mark Thomas (Fri Aug 01 2008 - 09:06:33 CDT)
• libxslt heap overflow chrisscary.beasts.org (Thu Jul 31 2008 - 20:03:11 CDT)
• [SECURITY] [DSA 1625-1] New cupsys packages fix arbitrary code execution Thijs Kinkhorst (Fri Aug 01 2008 - 02:52:06 CDT)
• [SECURITY] [DSA 1626-1] New httrack packages fix arbitrary code execution Thijs Kinkhorst (Fri Aug 01 2008 - 02:52:19 CDT)
• [CVE-2008-1232] Apache Tomcat XSS vulnerability Mark Thomas (Fri Aug 01 2008 - 09:06:19 CDT)
• [USN-634-1] OpenLDAP vulnerability Kees Cook (Fri Aug 01 2008 - 10:27:01 CDT)
• eVision 2.0 Sql Injection/Remote File Disclosure/Remote File Upload/IG r3d.w0rmyahoo.com (Fri Aug 01 2008 - 03:19:22 CDT)
• DNS Multiple Race Exploiting Tool AR (Fri Aug 01 2008 - 10:33:21 CDT)
• [USN-633-1] libxslt vulnerabilities Kees Cook (Fri Aug 01 2008 - 10:26:31 CDT)
• [USN-632-1] Python vulnerabilities Kees Cook (Fri Aug 01 2008 - 09:51:27 CDT)
• iDefense Security Advisory 07.31.08: Apple Mac OS X CoreGraphics PDF Type1 Font Integer Overflow Vulnerability iDefense Labs (Fri Aug 01 2008 - 13:06:47 CDT)
• n.runs-SA-2008.005 - Apple Inc. - CoreServices Framework’s CarbonCore Framework - Arbitrary Code Execution (remote) securitynruns.com (Fri Aug 01 2008 - 12:29:59 CDT)
• Re: how to request a cve id? William A. Rowe, Jr. (Fri Aug 01 2008 - 15:39:18 CDT)
• Re: Windows Vista Power Management & Local Security Policy William A. Rowe, Jr. (Fri Aug 01 2008 - 15:43:56 CDT)
• [ MDVSA-2008:160 ] libxslt securitymandriva.com (Fri Aug 01 2008 - 15:48:00 CDT)
• file upload exploit win32.exew.cn (Fri Aug 01 2008 - 12:21:45 CDT)
• iDefense Security Advisory 08.01.08: Ingres Database for Linux verifydb Insecure File Permissions Modification Vulnerability iDefense Labs (Fri Aug 01 2008 - 23:28:45 CDT)
• iDefense Security Advisory 08.01.08: Ingres Database for Linux libbecompat Stack Based Buffer Overflow Vulnerability iDefense Labs (Fri Aug 01 2008 - 23:29:53 CDT)
• iDefense Security Advisory 08.01.08: Ingres Database for Linux ingvalidpw Untrusted Library Path Vulnerability iDefense Labs (Fri Aug 01 2008 - 23:30:27 CDT)
• Pligg Auto-Voter Using XSS to Bypass CSRF Protection michaelbrooksrooksecurity.com (Fri Aug 01 2008 - 19:04:40 CDT)
• Homes 4 Sale Remote XSS Vulnerabilitiy Ghost hacker (Sat Aug 02 2008 - 02:59:48 CDT)
• Server termination in America's Army 2.8.3.1 Luigi Auriemma (Sat Aug 02 2008 - 13:15:17 CDT)
• Keld: PHP-MySQL News Script 0.7.1 Remote SQL injection Vulnerability crimson.loydgmail.com (Sun Aug 03 2008 - 05:07:30 CDT)
• TGS CMS Remote Code Execution Exploit 0in.emailgmail.com (Sun Aug 03 2008 - 13:21:43 CDT)
• [SECURITY] [DSA 1627-1] New opensc packages fix smart card vulnerability Thijs Kinkhorst (Mon Aug 04 2008 - 04:00:29 CDT)
• UNAK-CMS Lfi r3d.w0rmyahoo.com (Sun Aug 03 2008 - 23:19:35 CDT)
• [USN-626-2] Devhelp, Epiphany, Midbrowser and Yelp update Jamie Strandboge (Mon Aug 04 2008 - 08:46:45 CDT)
• Team SHATTER Security Advisory: SQL Injection in Oracle Application Server (WWEXP_API_ENGINE) Team SHATTER (Mon Aug 04 2008 - 11:16:01 CDT)
• Team SHATTER Security Advisory: Cross-site scripting in Oracle Enterprise Manager (REFRESHCHOICE Parameter) Team SHATTER (Mon Aug 04 2008 - 11:43:27 CDT)
• Team SHATTER Security Advisory: SQL Injection in Oracle Database (DBMS_DEFER_SYS.DELETE_TRAN) Team SHATTER (Mon Aug 04 2008 - 11:41:30 CDT)
• CORE-2008-0716 - Sun xVM VirtualBox Privilege Escalation Vulnerability CORE Security Technologies Advisories (Mon Aug 04 2008 - 15:38:32 CDT)
• Xampp Linux 1.6.7 Multiple Cross Site Scripting Vulnerabilities irancrashgmail.com (Mon Aug 04 2008 - 09:13:04 CDT)
• 8e6 Technologies R3000 Internet Filter Bypass with Host Decoy nnposterdisclosed.not (Tue Aug 05 2008 - 02:19:46 CDT)
