Bugtraq

• Thread Index

---

• Final notification about "POC2008" Conference
  • From: pocadm
• RE: Universal Website Hijacking by Exploiting Firewall Content Filtering Features + SonicWALL firewalls 0day
  • From: Jim Harrison
• [ MDVSA-2008:121-1 ] freetype2
  • From: security
• Re: Java Web start vulnerability
  • From: varun . srivastav
• Typo <= 5.1.3 Multiple Vulnerabilities
  • From: L4teral
• [Paper] Reflective Dll Injection
  • From: stephen_fewer
• iDefense Security Advisory 10.31.08: Oracle WebLogic Apache Connector
  • From: iDefense Labs
• Re: Universal Website Hijacking by Exploiting Firewall Content Filtering Features + SonicWALL firewalls 0day
  • From: sipherr
• iDefense Security Advisory 10.31.08: OpenOffice EMF Record Parsing Multiple Integer Overflow Vulnerabilities
  • From: iDefense Labs
• Secunia Research: Interact SQL Injection and Cross-Site Request Forgery
  • From: Secunia Research
• Re: Universal Website Hijacking by Exploiting Firewall Content Filtering Features + SonicWALL firewalls 0day
  • From: sipherr
• Cpanel 11.x Local File Inclusion & Cross Site Scripting - Discovered By Khashayar Fereidani
  • From: irancrash
• VMSA-2008-0017 Updated ESX packages for libxml2, ucd-snmp, libtiff
  • From: VMware Security Team
• U-Mail Webmail 'edit.php' Arbitrary File Write Vulnerability
  • From: WSN1983
• phpWebSite links.php Sql Injection
  • From: beenudel1986
• spitfirephoto Pro pages.php Sql Injection
  • From: beenudel1986
• Universal Website Hijacking by Exploiting Firewall Content Filtering Features + SonicWALL firewalls 0day
  • From: Adrian P
• 2008 OpenVAS Contest
  • From: The OpenVAS Team
• iDefense Security Advisory 10.30.08: Adobe PageMaker Key Strings Stack Buffer Overflow
  • From: iDefense Labs
• [ GLSA 200810-03 ] libspf2: DNS response buffer overflow
  • From: Robert Buchholz
• [USN-661-1] Linux kernel regression
  • From: Jamie Strandboge
• iDefense Security Advisory 10.30.08: Novell eDirectory NCP Get Extension Information Request Memory Corruption Vulnerability
  • From: labs-no-reply@xxxxxxxxxxxx
• ZDI-08-071: IBM Tivoli Storage Manager Express for Microsoft SQL Heap Overflow Vulnerability
  • From: zdi-disclosures
• ZDI-08-070: SonicWALL Content-Filtering Universal Script Injection Vulnerability
  • From: zdi-disclosures
• harlandscripts Mypage.php Sql Injection
  • From: beenudel1986
• DebugDiag (CrashHangExt.dll 1.0) NULL Pointer Dereference
  • From: crimson . loyd
• PHP-Nuke Module Current_Issue (summary&id) Remote SQL injection Vulnerability
  • From: Ehsan_Hp200
• rPSA-2008-0308-1 samba samba-client samba-server samba-swat
  • From: rPath Update Announcements
• Re: Advanced application-level OS fingerprinting
  • From: Berend-Jan Wever
• [ MDVSA-2008:222 ] Eterm
  • From: security
• PHP-Nuke Module Sectionsnew (printpage&artid) Remote SQL injection Vulnerability
  • From: Ehsan_Hp200
• IranMC ( detail.php?Kala ) Remote SQL injection Vulnerability
  • From: Ehsan_Hp200
• Re: [Full-disclosure] [funsec] ICANN Terminates EstDomains' Registrar Accreditation (fwd)
  • From: Juha-Matti Laurio
• Tool update: VoIPER v0.07
  • From: nnp
• [funsec] ICANN Terminates EstDomains' Registrar Accreditation (fwd)
  • From: Gadi Evron
• [ MDVSA-2008:219 ] mplayer
  • From: security
• rPSA-2008-0307-1 nfs-client nfs-server nfs-utils
  • From: rPath Update Announcements
• [ MDVSA-2008:220 ] kernel
  • From: security
• rPSA-2008-0309-1 lighttpd
  • From: rPath Update Announcements
• Re: MS08-067 - Where can I find an exploit for this?
