Bugtraq

• Thread Index

---

• dedecms v5.3 Arbitrary File Upload Vulnerability
  • From: info
• Empire Cms 5.1 sql injection
  • From: info
• [ MDVSA-2009:147 ] pidgin
  • From: security
• Re: SIPS v0.2.2 Remote File Inclusion Vulnerability
  • From: Joe
• XAMPP for Windows (Xss/PHPinfo) Multiple Vulnerability
  • From: Cru3l.b0y
• Re: SIPS v0.2.2 Remote File Inclusion Vulnerability
  • From: Vladimir '3APA3A' Dubrovin
• SIPS v0.2.2 Remote File Inclusion Vulnerability
  • From: Cru3l.b0y
• [ GLSA 200906-05 ] Wireshark: Multiple vulnerabilities
  • From: Tobias Heinlein
• Multiple Flaws in Huawei D100
  • From: filip . palian
• [ GLSA 200906-04 ] Apache Tomcat JK Connector: Information disclosure
  • From: Alex Legler
• [ GLSA 200906-03 ] phpMyAdmin: Multiple vulnerabilities
  • From: Alex Legler
• [ MDVSA-2009:146 ] imap
  • From: security
• [ GLSA 200906-02 ] Ruby: Denial of Service
  • From: Alex Legler
• [ MDVSA-2009:144 ] ghostscript
  • From: security
• AjaxPortal v3.0 Remote File Inclusion Vulnerability
  • From: Cru3l.b0y
• Shakacon III - Presentations Posted to site
  • From: Shakacon
• [ MDVSA-2009:145 ] php
  • From: security
• [ MDVSA-2009:142 ] jasper
  • From: security
• osTicket v1.6 RC4 Admin Login Blind SQLi
  • From: Adam Baldwin
• Mega File Manager Remote File Vuln
  • From: ceza_fuat_kolik
• [ GLSA 200906-01 ] libpng: Information disclosure
  • From: Tobias Heinlein
• [ MDVSA-2009:143 ] netpbm
  • From: security
• iDefense Security Advisory 06.26.09: HP Network Node Manager rping Stack Buffer Overflow Vulnerability
  • From: iDefense Labs
• [ MDVSA-2009:141 ] mozilla-thunderbird
  • From: security
• MULTIPLE SQL INJECTION VULNERABILITIES --PHP-AddressBook v-4.0.x-->
  • From: y3nh4ck3r
• Re: Trillian SSL Certificate Vulnerability
  • From: krymson
• evil little dictionary
  • From: Pavel Machek
• Report vulnerabilities
  • From: JP
• Trillian SSL Certificate Vulnerability
  • From: Gabriel Menezes Nunes
• Gizmo SSL Certificate Vulnerability
  • From: Gabriel Menezes Nunes
• aMSN SSL Certificate Vulnerability
  • From: Gabriel Menezes Nunes
• Security Assessment of TCP at the IETF
  • From: Fernando Gont
• [USN-782-1] Thunderbird vulnerabilities
  • From: Jamie Strandboge
• [SECURITY] [DSA 1824-1] New phpmyadmin packages fix several vulnerabilities
  • From: Thijs Kinkhorst
• iDefense Security Advisory 06.25.09: Motorola Timbuktu Pro PlughNTCommand Stack Based Buffer Overflow Vulnerability
  • From: iDefense Labs
• [SECURITY] [DSA 1823-1] New samba packages fix several vulnerabilities
  • From: Thijs Kinkhorst
• SQL INJECTION VULNERABILITY --AlumniServer v-1.0.1-->
  • From: y3nh4ck3r
• iDefense Security Advisory 06.25.09: Unisys Business Information Server Stack Buffer Overflow
  • From: iDefense Labs
• [USN-792-1] OpenSSL vulnerabilities
  • From: Marc Deslauriers
• [ MDVSA-2009:140 ] gaim
  • From: security
• [USN-791-3] Smarty vulnerability
  • From: Kees Cook
• [USN-791-2] Moodle vulnerability
  • From: Kees Cook
• [USN-791-1] Moodle vulnerabilities
  • From: Kees Cook
• [USN-790-1] Cyrus SASL vulnerability
  • From: Kees Cook
• Cisco Security Advisory: Cisco Physical Access Gateway Denial of Service Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• CHASE - 2009 Lahoe Pakistan | Call for Papers
  • From: Muhammad Farooq-i-Azam
• Cisco Security Advisory: Vulnerabilities in Cisco Video Surveillance Products
  • From: Cisco Systems Product Security Incident Response Team
