bugtraq  

Messages by Thread

• ZDI-10-017: Microsoft Office PowerPoint Viewer TextBytesAtom Record Remote Code Execution Vulnerability ZDI Disclosures
• ZDI-10-016: Microsoft Windows ShellExecute Improper Sanitization Code Execution Vulnerability ZDI Disclosures
• ZDI-10-015: Microsoft Windows RLE Video Decompressor Remote Code Execution Vulnerability ZDI Disclosures
• TPTI-10-02: Microsoft Office PowerPoint Viewer TextCharsAtom Record Code Execution Vulnerability ZDI Disclosures
• CORE-2009-0827: Microsoft Office Excel / Word OfficeArtSpgr Container Pointer Overwrite Vulnerability CORE Security Technologies Advisories
• Secunia Research: Microsoft PowerPoint File Path Handling Buffer Overflow Secunia Research
• Aruba Advisory ID: AID-020810 TLS Protocol Session Renegotiation Security Vulnerability Robbie Gill
• ACM CCS 2010: Call for Workshop Proposals Christopher Kruegel
• Hacktics Advisory Feb09: XSS in Oracle E-Business Suite Ofer Maor
• [CORE-2010-0121] Multiple Vulnerabilities with 8.3 Filename Pseudonyms in Web Servers CORE Security Technologies Advisories
• JDownloader Remote Code Execution Matthias -apoc- Hecker
• [Hacking Event] Night Da Hack 2010 : Call For Proposals m . mahdjoub
• [ MDVSA-2010:034 ] kernel security
• [security bulletin] HPSBUX02503 SSRT100019 rev.1 - HP-UX Running Java, Remote Increase in Privilege, Denial of Service and Other security-alert
• [security bulletin] HPSBMA02487 SSRT100024 rev.1 - HP Operations Agent Running on Solaris 10, Remote Unauthorized Access security-alert
• [MajorSecurity Advisory #65]Motorola Milestone Smartphone Denial of Service david
• mongoose Space Character Remote File Disclosure Vulnerability info
• LDF (Default.asp) Sql Injection Vulnerability Arash . Setayeshi
• [DSECRG-09-065] TVUPlayer PlayerOcx.ocx ActiveX - Insecure method Alexandr Polyakov
• CORELAN-10-010 - GeFest Web HomeServer v1.0 Remote Directory Traversal Vulnerability Security
• [Suspected Spam]Vulnerability in Tagcloud for DataLife Engine MustLive
• [ MDVSA-2010:033 ] squid security
• Samba Remote Zero-Day Exploit Kingcope
  • Re: Samba Remote Zero-Day Exploit Kingcope
  • Re: Samba Remote Zero-Day Exploit paul . szabo
  • Re: [Full-disclosure] Samba Remote Zero-Day Exploit Thierry Zoller
  • Re: Samba Remote Zero-Day Exploit Kingcope
  • Re: Samba Remote Zero-Day Exploit paul . szabo
  • Re: Samba Remote Zero-Day Exploit paul . szabo
  • RE: Samba Remote Zero-Day Exploit David Jacoby
  • Re: Samba Remote Zero-Day Exploit paul . szabo
  • Re: Samba Remote Zero-Day Exploit Stefan Kanthak
  • RE: Samba Remote Zero-Day Exploit Michael Wojcik
  • Re: Samba Remote Zero-Day Exploit Stefan Kanthak
  • RE: Samba Remote Zero-Day Exploit Michael Wojcik
  • Re: Samba Remote Zero-Day Exploit Dan Kaminsky
  • Re: Samba Remote Zero-Day Exploit Stefan Kanthak
  • Re: Samba Remote Zero-Day Exploit Dan Kaminsky
  • Re: [Full-disclosure] Samba Remote Zero-Day Exploit Thierry Zoller
  • Re: [Full-disclosure] Samba Remote Zero-Day Exploit paul . szabo
  • Re: [Full-disclosure] Samba Remote Zero-Day Exploit Krzysztof Halasa
• Recon Call for Papers - July 9-11 2010 Hugo Fortier