  • From: illumina7i
• PHP-Nuke Module BookCatalog (category&catid) Remote SQL injection Vulnerability
  • From: Ehsan_Hp200
• Re: MS08-067 - Where can I find an exploit for this?
  • From: Isaias Calderon
• [ MDVSA-2008:221 ] aterm
  • From: security
• Advanced application-level OS fingerprinting
  • From: dan . crowley
• [SECURITY] [DSA 1661-1] New OpenOffice.org packages fix several vulnerabilities
  • From: Martin Schulze
• KVIrc version 3.4.0 Virgo remote format string proof of concept exploit.
  • From: fabio
• Secunia Research: Adobe PageMaker PMD File Processing Buffer Overflows
  • From: Secunia Research
• Re: [ MDVSA-2008:217 ] lynx
  • From: Thomas Dickey
• Quassel IRC: connection hijacking
  • From: Wouter Coekaerts
• Re: MySQL command-line client HTML injection vulnerability
  • From: okuno
• Re: Quassel IRC: connection hijacking
  • From: Wouter Coekaerts
• Aria-Security.com: Saba 2.0 Cross Site Scripting [PASSIVE]
  • From: The-0utl4w
• [ MDVSA-2008:218 ] lynx
  • From: security
• [ MDVSA-2008:217 ] lynx
  • From: security
• A video can crash ANY iphone/ipod and a few libraries.
  • From: zibree
• PHP-Nuke Module League (team&tid) XSS Vulnerability
  • From: Ehsan_Hp200
• [ MDVSA-2008:216 ] emacs
  • From: security
• Re: MyBB 1.4.2: Multiple Vulnerabilties
  • From: krzysztof . kozlowski
• rPSA-2008-0306-1 libxslt
  • From: rPath Update Announcements
• Re: Writeup by Amit Klein (Trusteer): Address Bar Spoofing for IE6
  • From: Amit Klein
• Blaze Media Pro 8.02 SE vulnerability
  • From: ipsdix
• [ MDVSA-2008:215 ] wireshark
  • From: security
• rPSA-2008-0305-1 pcre
  • From: rPath Update Announcements
• Writeup by Amit Klein (Trusteer): Address Bar Spoofing for IE6
  • From: Amit Klein
• n.runs-SA-2008.009 - Eaton MGE OPS Network Shutdown Module - authentication bypass vulnerability and remote code execution
  • From: security@xxxxxxxxx
• MSF eXploit Builder v2 Alpha Sources Released
  • From: Jerome Athias
• MyBB 1.4.2: Multiple Vulnerabilties
  • From: Micheal Cottingham
• ClubHack2008 [India] - CFP Closing Soon
  • From: ClubHack
• Windows RPC MS08-067 FAQ document updated
  • From: Juha-Matti Laurio
• XSS in phpMyadmin
  • From: hadikiamarsi
• [security bulletin] HPSBMA02373 SSRT071467 rev.2 - HP Insight Diagnostics Running on Linux and Windows, Remote Unauthorized Access to Files
  • From: security-alert
• bcoos 1.0.13 Remote File Include Vulnerability
  • From: Cru3l.b0y
• BotNet on the Rise
  • From: faghani
• [SECURITY] [DSA 1660-1] New clamav packages fix denial of service
  • From: Florian Weimer
• Windows RPC MS08-067 FAQ document released
  • From: Juha-Matti Laurio
• Re: HTTPBruteForcer released
  • From: The Anarcat
• Re: HTTPBruteForcer released
  • From: raven
• Java Web start vulnerability
  • From: varun . srivastav
• HTTPBruteForcer released
  • From: Jerome Athias
• Re: MS08-067 - Where can I find an exploit for this?
  • From: Salvador III Manaois
• iPei cross site scripting Vulnerablity
  • From: Ghost hacker
• Re: MS08-067 - Where can I find an exploit for this?
  • From: Salvador III Manaois
• MS08-067 - Where can I find an exploit for this?