• Re: Authentication Bypas in BASE version 1.2.4 and prior
  • From: timmedin
• Trustwave's SpiderLabs Security Advisory TWSL2009-002
  • From: Trustwave Advisories
• [ MDVSA-2009:139 ] libtorrent-rasterbar
  • From: security
• Re: Authentication Bypass in BASE version 1.2.4 and prior
  • From: timmedin
• Authentication Bypas in BASE version 1.2.4 and prior
  • From: timmedin
• n.runs-SA-2009.005 - Apple Safari - Information disclosure
  • From: security
• n.runs-SA-2009.006 - Apple Safari - Null pointer dereference
  • From: security
• [SECURITY] [DSA 1822-1] New mahara packages fix cross-site scripting
  • From: Nico Golde
• CFP: ISOI 7 - Sept 17, 18 - San Diego
  • From: Gadi Evron
• [ MDVSA-2009:138 ] tomcat5
  • From: security
• [SECURITY] [DSA 1821-1] New amule packages fix insufficient input sanitising
  • From: Steffen Joeris
• [ MDVSA-2009:136 ] tomcat5
  • From: security
• Back door trojan in acajoom-3.2.6 for joomla
  • From: Jan van Niekerk
• [RISE-2009001] ToolTalk rpc.ttdbserverd _tt_internal_realpath Buffer Overflow Vulnerability
  • From: RISE Security
• FretsWeb 1.2 Multiple Local File Inclusion Vulnerabilities
  • From: ceza_fuat_kolik
• fuzzylime cms <= 3.03a Local Inclusion / Arbitrary File Corruption PoC
  • From: ceza_fuat_kolik
• phportal 1.0 Insecure Cookie Handling Vulnerability
  • From: ceza_fuat_kolik
• FretsWeb 1.2 (name) Remote Blind SQL Injection Exploit
  • From: ceza_fuat_kolik
• CMS Buzz (XSS/PC/HI) Multiple Remote Vulnerabilities
  • From: ceza_fuat_kolik
• [USN-789-1] GStreamer Good Plugins vulnerability
  • From: Marc Deslauriers
• [ MDVSA-2009:137 ] java-1.6.0-openjdk
  • From: security
• MULTIPLE LOCAL FILE INCLUSION VULNERABILITIES --FretsWeb 1.2-->
  • From: y3nh4ck3r
• PhpPortal v1 Insecure Cookie Handling Vulnerability
  • From: ceza_fuat_kolik
• Re: iPhone Safari phone-auto-dial vulnerability (original date: Nov. 2008)
  • From: Collin Mulliner
• Re: Advisory: Apple QuickTime Image Description Atom Sign Extension Memory Corruption
  • From: rajendra . palnaty
• Re: CVE-2009-1151: phpMyAdmin Remote Code Execution Proof of Concept
  • From: lord . iitk
• [SECURITY] [DSA 1819-1] New vlc packages fix several vulnerabilities
  • From: Steffen Joeris
• The Möbius Defense, the end of Defense in Depth
  • From: Pete Herzog
• ERRATA: [TZO-32-2009] Norman generic bypass (RAR)
  • From: Thierry Zoller
• [SECURITY] [DSA 1820-1] New xulrunner packages fix several vulnerabilities
  • From: Steffen Joeris
• Nokia 6212 classic URI spoofing and DoS advisory (original date: Dec. 2008)
  • From: Collin Mulliner
• iPhone Safari phone-auto-dial vulnerability (original date: Nov. 2008)
  • From: Collin Mulliner
• [TZO-43-2009] - Clamav generic evasion (CAB)
  • From: Thierry Zoller
• [TZO-34-2009] Frisk FPROT generic evasion (RAR,ARJ,LHA)
  • From: Thierry Zoller
• [SECURITY] [DSA 1818-1] New gforge packages fix insufficient input sanitising
  • From: Steffen Joeris
• [SECURITY] [DSA 1817-1] New ctorrent packages fix arbitrary code execution
  • From: Nico Golde
• [ MDVSA-2009:135 ] kernel
  • From: security
• [ MDVSA-2009:134 ] firefox
  • From: security
• CERT-FI statement on the Outpost24 TCP issues updated
  • From: Juha-Matti Laurio
• [SECURITY] [DSA 1816-1] New apache2 packages fix privilege escalation
  • From: Stefan Fritsch
• ZDI-09-043: Apple Java CColorUIResource Pointer Derference Code Execution Vulnerability
  • From: ZDI Disclosures
• Re: [Full-disclosure] WinAppDbg version 1.2 is out!