• Plogger <= 3.0 SQL Injection GulfTech Security Research (Tue Aug 05 2008 - 09:19:41 CDT)
• IGES CMS <=2.0 Multiple Vulnerabilities adminbugreport.ir (Tue Aug 05 2008 - 04:59:11 CDT)
• Pluck 4.5.2 Multiple Cross Site Scripting Vulnerabilities irancrashgmail.com (Mon Aug 04 2008 - 18:48:27 CDT)
• [ GLSA 200808-01 ] xine-lib: User-assisted execution of arbitrary code Robert Buchholz (Tue Aug 05 2008 - 19:02:36 CDT)
• [ GLSA 200808-02 ] Net-SNMP: Multiple vulnerabilities Robert Buchholz (Tue Aug 05 2008 - 19:30:01 CDT)
• [ GLSA 200808-03 ] Mozilla products: Multiple vulnerabilities Robert Buchholz (Tue Aug 05 2008 - 19:42:21 CDT)
• [ GLSA 200808-04 ] Wireshark: Denial of Service Robert Buchholz (Tue Aug 05 2008 - 19:46:00 CDT)
• rPSA-2008-0245-1 cups rPath Update Announcements (Tue Aug 05 2008 - 19:48:11 CDT)
• rPSA-2008-0246-1 gaim rPath Update Announcements (Tue Aug 05 2008 - 19:52:00 CDT)
• PHP-NUKE module Kleinanzeigen SQL injection (lid) lovebughotmail.it (Tue Aug 05 2008 - 20:43:39 CDT)
• MyClan Sql Injection r3d.w0rmyahoo.com (Tue Aug 05 2008 - 23:21:26 CDT)
• Re: 8e6 Technologies R3000 Internet Filter Bypass with Host Decoy jyoung01americafirst.com (Tue Aug 05 2008 - 16:09:35 CDT)
• Interesting things at sec-consult.com, DNS-whitepaper available tomorrow Bernhard Mueller (Tue Aug 05 2008 - 17:28:12 CDT)
• CA Products That Embed Ingres Multiple Vulnerabilities Williams, James K (Wed Aug 06 2008 - 10:48:35 CDT)
• Google Notebook and Google Bookmarks Cross Site Scripting Vulnerabilities alfredo.mellonigmail.com (Wed Aug 06 2008 - 09:26:23 CDT)
• Apache HTTP Server mod_proxy_ftp Wildcard Characters Cross-Site Scripting marc_bevandrapid7.com (Wed Aug 06 2008 - 12:26:48 CDT)
• [USN-635-1] xine-lib vulnerabilities Jamie Strandboge (Wed Aug 06 2008 - 14:37:14 CDT)
• [ GLSA 200808-05 ] ISC DHCP: Denial of Service Tobias Heinlein (Wed Aug 06 2008 - 15:16:35 CDT)
• [ GLSA 200808-06 ] libxslt: Execution of arbitrary code Tobias Heinlein (Wed Aug 06 2008 - 15:18:44 CDT)
• [security bulletin] HPSBUX02351 SSRT080058 rev.3 - HP-UX Running BIND, Remote DNS Cache Poisoning security-alerthp.com (Wed Aug 06 2008 - 15:45:32 CDT)
• [security bulletin] HPSBUX02355 SSRT080023 rev.1 - HP-UX Using libc, Remote Denial of Service (DoS) security-alerthp.com (Wed Aug 06 2008 - 16:00:00 CDT)
• Re: [funsec] facebook messages worm Gadi Evron (Wed Aug 06 2008 - 16:50:16 CDT)
• OpenVMS fingerd remote stack overflow Shaun Colley (Wed Aug 06 2008 - 18:08:53 CDT)
• Endless loop and resources consumption in Halo 1.0.7.0615 Luigi Auriemma (Wed Aug 06 2008 - 18:00:31 CDT)
• Re: [Full-disclosure] [funsec] facebook messages worm Juha-Matti Laurio (Thu Aug 07 2008 - 00:00:13 CDT)
• facebook messages worm Gadi Evron (Wed Aug 06 2008 - 16:44:03 CDT)
• Whitepaper: DNS zone redelegation Bernhard Mueller (Thu Aug 07 2008 - 03:25:30 CDT)
• Re: [funsec] facebook messages worm Gadi Evron (Thu Aug 07 2008 - 00:15:24 CDT)
• Re: [funsec] facebook messages worm Gadi Evron (Wed Aug 06 2008 - 20:45:30 CDT)
• [SE-2008-01] J2ME Security Vulnerabilities 2008 Security Explorations (Thu Aug 07 2008 - 10:26:14 CDT)
• Re: [SE-2008-01] J2ME Security Vulnerabilities 2008 0xjbrown41gmail.com (Thu Aug 07 2008 - 13:55:06 CDT)
• Re: OpenVMS fingerd remote stack overflow Alexander Sotirov (Thu Aug 07 2008 - 12:40:16 CDT)
• Re: OpenVMS fingerd remote stack overflow Kevin Finisterre (lists) (Thu Aug 07 2008 - 12:54:30 CDT)
• e107 <= 0.7.11 Arbitrary Variable Overwriting GulfTech Security Research (Thu Aug 07 2008 - 14:13:33 CDT)
• [ MDVSA-2008:161 ] rxvt securitymandriva.com (Thu Aug 07 2008 - 15:51:00 CDT)
