Bugtraq

• Thread Index

---

• [ MDVSA-2010:088 ] kernel
  • From: security
• BPstyle - Graphic studio SQL Injection Vulnerabilities
  • From: md . r00t . defacer
• EUSecWest Amsterdam 2010 Call For Papers (short deadline May 5 - conf June 16/17)
  • From: Dragos Ruiu
• RE: STP mitm attack idea
  • From: Williams, Dan
• SQL Injection in MS Access with backslash escaped input
  • From: gheibi
• Secunia Research: Internet Download Manager FTP Buffer Overflow Vulnerability
  • From: Secunia Research
• [USN-934-1] Netpbm vulnerability
  • From: Jamie Strandboge
• Re: STP mitm attack idea
  • From: Ivan Jager
• [ MDVSA-2010:086 ] kdegraphics
  • From: security
• Vulnerabilities in CCMS
  • From: MustLive
• Apache ActiveMQ XSS Vulnerability
  • From: arun . gnyan
• Re: STP mitm attack idea
  • From: Joel Maslak
• [ MDVSA-2010:087 ] poppler
  • From: security
• Re: STP mitm attack idea
  • From: Jean-Christophe Baptiste
• vBulletin - Insecure Custom BBCode Tags
  • From: advisories
• CONFidence 2010, 25-26th May - Call For Participation
  • From: Andrzej Targosz
• Re: STP mitm attack idea
  • From: Jason T. Masker
• RE: STP mitm attack idea
  • From: Stefan Laudat
• Re: STP mitm attack idea
  • From: wlet
• Re: STP mitm attack idea
  • From: news
• [USN-933-1] PostgreSQL vulnerability
  • From: Jamie Strandboge
• Re: Vulnerability in CB Captcha for Joomla and Mambo
  • From: MustLive
• [ MDVSA-2009:332-1 ] gimp
  • From: security
• [ MDVSA-2010:085 ] pidgin
  • From: security
• [ MDVSA-2010:078-1 ] sudo
  • From: security
• ZDI-10-079: Realnetworks Helix Server NTLM Authentication Invalid Base64 Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• Re: STP mitm attack idea
  • From: Jann Horn
• XSS in Microsoft SharePoint Server 2007
  • From: advisory
• Adobe viewer plugin can be made to crash IE or FF
  • From: Angus Mann
• STP mitm attack idea
  • From: Przemyslaw Borkowski
• Fun with FORTIFY_SOURCE
  • From: Dan Rosenberg
• [ MDVSA-2010:084 ] java-1.6.0-openjdk
  • From: security
• [security bulletin] HPSBMA02525 SSRT100083 rev.1 - HP System Insight Manager Running on HP-UX, Linux, and Windows , Remote Cross Site Scripting (XSS), Cross Site Request Forgery (CSRF), Privilege Elevation
  • From: security-alert
• [security bulletin] HPSBMA02488 SSRT100013 rev.2 - HP ProLiant Support Pack 8.30 for Windows, Remote Code Execution, Information Disclosure
  • From: security-alert
• [SECURITY] [DSA 2021-2] New spamass-milter packages fix regression
  • From: Giuseppe Iuculano
• Re: Widnows XP TCP/IP Stack Security Issue (ARP for non RFC 1918 addresses)
  • From: Paul Schmehl
• XSS vulnerability in Zikula Application Framework
  • From: advisory
• XSS vulnerability in Zikula Application Framework
  • From: advisory
• Re: Widnows XP TCP/IP Stack Security Issue (ARP for non RFC 1918addresses)
  • From: Dominik George
• Conference on Cyber Conflict: speakers selected!