• Secunia Research: libmikmod Module Parsing Vulnerabilities Secunia Research
• JAHx102 - HuskiCMS local file inclusion noreply
• JAHx101 - Huski retail mulitple SQL injection vulnerabilities noreply
• CORE-2010-0104 - LANDesk OS command injection CORE Security Technologies Advisories
• CORELAN-10-009 : Ipswitch IMAIL 11.01 multiple vulnerabilities (reversible encryption + weak ACL) Security
• CORELAN-10-008 - Multiple vulnerabilities found in evalmsi 2.1.03 Peter Van Eeckhoutte
• [SECURITY] [DSA 1992-1] New chrony packages fix denial of service Nico Golde
• [ MDVSA-2010:032 ] rootcerts security
• [MajorSecurity Advisory #64]Apple Safari 4.0.4 Denial of Service david
• [SECURITY] [DSA-1990-1] New trac-git packages fix code execution Florian Weimer
• [SECURITY] [DSA 1991-1] New squid/squid3 packages fix denial of service Steffen Joeris
• [SECURITY] [DSA-1990-2] New trac-git package fixes regression Stefan Fritsch
• [security bulletin] HPSBMA02504 SSRT090220 rev.1 - HP System Management Homepage (SMH) for Linux and Windows, Remote Cross Site Scripting (XSS) security-alert
• CORE-2009-0625: Internet Explorer Dynamic OBJECT tag and URLMON sniffing vulnerabilities Core Security Technologies Advisories
• [DSECRG-09-011] HP StorageWorks 1_8 G2 Tape Autoloader - privilege escalation DOS Alexandr Polyakov
• [Hellcode Research]: AOL 9.5 File Parsing Buffer Overflow Vulnerability karakorsankara
• [CSO10002] Attachment path traversal in Outlook Web Access Ricardo Martins - Chief Security Officers
• [ MDVSA-2010:031 ] wireshark security
• [SECURITY] [DSA-1989-1] New fuse packages fix denial of service Giuseppe Iuculano
• AST-2010-001: T.38 Remote Crash Vulnerability Asterisk Security Team
• [security bulletin] HPSBOV02505 SSRT100023 rev.1 - HP OpenVMS RMS, Local Escalation of Privilege security-alert
• [security bulletin] HPSBUX02479 SSRT090212 rev.1 - HP-UX running HP CIFS Server (Samba), Remote Unauthorized Access security-alert
• [SECURITY] [DSA 1986-1] New moodle packages fix several vulnerabilities Steffen Joeris
• OpenCart CSRF Vulnerability ben
• [SECURITY] [DSA 1987-1] New lighttpd packages fix denial of service Nico Golde
• Tinypug Multiple Vulnerabilities admin
• [security bulletin] HPSBUX02464 SSRT090210 rev.1 - HP Enterprise Cluster Master Toolkit (ECMT) running on HP-UX, Local security-alert
• 360 Security Guard breg device drivers Privilege Escalation Vulnerabilitie qiqiguaiguai
• Remote Vulnerability in AIX RPC.cmsd released by iDefense Rodrigo Rubira Branco (BSDaemon)
• [SECURITY] [DSA 1985-1] New sendmail packages fix SSL certificate verification weakness Giuseppe Iuculano
• RaakCms Multiple Vulnerabilities info
• [CORE-2009-1126] Corel Paint Shop Pro Photo X2 FPX Heap Overflow CORE Security Technologies Advisories
• [SECURITY] [DSA 1984-1] New libxerces2-java packages fix denial of service Giuseppe Iuculano
• iDefense Security Advisory 02.01.10: RealNetworks RealPlayer 11 HTTP Chunked Encoding Integer Overflow Vulnerability iDefense Labs
• Joomla (com_gambling) SQL Injection Vulnerabilities md . r00t . defacer
• Security Advisory for Bugzilla 3.0.10, 3.2.5, 3.4.4, and 3.5.2 mkanat
• [CORE-2010-0106] Cisco Secure Desktop XSS/JavaScript Injection Core Security Technologies Advisories