  • From: Mario Alejandro Vilas Jerez
• Re: [Full-disclosure] WinAppDbg version 1.2 is out!
  • From: Jared DeMott
• WinAppDbg version 1.2 is out!
  • From: Mario Alejandro Vilas Jerez
• phpMyTourney adminfunctions.php Remote File Include Vulnerabilities
  • From: IrIsT . Ir
• [ MDVSA-2009:133 ] irssi
  • From: security
• Official release of "Keykeriki" open source wireless keyboard sniffer
  • From: Max Moser
• CA20090615-02: CA Service Desk Tomcat Cross Site Scripting Vulnerability
  • From: Williams, James K
• CA20090615-01: CA ARCserve Backup Message Engine Denial of Service Vulnerabilities (Updated)
  • From: Williams, James K
• CA20090615-01: CA ARCserve Backup Message Engine Denial of Service Vulnerabilities
  • From: Williams, James K
• [TZO-40-2009] Clamav generic bypass (RAR,CAB,ZIP)
  • From: Thierry Zoller
• Re[2]: [Full-disclosure] Netgear DG632 Router Remote DoS Vulnerability
  • From: Vladimir '3APA3A' Dubrovin
• [TZO-33-2009] Fprot generic bypass (TAR)
  • From: Thierry Zoller
• Re: [Full-disclosure] Netgear DG632 Router Remote DoS Vulnerability
  • From: Hanno Böck
• Re: VUPEN Security - Microsoft Office Word Document Parsing Buffer Overflow Vulnerability
  • From: Nick Boyce
• Re: Netgear DG632 Router Remote DoS Vulnerability
  • From: Tom Neaves
• Netgear DG632 Router Remote DoS Vulnerability
  • From: Tom Neaves
• Netgear DG632 Router Authentication Bypass Vulnerability
  • From: Tom Neaves
• [DSF-02-2009] - Zoki Catalog SQL Injection
  • From: SmOk3
• [USN-788-1] Tomcat vulnerabilities
  • From: Marc Deslauriers
• [SECURITY] [DSA 1814-1] New libsndfile packages fix arbitrary code execution
  • From: Nico Golde
• [InterN0T] Webmedia Explorer - XSS Vulnerability
  • From: security
• [InterN0T] transLucid 1.75 - Multiple Vulnerabilities
  • From: security
• [InterN0T] TBDev 01-01-2008 - Multiple Vulnerabilities
  • From: security
• [InterN0T] SkyBlueCanvas 1.1 r237 - Multiple Vulnerabilities
  • From: security
• [InterN0T] Pivot 1.40.4-7 - Multiple Vulnerabilities
  • From: security
• CakeCMS XSRF Vulnerability
  • From: onur . turkeshan
• Link Logger syslogd resource overwhelm DoS
  • From: mcyr2
• SugarCRM 5.2.0e Remote Code Execution
  • From: ascii
• [TZO-30-2009] Kaspersky and the silent patch that wasn't (PDF evasion, forced full disclosure)
  • From: Thierry Zoller
• [TZO-37-2009] Apple Safari <v4 Remote code execution
  • From: Thierry Zoller
• [waraxe-2009-SA#074] - Multiple Vulnerabilities in TorrentTrader Classic 1.09
  • From: come2waraxe
• [SECURITY] [DSA 1815-1] New libtorrent-rasterbar packages fix denial of service
  • From: Moritz Muehlenhoff
• [TZO-36-2009] Apple Safari & Quicktime Denial of Service
  • From: Thierry Zoller
• [TZO-33-2009] Frisk F-prot evasion (TAR)
  • From: Thierry Zoller
• [TZO-32-2009] Norman generic bypass (RAR)
  • From: Thierry Zoller
• [TZO-31-2009] Ikarus multiple generic evasions (CAB,ZIP,RAR)
  • From: Thierry Zoller
• [USN-779-1] Firefox and Xulrunner vulnerabilities
  • From: Jamie Strandboge
• Secunia Research: Mozilla Firefox Java Applet Loading Vulnerability
  • From: Secunia Research
• Serena Dimensions CM has insufficient default privileges
  • From: roland . gruber . extern
• [USN-787-1] Apache vulnerabilities
  • From: Jamie Strandboge
• VUPEN Security - Adobe Acrobat and Reader JBIG2 Filter Heap Overflow Vulnerability
  • From: VUPEN Security Research
• VUPEN Security - Microsoft Office Word Document Parsing Buffer Overflow Vulnerability
  • From: VUPEN Security Research
• iDefense Security Advisory 06.11.09: Microsoft Windows 2000 Print Spooler Remote Stack Buffer Overflow Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 06.11.09: Adobe Reader and Acrobat FlateDecode Integer Overflow Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 06.11.09: Microsoft Excel SST Record Integer Overflow Vulnerability