  • From: k g
• Re: Widnows XP TCP/IP Stack Security Issue (ARP for non RFC 1918addresses)
  • From: r . st
• New vulnerabilities in CMS SiteLogic
  • From: Salvatore Fresta aka Drosophila
• Re: New vulnerabilities in CMS SiteLogic
  • From: MustLive
• Madirish Webmail 2.01 (basedir) RFI/LFI Vulnerability
  • From: eidelweiss
• NovaStor NovaNet <= 13.0 issues
  • From: mu-b
• Widnows XP TCP/IP Stack Security Issue (ARP for non RFC 1918 addresses)
  • From: wborskey
• [security bulletin] HPSBUX02508 SSRT100007 rev.2 - HP-UX Running sendmail with STARTTLS Enabled, Remote Unauthorized Access
  • From: Morris, John R. (SSRT)
• t2'10: Call for Papers 2010 (Helsinki / Finland)
  • From: Tomi Tuominen
• SmodCMS 'config.php' Arbitrary File Upload Vulnerability
  • From: eidelweiss
• [USN-931-2] FFmpeg regression
  • From: Marc Deslauriers
• phpegasus 'config.php' Arbitrary File Upload Vulnerability
  • From: eidelweiss
• A XSS in User_ChkLogin.asp of PowerEasy 2006
  • From: lis cker
• hashdays 2010 - Call for Papers (#days CFP)
  • From: hashdays CFP
• [SECURITY] [DSA 2039-1] New cacti packages fix missing input sanitising
  • From: Thijs Kinkhorst
• [ MDVSA-2010:071 ] mozilla-thunderbird
  • From: security
• ZDI-10-078: Novell ZENworks Configuration Management UploadServlet Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• Vulnerability in Referer for DataLife Engine
  • From: MustLive
• [HITB-Announce] HITBSecConf2009 - Malaysia Videos Released!
  • From: Hafez Kamal
• IWD Group SQL Injection Vulnerabilities
  • From: md . r00t . defacer
• In-portal 5.0.3 Remote Arbitrary File Upload Exploit
  • From: eidelweiss
• Re: Vulnerabilities in NovaBoard
  • From: terry white
• [HITB-Announce] HITBSecConf2010 - Dubai - Presentation Materials
  • From: Hafez Kamal
• XSS and Content Injection in HTC Windows Mobile SMS Preview PopUp
  • From: michael . mueller
• Vulnerabilities in NovaBoard
  • From: MustLive
• Apache ActiveMQ is prone to source code disclosure vulnerability.
  • From: research
• [security bulletin] HPSBUX02519 SSRT100004 rev.1 - HP-UX Running BIND, Remote Compromise of NXDOMAIN Responses
  • From: security-alert
• Windows 2000/XP/2003 win32k.sys SfnINSTRING local kernel Denial of Service Vulnerability
  • From: th_decoder
• Windows 2000/XP/2003 win32k.sys SfnLOGONNOTIFY local kernel Denial of Service Vulnerability
  • From: th_decoder
• [security bulletin] HPSBMA02492 SSRT100079 rev.1 - HP System Management Homepage (SMH) for Linux and Windows, Remote Cross Site Scripting (XSS), Denial of Service (DoS), Execution of Arbitrary Code, Unauthorized Access
  • From: security-alert
• Re: sudoedit local privilege escalation through PATH manipulation
  • From: Agazzini Maurizio
• [SECURITY] CVE-2010-1157: Apache Tomcat information disclosure vulnerability
  • From: Mark Thomas
• CfP: GameSec 2010 - Deadline is 3 weeks away!