• Re: OpenVMS fingerd remote stack overflow mlbugtraqnoci.xs4all.nl (Thu Aug 07 2008 - 15:51:23 CDT)
• [ MDVSA-2008:162 ] qemu securitymandriva.com (Thu Aug 07 2008 - 18:55:00 CDT)
• [ MDVSA-2008:163 ] python securitymandriva.com (Thu Aug 07 2008 - 20:26:00 CDT)
• re: [SE-2008-01] J2ME Security Vulnerabilities 2008 Security Explorations (Thu Aug 07 2008 - 17:51:37 CDT)
• [ MDVSA-2008:164 ] python securitymandriva.com (Thu Aug 07 2008 - 20:38:00 CDT)
• Re: Re: [SE-2008-01] J2ME Security Vulnerabilities 2008 0xjbrown41gmail.com (Thu Aug 07 2008 - 19:49:21 CDT)
• Re: [funsec] facebook messages worm Juha-Matti Laurio (Fri Aug 08 2008 - 04:56:17 CDT)
• OpenID/Debian PRNG/DNS Cache poisoning advisory Ben Laurie (Fri Aug 08 2008 - 09:41:53 CDT)
• [AJECT] NoticeWare IMAP Email Server 4.6.2 DoS vulnerability João Antunes (Fri Aug 08 2008 - 05:41:13 CDT)
• Re: [OpenID] OpenID/Debian PRNG/DNS Cache poisoning advisory Gerald Beuchelt (Fri Aug 08 2008 - 08:17:51 CDT)
• Re: OpenID/Debian PRNG/DNS Cache poisoning advisory Eric Rescorla (Fri Aug 08 2008 - 10:06:25 CDT)
• [AJECT] WinGate Email Server (IMAP) vulnerability João Antunes (Fri Aug 08 2008 - 09:16:08 CDT)
• Re: [OpenID] OpenID/Debian PRNG/DNS Cache poisoning advisory Ben Laurie (Fri Aug 08 2008 - 09:51:34 CDT)
• Vim: Unfixed Vulnerabilities in Tar Plugin Version 20 Jan Minář (Fri Aug 08 2008 - 09:29:53 CDT)
• RE: OpenID/Debian PRNG/DNS Cache poisoning advisory Dave Korn (Fri Aug 08 2008 - 11:31:15 CDT)
• Re: OpenID/Debian PRNG/DNS Cache poisoning advisory Eric Rescorla (Fri Aug 08 2008 - 11:57:30 CDT)
• [ GLSA 200808-07 ] ClamAV: Multiple Denials of Service Raphael Marichez (Fri Aug 08 2008 - 12:09:00 CDT)
• Re: OpenID/Debian PRNG/DNS Cache poisoning advisory Ben Laurie (Fri Aug 08 2008 - 12:11:42 CDT)
• [ GLSA 200808-08 ] stunnel: Security bypass Raphael Marichez (Fri Aug 08 2008 - 12:26:38 CDT)
• Re: [OpenID] OpenID/Debian PRNG/DNS Cache poisoning advisory Dick Hardt (Fri Aug 08 2008 - 12:29:24 CDT)
• [DSECRG-08-035] Local File Include Vulnerability in Gallery 1.5.7, 1.6-alpha3 Digital Security Research Group [DSecRG] (Fri Aug 08 2008 - 12:29:49 CDT)
• [ GLSA 200808-09 ] OpenLDAP: Denial of Service vulnerability Raphael Marichez (Fri Aug 08 2008 - 12:31:00 CDT)
• RE: OpenID/Debian PRNG/DNS Cache poisoning advisory Leichter, Jerry (Fri Aug 08 2008 - 12:04:16 CDT)
• RE: OpenID/Debian PRNG/DNS Cache poisoning advisory Dave Korn (Fri Aug 08 2008 - 12:08:03 CDT)
• Re: OpenID/Debian PRNG/DNS Cache poisoning advisory Peter Gutmann (Fri Aug 08 2008 - 12:49:42 CDT)
• Re: OpenID/Debian PRNG/DNS Cache poisoning advisory Dan Kaminsky (Fri Aug 08 2008 - 12:43:53 CDT)
• New paper: An Illustrated Guide to the Kaminsky DNS Vulnerability Steve Friedl (Fri Aug 08 2008 - 12:56:53 CDT)
• Re: OpenID/Debian PRNG/DNS Cache poisoning advisory Perry E. Metzger (Fri Aug 08 2008 - 13:08:37 CDT)
• Re: OpenID/Debian PRNG/DNS Cache poisoning advisory Eric Rescorla (Fri Aug 08 2008 - 13:20:15 CDT)
• Re: OpenVMS fingerd remote stack overflow Tim Newsham (Fri Aug 08 2008 - 13:24:16 CDT)
• Re: OpenID/Debian PRNG/DNS Cache poisoning advisory Ben Laurie (Fri Aug 08 2008 - 14:10:41 CDT)
• Re: OpenID/Debian PRNG/DNS Cache poisoning advisory Nicolas Williams (Fri Aug 08 2008 - 13:47:01 CDT)
• Re: [OpenID] OpenID/Debian PRNG/DNS Cache poisoning advisory Ben Laurie (Fri Aug 08 2008 - 14:41:01 CDT)
• Re: OpenID/Debian PRNG/DNS Cache poisoning advisory Nicolas Williams (Fri Aug 08 2008 - 15:08:57 CDT)
• Re: OpenID/Debian PRNG/DNS Cache poisoning advisory Leichter, Jerry (Fri Aug 08 2008 - 14:52:07 CDT)
• Re: OpenID/Debian PRNG/DNS Cache poisoning advisory Nicolas Williams (Fri Aug 08 2008 - 14:33:10 CDT)