  • From: iDefense Labs
• FortiGuard Advisory: Adobe Reader/Acrobat TrueType Font Processing Memory Corruption Vulnerability
  • From: noreply-secresearch@xxxxxxxxxxxx
• iDefense Security Advisory 06.11.09: Multiple Vendor WebKit Error Handling Use After Free Vulnerability
  • From: iDefense Labs
• ModSecurity (Core Rules) HTTP Parameter Pollution Filter Bypass Vulnerability
  • From: lavakumar kuppan
• iDefense Security Advisory 06.11.09: Microsoft Active Directory Hexdecimal DN AttributeValue Invalid Free Vulnerability
  • From: iDefense Labs
• MULTIPLE SQL INJECTION VULNERABILITIES --Splog <= v-1.2 Beta-->
  • From: y3nh4ck3r
• ZDI-09-042: Adobe Reader U3D RHAdobeMeta Stack Overflow Vulnerability
  • From: ZDI Disclosures
• F5 FirePass Cross-Site Scripting vulnerability
  • From: Sjoerd Resink
• [USN-786-1] apr-util vulnerabilities
  • From: Jamie Strandboge
• ZDI-09-036: Microsoft Internet Explorer setCapture Memory Corruption Vulnerability
  • From: ZDI Disclosures
• Apple Safari cross-domain XML theft vulnerability
  • From: Chris Evans
• Secunia Research: Adobe Reader JBIG2 Text Region Segment Buffer Overflow
  • From: Secunia Research
• ZDI-09-039: Microsoft Internet Explorer onreadystatechange Memory Corruption Vulnerability
  • From: ZDI Disclosures
• Secunia Research: Microsoft PowerPoint Freelance Layout Parsing Vulnerability
  • From: Secunia Research
• [ECHO_ADV_110$2009] Firefox (GNU/Linux version) <= 3.0.10 Denial Of Services
  • From: y3dips
• ZDI-09-040: Microsoft Office Excel QSIR Record Pointer Corruption Vulnerability
  • From: ZDI Disclosures
• XM Easy Personal FTP Server HELP and TYPE command Remote Denial of Service exploit
  • From: vinodsharma . mimit
• ZDI-09-035: Microsoft Word Document Stack Based Buffer Overflow Vulnerability
  • From: ZDI Disclosures
• FortiGuard Advisory: Apple Safari Remote Memory Corruption Vulnerability
  • From: noreply-secresearch@xxxxxxxxxxxx
• ZDI-09-041: Microsoft Internet Explorer 8 Rows Property Dangling Pointer Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-09-038: Microsoft Internet Explorer Event Handler Memory Corruption Vulnerability
  • From: ZDI Disclosures
• FortiGuard Advisory: Microsoft Internet Explorer DHTML Handling Remote Memory Corruption Vulnerability
  • From: noreply-secresearch@xxxxxxxxxxxx
• ZDI-09-037: Microsoft Internet Explorer Concurrent Ajax Request Memory Corruption Vulnerability
  • From: ZDI Disclosures
• [security bulletin] HPSBUX02435 SSRT090059 rev.1 - HP-UX Running OpenSSL, Remote Denial of Service (DoS), Bypass Security Restrictions
  • From: security-alert
• [SECURITY] UPDATED CVE-2008-5515 RequestDispatcher directory traversal vulnerability
  • From: Mark Thomas
• FreeBSD Security Advisory FreeBSD-SA-09:09.pipe
  • From: FreeBSD Security Advisories
• FreeBSD Security Advisory FreeBSD-SA-09:10.ipv6
  • From: FreeBSD Security Advisories
• FreeBSD Security Advisory FreeBSD-SA-09:11.ntpd
  • From: FreeBSD Security Advisories
• [USN-775-2] Quagga regression
  • From: Kees Cook
• catching up on several recently fixed bugs of note
  • From: Michal Zalewski
• CORE-2008-0826 - Internet Explorer Security Zone restrictions bypass
  • From: CORE Security Technologies Advisories
• CORE-2009-0521 - DX Studio Player Firefox plug-in command injection
  • From: CORE Security Technologies Advisories
• Re: XMLHttpRequest file upload vulnerability Chrome 2 & Safari 3
  • From: Michal Zalewski
• CVE-2009-1151: phpMyAdmin Remote Code Execution Proof of Concept
  • From: Adrian P.