  • From: Albert Levi
• Security-Assessment.com WhitePaper/Addendum: Cross Context Scripting with Firefox & Exploiting Cross Context Scripting vulnerabilities in Firefox
  • From: Roberto Suggi Liverani
• [security bulletin] HPSBMA02494 SSRT090168 rev.1 - HP Virtual Machine Manager (VMM) for Windows, Remote Unauthorized Access, Privilege Elevation
  • From: security-alert
• London DEFCON April meet - DC4420 - Wed 28th April 2010
  • From: Major Malfunction
• ZDI-10-077: Adobe Download Manager Atlcom.get_atlcom ActiveX Control Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• Cisco Security Advisory: Cisco Small Business Video Surveillance Cameras and Cisco 4-Port Gigabit Security Routers Authentication Bypass Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Secunia Research: imlib2 "IMAGE_DIMENSIONS_OK()" Logic Error
  • From: Secunia Research
• Call for participation -- Eth0:2010 Summer
  • From: Mark Janssen
• CORE-2010-0406 - User Invoices Persistent XSS Vulnerability in CactuShop
  • From: CORE Security Technologies Advisories
• [security bulletin] HPSBUX02508 SSRT100007 rev.2 - HP-UX Running sendmail with STARTTLS Enabled, Remote Unauthorized Access
  • From: security-alert
• [security bulletin] HPSBMA02491 SSRT100060 rev.1 - HP Operations Manager for Windows, Remote Execution of Arbitrary Code
  • From: security-alert
• [#OUF-273299]: AVTECH Software (AVC781Viewer.dll) ActiveX Multiple Remote Vulnerabilities
  • From: sinner
• [security bulletin] HPSBUX02518 SSRT100051 rev.1 - HP-UX, Local Denial of Service (DoS)
  • From: security-alert
• Re: Re: Vulnerability in CB Captcha for Joomla and Mambo
  • From: none
• Re: [Suspected Spam]New vulnerabilities in CMS SiteLogic
  • From: Salvatore Fresta aka Drosophila
• [USN-929-2] irssi regression
  • From: Jamie Strandboge
• [ MDVSA-2010:070-1 ] firefox
  • From: security
• [security bulletin] HPSBUX02517 SSRT100058 rev.2 - HP-UX Running OpenSSL, Remote Unauthorized Information Disclosure, Unauthorized Data Modification, Denial of Service (DoS)
  • From: security-alert
• IP address spoofing in e107
  • From: advisory
• [USN-932-1] KDM vulnerability
  • From: Jamie Strandboge
• [ MDVSA-2010:083 ] emacs
  • From: security
• Re: sudoedit local privilege escalation through PATH manipulation
  • From: Ansgar Wiechers
• Vbulletin - Two-Step External Link XSS
  • From: edgard . chammas
• [USN-931-1] FFmpeg vulnerabilities
  • From: Marc Deslauriers
• MITKRB5-SA-2010-004 [CVE-2010-1320] double free in KDC
  • From: Tom Yu
• CSRF in e107
  • From: advisory
• [ MDVSA-2010:076-1 ] openssl
  • From: security
• Re: Vulnerability in CB Captcha for Joomla and Mambo
  • From: MustLive
• [ MDVSA-2010:082 ] clamav
  • From: security
• sudoedit local privilege escalation through PATH manipulation
  • From: Agazzini Maurizio
• [SECURITY] [DSA 2038-1] New pidgin packages fix denial of service
  • From: Thijs Kinkhorst
• [ MDVSA-2010:079 ] irssi
  • From: security
• iDefense Security Advisory 04.15.10: Multiple Vendor AgentX++ Integer Overflow Vulnerability
  • From: iDefense Labs
• Re: Vulnerability in CB Captcha for Joomla and Mambo
  • From: Matteo Valenza
• [ MDVSA-2010:077 ] nss_db
  • From: security
• iDefense Security Advisory 04.15.10: Multiple Vendor AgentX++ Stack Buffer Overflow Vulnerability
  • From: iDefense Labs
• CompleteFTP v3.3.0 - Remote Memory Consumption DoS
  • From: Mehdi Mahdjoub [SYSDREAM]
• [ MDVSA-2010:078 ] sudo
  • From: security
• Re: Vulnerability in CB Captcha for Joomla and Mambo
  • From: nant
• [SECURITY] [DSA-2035-1] New apache2 packages fix several issues
  • From: Stefan Fritsch
• [SECURITY] [DSA 2034-1] New phpmyadmin packages fix several vulnerabilities
  • From: Thijs Kinkhorst
• Re: Vulnerability in CB Captcha for Joomla and Mambo