  • From: Chip Panarchy
• [USN-658-1] Moodle vulnerability
  • From: Kees Cook
• [SECURITY] [DSA 1659-1] New libspf2 packages fix potential remote code execution
  • From: Florian Weimer
• [security bulletin] HPSBST02379 SSRT080143 rev.1 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS08-056 to MS08-066
  • From: security-alert
• txtshop - beta 1.0 / Local File Inclusion Vulnerability
  • From: Pepelux
• Re: vshop - Axcoto cart <= 0.1alpha / Local File Inclusion Vulnerability
  • From: Jose Luis
• Re: MJGuest 6.8 GT Cross Site Scripting Vulnerability
  • From: alighieri_m
• SiteEngine 5.x Multiple Remote Vulnerabilities
  • From: xuanmumu
• freeSSHd (stf - rename) Buffer Overflow Vulnerability
  • From: writ3r
• GoodTech SSH Remote Buffer Overflow Exploit
  • From: writ3r
• vshop - Axcoto cart <= 0.1alpha / Local File Inclusion Vulnerability
  • From: Pepelux
• phpcrs <= 2.06 / Local File Inclusion Vulnerability (this is the correct :)
  • From: Pepelux
• [SECURITY] [DSA 1658-1] New dbus packages fix denial of service
  • From: Thijs Kinkhorst
• SNMP Injection: Achieving Persistent HTML Injection via SNMP on Embedded Devices
  • From: ProCheckUp Research
• SECOBJADV-2008-05: Symantec Veritas Storage Foundation Arbitrary File Read Vulnerability
  • From: Security Objectives Corporation
• Re: FGA-2008-23:EMC NetWorker Denial of Service Vulnerability
  • From: Security_Alert
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco PIX and Cisco ASA
  • From: Cisco Systems Product Security Incident Response Team
• Secunia Research: GNU Enscript "setfilename" Special Escape Buffer Overflow
  • From: Secunia Research
• Secunia Research: Trend Micro OfficeScan CGI Parsing Buffer Overflows
  • From: Secunia Research
• FGA-2008-23:EMC NetWorker Denial of Service Vulnerability
  • From: noreply-secresearch
• Advisory for Oracle CPU October 2008 - APEX Flows excessive privileges
  • From: Pete Finnigan
• Secunia Research: HP OpenView Products Shared Trace Service Denial of Service
  • From: Secunia Research
• Opera Stored Cross Site Scripting Vulnerability
  • From: Roberto Suggi
• [tool] crapto1 released
  • From: blapost
• n.runs-SA-2008.008 - Internet Explorer HTML Object Memory Corruption and Remote Code Execution
  • From: security@xxxxxxxxx
• SECOBJADV-2008-04: Symantec Veritas Storage Foundation Memory Disclosure Vulnerability
  • From: Security Objectives Corporation
• Google Chrome OnbeforeUload and OnUnload Null Check Vulnerability.
  • From: Aditya K Sood
• [USN-657-1] Amarok vulnerability
  • From: Jamie Strandboge
• Insomnia : ISVA-081020.1 - Altiris Deployment Server Agent - Privilege Escalation
  • From: Brett Moore
• [SECURITY] [DSA 1657-1] New qemu packages fix denial of service
  • From: Steve Kemp
• [Off-Topic] How I was busted. Story of a poor lonesome hacker
  • From: Jerome Athias
• Last Call for DeepSec IDSC 2008 in Vienna
  • From: DeepSec Conference Vienna
• [TKADV2008-010] VLC media player TiVo ty Processing Stack Overflow Vulnerability
  • From: Tobias Klein
• London DEFCON meet - DC4420 - Thursday October 23rd
  • From: Major Malfunction
• [SECURITY] [DSA 1656-1] New cupsys packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• [Tool] sqlmap 0.6.1 released
  • From: Bernardo Damele A. G.