• Secunia Research: Microsoft Excel String Parsing Integer Overflow Vulnerability
  • From: Secunia Research
• Secunia Research: Microsoft Excel Record Parsing Array Indexing Vulnerability
  • From: Secunia Research
• Re: XMLHttpRequest file upload vulnerability Chrome 2 & Safari 3
  • From: Adrian P.
• New paper - Testing the Enterprise Security: Anti-Spam and Anti-Virus Solutions
  • From: marian . ventuneac
• MULTIPLE SQL INJECTION VULNERABILITIES --S-CMS <= v-2.0 Beta3-->
  • From: y3nh4ck3r
• MULTIPLE LOCAL FILE INCLUSION VULNERABILITIES --S-CMS <= v-2.0 Beta3-->
  • From: y3nh4ck3r
• [USN-785-1] ipsec-tools vulnerabilities
  • From: Marc Deslauriers
• [security bulletin] HPSBMA02430 SSRT080094 rev.1 - HP OpenView Network Node Manager (OV NNM) Running SNMP and MIB, Remote Execution of Arbitrary Code, Denial of Service (DoS)
  • From: security-alert
• TELUS Security Labs VR - Microsoft Office Excel Malformed Records Stack Buffer Overflow
  • From: noreply
• XMLHttpRequest file upload vulnerability Chrome 2 & Safari 3
  • From: pantera_bleed
• Apple Safari local file theft vulnerability
  • From: Chris Evans
• ZDI-09-032: Apple WebKit attr() Invalid Attribute Memory Corruption Vulnerability
  • From: ZDI Disclosures
• ZDI-09-033: Apple WebKit dir Attribute Freeing Dangling Object Pointer Vulnerability
  • From: ZDI Disclosures
• [SECURITY] CVE-2008-5515 RequestDispatcher directory traversal vulnerability
  • From: Mark Thomas
• ZDI-09-034: Apple Safari SVG Set.targetElement() Memory Corruption Vulnerability
  • From: ZDI Disclosures
• [USN-784-1] ImageMagick vulnerability
  • From: Jamie Strandboge
• ZDI-09-031: libpurple MSN Protocol SLP Message Heap Overflow Vulnerability
  • From: ZDI Disclosures
• [USN-783-1] eCryptfs vulnerability
  • From: Kees Cook
• New paper by Amit Klein (Trusteer) - Temporary user tracking in major browsers and Cross-domain information leakage and attacks
  • From: Amit Klein
• Rasterbar libtorrent arbitrary file overwrite vulnerability
  • From: Dimitris Glynos
• [ MDVSA-2009:131-1 ] apr-util
  • From: security
• [ MDVSA-2009:131 ] apr-util
  • From: security
• [DSECRG-09-015] SAP GUI 6.4 Buffer Overflow vulnerability
  • From: Alexandr Polyakov
• [SECURITY] [DSA 1813-1] New evolution-data-server packages fix several vulnerabilities
  • From: Steffen Joeris
• [ MDVSA-2009:132 ] libsndfile
  • From: security
• [ MDVSA-2009:130 ] gstreamer0.10-plugins-good
  • From: security
• [security bulletin] HPSBMA02433 SSRT090084 rev.1 - HP Discovery & Dependency Mapping Inventory (DDMI) Running on Windows, Remote Unauthorized Access
  • From: security-alert
• SQL INJECTION VULNERABILITY--Kjtechforce mailman Beta-1-->
  • From: y3nh4ck3r
• Re: [InterN0T] SiteCore.NET 6.0.0 - XSS Vulnerability-fixed
  • From: pm
• Re: [Full-disclosure] Cross Site Scripting in PHP Nuke 8.0 Version
  • From: Christian Kujau
• Re: Exploiting IE8 UTF-7 XSS Vulnerability using Local Redirection
  • From: lord . ittk
• EC2ND 2009 CFP - 5th European Conference on Computer Network Defence
  • From: Maggi Federico
• Reminder: DeepSec 2009 Call for Papers is open