  • From: James Martin
• Secunia Research: e107 Content Management Plugin Script Insertion Vulnerability
  • From: Secunia Research
• [Suspected Spam]New vulnerabilities in CMS SiteLogic
  • From: MustLive
• [ MDVSA-2010:081 ] apache-mod_auth_shadow
  • From: security
• [SECURITY] [DSA 2037-1] New kdm packages fix privilege escalation
  • From: Thijs Kinkhorst
• Secunia Research: e107 Avatar/Photograph Image File Upload Vulnerability
  • From: Secunia Research
• WinMount MOU File Handling Overflow Vulnerability
  • From: lilf
• [ MDVSA-2010:076 ] openssl
  • From: security
• [SECURITY] [DSA 2036-1] New jasper packages fix denial of service
  • From: Thijs Kinkhorst
• [ MDVSA-2010:080 ] brltty
  • From: security
• Re: Vulnerability in CB Captcha for Joomla and Mambo
  • From: Susan Bradley
• [ MDVSA-2010:075 ] openoffice.org
  • From: security
• [USN-890-6] CMake vulnerabilities
  • From: Jamie Strandboge
• Hackproofing Oracle Financials 11i & R12
  • From: Joxean Koret
• Re: Vulnerability in CB Captcha for Joomla and Mambo
  • From: Susan Bradley
• [ MDVSA-2010:074 ] kdebase
  • From: security
• [SECURITY] [DSA 2033-1] New ejabberd packages fix denial of service
  • From: Sébastien Delafond
• [USN-929-1] irssi vulnerabilities
  • From: Jamie Strandboge
• [USN-928-1] Sudo vulnerability
  • From: Jamie Strandboge
• Re: Vulnerability in CB Captcha for Joomla and Mambo
  • From: nant
• VUPEN Security Research - Adobe Acrobat and Reader GIF Data Buffer Overflow Vulnerability
  • From: VUPEN Web Research
• ZDI-10-076: Apple Preview libFontParser SpecialEncoding Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• Nucleus CMS v.3.51 (DIR_LIBS) Multiple Vulnerability
  • From: eidelweiss
• ZDI-10-072: Cisco Secure Desktop CSDWebInstaller ActiveX Control Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• VUPEN Security Research - Adobe Acrobat and Reader JPEG Data Buffer Overflow Vulnerability
  • From: VUPEN Web Research
• [CVE-2010-0432] Apache OFBiz Multiple XSS Vulnerabilities
  • From: Jacopo Cappellato
• Vulnerability in CB Captcha for Joomla and Mambo
  • From: MustLive
• Cisco Security Advisory: Cisco Secure Desktop ActiveX Control Code Execution Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• [DSECRG-09-049] IBM BladeCenter Management Module - DoS vulnerability
  • From: Alexandr Polyakov
• [DSecRG-09-053] VMware Remoute Console - format string
  • From: Alexandr Polyakov
• VUPEN Security Research - Adobe Acrobat and Reader BMP Data Buffer Overflow Vulnerability
  • From: VUPEN Web Research
• VUPEN Security Research - Adobe Acrobat and Reader PNG Data Buffer Overflow Vulnerability
  • From: VUPEN Web Research
• VUPEN Web Security Research - WebAsyst Shop-Script Multiple Input Validation Vulnerabilities
  • From: VUPEN Web Research
• [ MDVSA-2010:073 ] cups
  • From: security
• Ziggurat CMS Multiple Vulnerabilities
  • From: info
• [ MDVSA-2010:073-1 ] cups
  • From: security
• ZDI-10-070: Microsoft Windows Media Player Codec Retrieval Dangling Pointer Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [security bulletin] HPSBUX02517 SSRT100058 rev.1 - HP-UX Running OpenSSL, Remote Unauthorized Information Disclosure, Unauthorized Data Modification, Denial of Service (DoS)
  • From: security-alert
• [ MDVSA-2010:071 ] krb5
  • From: security
• 60cycleCMS (DOCUMENT_ROOT) Multiple Local File Inclusion Vulnerability
  • From: eidelweiss
• Cert-Lexsi - Microsoft Windows Media Services MMS Buffer Overflow Vulnerability
  • From: Fabien PERIGAUD
• [ MDVSA-2010:072 ] cups
  • From: security
• RJ-iTop Network Vulnerability Scanner System Multiple SQL Injection Vulnerabilities
  • From: wsn1983
• ZDI-10-074: Sun Microsystems Directory Server Enterprise ASN.1 Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [ MDVSA-2010:070 ] firefox
