Bugtraq

• Thread Index

---

• [USN-930-3] Firefox regression
  • From: Jamie Strandboge
• ZDI-10-116: Adobe Reader CLOD Progressive Mesh Continuation Resolution Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• VUPEN Security Research - Adobe Acrobat and Reader "newclass" Memory Corruption Vulnerability (CVE-2010-1285)
  • From: VUPEN Security Research
• VUPEN Security Research - Adobe Acrobat and Reader "pushstring" Memory Corruption Vulnerability (CVE-2010-2201)
  • From: VUPEN Security Research
• VUPEN Security Research - Adobe Acrobat and Reader "newfunction" Memory Corruption Vulnerability (CVE-2010-2168)
  • From: VUPEN Security Research
• VUPEN Security Research - Adobe Acrobat and Reader #1023 Tag Buffer Overflow Vulnerability (CVE-2010-2212)
  • From: VUPEN Security Research
• Secunia Research: Joomla BookLibrary Component Four SQL Injection Vulnerabilities
  • From: Secunia Research
• Secunia Research: Adobe Reader GIF Image Parsing Array-Indexing Vulnerability
  • From: Secunia Research
• Secunia Research: Adobe Reader JPEG Uninitialised Memory Vulnerability
  • From: Secunia Research
• [0day] Microsoft mshtml.dll CTimeoutEventList::InsertIntoTimeoutList memory leak
  • From: Reversemode
• [USN-930-2] apturl, Epiphany, gecko-sharp, gnome-python-extras, liferea, rhythmbox, totem, ubufox, yelp update
  • From: Jamie Strandboge
• [USN-930-1] Firefox and Xulrunner vulnerabilities
  • From: Jamie Strandboge
• [USN-927-5] nspr update
  • From: Jamie Strandboge
• SAP's web module OLK SQL Injection vulnerability
  • From: salchoman
• [USN-927-4] nss vulnerability
  • From: Jamie Strandboge
• IS-2010-005 - D-Link DAP-1160 Authentication Bypass
  • From: Cristofaro Mune
• Secunia Research: TaskFreak "tznMessage" Cross-Site Scripting Vulnerability
  • From: Secunia Research
• Secunia Research: TaskFreak "password" SQL Injection Vulnerability
  • From: Secunia Research
• Extended deadline, Call for Papers EC2ND 2010
  • From: Konrad Rieck
• XSS vulnerability in Grafik CMS
  • From: advisory
• XSS vulnerability in PortalApp
  • From: advisory
• iDefense Security Advisory 06.21.10: Multiple Vendor LibTIFF 3.9.2 Stack Buffer Overflow Vulnerability
  • From: iDefense Labs
• XSS vulnerability in PortalApp
  • From: advisory
• XSS vulnerability in Grafik CMS
  • From: advisory
• SQL injection vulnerability in Grafik CMS
  • From: advisory
• XSS vulnerability in PortalApp
  • From: advisory
• SQL injection vulnerability in TomatoCMS
  • From: advisory
• London DEFCON June meet - DC4420 - Wed 30th June 2010
  • From: alien DC4420
• ref_fuzz and other fun bugs
  • From: Michal Zalewski
• New IETF Internet-Drafts on TCP timestamps
  • From: Fernando Gont
• IS-2010-004 - D-Link DAP-1160 Unauthenticated Remote Configuration
  • From: Cristofaro Mune
• Denial-of-Service Vulnerability in IDA Pro
  • From: jason
• [SECURITY] [DSA 2065-1] New kvirc packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 2064-1] New xulrunner packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• Re: Sysax Multi Server "open", "unlink", "mkdir", "scp_get" Commands DoS Vulnerabilities
  • From: rob
• Nuance OmniPage 16 Professional installs multiple vulnerable Microsoft runtime libraries
  • From: Stefan Kanthak
• [security bulletin] HPSBUX02544 SSRT100107 rev.1 - HP-UX Running Kerberos, Remote Denial of Service (DoS), Execution of Arbitrary Code
  • From: security-alert
• [SWRX-2010-001] Cisco ASA HTTP Response Splitting Vulnerability
  • From: ctu-no-reply