• Re: OpenID/Debian PRNG/DNS Cache poisoning advisory Paul Hoffman (Fri Aug 08 2008 - 14:35:43 CDT)
• key blacklisting & file size (was: OpenID/Debian PRNG/DNS Cache poisoning advisory) Solar Designer (Fri Aug 08 2008 - 15:04:34 CDT)
• Re: OpenID/Debian PRNG/DNS Cache poisoning advisory Eric Rescorla (Fri Aug 08 2008 - 15:33:18 CDT)
• [security bulletin] HPSBUX02351 SSRT080058 rev.4 - HP-UX Running BIND, Remote DNS Cache Poisoning security-alerthp.com (Sat Aug 09 2008 - 05:19:35 CDT)
• Kayako SupportSuite < 3.30.00 Multiple Vulnerabilities GulfTech Security Research (Sat Aug 09 2008 - 10:21:33 CDT)
• [ GLSA 200808-10 ] Adobe Reader: User-assisted execution of arbitrary code Robert Buchholz (Sat Aug 09 2008 - 17:43:57 CDT)
• Ovidentia Sql Injection r3d.w0rmyahoo.com (Sun Aug 10 2008 - 00:20:16 CDT)
• [SECURITY] [DSA 1627-1] New PowerDNS packages reduce DNS spoofing risk Florian Weimer (Sun Aug 10 2008 - 15:34:06 CDT)
• Re: [DSECRG-08-035] Local File Include Vulnerability in Gallery 1.5.7, 1.6-alpha3 o_0.iahumeilyahoo.com (Sun Aug 10 2008 - 15:13:39 CDT)
• K-Links Directory Blind SQL Injection Exploit hadihadi_zedehal_2006yahoo.com (Sun Aug 10 2008 - 20:07:24 CDT)
• rPSA-2008-0247-1 gvim vim vim-minimal rPath Update Announcements (Mon Aug 11 2008 - 13:18:27 CDT)
• rPSA-2008-0249-1 openldap openldap-clients openldap-servers rPath Update Announcements (Mon Aug 11 2008 - 13:22:51 CDT)
• [ GLSA 200808-11 ] UUDeview: Insecure temporary file creation Pierre-Yves Rofes (Mon Aug 11 2008 - 13:49:08 CDT)
• Apache Tomcat <= 6.0.18 UTF8 Directory Traversal Vulnerability emericboityahoo.fr (Mon Aug 11 2008 - 03:52:44 CDT)
• Re: Team SHATTER Security Advisory: SQL Injection in Oracle Database (DBMS_DEFER_SYS.DELETE_TRAN) Team SHATTER (Mon Aug 11 2008 - 16:29:15 CDT)
• Layered Defense Research Advisory: Alcatel-Lucent OmniSwitch products, Stack Buffer Overflow dhlayereddefense.com (Mon Aug 11 2008 - 22:56:22 CDT)
• RE: OpenID/Debian PRNG/DNS Cache poisoning advisory Clausen, Martin (DK - Copenhagen) (Tue Aug 12 2008 - 03:55:53 CDT)
• Re: OpenID/Debian PRNG/DNS Cache poisoning advisory Ben Laurie (Tue Aug 12 2008 - 08:31:00 CDT)
• Re: OpenID/Debian PRNG/DNS Cache poisoning advisory Ben Laurie (Tue Aug 12 2008 - 09:42:59 CDT)
• Re: TGS CMS Remote Code Execution Exploit lcat (Mon Aug 11 2008 - 14:58:44 CDT)
• iDefense Security Advisory 08.04.08: Solaris snoop SMB Decoding Multiple Format String Vulnerabilities iDefense Labs (Tue Aug 12 2008 - 11:42:23 CDT)
• [AJECT] hMailServer 4.4.1 DoS vulnerability João Antunes (Tue Aug 12 2008 - 11:53:35 CDT)
• iDefense Security Advisory 08.04.08: Solaris snoop SMB Decoding Multiple Stack Buffer Overflow Vulnerabilities iDefense Labs (Tue Aug 12 2008 - 11:42:08 CDT)
• Re: OpenID/Debian PRNG/DNS Cache poisoning advisory Stefan Kanthak (Fri Aug 08 2008 - 17:29:52 CDT)
• Re: OpenID/Debian PRNG/DNS Cache poisoning advisory Forrest J. Cavalier III (Fri Aug 08 2008 - 20:37:44 CDT)
• Internet attacks against Georgian web sites Gadi Evron (Mon Aug 11 2008 - 01:40:16 CDT)
• VMSA-2008-0012 Updated VirtualCenter addresses User Account Disclosure Vulnerability VMware Security Team (Tue Aug 12 2008 - 13:11:06 CDT)
• Re: OpenID/Debian PRNG/DNS Cache poisoning advisory Leichter, Jerry (Fri Aug 08 2008 - 15:51:10 CDT)
• rPSA-2008-0253-1 git gitweb rPath Update Announcements (Tue Aug 12 2008 - 13:47:50 CDT)
• Re: OpenID/Debian PRNG/DNS Cache poisoning advisory \ (Fri Aug 08 2008 - 17:14:46 CDT)
• VMSA-2008-0013 Updated ESX packages for OpenSSL, net-snmp, perl VMware Security Team (Tue Aug 12 2008 - 13:13:44 CDT)
• Re: OpenID/Debian PRNG/DNS Cache poisoning advisory Tim Dierks (Fri Aug 08 2008 - 14:52:47 CDT)