  • From: security
• Secunia Research: Visualization Library DAT File Parsing Vulnerabilities
  • From: Secunia Research
• ZDI-10-075: Sun Microsystems Directory Server Enterprise DSML UTF-8 Denial of Service Vulnerability
  • From: ZDI Disclosures
• ZDI-10-069: Microsoft Office Publisher File Conversion TextBox Processing Buffer Overflow Vulnerability
  • From: ZDI Disclosures
• ZDI-10-073: Sun Microsystems Directory Server DSML-over-HTTP Username Search Denial of Service Vulnerability
  • From: ZDI Disclosures
• Unauthenticated Filesystem Access in iomega Home Media Network Hard Drive
  • From: fizix610
• ZDI-10-071: Adobe Reader TrueType Font Handling Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• Micropoint Proactive Denfense Mp110013.sys <= 1.3.10123.0 Local Privilege Escalation Exploit
  • From: dlrow1991
• Imperva SecureSphere Web Application Firewall and Database Firewall Bypass Vulnerability
  • From: Clear Skies Security
• Advisory 02/2010: MyBB Password Reset Weak Random Numbers Vulnerability
  • From: Stefan Esser
• Advisory 01/2010: MyBB Password Reset Email BCC: Injection Vulnerability
  • From: Stefan Esser
• Vana CMS Remote File Download
  • From: info
• Insufficient Anti-automation and Denial of Service vulnerabilities in multiple systems
  • From: MustLive
• ACROS Security: Remote Binary Planting in VMware Tools for Windows (ASPR #2010-04-12-1)
  • From: ACROS Lists
• [USN-927-1] NSS vulnerability
  • From: Jamie Strandboge
• iDefense Security Advisory 04.09.10: VMware VMnc Codec Heap Overflow Vulnerability
  • From: iDefense Labs
• ACROS Security: Local Binary Planting in VMware Tools for Windows (ASPR #2010-04-12-2)
  • From: ACROS Lists
• [security bulletin] HPSBPI02398 SSRT080166 rev.5 - Certain HP LaserJet Printers, HP Color LaserJet Printers, and HP Digital Senders, Remote Unauthorized Access to Files
  • From: security-alert
• Re: Vulnerabilities in phpCOIN
  • From: Susan Bradley
• [USN-920-1] Firefox 3.0 and Xulrunner vulnerabilities
  • From: Jamie Strandboge
• CVE-2009-4509: TANDBERG VCS Authentication Bypass
  • From: Timothy D. Morgan
• CVE-2009-4510: TANDBERG VCS Static SSH Host Keys
  • From: VSR Advisories
• CVE-2009-4511: TANDBERG VCS Arbitrary File Retrieval
  • From: VSR Advisories
• Vulnerabilities in CMS SiteLogic
  • From: MustLive
• [SECURITY] [DSA 2031-1] New krb5 packages fix denial of service
  • From: Giuseppe Iuculano
• [USN-927-2] NSS regression
  • From: Jamie Strandboge
• [SECURITY] [DSA 2032-1] New libpng packages fix several vulnerabilities
  • From: Giuseppe Iuculano
• HITBSecConf DUBAI 2010: Learn more about web attacks and stealth hacking
  • From: Laurent OUDOT at TEHTRI-Security
• [USN-921-1] Firefox 3.5 and Xulrunner vulnerabilities
  • From: Jamie Strandboge
• [USN-927-3] Thunderbird regression
  • From: Jamie Strandboge
• AneCMS Multiple Vulnerabilities
  • From: admin
• VUPEN Security Research - VMware Products Movie Decoder Heap Overflow Vulnerability
  • From: VUPEN Security Research
• Re: Vulnerabilities in Dunia Soccer
  • From: Susan Bradley
• Secunia Research: VMWare VMnc Codec HexTile Encoding Buffer Overflow
  • From: Secunia Research
• Secunia Research: VMWare VMnc Codec HexTile Encoding Two Integer Truncation Vulnerabilities
  • From: Secunia Research
• Re: Vulnerabilities in Dunia Soccer
  • From: MustLive
• Vulnerabilities in phpCOIN
  • From: MustLive
• JAVA web start arbitrary command-line injection - "-XXaltjvm" arbitrary dll loading (0day)
  • From: Reversemode
• WinSoftMagic Photo Editor .PNG File Buffer Overflow
  • From: eidelweiss
• ZDI-10-068: Apple QuickTime H.263 Array Index Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [USN-624-2] Erlang vulnerability