• Lee has posted more detailed response to Fyodor's TCP/IP DoS post
  • From: Juha-Matti Laurio
• Secunia Research: HP SiteScope SNMP Trap Script Insertion Vulnerability
  • From: Secunia Research
• FireGPG Passphrase And Cleartext Vulnerability
  • From: Mike Benham
• Cross Site Scripting (XSS) Vulnerabilitiy in cpcommerce, CVE-2008-4121
  • From: Fabian Fingerle
• CVE-2008-4000: Oracle PeopleTools – Authentication Weakness
  • From: shulman
• CVE-2008-2625: Oracle DBMS – Proxy Authentication Vulnerability
  • From: shulman
• Re: MS OWA 2003 Redirection Vulnerability - [MSRC7368br]
  • From: Davide Dante Del Vecchio
• [ MDVSA-2008:208-1 ] pam_mount
  • From: security
• HITBSecConf2008 - Malaysia: Online registration closes on 24th Oct
  • From: Praburaajan
• Re: [Full-disclosure] MS OWA 2003 Redirection Vulnerability - [MSRC7368br]
  • From: Morning Wood
• Application-level OS fingerprinting research - pre-release hashes
  • From: dan . crowley
• Re: MS OWA 2003 Redirection Vulnerability - [MSRC 7368br]
  • From: Davide Del Vecchio
• Re: Doubt in MySQL Quick Admin <= 1.5.5 (COOKIE) Local File Inclusion Vulnerability POC posted on milworm
  • From: g30rg3_x
• flashchat severe bug
  • From: ch0p83
• Doubt in MySQL Quick Admin <= 1.5.5 (COOKIE) Local File Inclusion Vulnerability POC posted on milworm
  • From: vinodsharma . mimit
• [SECURITY] [DSA 1655-1] New Linux 2.6.24 packages fix several vulnerabilities
  • From: dann frazier
• Re: Re: MS OWA 2003 Redirection Vulnerability
  • From: martin . suess
• [ MDVSA-2008:214 ] mon
  • From: security
• rPSA-2008-0294-1 postfix
  • From: rPath Update Announcements
• rPSA-2008-0295-1 rails
  • From: rPath Update Announcements
• HACKATTACK Advisory 20081016]WEB//NEWS SQL Injection and Cookie Manipulation
  • From: office
• SEC Consult SA-20081016-0 :: Remote command execution in Instant Expert Analysis
  • From: Bernhard Mueller
• Paper: Adventures with a certain Xen vulnerability
  • From: Joanna Rutkowska
• [ MDVSA-2008:213 ] dbus
  • From: security
• [USN-656-1] CUPS vulnerabilities
  • From: Jamie Strandboge
• Multiple Flash Authoring Heap Overflows - Malformed SWF Files
  • From: Paul Craig
• [security bulletin] HPSBMA02349 SSRT080043 rev.2 - HP OpenView Network Node Manager (OV NNM), Remote Unauthorized Access to Data
  • From: security-alert
• Re: MS OWA 2003 Redirection Vulnerability
  • From: Stefano Di Paola
• [ MDVSA-2008:212 ] libxml2
  • From: security
• Internet Explorer 6 componentFromPoint() remote memory disclosure and remote code execution
  • From: Ivan Fratric
• Exploit for MS08-066 - AFD.sys kernel memory overwrite.
  • From: Reversemode
• MS OWA 2003 Redirection Vulnerability
  • From: Martin Suess
• Vivid Ads Shopping Cart (cid) Remote SQL Injection
  • From: djmomo
• [USN-655-1] exiv2 vulnerabilities
  • From: Kees Cook
• iDefense Security Advisory 10.14.08: Sun Java Web Proxy Server FTP Resource Handling Heap-Based Buffer Overflow
  • From: labs-no-reply@xxxxxxxxxxxx
• [USN-654-1] libexif vulnerabilities
  • From: Kees Cook
• iDefense Security Advisory 10.14.08: Microsoft Visual Basic for Applications - Multiple Vulnerabilities
  • From: labs-no-reply@xxxxxxxxxxxx
• TPTI-08-07: Microsoft Windows Message Queuing Service Heap Overflow and Memory Disclosure Vulnerability
  • From: dvlabs
• ZDI-08-069: Microsoft Internet Explorer componentFromPoint Memory Corruption Vulnerability
  • From: zdi-disclosures
• ZDI-08-068: Microsoft Office Excel BIFF File Format Parsing Stack Overflow Vulnerability
  • From: zdi-disclosures
• CORE-2008-1010: VLC media player XSPF Memory Corruption
  • From: CORE Security Technologies Advisories
• iDefense Security Advisory 10.14.08: Microsoft Host Integration Server 2006 Command Execution Vulnerability
  • From: iDefense Labs
• [USN-652-1] LittleCMS vulnerability
  • From: Kees Cook
• [SECURITY] [DSA 1654-1] New libxml2 packages fix execution of arbitrary code
  • From: Steve Kemp
• [USN-653-1] D-Bus vulnerabilities
  • From: Kees Cook
• Webscene eCommerce (level) Remote Sql Injection
  • From: angel
• Telecom Italia Alice Pirelli routers backdoor discoverd to activate telnet/ftp/tftp from internal LAN/WLAN.