• Re: OpenID/Debian PRNG/DNS Cache poisoning advisory Ben Laurie (Sat Aug 09 2008 - 03:29:09 CDT)
• CA Host-Based Intrusion Prevention System SDK kmxfw.sys Multiple Vulnerabilities Williams, James K (Tue Aug 12 2008 - 13:53:20 CDT)
• Re: [funsec] Internet attacks against Georgian web sites Paul Ferguson (Mon Aug 11 2008 - 02:12:46 CDT)
• Surf Jack - HTTPS will not save you listsenablesecurity.com (Mon Aug 11 2008 - 04:30:37 CDT)
• Re: OpenID/Debian PRNG/DNS Cache poisoning advisory Florian Weimer (Fri Aug 08 2008 - 16:28:19 CDT)
• Re: [funsec] Internet attacks against Georgian web sites Paul Ferguson (Mon Aug 11 2008 - 01:52:56 CDT)
• [security bulletin] HPSBUX02356 SSRT080051 rev.1 - HP-UX Running ftpd, Remote Privileged Access security-alerthp.com (Tue Aug 12 2008 - 14:50:23 CDT)
• ZDI-08-048: Microsoft Excel COUNTRY Record Memory Corruption Vulnerability zdi-disclosures3com.com (Tue Aug 12 2008 - 16:42:11 CDT)
• ZDI-08-051: Microsoft Internet Explorer Table Layout Memory Corruption Vulnerability zdi-disclosures3COM.COM (Tue Aug 12 2008 - 16:47:07 CDT)
• ZDI-08-049: Microsoft Windows Graphics Rendering Engine PICT Heap Corruption zdi-disclosures3com.com (Tue Aug 12 2008 - 16:43:24 CDT)
• iDefense Security Advisory 08.12.08: Microsoft Office BMP Input Filter Heap Overflow Vulnerability iDefense Labs (Tue Aug 12 2008 - 18:56:30 CDT)
• Re: Vim: Netrw: FTP User Name and Password Disclosure Tony Mechelynck (Tue Aug 12 2008 - 17:18:05 CDT)
• [ MDVSA-2008:167 ] kernel securitymandriva.com (Tue Aug 12 2008 - 19:10:00 CDT)
• ZDI-08-050: Microsoft Internet Explorer XHTML Rendering Memory Corruption Vulnerability zdi-disclosures3Com.com (Tue Aug 12 2008 - 16:46:03 CDT)
• [ MDVSA-2008:166 ] clamav securitymandriva.com (Tue Aug 12 2008 - 19:15:00 CDT)
• Vim: Netrw: FTP User Name and Password Disclosure Jan Minář (Tue Aug 12 2008 - 16:59:59 CDT)
• iDefense Security Advisory 08.12.08: Microsoft Office WPG Image File Heap Buffer Overflow Vulnerability iDefense Labs (Tue Aug 12 2008 - 19:14:13 CDT)
• [TKADV2008-006] CA HIPS KmxFw.sys Kernel Memory Corruption Tobias Klein (Tue Aug 12 2008 - 16:27:12 CDT)
• iDefense Security Advisory 08.12.08: Microsoft PowerPoint Viewer 2003 Out of Bounds Array Index Vulnerability iDefense Labs (Tue Aug 12 2008 - 19:30:34 CDT)
• iDefense Security Advisory 08.12.08: Microsoft PowerPoint Viewer 2003 Cstring Integer Overflow Vulnerability iDefense Labs (Tue Aug 12 2008 - 19:58:41 CDT)
• iDefense Security Advisory 08.12.08: Microsoft Excel Chart AxesSet Invalid Array Index Vulnerability iDefense Labs (Tue Aug 12 2008 - 20:06:38 CDT)
• iDefense Security Advisory 08.12.08: Microsoft Excel FORMAT Record Invalid Array Index Vulnerability iDefense Labs (Tue Aug 12 2008 - 20:09:15 CDT)
• iDefense Security Advisory 08.12.08: Microsoft Windows Color Management Module Heap Buffer Overflow Vulnerability iDefense Labs (Tue Aug 12 2008 - 20:34:35 CDT)
• rPSA-2008-0243-1 idle python rPath Update Announcements (Wed Aug 13 2008 - 08:17:49 CDT)
• Vim 7.2c.002 Fixes Arbitrary Command Execution when Handling Tar Archives Jan Minář (Wed Aug 13 2008 - 09:35:37 CDT)
• NULL pointer in Ventrilo 3.0.2 Luigi Auriemma (Wed Aug 13 2008 - 13:13:12 CDT)
• [security bulletin] HPSBTU02358 SSRT080058 rev.1 - HP Tru64 UNIX running BIND, Remote DNS Cache Poisoning security-alerthp.com (Wed Aug 13 2008 - 15:02:59 CDT)
• CORE-2008-0103: Internet Explorer Zone Elevation Restrictions Bypass and Security Zone Restrictions Bypass CORE Security Technologies Advisories (Wed Aug 13 2008 - 16:01:10 CDT)
• [ MDVSA-2008:170 ] cups securitymandriva.com (Wed Aug 13 2008 - 23:43:00 CDT)
• Microsoft Windows Messenger Remote Illegal Access Vulnerability cocoruder (Wed Aug 13 2008 - 23:08:31 CDT)