  • From: Jamie Strandboge
• VMSA-2010-0007 VMware hosted products, vCenter Server and ESX patches resolve multiple security issues
  • From: VMware Security team
• [USN-926-1] ClamAV vulnerabilities
  • From: Jamie Strandboge
• Secunia Research: Pulse CMS Cross-Site Request Forgery
  • From: Secunia Research
• Secunia Research: Pulse CMS Arbitrary File Upload Vulnerability
  • From: Secunia Research
• Re: Vulnerabilities in Dunia Soccer
  • From: Susan Bradley
• [USN-925-1] MoinMoin vulnerabilities
  • From: Jamie Strandboge
• Vulnerabilities in CMS SiteLogic
  • From: MustLive
• TCPDF Library Remote Code Execution Vulnerability
  • From: Matthias -apoc- Hecker
• DeepSec 2010 - Call for Papers and Experts
  • From: DeepSec Conference
• [HITB-Announce] FINAL CALL - CFP for HITBSecConf2010 Amsterdam
  • From: Hafez Kamal
• Vulnerabilities in Dunia Soccer
  • From: MustLive
• [ MDVSA-2010:069 ] nss
  • From: security
• [USN-924-1] Kerberos vulnerabilities
  • From: Kees Cook
• [USN-923-1] OpenJDK vulnerabilities
  • From: Kees Cook
• CORE-2010-0323: XSS Vulnerability in NextGEN Gallery Wordpress Plugin
  • From: CORE Security Technologies Advisories
• ZDI-10-067: Apple QuickTime Pict BkPixPat Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [SECURITY] [DSA 2030-1] New mahara packages fix sql injection
  • From: Nico Golde
• ZDI-10-066: CA XOsoft Control Service entry_point.aspx Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• MITKRB5-SA-2010-003 [CVE-2010-0629] denial of service in kadmind in older krb5 releases
  • From: Tom Yu
• ZDI-10-065: CA XOsoft xosoapapi.asmx Multiple Remote Code Execution Vulnerabilities
  • From: ZDI Disclosures
• CA20100406-01: Security Notice for CA XOsoft
  • From: Kotas, Kevin J
• Miranda TLS MitM with XMPP/Jabber protocol
  • From: Jan Schejbal
• Hack.lu 2010 CfP
  • From: info
• [SECURITY] [DSA 2029-1] New imlib2 packages fix arbitrary code execution
  • From: Nico Golde
• ZDI-10-063: Mozilla Firefox Cross Document DOM Node Moving Code Execution Vulnerability
  • From: ZDI Disclosures
• Vulnerabilities in TAK cms
  • From: MustLive
• ZDI-10-062: Novell Netware NWFTPD RMD/RNFR/DELE Argument Parsing Remote Code Execution Vulnerabilities
  • From: ZDI Disclosures
• ZDI-10-048: Mozilla Firefox nsTreeContentView Dangling Pointer Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-057: Sun Java Runtime Environment JPEGImageDecoderImpl Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-059: Sun Java Runtime Environment JPEGImageEncoderImpl Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-055: Sun Java Runtime Environment Mutable InetAddress Socket Policy Violation Vulnerability
  • From: ZDI Disclosures
• Re: DynPG CMS v4.1.0 Multiple Remote File Inclusion Vulnerability
  • From: eidelweiss
• [SECURITY] [DSA 2028-1] New xpdf packages fix several vulnerabilities
  • From: Luciano Bello
• ZDI-10-052: Sun Java Runtime Environment XNewPtr Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-050: Mozilla Firefox nsTreeSelection EventListener Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-058: Apple Mac OS X ImageIO Framework JPEG2000 Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-051: Sun Java Runtime RMIConnectionImpl Privileged Context Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-049: Mozilla Firefox PluginArray nsMimeType Dangling Pointer Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-061: Sun Java Runtime CMM readMabCurveData Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• Vulnerabilities in HoloCMS
  • From: MustLive