• ZDI-10-115: Adobe Flash Player AVM newFrameState Integer Overfow Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-114: Adobe Flash Player AVM2 getouterscope Opcode Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• VMSA-2010-0010 ESX 3.5 third party update for Service Console kernel
  • From: VMware Security team
• [Suspected Spam]Vulnerabilities in Cimy Counter for WordPress
  • From: MustLive
• XSS vulnerability in ForumCMS
  • From: advisory
• SQL injection vulnerability in WebDB
  • From: advisory
• [ MDVSA-2010:126 ] mozilla-thunderbird
  • From: security
• SQL injection vulnerability in WebDB
  • From: advisory
• [ MDVSA-2010:125 ] firefox
  • From: security
• [ MDVSA-2010:124 ] pulseaudio
  • From: security
• CORE-2010-0316 - Novell iManager Multiple Vulnerabilities
  • From: CORE Security Technologies Advisories
• ZDI-10-113: Mozilla Firefox XSLT Sort Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [ MDVSA-2010:123 ] libneon0.27
  • From: security
• RE: [Full-disclosure] Microsoft Help Files (.CHM): 'Locked File' Feature Bypass
  • From: Thor (Hammer of God)
• Apache Axis Session Fixation Vulnerability
  • From: Tiago Ferreira Barbosa
• Microsoft Help Files (.CHM): 'Locked File' Feature Bypass
  • From: Paul Craig
• [security bulletin] HPSBMA02439 SSRT080082 rev.2 - HP OpenView SNMP Emanate Master Agent Running on HP-UX, Linux, Solaris, and Windows, Remote Unauthorized Access
  • From: security-alert
• Weborf DCA-00012 Vulnerability Report
  • From: Ewerson Guimarães (Crash) - Dclabs
• IS-2010-003 - Linksys WAP54Gv3 debug.cgi Cross-Site Scripting
  • From: Cristofaro Mune
• [ MDVSA-2010:122 ] fastjar
  • From: security
• [security bulletin] HPSBUX02541 SSRT100145 rev.1 - HP-UX Running Tomcat Servlet Engine, Remote Increase in Privilege, Arbitrary File
  • From: Morris, John R. (SSRT)
• [ MDVSA-2010:121 ] pango
  • From: security
• [scip_Advisory 4142] Skype Client for Mac Chat Unicode Denial of Service
  • From: Marc Ruef
• ZDI-10-111: Adobe Flash Player LocalConnection Memory Corruption Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [USN-952-1] CUPS vulnerabilities
  • From: Marc Deslauriers
• CSRF in PHPWCMS 1.4.5
  • From: labs
• [USN-953-1] fastjar vulnerability
  • From: Marc Deslauriers
• [USN-955-2] libpam-opie vulnerability
  • From: Marc Deslauriers
• [USN-955-1] OPIE vulnerability
  • From: Marc Deslauriers
• [USN-954-1] tiff vulnerabilities
  • From: Kees Cook
• ZDI-10-112: Novell Access Manager Arbitrary File Upload Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [ MDVSA-2010:120 ] squirrelmail
  • From: security
• Sysax Multi Server "open", "unlink", "mkdir", "scp_get" Commands DoS Vulnerabilities
  • From: leinakesi
• XSS vulnerability in the search module of synType CMS
  • From: advisory
• Stored XSS vulnerability in synType CMS comment text field
  • From: advisory
• XSS vulnerability in Scribe CMS
  • From: advisory
• XSS vulnerability in Scribe CMS
  • From: advisory
• XSS vulnerability in Scribe CMS
  • From: advisory
• Wing FTP Server PORT Command DoS Vulnerability
  • From: sk
• Vulnerabilities in eSitesBuilder
  • From: MustLive
• Remote Arbitrary Code Execution Vulnerability in UFO: Alien Invasion
  • From: jason
• NSOADV-2010-009: AnNoText Third-Party ActiveX Control file overwrite vulnerability
  • From: NSO Research
• NSOADV-2010-008: AnNoText Third-Party ActiveX Control Buffer Overflow
  • From: NSO Research
• [MajorSecurity SA-075]CMS RedAks 2.0 - SQL injection vulnerability
  • From: david . kurz
• Re: Nakid CMS (fckeditor) Remote Arbitrary File Upload Exploit
  • From: Jaison Salu John
• XCon 2010 XFocus Information Security Conference Call for Paper