• [ MDVSA-2008:168 ] stunnel securitymandriva.com (Wed Aug 13 2008 - 23:11:01 CDT)
• [ MDVSA-2008:169 ] hplip securitymandriva.com (Wed Aug 13 2008 - 23:15:00 CDT)
• [security bulletin] HPSBOV02357 SSRT080058 rev.1 - HP OpenVMS TCP/IP Services running BIND, Remote DNS Cache Poisoning security-alerthp.com (Thu Aug 14 2008 - 06:58:33 CDT)
• Postfix local privilege escalation via hardlinked symlinks Wietse Venema (Thu Aug 14 2008 - 07:03:43 CDT)
• SYM08-015_SFW_SecurityUpdateBypass Mike Prosser (Thu Aug 14 2008 - 13:07:49 CDT)
• ZDI-08-053: Symantec Veritas Storage Foundation Scheduler Service NULL Session Authentication Bypass Vulnerability zdi-disclosures3com.com (Thu Aug 14 2008 - 14:28:01 CDT)
• Security Assessment of the Internet Protocol Fernando Gont (Thu Aug 14 2008 - 14:10:19 CDT)
• rPSA-2008-0255-1 freetype rPath Update Announcements (Thu Aug 14 2008 - 16:27:55 CDT)
• [ GLSA 200808-12 ] Postfix: Local privilege escalation vulnerability Raphael Marichez (Thu Aug 14 2008 - 17:41:07 CDT)
• Cisco Security Advisory: Vulnerability in Cisco WebEx Meeting Manager ActiveX Control Cisco Systems Product Security Incident Response Team (Thu Aug 14 2008 - 22:15:00 CDT)
• Re: MicroWorld MailScan - Multiple Vulnerabilities within Admin-Webinterface oliver karow (Fri Aug 15 2008 - 05:26:07 CDT)
• munky-bliki lfi r3d.w0rmyahoo.com (Fri Aug 15 2008 - 05:20:09 CDT)
• Mambo 4.6.2 Full Version - Multiple Cross Site Scripting - By Khashayar Fereidani irancrashgmail.com (Fri Aug 15 2008 - 05:13:37 CDT)
• FlexCMS <= 2.5 Cross Site Scripting Vulnerability irancrashgmail.com (Fri Aug 15 2008 - 05:33:35 CDT)
• [ MDVSA-2008:172 ] amarok securitymandriva.com (Fri Aug 15 2008 - 16:54:00 CDT)
• [ MDVSA-2008:171 ] postfix securitymandriva.com (Fri Aug 15 2008 - 15:44:00 CDT)
• PHP Live Helper <= 2.0.1 Multiple Vulnerabilities GulfTech Security Research (Sat Aug 16 2008 - 10:09:57 CDT)
• Nokia 6131 NFC URI/URL Spoofing and DoS Advisory Collin R. Mulliner (Sat Aug 16 2008 - 12:15:46 CDT)
• Re: ManageEngine Firewall Analyzer arbitrary file disclosure to authorized user Eder Wentz (Sat Aug 16 2008 - 21:51:24 CDT)
• NewsHOWLER 1.03 Beta Cookie Handling Via Sql injection r3d.w0rmyahoo.com (Sun Aug 17 2008 - 11:58:12 CDT)
• [DSECRG-08-036] Multiple Security Vulnerabilities in Freeway eCommerce 1.4.1.171 Digital Security Research Group [DSecRG] (Mon Aug 18 2008 - 07:39:24 CDT)
• Tool: PorkBind v1.3 Nameserver Security Scanner (New Version) Derek Callaway (Fri Aug 15 2008 - 13:31:41 CDT)
• Ovidentia 6.6.5 XSS (index.php)&#8207; mostafa_ragabmsn.com (Mon Aug 18 2008 - 05:27:13 CDT)
• [security bulletin] HPSBMA02345 SSRT080039 rev.2 - HP System Management Homepage (SMH) for Linux and Windows, Remote Cross Site Scripting (XSS) security-alerthp.com (Mon Aug 18 2008 - 10:18:13 CDT)
• [SECURITY] [DSA 1629-1] New postfix packages fix privilege escalation Thijs Kinkhorst (Mon Aug 18 2008 - 15:51:28 CDT)
• [SECURITY] [DSA 1629-2] New postfix packages fix installability problem on i386 Thijs Kinkhorst (Tue Aug 19 2008 - 04:02:12 CDT)
• [security bulletin] HPSBST02360 SSRT080117 rev.2 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS08-041 to MS08-051 security-alerthp.com (Tue Aug 19 2008 - 07:13:55 CDT)
• SunShop <= 4.1.4 SQL Injection GulfTech Security Research (Mon Aug 18 2008 - 17:06:28 CDT)
• Vanilla <= 1.1.4 Script Injection/ XSS GulfTech Security Research (Tue Aug 19 2008 - 09:38:50 CDT)
• [ MDVSA-2008:173 ] kdegraphics securitymandriva.com (Tue Aug 19 2008 - 15:46:00 CDT)
• [ MDVSA-2008:174 ] kernel securitymandriva.com (Tue Aug 19 2008 - 20:14:01 CDT)
• [USN-636-1] Postfix vulnerability Kees Cook (Tue Aug 19 2008 - 17:11:12 CDT)