• ZDI-10-060: Sun Java Runtime Environment MixerSequencer Invalid Array Index Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-047: Mozilla Firefox libpr0n imgContainer Bits-Per-Pixel Change Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-046: Mozilla Firefox Web Worker Array Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-045: Apple QuickTime MPEG-1 genl Atom Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-054: Sun Java Runtime Environment JPEGImageReader stepX Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-053: Sun Java Runtime Environment MIDI File metaEvent Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-056: Sun Java Runtime Environment Trusted Methods Chaining Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• Apple Safari <= Tag (heap spray) Remote Buffer Overflow Exploit (osX)
  • From: eidelweiss
• [SECURITY] [DSA 2027-1] New xulrunner packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• [security bulletin] HPSBMA02490 SSRT090222 rev.2 - HP SOA Registry Foundation, Remote Unauthorized Access to Data, Cross Site Scripting (XSS), Privilege Escalation
  • From: security-alert
• ZDI-10-044: Apple QuickTime FLI LinePacket Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-043: Apple QuickTime FlashPix NumberOfTiles Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-042: Apple QuickTime MediaVideo Compressor Name Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-041: Apple QuickTime QDM2/QDCA Atom Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-040: Apple QuickTime RLE Bit Depth Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-039: Apple OS X Internet Enabled Disk Image Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-038: Apple QuickTime QDMC/QDM2 Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-037: Apple QuickTime MJPEG Sample Dimensions Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-036: Apple QuickTime H.263 PictureHeader Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-035: Apple QuickTime genl Atom Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-034: Microsoft Internet Explorer Tabular Data Control ActiveX Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-033: Microsoft Internet Explorer TIME2 Behavior Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [SECURITY] [DSA 2026-1] New netpbm-free packages fix denial of service
  • From: Giuseppe Iuculano
• Vulnerability Centreon IT & Network Monitoring v2.1.5
  • From: Mehdi Mahdjoub - Sysdream IT Security Services
• VMSA-2010-0006 ESX Service Console updates for samba and acpid
  • From: VMware Security Team
• VUPEN Security Research - Apple Quicktime PICT Handling Heap Overflow Vulnerability
  • From: VUPEN Security Research
• Juniper SRX Critical Denial of Service Vulnerability
  • From: J. Oquendo
• VUPEN Security Research - Sun Java JDK/JRE AWT Library Invalid Index Vulnerability
  • From: VUPEN Security Research
• VUPEN Security Research - Sun Java JDK/JRE AWT Library Invalid Pointer Vulnerability
  • From: VUPEN Security Research
• Zabbix <= 1.8.1 SQL Injection
  • From: Dawid Golunski
• VUPEN Security Research - Apple Quicktime FLC Encoded Movie Heap Overflow Vulnerability
  • From: VUPEN Security Research
• DynPG CMS v4.1.0 Multiple Remote File Inclusion Vulnerability
  • From: eidelweiss
• CSRF Vulnerability in OSSIM 2.2.1
  • From: nicolas . grandjean
• VUPEN Security Research - Sun Java JDK/JRE Unpack200 Buffer Overflow Vulnerability
  • From: VUPEN Security Research
• VUPEN Security Research - Apple Quicktime PICT Processing Integer Overflow Vulnerability
  • From: VUPEN Security Research
• VUPEN Security Research - Apple iTunes ColorSync Profile Integer Overflow Vulnerability
  • From: VUPEN Security Research
• [USN-922-1] libnss-db vulnerability
  • From: Kees Cook

• Security
• UNIX
• Linux
• Coding
• Usenet

• News
• Mailing-Lists
• Newsgroups
• Service
• About
• Privacy
• Search
• Imprint

www.derkeiler.com  > Mailing-Lists  > securityfocus  > bugtraq  > 2010-04