  • From: DeepSec Conference
• LightOpenCMS 0.1 pre-alpha Remote SQL Injection
  • From: Salvatore \"drosophila\" Fresta
• [ISecAuditors Security Advisories] Joomla! 1.5.10 JA_Purity Multiple Persistent XSS
  • From: ISecAuditors Security Advisories
• [SECURITY] CVE-2009-0580 UPDATED Apache Tomcat User enumeration vulnerability with FORM authentication
  • From: Mark Thomas
• [ MDVSA-2009:129 ] file
  • From: security
• [Security] XM Easy Personal FTP Server Multiple DoS vulnerabilities
  • From: neeraj . thakar
• Re: Re: [InterN0T] Geeklog 1.5 - Pre-Installation Vulnerabilities
  • From: peter
• Re: [SECURITY] CVE-2009-0580 Apache Tomcat User enumeration vulnerability with FORM authentication
  • From: Christopher Schultz
• Re: [InterN0T] Geeklog 1.5 - Pre-Installation Vulnerabilities
  • From: Dirk Haun
• [SECURITY] [DSA 1812-1] New apr-util packages fix several vulnerabilities
  • From: Stefan Fritsch
• [ MDVSA-2009:128 ] libmodplug
  • From: security
• SQL INJECTION VULNERABILITY--LightOpen CMS Devel 0.1-->
  • From: y3nh4ck3r
• [InterN0T] Flatnux 2009-03-27 - XSS Vulnerabilities + More
  • From: security
• [InterN0T] Geeklog 1.5 - Pre-Installation Vulnerabilities
  • From: security
• [InterN0T] SiteCore.NET 6.0.0 - XSS Vulnerability
  • From: security
• [InterN0T] LightNEasy 2.2.2 - HTML Injection Vulnerability
  • From: security
• [InterN0T] moziloCMS 1.11.1 - XSS Vulnerability
  • From: security
• [SECURITY] CVE-2009-0783 Apache Tomcat Information disclosure
  • From: Mark Thomas
• OCS Inventory NG 1.02 - Directory Traversal
  • From: Nico Leidecker
• [ MDVSA-2009:127 ] gaim
  • From: security
• [SECURITY] CVE-2009-0580 Apache Tomcat User enumeration vulnerability with FORM authentication
  • From: Mark Thomas
• [SECURITY] CVE-2009-0033 Apache Tomcat DoS when using Java AJP connector
  • From: Mark Thomas
• Re: TPTI-09-03: Apple iTunes Multiple Protocol Handler Buffer Overflow Vulnerabilities
  • From: Will Drewry
• [USN-780-1] CUPS vulnerability
  • From: Marc Deslauriers
• [USN-781-2] Gaim vulnerabilities
  • From: Marc Deslauriers
• [USN-781-1] Pidgin vulnerabilities
  • From: Marc Deslauriers
• Advisory: Apple QuickTime Image Description Atom Sign Extension Memory Corruption
  • From: Roee Hay
• CORE-2009-0420 - Apple CUPS IPP_TAG_UNSUPPORTED Handling null pointer Vulnerability
  • From: CORE Security Technologies Advisories
• [SECURITY] [DSA 1810-1] New libapache-mod-jk packages fix information disclosure
  • From: Stefan Fritsch
• [SECURITY] [DSA 1810-1] New cups/cupsys packages fix denial of service
  • From: Nico Golde
• TPTI-09-04: Apple Terminal xterm Resize Escape Sequence Memory Corruption Vulnerability
  • From: dvlabs
• TPTI-09-03: Apple iTunes Multiple Protocol Handler Buffer Overflow Vulnerabilities
  • From: dvlabs
• ZDI-09-030: Apple Quicktime PICT Opcode 0x71 Heap Overflow Vulnerability
  • From: ZDI Disclosures
• ZDI-09-029: Apple QuickTime Jpeg2000 Marker Size Heap Overflow Vulnerability
  • From: ZDI Disclosures
• ZDI-09-028: Apple QuickTime CRGN Atom Parsing Heap Buffer Overflow Vulnerability