  • From: xcon
• CVE-2010-1622: Spring Framework execution of arbitrary code
  • From: s2-security
• TitanFTP Server COMB directory traversal
  • From: bill
• [security bulletin] HPSBUX02543 SSRT100152 rev.1 - HP-UX Running Apache with PHP, Remote Denial of Service (DoS), Unauthorized Access,
  • From: security-alert
• [SECURITY] [DSA 2063-1] New pmount packages fix denial of service
  • From: Giuseppe Iuculano
• Vulnerabilities in Firebook
  • From: MustLive
• TEHTRI-Security released 13 0days against web tools used by evil attackers
  • From: Laurent OUDOT at TEHTRI-Security
• [ MDVSA-2010:119 ] samba
  • From: security
• [ MDVSA-2010:118 ] sudo
  • From: security
• [SECURITY] [DSA 2062-1] New sudo packages fix environment sanitization bypass vulnerability
  • From: Giuseppe Iuculano
• TurboFTP Server Directory Traversal Vulnerability
  • From: leinakesi
• [MajorSecurity SA-074]CMS RedAks 2.0 - Multiple Cross-site Scripting issues
  • From: david . kurz
• iDefense Security Advisory 06.16.10: Samba 3.3.12 Memory Corruption Vulnerability
  • From: iDefense Labs
• [security bulletin] HPSBOV02540 SSRT090249 rev.1 - HP SSL for OpenVMS, Remote Unauthorized Data Injection, Denial of Service(Dos)
  • From: security-alert
• ZDI-10-109: Adobe Flash Player Multiple Atom MP4 Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-110: Adobe Flash Player Multiple Tag JPEG Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [USN-951-1] Samba vulnerability
  • From: Kees Cook
• [SECURITY] [DSA 2061-1] New samba packages fix arbitrary code execution
  • From: Nico Golde
• [ MDVSA-2010:117 ] cacti
  • From: security
• [Onapsis Security Advisory 2010-005] SAP J2EE Telnet Administration Security Check Bypass
  • From: Onapsis Research Labs
• ZDI-10-108: HP OpenView NNM ovwebsnmpsrv.exe Command Line Argument Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• VUPEN Security Research - Adobe Flash Player "newclass" Invalid Pointer Vulnerability (CVE-2010-2173)
  • From: VUPEN Security Research
• VUPEN Security Research - Adobe Flash Player "newfunction" Invalid Pointer Vulnerability (CVE-2010-2174)
  • From: VUPEN Security Research
• Nakid CMS (fckeditor) Remote Arbitrary File Upload Exploit
  • From: g1xsystem
• VUPEN Security Research - Adobe Flash Player GIF/JPEG Data Parsing Heap Overflow Vulnerabilities (CVE-2010-2167)
  • From: VUPEN Security Research
• TitanFTP Server Arbitrary File Disclosure
  • From: bill
• Re: Dlink Di-604 router authenticated user ping tool Xss and DoS
  • From: swbaes
• [SECURITY] [DSA 2054-2] New bind9 packages fix cache poisoning
  • From: Martin Schulze
• CORE-2010-0514: XnView MBM Processing Heap Overflow
  • From: CORE Security Technologies Advisories
• [ GLSA 201006-21 ] UnrealIRCd: Multiple vulnerabilities
  • From: Alex Legler
• [SECURITY] [DSA 2060-1] New cacti packages fix SQL injection
  • From: Nico Golde
• DoS vulnerabilities in Firefox, Internet Explorer, Chrome and Opera
  • From: MustLive
• [security bulletin] HPSBPI02532 SSRT100111 rev.2 - HP MFP Digital Sending Software Running on Windows, Local Unauthorized Access
  • From: security-alert
• [security bulletin] HPSBMA02537 SSRT010027 rev.2 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code
  • From: security-alert
• Re: SQL injection vulnerability in boastMachine
  • From: security curmudgeon
• [MajorSecurity SA-073]Subdreamer CMS - SQL injection vulnerability
  • From: david . kurz
• SQL injection vulnerability in MODx CMS
  • From: advisory
• [advisory] httpd Timeout detection flaw (mod_proxy_http) CVE-2010-2068
  • From: William A. Rowe Jr.