  • From: drpepppperone
• WP Comment Remix 1.4.3 Multiple Vulnerabilities
  • From: g30rg3_x
• [RISE-2008001] Sun Solstice AdminSuite sadmind adm_build_path() Buffer Overflow Vulnerability
  • From: RISE Security
• [SECURITY] [DSA 1653-1] New Linux 2.6.18 packages fix several vulnerabilities
  • From: dann frazier
• [SECURITY] [DSA 1652-1] New ruby1.9 packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 1651-1] New ruby1.8 packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 1650-1] New openldap2.3 packags fix denial of service
  • From: Moritz Muehlenhoff
• Re: Re: Token Kidnapping Windows 2003 PoC exploit
  • From: ideaburner
• CREATE ANY DIRECTORY to SYSDBA
  • From: paul . wright
• [SECURITY] [DSA 1646-2] New squid packages fix array bounds check
  • From: Devin Carraway
• Marvell Driver Malformed Association Request Vulnerability
  • From: Laurent Butti
• Uninformed Journal Release Announcement: Volume 10
  • From: sflist
• NewLife Blogger <= v3.0 / Insecure Cookie Handling & SQL Injection Vulnerability
  • From: Pepelux
• [ MDVSA-2008:210-1 ] mono
  • From: security
• CA BrightStor ARCServe BackUp Message Engine Remote Command Injection Vulnerability
  • From: cocoruder
• [ MDVSA-2008:211 ] cups
  • From: security
• &#304;ltaweb Al&#305;&#351;veri&#351; Sistemi (tr) Sql inj
  • From: ozdemirtravel
• iSEC Partners Security Advisory - 2008-002-lenovornr - Lenovo Rescue and Recovery 4.20
  • From: Chris Clark
• [LC-2008-04] Nokia Browser Array Sort Denial Of Service Vulnerability
  • From: luca . carettoni
• Re: PR08-24: Proxim Tsunami MP.11 2411 vulnerable to SNMP Injection
  • From: ProCheckUp Research
• Re[2]: PR08-24: Proxim Tsunami MP.11 2411 vulnerable to SNMP Injection
  • From: Vladimir '3APA3A' Dubrovin
• [USN-651-1] Ruby vulnerabilities
  • From: Jamie Strandboge
• ZDI-08-067: Apple CUPS 1.3.7 (HP-GL/2 filter) Remote Code Execution Vulnerability
  • From: zdi-disclosures
• [SECURITY] CVE-2008-3271 - Apache Tomcat information disclosure
  • From: Mark Thomas
• Re: News Manager Remote SQL Injection Vulnerability
  • From: packet
• CA ARCserve Backup Multiple Vulnerabilities
  • From: Williams, James K
• Re: PR08-24: Proxim Tsunami MP.11 2411 vulnerable to SNMP Injection
  • From: lee . e . rian
• Re: PR08-24: Proxim Tsunami MP.11 2411 vulnerable to SNMP Injection
  • From: Vladimir '3APA3A' Dubrovin
• Re: Motorola Timbuktu's Internet Locator Service real-time data exposed to public.