• [ MDVSA-2010:030 ] kernel security
• iDefense Security Advisory 02.01.10: RealNetworks RealPlayer CMediumBlockAllocator Integer Overflow Vulnerability iDefense Labs
• XSS vulnerability in Drupal's MP3 Player contributed module (version 6.x-1.0-beta1) Martin Barbella
• iDefense Security Advisory 02.01.10: Real Networks RealPlayer Compressed GIF Handling Integer Overflow iDefense Labs
• [SECURITY] [DSA 1983-1] New Wireshark packages fix several vulnerabilities Moritz Muehlenhoff
• VMSA-2010-0002 VMware vCenter update release addresses multiple security issues in Java JRE VMware Security Team
• eWebeditor ASP Version Multiple Vulnerabilities info
• [TKADV2010-001] Oracle Solaris UCODE_GET_VERSION IOCTL Kernel NULL Pointer Dereference Tobias Klein
• {PRL} Xerox Workcenter 4150 Remote Buffer Overflow Francis Provencher
• Tavanmand Portal (fckeditor) Remote Arbitrary File Upload Vulnerability info
• Cross-Site History Manipulation (XSHM) Alex Roichman
  • Re: Cross-Site History Manipulation (XSHM) Michal Zalewski
• Advisory: jBCrypt < 0.3 character encoding vulnerability Damien Miller
• iPhone certificate flaws cryptopath
  • [Suspected Spam]Hackito Ergo Sum 2010 - Call For Paper - HES2010 CFP Philippe Mailinglist
• [SECURITY] [DSA 1982-1] New hybserv packages fix denial of service Steffen Joeris
• [SECURITY] [DSA 1841-2] New git-core packages fix build failure Thijs Kinkhorst
• OCS Inventory NG Server <= 1.3b3 (login) Remote Authentication Bypass Nicolas DEROUET
• [ MDVSA-2010:029 ] rootcerts security
• Multiple vulnerabilities in XAMPP (advisory #7) MustLive
  • Re: Multiple vulnerabilities in XAMPP (advisory #7) MustLive
  • Re: Multiple vulnerabilities in XAMPP (advisory #7) MustLive
• Multiple vulnerabilities in XAMPP (advisories #5 and #6) MustLive
• Multiple vulnerabilities in XAMPP (advisories #3 and #4) MustLive
• Multiple vulnerabilities in XAMPP (advisories #1 and #2) MustLive
• [SECURITY] [DSA 1968-2] New pdns-recursor packages fix cache poisoning Florian Weimer
• [USN-892-1] FUSE vulnerability Kees Cook
• [SECURITY] [DSA 1981-2] New maildrop packages fix regression Steffen Joeris
• [USN-893-1] Samba vulnerability Marc Deslauriers
• PR09-19: Cross-Site Scripting (XSS) on CommonSpot server research
• [SECURITY] [DSA 1981-1] New maildrop packages fix privilege escalation Steffen Joeris
• Rising AntiVirus 2008/2009/2010 Local Privilege Escalation Exploit dlrow1991
• [USN-891-1] lintian vulnerabilities Kees Cook
• Firefox Observation Plugin Attack Ivan Buetler
• [SECURITY] [DSA 1980-1] New ircd-hybrid/ircd-ratbox packages fix arbitrary code execution Steffen Joeris
• PR09-15: XSS injection vulnerability within HP System Management Homepage (Insight Manager) research
• [SECURITY] [DSA-1979-1] New lintian packages fix multiple vulnerabilities Raphael Geissert
• [RT-SA-2010-003] Geo++(R) GNCASTER: Faulty implementation of HTTP Digest Authentication RedTeam Pentesting GmbH
• [USN-803-2] Dhcp vulnerability Jamie Strandboge
• [RT-SA-2010-002] Geo++(R) GNCASTER: Insecure handling of NMEA-data RedTeam Pentesting GmbH