• [ MDVSA-2010:116 ] perl
  • From: security
• Stored XSS vulnerability in AneCMS blog module
  • From: advisory
• Cherokee Web Server 0.5.3 Multiple Vulnerabilities
  • From: info
• SQL injection vulnerability in AneCMS
  • From: advisory
• SQL injection vulnerability in MODx CMS and Application Framework
  • From: advisory
• [ MDVSA-2010:115 ] perl
  • From: security
• SQL injection vulnerability in MODx CMS and Application Framework
  • From: advisory
• Re: [oss-security] [oCERT-2010-001] multiple http client unexpected download filename vulnerability
  • From: Solar Designer
• [ MDVSA-2010:114 ] dhcp
  • From: security
• Secunia Research: Creative Software AutoUpdate Engine 2 ActiveX Control Buffer Overflow
  • From: Secunia Research
• iDefense Security Advisory 06.10.10: Adobe Flash Player Use-After-Free Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 06.10.10: Adobe Flash Player Out Of Bounds Memory Indexing Vulnerability
  • From: iDefense Labs
• ZDI-10-107: Multiple Sourcefire Products Static Web SSL Keys Vulnerability
  • From: ZDI Disclosures
• iDefense Security Advisory 06.07.10: Multiple Vendor WebKit HTML Caption Use After Free Vulnerability
  • From: iDefense Labs
• Re: Microsoft Windows Help Centre Handles Malformed Escape Sequences Incorrectly
  • From: Jhfjjf Hfdsjj
• [SECURITY] [DSA 2059-1] New pcsc-lite packages fix privilege escalation
  • From: Thijs Kinkhorst
• [MajorSecurity SA-071]phpFaber CMS - Multiple stored Cross-site Scripting issues
  • From: david . kurz
• Re: Microsoft Windows Help Centre Handles Malformed Escape Sequences Incorrectly
  • From: Susan Bradley
• Vulnerabilities in Belavir for WordPress
  • From: MustLive
• Re: Microsoft Windows Help Centre Handles Malformed Escape Sequences Incorrectly
  • From: Tavis Ormandy
• Re: Microsoft Windows Help Centre Handles Malformed Escape Sequences Incorrectly
  • From: Susan Bradley
• Re: Microsoft Windows Help Centre Handles Malformed Escape Sequences Incorrectly
  • From: Tavis Ormandy
• Re: Microsoft Windows Help Centre Handles Malformed Escape Sequences Incorrectly
  • From: Susan Bradley
• [SECURITY] [DSA 2058-1] New glibc packages fix several vulnerabilities
  • From: Aurelien Jarno
• Awcm Cms Local File Inclusion Vulnerability
  • From: x0 . root
• [ MDVSA-2010:113 ] wireshark
  • From: security
• TPTI-10-03: Sophos Anti-Virus SAVOnAccessFilter Local Privilege Escalation Vulnerability
  • From: ZDI Disclosures
• PR09-17: Juniper Secure Access seriers (Juniper IVE) authenticated XSS & REDIRECTION
  • From: research
• Microsoft Windows Help Centre Handles Malformed Escape Sequences Incorrectly
  • From: Tavis Ormandy
• McAfee UTM Firewall Help Reflected Cross-Site Scripting
  • From: Adam Baldwin
• VUPEN Security Research - Microsoft Office Excel ExternName Buffer Overflow Vulnerability (CVE-2010-1249)
  • From: VUPEN Security Research
• VUPEN Security Research - Microsoft Windows Kernel "GetDCEx()" Memory Corruption Vulnerability (CVE-2010-0484)
  • From: VUPEN Security Research
• [MajorSecurity SA-068]Anantasoft Gazelle CMS - change admin password via Cross-site Request Forgery
  • From: david . kurz
• VUPEN Security Research - Microsoft Office Excel HFPicture Buffer Overflow Vulnerability (CVE-2010-1248)
  • From: VUPEN Security Research
• [MajorSecurity SA-069]Invision Power Board - stored Cross site Scripting
  • From: david . kurz
• CA20100608-01: Security Notice for CA PSFormX and WebScan ActiveX Controls
  • From: Kotas, Kevin J
• Cisco Security Advisory: Cisco Application Extension Platform Privilege Escalation Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Vulnerabilities in Cisco Unified Contact Center Express