• Folder Lock <= 5.9.5 Local Password Information Disclosure glafkosinfosec.org.uk (Tue Aug 19 2008 - 21:11:29 CDT)
• ToorCon 10 Call For Papers David Hulton (Wed Aug 20 2008 - 03:33:02 CDT)
• [ MDVSA-2008:175 ] yelp securitymandriva.com (Wed Aug 20 2008 - 14:16:00 CDT)
• Null Byte Local file Inclusion in FAR - PHP Project version:1.0 beenudel1986gmail.com (Wed Aug 20 2008 - 21:56:42 CDT)
• IMF 2008 - Call for Participation Oliver Goebel (Tue Aug 19 2008 - 14:19:40 CDT)
• [ MDVSA-2008:176 ] mtr securitymandriva.com (Wed Aug 20 2008 - 16:11:00 CDT)
• CORE-2008-0624: Anzio Web Print Object Buffer Overflow CORE Security Technologies Advisories (Wed Aug 20 2008 - 16:23:21 CDT)
• CORE-2008-0813 - vBulletin Cross Site Scripting Vulnerability CORE Security Technologies Advisories (Wed Aug 20 2008 - 16:56:10 CDT)
• [ MDVSA-2008:177 ] xine-lib securitymandriva.com (Wed Aug 20 2008 - 22:32:01 CDT)
• [ MDVSA-2008:178 ] xine-lib securitymandriva.com (Thu Aug 21 2008 - 00:38:01 CDT)
• UPDATE: [ GLSA 200804-22 ] PowerDNS Recursor: DNS Cache Poisoning Robert Buchholz (Thu Aug 21 2008 - 10:38:51 CDT)
• [SECURITY] [DSA 1630-1] New Linux 2.6.18 packages fix several vulnerabilities dann frazier (Thu Aug 21 2008 - 11:34:06 CDT)
• rPSA-2008-0259-1 postfix rPath Update Announcements (Wed Aug 20 2008 - 19:37:12 CDT)
• TimeTrex Time and Attendance Cookie Theft DoZHackersCenter.com (Thu Aug 21 2008 - 11:50:07 CDT)
• Vim: Arbitrary Code Execution in Commands: K, Control-], g] Jan Minář (Fri Aug 22 2008 - 09:25:52 CDT)
• Call For Papers - Hackers 2 Hackers Conference 5th Edition - Brazil cfph2hc.com.br (Thu Aug 21 2008 - 22:40:19 CDT)
• Contest: Best Advances for OpenVAS Network Vulnerability Tests Michael Wiegand (Fri Aug 22 2008 - 07:09:08 CDT)
• PR08-20: Bypassing ASP .NET "ValidateRequest" for Script Injection Attacks ProCheckUp Research (Thu Aug 21 2008 - 15:08:41 CDT)
• RE: TimeTrex Time and Attendance Cookie Theft Alex Eden (Thu Aug 21 2008 - 16:09:59 CDT)
• [ MDVSA-2008:179 ] metisse securitymandriva.com (Thu Aug 21 2008 - 16:41:01 CDT)
• Fedora confirms: Our servers were breached Juha-Matti Laurio (Fri Aug 22 2008 - 09:41:59 CDT)
• Apple OSX Leopard (10.5+), inadequate ACL insight can create vuln bgtrq.tryfixingitantichef.net (Tue Aug 19 2008 - 07:44:38 CDT)
• [SECURITY] [DSA 1631-1] New libxml2 packages fix denial of service Steve Kemp (Fri Aug 22 2008 - 14:19:24 CDT)
• Re: RE: TimeTrex Time and Attendance Cookie Theft hihi.com (Fri Aug 22 2008 - 13:53:29 CDT)
• [oCERT-2008-008] multiple heap overflows in xine-lib Will Drewry (Fri Aug 22 2008 - 13:11:52 CDT)
• Re: Fedora confirms: Our servers were breached Dragos Ruiu (Fri Aug 22 2008 - 15:25:41 CDT)
• [ MDVSA-2008:180 ] libxml2 securitymandriva.com (Thu Aug 21 2008 - 18:57:01 CDT)
• Secunia Research: Trend Micro Products Web Management Authentication Bypass Secunia Research (Fri Aug 22 2008 - 05:33:36 CDT)
• Re: Null Byte Local file Inclusion in FAR - PHP Project version:1.0 William McAfee (Thu Aug 21 2008 - 20:46:53 CDT)
• Re: TimeTrex Time and Attendance Cookie Theft Mike (Fri Aug 22 2008 - 17:49:18 CDT)
• OneNews Beta 2 Multiple Vulnerabilities crimson.loydgmail.com (Sat Aug 23 2008 - 01:05:50 CDT)
• Secunia Research: Novell iPrint Client ActiveX Control "GetFileList()" Information Disclosure Secunia Research (Mon Aug 25 2008 - 07:14:25 CDT)
• RE: Arbitrary Code Execution in Commands: K, Control-], g] Michael Wojcik (Mon Aug 25 2008 - 08:57:15 CDT)
• [DSECRG-08-038] Multiple Local File Include Vulnerabilities in ezContents CMS 2.0.3 Digital Security Research Group [DSecRG] (Mon Aug 25 2008 - 08:53:13 CDT)