• [RT-SA-2010-001] Geo++(R) GNCASTER: Insecure handling of long URLs RedTeam Pentesting GmbH
• [ MDVSA-2010:028 ] kdelibs4 security
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco Unified MeetingPlace Cisco Systems Product Security Incident Response Team
• [ MDVSA-2010:027 ] kdelibs4 security
• Mod_proxy from apache 1.3 - Integer overflow which causes heap overflow. pi3
• [security bulletin] HPSBMA02502 SSRT090171 rev.1 - HP OpenView Storage Data Protector, Local Unauthorized Access security-alert
  • [security bulletin] HPSBMA02502 SSRT090171 rev.1 - HP OpenView Storage Data Protector, Local Unauthorized Access security-alert
• PR09-02 Multiple Cross-Site Scripting (XSS) / Cross Domain redirects and Server path information disclosure on SAP BusinessObjects version 12 Rolando Fuentes
• [InterN0T] ShareTronix 1.0.4 - HTML Injection Vulnerability advisories
• [USN-890-4] PyXML vulnerabilities Jamie Strandboge
• [SECURITY] [DSA 1978-1] New phpgroupware packages fix several vulnerabilities Moritz Muehlenhoff
• More information on CVE-2009-3580 Chris Travers
• Cross-Site Scripting vulnerability in 3D Cloud for Joomla MustLive
• Paper: Weaning the Web off of Session Cookies Timothy D. Morgan
  • Re: [Webappsec] Paper: Weaning the Web off of Session Cookies James Landis
  • Re: [Webappsec] Paper: Weaning the Web off of Session Cookies Arian J. Evans
  • Re: [Webappsec] Paper: Weaning the Web off of Session Cookies Timothy D. Morgan
  • Re: [Webappsec] Paper: Weaning the Web off of Session Cookies Arian J. Evans
  • Re: [Webappsec] Paper: Weaning the Web off of Session Cookies Timothy D. Morgan
  • Re: [Webappsec] Paper: Weaning the Web off of Session Cookies Timothy D. Morgan
  • Re: [Webappsec] Paper: Weaning the Web off of Session Cookies Timothy D. Morgan
  • Re: [Webappsec] Paper: Weaning the Web off of Session Cookies Chris Travers
• [ MDVSA-2010:026 ] openldap security
• Netsupport gateway remote DoS watcher60
• [security bulletin] HPSBMA02477 SSRT090177 rev.4 - HP OpenView Network Node Manager (OV NNM), Remote Denial of Service (DoS) security-alert
• [IBM Datapower XS40] Denial of Service erik
• Microsoft IE 6&7 Crash Exploit info
  • RE: Microsoft IE 6&7 Crash Exploit Santhosh
  • Re: Microsoft IE 6&7 Crash Exploit Berend-Jan Wever
  • Re: RE: Microsoft IE 6&7 Crash Exploit sdasdasd
  • Re: Microsoft IE 6&7 Crash Exploit k4mr4n_st
• Setting arbitrary Personas without user interaction in Firefox 3.6 Artur Janc
• Secunia Research: Google Chrome Pop-Up Block Menu Handling Vulnerability Secunia Research
• [SECURITY] [DSA-1977-1] New python packages fix several vulnerabilities Giuseppe Iuculano
• FWD: LedgerSMB Security Advisory: Multiple Vulnerabilities Chris Travers
• DDIVRT-2009-27 F2L-3000 files2links SQL Injection Vulnerability ddivulnalert
• [ MDVSA-2010:024 ] coreutils security
• [ MDVSA-2010:025 ] php-pear-Mail security
• Security improvements of Microsoft Silverlight Build 3.0.50106.0? Juha-Matti Laurio
• CVE-2009-3583, confirming problem and adding info Chris Travers
• [SECURITY] CVE-2009-2901 Apache Tomcat insecure partial deploy after failed undeploy Mark Thomas
• [SECURITY] CVE-2009-2902 Apache Tomcat unexpected file deletion in work directory Mark Thomas