  • From: Cisco Systems Product Security Incident Response Team
• RE: RSA Key Manager SQL injection Vulnerability ( CVE-2010-1904 )
  • From: Kyle Quest
• [MajorSecurity SA-070]Plume CMS - change Admin Password via Cross-site Request Forgery
  • From: david . kurz
• VUPEN Security Research - Microsoft Office Excel WOPT Heap Corruption Vulnerability (CVE-2010-0824)
  • From: VUPEN Security Research
• [USN-950-1] MySQL vulnerabilities
  • From: Marc Deslauriers
• VUPEN Security Research - Microsoft Office Excel RTD Stack Overflow Vulnerability (CVE-2010-1246)
  • From: VUPEN Security Research
• VUPEN Security Research - Microsoft Office Excel SxView Memory Corruption Vulnerability (CVE-2010-1245)
  • From: VUPEN Security Research
• Re: [oss-security] [oCERT-2010-001] multiple http client unexpected download filename vulnerability
  • From: Marcus Meissner
• VUPEN Security Research - Microsoft Office Excel EDG Heap Overflow Vulnerability (CVE-2010-1250)
  • From: VUPEN Security Research
• VUPEN Security Research - Microsoft Office Excel RTD Heap Corruption Vulnerability (CVE-2010-1247)
  • From: VUPEN Security Research
• VUPEN Security Research - Microsoft Office Excel OBJ Stack Overflow Vulnerability (CVE-2010-0822)
  • From: VUPEN Security Research
• Dlink Di-604 router authenticated user ping tool Xss and DoS
  • From: Ewerson Guimarães (Crash) - Dclabs
• [CORE-2010-0415] SQL Injection in CubeCart PHP Free & Commercial Shopping Cart Application
  • From: CORE Security Technologies Advisories
• [security bulletin] HPSBMA02537 SSRT010027 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code
  • From: security-alert
• ZDI-10-105: Hewlett-Packard OpenView NNM ovwebsnmpsrv.exe Bad Option Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• tool: ref_fuzz (CVE-2010-1259 / MS10-035 and more)
  • From: Michal Zalewski
• ZDI-10-102: Microsoft Internet Explorer Stylesheet Array Removal Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• IS-2010-002 - Linksys WAP54Gv3 Remote Debug Root Shell
  • From: Cristofaro Mune
• ZDI-10-106: Hewlett-Packard OpenView NNM ovutil.dll getProxiedStorageAddress Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-104: Microsoft Office Excel SxView Record Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-103: Microsoft Office Excel DBQueryExt Record Unspecified ADO Object Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-092: Apple Webkit Option Element ContentEditable Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-100: Apple Webkit ConditionEventListener Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-094: Apple Webkit SelectionController via Marquee Event Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-101: Apple Webkit SVG RadialGradiant Run-in Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-093: Apple Webkit CSS Charset Text Transformation Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-099: Apple Webkit ProcessInstruction Target Error Message Insertion Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-096: Apple Webkit Recursive Use Element Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-098: Apple Webkit First-Letter Pseudo-Element Style Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-095: Apple Webkit DOCUMENT_POSITION_DISCONNECTED Attribute Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-091: Apple Webkit Attribute Child Removal Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-097: Apple Webkit ContentEditable moveParagraphs Uninitialized Element Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [ MDVSA-2010:111 ] glibc
  • From: security
• ArpON (Arp handler inspectiON) 2.0 released!