  • From: therese . vanryne
• [ GLSA 200810-02 ] Portage: Untrusted search path local root vulnerability
  • From: Robert Buchholz
• News Manager Remote SQL Injection Vulnerability
  • From: Ghost hacker
• [security bulletin] HPSBMA02362 SSRT080044, SSRT080045, SSRT080042 rev.2 - HP OpenView Network Node Manager (OV NNM), Remote Denial of Service (DoS), Execute Arbitrary Code
  • From: security-alert
• PR08-24: Proxim Tsunami MP.11 2411 vulnerable to SNMP Injection
  • From: ProCheckUp Research
• [security bulletin] HPSBMA02376 SSRT080099 rev.1 - HP System Management Homepage (SMH) for Linux and Windows, Remote Cross Site Scripting (XSS)
  • From: security-alert
• FC2 BLOG Cross-Site Scripting Vulnerabilities
  • From: xsp
• Re: Token Kidnapping Windows 2003 PoC exploit
  • From: groovydude
• [security bulletin] HPSBMA02374 SSRT080046 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Denial of Service (DoS)
  • From: security-alert
• PR07-31: Unauthenticated SQL Injection, XSS on Login Page and Username Enumeration on DPSnet Case Progress
  • From: ProCheckUp Research
• ZDI-08-066: Novell eDirectory Core Protocol Opcode 0x24 Heap Overflow Vulnerability
  • From: zdi-disclosures
• Token Kidnapping Windows 2003 PoC exploit
  • From: Cesar
• ZDI-08-065: Novell eDirectory Core Protocol Opcode 0x0F Heap Overflow Vulnerability
  • From: zdi-disclosures
• ZDI-08-064: Novell eDirectory dhost.exe Accept Language Header Heap Overflow Vulnerability
  • From: zdi-disclosures
• Re: Motorola Timbuktu's Internet Locator Service real-time data exposed to public.
  • From: Juha-Matti Laurio
• ZDI-08-063: Novell eDirectory dhost.exe Content-Length Header Heap Overflow Vulnerability
  • From: zdi-disclosures
• [SECURITY] [DSA 1649-1] New iceweasel packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• Re: MySQL command-line client HTML injection vulnerability
  • From: Michael Scheidell
• [SECURITY] [DSA 1648-1] New mon packages fix insecure temporary files
  • From: Thijs Kinkhorst
• Advisory: Graphviz Buffer Overflow Code Execution
  • From: roeeh
• Windows Mobile 6 insecure password handling and too short WLAN-password
  • From: MC Iglo
• Cisco Security Advisory: Authentication Bypass in Cisco Unity
  • From: Cisco Systems Product Security Incident Response Team
• [W02-1008] GearSoftware Powered Products Local Privilege Escalation (Microsoft Windows Kernel IopfCompleteRequest Integer Overflow)
  • From: vulns
• Re: HostAdmin 3.* Remote File Include Vulnerabilities
  • From: admin
• ANNOUNCE - RFIDIOt version 0.1t released
  • From: Adam Laurie
• Re: Motorola Timbuktu's Internet Locator Service real-time data exposed to public.
  • From: artful38
• Re: iFoto, CSS-based GD2 photo gallery <= 1.0: Remote File Disclosure Vulnerability
  • From: Lostmon
• [ GLSA 200810-01 ] WordNet: Execution of arbitrary code
  • From: Tobias Heinlein
• [OPENX-SA-2008-002] OpenX 2.4.9 and 2.6.2 fix SQL injection vulnerability
  • From: Matteo Beccati
• [security bulletin] HPSBUX02375 SSRT080122 rev.1 - HP-UX Running NFS/ONCplus, Remote Denial of Service (DoS)
  • From: security-alert
• Re: Verizon FIOS (and DSL?) wireless access point insecure default WEP key
  • From: Michael Scheidell
• Yerba SACphp <= 6.3 / Local File Inclusion Exploit
  • From: Pepelux
• HostAdmin 3.* Remote File Include Vulnerabilities
  • From: admin
• [SECURITY] [DSA-1646-1] New squid packages fix array bounds check
  • From: Devin Carraway
• Firefox Privacy Broken If Used to Open Web Page File
  • From: Liu Die Yu
• [SECURITY] [DSA 1647-1] New php5 packages fix several vulnerabilities
  • From: Thijs Kinkhorst
• Re: AyeView v2.20 (malformed gif image) DoS Exploit
  • From: Vladimir '3APA3A' Dubrovin
• Motorola Timbuktu's Internet Locator Service real-time data exposed to public.