  • From: ZDI Disclosures
• ZDI-09-027: Apple Quicktime PICT Opcode 0x8201 Heap Overflow Vulnerability
  • From: ZDI Disclosures
• ZDI-09-026: Apple QuickTime Packed-bit Decoding Heap Overflow Vulnerability
  • From: ZDI Disclosures
• ZDI-09-025: Apple Quicktime Picture Viewer FLC Delta-Encoded Frame Decompression Vulnerability
  • From: ZDI Disclosures
• [security bulletin] HPSBUX02429 SSRT090058 rev.2 - HP-UX Running Java, Remote Execution of Arbitrary Code and Other Vulnerabilities
  • From: security-alert
• MULTIPLE LOCAL FILE INCLUSION VULNERABILITIES -- Online Grades & Attendance <= v-3.2.6 -->
  • From: y3nh4ck3r
• [SECURITY] [DSA 1809-1] New Linux 2.6.26 packages fix several vulnerabilities
  • From: dann frazier
• [ MDVSA-2009:126 ] eggdrop
  • From: security
• ACDSee Products TIFF and Font Parsing Buffer Overflow Vulnerabilities
  • From: VUPEN Security Research
• Secunia Research: QuickTime Sorenson Video 3 Content Parsing Vulnerability
  • From: Secunia Research
• Secunia Research: Apple QuickTime MS ADPCM Encoding Buffer Overflow
  • From: Secunia Research
• The father of all bombs - another webdav fiasco
  • From: Kingcope
• Re: Re: (Post Form --> Parent Register (name)) Credentials Changer (SQLi) EXPLOIT -- Online Grades & Attendance v-3.2.6-->
  • From: y3nh4ck3r
• Re: (Post Form --> Parent Register (name)) Credentials Changer (SQLi) EXPLOIT -- Online Grades & Attendance v-3.2.6-->
  • From: Jeremy Brown
• [USN-778-1] cron vulnerability
  • From: Jamie Strandboge
• Zemana Antilogger 1.9.2 DoS attack
  • From: loginit
• ZDI-09-024: Safenet SoftRemote IKE Service Remote Stack Overflow Vulnerability
  • From: ZDI Disclosures
• ACSAC 2009 submissions due June 8 and June 10 (extended)
  • From: acsac . publicity
• [SECURITY] [DSA 1808-1] New drupal6 packages fix insufficient input sanitising
  • From: Steffen Joeris
• Re: MULTIPLE REMOTE VULNERABILITIES --Small Pirates v-2.1-->
  • From: y3nh4ck3r
• MULTIPLE SQL INJECTION VULNERABILITIES -- Online Grades & Attendance v-3.2.6 -->
  • From: y3nh4ck3r
• FRHACK 2009 Final Call For Papers extended
  • From: Jerome Athias
• ASMAX AR 804 gu Web Management Console Arbitrary Shell Command Injection Vulnerability
  • From: michal . sajdak
• OCS Inventory NG 1.02 - Multiple SQL Injections
  • From: Nico Leidecker
• [ MDVSA-2009:124 ] apache
  • From: security
• [SECURITY] [DSA 1807-1] New cyrus-sasl2/cyrus-sasl2-heimdal packages fix arbitrary code execution
  • From: Nico Golde
• FIREFOX URL space character SPOOF
  • From: xushaopei
• ICQ 6.5 URL Search Hook/ICQToolBar.dll .URL file processing Windows Explorer remote buffer overflow poc
  • From: nospam
• [ MDVSA-2009:125 ] wireshark
  • From: security
• CFP 26C3 / 26th Chaos Communication Congress
  • From: lists
• Linksys WAG54G2 Web Management Console Local Arbitrary Shell Command Injection Vulnerability
  • From: michal . sajdak

• Security
• UNIX
• Linux
• Coding
• Usenet

• News
• Mailing-Lists
• Newsgroups
• Service
• About
• Privacy
• Search
• Imprint

www.derkeiler.com  > Mailing-Lists  > securityfocus  > bugtraq  > 2009-06