  • From: Andrea Di Pasquale
• Blue Arc Group - IgnitionSuite CMS WebDMailer unsubscribe issue
  • From: Patrick Webster
• Paessler - PRTG Traffic Grapher XSS
  • From: Patrick Webster
• The XCon2010 is coming
  • From: xcon
• DoS attacks on email clients via protocol handlers
  • From: MustLive
• Recon 2010 - Speaker list, new additional capacity for sold-out training, party details
  • From: Hugo Fortier
• VUPEN Security Research - Apple Safari WebKit HTML Button Use-after-free Vulnerability (CVE-2010-1392)
  • From: VUPEN Security Research
• Re: RSA Key Manager SQL injection Vulnerability ( CVE-2010-1904 )
  • From: security_alert
• SQL injection vulnerability in boastMachine
  • From: advisory
• XSS vulnerability in boastMachine
  • From: advisory
• XSRF (CSRF) in CuteSITE CMS
  • From: advisory
• XSS vulnerability in CuteSITE CMS
  • From: advisory
• Core FTP Server(SFTP module) 'open' and 'stat' Commands Remote Denial of Service Vulnerability
  • From: leinakesi
• [SECURITY] [DSA 2057-1] New mysql-dfsg-5.0 packages fix several vulnerabilities
  • From: Giuseppe Iuculano
• [SECURITY] [DSA 2054-1] New bind9 packages fix cache poisoning
  • From: Florian Weimer
• [SECURITY] [DSA 2056-1] New zonecheck packages fix cross-site scripting
  • From: Sebastien Delafond
• [SECURITY] [DSA 2055-1] New OpenOffice.org packages fix arbitrary code execution
  • From: Nico Golde
• SQL injection vulnerability in CuteSITE CMS
  • From: advisory
• Core FTP mini-sftp-server Several DoS and Directory Traversal Vulnerabilities
  • From: leinakesi
• [security bulletin] HPSBUX02451 SSRT090137 rev.3 - HP-UX Running BIND, Remote Denial of Service (DoS)
  • From: security-alert
• Vulnerabilities in Gigya Socialize for WordPress
  • From: MustLive
• [ GLSA 201006-18 ] Oracle JRE/JDK: Multiple vulnerabilities
  • From: Alex Legler
• [ GLSA 201006-19 ] Bugzilla: Multiple vulnerabilities
  • From: Alex Legler
• Re[3]: DoS vulnerabilities in Firefox, Internet Explorer, Chrome, Opera and other browsers
  • From: MustLive
• [ GLSA 201006-20 ] Asterisk: Multiple vulnerabilities
  • From: Alex Legler
• [Suspected Spam][USN-947-2] Linux kernel regression
  • From: Kees Cook
• RSA Key Manager SQL injection Vulnerability ( CVE-2010-1904 )
  • From: Kyle Quest
• CA20100603-01: Security Notice for CA ARCserve Backup
  • From: Kotas, Kevin J
• [USN-948-1] GnuTLS vulnerability
  • From: Jamie Strandboge
• Multiple vulnerabilities in Exim
  • From: Dan Rosenberg
• eFront Multiple Parameter Cross Site Scripting Vulnerabilities
  • From: VUPEN Web Security
• RE: [ GLSA 201006-13 ] Smarty: Multiple vulnerabilities
  • From: Andrew Morum
• [security bulletin] HPSBMA02538 SSRT100136 rev.1 - HP ServiceCenter Running on AIX, HP-UX, Linux, Solaris, and Windows, Remote Cross Site Scripting (XSS)
  • From: security-alert
• [security bulletin] HPSBST02536 SSRT100057 rev.1 - HP StorageWorks Storage Mirroring, Remote Unauthorized Access
  • From: security-alert
• [ GLSA 201006-17 ] lighttpd: Denial of Service
  • From: Alex Legler
• [ GLSA 201006-16 ] GD: User-assisted execution of arbitrary code
  • From: Alex Legler
• [ GLSA 201006-15 ] XEmacs: User-assisted execution of arbitrary code
  • From: Alex Legler
• [security bulletin] HPSBUX02531 SSRT100108 rev.1 - HP-UX Running Apache-based Web Server, Remote Denial of Service (DoS), Unauthorized Access
  • From: security-alert
• [security bulletin] HPSBUX02524 SSRT100089 rev.1 - HP-UX Running Java, Remote Execution of Arbitrary Code, Disclosure of Information, and Other Vulnerabilities
  • From: security-alert