• Secunia Research: Calendarix Basic Two SQL Injection Vulnerabilities Secunia Research (Mon Aug 25 2008 - 08:08:05 CDT)
• Secunia Research: Novell iPrint Client ActiveX Control Multiple Buffer Overflows Secunia Research (Mon Aug 25 2008 - 05:59:53 CDT)
• [DSECRG-08-037] Multiple Local File Include Vulnerabilities in Pluck CMS 4.5.2 Digital Security Research Group [DSecRG] (Mon Aug 25 2008 - 08:51:28 CDT)
• [IVIZ-08-006] DiskCryptor Security Model bypass exploiting wrong BIOS API usage iViZ Security Advisories (Mon Aug 25 2008 - 04:11:40 CDT)
• [IVIZ-08-009] Grub Legacy Security Model bypass exploiting wrong BIOS API usage iViZ Security Advisories (Mon Aug 25 2008 - 04:17:36 CDT)
• SECOBJADV-2008-03.2: PartyGaming PartyPoker Malicious Update Vulnerability Security Objectives Corporation (Sun Aug 24 2008 - 23:22:23 CDT)
• Crafty Syntax Live Help <= 2.14.6 SQL Injection GulfTech Security Research (Mon Aug 25 2008 - 14:48:27 CDT)
• ToorCon X CFP Closing and Workshops and Seminars discounted until Friday! David Hulton (Mon Aug 25 2008 - 18:03:57 CDT)
• Mini-NUKE v2.3 Freehost (tr) Multiple Remote SQL Injection Vulnerabilities byccclive.com (Mon Aug 25 2008 - 15:10:14 CDT)
• ZoneMinder Multiple Vulnerabilities filip.palianpjwstk.edu.pl (Tue Aug 26 2008 - 07:53:12 CDT)
• Hopeless comments regarding the pointless "HP System Management Homepage (SMH) Unspecified XSS" Luca.carettoni (Tue Aug 26 2008 - 05:25:58 CDT)
• [SECURITY] [DSA 1632-1] New tiff packages fix arbitrary code execution Thijs Kinkhorst (Tue Aug 26 2008 - 11:22:23 CDT)
• Multiple Vulnerabilities in AWStats Totals Elliot Kendall (Tue Aug 26 2008 - 11:54:46 CDT)
• [SECURITY] [DSA 1631-1] New libxml2 packages fix denial of service Steve Kemp (Tue Aug 26 2008 - 12:53:23 CDT)
• White Wolf Labs #080826-1: Kyocera Mita Scanner File Utility (Multiple) Seth Fogie (Tue Aug 26 2008 - 13:05:20 CDT)
• PacSec 2008 CFP (Deadline Sept. 1, Conference Nov. 12/13) and BA-Con 2008 Speakers (Sept .30/ Oct. 1) Dragos Ruiu (Tue Aug 26 2008 - 14:33:05 CDT)
• [ MDVSA-2008:180-1 ] libxml2 securitymandriva.com (Tue Aug 26 2008 - 14:51:00 CDT)
• [security bulletin] HPSBMA02363 SSRT080106 rev.1 - HP Enterprise Discovery Running on Windows, Remote Authorized User, Gain Extended Privileges security-alerthp.com (Wed Aug 27 2008 - 08:01:08 CDT)
• [IVIZ-08-008] LILO Security Model bypass exploiting wrong BIOS API usage iViZ Security Advisories (Mon Aug 25 2008 - 04:15:28 CDT)
• [IVIZ-08-007] DriveCrypt Security Model bypass exploiting wrong BIOS API usage iViZ Security Advisories (Mon Aug 25 2008 - 04:13:23 CDT)
• [IVIZ-08-003] TrueCrypt Security Model bypass exploiting wrong BIOS API usage iViZ Security Advisories (Mon Aug 25 2008 - 03:57:22 CDT)
• [USN-638-1] Yelp vulnerability Kees Cook (Wed Aug 27 2008 - 16:54:46 CDT)
• XSS and Data Manipulation attacks found in CMS PHPCart. vaibhav aher (Wed Aug 27 2008 - 22:57:48 CDT)
• [IVIZ-08-004] Intel BIOS Plain Text Password Disclosure iViZ Security Advisories (Mon Aug 25 2008 - 04:06:37 CDT)
• [IVIZ-08-002] Hewlett-Packard BIOS Plain Text Password Disclosure iViZ Security Advisories (Mon Aug 25 2008 - 03:54:50 CDT)
• [IVIZ-08-005] IBM Lenovo BIOS Plain Text Password Disclosure iViZ Security Advisories (Mon Aug 25 2008 - 04:09:06 CDT)
• [security bulletin] HPSBUX02365 SSRT080118 rev.1 - HP-UX Running Apache, Remote Cross Site Scripting (XSS) or Denial of Service (DoS) security-alerthp.com (Thu Aug 28 2008 - 07:22:25 CDT)
• reviving the botnets mailing list: a new statregy in fighting cyber crime Gadi Evron (Thu Aug 28 2008 - 07:43:23 CDT)

Last message date: Thu Aug 28 2008 - 14:51:06 CDT
Archived on: Thu Aug 28 2008 - 14:51:06 CDT

262 messages sorted by: [ author ] [ thread ] [ subject ]