• Safari 4.0.4 Crash systemx00
• [SECURITY] CVE-2009-2693 Apache Tomcat unexpected file deletion and/or alteration Mark Thomas
• e107 latest download link is backdoored Bogdan Calin
  • Re: e107 latest download link is backdoored Chris Travers
  • Re: e107 latest download link is backdoored Valery Marchuk
  • Re: e107 latest download link is backdoored Carsten Eilers
  • Re: [Full-disclosure] e107 latest download link is backdoored David Sopas
  • Re: [Full-disclosure] e107 latest download link is backdoored Gregor Schneider
  • Re: [Full-disclosure] e107 latest download link is backdoored Fernando Augusto
  • Re: [Full-disclosure] e107 latest download link is backdoored Gregor Schneider
  • Re: Re: e107 latest download link is backdoored track
• London DEFCON January meet - DC4420 - Wed 27th Jan 2010 Major Malfunction
• Abusing weak PRNGs in PHP applications gat3way
• Publique! CMS SQL Injection Vulnerabilities Christophe dlf
• Silverstripe <= v2.3.4: two XSS vulnerabilities Moritz Naumann
• [USN-890-3] Python 2.4 vulnerabilities Jamie Strandboge
• Kayako SupportSuite Multiple Persistent Cross Site Scripting (Current Versions) pen-test
• iBoutique v4.0 flashcreazione
• [SECURITY] [DSA-1976-1] New dokuwiki packages fix several vulnerabilities Giuseppe Iuculano
• [USN-890-2] Python 2.5 vulnerabilities Jamie Strandboge
• IdeaCMS v1.0 (fck) Remote Arbitrary File Upload whh_iran
• FortiGuard Advisory: Microsoft Internet Explorer Remote Memory Corruption Vulnerability noreply-secresea...@fortinet.com
• ZDI-10-012: Microsoft Internet Explorer Baseline Tag Rendering Remote Code Execution Vulnerability ZDI Disclosures
• ZDI-10-011: Microsoft Internet Explorer Table Layout Col Tag Cache Update Remote Code Execution Vulnerability ZDI Disclosures
• ZDI-10-014: Microsoft Internet Explorer item Object Memory Corruption Remote Code Execution Vulnerability ZDI Disclosures
• ZDI-10-013: Microsoft Internet Explorer Table Layout Reuse Remote Code Execution Vulnerability ZDI Disclosures
• ZDI-10-010: RealNetworks RealPlayer Skin Parsing Remote Code Execution Vulnerability ZDI Disclosures
• ZDI-10-007: RealNetworks RealPlayer SMIL getAtom Remote Code Execution Vulnerability ZDI Disclosures
• Microsoft Windows NT #GP Trap Handler Allows Users to Switch Kernel Stack Tavis Ormandy
• ZDI-10-005: RealNetworks RealPlayer ASMRulebook Remote Code Execution Vulnerability ZDI Disclosures
• ZDI-10-008: RealNetworks RealPlayer SIPR Codec Remote Code Execution Vulnerability ZDI Disclosures
• [SECURITY] [DSA-1972-2] New audiofile packages fix buffer overflow Stefan Fritsch
• ZDI-10-004: Cisco CiscoWorks IPM GIOP getProcessName Remote Code Execution Vulnerability ZDI Disclosures
• [ MDVSA-2010:023 ] phpldapadmin security
• ZDI-10-006: RealNetworks RealPlayer GIF Handling Remote Code Execution Vulnerability ZDI Disclosures
• ZDI-10-009: RealNetworks RealPlayer IVR Format Remote Code Execution Vulnerability ZDI Disclosures
• [ MDVSA-2010:022 ] openssl security
• eWebeditor Directory Traversal Vulnerability info
• TheGreenBow VPN Client Local Stack Overflow Vulnerability - Security Advisory - SOS-10-001 Lists

• Earlier messages