• [ GLSA 201006-14 ] Newt: User-assisted execution of arbitrary code
  • From: Alex Legler
• [ GLSA 201006-13 ] Smarty: Multiple vulnerabilities
  • From: Alex Legler
• [Suspected Spam][USN-946-1] Net-SNMP vulnerability
  • From: Kees Cook
• DoS vulnerabilities in Firefox, Internet Explorer, Chrome and Opera
  • From: MustLive
• [ GLSA 201006-12 ] Fetchmail: Multiple vulnerabilities
  • From: Stefan Behte
• [ GLSA 201006-11 ] BIND: Multiple vulnerabilities
  • From: Stefan Behte
• [ GLSA 201006-10 ] multipath-tools: World-writeable socket
  • From: Stefan Behte
• TEHTRI-Security: Many 0days soon released at SyScan Singapore 2010
  • From: Laurent OUDOT at TEHTRI-Security
• Wing FTP Server - Cross Site Scripting Vulnerability
  • From: werew01f
• Trend Micro Data Loss Prevention 5.2 Data Leakage
  • From: nitrØus
• [20100501] - Core - Joomla! Multiple XSS Vulnerabilities in Back End Administrative Module Core Components
  • From: Riyaz Walikar
• Re: Nginx 0.8.35 Space Character Remote Source Disclosure
  • From: Mailing lists at Core Security Technologies
• SFCB vulnerabilities
  • From: Nicolas Grégoire
• Applicure dotDefender 4.0 administrative interface cross site scripting
  • From: Sandro Gauci
• Re: RE: Nginx 0.8.35 Space Character Remote Source Disclosure
  • From: info
• [ GLSA 201006-09 ] sudo: Privilege escalation
  • From: Tobias Heinlein
• [ GLSA 201006-08 ] nano: Multiple vulnerabilities
  • From: Tobias Heinlein
• ZDI-10-090: Novell ZENworks Configuration Management Preboot Service Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [ GLSA 201006-07 ] SILC: Multiple vulnerabilities
  • From: Tobias Heinlein
• [ GLSA 201006-06 ] Transmission: Multiple vulnerabilities
  • From: Tobias Heinlein
• [ GLSA 201006-05 ] Wireshark: Multiple vulnerabilities
  • From: Tobias Heinlein
• [ GLSA 201006-04 ] xine-lib: User-assisted execution of arbitrary code
  • From: Alex Legler
• [ GLSA 201006-03 ] ImageMagick: User-assisted execution of arbitrary code
  • From: Alex Legler
• Onapsis Research Labs: Onapsis Bizploit - The opensource ERP Penetration Testing framework
  • From: Onapsis Research Labs
• [ GLSA 201006-02 ] CamlImages: User-assisted execution of arbitrary code
  • From: Alex Legler
• Re: [Full-disclosure] PuTTY private key passphrase stealing attack
  • From: halfdog
• Re: [Full-disclosure] PuTTY private key passphrase stealing attack
  • From: Borja Marcos
• [ GLSA 201006-01 ] FreeType 1: User-assisted execution of arbitrary code
  • From: Alex Legler
• Re: [Full-disclosure] PuTTY private key passphrase stealing attack
  • From: Rob Fuller
• PuTTY private key passphrase stealing attack
  • From: Jan Schejbal
• XSS vulnerability in Ecomat CMS
  • From: advisory
• SQL injection vulnerability in Ecomat CMS
  • From: advisory
• DoS vulnerability in Internet Explorer
  • From: MustLive
• [Bkis-02-2010] Multiple Vulnerabilities in CMS Made Simple - Bkis
  • From: Bkis
• Re: Nginx 0.8.35 Space Character Remote Source Disclosure
  • From: Zach
• RE: Nginx 0.8.35 Space Character Remote Source Disclosure
  • From: reply-to-list
• Re: DoS vulnerabilities in Firefox, Internet Explorer, Chrome and Opera
  • From: John Smith
• RE: Ghostscript 8.64 executes random code at startup
  • From: Michael Wojcik
• Winamp v5.571 malicious AVI file handling DoS Vulnerability
  • From: praveen_recker

• Security
• UNIX
• Linux
• Coding
• Usenet

• News
• Mailing-Lists
• Newsgroups
• Service
• About
• Privacy
• Search
• Imprint

www.derkeiler.com  > Mailing-Lists  > securityfocus  > bugtraq  > 2010-06