  • From: vulns
• [SECURITY] [DSA-1644-1] New mplayer packages fix integer overflows
  • From: Devin Carraway
• OpenNMS Multiple Vulnerabilities
  • From: Trancer
• [SECURITY] [DSA 1643-1] New feta packages fix denial of service
  • From: Moritz Muehlenhoff
• FOSS Gallery Public Version <= 1.0 / Arbitrary file upload Vulnerabilities
  • From: Pepelux
• FOSS Gallery Admin Version <= 1.0 / Remote Arbitrary Upload Vulnerability
  • From: Pepelux
• PHPWebExplorer <= 0.09b: Local File Inclusion Vulnerability
  • From: Pepelux
• VMSA-2008-0016 VMware Hosted products, VirtualCenter Update 3 and patches for ESX and ESXi resolve multiple security issues
  • From: VMware Security team
• FastStone Image Viewer v3.6 (malformed bmp image) DoS Exploit
  • From: crimson . loyd
• [ MDVSA-2008:209 ] pam_krb5
  • From: security
• [ENABLESECURITY] Apple's Mail.app stores your S/MIME encrypted emails in clear text
  • From: publists
• [SECURITY] [DSA-1645-1] New lighttpd packages fix various problems
  • From: Steve Kemp
• VMware Emulation Flaw x64 Guest Privilege Escalation (1/2)
  • From: ds . adv . pub
• AyeView v2.20 (malformed gif image) DoS Exploit
  • From: crimson . loyd
• RE: RE: MySQL command-line client HTML injection vulnerability
  • From: Quark IT - Hilton Travis
• [ MDVSA-2008:210 ] mono
  • From: security
• MetaGauge 1.0.0.17 Directory Traversal
  • From: brad . antoniewicz
• iFoto, CSS-based GD2 photo gallery <= 1.0: Remote File Disclosure Vulnerability
  • From: Pepelux
• CMME Multiple Information disclosure vulnerabilities
  • From: admin
• Secunia Research: Trend Micro OfficeScan Directory Traversal Vulnerability
  • From: Secunia Research
• Re: "Exploit creation - The random approach" or "Playing with random to build exploits"
  • From: Eygene Ryabinkin
• Re: RE: MySQL command-line client HTML injection vulnerability
  • From: mrry . dmlo
• Website Directory - XSS Exploit
  • From: Ghost hacker
• [USN-650-1] cpio vulnerability
  • From: Jamie Strandboge
• Re: "Exploit creation - The random approach" or "Playing with random to build exploits"
  • From: Nelson Brito
• Re: Blue Coat xss
  • From: Tom Kelly
• Re: White Wolf Labs #080922-1: Exploitation Through ActiveSync 4.x
  • From: Vladimir '3APA3A' Dubrovin
• HostAdmin Cross-Site Scripting Vulnerabilities
  • From: admin
• Re: [MajorSecurity Advisory #53]BLUEPAGE CMS - Cross Site Scripting and Session Fixation Issues
  • From: admin
• Layered Defense Research Advisory: Juniper Netscreen Firewall Cross-Site-Scripting (XSS) event log injection
  • From: dh
• XSS vulnerability in phpMyID
  • From: Raphael Geissert
• Adobe Flash Player plug-in null pointer dereference and browser crash
  • From: Matthew Dempsky
• FreeBSD Security Advisory FreeBSD-SA-08:10.nd6
  • From: FreeBSD Security Advisories
• [USN-649-1] OpenSSH vulnerabilities
  • From: Kees Cook
• Re: MS Internet Explorer 7 Denial Of Service Exploit
  • From: Pruett, Mike
• phpMyID can act as a redirector and as headers injector
  • From: atomo64
• Remote and Local File Inclusion Vulnerability <= 1.1 Rportal
  • From: kadfrox
• Oracle Password Cracker written in PL/SQL
  • From: pete
• Printlog <= 0.4: Remote File Edition Vulnerability
  • From: Pepelux
• RE: MySQL command-line client HTML injection vulnerability
  • From: Quark IT - Hilton Travis
• [USN-648-1] nasm vulnerability
  • From: Kees Cook

We are proud to have Web Hosting and Rack Housing from 9 Net Avenue Deutschland.
(13)